Extracting prog: 1m5.458633131s Minimizing prog: 32m46.37220718s Simplifying prog options: 0s Extracting C: 1m49.905440735s Simplifying C: 17m41.269112007s 30 programs, timeouts [15s 1m40s 6m0s] extracting reproducer from 30 programs single: executing 5 programs separately with timeout 15s testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-ptrace$PTRACE_SETSIGMASK-openat$tun-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-syz_open_procfs-write$UHID_CREATE2-socket$nl_route-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime-bpf$MAP_CREATE-bpf$PROG_LOAD detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8010, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) program crashed: possible deadlock in rfkill_fop_write single: successfully extracted reproducer found reproducer with 18 syscalls minimizing guilty program testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-ptrace$PTRACE_SETSIGMASK-openat$tun-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-syz_open_procfs-write$UHID_CREATE2-socket$nl_route-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime-bpf$MAP_CREATE detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8010, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x4}, 0x48) program crashed: possible deadlock in rfkill_fop_write testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-ptrace$PTRACE_SETSIGMASK-openat$tun-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-syz_open_procfs-write$UHID_CREATE2-socket$nl_route-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program crashed: possible deadlock in rfkill_fop_write testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-ptrace$PTRACE_SETSIGMASK-openat$tun-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-syz_open_procfs-write$UHID_CREATE2-socket$nl_route-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-ptrace$PTRACE_SETSIGMASK-openat$tun-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-syz_open_procfs-write$UHID_CREATE2-socket$nl_route-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) gettid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-ptrace$PTRACE_SETSIGMASK-openat$tun-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-syz_open_procfs-write$UHID_CREATE2-socket$nl_route-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-ptrace$PTRACE_SETSIGMASK-openat$tun-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-syz_open_procfs-write$UHID_CREATE2-socket$nl_route-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-ptrace$PTRACE_SETSIGMASK-openat$tun-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-syz_open_procfs-write$UHID_CREATE2-socket$nl_route-sendmsg$NFT_BATCH-gettid-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() write$rfkill(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(0xffffffffffffffff, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-ptrace$PTRACE_SETSIGMASK-openat$tun-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-syz_open_procfs-write$UHID_CREATE2-socket$nl_route-sendmsg$NFT_BATCH-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-ptrace$PTRACE_SETSIGMASK-openat$tun-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-syz_open_procfs-write$UHID_CREATE2-socket$nl_route-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-ptrace$PTRACE_SETSIGMASK-openat$tun-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program crashed: possible deadlock in rfkill_fop_write testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-ptrace$PTRACE_SETSIGMASK-openat$tun-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-syz_open_procfs-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-ptrace$PTRACE_SETSIGMASK-openat$tun-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000045) r0 = gettid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-ptrace$PTRACE_SETSIGMASK-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program