[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.120' (ECDSA) to the list of known hosts. executing program executing program syzkaller login: [ 69.026621][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.045464][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 69.096332][ T285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.106770][ T285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.165846][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.176118][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.193237][ C1] ------------[ cut here ]------------ [ 69.199011][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 69.209592][ C1] WARNING: CPU: 1 PID: 8503 at net/mac80211/rate.c:375 __rate_control_send_low+0x4d0/0x6d0 [ 69.219615][ C1] Modules linked in: [ 69.223560][ C1] CPU: 1 PID: 8503 Comm: systemd-sysctl Not tainted 5.10.0-rc5-syzkaller #0 [ 69.232253][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.242347][ C1] RIP: 0010:__rate_control_send_low+0x4d0/0x6d0 [ 69.248588][ C1] Code: 14 48 89 44 24 08 e8 7f dd 25 f9 44 8b 44 24 24 45 89 e9 44 89 e1 48 8b 74 24 08 44 89 f2 48 c7 c7 a0 f7 61 8a e8 fc 5b 62 00 <0f> 0b e9 1c fe ff ff e8 54 dd 25 f9 48 8b 44 24 10 48 8d 78 7f 48 [ 69.268221][ C1] RSP: 0018:ffffc90000d90a40 EFLAGS: 00010282 [ 69.274403][ C1] RAX: 0000000000000000 RBX: ffff888026ce8de8 RCX: 0000000000000000 [ 69.282479][ C1] RDX: ffff88801e450000 RSI: ffffffff8158d875 RDI: fffff520001b213a [ 69.290478][ C1] RBP: ffff888144343148 R08: 0000000000000001 R09: ffff8880b9f30627 [ 69.298537][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 69.306608][ C1] R13: 0000000000000000 R14: 00000000ffffffff R15: 0000000000000090 [ 69.314649][ C1] FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 69.323669][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.330263][ C1] CR2: 00007fde93cedab4 CR3: 0000000012e10000 CR4: 00000000001506e0 [ 69.338295][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.346352][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.354381][ C1] Call Trace: [ 69.357679][ C1] [ 69.360559][ C1] rate_control_send_low+0x265/0x730 [ 69.365908][ C1] ? memset+0x20/0x40 [ 69.369916][ C1] rate_control_get_rate+0x1b9/0x5a0 [ 69.375285][ C1] __ieee80211_beacon_get+0xb06/0x1aa0 [ 69.380767][ C1] ? __lock_acquire+0xbd6/0x5500 [ 69.385787][ C1] ? ieee80211_set_beacon_cntdwn+0x620/0x620 [ 69.391796][ C1] ? find_held_lock+0x2d/0x110 [ 69.396641][ C1] ieee80211_beacon_get_tim+0x88/0x910 [ 69.402218][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 69.408221][ C1] mac80211_hwsim_beacon_tx+0x111/0x910 [ 69.413841][ C1] __iterate_interfaces+0x1e5/0x520 [ 69.419064][ C1] ? mac80211_hwsim_tx_frame+0x1e0/0x1e0 [ 69.424771][ C1] ? mac80211_hwsim_tx_frame+0x1e0/0x1e0 [ 69.430420][ C1] ieee80211_iterate_active_interfaces_atomic+0x8d/0x170 [ 69.437553][ C1] ? mac80211_hwsim_addr_match+0x180/0x180 [ 69.445382][ C1] mac80211_hwsim_beacon+0xd5/0x1a0 [ 69.450594][ C1] ? mac80211_hwsim_addr_match+0x180/0x180 [ 69.457174][ C1] __hrtimer_run_queues+0x693/0xea0 [ 69.462474][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 69.468466][ C1] ? ktime_get_update_offsets_now+0x249/0x320 [ 69.474608][ C1] hrtimer_run_softirq+0x17b/0x360 [ 69.479755][ C1] __do_softirq+0x2a0/0x9f6 [ 69.484342][ C1] asm_call_irq_on_stack+0xf/0x20 [ 69.489370][ C1] [ 69.492381][ C1] do_softirq_own_stack+0xaa/0xd0 [ 69.497421][ C1] irq_exit_rcu+0x132/0x200 [ 69.501933][ C1] sysvec_apic_timer_interrupt+0x4d/0x100 [ 69.507729][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 69.513796][ C1] RIP: 0010:__this_cpu_preempt_check+0xd/0x20 [ 69.519866][ C1] Code: 00 00 48 c7 c6 c0 90 9d 89 48 c7 c7 00 91 9d 89 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 55 48 89 fd 0f 1f 44 00 00 48 89 ee 5d <48> c7 c7 40 91 9d 89 