Warning: Permanently added '10.128.0.72' (ECDSA) to the list of known hosts. syzkaller login: [ 352.706899][ T8432] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' [ 352.766578][ T8436] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' [ 352.786941][ T293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.795185][ T293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.801812][ T8438] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht' [ 352.819124][ T8545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 352.833935][ T293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.837629][ T8439] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht' [ 352.855014][ T293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.881996][ T8545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 352.895496][ T8437] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 352.905578][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.912148][ T8432] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 352.928497][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.928599][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.936289][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.948746][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 352.968734][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 352.984699][ T8437] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 352.993644][ T8614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.004821][ T293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.012169][ T8614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.014593][ T293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 353.033397][ T8436] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 353.050732][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.050853][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 353.059971][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.068277][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 353.095316][ T8439] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' [ 353.107974][ C0] hrtimer: interrupt took 32749 ns [ 353.116059][ T8636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.125287][ T8636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.134756][ T8545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program executing program [ 353.146739][ T8438] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 353.162349][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.178615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 353.187100][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 353.210434][ T8440] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 353.242461][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 353.251503][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.301790][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.311928][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.320427][ T8440] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' executing program executing program [ 353.352110][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.372225][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 353.392544][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 353.461789][ T8676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.495415][ T8676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program executing program [ 353.573163][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 459.548095][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 459.554787][ C0] rcu: 0-....: (10276 ticks this GP) idle=73f/1/0x4000000000000000 softirq=8936/8939 fqs=3830 [ 459.565455][ C0] (t=10501 jiffies g=8457 q=4130) [ 459.570557][ C0] NMI backtrace for cpu 0 [ 459.574866][ C0] CPU: 0 PID: 8686 Comm: syz-executor159 Not tainted 5.14.0-syzkaller #0 [ 459.583265][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.593301][ C0] Call Trace: [ 459.596551][ C0] [ 459.599368][ C0] dump_stack_lvl+0xcd/0x134 [ 459.603942][ C0] nmi_cpu_backtrace.cold+0x47/0x144 [ 459.609200][ C0] ? lapic_can_unplug_cpu+0x80/0x80 [ 459.614376][ C0] nmi_trigger_cpumask_backtrace+0x1ae/0x220 [ 459.620590][ C0] rcu_dump_cpu_stacks+0x25e/0x3f0 [ 459.625678][ C0] rcu_sched_clock_irq.cold+0x9d/0x746 [ 459.631447][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 459.636444][ C0] ? rcu_read_lock_sched_held+0xd/0x70 [ 459.641873][ C0] ? lock_acquire+0x442/0x510 [ 459.646520][ C0] ? rcutree_dead_cpu+0x30/0x30 [ 459.651605][ C0] ? lock_release+0x522/0x720 [ 459.656252][ C0] ? lock_release+0x720/0x720 [ 459.660898][ C0] ? tick_sched_timer+0x2b/0x2d0 [ 459.665809][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 459.670842][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 459.676372][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 459.682158][ C0] update_process_times+0x16d/0x200 [ 459.687329][ C0] tick_sched_handle+0x9b/0x180 [ 459.692157][ C0] tick_sched_timer+0x1b0/0x2d0 [ 459.696981][ C0] ? get_cpu_iowait_time_us+0x3f0/0x3f0 [ 459.702586][ C0] __hrtimer_run_queues+0x1c0/0xe50 [ 459.707755][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 459.713793][ C0] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 459.719937][ C0] hrtimer_interrupt+0x31c/0x790 [ 459.724949][ C0] __sysvec_apic_timer_interrupt+0x146/0x530 [ 459.731080][ C0] sysvec_apic_timer_interrupt+0x40/0xc0 [ 459.736694][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 459.742647][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 459.748969][ C0] Code: 01 f0 4d 89 03 e9 63 fd ff ff b9 ff ff ff ff ba 08 00 00 00 4d 8b 03 48 0f bd ca 49 8b 45 00 48 63 c9 e9 64 ff ff ff 0f 1f 00 <65> 8b 05 39 d2 8b 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b [ 459.768548][ C0] RSP: 0018:ffffc90000007cc8 EFLAGS: 00000246 [ 459.774588][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000100 [ 459.782779][ C0] RDX: ffff888026c01c80 RSI: ffffffff8166647f RDI: 0000000000000003 [ 459.790811][ C0] RBP: 0000000000010406 R08: 0000000000000000 R09: 0000000000000000 [ 459.798754][ C0] R10: ffffffff81666475 R11: 0000000000000000 R12: 0000000000000000 [ 459.806956][ C0] R13: dffffc0000000000 R14: ffffffff8b99ee08 R15: ffff88807eb31450 [ 459.814901][ C0] ? ktime_get_with_offset+0x1e5/0x500 [ 459.820417][ C0] ? ktime_get_with_offset+0x1ef/0x500 [ 459.825849][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 459.832061][ C0] ktime_get_with_offset+0x1f5/0x500 [ 459.837408][ C0] mac80211_hwsim_beacon_tx+0x2e6/0x930 [ 459.843107][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 459.848969][ C0] ? rcu_read_lock_sched_held+0xd/0x70 [ 459.854400][ C0] __iterate_interfaces+0x1e5/0x520 [ 459.859572][ C0] ? mac80211_hwsim_tx_frame+0x2a0/0x2a0 [ 459.865356][ C0] ? mac80211_hwsim_tx_frame+0x2a0/0x2a0 [ 459.871278][ C0] ? mac80211_hwsim_addr_match+0x180/0x180 [ 459.877063][ C0] ieee80211_iterate_active_interfaces_atomic+0x70/0x180 [ 459.884059][ C0] mac80211_hwsim_beacon+0xd5/0x1a0 [ 459.889321][ C0] __hrtimer_run_queues+0x609/0xe50 [ 459.894517][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 459.900473][ C0] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 459.906517][ C0] hrtimer_run_softirq+0x17b/0x360 [ 459.911603][ C0] __do_softirq+0x29b/0x9c2 [ 459.916266][ C0] __irq_exit_rcu+0x123/0x180 [ 459.921115][ C0] irq_exit_rcu+0x5/0x20 [ 459.925520][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 459.931313][ C0] [ 459.934217][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 459.940707][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x7/0x60 [ 459.947493][ C0] Code: fd ff ff b9 ff ff ff ff ba 08 00 00 00 4d 8b 03 48 0f bd ca 49 8b 45 00 48 63 c9 e9 64 ff ff ff 0f 1f 00 65 8b 05 39 d2 8b 7e <89> c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b 14 25 40 f0 01 00 a9 [ 459.967191][ C0] RSP: 0018:ffffc9000209f670 EFLAGS: 00000246 [ 459.973230][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 459.981175][ C0] RDX: 0000000000000000 RSI: ffff888026c01c80 RDI: 0000000000000003 [ 459.989117][ C0] RBP: ffffea0001bfbd80 R08: 0000000000000000 R09: ffffea0001bfbd87 [ 459.997496][ C0] R10: ffffffff81a015d3 R11: 0000000000000000 R12: 0000000000000000 [ 460.005440][ C0] R13: 0000000000000000 R14: ffffea0001bfbd88 R15: ffff888071089a90 [ 460.013485][ C0] ? lru_cache_add+0x233/0xa70 [ 460.018230][ C0] lru_cache_add+0x241/0xa70 [ 460.022844][ C0] __handle_mm_fault+0x35e6/0x5320 [ 460.027931][ C0] ? vm_iomap_memory+0x190/0x190 [ 460.032843][ C0] ? lock_release+0x720/0x720 [ 460.037494][ C0] ? cgroup_rstat_updated+0x284/0x390 [ 460.042842][ C0] handle_mm_fault+0x1c8/0x790 [ 460.047580][ C0] do_user_addr_fault+0x48b/0x11c0 [ 460.052669][ C0] exc_page_fault+0x9e/0x180 [ 460.057235][ C0] asm_exc_page_fault+0x1e/0x30 [ 460.062057][ C0] RIP: 0010:__clear_user+0x40/0x70 [ 460.067141][ C0] Code: c5 e7 89 e8 d2 ad b2 fd 0f 01 cb 48 89 d8 48 c1 eb 03 48 89 ef 83 e0 07 48 89 d9 48 85 c9 74 19 66 2e 0f 1f 84 00 00 00 00 00 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 460.086776][ C0] RSP: 0018:ffffc9000209f9b0 EFLAGS: 00050206 [ 460.092904][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 000000000000008b [ 460.100849][ C0] RDX: ffff888026c01c80 RSI: ffffffff83f80a6e RDI: 0000000020f6cfff [ 460.108794][ C0] RBP: 0000000020f6c457 R08: 0000000000000000 R09: ffffffff8d6e6ad7 [ 460.116738][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000020f6d457 [ 460.124680][ C0] R13: 0000000020f6c457 R14: dffffc0000000000 R15: 0000000000000000 [ 460.132626][ C0] ? __clear_user+0x1e/0x70 [ 460.137104][ C0] clear_user+0xd3/0x110 [ 460.141319][ C0] iov_iter_zero+0x1bf/0x14a0 [ 460.145983][ C0] ? _copy_mc_to_iter+0x17a0/0x17a0 [ 460.151153][ C0] ? asm_sysvec_irq_work+0x12/0x20 [ 460.156238][ C0] ? trace_hardirqs_on+0x5b/0x1c0 [ 460.161238][ C0] ? asm_sysvec_irq_work+0x12/0x20 [ 460.166321][ C0] ? read_iter_zero+0xa1/0x250 [ 460.171058][ C0] read_iter_zero+0x10f/0x250 [ 460.175706][ C0] do_iter_readv_writev+0x56d/0x750 [ 460.180877][ C0] ? new_sync_write+0x660/0x660 [ 460.185723][ C0] ? security_file_permission+0xab/0xd0 [ 460.191241][ C0] do_iter_read+0x2f8/0x760 [ 460.195718][ C0] ? import_iovec+0x10c/0x150 [ 460.200367][ C0] vfs_readv+0xe5/0x150 [ 460.204497][ C0] ? vfs_iter_read+0xa0/0xa0 [ 460.209072][ C0] ? _raw_spin_unlock+0x24/0x40 [ 460.213894][ C0] ? putname+0x10c/0x150 [ 460.218109][ C0] ? do_sys_openat2+0xa1/0x4d0 [ 460.222844][ C0] ? rcu_read_lock_sched_held+0xd/0x70 [ 460.228363][ C0] ? lock_acquire+0x442/0x510 [ 460.233113][ C0] ? rcu_read_lock_sched_held+0xd/0x70 [ 460.238555][ C0] ? lock_release+0x522/0x720 [ 460.243204][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 460.249431][ C0] ? __fget_light+0x215/0x280 [ 460.254078][ C0] do_readv+0x139/0x300 [ 460.258209][ C0] ? vfs_readv+0x150/0x150 [ 460.262598][ C0] ? trace_hardirqs_on+0x51/0x1c0 [ 460.267596][ C0] ? syscall_enter_from_user_mode+0x21/0x70 [ 460.273462][ C0] ? syscall_enter_from_user_mode+0x2b/0x70 [ 460.279328][ C0] do_syscall_64+0x35/0xb0 [ 460.283736][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 460.289606][ C0] RIP: 0033:0x4411e9 [ 460.293475][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 460.313054][ C0] RSP: 002b:00007ffe1efc0218 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 460.321434][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004411e9 [ 460.329463][ C0] RDX: 000000000000000a RSI: 0000000020001900 RDI: 0000000000000005 [ 460.337407][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000c00000000 [ 460.345613][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 460.354526][ C0] R13: 00007ffe1efc0280 R14: 00007ffe1efc0270 R15: 00000000004b83f0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program