audit: type=1804 audit(1606151218.777:8): pid=9660 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir691911080/syzkaller.pQOD1E/1/cgroup.controllers" dev="sda1" ino=15756 res=1 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready audit: type=1804 audit(1606151218.897:9): pid=9685 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir686640922/syzkaller.e5FsxI/0/cgroup.controllers" dev="sda1" ino=15770 res=1 BUG: sleeping function called from invalid context at net/mac80211/sta_info.c:1850 in_atomic(): 0, irqs_disabled(): 0, pid: 108, name: kworker/u4:4 4 locks held by kworker/u4:4/108: #0: 000000009d927017 ((wq_completion)"%s"wiphy_name(local->hw.wiphy)){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2126 audit: type=1804 audit(1606151218.977:10): pid=9691 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir233984231/syzkaller.VitxSH/1/cgroup.controllers" dev="sda1" ino=15751 res=1 #1: 000000009af19392 ((work_completion)(&sdata->work)){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2130 #2: 0000000078f22eba (&wdev->mtx){+.+.}, at: sdata_lock net/mac80211/ieee80211_i.h:990 [inline] #2: 0000000078f22eba (&wdev->mtx){+.+.}, at: ieee80211_ibss_work+0x85/0xe10 net/mac80211/ibss.c:1675 #3: 00000000d631fa07 (rcu_read_lock){....}, at: sta_info_insert_finish net/mac80211/sta_info.c:573 [inline] #3: 00000000d631fa07 (rcu_read_lock){....}, at: sta_info_insert_rcu+0x48e/0x2310 net/mac80211/sta_info.c:661 audit: type=1804 audit(1606151219.337:11): pid=9715 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir641943900/syzkaller.esj0BJ/0/cgroup.controllers" dev="sda1" ino=15777 res=1 Preemption disabled at: [] rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1076 [inline] [] rcu_lockdep_current_cpu_online+0x32/0x1b0 kernel/rcu/tree.c:1068 CPU: 1 PID: 108 Comm: kworker/u4:4 Not tainted 4.19.159-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: phy12 ieee80211_iface_work Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2fe lib/dump_stack.c:118 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6196 sta_info_move_state+0x32/0x900 net/mac80211/sta_info.c:1850 sta_info_free+0x55/0x390 net/mac80211/sta_info.c:260 sta_info_insert_rcu+0x517/0x2310 net/mac80211/sta_info.c:667 ieee80211_ibss_finish_sta+0x25b/0x360 net/mac80211/ibss.c:601 ieee80211_ibss_work+0x2b6/0xe10 net/mac80211/ibss.c:1692 ieee80211_iface_work+0x7ba/0x8a0 net/mac80211/iface.c:1366 process_one_work+0x864/0x1570 kernel/workqueue.c:2155 worker_thread+0x64c/0x1130 kernel/workqueue.c:2298 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 BUG: sleeping function called from invalid context at net/mac80211/sta_info.c:1850 in_atomic(): 0, irqs_disabled(): 0, pid: 108, name: kworker/u4:4 4 locks held by kworker/u4:4/108: #0: 000000009d927017 ((wq_completion)"%s"wiphy_name(local->hw.wiphy)){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2126 #1: 000000009af19392 ((work_completion)(&sdata->work)){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2130 #2: 0000000078f22eba (&wdev->mtx){+.+.}, at: sdata_lock net/mac80211/ieee80211_i.h:990 [inline] #2: 0000000078f22eba (&wdev->mtx){+.+.}, at: ieee80211_ibss_work+0x85/0xe10 net/mac80211/ibss.c:1675 #3: 00000000d631fa07 (rcu_read_lock){....}, at: sta_info_insert_finish net/mac80211/sta_info.c:573 [inline] #3: 00000000d631fa07 (rcu_read_lock){....}, at: sta_info_insert_rcu+0x48e/0x2310 net/mac80211/sta_info.c:661 Preemption disabled at: [<0000000000000000>] (null) CPU: 1 PID: 108 Comm: kworker/u4:4 Tainted: G W 4.19.159-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: phy12 ieee80211_iface_work Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2fe lib/dump_stack.c:118 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6196 sta_info_move_state+0x32/0x900 net/mac80211/sta_info.c:1850 sta_info_free+0x55/0x390 net/mac80211/sta_info.c:260 sta_info_insert_rcu+0x517/0x2310 net/mac80211/sta_info.c:667 ieee80211_ibss_finish_sta+0x25b/0x360 net/mac80211/ibss.c:601 ieee80211_ibss_work+0x2b6/0xe10 net/mac80211/ibss.c:1692 ieee80211_iface_work+0x7ba/0x8a0 net/mac80211/iface.c:1366 process_one_work+0x864/0x1570 kernel/workqueue.c:2155 worker_thread+0x64c/0x1130 kernel/workqueue.c:2298 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:908 in_atomic(): 0, irqs_disabled(): 0, pid: 108, name: kworker/u4:4 4 locks held by kworker/u4:4/108: #0: 000000009d927017 ((wq_completion)"%s"wiphy_name(local->hw.wiphy)){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2126 #1: 000000009af19392 ((work_completion)(&sdata->work)){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2130 #2: 0000000078f22eba (&wdev->mtx){+.