crashed: possible deadlock in rfkill_fop_write testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-ptrace$PTRACE_SETSIGMASK-openat$tun-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-ptrace$PTRACE_SETSIGMASK-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program crashed: possible deadlock in rfkill_fop_write testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: connect$unix(0xffffffffffffffff, 0x0, 0x4d) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, 0x0, 0x0) write$rfkill(r2, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) gettid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program crashed: possible deadlock in rfkill_fop_write testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) gettid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) program did not crash testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime detailed listing: executing program 0: mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) connect$unix(0xffffffffffffffff, 0x0, 0x4d) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source\xe6\x84\xb1;\x94\xeaT\x9307\xc8\x1ab\xed \x99\xccu?\xd2\x94%\xd7\x05\x1a\x92W\xc3p\x99h\xb1\x99\r>\x8f\xe8,\xaf]\x86\xac\b\xca\x80ud\xf5]\'\x86>.\x14\xe2\x1d\xcb\xe6\xe5I\xc1\x03f\xe8\x83\x80\x98\x9c\xabv&_\xff-', &(0x7f0000000580)='\x84gc:::\x00\a\xad\xf3\xb1\xb4\xac\x83\xd2\xa0\xff~\xa85KP\x91\xa7\t\x8aH\x1c\xe4\x91[\xb0\v\x18~%\xac\xd0\xba\xc29US\xc7\xdc1\"\x1a\x92\xde\xe5\xdb\x1e\xca|X\x19\x9d$\xd9w\xe7\x90\x8ed4|\n\xb0\xc1\xa1\xe0\x14\xea\xe9\xcc\xe6\x98=\xba=\x90=-\x81\x97,\x8b\x1bL`P\x966w\x14\v4@b!\xd6\xf4}\xef\xe2\xdf\xd2\x80\x03\xa2\xfd9\xedh\x9d\x10\xb8\x1aO,t\x0e\x9b\x93\x96\x95\x81\xdec _ b\x0f%D\xcbf\x11h\x80#\xd7\xaf>\x00\x17\x00\x00?\xack\xd5\xeb\xe8x\x9ba\xd4\xf60\xf1\xd6\x97\x14\x05\xaa\x05\xe4\x00\xe5\xf5\x02\xa9`7G\x85\x19|\x16\x98^}(\xa5\xf9;}\x95\xceT}Qkg\'\x83|\x85\x8bQj\xd4d\xb10yYH\x16\x16s<\x9e\x17\xc2\xf3\xe6B\xfd\xea\xa6n\x96\xb5\xe2c\xeb\x01P\xdc\x05$?\xa4\xb0\x1d\xd6\xc3\xb5\x06MK,\xe8\x9fp\xe5*\xfdm^\x8b\xfaO\x84\x90\xa3\xa53\xae\xe3D\xc3^A', 0x0) r0 = syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) sendmsg$NFT_BATCH(r0, 0x0, 0x4000045) gettid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime program crashed: possible deadlock in hci_dev_do_close simplifying C reproducer testing compiled C program (duration=22.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime program crashed: possible deadlock in hci_dev_do_close testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime program crashed: possible deadlock in hci_dev_do_close testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime program did not crash testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime program crashed: possible deadlock in hci_dev_do_close testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime program crashed: possible deadlock in hci_dev_do_close testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime program crashed: possible deadlock in hci_dev_do_close testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime program crashed: possible deadlock in hci_dev_do_close testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime program crashed: possible deadlock in hci_dev_do_close testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime program did not crash testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime program crashed: possible deadlock in hci_dev_do_close testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime program crashed: possible deadlock in hci_dev_do_close testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime program crashed: possible deadlock in hci_dev_do_close testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime program crashed: possible