[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.15.209' (ECDSA) to the list of known hosts. syzkaller login: [ 1174.089903][ T8512] IPVS: ftp: loaded support on port[0] = 21 [ 1174.090181][ T8513] IPVS: ftp: loaded support on port[0] = 21 [ 1174.100872][ T8515] IPVS: ftp: loaded support on port[0] = 21 [ 1174.106082][ T8514] IPVS: ftp: loaded support on port[0] = 21 [ 1174.109105][ T8509] IPVS: ftp: loaded support on port[0] = 21 [ 1174.115231][ T8516] IPVS: ftp: loaded support on port[0] = 21 [ 1174.323412][ T8455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.336604][ T8455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.354589][ T8548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.369700][ T8548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.391905][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1174.410206][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.432174][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.469267][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1174.486078][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1174.507112][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.507225][ T8455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.515145][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.538400][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1174.562951][ T8455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.576048][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.576591][ T8687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.593804][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.603534][ T8548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.611775][ T8687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.620685][ T8717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.620744][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1174.635943][ T8548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.638668][ T8717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.658873][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1174.666827][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1174.677539][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1174.687608][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program executing program executing program [ 1174.777503][ C1] hrtimer: interrupt took 52910 ns [ 1174.809965][ T8717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.835755][ T8687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.046743][ T8717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.088338][ T8687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.100195][ T8726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.165996][ T8726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.922459][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1177.131377][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1177.533076][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 1612.207137][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1612.214632][ C0] rcu: 0-....: (10487 ticks this GP) idle=c76/1/0x4000000000000000 softirq=9982/9986 fqs=2507 [ 1612.225974][ C0] (t=10502 jiffies g=9273 q=125) [ 1612.231237][ C0] NMI backtrace for cpu 0 [ 1612.235549][ C0] CPU: 0 PID: 8792 Comm: syz-executor406 Not tainted 5.10.0-rc7-syzkaller #0 [ 1612.244303][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1612.254688][ C0] Call Trace: [ 1612.257967][ C0] [ 1612.260850][ C0] dump_stack+0x107/0x163 [ 1612.265158][ C0] nmi_cpu_backtrace.cold+0x44/0xd7 [ 1612.270525][ C0] ? lapic_can_unplug_cpu+0x80/0x80 [ 1612.275700][ C0] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 