dhcpcd-9.4.1 starting dev: loaded udev DUID 00:04:da:02:67:e5:e5:53:d2:9f:6e:c8:e3:c7:0e:cc:92:0b forked to background, child pid 2392 Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.143' (ECDSA) to the list of known hosts. 2023/06/02 18:58:21 ignoring optional flag "sandboxArg"="0" 2023/06/02 18:58:21 parsed 1 programs syzkaller login: [ 1072.006699][ T2461] cgroup: Unknown subsys name 'net' [ 1072.120601][ T2461] cgroup: Unknown subsys name 'rlimit' 2023/06/02 18:58:22 executed programs: 0 [ 1072.256296][ T2460] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=2460 'syz-execprog' [ 1084.224688][ T2318] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1084.584771][ T2318] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.595847][ T2318] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 8192, setting to 1024 [ 1084.606953][ T2318] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1084.774783][ T2318] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1084.783963][ T2318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.791998][ T2318] usb 1-1: Product: syz [ 1084.796195][ T2318] usb 1-1: Manufacturer: syz [ 1084.800911][ T2318] usb 1-1: SerialNumber: syz [ 1086.294697][ T2318] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1086.301237][ T2318] cdc_ncm 1-1:1.0: dwNtbInMaxSize=9 is too small. Using 2048 [ 1086.308668][ T2318] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1086.529244][ T2318] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1086.935204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 1087.138987][ T2318] usb 1-1: USB disconnect, device number 2 [ 1087.164719][ T2318] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) 2023/06/02 18:58:37 executed programs: 1 [ 1087.954630][ T2462] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1088.314687][ T2462] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.325733][ T2462] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 8192, setting to 1024 [ 1088.336815][ T2462] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1088.504771][ T2462] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1088.513869][ T2462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.521892][ T2462] usb 1-1: Product: syz [ 1088.526078][ T2462] usb 1-1: Manufacturer: syz [ 1088.530695][ T2462] usb 1-1: SerialNumber: syz [ 1090.024719][ T2462] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1090.031184][ T2462] cdc_ncm 1-1:1.0: dwNtbInMaxSize=9 is too small. Using 2048 [ 1090.038620][ T2462] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1090.237465][ T2462] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1090.644861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 1090.810078][ T2989] skbuff: skb_over_panic: text:ffffffff83e701ab len:428 put:172 head:ffff88810fbb7600 data:ffff88810fbb7600 tail:0x1ac end:0x140 dev: [ 1090.825049][ T2989] ------------[ cut here ]------------ [ 1090.830514][ T2989] kernel BUG at net/core/skbuff.c:200! [ 1090.836021][ T2989] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1090.842095][ T2989] CPU: 1 PID: 2989 Comm: dhcpcd Not tainted 6.4.0-rc4-syzkaller-00151-g243ff7e6a035 #0 [ 1090.851726][ T2989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1090.861788][ T2989] RIP: 0010:skb_panic+0x152/0x1d0 [ 1090.866903][ T2989] Code: 0f b6 04 01 84 c0 74 04 3c 03 7e 20 8b 4b 70 41 56 45 89 e8 48 c7 c7 c0 28 16 87 41 57 56 48 89 ee 52 4c 89 e2 e8 3e db 00 fc <0f> 0b 4c 89 4c 24 10 48 89 54 24 08 48 89 34 24 e8 39 43 66 fc 4c [ 1090.886740][ T2989] RSP: 0018:ffffc9000292f288 EFLAGS: 00010282 [ 1090.892834][ T2989] RAX: 0000000000000089 RBX: ffff888113ff4640 RCX: 0000000000000000 [ 1090.900810][ T2989] RDX: 0000000000000000 RSI: ffffffff812fd52c