[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.17' (ECDSA) to the list of known hosts. syzkaller login: [ 951.338137][ T8506] IPVS: ftp: loaded support on port[0] = 21 [ 951.349009][ T8505] IPVS: ftp: loaded support on port[0] = 21 [ 951.351397][ T8504] IPVS: ftp: loaded support on port[0] = 21 [ 951.357681][ T8503] IPVS: ftp: loaded support on port[0] = 21 [ 951.362962][ T8501] IPVS: ftp: loaded support on port[0] = 21 [ 951.376146][ T8502] IPVS: ftp: loaded support on port[0] = 21 [ 951.589805][ T8428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.605025][ T486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.640157][ T8658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.640475][ T486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.648055][ T8658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.657915][ T8428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.692044][ T8576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.700034][ T8576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.720318][ T8668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.728281][ T8487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 951.731133][ T8677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.737049][ T8668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.763217][ T8487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 951.780460][ T8677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.784214][ T8487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 951.795653][ T8487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 951.803557][ T8487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 951.811636][ T8487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 951.871964][ T8428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.875495][ T8677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.880456][ T8428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.909164][ T8658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 951.921802][ T8677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.929205][ T8658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.960687][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program [ 951.968301][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 951.988212][ T8428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.997163][ T8576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.008020][ T8428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.025361][ T8576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.028101][ C1] hrtimer: interrupt took 44260 ns [ 952.095871][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 952.123722][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 952.481982][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program executing program executing program [ 952.689214][ T8677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.703149][ T8677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.181312][ T8487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 1112.100302][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1112.107262][ C0] rcu: 0-....: (2657 ticks this GP) idle=e7e/1/0x4000000000000000 softirq=9432/9432 fqs=379 [ 1112.117807][ C0] (t=10501 jiffies g=8373 q=316) [ 1112.122917][ C0] rcu: rcu_preempt kthread starved for 393 jiffies! g8373 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1112.133836][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1112.143891][ C0] rcu: RCU grace-period kthread stack dump: [ 1112.149778][ C0] task:rcu_preempt state:R running task stack:28880 pid: 11 ppid: 2 flags:0x00004000 [ 1112.161058][ C0] Call Trace: [ 1112.164379][ C0] __schedule+0x893/0x2130 [ 1112.168792][ C0] ? io_schedule_timeout+0x140/0x140 [ 1112.174067][ C0] ? debug_object_destroy+0x210/0x210 [ 1112.179426][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 1112.184473][ C0] schedule+0xcf/0x270 [ 1112.188538][ C0] schedule_timeout+0x148/0x250 [ 1112.193377][ C0] ? usleep_range+0x170/0x170 [ 1112.198041][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 1112.203229][ C0] ? __next_timer_interrupt+0x210/0x210 [ 1112.208792][ C0] ? prepare_to_swait_exclusive+0x2d0/0x2d0 [ 1112.214675][ C0] rcu_gp_kthread+0xb4c/0x1c90 [ 1112.219430][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 1112.224297][ C0] ? rcu_core_si+0x10/0x10 [ 1112.228703][ C0] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 1112.234501][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 1112.239689][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1112.244699][ C0] ? rcu_core_si+0x10/0x10 [ 1112.249103][ C0] kthread+0x3b1/0x4a0 [ 1112.253161][ C0] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 1112.259043][ C0] ret_from_fork+0x1f/0x30 [ 1112.263458][ C0] NMI backtrace for cpu 0 [ 1112.267774][ C0] CPU: 0 PID: 8741 Comm: syz-executor143 Not tainted 5.10.0-rc7-syzkaller #0 [ 1112.276512][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1112.286575][ C0] Call Trace: [ 1112.289844][ C0] [ 1112.292695][ C0] dump_stack+0x107/0x163 [ 1112.297021][ C0] nmi_cpu_backtrace.cold+0x44/0xd7 [ 1112.302211][ C0] ? lapic_can_unplug_cpu+0x80/0x80 [ 1112.307401][ C0] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 1112.313391][ C0] rcu_dump_cpu_stacks+0x1e3/0x21e [ 1112.318513][ C0] rcu_sched_clock_irq.cold+0x472/0xee8 [ 1112.324278][ C0] ? find_held_lock+0x2d/0x110 [ 1112.329036][ C0] ? rcutree_dead_cpu+0x40/0x40 [ 1112.334148][ C0] ? __raise_softirq_irqoff+0x93/0x1d0 [ 1112.339604][ C0] update_process_times+0x77/0xd0 [ 1112.344617][ C0] tick_sched_handle+0x9b/0x180 [ 1112.349455][ C0] tick_sched_timer+0x1d1/0x2a0 [ 1112.354296][ C0] ? can_stop_idle_tick+0x290/0x290 [ 1112.359483][ C0] __hrtimer_run_queues+0x1ce/0xea0 [ 1112.364679][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 1112.370646][ C0] ? ktime_get_update_offsets_now+0x249/0x320 [ 1112.376729][ C0] hrtimer_interrupt+0x334/0x940 [ 1112.381668][ C0] __sysvec_apic_timer_interrupt+0x146/0x540 [ 1112.387900][ C0] sysvec_apic_timer_interrupt+0x48/0x100 [ 1112.393608][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1112.399580][ C0] RIP: 0010:unwind_next_frame+0x238/0x1f90 [ 1112.405374][ C0] Code: ff 39 d6 0f 83 54 12 00 00 48 ba 00 00 00 00 00 fc ff df 41 89 f0 4a 8d 3c 85 b4 f3 fa 8d 49 89 f9 49 c1 e9 03 45 0f b6 0c 11 <48> 89 fa 83 e2 07 83 c2 03 44 38 ca 7c 32 45 84 c9 74 2d 4c 89 44 [ 1112.425072][ C0] RSP: 0018:ffffc90000007628 EFLAGS: 00000217 [ 1112.431130][ C0] RAX: 0000000000000000 RBX: 1ffff92000000ecd RCX: ffffffff8128e48b [ 1112.439112][ C0] RDX: dffffc0000000000 RSI: 00000000000028e4 RDI: ffffffff8dfb9744 [ 1112.447069][ C0] RBP: 0000000000000002 R08: 00000000000028e4 R09: 0000000000000000 [ 1112.455030][ C0] R10: 0000000000082081 R11: 0000000000000001 R12: ffffc90000007798 [ 1112.463270][ C0] R13: ffffc90000007785 R14: ffffc900000077a0 R15: ffffc90000007750 [ 1112.471484][ C0] ? arch_stack_walk+0x5b/0xe0 [ 1112.476338][ C0] ? unwind_next_frame+0x11f/0x1f90 [ 1112.481558][ C0] ? arch_stack_walk+0x5c/0xe0 [ 1112.486404][ C0] ? deref_stack_reg+0x150/0x150 [ 1112.491356][ C0] ? get_stack_info_noinstr+0x39/0x110 [ 1112.496808][ C0] __unwind_start+0x51b/0x800 [ 1112.501648][ C0] ? create_prof_cpu_mask+0x20/0x20 [ 1112.506922][ C0] arch_stack_walk+0x5c/0xe0 [ 1112.511768][ C0] ? arch_stack_walk+0x5c/0xe0 [ 1112.516608][ C0] stack_trace_save+0x8c/0xc0 [ 1112.521559][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 1112.527454][ C0] ? ring_buffer_wakeup+0x194/0x2b0 [ 1112.532825][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 1112.537667][ C0] ? lapic_next_event+0x4d/0x80 [ 1112.542779][ C0] kasan_save_stack+0x1b/0x40 [ 1112.547629][ C0] ? kill_fasync+0x18/0x460 [ 1112.552144][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 1112.557353][ C0] ? sched_clock+0x2a/0x40 [ 1112.561772][ C0] ? sched_clock_cpu+0x18/0x1f0 [ 1112.566629][ C0] ? irqtime_account_irq+0x17e/0x2d0 [ 1112.571909][ C0] ? asm_sysvec_irq_work+0x12/0x20 [ 1112.577022][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 1112.582216][ C0] ? asm_sysvec_irq_work+0x12/0x20 [ 1112.587334][ C0] ? __memset+0x29/0x30 [ 1112.591491][ C0] ? kasan_unpoison_shadow+0x33/0x40 [ 1112.596767][ C0] __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 1112.602390][ C0] kmem_cache_alloc+0x1c6/0x440 [ 1112.607235][ C0] __build_skb+0x21/0x60 [ 1112.611468][ C0] __netdev_alloc_skb+0x20d/0x3f0 [ 1112.616483][ C0] __ieee80211_beacon_get+0xebe/0x1aa0 [ 1112.621936][ C0] ? ieee80211_set_beacon_cntdwn+0x620/0x620 [ 1112.627926][ C0] ? sched_clock+0x2a/0x40 [ 1112.632416][ C0] ? sched_clock_cpu+0x18/0x1f0 [ 1112.637286][ C0] ? irqtime_account_irq+0x17e/0x2d0 [ 1112.642651][ C0] ieee80211_beacon_get_tim+0x88/0x910 [ 1112.648216][ C0] ? asm_sysvec_irq_work+0x12/0x20 [ 