1612.281655][ C0] rcu_dump_cpu_stacks+0x1e3/0x21e [ 1612.286850][ C0] rcu_sched_clock_irq.cold+0x472/0xee8 [ 1612.292843][ C0] ? find_held_lock+0x2d/0x110 [ 1612.297844][ C0] ? rcutree_dead_cpu+0x40/0x40 [ 1612.302682][ C0] ? __raise_softirq_irqoff+0x93/0x1d0 [ 1612.308207][ C0] update_process_times+0x77/0xd0 [ 1612.313208][ C0] tick_sched_handle+0x9b/0x180 [ 1612.318210][ C0] tick_sched_timer+0x1d1/0x2a0 [ 1612.323040][ C0] ? can_stop_idle_tick+0x290/0x290 [ 1612.328219][ C0] __hrtimer_run_queues+0x1ce/0xea0 [ 1612.333409][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 1612.339372][ C0] ? ktime_get_update_offsets_now+0x249/0x320 [ 1612.345442][ C0] hrtimer_interrupt+0x334/0x940 [ 1612.350373][ C0] __sysvec_apic_timer_interrupt+0x146/0x540 [ 1612.356360][ C0] sysvec_apic_timer_interrupt+0x48/0x100 [ 1612.362067][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1612.368036][ C0] RIP: 0010:unwind_next_frame+0x929/0x1f90 [ 1612.373821][ C0] Code: df 48 89 fe 48 c1 ee 03 80 3c 16 00 0f 85 5c 0f 00 00 48 8b 40 38 48 89 44 24 60 e9 a9 fd ff ff 48 b8 00 00 00 00 00 fc ff df <48> 8b 14 24 48 c1 ea 03 80 3c 02 00 0f 85 98 13 00 00 4c 89 c0 49 [ 1612.393425][ C0] RSP: 0018:ffffc90000007620 EFLAGS: 00000297 [ 1612.399469][ C0] RAX: dffffc0000000000 RBX: 1ffff92000000ecc RCX: ffffffff8d62d5cb [ 1612.407434][ C0] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000001 [ 1612.415401][ C0] RBP: 0000000000000002 R08: ffffffff8d62d5c6 R09: ffffffff8d62d5ca [ 1612.423352][ C0] R10: 0000000000082081 R11: 000000000000c5ff R12: ffffc90000007790 [ 1612.431304][ C0] R13: ffffc9000000777d R14: ffffc90000007798 R15: ffffc90000007748 [ 1612.439296][ C0] ? __unwind_start+0x596/0x800 [ 1612.444142][ C0] ? deref_stack_reg+0x150/0x150 [ 1612.449086][ C0] ? get_stack_info_noinstr+0x39/0x110 [ 1612.454532][ C0] __unwind_start+0x51b/0x800 [ 1612.459210][ C0] ? create_prof_cpu_mask+0x20/0x20 [ 1612.464389][ C0] arch_stack_walk+0x5c/0xe0 [ 1612.468988][ C0] ? __unwind_start+0x596/0x800 [ 1612.474279][ C0] stack_trace_save+0x8c/0xc0 [ 1612.479166][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 1612.485183][ C0] kasan_save_stack+0x1b/0x40 [ 1612.489835][ C0] ? mark_lock+0xf7/0x1730 [ 1612.494227][ C0] ? ring_buffer_wakeup+0x194/0x2b0 [ 1612.499412][ C0] ? lock_chain_count+0x20/0x20 [ 1612.504252][ C0] ? kill_fasync+0x18/0x460 [ 1612.508732][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 1612.513917][ C0] ? sched_clock+0x2a/0x40 [ 1612.518305][ C0] ? sched_clock_cpu+0x18/0x1f0 [ 1612.523133][ C0] ? mark_held_locks+0x9f/0xe0 [ 1612.527868][ C0] ? irqtime_account_irq+0x17e/0x2d0 [ 1612.533144][ C0] ? asm_sysvec_irq_work+0x12/0x20 [ 1612.538246][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 1612.543414][ C0] ? asm_sysvec_irq_work+0x12/0x20 [ 1612.548497][ C0] ? kasan_unpoison_shadow+0x33/0x40 [ 1612.554015][ C0] __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 1612.559796][ C0] kmem_cache_alloc_node+0x1e0/0x470 [ 1612.565231][ C0] __alloc_skb+0x71/0x550 [ 1612.569623][ C0] skb_copy+0x137/0x2f0 [ 1612.573927][ C0] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb17/0x1330 [ 1612.580748][ C0] ? asm_sysvec_irq_work+0x12/0x20 [ 1612.585832][ C0] ? mac80211_hwsim_add_chanctx+0x220/0x220 [ 1612.591696][ C0] ? asm_sysvec_irq_work+0x12/0x20 [ 1612.596781][ C0] ? mac80211_hwsim_monitor_rx+0x1c2/0x840 [ 1612.602650][ C0] mac80211_hwsim_tx_frame+0x14f/0x1e0 [ 1612.608101][ C0] mac80211_hwsim_beacon_tx+0x4ba/0x910 [ 1612.613707][ C0] __iterate_interfaces+0x1e5/0x520 [ 1612.618891][ C0] ? mac80211_hwsim_tx_frame+0x1e0/0x1e0 [ 1612.624495][ C0] ? mac80211_hwsim_tx_frame+0x1e0/0x1e0 [ 1612.630273][ C0] ieee80211_iterate_active_interfaces_atomic+0x8d/0x170 [ 1612.637270][ C0] ? mac80211_hwsim_addr_match+0x180/0x180 [ 1612.643048][ C0] mac80211_hwsim_beacon+0xd5/0x1a0 [ 1612.648236][ C0] ? mac80211_hwsim_addr_match+0x180/0x180 [ 1612.654207][ C0] __hrtimer_run_queues+0x693/0xea0 [ 1612.659384][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 1612.665353][ C0] ? ktime_get_update_offsets_now+0x249/0x320 [ 1612.671486][ C0] hrtimer_run_softirq+0x17b/0x360 [ 1612.676588][ C0] __do_softirq+0x2a0/0x9f6 [ 1612.681086][ C0] asm_call_irq_on_stack+0xf/0x20 [ 1612.686077][ C0] [ 1612.688988][ C0] do_softirq_own_stack+0xaa/0xd0 [ 1612.693983][ C0] irq_exit_rcu+0x132/0x200 [ 1612.698547][ C0] sysvec_apic_timer_interrupt+0x4d/0x100 [ 1612.704327][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1612.710281][ C0] RIP: 0010:preempt_schedule_irq+0x49/0x90 [ 1612.716077][ C0] Code: 55 53 65 48 8b 1c 25 00 f0 01 00 48 89 dd 48 c1 ed 03 48 01 c5 bf 01 00 00 00 e8 82 3a 64 f8 e8 ad a0 8e f8 fb bf 01 00 00 00 82 d1 ff ff 9c 58 fa f6 c4 02 75 27 bf 01 00 00 00 e8 f0 22 64 [ 1612.735843][ C0] RSP: 0018:ffffc90002197b78 EFLAGS: 00000202 [ 1612.741885][ C0] RAX: 000000000011e651 RBX: ffff888016c11a40 RCX: 1ffffffff19d8e91 [ 1612.749934][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1612.757893][ C0] RBP: ffffed1002d82348 R08: 0000000000000001 R09: 0000000000000001 [ 1612.765939][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1612.773971][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1612.782117][ C0] ? preempt_schedule_irq+0x43/0x90 [ 1612.787292][ C0] irqentry_exit+0x7a/0xa0 [ 1612.791682][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1612.797633][ C0] RIP: 0010:vm_area_free+0x1/0x20 [ 1612.802716][ C0] Code: 95 4f 71 00 e9 98 f9 ff ff e8 eb 4f 71 00 e9 cb f9 ff ff e8 81 4f 71 00 e9 ff f9 ff ff 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 <48> 89 fd e8 27 d2 2f 00 48 89 ee 48 8b 3d 4d ff 08 0d 5d e9 67 08 [ 1612.822292][ C0] RSP: 0018:ffffc90002197c40 EFLAGS: 00000293 [ 1612.828424][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffffffff19d9c03 [ 1612.836561][ C0] RDX: ffff888016c11a40 RSI: ffffffff81a379aa RDI: ffff8880130d9948 [ 1612.844578][ C0] RBP: ffff8880130d9948 R08: 0000000000000001 R09: 0000000000000001 [ 1612.852524][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1612.860469][ C0] R13: ffff888014d20948 R14: 000000000000102e R15: ffff88802af22880 [ 1612.868438][ C0] ? remove_vma+0x12a/0x170 [ 1612.873017][ C0] remove_vma+0x132/0x170 [ 1612.877320][ C0] exit_mmap+0x351/0x530 [ 1612.881724][ C0] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 1612.887683][ C0] ? __khugepaged_exit+0x2d9/0x3f0 [ 1612.892767][ C0] __mmput+0x122/0x470 [ 1612.896825][ C0] mmput+0x53/0x60 [ 1612.900536][ C0] do_exit+0xa72/0x29b0 [ 1612.904860][ C0] ? mm_update_next_owner+0x7a0/0x7a0 [ 1612.910212][ C0] ? io_schedule_timeout+0x140/0x140 [ 1612.915651][ C0] do_group_exit+0x125/0x310 [ 1612.920215][ C0] __x64_sys_exit_group+0x3a/0x50 [ 1612.925229][ C0] do_syscall_64+0x2d/0x70 [ 1612.929619][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1612.935483][ C0] RIP: 0033:0x4415f8 [ 1612.939359][ C0] Code: Unable to access opcode bytes at RIP 0x4415ce. [ 1612.946276][ C0] RSP: 002b:00007ffdd12c2708 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1612.954661][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004415f8 [ 1612.962606][ C0] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 1612.970567][ C0] RBP: 00000000004c6b70 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 1612.978599][ C0] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1612.986646][ C0] R13: 00000000006dffa0 R14: 00000000006d4440 R15: 0000000000000004