[ 277.156938][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 277.212017][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 298.496939][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:50873' (ECDSA) to the list of known hosts. 1970/01/01 00:05:49 fuzzer started 1970/01/01 00:06:00 dialing manager at localhost:42473 [ 367.299561][ T2043] cgroup: Unknown subsys name 'net' [ 368.398304][ T2043] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:06:07 syscalls: 2918 1970/01/01 00:06:07 code coverage: enabled 1970/01/01 00:06:07 comparison tracing: enabled 1970/01/01 00:06:08 extra coverage: enabled 1970/01/01 00:06:08 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:06:08 setuid sandbox: enabled 1970/01/01 00:06:08 namespace sandbox: enabled 1970/01/01 00:06:08 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:06:08 fault injection: enabled 1970/01/01 00:06:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:06:08 net packet injection: enabled 1970/01/01 00:06:08 net device setup: enabled 1970/01/01 00:06:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:06:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:06:08 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:06:08 USB emulation: enabled 1970/01/01 00:06:08 hci packet injection: /dev/vhci does not exist 1970/01/01 00:06:08 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:06:08 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:06:08 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:06:12 fetching corpus: 50, signal 30104/33542 (executing program) 1970/01/01 00:06:14 fetching corpus: 100, signal 41218/46092 (executing program) 1970/01/01 00:06:19 fetching corpus: 150, signal 56043/62002 (executing program) 1970/01/01 00:06:22 fetching corpus: 200, signal 63384/70550 (executing program) 1970/01/01 00:06:24 fetching corpus: 250, signal 67453/75855 (executing program) 1970/01/01 00:06:26 fetching corpus: 300, signal 70889/80508 (executing program) 1970/01/01 00:06:28 fetching corpus: 350, signal 73931/84746 (executing program) 1970/01/01 00:06:31 fetching corpus: 400, signal 81184/92753 (executing program) 1970/01/01 00:06:33 fetching corpus: 450, signal 83810/96400 (executing program) 1970/01/01 00:06:35 fetching corpus: 500, signal 88278/101627 (executing program) 1970/01/01 00:06:38 fetching corpus: 550, signal 92954/106981 (executing program) 1970/01/01 00:06:40 fetching corpus: 600, signal 96428/111235 (executing program) 1970/01/01 00:06:43 fetching corpus: 650, signal 98998/114640 (executing program) 1970/01/01 00:06:46 fetching corpus: 700, signal 101762/118150 (executing program) 1970/01/01 00:06:49 fetching corpus: 750, signal 104004/121161 (executing program) 1970/01/01 00:06:51 fetching corpus: 800, signal 106517/124376 (executing program) 1970/01/01 00:06:54 fetching corpus: 850, signal 108583/127200 (executing program) 1970/01/01 00:06:57 fetching corpus: 899, signal 110557/129872 (executing program) 1970/01/01 00:06:59 fetching corpus: 949, signal 112090/132135 (executing program) 1970/01/01 00:07:01 fetching corpus: 999, signal 114181/134853 (executing program) 1970/01/01 00:07:04 fetching corpus: 1049, signal 116296/137574 (executing program) 1970/01/01 00:07:06 fetching corpus: 1099, signal 118574/140370 (executing program) 1970/01/01 00:07:09 fetching corpus: 1149, signal 120564/142856 (executing program) 1970/01/01 00:07:10 fetching corpus: 1199, signal 121764/144771 (executing program) 1970/01/01 00:07:13 fetching corpus: 1249, signal 123531/146991 (executing program) 1970/01/01 00:07:16 fetching corpus: 1299, signal 125726/149553 (executing program) 1970/01/01 00:07:18 fetching corpus: 1349, signal 128754/152653 (executing program) 1970/01/01 00:07:20 fetching corpus: 1399, signal 131089/155268 (executing program) 1970/01/01 00:07:22 fetching corpus: 1449, signal 133084/157595 (executing program) 1970/01/01 00:07:24 fetching corpus: 1498, signal 134087/159157 (executing program) 1970/01/01 00:07:28 fetching corpus: 1548, signal 136047/161329 (executing program) 1970/01/01 00:07:30 fetching corpus: 1598, signal 137514/163172 (executing program) 1970/01/01 00:07:33 fetching corpus: 1648, signal 139138/165124 (executing program) 1970/01/01 00:07:35 fetching corpus: 1697, signal 140218/166609 (executing program) 1970/01/01 00:07:37 fetching corpus: 1747, signal 141274/168062 (executing program) 1970/01/01 00:07:40 fetching corpus: 1797, signal 142257/169455 (executing program) 1970/01/01 00:07:42 fetching corpus: 1847, signal 142982/170686 (executing program) 1970/01/01 00:07:44 fetching corpus: 1897, signal 144209/172249 (executing program) 1970/01/01 00:07:48 fetching corpus: 1947, signal 145330/173684 (executing program) 1970/01/01 00:07:51 fetching corpus: 1997, signal 146526/175148 (executing program) 1970/01/01 00:07:54 fetching corpus: 2047, signal 147747/176601 (executing program) 1970/01/01 00:07:57 fetching corpus: 2096, signal 148941/178078 (executing program) 1970/01/01 00:07:59 fetching corpus: 2146, signal 150187/179492 (executing program) 1970/01/01 00:08:01 fetching corpus: 2196, signal 151452/181000 (executing program) 1970/01/01 00:08:03 fetching corpus: 2246, signal 152447/182251 (executing program) 1970/01/01 00:08:06 fetching corpus: 2296, signal 153788/183648 (executing program) 1970/01/01 00:08:08 fetching corpus: 2346, signal 155147/185162 (executing program) 1970/01/01 00:08:11 fetching corpus: 2396, signal 156021/186279 (executing program) 1970/01/01 00:08:14 fetching corpus: 2446, signal 157036/187470 (executing program) 1970/01/01 00:08:16 fetching corpus: 2496, signal 158757/189088 (executing program) 1970/01/01 00:08:19 fetching corpus: 2546, signal 159838/190267 (executing program) 1970/01/01 00:08:22 fetching corpus: 2596, signal 160982/191461 (executing program) 1970/01/01 00:08:25 fetching corpus: 2646, signal 161732/192454 (executing program) 1970/01/01 00:08:27 fetching corpus: 2696, signal 162786/193527 (executing program) 1970/01/01 00:08:29 fetching corpus: 2746, signal 163683/194541 (executing program) 1970/01/01 00:08:32 fetching corpus: 2796, signal 164602/195525 (executing program) 1970/01/01 00:08:34 fetching corpus: 2846, signal 165361/196471 (executing program) 1970/01/01 00:08:36 fetching corpus: 2896, signal 166598/197622 (executing program) 1970/01/01 00:08:38 fetching corpus: 2946, signal 167428/198506 (executing program) 1970/01/01 00:08:40 fetching corpus: 2996, signal 168937/199704 (executing program) 1970/01/01 00:08:44 fetching corpus: 3046, signal 169784/200513 (executing program) 1970/01/01 00:08:46 fetching corpus: 3095, signal 170648/201449 (executing program) 1970/01/01 00:08:48 fetching corpus: 3145, signal 171435/202312 (executing program) 1970/01/01 00:08:50 fetching corpus: 3195, signal 172513/203216 (executing program) 1970/01/01 00:08:53 fetching corpus: 3245, signal 173291/204048 (executing program) 1970/01/01 00:08:54 fetching corpus: 3295, signal 174017/204804 (executing program) 1970/01/01 00:08:56 fetching corpus: 3345, signal 174600/205479 (executing program) 1970/01/01 00:08:59 fetching corpus: 3395, signal 175432/206253 (executing program) 1970/01/01 00:09:01 fetching corpus: 3445, signal 176034/206939 (executing program) 1970/01/01 00:09:03 fetching corpus: 3495, signal 176758/207652 (executing program) 1970/01/01 00:09:05 fetching corpus: 3544, signal 177384/208277 (executing program) 1970/01/01 00:09:08 fetching corpus: 3594, signal 178310/209060 (executing program) 1970/01/01 00:09:10 fetching corpus: 3644, signal 178954/209694 (executing program) 1970/01/01 00:09:12 fetching corpus: 3694, signal 179686/210391 (executing program) 1970/01/01 00:09:15 fetching corpus: 3744, signal 180381/210992 (executing program) 1970/01/01 00:09:17 fetching corpus: 3794, signal 181320/211639 (executing program) 1970/01/01 00:09:19 fetching corpus: 3844, signal 181990/212238 (executing program) 1970/01/01 00:09:21 fetching corpus: 3893, signal 182536/212819 (executing program) 1970/01/01 00:09:25 fetching corpus: 3943, signal 183364/213407 (executing program) 1970/01/01 00:09:27 fetching corpus: 3993, signal 184047/213977 (executing program) 1970/01/01 00:09:30 fetching corpus: 4043, signal 184763/214550 (executing program) 1970/01/01 00:09:32 fetching corpus: 4093, signal 185428/215030 (executing program) 1970/01/01 00:09:35 fetching corpus: 4143, signal 186404/215602 (executing program) 1970/01/01 00:09:37 fetching corpus: 4193, signal 186933/216056 (executing program) 1970/01/01 00:09:40 fetching corpus: 4243, signal 187490/216525 (executing program) 1970/01/01 00:09:43 fetching corpus: 4293, signal 187950/216965 (executing program) 1970/01/01 00:09:46 fetching corpus: 4343, signal 188522/217405 (executing program) 1970/01/01 00:09:49 fetching corpus: 4393, signal 189065/217837 (executing program) 1970/01/01 00:09:52 fetching corpus: 4443, signal 189498/218241 (executing program) 1970/01/01 00:09:55 fetching corpus: 4493, signal 191558/218952 (executing program) 1970/01/01 00:09:58 fetching corpus: 4543, signal 192143/219323 (executing program) 1970/01/01 00:10:01 fetching corpus: 4593, signal 192705/219742 (executing program) 1970/01/01 00:10:03 fetching corpus: 4643, signal 193597/220184 (executing program) 1970/01/01 00:10:05 fetching corpus: 4693, signal 194425/220595 (executing program) 1970/01/01 00:10:09 fetching corpus: 4743, signal 194987/220976 (executing program) 1970/01/01 00:10:12 fetching corpus: 4793, signal 195560/221347 (executing program) 1970/01/01 00:10:15 fetching corpus: 4843, signal 196160/221735 (executing program) 1970/01/01 00:10:17 fetching corpus: 4893, signal 196900/222150 (executing program) 1970/01/01 00:10:19 fetching corpus: 4943, signal 197981/222521 (executing program) 1970/01/01 00:10:22 fetching corpus: 4993, signal 198612/222834 (executing program) 1970/01/01 00:10:24 fetching corpus: 5043, signal 199154/223139 (executing program) 1970/01/01 00:10:26 fetching corpus: 5093, signal 199813/223462 (executing program) 1970/01/01 00:10:28 fetching corpus: 5143, signal 200267/223723 (executing program) 1970/01/01 00:10:30 fetching corpus: 5193, signal 200832/224006 (executing program) 1970/01/01 00:10:33 fetching corpus: 5243, signal 201550/224247 (executing program) 1970/01/01 00:10:35 fetching corpus: 5293, signal 202291/224504 (executing program) 1970/01/01 00:10:37 fetching corpus: 5343, signal 202801/224718 (executing program) 1970/01/01 00:10:39 fetching corpus: 5393, signal 203264/224963 (executing program) 1970/01/01 00:10:41 fetching corpus: 5443, signal 203810/225161 (executing program) 1970/01/01 00:10:44 fetching corpus: 5493, signal 204354/225351 (executing program) 1970/01/01 00:10:46 fetching corpus: 5542, signal 204868/225555 (executing program) 1970/01/01 00:10:48 fetching corpus: 5592, signal 205513/225734 (executing program) 1970/01/01 00:10:50 fetching corpus: 5642, signal 206043/225734 (executing program) 1970/01/01 00:10:52 fetching corpus: 5692, signal 206543/225734 (executing program) 1970/01/01 00:10:55 fetching corpus: 5742, signal 207264/225734 (executing program) 1970/01/01 00:10:59 fetching corpus: 5791, signal 207927/225734 (executing program) 1970/01/01 00:11:01 fetching corpus: 5841, signal 208348/225734 (executing program) 1970/01/01 00:11:03 fetching corpus: 5891, signal 209058/225734 (executing program) 1970/01/01 00:11:07 fetching corpus: 5941, signal 209591/225735 (executing program) 1970/01/01 00:11:09 fetching corpus: 5991, signal 210033/225741 (executing program) 1970/01/01 00:11:12 fetching corpus: 6041, signal 210498/225741 (executing program) 1970/01/01 00:11:15 fetching corpus: 6091, signal 210840/225742 (executing program) 1970/01/01 00:11:17 fetching corpus: 6141, signal 211344/225742 (executing program) 1970/01/01 00:11:19 fetching corpus: 6191, signal 211919/225742 (executing program) 1970/01/01 00:11:21 fetching corpus: 6241, signal 212404/225742 (executing program) 1970/01/01 00:11:23 fetching corpus: 6291, signal 212937/225742 (executing program) 1970/01/01 00:11:28 fetching corpus: 6341, signal 213323/225742 (executing program) 1970/01/01 00:11:32 fetching corpus: 6391, signal 213871/225744 (executing program) 1970/01/01 00:11:34 fetching corpus: 6441, signal 214348/225745 (executing program) 1970/01/01 00:11:36 fetching corpus: 6491, signal 214744/225745 (executing program) 1970/01/01 00:11:39 fetching corpus: 6541, signal 215227/225745 (executing program) 1970/01/01 00:11:41 fetching corpus: 6591, signal 215660/225745 (executing program) 1970/01/01 00:11:43 fetching corpus: 6641, signal 216379/225757 (executing program) 1970/01/01 00:11:46 fetching corpus: 6691, signal 217001/225757 (executing program) 1970/01/01 00:11:48 fetching corpus: 6741, signal 217916/225757 (executing program) 1970/01/01 00:11:50 fetching corpus: 6791, signal 218308/225757 (executing program) 1970/01/01 00:11:54 fetching corpus: 6841, signal 218931/225757 (executing program) 1970/01/01 00:11:58 fetching corpus: 6891, signal 219420/225757 (executing program) 1970/01/01 00:12:00 fetching corpus: 6940, signal 219832/225757 (executing program) 1970/01/01 00:12:02 fetching corpus: 6990, signal 220221/225757 (executing program) 1970/01/01 00:12:05 fetching corpus: 7040, signal 220586/225757 (executing program) 1970/01/01 00:12:07 fetching corpus: 7090, signal 220947/225757 (executing program) 1970/01/01 00:12:09 fetching corpus: 7140, signal 