wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready BUG: sleeping function called from invalid context at net/mac80211/sta_info.c:1844 in_atomic(): 0, irqs_disabled(): 0, pid: 14019, name: kworker/u4:12 4 locks held by kworker/u4:12/14019: #0: ("%s"wiphy_name(local->hw.wiphy)){+.+.}, at: [] process_one_work+0x6b0/0x14a0 kernel/workqueue.c:2087 #1: ((&sdata->work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 kernel/workqueue.c:2091 #2: (&wdev->mtx){+.+.}, at: [] sdata_lock net/mac80211/ieee80211_i.h:986 [inline] #2: (&wdev->mtx){+.+.}, at: [] ieee80211_ibss_work+0x72/0xc90 net/mac80211/ibss.c:1675 #3: (rcu_read_lock){....}, at: [] sta_info_insert_finish net/mac80211/sta_info.c:553 [inline] #3: (rcu_read_lock){....}, at: [] sta_info_insert_rcu+0x48d/0x1f40 net/mac80211/sta_info.c:634 Preemption disabled at: [] rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1185 [inline] [] rcu_lockdep_current_cpu_online+0x30/0x140 kernel/rcu/tree.c:1177 CPU: 0 PID: 14019 Comm: kworker/u4:12 Not tainted 4.14.208-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: phy35 ieee80211_iface_work Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x283 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6042 sta_info_move_state+0x32/0x930 net/mac80211/sta_info.c:1844 sta_info_free+0x50/0x330 net/mac80211/sta_info.c:260 sta_info_insert_rcu+0x23c/0x1f40 net/mac80211/sta_info.c:640 ieee80211_ibss_finish_sta+0x1db/0x2b0 net/mac80211/ibss.c:601 ieee80211_ibss_work+0x260/0xc90 net/mac80211/ibss.c:1692 ieee80211_iface_work+0x690/0x770 net/mac80211/iface.c:1383 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 audit: type=1804 audit(1606149742.261:197): pid=27969 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir231862884/syzkaller.tyBnlq/277/bus" dev="sda1" ino=17309 res=1 sd 0:0:1:0: [sg0] tag#4908 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK sd 0:0:1:0: [sg0] tag#4908 CDB: opcode=0x94 sd 0:0:1:0: [sg0] tag#4908 CDB[00]: 94 e1 ce 17 6e f6 bc ba db 23 b3 ef a0 7b eb a2 sd 0:0:1:0: [sg0] tag#4908 CDB[10]: fa 17 7b f5 91 f1 06 1e d6 ea f5 ee 1d 13 bb a5 sd 0:0:1:0: [sg0] tag#4908 CDB[20]: 36 Bluetooth: hci0 command 0x0409 tx timeout Bluetooth: hci1 command 0x0419 tx timeout sd 0:0:1:0: [sg0] tag#4908 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK sd 0:0:1:0: [sg0] tag#4908 CDB: opcode=0x94 sd 0:0:1:0: [sg0] tag#4908 CDB[00]: 94 e1 ce 17 6e f6 bc ba db 23 b3 ef a0 7b eb a2 sd 0:0:1:0: [sg0] tag#4908 CDB[10]: fa 17 7b f5 91 f1 06 1e d6 ea f5 ee 1d 13 bb a5 sd 0:0:1:0: [sg0] tag#4908 CDB[20]: 36 ip6_tables: ip6tables: counters copy to user failed while replacing table ip6_tables: ip6tables: counters copy to user failed while replacing table BTRFS: device fsid d681b030-ddfd-468c-bf7e-7a9b9838e384 devid 1 transid 7 /dev/loop5 ip6_tables: ip6tables: counters copy to user failed while replacing table BTRFS info (device loop5): disk space caching is enabled BTRFS info (device loop5): has skinny extents ip6_tables: ip6tables: counters copy to user failed while replacing table ip6_tables: ip6tables: counters copy to user failed while replacing table Bluetooth: hci0 command 0x041b tx timeout EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) EXT4-fs (loop5): orphan cleanup on readonly fs EXT4-fs error (device loop5): ext4_ext_check_inode:510: inode #3: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) EXT4-fs error (device loop5): ext4_quota_enable:5715: comm syz-executor.5: Bad quota inode # 3 EXT4-fs warning (device loop5): ext4_enable_quotas:5755: Failed to enable quota tracking (type=-1, err=-117). Please run e2fsck to fix. EXT4-fs (loop5): Cannot turn on quotas: error -117 EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) EXT4-fs (loop5): orphan cleanup on readonly fs EXT4-fs error (device loop5): ext4_ext_check_inode:510: inode #3: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) EXT4-fs error (device loop5): ext4_quota_enable:5715: comm syz-executor.5: Bad quota inode # 3 EXT4-fs warning (device loop5): ext4_enable_quotas:5755: Failed to enable quota tracking (type=-1, err=-117). Please run e2fsck to fix. ip_tables: iptables: counters copy to user failed while replacing table EXT4-fs (loop5): Cannot turn on quotas: error -117 EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) EXT4-fs (loop5): orphan cleanup on readonly fs EXT4-fs error (device loop5): ext4_ext_check_inode:510: inode #3: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) EXT4-fs error (device loop5): ext4_quota_enable:5715: comm syz-executor.5: Bad quota inode # 3 EXT4-fs warning (device loop5): ext4_enable_quotas:5755: Failed to enable quota tracking (type=-1, err=-117). Please run e2fsck to fix. EXT4-fs (loop5): Cannot turn on quotas: error -117 EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue IPVS: ftp: loaded support on port[0] = 21 EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) ip6_tables: ip6tables: counters copy to user failed while replacing table EXT4-fs (loop5): orphan cleanup on readonly fs EXT4-fs error (device loop5): ext4_ext_check_inode:510: inode #3: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) ip6_tables: ip6tables: counters copy to user failed while replacing table EXT4-fs error (device loop5): ext4_quota_enable:5715: comm syz-executor.5: Bad quota inode # 3 EXT4-fs warning (device loop5): ext4_enable_quotas:5755: Failed to enable quota tracking (type=-1, err=-117). Please run e2fsck to fix. Bluetooth: hci0 command 0x040f tx timeout IPVS: ftp: loaded support on port[0] = 21 EXT4-fs (loop5): Cannot turn on quotas: error -117 EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue IPVS: ftp: loaded support on port[0] = 21 Bluetooth: hci0 command 0x0419 tx timeout netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.