------------[ cut here ]------------
wlan1: Failed check-sdata-in-driver check, flags: 0x4
WARNING: CPU: 0 PID: 163575 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x4a8/0x5a0
Modules linked in:
CPU: 0 PID: 163575 Comm: syz-executor.7 Not tainted 5.17.0-next-20220322 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:drv_bss_info_changed+0x4a8/0x5a0
Code: a8 03 00 00 48 85 ed 0f 84 a1 00 00 00 e8 f0 dc 6c fd e8 eb dc 6c fd 8b 54 24 04 48 89 ee 48 c7 c7 20 15 ba 84 e8 b2 f2 25 00 <0f> 0b e9 10 fe ff ff e8 cc dc 6c fd e8 b7 3a 35 00 31 ff 89 c3 89
RSP: 0018:ffff88800f0d73e8 EFLAGS: 00010282
loop5: detected capacity change from 0 to 256
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000040000 RSI: ffffffff812b2a28 RDI: ffffed1001e1ae6f
RBP: ffff8880394fc000 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff812ac68c R11: 0000000000000000 R12: ffff8880394fcbc0
R13: 0000000000400000 R14: ffff8880394fdf88 R15: ffff8880394fdf80
FS: 00007fca47a07700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b30f22000 CR3: 000000000d8c4000 CR4: 0000000000350ef0
Call Trace:
ieee80211_bss_info_change_notify+0x9a/0xc0
ieee80211_ocb_leave+0x1ed/0x340
__cfg80211_leave_ocb+0x1d6/0x510
FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
cfg80211_leave_ocb+0x4e/0x70
cfg80211_change_iface+0x7fd/0xea0
nl80211_set_interface+0x65f/0x900
genl_family_rcv_msg_doit+0x22d/0x330
genl_rcv_msg+0x33c/0x5a0
netlink_rcv_skb+0x14b/0x430
genl_rcv+0x24/0x40
netlink_unicast+0x54a/0x800
netlink_sendmsg+0x904/0xe00
sock_sendmsg+0x150/0x190
____sys_sendmsg+0x709/0x870
___sys_sendmsg+0xf3/0x170
__sys_sendmsg+0xe5/0x1b0
do_syscall_64+0x3b/0x90
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fca4a491b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fca47a07188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fca4a5a4f60 RCX: 00007fca4a491b19
RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
RBP: 00007fca4a4ebf6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc41a2536f R14: 00007fca47a07300 R15: 0000000000022000
irq event stamp: 2225
hardirqs last enabled at (2235): [] __up_console_sem+0x78/0x80
hardirqs last disabled at (2244): [] __up_console_sem+0x5d/0x80
softirqs last enabled at (1374): [] __irq_exit_rcu+0x113/0x170
softirqs last disabled at (1333): [] __irq_exit_rcu+0x113/0x170
---[ end trace 0000000000000000 ]---
loop1: detected capacity change from 0 to 256
FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
loop1: detected capacity change from 0 to 256
FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
Bluetooth: hci0: command 0x0c7b tx timeout
loop1: detected capacity change from 0 to 256
FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
UDC core: couldn't find an available UDC or it's busy: -19
misc raw-gadget: fail, usb_gadget_probe_driver returned -19
Bluetooth: hci0: command 0x0c7b tx timeout
UDC core: couldn't find an available UDC or it's busy: -19
misc raw-gadget: fail, usb_gadget_probe_driver returned -19
loop3: detected capacity change from 0 to 512
EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
loop3: detected capacity change from 0 to 512
loop5: detected capacity change from 0 to 132
EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
loop3: detected capacity change from 0 to 512
loop5: detected capacity change from 0 to 132
9pnet_fd: Insufficient options for proto=fd
EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
9pnet_fd: Insufficient options for proto=fd
loop5: detected capacity change from 0 to 132
loop5: detected capacity change from 0 to 132
loop3: detected capacity change from 0 to 512
EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
loop0: detected capacity change from 0 to 36
loop0: detected capacity change from 0 to 36
loop6: detected capacity change from 0 to 36
loop0: detected capacity change from 0 to 36
loop0: detected capacity change from 0 to 36
Bluetooth: hci0: command 0x0c7b tx timeout
loop6: detected capacity change from 0 to 36
loop0: detected capacity change from 0 to 8960
EXT4-fs error (device loop0): ext4_quota_enable:6832: comm syz-executor.0: inode #23043: comm syz-executor.0: iget: illegal inode #
EXT4-fs error (device loop0): ext4_quota_enable:6834: comm syz-executor.0: Bad quota inode # 23043
EXT4-fs warning (device loop0): ext4_enable_quotas:6871: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix.