221255/225760 (executing program) 1970/01/01 00:12:12 fetching corpus: 7190, signal 221640/225775 (executing program) 1970/01/01 00:12:16 fetching corpus: 7240, signal 222085/225775 (executing program) 1970/01/01 00:12:19 fetching corpus: 7290, signal 222526/225780 (executing program) 1970/01/01 00:12:21 fetching corpus: 7340, signal 222942/225803 (executing program) 1970/01/01 00:12:23 fetching corpus: 7390, signal 223413/225803 (executing program) 1970/01/01 00:12:25 fetching corpus: 7428, signal 223822/225803 (executing program) 1970/01/01 00:12:25 fetching corpus: 7428, signal 223822/225803 (executing program) 1970/01/01 00:14:07 starting 2 fuzzer processes 00:14:08 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$FIONREAD(r2, 0x5421, 0xffffffffffffffff) 00:14:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r1, 0x5}, 0x14}}, 0x0) [ 879.951282][ T2061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.065974][ T2061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.575966][ T2062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.816495][ T2062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.208970][ T2061] device hsr_slave_0 entered promiscuous mode [ 893.257726][ T2061] device hsr_slave_1 entered promiscuous mode [ 896.445464][ T2062] device hsr_slave_0 entered promiscuous mode [ 896.511598][ T2062] device hsr_slave_1 entered promiscuous mode [ 896.531122][ T2062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 896.540357][ T2062] Cannot create hsr debugfs directory [ 902.047317][ T2061] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 902.248568][ T2061] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 902.759593][ T2061] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 903.097238][ T2061] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 904.149307][ T2062] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 904.276536][ T2062] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 904.449447][ T2062] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 904.539357][ T2062] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 914.508761][ T2061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.009366][ T2062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.652128][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 915.730847][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 915.789261][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 915.836625][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 922.335824][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 922.480605][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 922.766734][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 922.815225][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 922.861720][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 922.888901][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 923.146049][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 923.182167][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 923.848735][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 923.905122][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 923.934667][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 924.010201][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 924.783476][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 924.835321][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 925.057857][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 925.105507][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 925.406668][ T2044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 925.430645][ T2044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 925.479731][ T2044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 925.501406][ T2044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 925.678810][ T2061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 925.940123][ T2062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 931.891324][ T2422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 931.915025][ T2422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 932.434596][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 932.438941][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 945.174908][ T2044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 945.257633][ T2044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 947.180294][ T2044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 947.247083][ T2044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 951.974995][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 952.041575][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 952.154352][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 952.190463][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 952.364923][ T2062] device veth0_vlan entered promiscuous mode [ 952.795606][ T2062] device veth1_vlan entered promiscuous mode [ 953.841200][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 953.897598][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 954.103944][ T2062] device veth0_macvtap entered promiscuous mode [ 954.170517][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 954.455203][ T2062] device veth1_macvtap entered promiscuous mode [ 955.267841][ T2422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 955.316104][ T2422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 955.519095][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 955.537715][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 955.555904][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 955.571905][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 955.755903][ T2061] device veth0_vlan entered promiscuous mode [ 955.950550][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 955.989289][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 956.239098][ T2062] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.265002][ T2062] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.266751][ T2062] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.268252][ T2062] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.530965][ T2061] device veth1_vlan entered promiscuous mode [ 958.588162][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 958.711748][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 958.871975][ T2061] device veth0_macvtap entered promiscuous mode [ 959.218457][ T2061] device veth1_macvtap entered promiscuous mode [ 959.629576][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 959.946220][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 959.992056][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 