VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3DqNnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//+3Rsqd") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000000)={0x1}) socket$packet(0x11, 0x2, 0x300) 04:10:24 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f00000034c0), 0x22000, 0x0) 04:10:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, 0x0, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:24 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000700), 0x4, 0x2b2801) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_MSG_RING={0x28, 0x5a, 0x0, 0xffffffffffffffff, 0x7fff, 0x0}) syz_io_uring_setup(0x0, &(0x7f0000000d80), &(0x7f0000000e00), &(0x7f0000000e40)) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 04:10:24 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@o_path={0x0}, 0x18) 04:10:24 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) 04:10:24 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1274, 0x0) 04:10:25 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@map, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:10:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, 0x0, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:25 executing program 3: bpf$MAP_CREATE(0x10, &(0x7f0000000040)=@base={0x2000000, 0x11}, 0x48) 04:10:25 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1210820, &(0x7f0000000100)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}}, 0x0, 0x0, 0x0) [ 1819.946816][T26963] loop4: detected capacity change from 0 to 32768 [ 1819.955670][T26963] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (26963) [ 1819.972254][T26963] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1819.981974][T26963] BTRFS info (device loop4): force clearing of disk cache [ 1819.989643][T26963] BTRFS info (device loop4): setting nodatasum [ 1819.995823][T26963] BTRFS info (device loop4): allowing degraded mounts [ 1820.002832][T26963] BTRFS info (device loop4): enabling disk space caching [ 1820.010151][T26963] BTRFS info (device loop4): disk space caching is enabled [ 1820.037436][T26963] BTRFS info (device loop4): enabling ssd optimizations [ 1820.044995][T26963] BTRFS info (device loop4): auto enabling async discard [ 1820.053251][T26963] BTRFS info (device loop4): rebuilding free space tree [ 1820.066507][T26963] BTRFS info (device loop4): disabling free space tree [ 1820.073689][T26963] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1820.083596][T26963] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1820.096895][T26963] BTRFS info (device loop4): checking UUID tree [ 1820.141962][T25507] udevd[25507]: symlink '../../loop4' '/dev/disk/by-uuid/e417788f-7a09-42b2-9266-8ddc5d5d35d2.tmp-b7:4' failed: Read-only file system [ 1820.510662][ T11] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) 04:10:27 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @struct={0x2}]}, {0x0, [0x0, 0x61, 0x61]}}, 0x0, 0x39}, 0x20) 04:10:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:27 executing program 3: r0 = socket(0x29, 0x5, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 04:10:27 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x2, &(0x7f0000000040)=@raw=[@cb_func], 0x0}, 0x90) 04:10:27 executing program 2: bpf$PROG_LOAD(0x9, 0x0, 0x10) 04:10:27 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', 0x0}) 04:10:27 executing program 0: syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000480)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, '+&}'}}]}}, 0x0, 0x0, 0x0) [ 1820.846986][T27040] fuse: Bad value for 'fd' 04:10:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x80, 0xca5, 0xff, 0x2, 0xffffffffffffffff, 0xfff}, 0x48) 04:10:28 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:28 executing program 3: syz_open_dev$loop(&(0x7f00000001c0), 0x8000000000000001, 0x0) 04:10:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:28 executing program 2: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={0x0}, 0x6a) 04:10:28 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr={0x3}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28}, 0x20) 04:10:28 executing program 3: io_uring_setup(0x730b, &(0x7f0000000380)={0x0, 0x0, 0x100}) 04:10:28 executing program 4: bpf$PROG_LOAD(0x12, 0x0, 0x0) 04:10:28 executing program 2: pipe2$9p(0x0, 0x2) 04:10:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:29 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:29 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xb}, {0x4}, {0x9}, {}, {0x4, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000500)=""/208, 0x51, 0xd0, 0x1}, 0x20) 04:10:29 executing program 0: r0 = fanotify_init(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 04:10:29 executing program 4: syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x201060, &(0x7f0000000140)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) 04:10:29 executing program 2: bpf$PROG_LOAD(0x1c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 04:10:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89b0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 04:10:29 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)) 04:10:29 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[], 0x0, 0xce, 0x0, 0xb}, 0x20) 04:10:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 04:10:29 executing program 4: pipe2$watch_queue(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}, {@allow_other}, {@default_permissions}]}}, 0x0, 0x0, 0x0) 04:10:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x485, 0xffffffffffffffff, 0x1}, 0x48) 04:10:30 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:30 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000b0000000b0000000060000000000000002000005040000000100000002000000ff0000000e0000000200000003000000030000000000000902000000010000000000000901000000050000000000000a030000000c0000000a0000060400000005000000030000000d00000002000000050000000000000005000000010000000e00000004000000060000003c00000007000000000000000c0000000200000007000000000000000000000006000000050000000000000a00000000005f615f06"], 0x0, 0xce}, 0x20) 04:10:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000008c0)={0x18, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@empty}]}, 0x18}, {&(0x7f0000001180)={0x14, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x2}, 0x0) 04:10:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x541b, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 04:10:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x264f, 0xffffffffffffffff, 0x62}, 0x48) 04:10:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x541b, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 04:10:30 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) read$proc_mixer(r0, &(0x7f0000000180)=""/90, 0xffffff62) 04:10:30 executing program 0: ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000000)) getitimer(0x1, &(0x7f0000000180)) 04:10:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x48) 04:10:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000008c0)={0x18, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@empty}]}, 0x18}, {&(0x7f0000001180)={0x14, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x2}, 0x0) 04:10:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[], 0x1c}}, 0x0) 04:10:31 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:31 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wg2\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) 04:10:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f00000001c0)="5bc2d377", 0x4) 04:10:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8932, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 04:10:31 executing program 4: bpf$PROG_LOAD(0x16, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 04:10:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8993, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 04:10:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8971, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 04:10:31 executing program 2: bpf$OBJ_GET_PROG(0xd, 0x0, 0x0) 04:10:31 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a2, &(0x7f0000000140)={'batadv_slave_1\x00'}) 04:10:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:31 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8912, &(0x7f0000000140)={'batadv_slave_1\x00'}) 04:10:31 executing program 2: bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x40) 04:10:32 executing program 4: pipe2$watch_queue(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 04:10:32 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) 04:10:32 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a2, &(0x7f0000000140)={'batadv_slave_1\x00'}) 04:10:32 executing program 0: bpf$PROG_LOAD(0x15, 0x0, 0x0) 04:10:32 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1826.381585][T27208] fuse: Bad value for 'group_id' 04:10:32 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000640)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@smackfshat}]}}, 0x0, 0x0, 0x0) 04:10:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {0x0}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x3, &(0x7f0000000280)=@framed, 0x0}, 0x90) 04:10:32 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x0, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, 0x0) 04:10:32 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x500, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 1826.533767][T27216] fuse: Bad value for 'fd' 04:10:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89fe, &(0x7f00000000c0)={'sit0\x00', 0x0}) 04:10:33 executing program 2: bpf$BPF_BTF_LOAD(0x9, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[], 0x0, 0xce}, 0x20) 04:10:33 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x0, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, 0x0) 04:10:33 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8927, &(0x7f0000000140)={'batadv_slave_1\x00'}) 04:10:33 executing program 0: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@netfilter}, 0x40) 04:10:33 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {0x0}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0x3}]}}}}}) 04:10:33 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000018c0)={@map, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:10:33 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)) 04:10:33 executing program 3: r0 = memfd_secret(0x0) syz_io_uring_setup(0x57c7, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) 04:10:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000d00), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) 04:10:34 executing program 2: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x64d7}, &(0x7f00000002c0)={0x0, r0+10000000}, 0x0) 04:10:34 executing program 3: bpf$PROG_LOAD(0x8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 04:10:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000d00), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) 04:10:34 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)) 04:10:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000d00), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) 04:10:34 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {0x0}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000d00), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) 04:10:34 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x401870c8, 0x0) 04:10:35 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:10:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x80, 0xca5, 0xff}, 0x48) 04:10:35 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x401870c8, 0x0) 04:10:35 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:35 executing program 0: bpf$PROG_LOAD(0x13, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 04:10:35 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8982, &(0x7f0000000140)={'batadv_slave_1\x00'}) 04:10:35 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000140)={'batadv_slave_1\x00'}) 04:10:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:35 executing program 2: pipe2$watch_queue(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[], [{@smackfshat={'smackfshat', 0x3d, '.)\\^,+'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}}, 0x0, 0x0, 0x0) 04:10:35 executing program 0: bpf$PROG_LOAD(0x13, 0x0, 0x0) 04:10:35 executing program 3: syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xdc1bf97504c86f79, &(0x7f00000000c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}}, 0x0, 0x0, 0x0) 04:10:35 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(0xffffffffffffffff, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:35 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8992, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 04:10:35 executing program 3: r0 = socket(0x22, 0x2, 0x10) getpeername$packet(r0, 0x0, 0x0) [ 1829.561896][T27333] fuse: Bad value for 'user_id' 04:10:35 executing program 4: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3) 04:10:36 executing program 2: bpf$PROG_LOAD(0x15, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) [ 1829.665981][T27337] delete_channel: no stack 04:10:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0xc0189436, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1}}}}) 04:10:36 executing program 3: r0 = socket(0x22, 0x2, 0x10) getpeername$packet(r0, 0x0, 0x0) 04:10:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @remote, @private, @multicast1]}, @cipso={0x86, 0x4e, 0x0, [{0x0, 0x4, "6e14"}, {0x0, 0xc, "f88b28339a2f4a5c2e1f"}, {0x0, 0x7, "8e371e34eb"}, {0x0, 0xe, "ad60112b6608daccc680428a"}, {0x0, 0xf, "1690f851f03c6ee592830cb375"}, {0x0, 0xe, "507ee3f14f3abb17cf3e5f45"}, {0x0, 0x6, "4bc45e79"}]}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@dev}, {@multicast1}, {}]}]}}}}}) [ 1830.360693][T27359] delete_channel: no stack 04:10:36 executing program 3: r0 = socket(0x22, 0x2, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x85) 04:10:36 executing program 2: bpf$MAP_CREATE(0x10, &(0x7f0000000040)=@base={0x0, 0x24}, 0x48) 04:10:36 executing program 0: syz_io_uring_setup(0x74, &(0x7f0000001040)={0x0, 0x861e, 0xe, 0x0, 0xfeffffff}, &(0x7f00000010c0), &(0x7f0000001100)) 04:10:36 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) [ 1830.480773][T27364] delete_channel: no stack 04:10:37 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(0xffffffffffffffff, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:37 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 04:10:37 executing program 0: pipe2$watch_queue(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x3012, r0, 0x8000000) 04:10:37 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)) 04:10:37 executing program 4: bpf$MAP_CREATE(0x10, &(0x7f0000000040)=@base={0x0, 0xa}, 0x48) 04:10:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:37 executing program 4: pipe2$watch_queue(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioprio_set$pid(0x2, 0x0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 04:10:37 executing program 2: