Extracting prog: 36.702868492s
Minimizing prog: 30m24.898177902s
Simplifying prog options: 0s
Extracting C: 49.092756219s
Simplifying C: 18m21.97667155s


extracting reproducer from 66 programs
testing a last program of every proc
single: executing 16 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-socket$inet_tcp-socket$nl_route-socket$nl_netfilter-sendmsg$NFT_BATCH-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_ro-readv-sendmsg$NFT_BATCH-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$netlink-syz_init_net_socket$bt_l2cap-socketpair$unix-sendmsg$unix-setsockopt$sock_int-recvmmsg-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
readv(r5, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0xf7fb, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8000, 0x9, 0x8, 0x0, 0x0, 0x1ffffffffffffd}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4d4, 0x32}, 0xa, @in6=@local, 0x800000, 0x3}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x5, 0x0, 0x1, 0x0, 0xabf, 0x400000}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)={0x134, 0x28, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x92, 0x6a, 0x0, 0x0, @binary="c23818ee0f538780fd5c6cd1a9d34696befcde6bad4a0e24acf2e2a0e88374f0f341bff21846553c0c9edba91580624baf23ce673f23e7ba23b5ea3b3a6d0c3c6de73428e39132679f4e20d48073a1b6e0aded4ec11f8d8b16090c48912f5683d0192f8da51e3c5d9536c10ebc498b7be766b66894e8f49eb57b90eb3154ec5b3d70eddc5c2bf69b97ec902b7027"}, @typed={0x14, 0x73, 0x0, 0x0, @ipv6=@local}, @generic="dde636d2c41f7129d039a64e2ff20d4b617372a062ec8a6da6803c1dbecafcf650e78a1b525e3767c614fa1b32a2fcb16aa82baa31521a43b0b5553a46caa3d9d2af4d6169d67a8179867e7c0a3dd6d192552e34548f74bcb1f8bf7331400c596cb6bbf4160987351fca90f2e39c2522ba863af8547c727bba3e6e"]}, 0x134}, {&(0x7f0000000440)={0x38, 0x36, 0x0, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0xc8, 0x0, 0x0, @u32=0x1}, @nested={0x1c, 0x125, 0x0, 0x1, [@generic, @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @nested={0x4, 0xfd}]}, @nested={0x4, 0x95, 0x0, 0x1, [@generic]}]}, 0x38}], 0x2}, 0x24000000)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$unix(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
setsockopt$sock_int(r9, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(r9, &(0x7f0000001140), 0x700, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
single: successfully extracted reproducer
found reproducer with 24 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-socket$inet_tcp-socket$nl_route-socket$nl_netfilter-sendmsg$NFT_BATCH-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_ro-readv-sendmsg$NFT_BATCH-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$netlink-syz_init_net_socket$bt_l2cap-socketpair$unix-sendmsg$unix-setsockopt$sock_int-recvmmsg
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c0002800800034000000004080001"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
readv(r5, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0xf7fb, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8000, 0x9, 0x8, 0x0, 0x0, 0x1ffffffffffffd}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4d4, 0x32}, 0xa, @in6=@local, 0x800000, 0x3}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x5, 0x0, 0x1, 0x0, 0xabf, 0x400000}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)={0x134, 0x28, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x92, 0x6a, 0x0, 0x0, @binary="c23818ee0f538780fd5c6cd1a9d34696befcde6bad4a0e24acf2e2a0e88374f0f341bff21846553c0c9edba91580624baf23ce673f23e7ba23b5ea3b3a6d0c3c6de73428e39132679f4e20d48073a1b6e0aded4ec11f8d8b16090c48912f5683d0192f8da51e3c5d9536c10ebc498b7be766b66894e8f49eb57b90eb3154ec5b3d70eddc5c2bf69b97ec902b7027"}, @typed={0x14, 0x73, 0x0, 0x0, @ipv6=@local}, @generic="dde636d2c41f7129d039a64e2ff20d4b617372a062ec8a6da6803c1dbecafcf650e78a1b525e3767c614fa1b32a2fcb16aa82baa31521a43b0b5553a46caa3d9d2af4d6169d67a8179867e7c0a3dd6d192552e34548f74bcb1f8bf7331400c596cb6bbf4160987351fca90f2e39c2522ba863af8547c727bba3e6e"]}, 0x134}, {&(0x7f0000000440)={0x38, 0x36, 0x0, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0xc8, 0x0, 0x0, @u32=0x1}, @nested={0x1c, 0x125, 0x0, 