960.200559][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 960.264869][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 960.540115][ T2061] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.558798][ T2061] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.560521][ T2061] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.562080][ T2061] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:16:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r1, 0x5}, 0x14}}, 0x0) 00:16:06 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$FIONREAD(r2, 0x5421, 0xffffffffffffffff) 00:16:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r1, 0x5}, 0x14}}, 0x0) 00:16:10 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$FIONREAD(r2, 0x5421, 0xffffffffffffffff) 00:16:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r1, 0x5}, 0x14}}, 0x0) 00:16:12 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$FIONREAD(r2, 0x5421, 0xffffffffffffffff) 00:16:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r1, 0x5}, 0x14}}, 0x0) 00:16:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x4004662b, &(0x7f0000000440)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) r1 = syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r0) openat(r1, &(0x7f00000002c0)='mnt\x00', 0x0, 0x41) 00:16:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r1, 0x5}, 0x14}}, 0x0) 00:16:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x4004662b, &(0x7f0000000440)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) r1 = syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r0) openat(r1, &(0x7f00000002c0)='mnt\x00', 0x0, 0x41) 00:16:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r1, 0x5}, 0x14}}, 0x0) 00:16:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x4004662b, &(0x7f0000000440)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) r1 = syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r0) openat(r1, &(0x7f00000002c0)='mnt\x00', 0x0, 0x41) 00:16:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x4004662b, &(0x7f0000000440)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) r1 = syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r0) openat(r1, &(0x7f00000002c0)='mnt\x00', 0x0, 0x41) 00:16:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x4004662b, &(0x7f0000000440)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) r1 = syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r0) openat(r1, &(0x7f00000002c0)='mnt\x00', 0x0, 0x41) 00:16:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x4004662b, &(0x7f0000000440)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) r1 = syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r0) openat(r1, &(0x7f00000002c0)='mnt\x00', 0x0, 0x41) 00:16:55 executing program 0: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9) 00:16:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x4004662b, &(0x7f0000000440)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) r1 = syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r0) openat(r1, &(0x7f00000002c0)='mnt\x00', 0x0, 0x41) 00:17:00 executing program 0: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9) 00:17:08 executing program 0: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9) 00:17:11 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=ANY=[], 0x39, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 00:17:11 executing program 0: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9) 00:17:13 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=ANY=[], 0x39, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 00:17:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=ANY=[], 0x39, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 00:17:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=ANY=[], 0x39, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 00:17:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=ANY=[], 0x39, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 00:17:18 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=ANY=[], 0x39, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 00:17:19 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=ANY=[], 0x39, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 00:17:22 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=ANY=[], 0x39, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 00:17:24 executing program 0: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x48, &(0x7f0000000040)={0x0, 0x0}, 0x10) 00:17:25 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=ANY=[], 0x39, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 00:17:27 executing program 0: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x48, &(0x7f0000000040)={0x0, 0x0}, 0x10) 00:17:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=ANY=[], 0x39, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 00:17:30 executing program 0: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x48, &(0x7f0000000040)={0x0, 0x0}, 0x10) 00:17:34 executing program 0: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x48, &(0x7f0000000040)={0x0, 0x0}, 0x10) 00:17:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x1, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 00:17:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x1, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 00:17:37 executing program 0: socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0xe3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/151, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000001640)=""/217, 0xd9}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/191, 0xbf}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x810) clock_gettime(0x0, &(0x7f0000002780)) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/247, 0xf7}, {0x0}, {&(0x7f0000001b00)=""/78, 0x4e}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000001c00)=""/75, 0x4b}, {&(0x7f0000001d00)=""/170, 0xaa}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/247, 0xf7}], 0x8}, 0x8000}, {{0x0, 0x0, &(0x7f00000022c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000002300)=""/210, 0xd2}, 0x4}, {{0x0, 0x0, &(0x7f0000002700)=[{0x0}, {0x0}], 0x2, &(0x7f00000038c0)=""/96, 0x60}, 0xe9b8}], 0x3, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1060.477978][ T2839] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1060.495262][ T2839] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1060.502146][ T2838] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1060.604783][ T2838] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1060.644880][ T2838] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1060.649390][ T2838] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1060.707591][ T2838] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1060.738599][ T2838] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1060.759059][ T2838] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x1, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) [ 1060.791448][ T2838] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:40 executing program 0: socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0xe3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/151, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000001640)=""/217, 0xd9}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/191, 0xbf}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x810) clock_gettime(0x0, &(0x7f0000002780)) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/247, 0xf7}, {0x0}, {&(0x7f0000001b00)=""/78, 0x4e}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000001c00)=""/75, 0x4b}, {&(0x7f0000001d00)=""/170, 0xaa}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/247, 0xf7}], 0x8}, 0x8000}, {{0x0, 0x0, &(0x7f00000022c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000002300)=""/210, 0xd2}, 0x4}, {{0x0, 0x0, &(0x7f0000002700)=[{0x0}, {0x0}], 0x2, &(0x7f00000038c0)=""/96, 0x60}, 0xe9b8}], 0x3, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 00:17:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x1, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 00:17:45 executing program 1: socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0xe3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/151, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000001640)=""/217, 0xd9}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/191, 0xbf}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x810) clock_gettime(0x0, &(0x7f0000002780)) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/247, 0xf7}, {0x0}, {&(0x7f0000001b00)=""/78, 0x4e}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000001c00)=""/75, 0x4b}, {&(0x7f0000001d00)=""/170, 0xaa}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/247, 0xf7}], 0x8}, 0x8000}, {{0x0, 0x0, &(0x7f00000022c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000002300)=""/210, 0xd2}, 0x4}, {{0x0, 0x0, &(0x7f0000002700)=[{0x0}, {0x0}], 0x2, &(0x7f00000038c0)=""/96, 0x60}, 0xe9b8}], 0x3, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 00:17:46 executing program 0: socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0xe3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/151, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000001640)=""/217, 0xd9}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/191, 0xbf}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x810) clock_gettime(0x0, &(0x7f0000002780)) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/247, 0xf7}, {0x0}, {&(0x7f0000001b00)=""/78, 0x4e}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000001c00)=""/75, 0x4b}, {&(0x7f0000001d00)=""/170, 0xaa}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/247, 0xf7}], 0x8}, 0x8000}, {{0x0, 0x0, &(0x7f00000022c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000002300)=""/210, 0xd2}, 0x4}, {{0x0, 0x0, &(0x7f0000002700)=[{0x0}, {0x0}], 0x2, &(0x7f00000038c0)=""/96, 0x60}, 0xe9b8}], 0x3, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1068.876762][ T2851] __nla_validate_parse: 31 callbacks suppressed [ 1068.877184][ T2851] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1068.880741][ T2851] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1068.951418][ T2849] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1069.161926][ T2849] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1069.209060][ T2851] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1069.299744][ T2849] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1069.411753][ T2849] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1069.481410][ T2849] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1069.551710][ T2851] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1069.666838][ T2851] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 00:17:49 executing program 1: socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0xe3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/151, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000001640)=""/217, 0xd9}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/191, 0xbf}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x810) clock_gettime(0x0, &(0x7f0000002780)) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/247, 0xf7}, {0x0}, {&(0x7f0000001b00)=""/78, 0x4e}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000001c00)=""/75, 0x4b}, {&(0x7f0000001d00)=""/170, 0xaa}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/247, 0xf7}], 0x8}, 0x8000}, {{0x0, 0x0, &(0x7f00000022c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000002300)=""/210, 0xd2}, 0x4}, {{0x0, 0x0, &(0x7f0000002700)=[{0x0}, {0x0}], 0x2, &(0x7f00000038c0)=""/96, 0x60}, 0xe9b8}], 0x3, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 00:17:52 executing program 0: socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0xe3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/151, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000001640)=""/217, 0xd9}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/191, 0xbf}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x810) clock_gettime(0x0, &(0x7f0000002780)) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/247, 0xf7}, {0x0}, {&(0x7f0000001b00)=""/78, 0x4e}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000001c00)=""/75, 0x4b}, {&(0x7f0000001d00)=""/170, 0xaa}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/247, 0xf7}], 0x8}, 0x8000}, {{0x0, 0x0, &(0x7f00000022c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000002300)=""/210, 0xd2}, 0x4}, {{0x0, 0x0, &(0x7f0000002700)=[{0x0}, {0x0}], 0x2, &(0x7f00000038c0)=""/96, 0x60}, 0xe9b8}], 0x3, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 00:17:54 executing program 1: socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0xe3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/151, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000001640)=""/217, 0xd9}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/191, 0xbf}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x810) clock_gettime(0x0, &(0x7f0000002780)) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/247, 0xf7}, {0x0}, {&(0x7f0000001b00)=""/78, 0x4e}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000001c00)=""/75, 0x4b}, {&(0x7f0000001d00)=""/170, 0xaa}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/247, 0xf7}], 0x8}, 0x8000}, {{0x0, 