Warning: Permanently added '10.128.0.64' (ECDSA) to the list of known hosts. syzkaller login: [ 1080.144301][ T8483] IPVS: ftp: loaded support on port[0] = 21 [ 1080.144298][ T8478] IPVS: ftp: loaded support on port[0] = 21 [ 1080.152654][ T8485] IPVS: ftp: loaded support on port[0] = 21 [ 1080.169654][ T8481] IPVS: ftp: loaded support on port[0] = 21 [ 1080.192858][ T8484] IPVS: ftp: loaded support on port[0] = 21 [ 1080.201151][ T8482] IPVS: ftp: loaded support on port[0] = 21 [ 1080.634400][ T8638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.657633][ T8638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.672093][ T312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.677170][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.690712][ T3200] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1080.717446][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.726067][ T3200] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1080.734357][ T312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.749052][ T3200] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1080.792611][ T312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.795806][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.807941][ T312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.817752][ T8697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.835977][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.865639][ T8638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.882586][ T8697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.892009][ T8638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 1080.917042][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1080.924992][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1080.942344][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1080.953737][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1080.991491][ T8638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.999620][ T8686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.999656][ T8686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.023064][ T8638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.046426][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1081.056351][ C0] hrtimer: interrupt took 44700 ns [ 1081.057870][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1081.082743][ T8686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.097294][ T8686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program executing program [ 1081.151703][ T8638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.192625][ T8638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.202774][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1081.218729][ T8735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 1081.240376][ T8735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program executing program [ 1081.269780][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1081.294388][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program executing program [ 1082.216211][ T3200] Bluetooth: hci0: command 0x0409 tx timeout [ 1082.224222][ T3200] Bluetooth: hci3: command 0x0409 tx timeout [ 1082.232717][ T3200] Bluetooth: hci2: command 0x0409 tx timeout [ 1082.239748][ T3200] Bluetooth: hci4: command 0x0409 tx timeout [ 1082.245904][ T3200] Bluetooth: hci1: command 0x0409 tx timeout executing program [ 1083.187679][ T2997] Bluetooth: hci5: command 0x0409 tx timeout executing program executing program executing program [ 1093.759149][ T2997] Bluetooth: hci5: command 0x041b tx timeout [ 1093.759247][ T2997] Bluetooth: hci1: command 0x041b tx timeout [ 1093.759315][ T2997] Bluetooth: hci4: command 0x041b tx