deadlock in hci_dev_do_close testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime program crashed: possible deadlock in hci_dev_do_close testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-connect$unix-openat$tun-fsconfig$FSCONFIG_SET_STRING-syz_open_procfs-write$UHID_CREATE2-sendmsg$NFT_BATCH-gettid-openat$rfkill-write$rfkill-write$rfkill-timer_create-timer_settime program crashed: possible deadlock in hci_dev_do_close reproducing took 53m23.005414872s repro crashed as (corrupted=false): ====================================================== WARNING: possible circular locking dependency detected 5.15.165-syzkaller #0 Not tainted ------------------------------------------------------ syz-executor227/4023 is trying to acquire lock: ffff0000dad60b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 kernel/workqueue.c:3090 but task is already holding lock: ffff0000dad60ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x64/0x1060 net/bluetooth/hci_core.c:1737 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #3 (&hdev->req_lock){+.+.}-{3:3}: __mutex_lock_common+0x194/0x2154 kernel/locking/mutex.c:596 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0xa4/0xf8 kernel/locking/mutex.c:743 hci_dev_do_close+0x64/0x1060 net/bluetooth/hci_core.c:1737 hci_rfkill_set_block+0xdc/0x1d0 net/bluetooth/hci_core.c:2235 rfkill_set_block+0x18c/0x37c net/rfkill/core.c:345 rfkill_fop_write+0x594/0x750 net/rfkill/core.c:1274 vfs_write+0x280/0xb44 fs/read_write.c:592 ksys_write+0x15c/0x26c fs/read_write.c:647 __do_sys_write fs/read_write.c:659 [inline] __se_sys_write fs/read_write.c:656 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:656 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 -> #2 (rfkill_global_mutex){+.+.}-{3:3}: __mutex_lock_common+0x194/0x2154 kernel/locking/mutex.c:596 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0xa4/0xf8 kernel/locking/mutex.c:743 rfkill_register+0x44/0x7a4 net/rfkill/core.c:1045 hci_register_dev+0x3e0/0x880 net/bluetooth/hci_core.c:3960 __vhci_create_device drivers/bluetooth/hci_vhci.c:129 [inline] vhci_create_device+0x2c4/0x568 drivers/bluetooth/hci_vhci.c:153 vhci_get_user drivers/bluetooth/hci_vhci.c:210 [inline] vhci_write+0x318/0x3b8 drivers/bluetooth/hci_vhci.c:290 call_write_iter include/linux/fs.h:2172 [inline] new_sync_write fs/read_write.c:507 [inline] vfs_write+0x884/0xb44 fs/read_write.c:594 ksys_write+0x15c/0x26c fs/read_write.c:647 __do_sys_write fs/read_write.c:659 [inline] __se_sys_write fs/read_write.c:656 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:656 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 -> #1 (&data->open_mutex){+.+.}-{3:3}: __mutex_lock_common+0x194/0x2154 kernel/locking/mutex.c:596 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0xa4/0xf8 kernel/locking/mutex.c:743 vhci_send_frame+0x8c/0x10c drivers/bluetooth/hci_vhci.c:71 hci_send_frame+0x194/0x2f0 net/bluetooth/hci_core.c:4256 hci_sched_acl_pkt net/bluetooth/hci_core.c:4781 [inline] hci_sched_acl net/bluetooth/hci_core.c:4866 [inline] hci_tx_work+0x8d8/0x157c net/bluetooth/hci_core.c:4937 process_one_work+0x790/0x11b8 kernel/workqueue.c:2310 worker_thread+0x910/0x1034 kernel/workqueue.c:2457 kthread+0x37c/0x45c kernel/kthread.c:334 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870 -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: check_prev_add kernel/locking/lockdep.c:3053 [inline] check_prevs_add kernel/locking/lockdep.c:3172 [inline] validate_chain kernel/locking/lockdep.c:3788 [inline] __lock_acquire+0x32d4/0x7638 kernel/locking/lockdep.c:5012 lock_acquire+0x240/0x77c kernel/locking/lockdep.c:5623 __flush_work+0xf8/0x1c0 kernel/workqueue.c:3090 flush_work+0x24/0x38 kernel/workqueue.c:3115 hci_dev_do_close+0x16c/0x1060 net/bluetooth/hci_core.c:1756 hci_rfkill_set_block+0xdc/0x1d0 