e9 97 fe ff ff cc cc cc cc cc cc cc eb 1e 0f [ 69.539536][ C1] RSP: 0018:ffffc900016ff918 EFLAGS: 00000283 [ 69.545702][ C1] RAX: 0000000000000003 RBX: ffff8880101ad800 RCX: ffffffffffffffff [ 69.553833][ C1] RDX: fffffffffffffffd RSI: ffffffff8956fa40 RDI: ffffffff8956fa40 [ 69.561817][ C1] RBP: 0000000000000088 R08: 0000000000000001 R09: ffffea0000c3d9b3 [ 69.569858][ C1] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff8880101ad890 [ 69.577918][ C1] R13: fffffffffffffffd R14: 0000000000000020 R15: 0000000000000011 [ 69.586005][ C1] __mod_memcg_lruvec_state+0x10e/0x350 [ 69.591572][ C1] ? __mod_node_page_state+0x98/0x130 [ 69.597019][ C1] page_remove_rmap+0x289/0x1c00 [ 69.602039][ C1] unmap_page_range+0xe30/0x2640 [ 69.607022][ C1] ? vm_normal_page_pmd+0x510/0x510 [ 69.612292][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 69.617156][ C1] ? uprobe_munmap+0x1c/0x560 [ 69.621846][ C1] unmap_single_vma+0x198/0x300 [ 69.626770][ C1] unmap_vmas+0x168/0x2e0 [ 69.631118][ C1] ? zap_vma_ptes+0x100/0x100 [ 69.635882][ C1] exit_mmap+0x2b1/0x530 [ 69.640142][ C1] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 69.646210][ C1] __mmput+0x122/0x470 [ 69.650289][ C1] mmput+0x53/0x60 [ 69.654091][ C1] do_exit+0xa72/0x29b0 [ 69.658273][ C1] ? mm_update_next_owner+0x7a0/0x7a0 [ 69.663737][ C1] do_group_exit+0x125/0x310 [ 69.668340][ C1] __x64_sys_exit_group+0x3a/0x50 [ 69.673444][ C1] do_syscall_64+0x2d/0x70 [ 69.677875][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.683841][ C1] RIP: 0033:0x7fde953c6618 [ 69.688263][ C1] Code: Unable to access opcode bytes at RIP 0x7fde953c65ee. [ 69.695709][ C1] RSP: 002b:00007ffdb9f65758 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 69.704209][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fde953c6618 [ 69.712270][ C1] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 69.720277][ C1] RBP: 00007fde956a38e0 R08: 00000000000000e7 R09: fffffffffffffee8 [ 69.728334][ C1] R10: 00007fde93881158 R11: 0000000000000246 R12: 00007fde956a38e0 [ 69.736388][ C1] R13: 00007fde956a8c20 R14: 0000000000000000 R15: 0000000000000000 [ 69.744444][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 69.751039][ C1] CPU: 1 PID: 8503 Comm: systemd-sysctl Not tainted 5.10.0-rc5-syzkaller #0 [ 69.759710][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.769761][ C1] Call Trace: [ 69.773127][ C1] [ 69.776520][ C1] dump_stack+0x107/0x163 [ 69.780853][ C1] panic+0x306/0x73d [ 69.784749][ C1] ? __warn_printk+0xf3/0xf3 [ 69.789349][ C1] ? __warn.cold+0x1a/0x44 [ 69.793763][ C1] ? __warn+0xf1/0x210 [ 69.797834][ C1] ? __rate_control_send_low+0x4d0/0x6d0 [ 69.804942][ C1] __warn.cold+0x35/0x44 [ 69.809188][ C1] ? __rate_control_send_low+0x4d0/0x6d0 [ 69.814820][ C1] report_bug+0x1bd/0x210 [ 69.819161][ C1] handle_bug+0x3c/0x60 [ 69.824008][ C1] exc_invalid_op+0x14/0x40 [ 69.828516][ C1] asm_exc_invalid_op+0x12/0x20 [ 69.833368][ C1] RIP: 0010:__rate_control_send_low+0x4d0/0x6d0 [ 69.839608][ C1] Code: 14 48 89 44 24 08 e8 7f dd 25 f9 44 8b 44 24 24 45 89 e9 44 89 e1 48 8b 74 24 08 44 89 f2 48 c7 c7 a0 f7 61 8a e8 fc 5b 62 00 <0f> 0b e9 1c fe ff ff e8 54 dd 25 f9 48 8b 44 24 10 48 8d 78 7f 48 [ 69.859339][ C1] RSP: 0018:ffffc90000d90a40 EFLAGS: 00010282 [ 69.865419][ C1] RAX: 0000000000000000 RBX: ffff888026ce8de8 RCX: 0000000000000000 [ 69.873391][ C1] RDX: ffff88801e450000 RSI: ffffffff8158d875 RDI: fffff520001b213a [ 69.881451][ C1] RBP: ffff888144343148 R08: 0000000000000001 R09: ffff8880b9f30627 [ 69.889420][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 69.897390][ C1] R13: 0000000000000000 R14: 00000000ffffffff R15: 0000000000000090 [ 69.905382][ C1] ? vprintk_func+0x95/0x1e0 [ 69.909994][ C1] rate_control_send_low+0x265/0x730 [ 69.915281][ C1] ? memset+0x20/0x40 [ 69.919269][ C1] rate_control_get_rate+0x1b9/0x5a0 [ 69.924565][ C1] __ieee80211_beacon_get+0xb06/0x1aa0 [ 69.930029][ C1] ? __lock_acquire+0xbd6/0x5500 [ 69.934967][ C1] ? ieee80211_set_beacon_cntdwn+0x620/0x620 [ 69.940959][ C1] ? find_held_lock+0x2d/0x110 [ 69.945731][ C1] ieee80211_beacon_get_tim+0x88/0x910 [ 69.951195][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 69.957187][ C1] mac80211_hwsim_beacon_tx+0x111/0x910 [ 69.962911][ C1] __iterate_interfaces+0x1e5/0x520 [ 69.968112][ C1] ? mac80211_hwsim_tx_frame+0x1e0/0x1e0 [ 69.973751][ C1] ? mac80211_hwsim_tx_frame+0x1e0/0x1e0 [ 69.979384][ C1] ieee80211_iterate_active_interfaces_atomic+0x8d/0x170 [ 69.986406][ C1] ? mac80211_hwsim_addr_match+0x180/0x180 [ 69.992207][ C1] mac80211_hwsim_beacon+0xd5/0x1a0 [ 69.997403][ C1] ? mac80211_hwsim_addr_match+0x180/0x180 [ 70.003299][ C1] __hrtimer_run_queues+0x693/0xea0 [ 70.008517][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 70.014497][ C1] ? ktime_get_update_offsets_now+0x249/0x320 [ 70.020571][ C1] hrtimer_run_softirq+0x17b/0x360 [ 70.025689][ C1] __do_softirq+0x2a0/0x9f6 [ 70.030229][ C1] asm_call_irq_on_stack+0xf/0x20 [ 70.035250][ C1] [ 70.038195][ C1] do_softirq_own_stack+0xaa/0xd0 [ 70.043217][ C1] irq_exit_rcu+0x132/0x200 [ 70.047725][ C1] sysvec_apic_timer_interrupt+0x4d/0x100 [ 70.053448][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 70.059429][ C1] RIP: 0010:__this_cpu_preempt_check+0xd/0x20 [ 70.065492][ C1] Code: 00 00 48 c7 c6 c0 90 9d 89 48 c7 c7 00 91 9d 89 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 55 48 89 fd 0f 1f 44 00 00 48 89 ee 5d <48> c7 c7 40 91 9d 89 e9 97 fe ff ff cc cc cc cc cc cc cc eb 1e 0f [ 70.085094][ C1] RSP: 0018:ffffc900016ff918 EFLAGS: 00000283 [ 70.091170][ C1] RAX: 0000000000000003 RBX: ffff8880101ad800 RCX: ffffffffffffffff [ 70.099144][ C1] RDX: fffffffffffffffd RSI: ffffffff8956fa40 RDI: ffffffff8956fa40 [ 70.107120][ C1] RBP: 0000000000000088 R08: 0000000000000001 R09: ffffea0000c3d9b3 [ 70.115089][ C1] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff8880101ad890 [ 70.123062][ C1] R13: fffffffffffffffd R14: 0000000000000020 R15: 0000000000000011 [ 70.131063][ C1] __mod_memcg_lruvec_state+0x10e/0x350 [ 70.136609][ C1] ? __mod_node_page_state+0x98/0x130 [ 70.141984][ C1] page_remove_rmap+0x289/0x1c00 [ 70.146926][ C1] unmap_page_range+0xe30/0x2640 [ 70.151888][ C1] ? vm_normal_page_pmd+0x510/0x510 [ 70.157113][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 70.161963][ C1] ? uprobe_munmap+0x1c/0x560 [ 70.166669][ C1] unmap_single_vma+0x198/0x300 [ 70.171528][ C1] unmap_vmas+0x168/0x2e0 [ 70.175856][ C1] ? zap_vma_ptes+0x100/0x100 [ 70.180551][ C1] exit_mmap+0x2b1/0x530 [ 70.184794][ C1] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 70.190797][ C1] __mmput+0x122/0x470 [ 70.194865][ C1] mmput+0x53/0x60 [ 70.198587][ C1] do_exit+0xa72/0x29b0 [ 70.202754][ C1] ? mm_update_next_owner+0x7a0/0x7a0 [ 70.208166][ C1] do_group_exit+0x125/0x310 [ 70.212779][ C1] __x64_sys_exit_group+0x3a/0x50 [ 70.217811][ C1] do_syscall_64+0x2d/0x70 [ 70.222231][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 70.228126][ C1] RIP: 0033:0x7fde953c6618 [ 70.232543][ C1] Code: Unable to access opcode bytes at RIP 0x7fde953c65ee. [ 70.239906][ C1] RSP: 002b:00007ffdb9f65758 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 70.248341][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fde953c6618 [ 70.256321][ C1] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 70.264298][ C1] RBP: 00007fde956a38e0 R08: 00000000000000e7 R09: fffffffffffffee8 [ 70.272362][ C1] R10: 00007fde93881158 R11: 0000000000000246 R12: 00007fde956a38e0 [ 70.280347][ C1] R13: 00007fde956a8c20 R14: 0000000000000000 R15: 0000000000000000 [ 70.289076][ C1] Kernel Offset: disabled [ 70.293485][ C1] Rebooting in 86400 seconds..