netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
======================================================
WARNING: possible circular locking dependency detected
5.10.238 #1 Not tainted
------------------------------------------------------
syz-executor.6/362083 is trying to acquire lock:
ffff88800cdd4b78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 kernel/workqueue.c:3050

but task is already holding lock:
ffffffff8561f3e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 net/rfkill/core.c:1232

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #4 (rfkill_global_mutex){+.+.}-{3:3}:
       __mutex_lock_common kernel/locking/mutex.c:968 [inline]
       __mutex_lock+0x13d/0x10b0 kernel/locking/mutex.c:1109
       rfkill_register+0x36/0xa10 net/rfkill/core.c:1016
       hci_register_dev+0x42e/0xc00 net/bluetooth/hci_core.c:3774
       __vhci_create_device+0x2c8/0x5c0 drivers/bluetooth/hci_vhci.c:129
       vhci_create_device drivers/bluetooth/hci_vhci.c:153 [inline]
       vhci_open_timeout+0x38/0x50 drivers/bluetooth/hci_vhci.c:310
       process_one_work+0x9a9/0x14b0 kernel/workqueue.c:2282
       worker_thread+0x61d/0x1310 kernel/workqueue.c:2428
       kthread+0x38f/0x470 kernel/kthread.c:328
       ret_from_fork+0x22/0x30 arch/x86/entry/entry_64.S:298

-> #3 (&data->open_mutex){+.+.}-{3:3}:
       __mutex_lock_common kernel/locking/mutex.c:968 [inline]
       __mutex_lock+0x13d/0x10b0 kernel/locking/mutex.c:1109
       vhci_send_frame+0x63/0xa0 drivers/bluetooth/hci_vhci.c:71
       hci_send_frame+0x1b9/0x320 net/bluetooth/hci_core.c:4065
       hci_sched_acl_pkt net/bluetooth/hci_core.c:4590 [inline]
       hci_sched_acl net/bluetooth/hci_core.c:4675 [inline]
       hci_tx_work+0xfb4/0x15d0 net/bluetooth/hci_core.c:4741
       process_one_work+0x9a9/0x14b0 kernel/workqueue.c:2282
       worker_thread+0x61d/0x1310 kernel/workqueue.c:2428
       kthread+0x38f/0x470 kernel/kthread.c:328
       ret_from_fork+0x22/0x30 arch/x86/entry/entry_64.S:298

-> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
       __flush_work+0x105/0xa90 kernel/workqueue.c:3053
       hci_dev_do_close+0x131/0x1240 net/bluetooth/hci_core.c:1745
       hci_unregister_dev+0x179/0x460 net/bluetooth/hci_core.c:3854
       vhci_release+0x70/0xf0 drivers/bluetooth/hci_vhci.c:345
       __fput+0x285/0x9f0 fs/file_table.c:281
       task_work_run+0xe2/0x1a0 kernel/task_work.c:185
       exit_task_work include/linux/task_work.h:33 [inline]
       do_exit+0xb6f/0x2600 kernel/exit.c:860
       do_group_exit+0x125/0x310 kernel/exit.c:982
       get_signal+0x4bc/0x2350 kernel/signal.c:2762
       arch_do_signal_or_restart+0x2b7/0x1990 arch/x86/kernel/signal.c:805
       handle_signal_work kernel/entry/common.c:145 [inline]
       exit_to_user_mode_loop kernel/entry/common.c:169 [inline]
       exit_to_user_mode_prepare+0x10f/0x190 kernel/entry/common.c:199
       syscall_exit_to_user_mode+0x38/0x1d0 kernel/entry/common.c:274
       entry_SYSCALL_64_after_hwframe+0x67/0xd1

-> #1 (&hdev->req_lock){+.+.}-{3:3}:
       __mutex_lock_common kernel/locking/mutex.c:968 [inline]
       __mutex_lock+0x13d/0x10b0 kernel/locking/mutex.c:1109
       hci_req_sync net/bluetooth/hci_request.c:277 [inline]
       bg_scan_update+0x82/0x500 net/bluetooth/hci_request.c:2897
       process_one_work+0x9a9/0x14b0 kernel/workqueue.c:2282
       worker_thread+0x61d/0x1310 kernel/workqueue.c:2428
       kthread+0x38f/0x470 kernel/kthread.c:328
       ret_from_fork+0x22/0x30 arch/x86/entry/entry_64.S:298

-> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
       check_prev_add kernel/locking/lockdep.c:2988 [inline]
       check_prevs_add kernel/locking/lockdep.c:3113 [inline]
       validate_chain kernel/locking/lockdep.c:3729 [inline]
       __lock_acquire+0x29e7/0x5b00 kernel/locking/lockdep.c:4955
       lock_acquire kernel/locking/lockdep.c:5566 [inline]
       lock_acquire+0x197/0x470 kernel/locking/lockdep.c:5531
       __flush_work+0x105/0xa90 kernel/workqueue.c:3053
       __cancel_work_timer+0x368/0x4c0 kernel/workqueue.c:3144
       hci_request_cancel_all+0x73/0x230 net/bluetooth/hci_request.c:3440
       hci_dev_do_close+0xd9/0x1240 net/bluetooth/hci_core.c:1733
       hci_rfkill_set_block+0x166/0x1a0 net/bluetooth/hci_core.c:2223
       rfkill_set_block+0x1fd/0x540 net/rfkill/core.c:341
       rfkill_fop_write+0x253/0x4b0 net/rfkill/core.c:1240
       vfs_write+0x29a/0xb10 fs/read_write.c:603
       ksys_write+0x1f6/0x260 fs/read_write.c:658
       do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46
       entry_SYSCALL_64_after_hwframe+0x67/0xd1

other info that might help us debug this:

Chain exists of:
  (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(rfkill_global_mutex);
                               lock(&data->open_mutex);
                               lock(rfkill_global_mutex);
  lock((work_completion)(&hdev->bg_scan_update));

 *** DEADLOCK ***

1 lock held by syz-executor.6/362083:
 #0: ffffffff8561f3e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 net/rfkill/core.c:1232