net/bluetooth/hci_core.c:2235 rfkill_set_block+0x18c/0x37c net/rfkill/core.c:345 rfkill_fop_write+0x594/0x750 net/rfkill/core.c:1274 vfs_write+0x280/0xb44 fs/read_write.c:592 ksys_write+0x15c/0x26c fs/read_write.c:647 __do_sys_write fs/read_write.c:659 [inline] __se_sys_write fs/read_write.c:656 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:656 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 other info that might help us debug this: Chain exists of: (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&hdev->req_lock); lock(rfkill_global_mutex); lock(&hdev->req_lock); lock((work_completion)(&hdev->tx_work)); *** DEADLOCK *** 2 locks held by syz-executor227/4023: #0: ffff800016e77d28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 net/rfkill/core.c:1266 #1: ffff0000dad60ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x64/0x1060 net/bluetooth/hci_core.c:1737 stack backtrace: CPU: 1 PID: 4023 Comm: syz-executor227 Not tainted 5.15.165-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Call trace: dump_backtrace+0x0/0x530 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106 dump_stack+0x1c/0x58 lib/dump_stack.c:113 print_circular_bug+0x150/0x1b8 kernel/locking/lockdep.c:2011 check_noncircular+0x2cc/0x378 kernel/locking/lockdep.c:2133 check_prev_add kernel/locking/lockdep.c:3053 [inline] check_prevs_add kernel/locking/lockdep.c:3172 [inline] validate_chain kernel/locking/lockdep.c:3788 [inline] __lock_acquire+0x32d4/0x7638 kernel/locking/lockdep.c:5012 lock_acquire+0x240/0x77c kernel/locking/lockdep.c:5623 __flush_work+0xf8/0x1c0 kernel/workqueue.c:3090 flush_work+0x24/0x38 kernel/workqueue.c:3115 hci_dev_do_close+0x16c/0x1060 net/bluetooth/hci_core.c:1756 hci_rfkill_set_block+0xdc/0x1d0 net/bluetooth/hci_core.c:2235 rfkill_set_block+0x18c/0x37c net/rfkill/core.c:345 rfkill_fop_write+0x594/0x750 net/rfkill/core.c:1274 vfs_write+0x280/0xb44 fs/read_write.c:592 ksys_write+0x15c/0x26c fs/read_write.c:647 __do_sys_write fs/read_write.c:659 [inline] __se_sys_write fs/read_write.c:656 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:656 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 final repro crashed as (corrupted=false): ====================================================== WARNING: possible circular locking dependency detected 5.15.165-syzkaller #0 Not tainted ------------------------------------------------------ syz-executor227/4023 is trying to acquire lock: ffff0000dad60b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 kernel/workqueue.c:3090 but task is already holding lock: ffff0000dad60ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x64/0x1060 net/bluetooth/hci_core.c:1737 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #3 (&hdev->req_lock){+.+.}-{3:3}: __mutex_lock_common+0x194/0x2154 kernel/locking/mutex.c:596 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0xa4/0xf8 kernel/locking/mutex.c:743 hci_dev_do_close+0x64/0x1060 net/bluetooth/hci_core.c:1737 hci_rfkill_set_block+0xdc/0x1d0 net/bluetooth/hci_core.c:2235 rfkill_set_block+0x18c/0x37c net/rfkill/core.c:345 rfkill_fop_write+0x594/0x750 net/rfkill/core.c:1274 vfs_write+0x280/0xb44 fs/read_write.c:592 ksys_write+0x15c/0x26c fs/read_write.c:647 __do_sys_write fs/read_write.c:659 [inline] __se_sys_write fs/read_write.c:656 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:656 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 -> #2 (rfkill_global_mutex){+.+.