timeout executing program executing program executing program executing program [ 1094.666641][ T2997] Bluetooth: hci2: command 0x041b tx timeout [ 1094.747912][ T2997] Bluetooth: hci3: command 0x041b tx timeout executing program executing program executing program [ 1095.126859][ T2997] Bluetooth: hci0: command 0x041b tx timeout executing program executing program executing program [ 1096.701739][ T8635] Bluetooth: hci1: command 0x040f tx timeout [ 1096.708888][ T8635] Bluetooth: hci5: command 0x040f tx timeout [ 1097.129394][ T8635] Bluetooth: hci4: command 0x040f tx timeout executing program [ 1097.398318][ T8635] Bluetooth: hci2: command 0x040f tx timeout executing program [ 1097.542591][ T8635] Bluetooth: hci3: command 0x040f tx timeout [ 1097.792957][ T8635] Bluetooth: hci0: command 0x040f tx timeout executing program executing program executing program executing program executing program executing program executing program [ 1099.188477][ T8635] Bluetooth: hci1: command 0x0419 tx timeout [ 1099.198722][ T8635] Bluetooth: hci5: command 0x0419 tx timeout executing program executing program [ 1099.659012][ T8635] Bluetooth: hci4: command 0x0419 tx timeout [ 1099.670294][ T8635] Bluetooth: hci2: command 0x0419 tx timeout executing program [ 1100.574930][ T8635] Bluetooth: hci3: command 0x0419 tx timeout executing program executing program [ 1111.350374][ T8635] Bluetooth: hci0: command 0x0419 tx timeout executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 1222.686591][ T8635] Bluetooth: hci5: command 0x0406 tx timeout [ 1222.786490][ T8635] Bluetooth: hci1: command 0x0406 tx timeout [ 1223.526882][ T8635] Bluetooth: hci4: command 0x0406 tx timeout [ 1239.406505][ T8635] Bluetooth: hci2: command 0x0406 tx timeout [ 1239.616469][ T8635] Bluetooth: hci3: command 0x0406 tx timeout [ 1239.887133][ T8635] Bluetooth: hci0: command 0x0406 tx timeout executing program [ 1376.896511][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1376.904080][ C0] rcu: 0-....: (4609 ticks this GP) idle=27a/1/0x4000000000000000 softirq=9466/9466 fqs=2961 [ 1376.914763][ C0] (t=10502 jiffies g=9265 q=69) [ 1376.919685][ C0] NMI backtrace for cpu 0 [ 1376.923990][ C0] CPU: 0 PID: 8824 Comm: syz-executor280 Not tainted 5.11.0-rc6-syzkaller #0 [ 1376.932817][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1376.943320][ C0] Call Trace: [ 1376.946585][ C0] [ 1376.949411][ C0] dump_stack+0x107/0x163 [ 1376.953839][ C0] nmi_cpu_backtrace.cold+0x44/0xd7 [ 1376.959282][ C0] ? lapic_can_unplug_cpu+0x80/0x80 [ 1376.964465][ C0] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 1376.970445][ C0] rcu_dump_cpu_stacks+0x1f4/0x230 [ 1376.975547][ C0] rcu_sched_clock_irq.cold+0x48e/0xedf [ 1376.981080][ C0] ? find_held_lock+0x2d/0x110 [ 1376.985917][ C0] ? rcutree_dead_cpu+0x50/0x50 [ 1376.991199][ C0] ? __raise_softirq_irqoff+0x93/0x1e0 [ 1376.996732][ C0] update_process_times+0x16d/0x200 [ 1377.001913][ C0] tick_sched_handle+0x9b/0x180 [ 1377.006748][ C0] tick_sched_timer+0x1b0/0x2d0 [ 1377.011587][ C0] ? get_cpu_iowait_time_us+0x3f0/0x3f0 [ 1377.017115][ C0] __hrtimer_run_queues+0x1c0/0xe40 [ 1377.022389][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 1377.028352][ C0] ? ktime_get_update_offsets_now+0x268/0x340 [ 1377.034406][ C0] hrtimer_interrupt+0x334/0x940 [ 1377.039334][ C0] __sysvec_apic_timer_interrupt+0x146/0x540 [ 1377.045301][ C0] sysvec_apic_timer_interrupt+0x48/0x100 [ 1377.051027][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1377.056990][ C0] RIP: 0010:preempt_count_add+0x65/0x140 [ 1377.062607][ C0] Code: f1 65 b4 7e 85 d2 75 11 65 8b 05 e6 65 b4 7e 0f b6 c0 3d f4 00 00 00 7f 64 65 8b 05 d5 65 b4 7e 25 ff ff ff 7f 39 c3 74 03 5b <5d> c3 48 