0x1, [@generic, @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @nested={0x4, 0xfd}]}, @nested={0x4, 0x95, 0x0, 0x1, [@generic]}]}, 0x38}], 0x2}, 0x24000000)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$unix(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(r8, &(0x7f0000001140), 0x700, 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-socket$inet_tcp-socket$nl_route-socket$nl_netfilter-sendmsg$NFT_BATCH-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_ro-readv-sendmsg$NFT_BATCH-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$netlink-syz_init_net_socket$bt_l2cap-socketpair$unix-sendmsg$unix-setsockopt$sock_int-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
readv(r5, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0xf7fb, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8000, 0x9, 0x8, 0x0, 0x0, 0x1ffffffffffffd}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4d4, 0x32}, 0xa, @in6=@local, 0x800000, 0x3}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x5, 0x0, 0x1, 0x0, 0xabf, 0x400000}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)={0x134, 0x28, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x92, 0x6a, 0x0, 0x0, @binary="c23818ee0f538780fd5c6cd1a9d34696befcde6bad4a0e24acf2e2a0e88374f0f341bff21846553c0c9edba91580624baf23ce673f23e7ba23b5ea3b3a6d0c3c6de73428e39132679f4e20d48073a1b6e0aded4ec11f8d8b16090c48912f5683d0192f8da51e3c5d9536c10ebc498b7be766b66894e8f49eb57b90eb3154ec5b3d70eddc5c2bf69b97ec902b7027"}, @typed={0x14, 0x73, 0x0, 0x0, @ipv6=@local}, @generic="dde636d2c41f7129d039a64e2ff20d4b617372a062ec8a6da6803c1dbecafcf650e78a1b525e3767c614fa1b32a2fcb16aa82baa31521a43b0b5553a46caa3d9d2af4d6169d67a8179867e7c0a3dd6d192552e34548f74bcb1f8bf7331400c596cb6bbf4160987351fca90f2e39c2522ba863af8547c727bba3e6e"]}, 0x134}, {&(0x7f0000000440)={0x38, 0x36, 0x0, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0xc8, 0x0, 0x0, @u32=0x1}, @nested={0x1c, 0x125, 0x0, 0x1, [@generic, @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @nested={0x4, 0xfd}]}, @nested={0x4, 0x95, 0x0, 0x1, [@generic]}]}, 0x38}], 0x2}, 0x24000000)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$unix(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
setsockopt$sock_int(r9, 0x1, 0x2a, &(0x7f0000000000), 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-socket$inet_tcp-socket$nl_route-socket$nl_netfilter-sendmsg$NFT_BATCH-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_ro-readv-sendmsg$NFT_BATCH-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$netlink-syz_init_net_socket$bt_l2cap-socketpair$unix-sendmsg$unix-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
readv(r5, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0xf7fb, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8000, 0x9, 0x8, 0x0, 0x0, 0x1ffffffffffffd}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4d4, 0x32}, 0xa, @in6=@local, 0x800000, 0x3}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x5, 0x0, 0x1, 0x0, 0xabf, 0x400000}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)={0x134, 0x28, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x92, 0x6a, 0x0, 0x0, @binary="c23818ee0f538780fd5c6cd1a9d34696befcde6bad4a0e24acf2e2a0e88374f0f341bff21846553c0c9edba91580624baf23ce673f23e7ba23b5ea3b3a6d0c3c6de73428e39132679f4e20d48073a1b6e0aded4ec11f8d8b16090c48912f5683d0192f8da51e3c5d9536c10ebc498b7be766b66894e8f49eb57b90eb3154ec5b3d70eddc5c2bf69b97ec902b7027"}, @typed={0x14, 0x73, 0x0, 0x0, @ipv6=@local}, @generic="dde636d2c41f7129d039a64e2ff20d4b617372a062ec8a6da6803c1dbecafcf650e78a1b525e3767c614fa1b32a2fcb16aa82baa31521a43b0b5553a46caa3d9d2af4d6169d67a8179867e7c0a3dd6d192552e34548f74bcb1f8bf7331400c596cb6bbf4160987351fca90f2e39c2522ba863af8547c727bba3e6e"]}, 0x134}, {&(0x7f0000000440)={0x38, 0x36, 0x0, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0xc8, 0x0, 0x0, @u32=0x1}, @nested={0x1c, 0x125, 0x0, 0x1, [@generic, @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @nested={0x4, 0xfd}]}, @nested={0x4, 0x95, 0x0, 0x1, [@generic]}]}, 0x38}], 0x2}, 0x24000000)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff})