1112.653319][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 1112.659289][ C0] ? __iterate_interfaces+0x1bd/0x520 [ 1112.664651][ C0] mac80211_hwsim_beacon_tx+0x111/0x910 [ 1112.670370][ C0] __iterate_interfaces+0x1e5/0x520 [ 1112.675643][ C0] ? mac80211_hwsim_tx_frame+0x1e0/0x1e0 [ 1112.681267][ C0] ? mac80211_hwsim_tx_frame+0x1e0/0x1e0 [ 1112.686909][ C0] ieee80211_iterate_active_interfaces_atomic+0x8d/0x170 [ 1112.694006][ C0] ? mac80211_hwsim_addr_match+0x180/0x180 [ 1112.699798][ C0] mac80211_hwsim_beacon+0xd5/0x1a0 [ 1112.704984][ C0] ? mac80211_hwsim_addr_match+0x180/0x180 [ 1112.710780][ C0] __hrtimer_run_queues+0x693/0xea0 [ 1112.715974][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 1112.721966][ C0] ? ktime_get_update_offsets_now+0x249/0x320 [ 1112.728025][ C0] hrtimer_run_softirq+0x17b/0x360 [ 1112.733126][ C0] __do_softirq+0x2a0/0x9f6 [ 1112.737622][ C0] asm_call_irq_on_stack+0xf/0x20 [ 1112.742625][ C0] [ 1112.745553][ C0] do_softirq_own_stack+0xaa/0xd0 [ 1112.750564][ C0] irq_exit_rcu+0x132/0x200 [ 1112.755056][ C0] sysvec_apic_timer_interrupt+0x4d/0x100 [ 1112.761111][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1112.767424][ C0] RIP: 0010:preempt_schedule_irq+0x49/0x90 [ 1112.773847][ C0] Code: 55 53 65 48 8b 1c 25 00 f0 01 00 48 89 dd 48 c1 ed 03 48 01 c5 bf 01 00 00 00 e8 52 3a 64 f8 e8 3d a0 8e f8 fb bf 01 00 00 00 82 d1 ff ff 9c 58 fa f6 c4 02 75 27 bf 01 00 00 00 e8 c0 22 64 [ 1112.793989][ C0] RSP: 0018:ffffc90001e0f908 EFLAGS: 00000206 [ 1112.800047][ C0] RAX: 00000000003eaf93 RBX: ffff88801d7ecec0 RCX: 1ffffffff19d8e91 [ 1112.808004][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1112.815962][ C0] RBP: ffffed1003afd9d8 R08: 0000000000000001 R09: 0000000000000001 [ 1112.823922][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1112.831879][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1112.839857][ C0] ? preempt_schedule_irq+0x43/0x90 [ 1112.845041][ C0] irqentry_exit+0x7a/0xa0 [ 1112.849447][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1112.855413][ C0] RIP: 0010:unmap_page_range+0x720/0x2640 [ 1112.861120][ C0] Code: 00 48 89 44 24 40 e8 df c2 ce ff 48 8b 7c 24 40 31 f6 ba 10 00 00 00 e8 4e 21 10 00 48 8b 44 24 28 48 c1 e8 03 42 80 3c 30 00 <0f> 85 29 1b 00 00 48 8b 44 24 28 31 ff 4c 8b 2c 24 48 8b 28 49 c1 [ 1112.880822][ C0] RSP: 0018:ffffc90001e0f9d8 EFLAGS: 00000246 [ 1112.886875][ C0] RAX: 1ffff110024bfa02 RBX: 00000000004d4000 RCX: 0000000000000000 [ 1112.895032][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90001e0fae0 [ 1112.903194][ C0] RBP: 0000000000000004 R08: 0000000000000001 R09: ffffc90001e0fad0 [ 1112.911154][ C0] R10: fffff520003c1f5b R11: 0000000000000000 R12: ffff88801ce80a90 [ 1112.919111][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 00000000004c7000 [ 1112.927086][ C0] ? unmap_page_range+0x712/0x2640 [ 1112.932201][ C0] ? vm_normal_page_pmd+0x510/0x510 [ 1112.937387][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 1112.942226][ C0] ? uprobe_munmap+0x1c/0x560 [ 1112.946980][ C0] unmap_single_vma+0x198/0x300 [ 1112.951850][ C0] unmap_vmas+0x168/0x2e0 [ 1112.956191][ C0] ? zap_vma_ptes+0x100/0x100 [ 1112.960854][ C0] ? preempt_schedule_common+0x59/0xc0 [ 1112.966306][ C0] ? lru_add_drain+0x212/0x430 [ 1112.971064][ C0] exit_mmap+0x2b1/0x530 [ 1112.975294][ C0] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 1112.981276][ C0] ? __khugepaged_exit+0x2d9/0x3f0 [ 1112.986375][ C0] __mmput+0x122/0x470 [ 1112.990432][ C0] mmput+0x53/0x60 [ 1112.994144][ C0] do_exit+0xa72/0x29b0 [ 1112.998297][ C0] ? mm_update_next_owner+0x7a0/0x7a0 [ 1113.003670][ C0] do_group_exit+0x125/0x310 [ 1113.008553][ C0] __x64_sys_exit_group+0x3a/0x50 [ 1113.013564][ C0] do_syscall_64+0x2d/0x70 [ 1113.017995][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1113.023962][ C0] RIP: 0033:0x441308 [ 1113.027838][ C0] Code: Unable to access opcode bytes at RIP 0x4412de. [ 1113.034669][ C0] RSP: 002b:00007ffde32ba008 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1113.043250][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441308 [ 1113.051227][ C0] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 1113.059188][ C0] RBP: 00000000004c7470 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 1113.067146][ C0] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 1113.075103][ C0] R13: 00000000006db1e0 R14: 000000000000000c R15: 0000000000000004