8b 5c 24 10 48 89 df e8 4c 7e 0b 00 85 c0 75 35 65 48 8b [ 1377.082501][ C0] RSP: 0018:ffffc90000007680 EFLAGS: 00000297 [ 1377.088661][ C0] RAX: 0000000000000102 RBX: 1ffff92000000eda RCX: 1ffffffff1e3e6cc [ 1377.096627][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1377.104591][ C0] RBP: 0000000000000002 R08: ffffffff8d855a82 R09: ffffffff8d855a86 [ 1377.112629][ C0] R10: 0000000000082083 R11: 0000000000000001 R12: ffffc900000077b0 [ 1377.120767][ C0] R13: 0000000000000000 R14: ffff888030840000 R15: ffffc90000007768 [ 1377.129038][ C0] unwind_next_frame+0x11f/0x1f90 [ 1377.134276][ C0] ? ____kasan_kmalloc.constprop.0+0x82/0xa0 [ 1377.140419][ C0] ? deref_stack_reg+0x150/0x150 [ 1377.145616][ C0] ? __unwind_start+0x51b/0x800 [ 1377.150710][ C0] ? create_prof_cpu_mask+0x20/0x20 [ 1377.156244][ C0] arch_stack_walk+0x7d/0xe0 [ 1377.161206][ C0] ? ____kasan_kmalloc.constprop.0+0x82/0xa0 [ 1377.167604][ C0] stack_trace_save+0x8c/0xc0 [ 1377.172265][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 1377.178057][ C0] ? mark_lock+0xf7/0x1720 [ 1377.182473][ C0] kasan_save_stack+0x1b/0x40 [ 1377.187139][ C0] ? kasan_save_stack+0x1b/0x40 [ 1377.191971][ C0] ? ____kasan_kmalloc.constprop.0+0x82/0xa0 [ 1377.197938][ C0] ? kill_fasync+0x2f0/0x460 [ 1377.202600][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 1377.207779][ C0] ? sched_clock+0x2a/0x40 [ 1377.212195][ C0] ? sched_clock_cpu+0x18/0x1f0 [ 1377.217033][ C0] ? mark_held_locks+0x9f/0xe0 [ 1377.221784][ C0] ? irqtime_account_irq+0x187/0x2d0 [ 1377.227247][ C0] ? asm_sysvec_irq_work+0x12/0x20 [ 1377.232347][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 1377.237616][ C0] ? asm_sysvec_irq_work+0x12/0x20 [ 1377.242812][ C0] ? __alloc_skb+0x71/0x5a0 [ 1377.247299][ C0] ? __alloc_skb+0x32/0x5a0 [ 1377.251870][ C0] ? unpoison_range+0x3a/0x60 [ 1377.256640][ C0] ____kasan_kmalloc.constprop.0+0x82/0xa0 [ 1377.262617][ C0] kmem_cache_alloc_node+0x1e0/0x470 [ 1377.267887][ C0] __alloc_skb+0x71/0x5a0 [ 1377.272204][ C0] __netdev_alloc_skb+0x70/0x400 [ 1377.277127][ C0] __ieee80211_beacon_get+0xebe/0x1aa0 [ 1377.282588][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 1377.287858][ C0] ? ieee80211_set_beacon_cntdwn+0x620/0x620 [ 1377.293908][ C0] ? mac80211_hwsim_beacon_tx+0xe4/0x910 [ 1377.299534][ C0] ieee80211_beacon_get_tim+0x88/0x910 [ 1377.304991][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 1377.310959][ C0] mac80211_hwsim_beacon_tx+0x111/0x910 [ 1377.316674][ C0] ? asm_sysvec_irq_work+0x12/0x20 [ 1377.321771][ C0] __iterate_interfaces+0x1e5/0x520 [ 1377.326954][ C0] ? mac80211_hwsim_tx_frame+0x1e0/0x1e0 [ 1377.332657][ C0] ? mac80211_hwsim_tx_frame+0x1e0/0x1e0 [ 1377.338287][ C0] ? mac80211_hwsim_addr_match+0x180/0x180 [ 1377.344628][ C0] ieee80211_iterate_active_interfaces_atomic+0x8d/0x170 [ 1377.352105][ C0] mac80211_hwsim_beacon+0xd5/0x1a0 [ 1377.358020][ C0] __hrtimer_run_queues+0x609/0xe40 [ 1377.363380][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 1377.369344][ C0] ? ktime_get_update_offsets_now+0x268/0x340 [ 1377.375844][ C0] hrtimer_run_softirq+0x17b/0x360 [ 1377.380937][ C0] __do_softirq+0x29b/0x9f6 [ 1377.385520][ C0] asm_call_irq_on_stack+0xf/0x20 [ 1377.390613][ C0] [ 1377.393645][ C0] do_softirq_own_stack+0xaa/0xd0 [ 1377.398652][ C0] irq_exit_rcu+0x134/0x200 [ 1377.403222][ C0] sysvec_apic_timer_interrupt+0x4d/0x100 [ 1377.409537][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1377.415527][ C0] RIP: 0010:__schedule+0x129/0x21a0 [ 1377.420794][ C0] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 fe 1a 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 7d 20 4c 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 c7 1b 00 00 49 81 3f 