IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 BUG: sleeping function called from invalid context at net/mac80211/sta_info.c:1850 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 in_atomic(): 0, irqs_disabled(): 0, pid: 29, name: kworker/u4:2 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 4 locks held by kworker/u4:2/29: #0: 00000000f99124e3 ((wq_completion)"%s"wiphy_name(local->hw.wiphy)){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2126 #1: 000000000a564715 ((work_completion)(&sdata->work)){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2130 IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready #2: 000000003aafb27b (&wdev->mtx){+.+.}, at: sdata_lock net/mac80211/ieee80211_i.h:990 [inline] #2: 000000003aafb27b (&wdev->mtx){+.+.}, at: ieee80211_ibss_work+0x85/0xe10 net/mac80211/ibss.c:1675 F2FS-fs (loop2): Found nat_bits in checkpoint IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready #3: 0000000078879f38 (rcu_read_lock){....}, at: sta_info_insert_finish net/mac80211/sta_info.c:573 [inline] #3: 0000000078879f38 (rcu_read_lock){....}, at: sta_info_insert_rcu+0x48e/0x2310 net/mac80211/sta_info.c:661 wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 Preemption disabled at: [] rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1076 [inline] [] rcu_lockdep_current_cpu_online+0x32/0x1b0 kernel/rcu/tree.c:1068 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready CPU: 1 PID: 29 Comm: kworker/u4:2 Not tainted 4.19.159-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: phy8 ieee80211_iface_work Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2fe lib/dump_stack.c:118 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6196 sta_info_move_state+0x32/0x900 net/mac80211/sta_info.c:1850 sta_info_free+0x55/0x390 net/mac80211/sta_info.c:260 sta_info_insert_rcu+0x517/0x2310 net/mac80211/sta_info.c:667 ieee80211_ibss_finish_sta+0x25b/0x360 net/mac80211/ibss.c:601 ieee80211_ibss_work+0x2b6/0xe10 net/mac80211/ibss.c:1692 ieee80211_iface_work+0x7ba/0x8a0 net/mac80211/iface.c:1366 process_one_work+0x864/0x1570 kernel/workqueue.c:2155 worker_thread+0x64c/0x1130 kernel/workqueue.c:2298 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 F2FS-fs (loop2): Mounted with checkpoint version = 7ad43cd6 wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready F2FS-fs (loop3): Found nat_bits in checkpoint F2FS-fs (loop3): Mounted with checkpoint version = 7ad43cd6 netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. ubi0: attaching mtd0 ubi0: scanning is finished ubi0: empty MTD device detected ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 ubi0: VID header offset: 64 (aligned 64), data offset: 128 ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 424709019 ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 ubi0: background thread "ubi_bgt0d" started, PID 9858 device bond0 entered promiscuous mode device bond_slave_0 entered promiscuous mode device bond_slave_1 entered promiscuous mode netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. ldm_validate_privheads(): Disk read failed. loop1: p2 < > p4 loop1: partition table partially beyond EOD, truncated loop1: p2 size 2 extends beyond EOD, truncated misc userio: No port type given on /dev/userio misc userio: The device must be registered before sending interrupts netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. loop1: p4 size 2097152 extends beyond EOD, truncated netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. ldm_validate_privheads(): Disk read failed. qnx6: invalid mount options. loop1: p2 < > p4 loop1: partition table partially beyond EOD, truncated loop1: p2 size 2 extends beyond EOD, truncated loop1: p4 size 2097152 extends beyond EOD, truncated ldm_validate_privheads(): Disk read failed. loop1: p2 < > p4 loop1: partition table partially beyond EOD, truncated loop1: p2 size 2 extends beyond EOD, truncated loop1: p4 size 2097152 extends beyond EOD, truncated qnx6: invalid mount options. ldm_validate_privheads(): Disk read failed. loop1: p2 < > p4 loop1: partition table partially beyond EOD, truncated loop1: p2 size 2 extends beyond EOD, truncated A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. loop1: p4 size 2097152 extends beyond EOD, truncated A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. qnx6: invalid mount options. ldm_validate_privheads(): Disk read failed. qnx6: invalid mount options. loop1: p2 < > p4 loop1: partition table partially beyond EOD, truncated loop1: p2 size 2 extends beyond EOD, truncated loop1: p4 size 2097152 extends beyond EOD, truncated netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.