stack backtrace:
CPU: 0 PID: 362083 Comm: syz-executor.6 Not tainted 5.10.238 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x107/0x167 lib/dump_stack.c:118
 check_noncircular+0x263/0x2e0 kernel/locking/lockdep.c:2123
 check_prev_add kernel/locking/lockdep.c:2988 [inline]
 check_prevs_add kernel/locking/lockdep.c:3113 [inline]
 validate_chain kernel/locking/lockdep.c:3729 [inline]
 __lock_acquire+0x29e7/0x5b00 kernel/locking/lockdep.c:4955
 lock_acquire kernel/locking/lockdep.c:5566 [inline]
 lock_acquire+0x197/0x470 kernel/locking/lockdep.c:5531
 __flush_work+0x105/0xa90 kernel/workqueue.c:3053
 __cancel_work_timer+0x368/0x4c0 kernel/workqueue.c:3144
 hci_request_cancel_all+0x73/0x230 net/bluetooth/hci_request.c:3440
 hci_dev_do_close+0xd9/0x1240 net/bluetooth/hci_core.c:1733
 hci_rfkill_set_block+0x166/0x1a0 net/bluetooth/hci_core.c:2223
 rfkill_set_block+0x1fd/0x540 net/rfkill/core.c:341
 rfkill_fop_write+0x253/0x4b0 net/rfkill/core.c:1240
 vfs_write+0x29a/0xb10 fs/read_write.c:603
 ksys_write+0x1f6/0x260 fs/read_write.c:658
 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x67/0xd1
RIP: 0033:0x7f7715577b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7712aed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f771568af60 RCX: 00007f7715577b19
RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000003
RBP: 00007f77155d1f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe77576c9f R14: 00007f7712aed300 R15: 0000000000022000
wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
Module has invalid ELF structures
mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
Module has invalid ELF structures
Module has invalid ELF structures
Module has invalid ELF structures
Module has invalid ELF structures
Module has invalid ELF structures
Module has invalid ELF structures
Module has invalid ELF structures
Module has invalid ELF structures
Module has invalid ELF structures
Module has invalid ELF structures
Module has invalid ELF structures
Module has invalid ELF structures
audit: type=1400 audit(1749918187.616:1830): avc:  denied  { relabelfrom } for  pid=364012 comm="syz-executor.3" name="" dev="pipefs" ino=225990 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1
Module has invalid ELF structures
Module has invalid ELF structures
Module has invalid ELF structures
ieee80211 €˜
§°ÇÛ ”uòQÇC	!: Selected rate control algorithm 'minstrel_ht'
debugfs: Directory '€˜
§°ÇÛ ”uòQÇC	!' with parent 'ieee80211' already present!
ieee80211 €˜
§°ÇÛ ”uòQÇC	!: Selected rate control algorithm 'minstrel_ht'
sysfs: cannot create duplicate filename '/class/ieee80211/€˜
§°ÇÛ ”uòQÇC	!'
CPU: 0 PID: 364740 Comm: syz-executor.1 Not tainted 5.10.238 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x107/0x167 lib/dump_stack.c:118
 sysfs_warn_dup.cold+0x1c/0x29 fs/sysfs/dir.c:30
 sysfs_do_create_link_sd+0x122/0x140 fs/sysfs/symlink.c:51
 sysfs_do_create_link fs/sysfs/symlink.c:80 [inline]
 sysfs_create_link+0x5f/0xc0 fs/sysfs/symlink.c:92
 device_add_class_symlinks drivers/base/core.c:2751 [inline]
 device_add+0x703/0x1c50 drivers/base/core.c:2959
 wiphy_register+0x1da6/0x2850 net/wireless/core.c:915
 ieee80211_register_hw+0x23c5/0x38b0 net/mac80211/main.c:1295
 mac80211_hwsim_new_radio+0x1d04/0x4290 drivers/net/wireless/mac80211_hwsim.c:3300
 hwsim_new_radio_nl+0x991/0x1080 drivers/net/wireless/mac80211_hwsim.c:3881
 genl_family_rcv_msg_doit+0x22d/0x330 net/netlink/genetlink.c:739
 genl_family_rcv_msg net/netlink/genetlink.c:783 [inline]
 genl_rcv_msg+0x36a/0x5a0 net/netlink/genetlink.c:800
 netlink_rcv_skb+0x14b/0x430 net/netlink/af_netlink.c:2485
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:811
 netlink_unicast_kernel net/netlink/af_netlink.c:1307 [inline]
 netlink_unicast+0x54e/0x800 net/netlink/af_netlink.c:1333
 netlink_sendmsg+0x90f/0xe00 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:651 [inline]
 __sock_sendmsg+0x154/0x190 net/socket.c:663
 ____sys_sendmsg+0x70d/0x870 net/socket.c:2378
 ___sys_sendmsg+0xf3/0x170 net/socket.c:2432
 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2461
 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x67/0xd1