+.}, at: sdata_lock net/mac80211/ieee80211_i.h:990 [inline] #2: 0000000078f22eba (&wdev->mtx){+.+.}, at: ieee80211_ibss_work+0x85/0xe10 net/mac80211/ibss.c:1675 #3: 00000000d631fa07 (rcu_read_lock){....}, at: sta_info_insert_finish net/mac80211/sta_info.c:573 [inline] #3: 00000000d631fa07 (rcu_read_lock){....}, at: sta_info_insert_rcu+0x48e/0x2310 net/mac80211/sta_info.c:661 Preemption disabled at: [] preempt_schedule_irq+0x83/0x140 kernel/sched/core.c:3742 CPU: 0 PID: 108 Comm: kworker/u4:4 Tainted: G W 4.19.159-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: phy12 ieee80211_iface_work Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2fe lib/dump_stack.c:118 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6196 __mutex_lock_common kernel/locking/mutex.c:908 [inline] __mutex_lock+0xab/0x1260 kernel/locking/mutex.c:1072 ieee80211_recalc_min_chandef+0x49/0x140 net/mac80211/util.c:2338 sta_info_move_state+0x75f/0x900 net/mac80211/sta_info.c:1907 sta_info_free+0x55/0x390 net/mac80211/sta_info.c:260 sta_info_insert_rcu+0x517/0x2310 net/mac80211/sta_info.c:667 ieee80211_ibss_finish_sta+0x25b/0x360 net/mac80211/ibss.c:601 ieee80211_ibss_work+0x2b6/0xe10 net/mac80211/ibss.c:1692 ieee80211_iface_work+0x7ba/0x8a0 net/mac80211/iface.c:1366 process_one_work+0x864/0x1570 kernel/workqueue.c:2155 worker_thread+0x64c/0x1130 kernel/workqueue.c:2298 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 kauditd_printk_skb: 41 callbacks suppressed audit: type=1804 audit(1606151223.309:53): pid=10075 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir641943900/syzkaller.esj0BJ/7/cgroup.controllers" dev="sda1" ino=15776 res=1 audit: type=1804 audit(1606151223.419:54): pid=10088 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir489882379/syzkaller.gIvGfJ/9/cgroup.controllers" dev="sda1" ino=15779 res=1 audit: type=1804 audit(1606151223.459:55): pid=10090 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir081958321/syzkaller.kauxjK/8/cgroup.controllers" dev="sda1" ino=15784 res=1 audit: type=1804 audit(1606151223.519:56): pid=10052 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir691911080/syzkaller.pQOD1E/8/cgroup.controllers" dev="sda1" ino=15770 res=1 audit: type=1804 audit(1606151223.639:57): pid=10107 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir686640922/syzkaller.e5FsxI/7/cgroup.controllers" dev="sda1" ino=15783 res=1 audit: type=1804 audit(1606151223.659:58): pid=10108 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir233984231/syzkaller.VitxSH/9/cgroup.controllers" dev="sda1" ino=15769 res=1 audit: type=1804 audit(1606151223.739:59): pid=10116 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir691911080/syzkaller.pQOD1E/9/cgroup.controllers" dev="sda1" ino=15770 res=1 audit: type=1804 audit(1606151224.029:60): pid=10134 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir641943900/syzkaller.esj0BJ/8/cgroup.controllers" dev="sda1" ino=15776 res=1 audit: type=1804 audit(1606151224.099:61): pid=10137 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir489882379/syzkaller.gIvGfJ/10/cgroup.controllers" dev="sda1" ino=15785 res=1 audit: type=1804 audit(1606151224.199:62): pid=10153 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir081958321/syzkaller.kauxjK/9/cgroup.controllers" dev="sda1" ino=15784 res=1 kauditd_printk_skb: 49 callbacks suppressed audit: type=1804 audit(1606151228.340:112): pid=10574 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir691911080/syzkaller.pQOD1E/18/cgroup.controllers" dev="sda1" ino=15797 res=1 audit: type=1804 audit(1606151228.490:113): pid=10584 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir233984231/syzkaller.VitxSH/18/cgroup.controllers" dev="sda1" ino=15795 res=1 audit: type=1804 audit(1606151228.570:114): pid=10597 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir081958321/syzkaller.kauxjK/18/cgroup.controllers" dev="sda1" ino=15796 res=1 audit: type=1804 audit(1606151228.590:115): pid=10598 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir686640922/syzkaller.e5FsxI/16/cgroup.controllers" dev="sda1" ino=15776 res=1