EXT4-fs (loop0): mount failed
loop0: detected capacity change from 0 to 8960
EXT4-fs error (device loop0): ext4_quota_enable:6832: comm syz-executor.0: inode #23043: comm syz-executor.0: iget: illegal inode #
EXT4-fs error (device loop0): ext4_quota_enable:6834: comm syz-executor.0: Bad quota inode # 23043
EXT4-fs warning (device loop0): ext4_enable_quotas:6871: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix.
EXT4-fs (loop0): mount failed
loop6: detected capacity change from 0 to 36
loop0: detected capacity change from 0 to 8960
EXT4-fs error (device loop0): ext4_quota_enable:6832: comm syz-executor.0: inode #23043: comm syz-executor.0: iget: illegal inode #
EXT4-fs error (device loop0): ext4_quota_enable:6834: comm syz-executor.0: Bad quota inode # 23043
EXT4-fs warning (device loop0): ext4_enable_quotas:6871: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix.
EXT4-fs (loop0): mount failed
syz-executor.6: attempt to access beyond end of device
loop6: rw=524288, want=66, limit=36
syz-executor.6: attempt to access beyond end of device
loop6: rw=524288, want=122, limit=36
syz-executor.6: attempt to access beyond end of device
loop6: rw=524288, want=50, limit=36
syz-executor.6: attempt to access beyond end of device
loop6: rw=524288, want=74, limit=36
syz-executor.6: attempt to access beyond end of device
loop6: rw=0, want=50, limit=36
loop0: detected capacity change from 0 to 8960
Bluetooth: hci0: command 0x0c7b tx timeout
EXT4-fs error (device loop0): ext4_quota_enable:6832: comm syz-executor.0: inode #23043: comm syz-executor.0: iget: illegal inode #
EXT4-fs error (device loop0): ext4_quota_enable:6834: comm syz-executor.0: Bad quota inode # 23043
EXT4-fs warning (device loop0): ext4_enable_quotas:6871: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix.
EXT4-fs (loop0): mount failed
loop0: detected capacity change from 0 to 8960
EXT4-fs error (device loop0): ext4_quota_enable:6832: comm syz-executor.0: inode #23043: comm syz-executor.0: iget: illegal inode #
EXT4-fs error (device loop0): ext4_quota_enable:6834: comm syz-executor.0: Bad quota inode # 23043
EXT4-fs warning (device loop0): ext4_enable_quotas:6871: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix.
EXT4-fs (loop0): mount failed
Bluetooth: hci0: command 0x0c7b tx timeout
loop2: detected capacity change from 0 to 256
FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
loop5: detected capacity change from 0 to 6
loop2: detected capacity change from 0 to 256
FAT-fs (loop5): Directory bread(block 6) failed
FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
FAT-fs (loop5): Directory bread(block 135) failed
FAT-fs (loop5): Directory bread(block 136) failed
FAT-fs (loop5): Directory bread(block 137) failed
FAT-fs (loop5): Directory bread(block 138) failed
FAT-fs (loop5): Directory bread(block 139) failed
FAT-fs (loop5): Directory bread(block 140) failed
FAT-fs (loop5): Directory bread(block 141) failed
FAT-fs (loop5): Directory bread(block 142) failed
FAT-fs (loop5): Directory bread(block 143) failed
FAT-fs (loop5): error, corrupted directory (invalid entries)
FAT-fs (loop5): Filesystem has been set read-only