0x0, &(0x7f00000022c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000002300)=""/210, 0xd2}, 0x4}, {{0x0, 0x0, &(0x7f0000002700)=[{0x0}, {0x0}], 0x2, &(0x7f00000038c0)=""/96, 0x60}, 0xe9b8}], 0x3, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1076.572167][ T2861] __nla_validate_parse: 42 callbacks suppressed [ 1076.616331][ T2861] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1076.637502][ T2861] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1076.655581][ T2859] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1076.679461][ T2859] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1076.808159][ T2859] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1076.856916][ T2859] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1076.868347][ T2861] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1076.965577][ T2859] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1077.037886][ T2859] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1077.100448][ T2859] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 00:17:58 executing program 0: socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0xe3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/151, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000001640)=""/217, 0xd9}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/191, 0xbf}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x810) clock_gettime(0x0, &(0x7f0000002780)) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/247, 0xf7}, {0x0}, {&(0x7f0000001b00)=""/78, 0x4e}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000001c00)=""/75, 0x4b}, {&(0x7f0000001d00)=""/170, 0xaa}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/247, 0xf7}], 0x8}, 0x8000}, {{0x0, 0x0, &(0x7f00000022c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000002300)=""/210, 0xd2}, 0x4}, {{0x0, 0x0, &(0x7f0000002700)=[{0x0}, {0x0}], 0x2, &(0x7f00000038c0)=""/96, 0x60}, 0xe9b8}], 0x3, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1081.610939][ T2866] __nla_validate_parse: 40 callbacks suppressed [ 1081.611335][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1081.769135][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1081.778689][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1081.787276][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1081.795704][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1081.807759][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1081.816235][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1081.825399][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1081.831882][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1081.979826][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:01 executing program 1: socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0xe3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/151, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000001640)=""/217, 0xd9}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/191, 0xbf}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x810) clock_gettime(0x0, &(0x7f0000002780)) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/247, 0xf7}, {0x0}, {&(0x7f0000001b00)=""/78, 0x4e}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000001c00)=""/75, 0x4b}, {&(0x7f0000001d00)=""/170, 0xaa}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/247, 0xf7}], 0x8}, 0x8000}, {{0x0, 0x0, &(0x7f00000022c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000002300)=""/210, 0xd2}, 0x4}, {{0x0, 0x0, &(0x7f0000002700)=[{0x0}, {0x0}], 0x2, &(0x7f00000038c0)=""/96, 0x60}, 0xe9b8}], 0x3, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 00:18:04 executing program 0: socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0xe3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/151, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000001640)=""/217, 0xd9}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/191, 0xbf}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x810) clock_gettime(0x0, &(0x7f0000002780)) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/247, 0xf7}, {0x0}, {&(0x7f0000001b00)=""/78, 0x4e}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000001c00)=""/75, 0x4b}, {&(0x7f0000001d00)=""/170, 0xaa}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/247, 0xf7}], 0x8}, 0x8000}, {{0x0, 0x0, &(0x7f00000022c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000002300)=""/210, 0xd2}, 0x4}, {{0x0, 0x0, &(0x7f0000002700)=[{0x0}, {0x0}], 0x2, &(0x7f00000038c0)=""/96, 0x60}, 0xe9b8}], 0x3, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 00:18:07 executing program 1: socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0xe3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/151, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000001640)=""/217, 0xd9}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/191, 0xbf}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x810) clock_gettime(0x0, &(0x7f0000002780)) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/247, 0xf7}, {0x0}, {&(0x7f0000001b00)=""/78, 0x4e}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000001c00)=""/75, 0x4b}, {&(0x7f0000001d00)=""/170, 0xaa}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/247, 0xf7}], 0x8}, 0x8000}, {{0x0, 0x0, &(0x7f00000022c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000002300)=""/210, 0xd2}, 0x4}, {{0x0, 0x0, &(0x7f0000002700)=[{0x0}, {0x0}], 0x2, &(0x7f00000038c0)=""/96, 0x60}, 0xe9b8}], 0x3, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1089.568166][ T2874] __nla_validate_parse: 24 callbacks suppressed [ 1089.601288][ T2874] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1089.637271][ T2874] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1089.666923][ T2873] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1089.697224][ T2873] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1089.776342][ T2874] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1089.849457][ T2873] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1089.924544][ T2873] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1090.014967][ T2873] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1090.186343][ T2874] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1090.191418][ T2874] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:11 executing program 0: socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0xe3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/151, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000001640)=""/217, 0xd9}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/191, 0xbf}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x810) clock_gettime(0x0, &(0x7f0000002780)) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/247, 