IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 BUG: sleeping function called from invalid context at net/mac80211/sta_info.c:1850 in_atomic(): 0, irqs_disabled(): 0, pid: 2881, name: kworker/u4:3 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 4 locks held by kworker/u4:3/2881: #0: 00000000c66262f5 ((wq_completion)"%s"wiphy_name(local->hw.wiphy)){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2126 #1: 000000000953af6d ((work_completion)(&sdata->work)){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2130 #2: 00000000f74bf1f2 (&wdev->mtx){+.+.}, at: sdata_lock net/mac80211/ieee80211_i.h:990 [inline] #2: 00000000f74bf1f2 (&wdev->mtx){+.+.}, at: ieee80211_ibss_work+0x85/0xe10 net/mac80211/ibss.c:1675 #3: 00000000235ed5a3 (rcu_read_lock){....}, at: sta_info_insert_finish net/mac80211/sta_info.c:573 [inline] #3: 00000000235ed5a3 (rcu_read_lock){....}, at: sta_info_insert_rcu+0x48e/0x2310 net/mac80211/sta_info.c:661 Preemption disabled at: [] rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1076 [inline] [] rcu_lockdep_current_cpu_online+0x32/0x1b0 kernel/rcu/tree.c:1068 CPU: 1 PID: 2881 Comm: kworker/u4:3 Not tainted 4.19.159-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: phy8 ieee80211_iface_work Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2fe lib/dump_stack.c:118 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6196 sta_info_move_state+0x32/0x900 net/mac80211/sta_info.c:1850 sta_info_free+0x55/0x390 net/mac80211/sta_info.c:260 sta_info_insert_rcu+0x517/0x2310 net/mac80211/sta_info.c:667 ieee80211_ibss_finish_sta+0x25b/0x360 net/mac80211/ibss.c:601 ieee80211_ibss_work+0x2b6/0xe10 net/mac80211/ibss.c:1692 ieee80211_iface_work+0x7ba/0x8a0 net/mac80211/iface.c:1366 process_one_work+0x864/0x1570 kernel/workqueue.c:2155 worker_thread+0x64c/0x1130 kernel/workqueue.c:2298 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium UDF-fs: warning (device loop3): udf_load_vrs: No anchor found UDF-fs: Scanning with blocksize 512 failed UDF-fs: warning (device loop3): udf_load_vrs: No anchor found UDF-fs: Scanning with blocksize 1024 failed UDF-fs: warning (device loop3): udf_load_vrs: No anchor found UDF-fs: Scanning with blocksize 2048 failed UDF-fs: warning (device loop3): udf_load_vrs: No anchor found UDF-fs: Scanning with blocksize 4096 failed UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) syz-executor.4 (9751) used greatest stack depth: 23592 bytes left netlink: 'syz-executor.2': attribute type 1 has an invalid length. audit: type=1800 audit(1606136115.327:2): pid=9860 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=15785 res=0 qnx6: invalid mount options. audit: type=1800 audit(1606136115.547:3): pid=9863 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=15785 res=0 qnx6: invalid mount options. overlayfs: failed to resolve './file1': -2 overlayfs: failed to resolve './file1': -2 audit: type=1800 audit(1606136115.857:4): pid=9840 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15784 res=0 EXT4-fs (loop4): Invalid want_extra_isize 7 EXT4-fs (loop4): Invalid want_extra_isize 7 audit: type=1800 audit(1606136116.547:5): pid=9897 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15758 res=0 EXT4-fs (loop5): Unrecognized mount option "" or missing value audit: type=1800 audit(1606136116.857:6): pid=9954 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15791 res=0 audit: type=1800 audit(1606136116.857:7): pid=9954 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15791 res=0 EXT4-fs (loop5): Unrecognized mount option "" or missing value EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002e018, mo2=0006] xt_CT: No such helper "snmp_trap" System zones: 1-2, 19-19, 35-38, 46-46 EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue audit: type=1800 audit(1606136117.607:8): pid=9946 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15792 res=0 xt_CT: No such helper "snmp_trap" netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. EXT4-fs (loop2): Unrecognized mount option "=‘È$š¢ahÚêKù" or missing value BTRFS: device fsid 8ae5b401-4ad8-4168-8672-01e7db0b90b5 devid 1 transid 5 /dev/loop1 BTRFS error (device loop1): unsupported checksum algorithm 3 BTRFS error (device loop1): superblock checksum mismatch overlayfs: unrecognized mount option "workdir" or missing value BTRFS error (device loop1): open_ctree failed EXT4-fs (loop2): Unrecognized mount option "=‘È$š¢ahÚêKù" or missing value hfs: invalid gid -1 hfs: unable to parse mount options overlayfs: unrecognized mount option "workdir" or missing value IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 bridge0: port 2(bridge_slave_1) entered disabled state bridge0: port 1(bridge_slave_0) entered disabled state