bpf$MAP_CREATE(0x10, &(0x7f0000000040)=@base={0x0, 0x26}, 0x48) 04:10:37 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0}) clock_gettime(0x0, &(0x7f0000000280)) 04:10:37 executing program 4: syz_open_dev$loop(&(0x7f0000000740), 0x0, 0x80481) 04:10:37 executing program 3: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x1, 0x8000021, 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 04:10:37 executing program 2: r0 = socket(0x29, 0x5, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44085) [ 1831.482595][ T1036] nci: nci_add_new_protocol: the target found does not have the desired protocol 04:10:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)={0x10}, 0x10}], 0x10000000000001a8, &(0x7f0000000780)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xfffffffffffffe6f}, 0x0) 04:10:40 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x0) pipe2$watch_queue(0x0, 0x80) 04:10:40 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(0xffffffffffffffff, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:40 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x2f, 0x2007, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) 04:10:40 executing program 0: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) 04:10:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1833.719727][T27379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:10:40 executing program 3: bpf$PROG_LOAD(0x1d, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 04:10:40 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890c, &(0x7f0000000140)={'batadv_slave_1\x00'}) 04:10:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13, 0x8, 0x40, 0x0, 0x10}, 0x48) 04:10:40 executing program 4: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="2500000016", @ANYRES32, @ANYBLOB="00000000000001000000000000000000000000000000000000000000000000000000000000000000000000f6"], 0x40) 04:10:40 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x9, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000001340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000014c0), 0x10}, 0x90) 04:10:40 executing program 0: fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f00000001c0)) 04:10:40 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @struct]}, {0x0, [0x0, 0x61]}}, 0x0, 0x38}, 0x20) 04:10:40 executing program 2: r0 = socket(0x22, 0x2, 0x2) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 04:10:41 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=0x1, 0xffffffffffffffff, 0x3d, 0x0, 0x0, @prog_id}, 0x20) 04:10:41 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {0x0}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:41 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13, 0x8, 0x40}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) 04:10:41 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a0, &(0x7f0000000140)={'batadv_slave_1\x00'}) 04:10:41 executing program 0: fanotify_init(0x4a, 0x0) 04:10:41 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x894c, 0x0) 04:10:41 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8983, 0x0) 04:10:41 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x10000) 04:10:41 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 04:10:41 executing program 3: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x6baa4a6893d16dfa) 04:10:41 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) 04:10:42 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:10:42 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {0x0}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:42 executing program 4: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4042) 04:10:42 executing program 2: pipe2$watch_queue(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 04:10:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @remote, @private, @multicast1]}, @cipso={0x86, 0x4e, 0x0, [{0x0, 0x4, "6e14"}, {0x0, 0xc, "f88b28339a2f4a5c2e1f"}, {0x0, 0x7, "8e371e34eb"}, {0x0, 0xe, "ad60112b6608daccc680428a"}, {0x0, 0xf, "1690f851f03c6ee592830cb375"}, {0x0, 0xe, "507ee3f14f3abb17cf3e5f45"}, {0x0, 0x6, "4bc45e79"}]}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@dev}, {@multicast1}, {}]}]}}}}}) 04:10:42 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x2008}, 0x18) 04:10:42 executing program 2: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 04:10:42 executing program 3: socketpair(0x2, 0x0, 0x4c5, &(0x7f0000000000)) 04:10:42 executing program 4: bpf$MAP_CREATE(0x10, &(0x7f0000000040), 0x94) 04:10:42 executing program 0: r0 = socket(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 04:10:42 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x1d) 04:10:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) [ 1836.627953][ T1036] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1836.779798][T27515] nci: nci_start_poll: failed to set local general bytes [ 1838.889139][T27492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:10:45 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:45 executing program 4: r0 = memfd_secret(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x9, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000001340)='GPL\x00', 0x4, 0x18, &(0x7f0000001380)=""/24, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001480), 0x8}, 0x90) 04:10:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 04:10:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {0x0}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:45 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f8, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1}}}}) 04:10:45 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 04:10:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[], 0x1c}}, 0x0) 04:10:45 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 04:10:45 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891d, &(0x7f0000000140)={'batadv_slave_1\x00'}) 04:10:46 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, 0x0, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:46 executing program 2: bpf$MAP_CREATE(0x10, &(0x7f0000000040)=@base={0x0, 0xf}, 0x48) 04:10:46 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x7}, &(0x7f00000000c0)={0x77359400}, 0x0) 04:10:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x0, 0x0, 0x0, 0x0, 0x209e}, 0x48) 04:10:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:46 executing program 3: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000, &(0x7f0000000140)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) 04:10:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)={0x10, 0xfffe, 0x1}, 0x10}], 0x1}, 0x0) 04:10:46 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=0x1, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1839.970706][T26314] nci: nci_add_new_protocol: the target found does not have the desired protocol 04:10:46 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) 04:10:47 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000080)='0\x00', 0x2) [ 1840.612818][T27560] nci: nci_start_poll: failed to set local general bytes 04:10:47 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 04:10:47 executing program 2: pipe2$watch_queue(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) [ 1842.772152][T27552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:10:49 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, 0x0, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:49 executing program 3: bpf$MAP_CREATE(0x10, &(0x7f0000000040)=@base={0x0, 0x12}, 0x48) 04:10:49 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8924, &(0x7f0000000140)={'batadv_slave_1\x00'}) 04:10:49 executing program 2: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 04:10:49 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8993, &(0x7f0000000140)={'batadv_slave_1\x00'}) 04:10:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:49 executing program 2: getitimer(0x0, &(0x7f0000000180)) 04:10:49 executing program 0: bpf$OBJ_GET_PROG(0x19, 0x0, 0x0) 04:10:49 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@ifindex, 0xffffffffffffffff, 0x14, 0x0, 0x0, @prog_id}, 0x20) 04:10:49 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0xc001, 0x0) 04:10:49 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/184, 0xb8}, {&(0x7f00000000c0)=""/182, 0xb6}, {&(0x7f0000000180)=""/75, 0x4b}], 0x100002b0, &(0x7f0000000280)=""/78, 0x4e}, 0x0) 04:10:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000280)=[@ip_ttl={{0x14}}, @ip_ttl={{0x5}}, @ip_retopts={{0x0, 0x0, 0x7, {[@ra, @noop]}}}, @ip_ttl], 0x60}, 0x0) [ 1843.536163][ T1036] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1843.778633][T27609] nci: nci_start_poll: failed to set local general bytes 04:10:52 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=')', 0x1}], 0x1}, 0x8000) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=')', 0x1}], 0x1, &(0x7f0000003240)=ANY=[], 0x30}, 0x0) 04:10:52 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001740)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{}, 0x3}}, 0x10, 0x0}, 0x50064) 04:10:52 executing program 2: r0 = socket(0x29, 0x5, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}}, 0x0) 04:10:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:52 executing program 0: socketpair(0x18, 0x0, 0x1, &(0x7f00000015c0)) 04:10:52 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, 0x0, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1845.882928][T27590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:10:52 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000025c0)='./cgroup/syz1\x00', 0x1ff) socketpair(0x1e, 0x0, 0x40, &(0x7f0000000040)) r0 = socket$kcm(0x29, 0x7, 0x0) sendmsg(r0, &(0x7f0000002580)={&(0x7f0000000080)=@caif=@dgm={0x25, 0x3, 0x6}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="e2a5cf36e302de8400519595ac7b782e4c7872a9cd5b0aa7b45b5a327c987dd45074699f610e27e8a4856a42ab36b723a31bd0e0eda12712f52c11f61e591c7a4925e067cad21d50f9716d6244970e14b1f1cfb401b9d9d9be0a9fe8827d586c6b4f7a72c1ee75227813a87fee73", 0x6e}, {&(0x7f0000000180)="62a9ed446a632ce705371eda496f3a844a6bdc3377df8bddd82cb2fca23b5a3e68f71f0954996ef067f8bc30a0e53863eb336184f7e7912c97b3724f04b0712a6f78fb9ac3dd8b7fe2fd51db8b31aedbd54911ee26af62b1444305d60a5a69053651eb6ea183967312735176bb0200d8f5ede6bf", 0x74}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="877069f5863c1d068b67c153f6c0aeab343ef574c04eb077c0956051617788151657bb6bbabc96e9b191170d530b696b1d72115f33848cab5a8d3278277a164d8bfed360b2c58c4c3e8325e68556152556ef4d3af0823cc6e67d892afe8e21d5b7cbc66c9f30", 0x66}], 0x4, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], 0x12c8}, 0x20000810) 04:10:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001700)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000001b00)={&(0x7f0000001740)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x0) 04:10:52 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/184, 0xb8}, {&(0x7f0000000180)=""/181, 0xffffffffffffff44}, {&(0x7f0000000340)=""/75, 0x4b}], 0x3, &(0x7f0000000280)=""/84, 0x54}, 0x0) 04:10:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001700)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000001b00)={&(0x7f0000001740)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x0) 04:10:53 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[{0x48, 0x0, 0x0, "06a1128e92f5d69a39cffd047d6d35e3f3795f01fc7f1a4e5a7b97f125c3afb3258c72bb5a98d4e07234f217bc2822f572"}, {0x40, 0x0, 0x0, "b52a4e003ac21c4fabcd704e7ddc297184ee8ff5c8cf2f2075457a234a4c9427015b2d6c1b3b486561"}, {0x80, 0x0, 0x0, "ef590acd2452f00db82f88dc6061c6bbb12d24644669735e33943415cd4bcc1b14434bf247bf811db9112d948550e5ae2c3d0603915cd809e6f0a29a988e61b50953c3e49053eb26793bf5d1444d95624d6138968ab4836e4f8fb435a477c103742fa117cd05006f2a"}, {0x58, 0x0, 0x0, "ead89042ac30b69808b694906052f65ae67b37791df3a906fcfca0d7e069ef1e0a846a32dff96005496d26bf6d12aa53a5d1a3f5d9eaa353b39d3752041d1ccca7"}, {0x1010, 0x0, 0x0, "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"}, {0xc8, 0x0, 0x0, "86f6a76e762bffbd3f98c5d2fb006c13e914e518528418e621eb868820fef1e4bfde3c55d8339d27d15b8c8d0ecdef6ec4db217466980308b12d32a181bc0f8c95760e015f84aedabf9da4337bc7d98d44659a2e6661f2769a2dc69c4d54e8c1a14c7b1370444720e89be81cd494a5767bf597aa1bebccb377327ec4d1e69e2d1683658d384fd9d092b4a3cdb3ed476f21cb94add5712c1a58034eec0b315464a5dc7e16ba9b4b86c83a6566abd8df70a0"}, {0x40, 0x0, 0x0, "06256d142aeca94f180eea5283c6267e2a51706984b749d011063823c4b7f1a5bbc8c8a924cabb9753"}, {0xd90, 0x0, 0x0, "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"}], 0x2008}, 0x0) 04:10:53 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) accept(r0, 0x0, 0x0) 04:10:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000000)) 04:10:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001700)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000001b00)={&(0x7f0000001740)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x0) 04:10:53 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) sendmmsg(r0, 0x0, 0xfffffffffffffc69, 0x0) 04:10:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {0x0}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:53 executing program 0: openat$incfs(0xffffffffffffffff, &(0x7f00000023c0)='.pending_reads\x00', 0x0, 0x0) 04:10:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x40080, &(0x7f0000000140)={0x2, 0x4e24, @dev}, 0x10) 04:10:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001700)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000001b00)={&(0x7f0000001740)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x0) 04:10:53 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000002280)='syzkaller1\x00', 0x10) 04:10:53 executing program 4: bpf$MAP_CREATE(0x10, &(0x7f0000000540)=@base={0x0, 0x13}, 0x48) 04:10:53 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8982, 0x0) 04:10:54 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x1ca5fb9c05dc6dca) 04:10:54 executing program 2: bpf$MAP_CREATE(0x10, &(0x7f0000000540)=@base={0x18, 0x26}, 0x48) 04:10:54 executing program 2: socketpair(0x25, 0x1, 0xfffffffa, &(0x7f0000000000)) 04:10:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {0x0}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:54 executing program 3: write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000)={0x0, 0x2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x7, 0x6, 0x4, 0x8, 0xc8, r1, 0x8, '\x00', 0x0, r0, 0x2, 0x4}, 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='f2fs_fallocate\x00'}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[], 0x20000148) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1b, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1853000010ff7b3f282ccacb83aa1d5b0000030d0000000000fdff00000000001aff", @ANYRES32=r4, @ANYBLOB="000000000000000025210200f0ffffff"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xee, &(0x7f0000000400)=""/238, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[r3, r3, 0xffffffffffffffff, r0]}, 0x90) openat$cgroup(0xffffffffffffffff, &(0x7f0000000fc0)='syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 04:10:54 executing program 2: bpf$MAP_CREATE(0x10, &(0x7f0000000540)=@base={0x0, 0x4}, 0x48) [ 1847.941451][ T11] nci: nci_add_new_protocol: the target found does not have the desired protocol 04:10:57 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:10:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r0, 0x8925, 0x0) 04:10:57 executing program 0: bpf$MAP_CREATE(0x10, &(0x7f0000000540)=@base={0x0, 0x16}, 0x48) 04:10:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x10000}) 04:10:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {0x0}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:10:57 executing program 3: write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000)={0x0, 0x2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x7, 0x6, 0x4, 0x8, 0xc8, r1, 0x8, '\x00', 0x0, r0, 0x2, 0x4}, 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='f2fs_fallocate\x00'}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[], 0x20000148) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1b, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1853000010ff7b3f282ccacb83aa1d5b0000030d0000000000fdff00000000001aff", @ANYRES32=r4, @ANYBLOB="000000000000000025210200f0ffffff"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xee, &(0x7f0000000400)=""/238, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[r3, r3, 0xffffffffffffffff, r0]}, 0x90) openat$cgroup(0xffffffffffffffff, &(0x7f0000000fc0)='syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) [ 1850.741707][T27685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:10:57 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) connect(r0, &(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "93692a2f76e859aaed3f9c5623295d385007b46a4656829c118eca959ba3a450d15270c11b32458321e6b256f335296daa10b86ae71ad75a718e7fdb493ef2"}, 0x80) 04:10:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 04:10:57 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @rand_addr=0x64010105}, 0x80) [ 1851.306886][ T1036] nci: nci_add_new_protocol: the target found does not have the desired protocol 04:10:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000000)) 04:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000090071b"], 0x1c}}, 0x0) 04:10:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8907, 0x0) [ 1851.690030][T27736] nci: nci_start_poll: failed to set local general bytes [ 1852.711495][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.828731][T27715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:11:00 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x2c}}, 0x0) 04:11:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={0x0}) 04:11:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x0, 0x0, 0x0, 0xc, 0x1}, 0x48) 04:11:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:00 executing program 3: write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000)={0x0, 0x2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x7, 0x6, 0x4, 0x8, 0xc8, r1, 0x8, '\x00', 0x0, r0, 0x2, 0x4}, 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='f2fs_fallocate\x00'}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[], 0x20000148) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1b, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1853000010ff7b3f282ccacb83aa1d5b0000030d0000000000fdff00000000001aff", @ANYRES32=r4, @ANYBLOB="000000000000000025210200f0ffffff"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xee, &(0x7f0000000400)=""/238, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[r3, r3, 0xffffffffffffffff, r0]}, 0x90) openat$cgroup(0xffffffffffffffff, &(0x7f0000000fc0)='syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 04:11:00 executing program 0: socket(0x10, 0x2, 0x10000) 04:11:00 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 04:11:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0xc, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) 04:11:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x4}]}]}, 0x20}}, 0x0) [ 1854.616775][T26314] nci: nci_add_new_protocol: the target found does not have the desired protocol 04:11:01 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 04:11:01 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="0601000029000100000000000000000004010080810011008acbdcdf2f5d06d9007227a090d01e3f1e9f062386416246d88f61e4f3591a1c78c75eea128bdabb4feaf133e8b14535654293f995c6b1afbafe4a28d39d896a71245f40c4d88416245322d732fc100627ed381a9c8d1eb2f71bcce8aff4eb658cd1646bb76faf7b94c4cd6e9e59ebe8439c15e1784b0a44fd4b69544f000000040000", @ANYRES32], 0x114}], 0x1}, 0x0) [ 1854.799273][T27786] netlink: 106 bytes leftover after parsing attributes in process `syz-executor.0'. 04:11:03 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:03 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000003400)=[{&(0x7f0000001200)=""/219, 0xfffffdef}], 0x300) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 04:11:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:03 executing program 3: write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000)={0x0, 0x2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x7, 0x6, 0x4, 0x8, 0xc8, r1, 0x8, '\x00', 0x0, r0, 0x2, 0x4}, 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='f2fs_fallocate\x00'}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[], 0x20000148) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1b, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1853000010ff7b3f282ccacb83aa1d5b0000030d0000000000fdff00000000001aff", @ANYRES32=r4, @ANYBLOB="000000000000000025210200f0ffffff"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xee, &(0x7f0000000400)=""/238, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[r3, r3, 0xffffffffffffffff, r0]}, 0x90) openat$cgroup(0xffffffffffffffff, &(0x7f0000000fc0)='syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 04:11:03 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0xa0002, 0x0) write$9p(r0, 0x0, 0x0) 04:11:03 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0xf6, 0x8, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) [ 1856.930436][T27760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:11:03 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 04:11:03 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={0x0, 0x1c}}, 0x0) 04:11:04 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 04:11:04 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001240)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x4000) 04:11:04 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="060100002900010000000000000000000401008081001100", @ANYRES32], 0x114}], 0x1}, 0x0) 04:11:04 executing program 2: ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0xffffffffffffffff, 0x0, 0x4004) [ 1857.934789][T27871] netlink: 110 bytes leftover after parsing attributes in process `syz-executor.0'. 04:11:04 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) geteuid() 04:11:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:04 executing program 2: r0 = syz_io_uring_setup(0x6f3c, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1, 0x0, 0x0) 04:11:04 executing program 0: mq_unlink(&(0x7f0000000000)=',\\$\\&--*@\x00') 04:11:04 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6a657624926f2db30f54f7af97d789f472ae981b08d193e2722d32e155293488"}}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r2}) 04:11:04 executing program 2: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2401, 0x0) 04:11:04 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 04:11:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f0000000080)) 04:11:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {0x0}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:05 executing program 0: syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6a657624926f2db30f54f7af97d789f472ae981b08d193e2722d32e155293488"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) 04:11:05 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @prog_id}, 0x20) 04:11:05 executing program 3: socketpair(0x11, 0x3, 0x0, &(0x7f0000000340)) 04:11:05 executing program 2: bpf$MAP_UPDATE_CONST_STR(0xe, 0x0, 0x0) [ 1859.428750][T16696] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1859.783294][T27912] nci: nci_start_poll: failed to set local general bytes 04:11:06 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x541b, 0x0) 04:11:06 executing program 2: bpf$MAP_UPDATE_CONST_STR(0x22, &(0x7f0000001f40)={{}, 0x0, 0x0}, 0x20) [ 1861.943323][T27892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:11:08 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x8001) 04:11:08 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)) 04:11:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {0x0}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:08 executing program 0: syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6a657624926f2db30f54f7af97d789f472ae981b08d193e2722d32e155293488"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) 04:11:08 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x2, &(0x7f0000000340)={0x38}) 04:11:08 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:08 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000bc0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9}) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f00000002c0)) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1}) [ 1862.452560][ T1036] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1862.517613][T27994] iommufd_mock iommufd_mock1: Adding to iommu group 0 04:11:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', 0x0}) 04:11:09 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x12, &(0x7f0000000080)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000140)='GPL\x00', 0x1}, 0x90) 04:11:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xeb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xea9, 0x3, "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"}]}]}, 0xec4}}, 0x0) 04:11:09 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000bc0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9}) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f00000002c0)) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1}) 04:11:09 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x40049409, &(0x7f0000000340)={0x38}) 04:11:09 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x454002, 0x0) 04:11:09 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x141002, 0x0) write$dsp(r0, &(0x7f0000000080)='2', 0x1) 04:11:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/52, 0x34}, {0x0}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:09 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5460, 0x0) 04:11:09 executing program 3: socketpair(0xa, 0x5, 0x0, &(0x7f00000009c0)) [ 1862.961334][T28007] iommufd_mock iommufd_mock1: Adding to iommu group 0 04:11:11 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x2, @remote}}, 0x1e) 04:11:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1e, 0x0, 0x5, 0x1f, 0x800}, 0x48) 04:11:11 executing program 2: r0 = io_uring_setup(0x46c0, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 04:11:11 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x2a, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000005000000000000003f000000b7080000000000007b8af8ff00000000b7080000010001007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000850000007300000085100000060000008510"], &(0x7f0000000780)='GPL\x00', 0x6}, 0x90) 04:11:11 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1865.040278][T27973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:11:11 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, r1, 0x0, 0x0}) 04:11:11 executing program 2: bpf$MAP_UPDATE_CONST_STR(0x3, 0x0, 0x0) 04:11:11 executing program 4: io_uring_setup(0x332e, &(0x7f0000000140)={0x0, 0x0, 0x800}) 04:11:11 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x13}, 0x48) 04:11:12 executing program 2: bpf$MAP_UPDATE_CONST_STR(0x3, 0x0, 0x0) 04:11:12 executing program 2: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) 04:11:12 executing program 3: io_uring_setup(0x6877, &(0x7f0000000000)={0x0, 0x8490, 0x8}) 04:11:12 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x0) 04:11:12 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x24002, 0x0) 04:11:12 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map, 0xffffffffffffffff, 0x7, 0x0, 0x0, @prog_id}, 0x20) 04:11:14 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:14 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0xc0189436, 0x0) 04:11:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:14 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5450, 0x0) 04:11:14 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @private}, &(0x7f0000000040)=0xc) 04:11:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'tunl0\x00', &(0x7f00000005c0)=ANY=[]}) [ 1868.141949][T28028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:11:14 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000080)={0xc}) 04:11:15 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x31}) 04:11:15 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x0) 04:11:15 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000080)={0xc}) [ 1868.891293][ T1036] nci: nci_add_new_protocol: the target found does not have the desired protocol 04:11:15 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x38}) 04:11:15 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000080)) 04:11:17 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:17 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) read$dsp(r0, &(0x7f0000000040)=""/254, 0x3fffff) write$dsp(r0, &(0x7f0000000180)='S', 0x1) 04:11:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:17 executing program 4: socketpair(0x2b, 0x0, 0x0, &(0x7f00000009c0)) 04:11:17 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000080)) 04:11:17 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f00000000c0)={0x8}) [ 1871.216159][T28085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:11:17 executing program 2: socket(0x3, 0x0, 0xffff) 04:11:17 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000080), 0x8) 04:11:17 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x84040, 0x0) 04:11:18 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00\x00'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:18 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e) 04:11:18 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000080), 0x8) 04:11:18 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000180)={0x38}) 04:11:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000140), 0x4) 04:11:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {0x0}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:18 executing program 4: bpf$BPF_BTF_LOAD(0x4, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[], 0x0, 0xce}, 0x20) 04:11:18 executing program 3: socket$inet(0x2, 0x3, 0x9) 04:11:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', 0x0}) [ 1872.248639][T28155] iommufd_mock iommufd_mock1: Adding to iommu group 0 04:11:18 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1}) 