0xf7}, {0x0}, {&(0x7f0000001b00)=""/78, 0x4e}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000001c00)=""/75, 0x4b}, {&(0x7f0000001d00)=""/170, 0xaa}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/247, 0xf7}], 0x8}, 0x8000}, {{0x0, 0x0, &(0x7f00000022c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000002300)=""/210, 0xd2}, 0x4}, {{0x0, 0x0, &(0x7f0000002700)=[{0x0}, {0x0}], 0x2, &(0x7f00000038c0)=""/96, 0x60}, 0xe9b8}], 0x3, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 00:18:12 executing program 1: socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0xe3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/151, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000001640)=""/217, 0xd9}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/191, 0xbf}], 0x4}}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x810) clock_gettime(0x0, &(0x7f0000002780)) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/247, 0xf7}, {0x0}, {&(0x7f0000001b00)=""/78, 0x4e}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000001c00)=""/75, 0x4b}, {&(0x7f0000001d00)=""/170, 0xaa}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/247, 0xf7}], 0x8}, 0x8000}, {{0x0, 0x0, &(0x7f00000022c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000002300)=""/210, 0xd2}, 0x4}, {{0x0, 0x0, &(0x7f0000002700)=[{0x0}, {0x0}], 0x2, &(0x7f00000038c0)=""/96, 0x60}, 0xe9b8}], 0x3, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1094.585126][ T2880] __nla_validate_parse: 16 callbacks suppressed [ 1094.585532][ T2880] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1094.637499][ T2880] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1094.742059][ T2881] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1094.829086][ T2880] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1094.880533][ T2880] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1094.962017][ T2881] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1094.981157][ T2881] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1096.785422][ T2884] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1096.787532][ T2884] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1096.882066][ T2883] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 00:18:16 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 00:18:19 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:18:20 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 00:18:23 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 00:18:26 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 00:18:27 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:18:31 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:18:35 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1118.825322][ T2907] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1118.830932][ T2907] [ 1118.831577][ T2907] ====================================================== [ 1118.832709][ T2907] WARNING: possible circular locking dependency detected [ 1118.833667][ T2907] 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 Not tainted [ 1118.835024][ T2907] ------------------------------------------------------ [ 1118.836753][ T2907] syz-executor.1/2907 is trying to acquire lock: [ 1118.837986][ T2907] ffffffff84fc0408 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_close+0x28/0x58 [ 1118.840709][ T2907] [ 1118.840709][ T2907] but task is already holding lock: [ 1118.842053][ T2907] ffffaf800f7bd350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x52/0x1de [ 1118.844112][ T2907] [ 1118.844112][ T2907] which lock already depends on the new lock. [ 1118.844112][ T2907] [ 1118.845107][ T2907] [ 1118.845107][ T2907] the existing dependency chain (in reverse order) is: [ 1118.846718][ T2907] [ 1118.846718][ T2907] -> #3 (&ndev->req_lock){+.+.}-{3:3}: [ 1118.848553][ T2907] lock_acquire.part.0+0x1d0/0x424 [ 1118.850363][ T2907] lock_acquire+0x54/0x6a [ 1118.851338][ T2907] __mutex_lock+0x114/0xade [ 1118.852386][ T2907] mutex_lock_nested+0x14/0x1c [ 1118.853993][ T2907] nci_start_poll+0x4de/0x6b8 [ 1118.855036][ T2907] nfc_start_poll+0x10c/0x1e8 [ 1118.856110][ T2907] nfc_genl_start_poll+0xfe/0x252 [ 1118.857121][ T2907] genl_family_rcv_msg_doit+0x19a/0x23c [ 1118.858060][ T2907] genl_rcv_msg+0x236/0x3ba [ 1118.859514][ T2907] netlink_rcv_skb+0xf8/0x2be [ 1118.860396][ T2907] genl_rcv+0x36/0x4c [ 1118.861250][ T2907] netlink_unicast+0x40e/0x5fe [ 1118.862586][ T2907] netlink_sendmsg+0x4e0/0x994 [ 1118.863541][ T2907] sock_sendmsg+0xa0/0xc4 [ 1118.864461][ T2907] ____sys_sendmsg+0x46e/0x484 [ 1118.866107][ T2907] ___sys_sendmsg+0x16c/0x1f6 [ 1118.867100][ T2907] __sys_sendmsg+0xba/0x150 [ 1118.867906][ T2907] sys_sendmsg+0x2c/0x3a [ 1118.869416][ T2907] ret_from_syscall+0x0/0x2 [ 1118.870422][ T2907] [ 1118.870422][ T2907] -> #2 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 1118.872143][ T2907] lock_acquire.part.0+0x1d0/0x424 [ 1118.873187][ T2907] lock_acquire+0x54/0x6a [ 1118.874103][ T2907] __mutex_lock+0x114/0xade [ 1118.875451][ T2907] mutex_lock_nested+0x14/0x1c [ 1118.876440][ T2907] nfc_urelease_event_work+0x126/0x218 [ 1118.877454][ T2907] process_one_work+0x654/0xffe [ 1118.878515][ T2907] worker_thread+0x360/0x8fa [ 1118.879460][ T2907] kthread+0x19e/0x1fa [ 1118.880715][ T2907] ret_from_exception+0x0/0x10 [ 1118.881672][ T2907] [ 1118.881672][ T2907] -> #1 (nfc_devlist_mutex){+.+.}-{3:3}: [ 1118.883746][ T2907] lock_acquire.part.0+0x1d0/0x424 [ 1118.884900][ T2907] lock_acquire+0x54/0x6a [ 1118.885773][ T2907] __mutex_lock+0x114/0xade [ 1118.887239][ T2907] mutex_lock_nested+0x14/0x1c [ 1118.888160][ T2907] nfc_register_device+0x44/0x29e [ 1118.889183][ T2907] nci_register_device+0x538/0x612 [ 1118.890663][ T2907] virtual_ncidev_open+0x82/0x12c [ 1118.891662][ T2907] misc_open+0x272/0x2c8 [ 1118.892968][ T2907] chrdev_open+0x1d4/0x478 [ 1118.894192][ T2907] do_dentry_open+0x2a4/0x7d4 [ 1118.895163][ T2907] vfs_open+0x52/0x5e [ 1118.896244][ T2907] path_openat+0x12b6/0x189e [ 1118.897163][ T2907] do_filp_open+0x10e/0x22a [ 1118.898004][ T2907] do_sys_openat2+0x174/0x31e [ 1118.899383][ T2907] sys_openat+0xdc/0x164 [ 1118.900291][ T2907] ret_from_syscall+0x0/0x2 [ 1118.901226][ T2907] [ 1118.901226][ T2907] -> #0 (nci_mutex){+.+.