sendmsg$unix(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-socket$inet_tcp-socket$nl_route-socket$nl_netfilter-sendmsg$NFT_BATCH-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_ro-readv-sendmsg$NFT_BATCH-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$netlink-syz_init_net_socket$bt_l2cap-socketpair$unix-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
readv(r5, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0xf7fb, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8000, 0x9, 0x8, 0x0, 0x0, 0x1ffffffffffffd}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4d4, 0x32}, 0xa, @in6=@local, 0x800000, 0x3}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x5, 0x0, 0x1, 0x0, 0xabf, 0x400000}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)={0x134, 0x28, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x92, 0x6a, 0x0, 0x0, @binary="c23818ee0f538780fd5c6cd1a9d34696befcde6bad4a0e24acf2e2a0e88374f0f341bff21846553c0c9edba91580624baf23ce673f23e7ba23b5ea3b3a6d0c3c6de73428e39132679f4e20d48073a1b6e0aded4ec11f8d8b16090c48912f5683d0192f8da51e3c5d9536c10ebc498b7be766b66894e8f49eb57b90eb3154ec5b3d70eddc5c2bf69b97ec902b7027"}, @typed={0x14, 0x73, 0x0, 0x0, @ipv6=@local}, @generic="dde636d2c41f7129d039a64e2ff20d4b617372a062ec8a6da6803c1dbecafcf650e78a1b525e3767c614fa1b32a2fcb16aa82baa31521a43b0b5553a46caa3d9d2af4d6169d67a8179867e7c0a3dd6d192552e34548f74bcb1f8bf7331400c596cb6bbf4160987351fca90f2e39c2522ba863af8547c727bba3e6e"]}, 0x134}, {&(0x7f0000000440)={0x38, 0x36, 0x0, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0xc8, 0x0, 0x0, @u32=0x1}, @nested={0x1c, 0x125, 0x0, 0x1, [@generic, @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @nested={0x4, 0xfd}]}, @nested={0x4, 0x95, 0x0, 0x1, [@generic]}]}, 0x38}], 0x2}, 0x24000000)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-socket$inet_tcp-socket$nl_route-socket$nl_netfilter-sendmsg$NFT_BATCH-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_ro-readv-sendmsg$NFT_BATCH-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$netlink-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c0002800800034000000004080001"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
readv(r5, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0xf7fb, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8000, 0x9, 0x8, 0x0, 0x0, 0x1ffffffffffffd}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4d4, 0x32}, 0xa, @in6=@local, 0x800000, 0x3}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x5, 0x0, 0x1, 0x0, 0xabf, 0x400000}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)={0x134, 0x28, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x92, 0x6a, 0x0, 0x0, @binary="c23818ee0f538780fd5c6cd1a9d34696befcde6bad4a0e24acf2e2a0e88374f0f341bff21846553c0c9edba91580624baf23ce673f23e7ba23b5ea3b3a6d0c3c6de73428e39132679f4e20d48073a1b6e0aded4ec11f8d8b16090c48912f5683d0192f8da51e3c5d9536c10ebc498b7be766b66894e8f49eb57b90eb3154ec5b3d70eddc5c2bf69b97ec902b7027"}, @typed={0x14, 0x73, 0x0, 0x0, @ipv6=@local}, @generic="dde636d2c41f7129d039a64e2ff20d4b617372a062ec8a6da6803c1dbecafcf650e78a1b525e3767c614fa1b32a2fcb16aa82baa31521a43b0b5553a46caa3d9d2af4d6169d67a8179867e7c0a3dd6d192552e34548f74bcb1f8bf7331400c596cb6bbf4160987351fca90f2e39c2522ba863af8547c727bba3e6e"]}, 0x134}, {&(0x7f0000000440)={0x38, 0x36, 0x0, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0xc8, 0x0, 0x0, @u32=0x1}, @nested={0x1c, 0x125, 0x0, 0x1, [@generic, @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @nested={0x4, 0xfd}]}, @nested={0x4, 0x95, 0x0, 0x1, [@generic]}]}, 0x38}], 0x2}, 0x24000000)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-socket$inet_tcp-socket$nl_route-socket$nl_netfilter-sendmsg$NFT_BATCH-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_ro-readv-sendmsg$NFT_BATCH-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$netlink-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