04:11:18 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000280)={0xffffffffffffffab}) 04:11:18 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) write$dsp(r0, &(0x7f0000000180)="5328810d0b26981da5bcc81740281073bd4b7252b6d3698bc4076a822a923a836fe4908a22a818f4bf1b8753fbc04aeb9c649761737039248d0433df2ed06c7aa4a60fa195039033b29711610859c88104a9b4ab4292520a9ab8f319b197e38e09d15c76c27a25d41d6ae1bdfa94bd57fc63250c58886a71709e7f3e4c25b7a32ec34bd4e4ae865c5e508485cb5db7c0ef865f7894887afc405740a816e4c809b4ad9ad5d84b481968ed21a4d21b5e4dcfa366911a6cbaa1bf7a8a3ed9bf20a6d10ce6cfa76d989f0f913ca15c44d79b8ab80dc60cb4ffbcc2d1749705a4c1bd348285568dfa2417f0b08c5774e574e1b07bc3140b7a7981aa403cfcd55882d646ef395990c854a7c58e79d63ec1c1d98da81f92a810c49ffdc0fed8cf38d262bd5faf0711ae989f7eec8b0deb32f2bd50d181e717dd5a1203128a101d3b1b6f78d83163892c7c0ac04b256ba71fe023bb57a8c1a0993452595189725c769d0c74807cca1b92d85830ec93690578ddb5533a7364582ebe320a679e404477d3968aa85092212b24b5ae4abc280cf192929d98dca70f55ddf41adae2f52bb11c3d2d007d24f5908f71ca795c4c58e346fae776d89d9e035f3be3c011b5063d3946bd8dcff06fcd2c739facf980b08fadff1ab032e1258d8a850a0a80bc061ca2fa39946599525ab9caa548e08e3d72a2cc751f031ec774e062c5cf253e00bd18666cf0b6ca67e5308e82be6c49efdafb7cc5c9fc4858f664ef98856c571c9e98bb123f24666948c2a96fd932c986460f57f852de25e5261b496351f5c4ef38f32cc4321e05e81b424d143b292e0568d9dd8235d1df47cae0ebe0c3301b02fb0c344c3c64b3e738b7da0f2268ca9b6dea5b58e7d3339e841d9c5f9b6ebefb40fc4c99e4c4960d70227e4e92bb9a018f626ffb210ac4025b50b1bae129ebf9786b3739ac3971aa9f898f8c2b3ceb4ef33220e6e2acbfb6489a2a29be930de43b7150cc44ed9a17c4d87ca6c47e0b49c49435a9e29a2779d93e9d121eeb45a66832dcc36685168face9e9d68e8f4c1abddd9280990cfa22cd57fa22e6f0f773057c577a0ff4dc69108e494fe674f85a5f0ae809d281d0372286ef090cfd45091081cc89ab99a3b6f0957480d526c99cf43a22732005311a6804857be471386d480343d97da86c200a3e0bf9f0a969a9631aa3a888472980629cec8e5137fe86873f20cdbb8e62a79b72a67a599a6fdcc4d499dc6bce0cc4acd8b59a0efb38026dcfa8ba07eee4e137249c88eaa85af0edfd4d1e1bccdc7367832690d8a2d8d51dfedb482c8593f07e6510fde04dd10ad99c268ee26dd90bdff2e3e0169e9862ec00a7a162adc7528ea0cb16bd279885c1f1c58b40a845c8d5f7e3e44505c3831c5b1fdefa75bb539e8fece7ce47f73739fbd0749f0e946c6ca003c3b884bafd36fb0b92fdbd028bb13e21737e3348daba0064ce52ad93dfc94c7109609b7a3593a5c875d9c3f19e6396269b028dadd5b60f9c7dbb8dbe314176a07e01922de63eef73b6d9b9588bd433aacd5c72aeab10147863dd9c70e0016c04db1f2fa927c1ca86945e52ae0fb0f01eabfa9a27d9810404e9c903e7580c8b0b2be7b1b70d747fe6d900d137558756478ecdd7827e11c5c8fa982dd40bfc8087ed7dae9793e41ac27f3d21b4f7b6b49761ba06a840affa80111a0ccd5ed06a45d42dfb4fcc160de863f3965512c2b9010649e03a064d48588e74964b4c702bff66857b23d9810e8aaa4fd6b6b6eb5445759fdf0652e68b5641e9be7816a34f49ce11ba406fa370357dae11b934f5fc2d2fffa3d2ae3057e1ed3ebd744a26db67e0068b18844c0acca8bbecc457b746f236876ce53ecac94fab10003dcbdc01a845864833160893d30302d11c6b1a2a4c2f0d4dacebc3d06f0dc3d4db25e2ce5590be54e6b427688e8857b906806e4abcea4f17890832aad459162f89d1969ffa2ba940a3375b4e8eb0826db9d7ee800be152b14eac4797f307de31eca05a0cd12b000545ca81559e46a3054ede4a087a7896e757fbad88c24ac666a11694a343e899b88d307fcfc73b9f7cb369d176e59f6e9dd813a1b0ea5331ff5a02eb77540f0181e3a8d5f502607d597783700cb3ea0fdf6c10d6ce2ca6772c4a1d3911e41e1877b52450c2d483c77caef77bb44d291be2c41a0ccafe18eb871c9826d8dc44cd9806bfaed8f8439a051003eaf1f224079f11da7512950c5101b59a4f9b2a383b4aef0199eaa84a20cb53db5ac9e9778c7e7f6c12d8077311963d880b1eee05b3c84ae3e6ce636dcac65f8c640341d4c4062fa0b48b36e035ea98cfcce0531c86ca4d1daefa1fad1d07cded67bc3bfcb856155a47f7cb4a3d419efa4e8ffe0d737f978c9bbb4ecdc036bdc0d404d92e9eaeb055defab87ce213e54f4b4ee39aa7400e19c5331c219d75765107b24f3d82c0920e3584b9913f86d5c0f4dca1cc5125aa4d928889ea256954e158330621e784fff56d9ef09b8d51657403f8fa3198a772502a994e69c72b2300d1d0729e25c0b7641ed1d3ee8f94db7f61c1887a256bafdb28f42df1ae419ade5128de2525089e530707666ddae652802ee95877a02a7893e800bce5e307b8a0ee9510c918429dd68df02b910899e1f62ba497fa31cded22dd4756b584caca3384394deea986777b3ac7bca22b3f108568cce4485fdc8b7baa8134f2cdfa425015bf16db896b0817e7fea52fad5ad2aaef1002c145ec6d1ded1afacd1b59acb9259bbe0c5a1f6a5b5d0ac812a19b5c9f8f299597828463d7bd6d831035e9945499073932b2304940c3998d325027470cf001def87d26f8ed5dc3343cfef95ec44000bdf37d9fd1f2e4868f681c110aaeee2a5f06262c4e814b0ce493a0db30af7d7e709119f0a220d8ede415d06842b7a414b90c57b2f13734e60c736b43fdacf54761f617fd7e508c12485ff109438656a638e0a708b074480a67e3c65269c28ce2d467570c3b4f6215a633112d24f1b2d2b32840cd66ed986174f20db7905daa78cdb3ddf6e7faecdc5f413da062f10b617d1b86af452653330b56a83b42fb775af1ebe771b6018d3f8e85f3839491eb3ff75226796ca2018f49c6fb00352d73d8878e3fc5597ff6f48d0c6459e2b8d714a171d5a5035029c07793d80128c0a3d1fe599eb1251863f44eb8faceb86134ed24c0fcff4ef83be346aa3a1e15aec82bfe964f93803fe5280d717e9df4ad533f0d3173152c6cae33534f9ed9d2deb3c758feb5d7822d7b0388c7a7862a7bfe601817d1270a6854f50f818b46b94a6af3523bcce9c126bbed774cfa4103f2899713b31cc24a11d816fc6dc846eb9bb95cc72064a6fe1d1338a6f5352cc66dba87146c0eca5c66e8b07e6d5f352ef6c22571d9e9f83285bf6c500387e937f21f33f2f31e8dd20fee1ace0e82d87fb419ea87a22325024d2dbaa0e53dfabb70e5cfd291165f049f014a25718cab248226fc091094c34ffa932d20515fddf760d10bd3b95b2de836c74caa12d72e8d67f224024af74c203d17e562a2d3e987908d87195e362a2dcf9997e61cb33d1fce204ac8ad2b051735f7e113f4040cc804becaed4482bcb06d5ae0f529cb2a561949114c6751dd7089777746f4ebfb786208495fda8318af409bfe13bdb03bdac4823893ca481b68cd02e1285fa9d252aa4c48ebd062c4d71eeaef297645590544f2478b9152eeb52f97677e197ed3f5d9c51863ee4cb2284929f7cc46d165db44eb2a182d5db1ea3553cdc64fd6a1ecd20b7b31c88bda2f666bccdfbc4785962c3981290af09ddd5e213779bf17c65ed65a52cb2eabd39a4b57959e6737a6bc4852b9372a9d51ae66b4a87d369eb09dd655da2549defbb1e85b07202e09ef3ba2d89fbeb0b04328d512278ee7b33a2099c86f3f89fa3c727470223c0bde15e4feeb7e7301cfec2bba0f271cd99f47ce0a0e189cef2698a818c440a70ef53a393cdc46592d09dc3ca762e8ec5a83ade32d2dea82210d542d9a4aef0b1ef613bc1c3306a3fe8ba8311234e9b70e8c699c0eb1a7f890ca9613a3b0488b627ebe811bd64bdf3a64e204bc46f761a71339065984ff78fea67f5b6362eab71df251b1a9a01d1718c6cfe0a34db2bf73ccfce1daa40442ea54671a3e2a624f519690ec57c65eb7fdb24d01eb53e218d9fe4a771fc44c3446cd3aaeb6751ea442060261183322722fd5aaf0ad83fd8ad393fe1477cf662546f5fab897173316dc6bcda75ffbc7b30e4210807054ac0ba71740e25bd5cb92dd3d825216efe13511c033ee3a83501263aefd8a9f2e11087a059986c9cebe108960d38c2c053499a985c3caf507172831b276923b46e49207eced9a0a47af00b55bf11204f30cfbc3881015d5523034796d2d91457fad92de077da449a34d64d928b977cbaa1a066a4bab38bd597a542395e1cb0a84c43d906f47c23fe6c48f62f714505f9c3c212dd26a534f6ad067c9db1708d3daa8dfa2186bb3b9f200f89a3175107ba2617070afa7c0641238cf8a05bd341c2053c2f824e93b389fb12e19c2896bebdb7d585d32038f69674fde87358269461ef3372315fbdb27319611bfe2fdf31aa550445c396f42ffa1e89483f7e02f0b64dd82ec7e58a0b2da2c8f3fe97276ec3c3369522dad6d1bdcffd6827b1be1734e68a04dd71e09498c4f7ebe364948e235cc783f21c2e2d98205e8addb0f3a40d4826b385a239a20d02c61062d645eee4266139cf7278f73aa0660b0f883c6252b82f4aefda9a9de4592b92fb6e0a10268bcb870f4ec7b8fc8164e33c6537387f2c7f4a5b21ab647d5f6697abc3dfa8f4b2cd332caa9839f863ff1983e34bcb2488996a4dbb5988139edf2741e09b153c2e6c7d5b6d488e6c095fe8442628844655a70fcda4cb6710b0ac899201961e564abb541b6a50411837eec92fbc646b2e33d256c97395d1369e04d850690e6cc31d5112a74c6a47c4548afd78ec2a141cd65c311581a49e704e4d2e9ea111f5a6eb42f197c6aaf6610922a428cea5dcace540d679da5cd32681046a4bd2ad15692f2aba74f39373c6cfe7e546827f6cce0c0a00b3d3539b240a84bdda893a75173ea5fd705018295e7843ba317aed4b29b4d0e2addd982653f3ce49e324a9ab6066193b4e1ece32d2e57f5682c417fd0147036bd0a7ab54a4dd8a0af07527f78bc8c707a697c10bd5ffe281cf04e784074dd34bf1f65b4cb4f86f44d8a5038b0be434d1fb5f08beab16e675fa2af4e310054c4cf525a1e2c34246e263dba2d325f6bc5bba712090feb5f2e5e7beb24e5aaa13b258879e5ead612e1e3a74b26e3ef046af7d6eb88c7e4d0aa299c0e63c175107829962780977c3ee2e14c9e3e44a23dd573b8187e5c1fd36ed7a61f2d3fae31ac5302b7a24f183fabeccbf8d6394827b23f6b2c0f358146987b272770ef49c915c0a32b6168d37dbd61525c429c1c241cd97b8035db9ad42b43bdd89f0c2ff6d7dd2fa5b45dc277c324158e9a11e5049f3cd84af55e6516be5fb913bee81fa7ae6bd3ea366f7cad162cb17523b59c8caf577fec53374f36867bbf429254fb27c4ca9d039de0e9c00555804f3dbba787792ce6afd85ed1b036edd051766332b3f14bc85fced07d6b9e1e3f43b2b6edb9c4b8bbceeae64283583579b14120f9531177d65e5adf0555daeb9c767b6f127dd405ce0c196b2ac8ab1f1863fd6e6c86a945ad6f6dc2b4d644c8324d6226a73ce52efe1e0e402c7ac22444d4e3a39e1239b0bf6e8a8967e86d8ef1070592ea6373", 0x1000) [ 1872.782021][T16820] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1872.956380][T28178] iommufd_mock iommufd_mock1: Adding to iommu group 0 04:11:21 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00\x00'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x5, 0x10001, 0x9, 0x40, 0x80, 0x1, 0x6}, 0x48) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xc) 04:11:21 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x168, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'sit0\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 04:11:21 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2c92b89e) 04:11:21 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r1}) 04:11:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {0x0}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1875.258614][T28151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1875.359280][T28202] x_tables: duplicate underflow at hook 3 [ 1875.566966][T28204] iommufd_mock iommufd_mock1: Adding to iommu group 0 04:11:22 executing program 0: io_uring_setup(0x6af3, &(0x7f0000000440)={0x0, 0x14bc, 0x8}) 04:11:22 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) 04:11:22 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2c92b89e) 04:11:22 executing program 0: io_setup(0x34c780e2, &(0x7f0000000000)) 04:11:22 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00\x00'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:22 executing program 3: msgctl$IPC_SET(0x0, 0x1, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 04:11:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {0x0}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:22 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x0, 0x0, 0x7}) 04:11:22 executing program 0: getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) syz_clone(0x40000000, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0) 04:11:22 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:22 executing program 2: syz_clone(0x38021100, 0x0, 0x0, 0x0, 0x0, 0x0) 04:11:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046207, 0x0) 04:11:23 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14}, 0xffffffffffffff52}}, 0x0) 04:11:23 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x826900, 0x0) [ 1876.847755][T28255] binder: 28254:28255 ioctl c00c620f 0 returned -14 04:11:23 executing program 3: rt_sigqueueinfo(0x0, 0x1e, &(0x7f0000000000)={0x0, 0x0, 0x9}) 04:11:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="11000000120001"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@getaddr={0x14}, 0x14}, 0x8}, 0x0) 04:11:23 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 1877.051441][T26359] nci: nci_add_new_protocol: the target found does not have the desired protocol 04:11:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:23 executing program 3: clock_gettime(0x2b9f8f388ca14eb8, 0x0) 04:11:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) 04:11:23 executing program 0: msgrcv(0x0, 0x0, 0xc1, 0x0, 0x1800) 04:11:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETNSID={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@NETNSA_PID={0x8}]}, 0x1c}}, 0x0) 04:11:23 executing program 3: io_setup(0x800, &(0x7f00000000c0)) [ 1877.259489][T28279] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:11:26 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:26 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000100)={@remote, @multicast, @void, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfe00, 0x0, 0x21, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @generic={0x0, 0x2}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c61d51", 0x0, "f8a930"}}}}}}, 0x0) 04:11:26 executing program 4: setreuid(0x0, 0xee01) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000002d0001"], 0x18}}, 0x0) 04:11:26 executing program 0: mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x0, 0x0) 04:11:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) 04:11:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1879.859675][T28256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:11:26 executing program 3: r0 = socket$inet6(0x11, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x2}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000dc0), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x24861000}, 0xc, &(0x7f0000000740)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES8=r0], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20008800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000cc0)=0xffffffffffffffff, 0x4) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000800), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r3, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}}, 0x4000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="049aa140e697827e4fb55c6a0d54efba", 0x10) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000cc0)=0xffffffffffffffff, 0x4) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000500)=0x80000000, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000cc0)=0xffffffffffffffff, 0x4) pipe2$watch_queue(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept4$inet6(r7, &(0x7f0000000200), &(0x7f0000000240)=0x1c, 0x80000) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000440)={0x1, 0x0, {0x2, 0x14, 0x17, 0xa, 0x9, 0x5, 0x6, 0x7a, 0xfffffffffffffffc}}) io_setup(0xe9f8, &(0x7f0000000100)) 04:11:26 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x80247008, &(0x7f0000000040)) 04:11:26 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x4008700c, 0x0) 04:11:26 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x80287010, &(0x7f0000000040)) 04:11:27 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffeffff) 04:11:27 executing program 0: r0 = socket(0x2, 0x3, 0x0) getsockopt$inet_int(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) 04:11:27 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:27 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @val, {@ipv6}}, 0x0) 04:11:27 executing program 2: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 04:11:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 04:11:27 executing program 0: clock_getres(0x0, &(0x7f0000000100)) clock_getres(0xe, &(0x7f0000000000)) 04:11:27 executing program 4: mlock(&(0x7f0000ff1000/0x4000)=nil, 0x4000) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x2}, 0x10) mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) 04:11:27 executing program 2: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb, 0x10, 0xffffffffffffffff, 0x0) 04:11:27 executing program 3: mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x3) 04:11:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r0, &(0x7f0000000180), &(0x7f00000011c0)=0x1001) 