}-{3:3}: __mutex_lock_common+0x194/0x2154 kernel/locking/mutex.c:596 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0xa4/0xf8 kernel/locking/mutex.c:743 rfkill_register+0x44/0x7a4 net/rfkill/core.c:1045 hci_register_dev+0x3e0/0x880 net/bluetooth/hci_core.c:3960 __vhci_create_device drivers/bluetooth/hci_vhci.c:129 [inline] vhci_create_device+0x2c4/0x568 drivers/bluetooth/hci_vhci.c:153 vhci_get_user drivers/bluetooth/hci_vhci.c:210 [inline] vhci_write+0x318/0x3b8 drivers/bluetooth/hci_vhci.c:290 call_write_iter include/linux/fs.h:2172 [inline] new_sync_write fs/read_write.c:507 [inline] vfs_write+0x884/0xb44 fs/read_write.c:594 ksys_write+0x15c/0x26c fs/read_write.c:647 __do_sys_write fs/read_write.c:659 [inline] __se_sys_write fs/read_write.c:656 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:656 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 -> #1 (&data->open_mutex){+.+.}-{3:3}: __mutex_lock_common+0x194/0x2154 kernel/locking/mutex.c:596 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0xa4/0xf8 kernel/locking/mutex.c:743 vhci_send_frame+0x8c/0x10c drivers/bluetooth/hci_vhci.c:71 hci_send_frame+0x194/0x2f0 net/bluetooth/hci_core.c:4256 hci_sched_acl_pkt net/bluetooth/hci_core.c:4781 [inline] hci_sched_acl net/bluetooth/hci_core.c:4866 [inline] hci_tx_work+0x8d8/0x157c net/bluetooth/hci_core.c:4937 process_one_work+0x790/0x11b8 kernel/workqueue.c:2310 worker_thread+0x910/0x1034 kernel/workqueue.c:2457 kthread+0x37c/0x45c kernel/kthread.c:334 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870 -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: check_prev_add kernel/locking/lockdep.c:3053 [inline] check_prevs_add kernel/locking/lockdep.c:3172 [inline] validate_chain kernel/locking/lockdep.c:3788 [inline] __lock_acquire+0x32d4/0x7638 kernel/locking/lockdep.c:5012 lock_acquire+0x240/0x77c kernel/locking/lockdep.c:5623 __flush_work+0xf8/0x1c0 kernel/workqueue.c:3090 flush_work+0x24/0x38 kernel/workqueue.c:3115 hci_dev_do_close+0x16c/0x1060 net/bluetooth/hci_core.c:1756 hci_rfkill_set_block+0xdc/0x1d0 net/bluetooth/hci_core.c:2235 rfkill_set_block+0x18c/0x37c net/rfkill/core.c:345 rfkill_fop_write+0x594/0x750 net/rfkill/core.c:1274 vfs_write+0x280/0xb44 fs/read_write.c:592 ksys_write+0x15c/0x26c fs/read_write.c:647 __do_sys_write fs/read_write.c:659 [inline] __se_sys_write fs/read_write.c:656 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:656 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 other info that might help us debug this: Chain exists of: (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&hdev->req_lock); lock(rfkill_global_mutex); lock(&hdev->req_lock); lock((work_completion)(&hdev->tx_work)); *** DEADLOCK *** 2 locks held by syz-executor227/4023: #0: ffff800016e77d28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 net/rfkill/core.c:1266 #1: ffff0000dad60ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x64/0x1060 net/bluetooth/hci_core.c:1737 stack backtrace: CPU: 1 PID: 4023 Comm: syz-executor227 Not tainted 5.15.165-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Call trace: dump_backtrace+0x0/0x530 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106 dump_stack+0x1c/0x58 lib/dump_stack.c:113 print_circular_bug+0x150/0x1b8 kernel/locking/lockdep.c:2011 check_noncircular+0x2cc/0x378 kernel/locking/lockdep.c:2133 check_prev_add kernel/locking/lockdep.c:3053 [inline] check_prevs_add kernel/locking/lockdep.c:3172 [inline] validate_chain kernel/locking/lockdep.c:3788 [inline] __lock_acquire+0x32d4/0x7638 kernel/locking/lockdep.c:5012 lock_acquire+0x240/0x77c kernel/locking/lockdep.c:5623 __flush_work+0xf8/0x1c0 kernel/workqueue.c:3090 flush_work+0x24/0x38 kernel/workqueue.c:3115 hci_dev_do_close+0x16c/0x1060 net/bluetooth/hci_core.c:1756 hci_rfkill_set_block+0xdc/0x1d0 net/bluetooth/hci_core.c:2235 rfkill_set_block+0x18c/0x37c net/rfkill/core.c:345 rfkill_fop_write+0x594/0x750 net/rfkill/core.c:1274 vfs_write+0x280/0xb44 fs/read_write.c:592 ksys_write+0x15c/0x26c fs/read_write.c:647 __do_sys_write fs/read_write.c:659 [inline] __se_sys_write fs/read_write.c:656 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:656 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584