RIP: 0033:0x7fcf94a64b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fcf91fda188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fcf94b77f60 RCX: 00007fcf94a64b19
RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005
RBP: 00007fcf94abef6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe8525b3bf R14: 00007fcf91fda300 R15: 0000000000022000
ieee80211 €˜
§°ÇÛ ”uòQÇC	!: Selected rate control algorithm 'minstrel_ht'
sysfs: cannot create duplicate filename '/class/ieee80211/€˜
§°ÇÛ ”uòQÇC	!'
CPU: 0 PID: 365119 Comm: syz-executor.4 Not tainted 5.10.238 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x107/0x167 lib/dump_stack.c:118
 sysfs_warn_dup.cold+0x1c/0x29 fs/sysfs/dir.c:30
 sysfs_do_create_link_sd+0x122/0x140 fs/sysfs/symlink.c:51
 sysfs_do_create_link fs/sysfs/symlink.c:80 [inline]
 sysfs_create_link+0x5f/0xc0 fs/sysfs/symlink.c:92
 device_add_class_symlinks drivers/base/core.c:2751 [inline]
 device_add+0x703/0x1c50 drivers/base/core.c:2959
 wiphy_register+0x1da6/0x2850 net/wireless/core.c:915
 ieee80211_register_hw+0x23c5/0x38b0 net/mac80211/main.c:1295
 mac80211_hwsim_new_radio+0x1d04/0x4290 drivers/net/wireless/mac80211_hwsim.c:3300
 hwsim_new_radio_nl+0x991/0x1080 drivers/net/wireless/mac80211_hwsim.c:3881
 genl_family_rcv_msg_doit+0x22d/0x330 net/netlink/genetlink.c:739
 genl_family_rcv_msg net/netlink/genetlink.c:783 [inline]
 genl_rcv_msg+0x36a/0x5a0 net/netlink/genetlink.c:800
 netlink_rcv_skb+0x14b/0x430 net/netlink/af_netlink.c:2485
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:811
 netlink_unicast_kernel net/netlink/af_netlink.c:1307 [inline]
 netlink_unicast+0x54e/0x800 net/netlink/af_netlink.c:1333
 netlink_sendmsg+0x90f/0xe00 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:651 [inline]
 __sock_sendmsg+0x154/0x190 net/socket.c:663
 ____sys_sendmsg+0x70d/0x870 net/socket.c:2378
 ___sys_sendmsg+0xf3/0x170 net/socket.c:2432
 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2461
 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x67/0xd1
RIP: 0033:0x7f74543e5b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f745195b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f74544f8f60 RCX: 00007f74543e5b19
RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006
RBP: 00007f745443ff6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd6247959f R14: 00007f745195b300 R15: 0000000000022000
ieee80211 €˜
§°ÇÛ ”uòQÇC	!: Selected rate control algorithm 'minstrel_ht'
sysfs: cannot create duplicate filename '/class/ieee80211/€˜
§°ÇÛ ”uòQÇC	!'
CPU: 1 PID: 365181 Comm: syz-executor.1 Not tainted 5.10.238 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x107/0x167 lib/dump_stack.c:118
 sysfs_warn_dup.cold+0x1c/0x29 fs/sysfs/dir.c:30
 sysfs_do_create_link_sd+0x122/0x140 fs/sysfs/symlink.c:51
 sysfs_do_create_link fs/sysfs/symlink.c:80 [inline]
 sysfs_create_link+0x5f/0xc0 fs/sysfs/symlink.c:92
 device_add_class_symlinks drivers/base/core.c:2751 [inline]
 device_add+0x703/0x1c50 drivers/base/core.c:2959
 wiphy_register+0x1da6/0x2850 net/wireless/core.c:915
 ieee80211_register_hw+0x23c5/0x38b0 net/mac80211/main.c:1295
 mac80211_hwsim_new_radio+0x1d04/0x4290 drivers/net/wireless/mac80211_hwsim.c:3300
 hwsim_new_radio_nl+0x991/0x1080 drivers/net/wireless/mac80211_hwsim.c:3881
 genl_family_rcv_msg_doit+0x22d/0x330 net/netlink/genetlink.c:739
 genl_family_rcv_msg net/netlink/genetlink.c:783 [inline]
 genl_rcv_msg+0x36a/0x5a0 net/netlink/genetlink.c:800
 netlink_rcv_skb+0x14b/0x430 net/netlink/af_netlink.c:2485
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:811
 netlink_unicast_kernel net/netlink/af_netlink.c:1307 [inline]
 netlink_unicast+0x54e/0x800 net/netlink/af_netlink.c:1333
 netlink_sendmsg+0x90f/0xe00 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:651 [inline]
 __sock_sendmsg+0x154/0x190 net/socket.c:663
 ____sys_sendmsg+0x70d/0x870 net/socket.c:2378
 ___sys_sendmsg+0xf3/0x170 net/socket.c:2432
 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2461
 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x67/0xd1
RIP: 0033:0x7fcf94a64b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fcf91fda188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fcf94b77f60 RCX: 00007fcf94a64b19
RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005
