Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. syzkaller login: [ 819.792120][ T8498] IPVS: ftp: loaded support on port[0] = 21 [ 819.810538][ T8494] IPVS: ftp: loaded support on port[0] = 21 [ 819.820346][ T8501] IPVS: ftp: loaded support on port[0] = 21 [ 819.824995][ T8499] IPVS: ftp: loaded support on port[0] = 21 [ 819.838983][ T8500] IPVS: ftp: loaded support on port[0] = 21 [ 819.877892][ T8496] IPVS: ftp: loaded support on port[0] = 21 [ 819.890443][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.920046][ T8583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.953281][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.961567][ T8583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 820.045808][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 820.062808][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 820.174568][ C1] hrtimer: interrupt took 71170 ns [ 820.365326][ T8583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.401736][ T8583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.461748][ T8596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.510149][ T783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.531951][ T8596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.563042][ T783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.576255][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 820.609029][ T8583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.643668][ T8766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.655536][ T8759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.680276][ T3127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 820.705248][ T8759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.714129][ T8583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.735338][ T3127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 820.741397][ T8766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.796653][ T3127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 820.805424][ T3127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 820.813290][ T3127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 820.851773][ T8583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.861457][ T8583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.881760][ T8596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program executing program [ 820.906379][ T8596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.914425][ T3127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 820.988603][ T8759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.720584][ T3127] Bluetooth: hci1: command 0x0409 tx timeout [ 822.801943][ T3127] Bluetooth: hci2: command 0x0409 tx timeout [ 822.809361][ T8759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.859936][ T8583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.949695][ T8583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.172931][ T3127] Bluetooth: hci0: command 0x0409 tx timeout [ 823.486807][ T3127] Bluetooth: hci5: command 0x0409 tx timeout [ 823.675584][ T3127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 823.779280][ T3127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 824.026423][ T3127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program executing program executing program [ 834.493063][ T3127] Bluetooth: hci1: command 0x041b tx timeout [ 837.604373][ T3127] Bluetooth: hci2: command 0x041b tx timeout [ 838.182475][ T3127] Bluetooth: hci0: command 0x041b tx timeout [ 840.202433][ T3127] Bluetooth: hci5: command 0x041b tx timeout [ 927.712423][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 927.719357][ C0] rcu: 0-...!: (7583 ticks this GP) idle=26e/1/0x4000000000000000 softirq=9913/9913 fqs=95 [ 927.730001][ C0] (t=10501 jiffies g=8517 q=877) [ 927.735028][ C0] rcu: rcu_preempt kthread starved for 8721 jiffies! g8517 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 927.746040][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 927.756006][ C0] rcu: