wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) ieee802154 phy0 wpan0: encryption failed: -22 ieee802154 phy1 wpan1: encryption failed: -22 wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) BUG: sleeping function called from invalid context at net/core/sock.c:2863 in_atomic(): 1, irqs_disabled(): 0, pid: 31640, name: syz-executor.2 1 lock held by syz-executor.2/31640: #0: 0000000035a2cd11 (hci_sk_list.lock){++++}, at: hci_sock_dev_event+0x3db/0x660 net/bluetooth/hci_sock.c:756 Preemption disabled at: [<0000000000000000>] (null) CPU: 0 PID: 31640 Comm: syz-executor.2 Not tainted 4.19.202-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6192 lock_sock_nested+0x33/0x110 net/core/sock.c:2863 lock_sock include/net/sock.h:1510 [inline] hci_sock_dev_event+0x465/0x660 net/bluetooth/hci_sock.c:758 hci_unregister_dev+0x25b/0x910 net/bluetooth/hci_core.c:3292 vhci_release+0x70/0xe0 drivers/bluetooth/hci_vhci.c:354 __fput+0x2ce/0x890 fs/file_table.c:278 task_work_run+0x148/0x1c0 kernel/task_work.c:113 exit_task_work include/linux/task_work.h:22 [inline] do_exit+0xbf3/0x2be0 kernel/exit.c:870 do_group_exit+0x125/0x310 kernel/exit.c:967 get_signal+0x3f2/0x1f70 kernel/signal.c:2589 do_signal+0x8f/0x1670 arch/x86/kernel/signal.c:799 exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: Bad RIP value. RSP: 002b:00007f983033a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: fffffffffffffffc RBX: 000000000056c038 RCX: 00000000004665e9 RDX: 0000000020000780 RSI: 0000000020000740 RDI: 0000000040000000 RBP: 00000000004bfcc4 R08: 0000000020000800 R09: 0000000000000000 R10: 00000000200007c0 R11: 0000000000000246 R12: 000000000056c038 R13: 00007ffd59918bdf R14: 00007f983033a300 R15: 0000000000022000 Left network mode netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. batman_adv: batadv0: Interface deactivated: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Interface deactivated: batadv_slave_1 batman_adv: batadv0: Removing interface: batadv_slave_1 bridge0: port 2(bridge_slave_1) entered disabled state device bridge_slave_0 left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state device bridge0 left promiscuous mode device veth1_macvtap left promiscuous mode device veth0_macvtap left promiscuous mode device veth1_vlan left promiscuous mode device veth0_vlan left promiscuous mode Bluetooth: hci2: command 0x0409 tx timeout Bluetooth: hci2: command 0x041b tx timeout bond2 (unregistering): Released all slaves bond1 (unregistering): Releasing active interface veth3 bond1 (unregistering): Released all slaves device hsr_slave_1 left promiscuous mode device hsr_slave_0 left promiscuous mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed bond0 (unregistering): Releasing backup interface bond_slave_1 bond0 (unregistering): Releasing backup interface bond_slave_0