RBP: 00007fcf94abef6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe8525b3bf R14: 00007fcf91fda300 R15: 0000000000022000
ieee80211 €˜
§°ÇÛ ”uòQÇC	!: Selected rate control algorithm 'minstrel_ht'
sysfs: cannot create duplicate filename '/class/ieee80211/€˜
§°ÇÛ ”uòQÇC	!'
CPU: 1 PID: 365215 Comm: syz-executor.4 Not tainted 5.10.238 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x107/0x167 lib/dump_stack.c:118
 sysfs_warn_dup.cold+0x1c/0x29 fs/sysfs/dir.c:30
 sysfs_do_create_link_sd+0x122/0x140 fs/sysfs/symlink.c:51
 sysfs_do_create_link fs/sysfs/symlink.c:80 [inline]
 sysfs_create_link+0x5f/0xc0 fs/sysfs/symlink.c:92
 device_add_class_symlinks drivers/base/core.c:2751 [inline]
 device_add+0x703/0x1c50 drivers/base/core.c:2959
 wiphy_register+0x1da6/0x2850 net/wireless/core.c:915
 ieee80211_register_hw+0x23c5/0x38b0 net/mac80211/main.c:1295
 mac80211_hwsim_new_radio+0x1d04/0x4290 drivers/net/wireless/mac80211_hwsim.c:3300
 hwsim_new_radio_nl+0x991/0x1080 drivers/net/wireless/mac80211_hwsim.c:3881
 genl_family_rcv_msg_doit+0x22d/0x330 net/netlink/genetlink.c:739
 genl_family_rcv_msg net/netlink/genetlink.c:783 [inline]
 genl_rcv_msg+0x36a/0x5a0 net/netlink/genetlink.c:800
 netlink_rcv_skb+0x14b/0x430 net/netlink/af_netlink.c:2485
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:811
 netlink_unicast_kernel net/netlink/af_netlink.c:1307 [inline]
 netlink_unicast+0x54e/0x800 net/netlink/af_netlink.c:1333
 netlink_sendmsg+0x90f/0xe00 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:651 [inline]
 __sock_sendmsg+0x154/0x190 net/socket.c:663
 ____sys_sendmsg+0x70d/0x870 net/socket.c:2378
 ___sys_sendmsg+0xf3/0x170 net/socket.c:2432
 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2461
 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x67/0xd1
RIP: 0033:0x7f74543e5b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f745195b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f74544f8f60 RCX: 00007f74543e5b19
RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006
RBP: 00007f745443ff6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd6247959f R14: 00007f745195b300 R15: 0000000000022000
ieee80211 €˜
§°ÇÛ ”uòQÇC	!: Selected rate control algorithm 'minstrel_ht'
sysfs: cannot create duplicate filename '/class/ieee80211/€˜
§°ÇÛ ”uòQÇC	!'
CPU: 0 PID: 365607 Comm: syz-executor.1 Not tainted 5.10.238 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x107/0x167 lib/dump_stack.c:118
 sysfs_warn_dup.cold+0x1c/0x29 fs/sysfs/dir.c:30
 sysfs_do_create_link_sd+0x122/0x140 fs/sysfs/symlink.c:51
 sysfs_do_create_link fs/sysfs/symlink.c:80 [inline]
 sysfs_create_link+0x5f/0xc0 fs/sysfs/symlink.c:92
 device_add_class_symlinks drivers/base/core.c:2751 [inline]
 device_add+0x703/0x1c50 drivers/base/core.c:2959
 wiphy_register+0x1da6/0x2850 net/wireless/core.c:915
 ieee80211_register_hw+0x23c5/0x38b0 net/mac80211/main.c:1295
 mac80211_hwsim_new_radio+0x1d04/0x4290 drivers/net/wireless/mac80211_hwsim.c:3300
 hwsim_new_radio_nl+0x991/0x1080 drivers/net/wireless/mac80211_hwsim.c:3881
 genl_family_rcv_msg_doit+0x22d/0x330 net/netlink/genetlink.c:739
 genl_family_rcv_msg net/netlink/genetlink.c:783 [inline]
 genl_rcv_msg+0x36a/0x5a0 net/netlink/genetlink.c:800
 netlink_rcv_skb+0x14b/0x430 net/netlink/af_netlink.c:2485
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:811
 netlink_unicast_kernel net/netlink/af_netlink.c:1307 [inline]
 netlink_unicast+0x54e/0x800 net/netlink/af_netlink.c:1333
 netlink_sendmsg+0x90f/0xe00 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:651 [inline]
 __sock_sendmsg+0x154/0x190 net/socket.c:663
 ____sys_sendmsg+0x70d/0x870 net/socket.c:2378
 ___sys_sendmsg+0xf3/0x170 net/socket.c:2432
 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2461
 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x67/0xd1
RIP: 0033:0x7fcf94a64b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fcf91fda188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fcf94b77f60 RCX: 00007fcf94a64b19
RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005
RBP: 00007fcf94abef6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe8525b3bf R14: 00007fcf91fda300 R15: 0000000000022000