04:11:28 executing program 0: clock_getres(0x0, &(0x7f0000000100)) clock_getres(0xe, &(0x7f0000000000)) 04:11:28 executing program 2: r0 = socket(0x1c, 0x20000003, 0x0) sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x10d) 04:11:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x11, &(0x7f0000000180), 0x1) 04:11:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x98acbc51a52516c, &(0x7f0000000280)={0x10, 0x2}, 0x10) 04:11:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) getsockname$inet(r1, 0x0, &(0x7f00000000c0)) 04:11:28 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:28 executing program 0: clock_getres(0x0, &(0x7f0000000100)) clock_getres(0xe, &(0x7f0000000000)) 04:11:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:28 executing program 3: r0 = socket(0x1, 0x5, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) 04:11:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 04:11:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x41, &(0x7f00000000c0), 0x4) 04:11:28 executing program 0: clock_getres(0x0, &(0x7f0000000100)) clock_getres(0xe, &(0x7f0000000000)) [ 1882.398476][T16696] nci: nci_add_new_protocol: the target found does not have the desired protocol 04:11:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x41, &(0x7f00000000c0), 0x4) 04:11:29 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000001080)={@random="e795147c4150", @random="1627cc5da2bf", @val, {@ipv4}}, 0x0) [ 1882.853752][T28388] nci: nci_start_poll: failed to set local general bytes 04:11:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="99", 0x1}], 0x1}, 0x0) 04:11:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0, 0xfe23}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 04:11:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x41, &(0x7f00000000c0), 0x4) 04:11:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x401c5820, &(0x7f0000000080)={'syztnl0\x00', 0x0}) 04:11:31 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x40086602, &(0x7f0000000080)={'syztnl0\x00', 0x0}) 04:11:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x41, &(0x7f00000000c0), 0x4) 04:11:31 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x1e, @private0, @ipv4}}) 04:11:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000600000007e"], 0x28}}, 0x0) [ 1885.014226][T28373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:11:31 executing program 2: pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RCREATE(r0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x7, &(0x7f0000000280)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup3(r4, r3, 0x0) rt_sigreturn() write$FUSE_DIRENT(r2, 0x0, 0x0) write$P9_RCREATE(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) write$P9_RLINK(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) [ 1885.095354][T28422] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1885.131498][T28422] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1885.255706][T28422] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:11:31 executing program 3: pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x7, &(0x7f0000000280)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup3(r4, r3, 0x0) rt_sigreturn() write$FUSE_DIRENT(r2, 0x0, 0x0) write$P9_RCREATE(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) 04:11:32 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x21, 0x0, &(0x7f0000000080)) 04:11:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001d00)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred], 0x20}, 0x0) 04:11:32 executing program 4: r0 = msgget$private(0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000002c0)) 04:11:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:32 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000600000007e"], 0x28}}, 0x0) 04:11:32 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r2, r1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) r6 = dup3(r0, r5, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) 04:11:32 executing program 3: pipe(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 04:11:32 executing program 4: io_setup(0x0, &(0x7f0000000300)) 04:11:33 executing program 3: timer_create(0x7, &(0x7f0000001100)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000001140)) 04:11:33 executing program 2: pipe2$9p(&(0x7f0000000140), 0x80800) 04:11:33 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x40) 04:11:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) 04:11:33 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 04:11:33 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file1\x00') 04:11:33 executing program 2: accept4(0xffffffffffffffff, 0x0, 0x0, 0x80c00) 04:11:33 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:33 executing program 3: pipe(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) 04:11:33 executing program 2: r0 = msgget(0x3, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x800) 04:11:33 executing program 0: semget(0x0, 0x1, 0x282) 04:11:33 executing program 4: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) faccessat(r0, &(0x7f0000000080)='./file0\x00', 0x0) 04:11:33 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') 04:11:33 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 04:11:33 executing program 3: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) sendmsg$netlink(r2, &(0x7f0000007700)={0x0, 0x0, 0x0}, 0x0) 04:11:33 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) 04:11:34 executing program 0: fchownat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) 04:11:34 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x541b, 0x0) 04:11:34 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:34 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f00000001c0)={0x8}) 04:11:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="0000000014000000000000000100000001"], 0x38}, 0x0) 04:11:34 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) 04:11:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:34 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) 04:11:34 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:35 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="0000000014000000000000000100000001"], 0x38}, 0x0) 04:11:35 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="0000000014000000000000000100000001"], 0x38}, 0x0) [ 1889.077664][T26359] nci: nci_add_new_protocol: the target found does not have the desired protocol 04:11:36 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, 0x0, 0x0) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="0000000014000000000000000100000001"], 0x38}, 0x0) 04:11:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x0) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1890.120268][T26314] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1891.251253][T28609] nci: nci_start_poll: failed to set local general bytes 04:11:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x0) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x0) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1891.863447][T28554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:11:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x0) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1893.522232][T28600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:11:40 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, 0x0, 0x0) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x0) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x0) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x0) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:41 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, 0x0, 0x0) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x0) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:45 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(0xffffffffffffffff, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x0) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x0) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r4, 0x1) recvmsg(r4, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r4, 0x1) recvmsg(r4, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r4, 0x1) recvmsg(r4, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r4, 0x1) recvmsg(r4, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:48 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(0xffffffffffffffff, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r4, 0x1) recvmsg(r4, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r4, 0x1) recvmsg(r4, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r4, 0x1) recvmsg(r4, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x0) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x0) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:52 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:52 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(0xffffffffffffffff, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:54 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(0xffffffffffffffff, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r4, 0x1) recvmsg(r4, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:54 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:56 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:57 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:59 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:11:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:11:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1915.903834][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 04:12:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1917.060753][T28931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:12:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:03 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:05 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1919.765173][T16698] nci: nci_add_new_protocol: the target found does not have the desired protocol 04:12:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1920.134244][T28992] nci: nci_start_poll: failed to set local general bytes 04:12:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1922.625925][T28972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:12:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:09 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:09 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:11 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:12 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:12 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:13 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, 0x0, 0x0) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1927.820708][T28664] nci: nci_add_new_protocol: the target found does not have the desired protocol 04:12:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1928.785449][T29109] nci: nci_start_poll: failed to set local general bytes 04:12:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:15 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1930.105206][T29089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:12:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:17 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, 0x0, 0x0) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:17 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:21 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:22 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:23 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, 0x0, 0x0) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:23 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:23 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1937.229226][T16698] nci: nci_add_new_protocol: the target found does not have the desired protocol 04:12:24 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:24 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, 0x0, 0x0) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1938.433366][T16698] nci: nci_add_new_protocol: the target found does not have the desired protocol 04:12:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1940.779090][T29226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1940.832957][T29276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:12:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:27 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:27 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, 0x0, 0x0) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:30 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:33 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:33 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:34 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:35 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:35 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1948.432768][T29414] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1949.445474][T16696] nci: nci_add_new_protocol: the target found does not have the desired protocol 04:12:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1952.033580][T29441] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1952.066788][T29446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:12:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:40 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:40 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:41 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:43 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1957.136847][T28664] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1958.558836][T29520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:12:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:45 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:45 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:45 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1958.859213][ T11] nci: nci_add_new_protocol: the target found does not have the desired protocol 04:12:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:46 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1959.754512][T29596] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1960.154042][T29558] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:12:46 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:47 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 04:12:49 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 1966.603677][T29670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:12:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:54 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 04:12:54 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 04:12:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 04:12:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1971.549049][T29724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:12:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 04:12:59 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:12:59 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:12:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 