9d 6e ac 57 0f 85 44 20 00 00 49 8d 45 [ 1377.440579][ C0] RSP: 0018:ffffc900028cf7f0 EFLAGS: 00000246 [ 1377.447079][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 1ffff92000519f06 [ 1377.455204][ C0] RDX: 1ffff92000519000 RSI: 0000000000000001 RDI: ffff888030840020 [ 1377.463191][ C0] RBP: ffffc900028cf8b8 R08: 0000000000000001 R09: ffffffff8ee667c7 [ 1377.471223][ C0] R10: fffffbfff1dcccf8 R11: 0000000000000001 R12: ffff8880b9e34c40 [ 1377.479329][ C0] R13: ffff888030840000 R14: 0000000000034c40 R15: ffffc900028c8000 [ 1377.487677][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 1377.492867][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1377.499012][ C0] ? io_schedule_timeout+0x140/0x140 [ 1377.504373][ C0] ? mark_lock+0xf7/0x1720 [ 1377.508778][ C0] preempt_schedule_irq+0x4e/0x90 [ 1377.513782][ C0] irqentry_exit+0x7a/0xa0 [ 1377.518176][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1377.524153][ C0] RIP: 0010:unlink_anon_vmas+0x31e/0x830 [ 1377.529768][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f6 04 00 00 83 ab a4 00 00 00 01 0d 7d c8 ff 4d 85 f6 0f 84 e6 02 00 00 e8 ff 7c c8 ff 49 8d 7e [ 1377.549355][ C0] RSP: 0018:ffffc900028cf998 EFLAGS: 00000246 [ 1377.555398][ C0] RAX: 0000000000000007 RBX: ffff8880183df800 RCX: 0000000000000000 [ 1377.563347][ C0] RDX: 0000000000000000 RSI: ffffffff81aa3e26 RDI: ffff8880183df8a4 [ 1377.571301][ C0] RBP: ffff8880280fe698 R08: 0000000000000001 R09: ffffffff8ee667c7 [ 1377.579446][ C0] R10: fffffbfff1dcccf8 R11: 0000000000000000 R12: ffff8880280f9478 [ 1377.587406][ C0] R13: ffff8880280fe698 R14: ffff88801fd91e00 R15: ffff8880280fe6a8 [ 1377.595365][ C0] ? unlink_anon_vmas+0x2e6/0x830 [ 1377.600643][ C0] ? unlink_anon_vmas+0x2e6/0x830 [ 1377.605653][ C0] free_pgtables+0x1ab/0x2f0 [ 1377.610499][ C0] exit_mmap+0x2c0/0x5a0 [ 1377.614983][ C0] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 1377.620949][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1377.627271][ C0] ? __khugepaged_exit+0x2d9/0x470 [ 1377.632449][ C0] __mmput+0x122/0x470 [ 1377.636501][ C0] mmput+0x53/0x60 [ 1377.640198][ C0] do_exit+0xb6a/0x2ae0 [ 1377.644420][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1377.650559][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 1377.655909][ C0] ? mm_update_next_owner+0x7a0/0x7a0 [ 1377.661367][ C0] ? do_group_exit+0xab/0x310 [ 1377.666977][ C0] ? do_group_exit+0x118/0x310 [ 1377.671809][ C0] do_group_exit+0x125/0x310 [ 1377.676379][ C0] get_signal+0x427/0x20f0 [ 1377.680860][ C0] ? finish_task_switch.isra.0+0x158/0x7e0 [ 1377.686665][ C0] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 1377.692366][ C0] ? finish_task_switch.isra.0+0x234/0x7e0 [ 1377.698248][ C0] ? __switch_to+0x57c/0x1050 [ 1377.702993][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1377.708619][ C0] ? io_schedule_timeout+0x140/0x140 [ 1377.713899][ C0] exit_to_user_mode_prepare+0x148/0x250 [ 1377.720134][ C0] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 1377.726193][ C0] irqentry_exit_to_user_mode+0x5/0x30 [ 1377.731637][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1377.737615][ C0] RIP: 0033:0x4470e9 [ 1377.741575][ C0] Code: Unable to access opcode bytes at RIP 0x4470bf. [ 1377.748394][ C0] RSP: 002b:00007ffc886bc1e8 EFLAGS: 00000246 [ 1377.754450][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000004470e9 [ 1377.762402][ C0] RDX: 0000000000042000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1377.770356][ C0] RBP: 0000000000000000 R08: 00007ffc00000004 R09: 00007ffc00000004 [ 1377.778395][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000010fb1a [ 1377.786530][ C0] R13: 00007ffc886bc2a0 R14: 00007ffc886bc290 R15: 00007ffc886bc228