wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready BUG: sleeping function called from invalid context at net/mac80211/sta_info.c:1844 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 in_atomic(): 0, irqs_disabled(): 0, pid: 5, name: kworker/u4:0 4 locks held by kworker/u4:0/5: #0: ("%s"wiphy_name(local->hw.wiphy)){+.+.}, at: [] process_one_work+0x6b0/0x14a0 kernel/workqueue.c:2087 #1: ((&sdata->work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 kernel/workqueue.c:2091 #2: (&wdev->mtx){+.+.}, at: [] sdata_lock net/mac80211/ieee80211_i.h:986 [inline] #2: (&wdev->mtx){+.+.}, at: [] ieee80211_ibss_work+0x72/0xc90 net/mac80211/ibss.c:1675 #3: (rcu_read_lock){....}, at: [] sta_info_insert_finish net/mac80211/sta_info.c:553 [inline] #3: (rcu_read_lock){....}, at: [] sta_info_insert_rcu+0x48d/0x1f40 net/mac80211/sta_info.c:634 Preemption disabled at: [] rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1185 [inline] [] rcu_lockdep_current_cpu_online+0x30/0x140 kernel/rcu/tree.c:1177 CPU: 0 PID: 5 Comm: kworker/u4:0 Not tainted 4.14.208-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: phy8 ieee80211_iface_work Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x283 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6042 sta_info_move_state+0x32/0x930 net/mac80211/sta_info.c:1844 sta_info_free+0x50/0x330 net/mac80211/sta_info.c:260 sta_info_insert_rcu+0x23c/0x1f40 net/mac80211/sta_info.c:640 ieee80211_ibss_finish_sta+0x1db/0x2b0 net/mac80211/ibss.c:601 ieee80211_ibss_work+0x260/0xc90 net/mac80211/ibss.c:1692 ieee80211_iface_work+0x690/0x770 net/mac80211/iface.c:1383 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready audit: type=1804 audit(1606211916.285:3): pid=9495 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir869300320/syzkaller.eEqfTD/1/cgroup.controllers" dev="sda1" ino=15744 res=1 IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready BUG: sleeping function called from invalid context at net/mac80211/sta_info.c:1844 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 in_atomic(): 0, irqs_disabled(): 0, pid: 22, name: kworker/u4:1 4 locks held by kworker/u4:1/22: #0: ("%s"wiphy_name(local->hw.wiphy)){+.+.}, at: [] process_one_work+0x6b0/0x14a0 kernel/workqueue.c:2087 #1: ((&sdata->work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 kernel/workqueue.c:2091 #2: (&wdev->mtx){+.+.}, at: [] sdata_lock net/mac80211/ieee80211_i.h:986 [inline] #2: (&wdev->mtx){+.+.}, at: [] ieee80211_ibss_work+0x72/0xc90 net/mac80211/ibss.c:1675 #3: (rcu_read_lock){....}, at: [] sta_info_insert_finish net/mac80211/sta_info.c:553 [inline] #3: (rcu_read_lock){....}, at: [] sta_info_insert_rcu+0x48d/0x1f40 net/mac80211/sta_info.c:634 Preemption disabled at: [] rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1185 [inline] [] rcu_lockdep_current_cpu_online+0x30/0x140 kernel/rcu/tree.c:1177 CPU: 1 PID: 22 Comm: kworker/u4:1 Tainted: G W 4.14.208-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: phy12 ieee80211_iface_work Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x283 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6042 sta_info_move_state+0x32/0x930 net/mac80211/sta_info.c:1844 sta_info_free+0x50/0x330 net/mac80211/sta_info.c:260 sta_info_insert_rcu+0x23c/0x1f40 net/mac80211/sta_info.c:640 ieee80211_ibss_finish_sta+0x1db/0x2b0 net/mac80211/ibss.c:601 ieee80211_ibss_work+0x260/0xc90 net/mac80211/ibss.c:1692 ieee80211_iface_work+0x690/0x770 net/mac80211/iface.c:1383 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! audit: type=1804 audit(1606211917.285:4): pid=9617 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir712071060/syzkaller.rQZr5H/1/cgroup.controllers" dev="sda1" ino=15778 res=1 audit: type=1804 audit(1606211917.315:5): pid=9618 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir869300320/syzkaller.eEqfTD/2/cgroup.controllers" dev="sda1" ino=15780 res=1 netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) ptrace attach of "/root/syz-executor.4"[9961] was attempted by "/root/syz-executor.4"[9965] ptrace attach of "/root/syz-executor.4"[9983] was attempted by "/root/syz-executor.4"[9987] ptrace attach of "/root/syz-executor.2"[9972] was attempted by "/root/syz-executor.2"[9981] ptrace attach of "/root/syz-executor.3"[9998] was attempted by "/root/syz-executor.3"[10002] ptrace attach of "/root/syz-executor.0"[9994] was attempted by "/root/syz-executor.0"[10005] ptrace attach of "/root/syz-executor.2"[10006] was attempted by "/root/syz-executor.2"[10011] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. ptrace attach of "/root/syz-executor.2"[10033] was attempted by "/root/syz-executor.2"[10037] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. ptrace attach of "/root/syz-executor.2"[10052] was attempted by "/root/syz-executor.2"[10055] ptrace attach of "/root/syz-executor.5"[10062] was attempted by "/root/syz-executor.5"[10063] ptrace attach of "/root/syz-executor.2"[10075] was attempted by "/root/syz-executor.2"[10079] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue syz-executor.0 (10227) used greatest stack depth: 24184 bytes left EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.