readv(r5, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0xf7fb, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8000, 0x9, 0x8, 0x0, 0x0, 0x1ffffffffffffd}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4d4, 0x32}, 0xa, @in6=@local, 0x800000, 0x3}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x5, 0x0, 0x1, 0x0, 0xabf, 0x400000}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)={0x134, 0x28, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x92, 0x6a, 0x0, 0x0, @binary="c23818ee0f538780fd5c6cd1a9d34696befcde6bad4a0e24acf2e2a0e88374f0f341bff21846553c0c9edba91580624baf23ce673f23e7ba23b5ea3b3a6d0c3c6de73428e39132679f4e20d48073a1b6e0aded4ec11f8d8b16090c48912f5683d0192f8da51e3c5d9536c10ebc498b7be766b66894e8f49eb57b90eb3154ec5b3d70eddc5c2bf69b97ec902b7027"}, @typed={0x14, 0x73, 0x0, 0x0, @ipv6=@local}, @generic="dde636d2c41f7129d039a64e2ff20d4b617372a062ec8a6da6803c1dbecafcf650e78a1b525e3767c614fa1b32a2fcb16aa82baa31521a43b0b5553a46caa3d9d2af4d6169d67a8179867e7c0a3dd6d192552e34548f74bcb1f8bf7331400c596cb6bbf4160987351fca90f2e39c2522ba863af8547c727bba3e6e"]}, 0x134}, {&(0x7f0000000440)={0x38, 0x36, 0x0, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0xc8, 0x0, 0x0, @u32=0x1}, @nested={0x1c, 0x125, 0x0, 0x1, [@generic, @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @nested={0x4, 0xfd}]}, @nested={0x4, 0x95, 0x0, 0x1, [@generic]}]}, 0x38}], 0x2}, 0x24000000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-socket$inet_tcp-socket$nl_route-socket$nl_netfilter-sendmsg$NFT_BATCH-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_ro-readv-sendmsg$NFT_BATCH-socket$nl_xfrm-sendmsg$nl_xfrm-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0)
readv(r4, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0xf7fb, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8000, 0x9, 0x8, 0x0, 0x0, 0x1ffffffffffffd}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4d4, 0x32}, 0xa, @in6=@local, 0x800000, 0x3}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x5, 0x0, 0x1, 0x0, 0xabf, 0x400000}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-socket$inet_tcp-socket$nl_route-socket$nl_netfilter-sendmsg$NFT_BATCH-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_ro-readv-sendmsg$NFT_BATCH-socket$nl_xfrm-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0)
readv(r4, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-socket$inet_tcp-socket$nl_route-socket$nl_netfilter-sendmsg$NFT_BATCH-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_ro-readv-sendmsg$NFT_BATCH-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0)
readv(r4, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-socket$inet_tcp-socket$nl_route-socket$nl_netfilter-sendmsg$NFT_BATCH-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_ro-readv-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c0002800800034000000004080001"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0)
readv(r4, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-socket$inet_tcp-socket$nl_route-socket$nl_netfilter-sendmsg$NFT_BATCH-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_ro-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-socket$inet_tcp-socket$nl_route-socket$nl_netfilter-sendmsg$NFT_BATCH-mkdirat$cgroup_root-openat$cgroup_root-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-socket$inet_tcp-socket$nl_route-socket$nl_netfilter-sendmsg$NFT_BATCH-mkdirat$cgroup_root-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00', 0x1ff)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-socket$inet_tcp-socket$nl_route-socket$nl_netfilter-sendmsg$NFT_BATCH-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-socket$inet_tcp-socket$nl_route-socket$nl_netfilter-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-socket$inet_tcp-socket$nl_route-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c0002800800034000000004080001"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-socket$inet_tcp-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c0002800800034000000004080001"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_generic-bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c0002800800034000000004080001"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-socket$nl_netfilter-bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7000000}, 0x94)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
simplifying C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
program crashed: WARNING: lock held when returning to user space!