ieee80211 €˜
§°ÇÛ ”uòQÇC	!: Selected rate control algorithm 'minstrel_ht'
sysfs: cannot create duplicate filename '/class/ieee80211/€˜
§°ÇÛ ”uòQÇC	!'
CPU: 1 PID: 365612 Comm: syz-executor.4 Not tainted 5.10.238 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x107/0x167 lib/dump_stack.c:118
 sysfs_warn_dup.cold+0x1c/0x29 fs/sysfs/dir.c:30
 sysfs_do_create_link_sd+0x122/0x140 fs/sysfs/symlink.c:51
 sysfs_do_create_link fs/sysfs/symlink.c:80 [inline]
 sysfs_create_link+0x5f/0xc0 fs/sysfs/symlink.c:92
 device_add_class_symlinks drivers/base/core.c:2751 [inline]
 device_add+0x703/0x1c50 drivers/base/core.c:2959
 wiphy_register+0x1da6/0x2850 net/wireless/core.c:915
 ieee80211_register_hw+0x23c5/0x38b0 net/mac80211/main.c:1295
 mac80211_hwsim_new_radio+0x1d04/0x4290 drivers/net/wireless/mac80211_hwsim.c:3300
 hwsim_new_radio_nl+0x991/0x1080 drivers/net/wireless/mac80211_hwsim.c:3881
 genl_family_rcv_msg_doit+0x22d/0x330 net/netlink/genetlink.c:739
 genl_family_rcv_msg net/netlink/genetlink.c:783 [inline]
 genl_rcv_msg+0x36a/0x5a0 net/netlink/genetlink.c:800
 netlink_rcv_skb+0x14b/0x430 net/netlink/af_netlink.c:2485
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:811
 netlink_unicast_kernel net/netlink/af_netlink.c:1307 [inline]
 netlink_unicast+0x54e/0x800 net/netlink/af_netlink.c:1333
 netlink_sendmsg+0x90f/0xe00 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:651 [inline]
 __sock_sendmsg+0x154/0x190 net/socket.c:663
 ____sys_sendmsg+0x70d/0x870 net/socket.c:2378
 ___sys_sendmsg+0xf3/0x170 net/socket.c:2432
 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2461
 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x67/0xd1
RIP: 0033:0x7f74543e5b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f745195b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f74544f8f60 RCX: 00007f74543e5b19
RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006
RBP: 00007f745443ff6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd6247959f R14: 00007f745195b300 R15: 0000000000022000
ieee80211 €˜
§°ÇÛ ”uòQÇC	!: Selected rate control algorithm 'minstrel_ht'
sysfs: cannot create duplicate filename '/class/ieee80211/€˜
§°ÇÛ ”uòQÇC	!'
CPU: 0 PID: 365626 Comm: syz-executor.1 Not tainted 5.10.238 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x107/0x167 lib/dump_stack.c:118
 sysfs_warn_dup.cold+0x1c/0x29 fs/sysfs/dir.c:30
 sysfs_do_create_link_sd+0x122/0x140 fs/sysfs/symlink.c:51
 sysfs_do_create_link fs/sysfs/symlink.c:80 [inline]
 sysfs_create_link+0x5f/0xc0 fs/sysfs/symlink.c:92
 device_add_class_symlinks drivers/base/core.c:2751 [inline]
 device_add+0x703/0x1c50 drivers/base/core.c:2959
 wiphy_register+0x1da6/0x2850 net/wireless/core.c:915
 ieee80211_register_hw+0x23c5/0x38b0 net/mac80211/main.c:1295
 mac80211_hwsim_new_radio+0x1d04/0x4290 drivers/net/wireless/mac80211_hwsim.c:3300
 hwsim_new_radio_nl+0x991/0x1080 drivers/net/wireless/mac80211_hwsim.c:3881
 genl_family_rcv_msg_doit+0x22d/0x330 net/netlink/genetlink.c:739
 genl_family_rcv_msg net/netlink/genetlink.c:783 [inline]
 genl_rcv_msg+0x36a/0x5a0 net/netlink/genetlink.c:800
 netlink_rcv_skb+0x14b/0x430 net/netlink/af_netlink.c:2485
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:811
 netlink_unicast_kernel net/netlink/af_netlink.c:1307 [inline]
 netlink_unicast+0x54e/0x800 net/netlink/af_netlink.c:1333
 netlink_sendmsg+0x90f/0xe00 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:651 [inline]
 __sock_sendmsg+0x154/0x190 net/socket.c:663
 ____sys_sendmsg+0x70d/0x870 net/socket.c:2378
 ___sys_sendmsg+0xf3/0x170 net/socket.c:2432
 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2461
 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x67/0xd1
RIP: 0033:0x7fcf94a64b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fcf91fda188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fcf94b77f60 RCX: 00007fcf94a64b19
RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005
RBP: 00007fcf94abef6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe8525b3bf R14: 00007fcf91fda300 R15: 0000000000022000
loop2: detected capacity change from 0 to 41948160
loop2: detected capacity change from 0 to 41948160
loop6: detected capacity change from 0 to 41948160