RCU grace-period kthread stack dump: [ 927.761893][ C0] task:rcu_preempt state:R running task stack:29176 pid: 11 ppid: 2 flags:0x00004000 [ 927.772665][ C0] Call Trace: [ 927.775987][ C0] __schedule+0x893/0x2130 [ 927.780418][ C0] ? io_schedule_timeout+0x140/0x140 [ 927.785703][ C0] ? debug_object_destroy+0x210/0x210 [ 927.791071][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 927.795927][ C0] schedule+0xcf/0x270 [ 927.800022][ C0] schedule_timeout+0x148/0x250 [ 927.804878][ C0] ? usleep_range+0x170/0x170 [ 927.809651][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 927.815024][ C0] ? __next_timer_interrupt+0x210/0x210 [ 927.820747][ C0] ? prepare_to_swait_exclusive+0x2d0/0x2d0 [ 927.826643][ C0] rcu_gp_kthread+0xb4c/0x1c90 [ 927.831406][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 927.836252][ C0] ? rcu_core_si+0x10/0x10 [ 927.840661][ C0] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 927.846456][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 927.851644][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 927.856655][ C0] ? rcu_core_si+0x10/0x10 [ 927.861059][ C0] kthread+0x3b1/0x4a0 [ 927.865118][ C0] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 927.871006][ C0] ret_from_fork+0x1f/0x30 [ 927.875421][ C0] NMI backtrace for cpu 0 [ 927.879742][ C0] CPU: 0 PID: 8787 Comm: syz-executor282 Not tainted 5.10.0-rc7-syzkaller #0 [ 927.888480][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 927.898519][ C0] Call Trace: [ 927.901790][ C0] [ 927.904632][ C0] dump_stack+0x107/0x163 [ 927.908952][ C0] nmi_cpu_backtrace.cold+0x44/0xd7 [ 927.914147][ C0] ? lapic_can_unplug_cpu+0x80/0x80 [ 927.919333][ C0] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 927.925302][ C0] rcu_dump_cpu_stacks+0x1e3/0x21e [ 927.930407][ C0] rcu_sched_clock_irq.cold+0x472/0xee8 [ 927.935944][ C0] ? rcutree_dead_cpu+0x40/0x40 [ 927.940783][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 927.945631][ C0] ? __raise_softirq_irqoff+0x93/0x1d0 [ 927.951081][ C0] update_process_times+0x77/0xd0 [ 927.956097][ C0] tick_sched_handle+0x9b/0x180 [ 927.961140][ C0] tick_sched_timer+0x1d1/0x2a0 [ 927.966163][ C0] ? can_stop_idle_tick+0x290/0x290 [ 927.971376][ C0] __hrtimer_run_queues+0x1ce/0xea0 [ 927.976572][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 927.982540][ C0] ? ktime_get_update_offsets_now+0x249/0x320 [ 927.988605][ C0] hrtimer_interrupt+0x334/0x940 [ 927.993549][ C0] __sysvec_apic_timer_interrupt+0x146/0x540 [ 927.999525][ C0] sysvec_apic_timer_interrupt+0x48/0x100 [ 928.005240][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 928.011218][ C0] RIP: 0010:mac80211_hwsim_tx_frame_no_nl.isra.0+0x72e/0x1330 [ 928.018668][ C0] Code: 44 24 08 e8 84 8f 60 fc 0f b6 44 24 08 84 c0 0f 85 a8 06 00 00 e8 62 97 60 fc e8 5d 97 60 fc 48 89 d8 48 c1 e8 03 80 3c 28 00 <0f> 85 93 09 00 00 48 8b 1b 48 81 fb 40 d4 ff 8b 0f 84 f7 04 00 00 [ 928.038359][ C0] RSP: 0018:ffffc90000007b88 EFLAGS: 00000246 [ 928.044519][ C0] RAX: 1ffff11005dd2624 RBX: ffff88802ee93120 RCX: ffffffff850f6ef3 [ 928.052755][ C0] RDX: ffff88803022b480 RSI: ffffffff850f6d13 RDI: 0000000000000004 [ 928.060728][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffff88802b3c93d7 [ 928.068790][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888032c60000 [ 928.076754][ C0] R13: ffff88801526b350 R14: ffff88801526b120 R15: 0000000000000002 [ 928.084744][ C0] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0x903/0x1330 [ 928.091592][ C0] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0x723/0x1330 [ 928.098445][ C0] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0x723/0x1330 [ 928.105301][ C0] ? mac80211_hwsim_add_chanctx+0x220/0x220 [ 928.111196][ C0] ? mac80211_hwsim_monitor_rx+0x1c2/0x840 [ 928.117023][ C0] mac80211_hwsim_tx_frame+0x14f/0x1e0 [ 928.122648][ C0] mac80211_hwsim_beacon_tx+0x4ba/0x910 [ 928.128191][ C0] __iterate_interfaces+0x1e5/0x520 [ 928.133379][ C0] ? mac80211_hwsim_tx_frame+0x1e0/0x1e0 [ 928.139008][ C0] ? mac80211_hwsim_tx_frame+0x1e0/0x1e0 [ 928.144632][ C0] ieee80211_iterate_active_interfaces_atomic+0x8d/0x170 [ 928.151735][ C0] ? mac80211_hwsim_addr_match+0x180/0x180 [ 928.157528][ C0] mac80211_hwsim_beacon+0xd5/0x1a0 [ 928.162737][ C0] ? mac80211_hwsim_addr_match+0x180/0x180 [ 928.168533][ C0] __hrtimer_run_queues+0x693/0xea0 [ 928.173734][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 928.179715][ C0] ? ktime_get_update_offsets_now+0x249/0x320 [ 928.185791][ C0] hrtimer_run_softirq+0x17b/0x360 [ 928.191000][ C0] __do_softirq+0x2a0/0x9f6 [ 928.195600][ C0] asm_call_irq_on_stack+0xf/0x20 [ 928.200617][ C0] [ 928.203558][ C0] do_softirq_own_stack+0xaa/0xd0 [ 928.208678][ C0] irq_exit_rcu+0x132/0x200 [ 928.213181][ C0] sysvec_apic_timer_interrupt+0x4d/0x100 [ 928.219007][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 928.225181][ C0] RIP: 0010:__rcu_read_lock+0x6f/0x90 [ 928.230553][ C0] Code: f0 01 00 48 8d bb 80 03 00 00 48 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 74 04 3c 03 7e 19 81 bb 80 03 00 00 ff ff ff 3f 7f 02 5b 0f 0b 5b c3 e8 47 ee 54 00 eb b3 e8 40 ee 54 00 eb e0 0f 1f 40 [ 928.252681][ C0] RSP: 0018:ffffc90002187940 EFLAGS: 00000293 [ 928.258755][ C0] RAX: 0000000000000000 RBX: ffffea0000b7be00 RCX: ffffffff81a1486c [ 928.266727][ C0] RDX: 1ffff11006045700 RSI: ffffffff81a6287d RDI: ffff88803022b800 [ 928.274701][ C0] RBP: ffffea0000b7be00 R08: 0000000000000000 R09: ffffea0000b7be07 [ 928.282700][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffea0000b7be08 [ 928.290675][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 000000000043c000 [ 928.298667][ C0] ? unmap_page_range+0xddc/0x2640 [ 928.303780][ C0] ? page_remove_rmap+0x1d/0x1c00 [ 928.308815][ C0] lock_page_memcg+0x43/0x260 [ 928.313497][ C0] page_remove_rmap+0x25/0x1c00 [ 928.318345][ C0] ? mark_page_accessed+0x273/0x1bd0 [ 928.323647][ C0] unmap_page_range+0xe30/0x2640 [ 928.328619][ C0] ? vm_normal_page_pmd+0x510/0x510 [ 928.333815][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 928.338655][ C0] ? uprobe_munmap+0x1c/0x560 [ 928.343325][ C0] unmap_single_vma+0x198/0x300 [ 928.348367][ C0] unmap_vmas+0x168/0x2e0 [ 928.352687][ C0] ? zap_vma_ptes+0x100/0x100 [ 928.357359][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 928.362566][ C0] exit_mmap+0x2b1/0x530 [ 928.366800][ C0] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 928.372868][ C0] ? __khugepaged_exit+0x2d9/0x3f0 [ 928.377970][ C0] __mmput+0x122/0x470 [ 928.382026][ C0] mmput+0x53/0x60 [ 928.385951][ C0] do_exit+0xa72/0x29b0 [ 928.390190][ C0] ? mm_update_next_owner+0x7a0/0x7a0 [ 928.395579][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 928.400765][ C0] ? asm_sysvec_irq_work+0x12/0x20 [ 928.405872][ C0] do_group_exit+0x125/0x310 [ 928.410454][ C0] __x64_sys_exit_group+0x3a/0x50 [ 928.415493][ C0] do_syscall_64+0x2d/0x70 [ 928.419901][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 928.426133][ C0] RIP: 0033:0x446b18 [ 928.430009][ C0] Code: Unable to access opcode bytes at RIP 0x446aee. [ 928.436842][ C0] RSP: 002b:00007fffec762338 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 928.445244][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000446b18 [ 928.453290][ C0] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 928.461249][ C0] RBP: 00000000004ce530 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 928.469296][ C0] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 928.477255][ C0] R13: 00000000006e3260 R14: 000000000000000d R15: 0000000000000004 [ 928.542460][ T5] Bluetooth: hci3: command 0x0409 tx timeout [ 928.548637][ T5] Bluetooth: hci4: command 0x0409 tx timeout [ 931.092391][ T5] Bluetooth: hci4: command 0x041b tx timeout [ 931.099244][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 933.572047][ T5] Bluetooth: hci3: command 0x040f tx timeout [ 933.578445][ T5] Bluetooth: hci4: command 0x040f tx timeout [ 936.654026][ T5] Bluetooth: hci4: command 0x0419 tx timeout [ 936.660316][ T5] Bluetooth: hci3: command 0x0419 tx timeout