a never seen crash title: WARNING: lock held when returning to user space!, ignore
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
program crashed: WARNING: lock held when returning to user space!
a never seen crash title: WARNING: lock held when returning to user space!, ignore
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
program crashed: WARNING: lock held when returning to user space!
a never seen crash title: WARNING: lock held when returning to user space!, ignore
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
program crashed: WARNING: lock held when returning to user space!
a never seen crash title: WARNING: lock held when returning to user space!, ignore
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
program crashed: WARNING: lock held when returning to user space!
a never seen crash title: WARNING: lock held when returning to user space!, ignore
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
program crashed: WARNING: lock held when returning to user space!
a never seen crash title: WARNING: lock held when returning to user space!, ignore
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
program crashed: WARNING: lock held when returning to user space!
a never seen crash title: WARNING: lock held when returning to user space!, ignore
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
program crashed: WARNING: lock held when returning to user space!
a never seen crash title: WARNING: lock held when returning to user space!, ignore
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-syz_init_net_socket$bt_l2cap-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

program crashed: WARNING: lock held when returning to user space in cfg80211_wext_siwgenie
validation run: crashed=true
reproducing took 54m34.620069569s
repro crashed as (corrupted=false):
warning: `syz.0.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
================================================
WARNING: lock held when returning to user space!
syzkaller #0 Not tainted
------------------------------------------------
syz.0.17/5935 is leaving the kernel with locks still held!
2 locks held by syz.0.17/5935:
 #0: ffff888024130768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: wiphy_lock include/net/cfg80211.h:5777 [inline]
 #0: ffff888024130768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wext_siwgenie+0xd5/0x3f0 net/wireless/wext-sme.c:341
 #1: ffff888023ab0dc0 (&wdev->mtx){+.+.}-{3:3}, at: wdev_lock net/wireless/core.h:231 [inline]
 #1: ffff888023ab0dc0 (&wdev->mtx){+.+.}-{3:3}, at: cfg80211_wext_siwgenie+0xe0/0x3f0 net/wireless/wext-sme.c:342

final repro crashed as (corrupted=false):
warning: `syz.0.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
================================================
WARNING: lock held when returning to user space!
syzkaller #0 Not tainted
------------------------------------------------
syz.0.17/5935 is leaving the kernel with locks still held!
2 locks held by syz.0.17/5935:
 #0: ffff888024130768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: wiphy_lock include/net/cfg80211.h:5777 [inline]
 #0: ffff888024130768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wext_siwgenie+0xd5/0x3f0 net/wireless/wext-sme.c:341
 #1: ffff888023ab0dc0 (&wdev->mtx){+.+.}-{3:3}, at: wdev_lock net/wireless/core.h:231 [inline]
 #1: ffff888023ab0dc0 (&wdev->mtx){+.+.}-{3:3}, at: cfg80211_wext_siwgenie+0xe0/0x3f0 net/wireless/wext-sme.c:342