}-{3:3}: [ 1118.902750][ T2907] check_noncircular+0x1de/0x1fe [ 1118.903805][ T2907] __lock_acquire+0x19a4/0x333e [ 1118.905174][ T2907] lock_acquire.part.0+0x1d0/0x424 [ 1118.906203][ T2907] lock_acquire+0x54/0x6a [ 1118.907095][ T2907] __mutex_lock+0x114/0xade [ 1118.908456][ T2907] mutex_lock_nested+0x14/0x1c [ 1118.909597][ T2907] virtual_nci_close+0x28/0x58 [ 1118.910850][ T2907] nci_close_device+0x12e/0x1de [ 1118.911908][ T2907] nci_unregister_device+0x34/0x182 [ 1118.913283][ T2907] virtual_ncidev_close+0x9c/0xbc [ 1118.914242][ T2907] __fput+0x164/0x502 [ 1118.915012][ T2907] ____fput+0x1a/0x24 [ 1118.915819][ T2907] task_work_run+0xdc/0x154 [ 1118.916674][ T2907] do_notify_resume+0x894/0xa56 [ 1118.917602][ T2907] ret_from_exception+0x0/0x10 [ 1118.918489][ T2907] [ 1118.918489][ T2907] other info that might help us debug this: [ 1118.918489][ T2907] [ 1118.919378][ T2907] Chain exists of: [ 1118.919378][ T2907] nci_mutex --> &genl_data->genl_data_mutex --> &ndev->req_lock [ 1118.919378][ T2907] [ 1118.922257][ T2907] Possible unsafe locking scenario: [ 1118.922257][ T2907] [ 1118.923734][ T2907] CPU0 CPU1 [ 1118.924875][ T2907] ---- ---- [ 1118.925520][ T2907] lock(&ndev->req_lock); [ 1118.926497][ T2907] lock(&genl_data->genl_data_mutex); [ 1118.928545][ T2907] lock(&ndev->req_lock); [ 1118.929726][ T2907] lock(nci_mutex); [ 1118.930634][ T2907] [ 1118.930634][ T2907] *** DEADLOCK *** [ 1118.930634][ T2907] [ 1118.932041][ T2907] 1 lock held by syz-executor.1/2907: [ 1118.933360][ T2907] #0: ffffaf800f7bd350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x52/0x1de [ 1118.935746][ T2907] [ 1118.935746][ T2907] stack backtrace: [ 1118.936997][ T2907] CPU: 1 PID: 2907 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1118.938505][ T2907] Hardware name: riscv-virtio,qemu (DT) [ 1118.939591][ T2907] Call Trace: [ 1118.940281][ T2907] [] dump_backtrace+0x2e/0x3c [ 1118.941403][ T2907] [] show_stack+0x34/0x40 [ 1118.942889][ T2907] [] dump_stack_lvl+0xe4/0x150 [ 1118.944028][ T2907] [] dump_stack+0x1c/0x24 [ 1118.945330][ T2907] [] print_circular_bug+0x34e/0x3d8 [ 1118.946829][ T2907] [] check_noncircular+0x1de/0x1fe [ 1118.947830][ T2907] [] __lock_acquire+0x19a4/0x333e [ 1118.948913][ T2907] [] lock_acquire.part.0+0x1d0/0x424 [ 1118.950708][ T2907] [] lock_acquire+0x54/0x6a [ 1118.951827][ T2907] [] __mutex_lock+0x114/0xade [ 1118.953684][ T2907] [] mutex_lock_nested+0x14/0x1c [ 1118.955012][ T2907] [] virtual_nci_close+0x28/0x58 [ 1118.956738][ T2907] [] nci_close_device+0x12e/0x1de [ 1118.957925][ T2907] [] nci_unregister_device+0x34/0x182 [ 1118.959046][ T2907] [] virtual_ncidev_close+0x9c/0xbc [ 1118.960614][ T2907] [] __fput+0x164/0x502 [ 1118.961746][ T2907] [] ____fput+0x1a/0x24 [ 1118.963425][ T2907] [] task_work_run+0xdc/0x154 [ 1118.964468][ T2907] [] do_notify_resume+0x894/0xa56 [ 1118.965485][ T2907] [] ret_from_exception+0x0/0x10 00:18:38 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:18:38 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:18:40 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:18:42 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1127.686580][ T2921] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 00:18:46 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:18:47 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 00:18:47 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 00:18:48 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) [ 1135.444294][ T2938] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 00:18:54 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000140001ef00dfffff63f3cfd110"], 0x54}}, 0x0) 00:18:54 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:18:55 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000140001ef00dfffff63f3cfd110"], 0x54}}, 0x0) 00:18:56 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000140001ef00dfffff63f3cfd110"], 0x54}}, 0x0) 00:18:57 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000140001ef00dfffff63f3cfd110"], 0x54}}, 0x0) [ 1143.604191][ T2955] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 00:19:02 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000140001ef00dfffff63f3cfd110"], 0x54}}, 0x0) 00:19:03 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000140001ef00dfffff63f3cfd110"], 0x54}}, 0x0) 00:19:03 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, &(0x7f0000001900)) 00:19:04 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, &(0x7f0000001900)) 00:19:04 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000140001ef00dfffff63f3cfd110"], 0x54}}, 0x0) 00:19:05 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, &(0x7f0000001900)) 00:19:05 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, &(0x7f0000001900)) 00:19:06 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, &(0x7f0000001900)) 00:19:06 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, &(0x7f0000001900)) 00:19:07 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$FIONREAD(r2, 0x541b, 0xffffffffffffffff) 00:19:07 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, &(0x7f0000001900)) VM DIAGNOSIS: 08:08:56 Registers: info registers vcpu 0 pc ffffffff800d9f3c mhartid 0000000000000000 mstatus 00000000000001a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc ffffffff8000569e mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff800da4ee x2/sp ffffaf800e533850 x3/gp ffffffff85863ac0 x4/tp ffffaf800b143080 x5/t0 ffffaf800e533640 x6/t1 0000000000000400 x7/t2 00007fffe0f1e1b7 x8/s0 ffffaf800e5338d0 x9/s1 ffffaf805a9f4d40 x10/a0 ffffaf805a9f4de0 x11/a1 0000000000000007 x12/a2 1ffff5f00b53e9d5 x13/a3 ffffffff800e50ba x14/a4 0000000000000000 x15/a5 ffffaf805a9f4de0 x16/a6 0000000000f00000 x17/a7 0000000000000400 x18/s2 ffffaf805a9f4c80 x19/s3 0000000000000002 x20/s4 ffffaf805a9f4c80 x21/s5 000001047ecb973c x22/s6 ffffaf8007403530 x23/s7 0000000000001000 x24/s8 ffffaf805a9f5c80 x25/s9 ffffaf805a9f57a0 x26/s10 ffffaf800e533a48 x27/s11 ffffaf800e533aa0 x28/t3 00000000000006c7 x29/t4 00000000000006c7 x30/t5 fffff5ef01ca66c8 x31/t6 0000000000000002 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff804757f2 mhartid 0000000000000001 mstatus 00000000000000a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff80475986 sepc ffffffff831afd22 mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff8011eda6 x2/sp ffffaf80110a3180 x3/gp ffffffff85863ac0 x4/tp ffffaf800d021840 x5/t0 ffffffff86bcb657 x6/t1 fffffffef0d796ca x7/t2 0000000000000000 x8/s0 ffffaf80110a3360 x9/s1 0000000000000000 x10/a0 0000000000000046 x11/a1 00000000000f0000 x12/a2 0000000000000002 x13/a3 ffffffff8011c8a6 x14/a4 44484d62f82e4200 x15/a5 0000000000000020 x16/a6 ffffffff86bcb686 x17/a7 ffffffff86bcb656 x18/s2 0000000000000046 x19/s3 000000000000000f x20/s4 ffffaf80110a32e0 x21/s5 ffffaf80110a3200 x22/s6 ffffffff8588c1a0 x23/s7 ffffffff8588c3e0 x24/s8 ffffffff8588c220 x25/s9 ffffffff84a88520 x26/s10 ffffffff858655c0 x27/s11 ffffaf80110a32e0 x28/t3 0000000000000073 x29/t4 fffffffef0d796c8 x30/t5 fffffffef0d796cb x31/t6 ffffffff86bcb657 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000