04:12:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1972.678692][T29761] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1975.675266][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 04:13:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x0) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:02 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:04 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:04 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:08 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:08 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:08 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1977.190862][T29814] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1982.646801][T29875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:13:10 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1984.351182][ T2937] nci: nci_add_new_protocol: the target found does not have the desired protocol 04:13:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:12 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1987.070412][T29922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:13:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:13 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:15 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:15 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:15 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:16 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 1990.487911][ T8159] nci: nci_add_new_protocol: the target found does not have the desired protocol 04:13:17 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1990.774095][T30057] nci: nci_start_poll: failed to set local general bytes 04:13:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:17 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:18 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1992.022143][T30034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:13:18 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:18 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:19 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:19 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x0, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:19 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1993.812521][ T2937] nci: nci_add_new_protocol: the target found does not have the desired protocol 04:13:20 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x0, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:20 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:20 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1993.968381][T30161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:13:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:21 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x0, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:22 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1996.432085][ C0] hrtimer: interrupt took 26520 ns [ 1997.034444][T30183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 04:13:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {0x0}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:25 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x0, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {0x0}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {0x0}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {0x0}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:27 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00\x00'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {0x0}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:29 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x0, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:29 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x0, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {0x0}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {0x0}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:30 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x0, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:31 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x0, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:31 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00\x00'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:32 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x0, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:32 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x0, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:32 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x0, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:32 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {0x0}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {0x0}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:32 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x0, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:32 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00\x00'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 2007.476535][T30396] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR 04:13:34 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {0x0}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {0x0}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {0x0}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {0x0}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {0x0}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 2007.499360][T30400] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR 04:13:38 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:13:38 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x0, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) 04:13:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:13:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 2010.530702][T30449] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 2013.291901][T28792] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 2037.032177][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 04:14:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:14:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) 04:14:23 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00\x00'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:14:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 2056.801185][ T8159] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.200494][ T8159] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:14:25 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:14:25 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:14:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 2059.599943][ T8159] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2060.167541][ T8159] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:14:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xaa43f17c667f6438, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="184032e8300daffc27bc00000500f89a319cdc1b2f810000182c0000", @ANYRES32, @ANYBLOB="000000009a00000085100000000000008510000008000000186100000e0000000000000005000000ff7f0e0001800000185500000a00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x18, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x1}, 0x10, 0xffffffffffffffff}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000600)=0x1) getrlimit(0xa, &(0x7f0000000280)) socket$inet(0x2, 0x3, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x281}, 0x40000110) ftruncate(0xffffffffffffffff, 0x12081ff) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x4003fe) ppoll(0x0, 0x2d, &(0x7f0000000180), 0x0, 0x0) [ 2062.030483][ T8159] hsr_slave_0: left promiscuous mode [ 2062.036825][ T8159] hsr_slave_1: left promiscuous mode [ 2062.044549][ T8159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2062.052451][ T8159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2062.062661][ T8159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2062.070344][ T8159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2062.079112][ T8159] team0: left allmulticast mode [ 2062.083969][ T8159] team_slave_0: left allmulticast mode [ 2062.090163][ T8159] team_slave_1: left allmulticast mode [ 2062.097797][ T8159] bridge0: port 3(team0) entered disabled state [ 2062.106953][ T8159] bridge_slave_1: left allmulticast mode [ 2062.112717][ T8159] bridge_slave_1: left promiscuous mode [ 2062.118600][ T8159] bridge0: port 2(bridge_slave_1) entered disabled state [ 2062.126953][ T8159] bridge_slave_0: left allmulticast mode [ 2062.132805][ T8159] bridge_slave_0: left promiscuous mode [ 2062.138883][ T8159] bridge0: port 1(bridge_slave_0) entered disabled state [ 2062.155250][ T8159] veth1_macvtap: left promiscuous mode [ 2062.162828][ T8159] veth0_macvtap: left promiscuous mode [ 2062.169188][ T8159] veth1_vlan: left promiscuous mode [ 2062.177636][ T8159] veth0_vlan: left promiscuous mode [ 2062.862440][ T8159] team_slave_1 (unregistering): left promiscuous mode [ 2062.876388][ T8159] team0 (unregistering): Port device team_slave_1 removed [ 2062.892713][ T8159] team_slave_0 (unregistering): left promiscuous mode [ 2062.903500][ T8159] team0 (unregistering): Port device team_slave_0 removed [ 2062.926637][ T8159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2062.947462][ T8159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2063.031609][ T8159] bond0 (unregistering): Released all slaves 04:14:33 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:14:33 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 04:14:33 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400000000012"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x0, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) [ 2098.482858][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 04:15:20 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00'], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x24, 0x0) write$nci(r4, 0x0, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 2159.921746][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.668406][ T29] INFO: task kworker/1:5:5133 blocked for more than 143 seconds. [ 2165.676190][ T29] Not tainted 6.6.0-rc6-syzkaller-00355-gfe3cfe869d5e #0 [ 2165.684000][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2165.692922][ T29] task:kworker/1:5 state:D stack:23152 pid:5133 ppid:2 flags:0x00004000 [ 2165.702595][ T29] Workqueue: events nfc_urelease_event_work [ 2165.708663][ T29] Call Trace: [ 2165.711950][ T29] [ 2165.714888][ T29] __schedule+0xee1/0x5a10 [ 2165.719584][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2165.725590][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2165.731738][ T29] ? io_schedule_timeout+0x150/0x150 [ 2165.737037][ T29] ? reacquire_held_locks+0x4b0/0x4b0 [ 2165.742611][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2165.747828][ T29] ? lockdep_hardirqs_on+0x7d/0x100 [ 2165.753354][ T29] schedule+0xe7/0x1b0 [ 2165.757696][ T29] schedule_preempt_disabled+0x13/0x20 [ 2165.763450][ T29] __mutex_lock+0x969/0x1340 [ 2165.768200][ T29] ? nfc_urelease_event_work+0x173/0x310 [ 2165.773860][ T29] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2165.779622][ T29] ? mark_held_locks+0x9f/0xe0 [ 2165.784420][ T29] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 2165.790343][ T29] ? klist_next+0x2a5/0x520 [ 2165.794843][ T29] ? nfc_urelease_event_work+0x173/0x310 [ 2165.800849][ T29] nfc_urelease_event_work+0x173/0x310 [ 2165.806525][ T29] ? nfc_get_device+0xc0/0xc0 [ 2165.811436][ T29] process_one_work+0x884/0x15c0 [ 2165.816455][ T29] ? lock_sync+0x190/0x190 [ 2165.821131][ T29] ? init_worker_pool+0x770/0x770 [ 2165.826220][ T29] ? assign_work+0x1a0/0x240 [ 2165.831151][ T29] worker_thread+0x8b9/0x1290 [ 2165.835914][ T29] ? __kthread_parkme+0x14b/0x220 [ 2165.841066][ T29] ? process_one_work+0x15c0/0x15c0 [ 2165.846344][ T29] kthread+0x33c/0x440 [ 2165.850571][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2165.855795][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 2165.861564][ T29] ret_from_fork+0x45/0x80 [ 2165.866089][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 2165.871986][ T29] ret_from_fork_asm+0x11/0x20 [ 2165.876803][ T29] [ 2165.880009][ T29] INFO: task kworker/u4:15:28792 blocked for more than 143 seconds. [ 2165.888125][ T29] Not tainted 6.6.0-rc6-syzkaller-00355-gfe3cfe869d5e #0 [ 2165.895676][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2165.904716][ T29] task:kworker/u4:15 state:D stack:26304 pid:28792 ppid:2 flags:0x00004000 [ 2165.914295][ T29] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 2165.919961][ T29] Call Trace: [ 2165.923259][ T29] [ 2165.926212][ T29] __schedule+0xee1/0x5a10 [ 2165.930788][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2165.936789][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2165.942884][ T29] ? io_schedule_timeout+0x150/0x150 [ 2165.948396][ T29] ? __mutex_lock+0x964/0x1340 [ 2165.953204][ T29] schedule+0xe7/0x1b0 [ 2165.957315][ T29] schedule_preempt_disabled+0x13/0x20 [ 2165.963097][ T29] __mutex_lock+0x969/0x1340 [ 2165.967854][ T29] ? nfc_targets_found+0xe8/0x3d0 [ 2165.973116][ T29] ? __wake_up_klogd.part.0+0x99/0xf0 [ 2165.978592][ T29] ? vprintk_emit+0x123/0x5f0 [ 2165.983300][ T29] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2165.989079][ T29] ? nfc_targets_found+0xe8/0x3d0 [ 2165.994138][ T29] nfc_targets_found+0xe8/0x3d0 [ 2165.999193][ T29] ? nci_add_new_protocol+0x29d/0x780 [ 2166.004592][ T29] nci_ntf_packet+0x1478/0x2ce0 [ 2166.009915][ T29] ? nci_clear_target_list+0x60/0x60 [ 2166.015247][ T29] ? nfc_send_to_raw_sock+0x10e/0x220 [ 2166.020980][ T29] ? lockdep_hardirqs_on+0x30/0x100 [ 2166.026205][ T29] ? nci_rx_work+0x84/0x320 [ 2166.030874][ T29] ? do_raw_read_unlock+0x44/0xe0 [ 2166.035959][ T29] ? _raw_read_unlock+0x28/0x40 [ 2166.040914][ T29] ? nfc_send_to_raw_sock+0x10e/0x220 [ 2166.046334][ T29] nci_rx_work+0x17f/0x320 [ 2166.050932][ T29] process_one_work+0x884/0x15c0 [ 2166.055925][ T29] ? batadv_nc_process_nc_paths.part.0+0x3e0/0x3e0 [ 2166.063276][ T29] ? init_worker_pool+0x770/0x770 [ 2166.068635][ T29] ? assign_work+0x1a0/0x240 [ 2166.073343][ T29] worker_thread+0x8b9/0x1290 [ 2166.078327][ T29] ? __kthread_parkme+0x14b/0x220 [ 2166.083468][ T29] ? process_one_work+0x15c0/0x15c0 [ 2166.089033][ T29] kthread+0x33c/0x440 [ 2166.093116][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2166.098654][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 2166.104331][ T29] ret_from_fork+0x45/0x80 [ 2166.109303][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 2166.114954][ T29] ret_from_fork_asm+0x11/0x20 [ 2166.119974][ T29] [ 2166.123013][ T29] INFO: task syz-executor.1:30425 blocked for more than 143 seconds. [ 2166.131427][ T29] Not tainted 6.6.0-rc6-syzkaller-00355-gfe3cfe869d5e #0 [ 2166.139055][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2166.147717][ T29] task:syz-executor.1 state:D stack:25248 pid:30425 ppid:5074 flags:0x00004006 [ 2166.157064][ T29] Call Trace: [ 2166.160412][ T29] [ 2166.163378][ T29] __schedule+0xee1/0x5a10 [ 2166.167812][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2166.174000][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2166.180250][ T29] ? exit_to_user_mode_prepare+0x11f/0x240 [ 2166.186098][ T29] ? io_schedule_timeout+0x150/0x150 [ 2166.191669][ T29] ? __mutex_lock+0x964/0x1340 [ 2166.196454][ T29] schedule+0xe7/0x1b0 [ 2166.200594][ T29] schedule_preempt_disabled+0x13/0x20 [ 2166.206066][ T29] __mutex_lock+0x969/0x1340 [ 2166.210810][ T29] ? nfc_unregister_device+0x1a2/0x330 [ 2166.216548][ T29] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2166.222201][ T29] ? nfc_llcp_local_put.part.0+0x88/0xb0 [ 2166.227844][ T29] ? __kmem_cache_free+0xb8/0x2f0 [ 2166.233013][ T29] ? nfc_llcp_local_put.part.0+0x8d/0xb0 [ 2166.238930][ T29] ? nfc_unregister_device+0x1a2/0x330 [ 2166.244401][ T29] nfc_unregister_device+0x1a2/0x330 [ 2166.249842][ T29] ? virtual_nci_open+0x10/0x10 [ 2166.254805][ T29] virtual_ncidev_close+0x51/0xa0 [ 2166.260008][ T29] __fput+0x3f7/0xa70 [ 2166.264173][ T29] task_work_run+0x14d/0x240 [ 2166.268986][ T29] ? task_work_cancel+0x30/0x30 [ 2166.273903][ T29] ? do_raw_spin_unlock+0x173/0x230 [ 2166.279198][ T29] do_exit+0xa92/0x2a20 [ 2166.283432][ T29] ? get_signal+0x935/0x2790 [ 2166.288206][ T29] ? mm_update_next_owner+0x840/0x840 [ 2166.293636][ T29] ? do_raw_spin_lock+0x12e/0x2b0 [ 2166.298783][ T29] ? spin_bug+0x1d0/0x1d0 [ 2166.303170][ T29] do_group_exit+0xd4/0x2a0 [ 2166.307729][ T29] get_signal+0x23ba/0x2790 [ 2166.312523][ T29] ? exit_signals+0x920/0x920 [ 2166.317433][ T29] ? vm_mmap_pgoff+0xf3/0x3b0 [ 2166.322196][ T29] arch_do_signal_or_restart+0x90/0x7f0 [ 2166.327808][ T29] ? get_sigframe_size+0x20/0x20 [ 2166.332955][ T29] ? ksys_mmap_pgoff+0x85/0x5b0 [ 2166.337858][ T29] exit_to_user_mode_prepare+0x11f/0x240 [ 2166.343574][ T29] syscall_exit_to_user_mode+0x1d/0x60 [ 2166.349859][ T29] do_syscall_64+0x44/0xb0 [ 2166.354303][ T29] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2166.360275][ T29] RIP: 0033:0x7f921e87cb23 [ 2166.364800][ T29] RSP: 002b:00007ffe280beff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2166.373445][ T29] RAX: 00007f921cdff000 RBX: 00007f921e99c428 RCX: 00007f921e87cb23 [ 2166.381571][ T29] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000000000000 [ 2166.389856][ T29] RBP: 0000000000000005 R08: 00000000000000dd R09: 0000000000000000 [ 2166.397981][ T29] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f921e99c390 [ 2166.405991][ T29] R13: 000000000000112c R14: 00007f921e99c390 R15: 00007ffe280bf118 [ 2166.414201][ T29] [ 2166.417565][ T29] INFO: task syz-executor.2:30495 blocked for more than 144 seconds. [ 2166.425780][ T29] Not tainted 6.6.0-rc6-syzkaller-00355-gfe3cfe869d5e #0 [ 2166.433500][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2166.442349][ T29] task:syz-executor.2 state:D stack:27696 pid:30495 ppid:5073 flags:0x00004006 [ 2166.451702][ T29] Call Trace: [ 2166.454998][ T29] [ 2166.458256][ T29] __schedule+0xee1/0x5a10 [ 2166.462727][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2166.469231][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2166.475269][ T29] ? io_schedule_timeout+0x150/0x150 [ 2166.480639][ T29] ? __mutex_lock+0x964/0x1340 [ 2166.485445][ T29] schedule+0xe7/0x1b0 [ 2166.489663][ T29] schedule_preempt_disabled+0x13/0x20 [ 2166.495140][ T29] __mutex_lock+0x969/0x1340 [ 2166.499830][ T29] ? genl_rcv_msg+0x577/0x800 [ 2166.504522][ T29] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2166.510530][ T29] ? stack_trace_save+0x96/0xd0 [ 2166.515583][ T29] ? filter_irq_stacks+0x90/0x90 [ 2166.520887][ T29] ? __lock_acquire+0x182f/0x5de0 [ 2166.525951][ T29] ? __radix_tree_lookup+0x21f/0x2c0 [ 2166.531483][ T29] ? genl_rcv_msg+0x577/0x800 [ 2166.536181][ T29] genl_rcv_msg+0x577/0x800 [ 2166.540927][ T29] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 2166.546834][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2166.552970][ T29] netlink_rcv_skb+0x16b/0x440 [ 2166.557782][ T29] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 2166.563724][ T29] ? netlink_ack+0x1370/0x1370 [ 2166.568720][ T29] ? down_write_killable+0x250/0x250 [ 2166.574040][ T29] ? netlink_deliver_tap+0x1a0/0xd00 [ 2166.579990][ T29] genl_rcv+0x28/0x40 [ 2166.584001][ T29] netlink_unicast+0x536/0x810 [ 2166.588921][ T29] ? netlink_attachskb+0x880/0x880 [ 2166.594046][ T29] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2166.600021][ T29] ? __phys_addr_symbol+0x30/0x70 [ 2166.605071][ T29] ? __check_object_size+0x323/0x730 [ 2166.610577][ T29] netlink_sendmsg+0x93c/0xe40 [ 2166.616146][ T29] ? netlink_unicast+0x810/0x810 [ 2166.621755][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2166.627109][ T29] ? netlink_unicast+0x810/0x810 [ 2166.632249][ T29] __sock_sendmsg+0xd5/0x180 [ 2166.636890][ T29] __sys_sendto+0x255/0x340 [ 2166.641544][ T29] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2166.646978][ T29] ? do_user_addr_fault+0x5ae/0x1000 [ 2166.652489][ T29] __x64_sys_sendto+0xe0/0x1b0 [ 2166.657279][ T29] ? syscall_enter_from_user_mode+0x26/0x80 [ 2166.663330][ T29] do_syscall_64+0x38/0xb0 [ 2166.667793][ T29] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2166.673942][ T29] RIP: 0033:0x7f811347e7dc [ 2166.678698][ T29] RSP: 002b:00007f8111fdbf60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2166.687157][ T29] RAX: ffffffffffffffda RBX: 00007f8111fdc050 RCX: 00007f811347e7dc [ 2166.695800][ T29] RDX: 000000000000001c RSI: 00007f8111fdc0a0 RDI: 0000000000000005 [ 2166.704028][ T29] RBP: 0000000000000000 R08: 00007f8111fdbfb4 R09: 000000000000000c [ 2166.712083][ T29] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2166.720243][ T29] R13: 00007f8111fdc008 R14: 00007f8111fdc0a0 R15: 0000000000000000 [ 2166.728818][ T29] [ 2166.731894][ T29] INFO: task syz-executor.2:30519 blocked for more than 144 seconds. [ 2166.740159][ T29] Not tainted 6.6.0-rc6-syzkaller-00355-gfe3cfe869d5e #0 [ 2166.747715][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2166.756699][ T29] task:syz-executor.2 state:D stack:28432 pid:30519 ppid:5073 flags:0x00004006 [ 2166.766125][ T29] Call Trace: [ 2166.769494][ T29] [ 2166.772447][ T29] __schedule+0xee1/0x5a10 [ 2166.776868][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2166.783147][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2166.789323][ T29] ? exit_to_user_mode_prepare+0x11f/0x240 [ 2166.795214][ T29] ? io_schedule_timeout+0x150/0x150 [ 2166.800833][ T29] ? __mutex_lock+0x964/0x1340 [ 2166.805617][ T29] schedule+0xe7/0x1b0 [ 2166.809821][ T29] schedule_preempt_disabled+0x13/0x20 [ 2166.815301][ T29] __mutex_lock+0x969/0x1340 [ 2166.820033][ T29] ? nfc_unregister_device+0x1a2/0x330 [ 2166.825646][ T29] ? slab_free_freelist_hook+0x114/0x1e0 [ 2166.831322][ T29] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2166.836881][ T29] ? nfc_llcp_local_put.part.0+0x88/0xb0 [ 2166.842652][ T29] ? __kmem_cache_free+0xb8/0x2f0 [ 2166.847689][ T29] ? nfc_llcp_local_put.part.0+0x8d/0xb0 [ 2166.853369][ T29] ? nfc_unregister_device+0x1a2/0x330 [ 2166.859013][ T29] nfc_unregister_device+0x1a2/0x330 [ 2166.864317][ T29] ? virtual_nci_open+0x10/0x10 [ 2166.869255][ T29] virtual_ncidev_close+0x51/0xa0 [ 2166.874331][ T29] __fput+0x3f7/0xa70 [ 2166.878609][ T29] task_work_run+0x14d/0x240 [ 2166.883436][ T29] ? task_work_cancel+0x30/0x30 [ 2166.888701][ T29] get_signal+0x106f/0x2790 [ 2166.893245][ T29] ? exit_signals+0x920/0x920 [ 2166.898522][ T29] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2166.904468][ T29] arch_do_signal_or_restart+0x90/0x7f0 [ 2166.910511][ T29] ? get_sigframe_size+0x20/0x20 [ 2166.915493][ T29] ? ksys_read+0x1a7/0x250 [ 2166.920986][ T29] exit_to_user_mode_prepare+0x11f/0x240 [ 2166.926672][ T29] syscall_exit_to_user_mode+0x1d/0x60 [ 2166.932397][ T29] do_syscall_64+0x44/0xb0 [ 2166.936849][ T29] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2166.942823][ T29] RIP: 0033:0x7f811347cae9 [ 2166.947276][ T29] RSP: 002b:00007f8111b7a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2166.955967][ T29] RAX: fffffffffffffff2 RBX: 00007f811359c2c0 RCX: 00007f811347cae9 [ 2166.964175][ T29] RDX: 0000000000000064 RSI: 00000000200005c0 RDI: 0000000000000003 [ 2166.972361][ T29] RBP: 00007f81134c847a R08: 0000000000000000 R09: 0000000000000000 [ 2166.981307][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2166.989526][ T29] R13: 000000000000006e R14: 00007f811359c2c0 R15: 00007ffea0691978 [ 2166.997573][ T29] [ 2167.000694][ T29] INFO: task syz-executor.5:30484 blocked for more than 144 seconds. [ 2167.008934][ T29] Not tainted 6.6.0-rc6-syzkaller-00355-gfe3cfe869d5e #0 [ 2167.016559][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2167.025415][ T29] task:syz-executor.5 state:D stack:26416 pid:30484 ppid:5070 flags:0x00000006 [ 2167.035292][ T29] Call Trace: [ 2167.038675][ T29] [ 2167.041648][ T29] __schedule+0xee1/0x5a10 [ 2167.046101][ T29] ? __lock_acquire+0x182f/0x5de0 [ 2167.051289][ T29] ? io_schedule_timeout+0x150/0x150 [ 2167.056614][ T29] ? mark_lock+0x105/0x1950 [ 2167.061217][ T29] ? print_usage_bug.part.0+0x670/0x670 [ 2167.066810][ T29] schedule+0xe7/0x1b0 [ 2167.071207][ T29] schedule_timeout+0x278/0x2c0 [ 2167.076082][ T29] ? usleep_range_state+0x1a0/0x1a0 [ 2167.081355][ T29] ? mark_held_locks+0x9f/0xe0 [ 2167.086159][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2167.091778][ T29] __wait_for_common+0x3e0/0x5f0 [ 2167.096747][ T29] ? usleep_range_state+0x1a0/0x1a0 [ 2167.102432][ T29] ? bit_wait+0xe0/0xe0 [ 2167.106608][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2167.111862][ T29] ? flush_workqueue_prep_pwqs+0x28f/0x4e0 [ 2167.117669][ T29] ? check_flush_dependency+0x86/0x450 [ 2167.123455][ T29] __flush_workqueue+0x3e0/0x1320 [ 2167.128868][ T29] ? lock_acquire+0x1ae/0x510 [ 2167.133611][ T29] ? find_held_lock+0x2d/0x110 [ 2167.139704][ T29] ? check_flush_dependency+0x450/0x450 [ 2167.145302][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 2167.151292][ T29] ? skb_queue_purge_reason+0x12e/0x1c0 [ 2167.156870][ T29] ? nci_close_device+0x14c/0x380 [ 2167.161955][ T29] nci_close_device+0x14c/0x380 [ 2167.166825][ T29] ? virtual_nci_open+0x10/0x10 [ 2167.171820][ T29] nci_unregister_device+0x36/0x300 [ 2167.177026][ T29] ? virtual_nci_open+0x10/0x10 [ 2167.182055][ T29] virtual_ncidev_close+0x51/0xa0 [ 2167.187100][ T29] __fput+0x3f7/0xa70 [ 2167.191256][ T29] __fput_sync+0x47/0x50 [ 2167.195506][ T29] __x64_sys_close+0x87/0xf0 [ 2167.201044][ T29] do_syscall_64+0x38/0xb0 [ 2167.205464][ T29] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2167.211549][ T29] RIP: 0033:0x7fc31627b9da [ 2167.215986][ T29] RSP: 002b:00007ffe59732630 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2167.224515][ T29] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fc31627b9da [ 2167.232646][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2167.240762][ T29] RBP: 00007fc31639d980 R08: 0000001b30320000 R09: 0000000000000015 [ 2167.249944][ T29] R10: 0000000081925fdc R11: 0000000000000293 R12: 00000000001eb8a4 [ 2167.257998][ T29] R13: ffffffffffffffff R14: 00007fc315e00000 R15: 00000000001eb367 [ 2167.266001][ T29] [ 2167.269462][ T29] INFO: task syz-executor.5:30498 blocked for more than 144 seconds. [ 2167.277629][ T29] Not tainted 6.6.0-rc6-syzkaller-00355-gfe3cfe869d5e #0 [ 2167.285826][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2167.294722][ T29] task:syz-executor.5 state:D stack:27072 pid:30498 ppid:5070 flags:0x00004006 [ 2167.304064][ T29] Call Trace: [ 2167.307357][ T29] [ 2167.311278][ T29] __schedule+0xee1/0x5a10 [ 2167.315721][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2167.321877][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2167.328403][ T29] ? io_schedule_timeout+0x150/0x150 [ 2167.333717][ T29] ? __mutex_lock+0x964/0x1340 [ 2167.338680][ T29] schedule+0xe7/0x1b0 [ 2167.342771][ T29] schedule_preempt_disabled+0x13/0x20 [ 2167.348359][ T29] __mutex_lock+0x969/0x1340 [ 2167.353167][ T29] ? nci_start_poll+0x580/0x9b0 [ 2167.359504][ T29] ? nfc_llcp_build_gb.isra.0+0x2d1/0x410 [ 2167.365259][ T29] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2167.370885][ T29] ? nfc_llcp_general_bytes+0xf8/0x230 [ 2167.376343][ T29] ? do_raw_spin_lock+0x12e/0x2b0 [ 2167.381521][ T29] ? nci_start_poll+0x580/0x9b0 [ 2167.386409][ T29] nci_start_poll+0x580/0x9b0 [ 2167.391198][ T29] ? nci_dep_link_up+0x1b0/0x1b0 [ 2167.396175][ T29] nfc_start_poll+0x192/0x320 [ 2167.400921][ T29] nfc_genl_start_poll+0x1ac/0x470 [ 2167.406063][ T29] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 2167.411869][ T29] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2167.420290][ T29] ? security_capable+0x92/0xc0 [ 2167.425169][ T29] genl_rcv_msg+0x55c/0x800 [ 2167.430262][ T29] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 2167.436187][ T29] ? nfc_genl_dep_link_up+0x250/0x250 [ 2167.441714][ T29] netlink_rcv_skb+0x16b/0x440 [ 2167.446533][ T29] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 2167.452650][ T29] ? netlink_ack+0x1370/0x1370 [ 2167.457456][ T29] ? down_write_killable+0x250/0x250 [ 2167.462847][ T29] ? netlink_deliver_tap+0x1a0/0xd00 [ 2167.469515][ T29] genl_rcv+0x28/0x40 [ 2167.473648][ T29] netlink_unicast+0x536/0x810 [ 2167.478493][ T29] ? netlink_attachskb+0x880/0x880 [ 2167.483691][ T29] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2167.489946][ T29] ? __phys_addr_symbol+0x30/0x70 [ 2167.495010][ T29] ? __check_object_size+0x323/0x730 [ 2167.500418][ T29] netlink_sendmsg+0x93c/0xe40 [ 2167.505242][ T29] ? netlink_unicast+0x810/0x810 [ 2167.510657][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2167.515974][ T29] ? netlink_unicast+0x810/0x810 [ 2167.521116][ T29] __sock_sendmsg+0xd5/0x180 [ 2167.525765][ T29] ____sys_sendmsg+0x6ac/0x940 [ 2167.531627][ T29] ? copy_msghdr_from_user+0x10b/0x160 [ 2167.537117][ T29] ? kernel_sendmsg+0x50/0x50 [ 2167.542098][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2167.548396][ T29] ___sys_sendmsg+0x135/0x1d0 [ 2167.553812][ T29] ? do_recvmmsg+0x740/0x740 [ 2167.558524][ T29] ? __fget_light+0xe6/0x260 [ 2167.563140][ T29] __sys_sendmsg+0x117/0x1e0 [ 2167.567766][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 2167.573144][ T29] ? xfd_validate_state+0x5d/0x180 [ 2167.579540][ T29] ? syscall_enter_from_user_mode+0x26/0x80 [ 2167.585496][ T29] do_syscall_64+0x38/0xb0 [ 2167.590357][ T29] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2167.596308][ T29] RIP: 0033:0x7fc31627cae9 [ 2167.600772][ T29] RSP: 002b:00007fc316f820c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2167.609646][ T29] RAX: ffffffffffffffda RBX: 00007fc31639c050 RCX: 00007fc31627cae9 [ 2167.617751][ T29] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000005 [ 2167.626979][ T29] RBP: 00007fc3162c847a R08: 0000000000000000 R09: 0000000000000000 [ 2167.635433][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2167.643532][ T29] R13: 000000000000006e R14: 00007fc31639c050 R15: 00007ffe59732568 [ 2167.651963][ T29] [ 2167.655014][ T29] INFO: task syz-executor.5:30504 blocked for more than 145 seconds. [ 2167.663348][ T29] Not tainted 6.6.0-rc6-syzkaller-00355-gfe3cfe869d5e #0 [ 2167.671134][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2167.679900][ T29] task:syz-executor.5 state:D stack:27760 pid:30504 ppid:5070 flags:0x00004006 [ 2167.690363][ T29] Call Trace: [ 2167.693665][ T29] [ 2167.696590][ T29] __schedule+0xee1/0x5a10 [ 2167.701101][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2167.707117][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2167.713448][ T29] ? io_schedule_timeout+0x150/0x150 [ 2167.718934][ T29] ? __mutex_lock+0x964/0x1340 [ 2167.723751][ T29] schedule+0xe7/0x1b0 [ 2167.727859][ T29] schedule_preempt_disabled+0x13/0x20 [ 2167.733452][ T29] __mutex_lock+0x969/0x1340 [ 2167.738711][ T29] ? genl_rcv_msg+0x577/0x800 [ 2167.743552][ T29] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2167.749850][ T29] ? __lock_acquire+0x182f/0x5de0 [ 2167.754953][ T29] ? __radix_tree_lookup+0x21f/0x2c0 [ 2167.760412][ T29] ? genl_rcv_msg+0x577/0x800 [ 2167.765114][ T29] genl_rcv_msg+0x577/0x800 [ 2167.769816][ T29] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 2167.775761][ T29] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2167.781525][ T29] netlink_rcv_skb+0x16b/0x440 [ 2167.786315][ T29] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 2167.792441][ T29] ? netlink_ack+0x1370/0x1370 [ 2167.797331][ T29] ? down_write_killable+0x250/0x250 [ 2167.803011][ T29] ? netlink_deliver_tap+0x1a0/0xd00 [ 2167.808883][ T29] genl_rcv+0x28/0x40 [ 2167.812916][ T29] netlink_unicast+0x536/0x810 [ 2167.817788][ T29] ? netlink_attachskb+0x880/0x880 [ 2167.823017][ T29] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2167.829320][ T29] ? __phys_addr_symbol+0x30/0x70 [ 2167.834650][ T29] ? __check_object_size+0x323/0x730 [ 2167.840533][ T29] netlink_sendmsg+0x93c/0xe40 [ 2167.845581][ T29] ? netlink_unicast+0x810/0x810 [ 2167.851207][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2167.856540][ T29] ? netlink_unicast+0x810/0x810 [ 2167.861698][ T29] __sock_sendmsg+0xd5/0x180 [ 2167.866336][ T29] ____sys_sendmsg+0x6ac/0x940 [ 2167.871624][ T29] ? copy_msghdr_from_user+0x10b/0x160 [ 2167.877296][ T29] ? kernel_sendmsg+0x50/0x50 [ 2167.882060][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2167.888279][ T29] ___sys_sendmsg+0x135/0x1d0 [ 2167.893018][ T29] ? do_recvmmsg+0x740/0x740 [ 2167.897677][ T29] ? __fget_light+0xe6/0x260 [ 2167.902415][ T29] __sys_sendmsg+0x117/0x1e0 [ 2167.907044][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 2167.912350][ T29] ? xfd_validate_state+0x5d/0x180 [ 2167.917508][ T29] ? syscall_enter_from_user_mode+0x26/0x80 [ 2167.923920][ T29] do_syscall_64+0x38/0xb0 [ 2167.928610][ T29] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2167.934560][ T29] RIP: 0033:0x7fc31627cae9 [ 2167.939264][ T29] RSP: 002b:00007fc316f610c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2167.947733][ T29] RAX: ffffffffffffffda RBX: 00007fc31639c120 RCX: 00007fc31627cae9 [ 2167.956140][ T29] RDX: 0000000000000000 RSI: 0000000020000780 RDI: 0000000000000005 [ 2167.964196][ T29] RBP: 00007fc3162c847a R08: 0000000000000000 R09: 0000000000000000 [ 2167.972399][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2167.980513][ T29] R13: 000000000000006e R14: 00007fc31639c120 R15: 00007ffe59732568 [ 2167.988849][ T29] [ 2167.991917][ T29] [ 2167.991917][ T29] Showing all locks held in the system: [ 2167.999720][ T29] 1 lock held by khungtaskd/29: [ 2168.004601][ T29] #0: ffffffff8cbab2e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 2168.014617][ T29] 2 locks held by syslogd/4470: [ 2168.019630][ T29] #0: ffff8880b993c718 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 2168.029942][ T29] #1: ffff8880b9928888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x20c/0x900 [ 2168.041425][ T29] 2 locks held by dhcpcd/4701: [ 2168.046180][ T29] #0: ffffffff8e681f50 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 2168.054825][ T29] #1: ffffffff8e682008 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x577/0x800 [ 2168.063990][ T29] 2 locks held by getty/4787: [ 2168.068859][ T29] #0: ffff88802605c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2168.078726][ T29] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc5/0x1480 [ 2168.089053][ T29] 4 locks held by kworker/1:5/5133: [ 2168.094278][ T29] #0: ffff888012c70d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x787/0x15c0 [ 2168.104806][ T29] #1: ffffc90003e8fd80 ((work_completion)(&w->w)){+.+.}-{0:0}, at: process_one_work+0x7e9/0x15c0 [ 2168.115702][ T29] #2: ffffffff8eac6048 (nfc_devlist_mutex){+.+.}-{3:3}, at: nfc_urelease_event_work+0xbb/0x310 [ 2168.126546][ T29] #3: ffff88801d045508 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_urelease_event_work+0x173/0x310 [ 2168.138561][ T29] 5 locks held by kworker/u4:4/8159: [ 2168.143881][ T29] 2 locks held by kworker/u4:12/16820: [ 2168.149691][ T29] #0: ffff8880b993c718 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 2168.160081][ T29] #1: ffff8880b9928888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2d9/0x900 [ 2168.171630][ T29] 3 locks held by kworker/u4:15/28792: [ 2168.177113][ T29] #0: ffff88807c5e0d38 ((wq_completion)nfc2_nci_rx_wq#11){+.+.}-{0:0}, at: process_one_work+0x787/0x15c0 [ 2168.188761][ T29] #1: ffffc9000504fd80 ((work_completion)(&ndev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7e9/0x15c0 [ 2168.200272][ T29] #2: ffff88801d045100 (&dev->mutex){....}-{3:3}, at: nfc_targets_found+0xe8/0x3d0 [ 2168.209988][ T29] 1 lock held by syz-executor.1/30425: [ 2168.215566][ T29] #0: ffffffff8eac6048 (nfc_devlist_mutex){+.+.}-{3:3}, at: nfc_unregister_device+0x1a2/0x330 [ 2168.226282][ T29] 2 locks held by syz-executor.2/30495: [ 2168.232004][ T29] #0: ffffffff8e681f50 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 2168.240406][ T29] #1: ffffffff8e682008 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x577/0x800 [ 2168.249884][ T29] 1 lock held by syz-executor.2/30519: [ 2168.255336][ T29] #0: ffffffff8eac6048 (nfc_devlist_mutex){+.+.}-{3:3}, at: nfc_unregister_device+0x1a2/0x330 [ 2168.266169][ T29] 1 lock held by syz-executor.5/30484: [ 2168.271937][ T29] #0: ffff888081751350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x6d/0x380 [ 2168.282382][ T29] 5 locks held by syz-executor.5/30498: [ 2168.288240][ T29] #0: ffffffff8e681f50 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 2168.296509][ T29] #1: ffffffff8e682008 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x577/0x800 [ 2168.306008][ T29] #2: ffff88801d045508 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x19e/0x470 [ 2168.317712][ T29] #3: ffff88801d045100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x58/0x320 [ 2168.326960][ T29] #4: ffff888081751350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x580/0x9b0 [ 2168.336720][ T29] 2 locks held by syz-executor.5/30504: [ 2168.342540][ T29] #0: ffffffff8e681f50 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 2168.350887][ T29] #1: ffffffff8e682008 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x577/0x800 [ 2168.360215][ T29] 2 locks held by syz-executor.4/30555: [ 2168.366036][ T29] #0: ffffffff8d6f3028 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 2168.374798][ T29] #1: ffffffff8eac6048 (nfc_devlist_mutex){+.+.}-{3:3}, at: nfc_register_device+0x32/0x3c0 [ 2168.385069][ T29] 2 locks held by syz-executor.4/30561: [ 2168.390880][ T29] #0: ffffffff8e681f50 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 2168.399293][ T29] #1: ffffffff8e682008 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x577/0x800 [ 2168.408493][ T29] 1 lock held by syz-executor.0/30560: [ 2168.414010][ T29] #0: ffffffff8d6f3028 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 2168.422588][ T29] 2 locks held by syz-executor.0/30564: [ 2168.428256][ T29] #0: ffffffff8e681f50 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 2168.436474][ T29] #1: ffffffff8e682008 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x577/0x800 [ 2168.445539][ T29] 1 lock held by syz-executor.1/30587: [ 2168.451167][ T29] #0: ffffffff8d6f3028 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 2168.459680][ T29] 1 lock held by syz-executor.3/30589: [ 2168.465291][ T29] #0: ffffffff8d6f3028 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 2168.474337][ T29] 2 locks held by syz-executor.3/30590: [ 2168.479962][ T29] #0: ffffffff8e681f50 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 2168.488420][ T29] #1: ffffffff8e682008 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x577/0x800 [ 2168.497490][ T29] 1 lock held by syz-executor.5/30593: [ 2168.503033][ T29] #0: ffffffff8d6f3028 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 2168.511639][ T29] 1 lock held by syz-executor.2/30595: [ 2168.517144][ T29] #0: ffffffff8d6f3028 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 2168.525720][ T29] 1 lock held by syz-executor.0/30597: [ 2168.531438][ T29] #0: ffffffff8d6f3028 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 2168.540006][ T29] 1 lock held by syz-executor.1/30599: [ 2168.545513][ T29] #0: ffffffff8d6f3028 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 2168.555265][ T29] 1 lock held by syz-executor.5/30601: [ 2168.560870][ T29] #0: ffffffff8d6f3028 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 2168.569846][ T29] 1 lock held by syz-executor.2/30603: [ 2168.575390][ T29] #0: ffffffff8d6f3028 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 2168.584252][ T29] [ 2168.586598][ T29] ============================================= [ 2168.586598][ T29] [ 2168.595207][ T29] NMI backtrace for cpu 0 [ 2168.599563][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.0-rc6-syzkaller-00355-gfe3cfe869d5e #0 [ 2168.609399][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2168.619521][ T29] Call Trace: [ 2168.622843][ T29] [ 2168.625895][ T29] dump_stack_lvl+0xd9/0x1b0 [ 2168.630502][ T29] nmi_cpu_backtrace+0x277/0x380 [ 2168.635463][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 2168.640685][ T29] nmi_trigger_cpumask_backtrace+0x299/0x300 [ 2168.646725][ T29] watchdog+0xf87/0x1210 [ 2168.651083][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 2168.657457][ T29] ? lockdep_hardirqs_on+0x7d/0x100 [ 2168.662717][ T29] ? __kthread_parkme+0x14b/0x220 [ 2168.667765][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 2168.673770][ T29] kthread+0x33c/0x440 [ 2168.677983][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2168.683209][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 2168.688856][ T29] ret_from_fork+0x45/0x80 [ 2168.693280][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 2168.698927][ T29] ret_from_fork_asm+0x11/0x20 [ 2168.703739][ T29] [ 2168.707677][ T29] Sending NMI from CPU 0 to CPUs 1: [ 2168.713150][ C1] NMI backtrace for cpu 1 [ 2168.713164][ C1] CPU: 1 PID: 8159 Comm: kworker/u4:4 Not tainted 6.6.0-rc6-syzkaller-00355-gfe3cfe869d5e #0 [ 2168.713181][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2168.713190][ C1] Workqueue: bat_events batadv_nc_worker [ 2168.713219][ C1] RIP: 0010:lock_release+0x4/0x680 [ 2168.713242][ C1] Code: ff 48 89 cf e8 cd fe 74 00 e9 ce fd ff ff 48 c7 c7 14 af cc 8e e8 bc fe 74 00 e9 fe fe ff ff 0f 1f 80 00 00 00 00 f3 0f 1e fa <48> b8 00 00 00 00 00 fc ff df 41 57 41 56 41 55 41 54 49 89 fc 55 [ 2168.713255][ C1] RSP: 0018:ffffc90014cffb40 EFLAGS: 00000293 [ 2168.713265][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 2168.713273][ C1] RDX: 0000000000000000 RSI: ffffffff8a086887 RDI: ffffffff8cbab2e0 [ 2168.713282][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 2168.713289][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 2168.713297][ C1] R13: ffff88801a6917a8 R14: ffff888024d10940 R15: ffffffff8a085dc0 [ 2168.713308][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 2168.713322][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2168.713330][ C1] CR2: 000000c0023a1000 CR3: 000000000c976000 CR4: 0000000000350ee0 [ 2168.713339][ C1] Call Trace: [ 2168.713345][ C1] [ 2168.713351][ C1] ? show_regs+0x8f/0xa0 [ 2168.713368][ C1] ? nmi_cpu_backtrace+0x1d4/0x380 [ 2168.713388][ C1] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 2168.713406][ C1] ? nmi_handle+0x1a6/0x570 [ 2168.713421][ C1] ? lock_release+0x4/0x680 [ 2168.713437][ C1] ? default_do_nmi+0x69/0x160 [ 2168.713452][ C1] ? exc_nmi+0x171/0x1e0 [ 2168.713465][ C1] ? end_repeat_nmi+0x16/0x31 [ 2168.713479][ C1] ? batadv_nc_sniffed_purge+0x3b0/0x3b0 [ 2168.713500][ C1] ? batadv_nc_process_nc_paths.part.0+0x217/0x3e0 [ 2168.713521][ C1] ? lock_release+0x4/0x680 [ 2168.713537][ C1] ? lock_release+0x4/0x680 [ 2168.713554][ C1] ? lock_release+0x4/0x680 [ 2168.713570][ C1] [ 2168.713573][ C1] [ 2168.713577][ C1] batadv_nc_process_nc_paths.part.0+0x21c/0x3e0 [ 2168.713609][ C1] batadv_nc_worker+0xd4f/0x10e0 [ 2168.713631][ C1] ? batadv_nc_process_nc_paths.part.0+0x3e0/0x3e0 [ 2168.713651][ C1] ? move_linked_works+0x1e8/0x2f0 [ 2168.713671][ C1] process_one_work+0x884/0x15c0 [ 2168.713689][ C1] ? batadv_nc_process_nc_paths.part.0+0x3e0/0x3e0 [ 2168.713709][ C1] ? init_worker_pool+0x770/0x770 [ 2168.713726][ C1] ? assign_work+0x1a0/0x240 [ 2168.713741][ C1] worker_thread+0x8b9/0x1290 [ 2168.713759][ C1] ? __kthread_parkme+0x14b/0x220 [ 2168.713772][ C1] ? process_one_work+0x15c0/0x15c0 [ 2168.713787][ C1] kthread+0x33c/0x440 [ 2168.713800][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2168.713819][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 2168.713833][ C1] ret_from_fork+0x45/0x80 [ 2168.713848][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 2168.713862][ C1] ret_from_fork_asm+0x11/0x20 [ 2168.713885][ C1] [ 2168.715141][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2169.013975][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.0-rc6-syzkaller-00355-gfe3cfe869d5e #0 [ 2169.023796][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2169.033863][ T29] Call Trace: [ 2169.037150][ T29] [ 2169.040086][ T29] dump_stack_lvl+0xd9/0x1b0 [ 2169.044716][ T29] panic+0x6a6/0x750 [ 2169.048619][ T29] ? panic_smp_self_stop+0xa0/0xa0 [ 2169.053736][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 2169.058943][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 2169.064325][ T29] ? watchdog+0xd3e/0x1210 [ 2169.068878][ T29] watchdog+0xd4f/0x1210 [ 2169.073183][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 2169.079197][ T29] ? lockdep_hardirqs_on+0x7d/0x100 [ 2169.084406][ T29] ? __kthread_parkme+0x14b/0x220 [ 2169.089445][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 2169.095431][ T29] kthread+0x33c/0x440 [ 2169.100023][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2169.105232][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 2169.110981][ T29] ret_from_fork+0x45/0x80 [ 2169.115420][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 2169.121058][ T29] ret_from_fork_asm+0x11/0x20 [ 2169.125939][ T29] [ 2169.129524][ T29] Kernel Offset: disabled [ 2169.133955][ T29] Rebooting in 86400 seconds..