RDI: 0000000000000005 [ 1090.908791][ T2989] RBP: ffffffff87163720 R08: 0000000000000005 R09: 0000000000000000 [ 1090.916784][ T2989] R10: 0000000080000403 R11: 0000000000000001 R12: ffffffff83e701ab [ 1090.924764][ T2989] R13: 00000000000000ac R14: ffffffff87162880 R15: 0000000000000140 [ 1090.932736][ T2989] FS: 00007f85588ea740(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000 [ 1090.941672][ T2989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1090.948266][ T2989] CR2: 00007ffe9be70bc8 CR3: 000000011ad10000 CR4: 00000000003506e0 [ 1090.956252][ T2989] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1090.964244][ T2989] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1090.972233][ T2989] Call Trace: [ 1090.975506][ T2989] [ 1090.978431][ T2989] ? die+0x32/0x90 [ 1090.982208][ T2989] ? do_trap+0x1b2/0x3f0 [ 1090.986463][ T2989] ? skb_panic+0x152/0x1d0 [ 1090.990899][ T2989] ? skb_panic+0x152/0x1d0 [ 1090.995336][ T2989] ? do_error_trap+0xb1/0x170 [ 1091.000021][ T2989] ? skb_panic+0x152/0x1d0 [ 1091.004466][ T2989] ? handle_invalid_op+0x2c/0x30 [ 1091.009422][ T2989] ? skb_panic+0x152/0x1d0 [ 1091.013847][ T2989] ? exc_invalid_op+0x2f/0x50 [ 1091.018552][ T2989] ? asm_exc_invalid_op+0x1a/0x20 [ 1091.023592][ T2989] ? cdc_ncm_fill_tx_frame+0x20fb/0x38d0 [ 1091.029268][ T2989] ? vprintk+0x8c/0xa0 [ 1091.033358][ T2989] ? skb_panic+0x152/0x1d0 [ 1091.037791][ T2989] ? skb_panic+0x152/0x1d0 [ 1091.042225][ T2989] ? cdc_ncm_fill_tx_frame+0x20fb/0x38d0 [ 1091.047874][ T2989] skb_put+0x16f/0x1a0 [ 1091.051968][ T2989] cdc_ncm_fill_tx_frame+0x20fb/0x38d0 [ 1091.057464][ T2989] cdc_ncm_tx_fixup+0xde/0x120 [ 1091.062241][ T2989] ? cdc_ncm_fill_tx_frame+0x38d0/0x38d0 [ 1091.067888][ T2989] usbnet_start_xmit+0x156/0x2180 [ 1091.072931][ T2989] ? lock_downgrade+0x690/0x690 [ 1091.077813][ T2989] ? dev_queue_xmit_nit+0x88a/0xbb0 [ 1091.083038][ T2989] dev_hard_start_xmit+0x187/0x700 [ 1091.088171][ T2989] sch_direct_xmit+0x25f/0x7f0 [ 1091.092979][ T2989] ? lock_sync+0x190/0x190 [ 1091.097406][ T2989] ? __might_fault+0xe2/0x190 [ 1091.102110][ T2989] ? dev_watchdog+0x8b0/0x8b0 [ 1091.106803][ T2989] ? do_raw_spin_trylock+0xb4/0x180 [ 1091.112029][ T2989] ? do_raw_spin_lock+0x270/0x2b0 [ 1091.117074][ T2989] __dev_queue_xmit+0x14c3/0x3ae0 [ 1091.122124][ T2989] ? netdev_core_pick_tx+0x3b0/0x3b0 [ 1091.127425][ T2989] ? hash_and_copy_to_iter+0x210/0x210 [ 1091.132937][ T2989] ? packet_parse_headers+0x425/0x970 [ 1091.138333][ T2989] ? packet_parse_headers+0x1f0/0x970 [ 1091.143732][ T2989] ? __check_object_size+0x323/0x730 [ 1091.149055][ T2989] ? packet_sock_destruct+0x170/0x170 [ 1091.154446][ T2989] ? skb_copy_datagram_from_iter+0x478/0x6c0 [ 1091.160438][ T2989] packet_xmit+0x268/0x390 [ 1091.164873][ T2989] packet_sendmsg+0x348c/0x5040 [ 1091.169740][ T2989] ? aa_sk_perm+0x31d/0xb10 [ 1091.174264][ T2989] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 1091.180198][ T2989] ? aa_af_perm+0x240/0x240 [ 1091.184722][ T2989] ? aa_file_perm+0x567/0x1250 [ 1091.189501][ T2989] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 1091.195423][ T2989] sock_sendmsg+0xde/0x190 [ 1091.199899][ T2989] sock_write_iter+0x295/0x3d0 [ 1091.204681][ T2989] ? sock_sendmsg+0x190/0x190 [ 1091.209369][ T2989] ? __unix_dgram_recvmsg+0x43e/0xb90 [ 1091.214773][ T2989] ? aa_sk_perm+0x31d/0xb10 [ 1091.219279][ T2989] do_iter_readv_writev+0x20b/0x3b0 [ 1091.224492][ T2989] ? generic_copy_file_range+0x1d0/0x1d0 [ 1091.230142][ T2989] ? security_file_permission+0xaf/0xd0 [ 1091.235699][ T2989] do_iter_write+0x185/0x7e0 [ 1091.240307][ T2989] vfs_writev+0x1aa/0x670 [ 1091.244680][ T2989] ? vfs_iter_write+0xa0/0xa0 [ 1091.249383][ T2989] ? populate_seccomp_data+0x214/0x540 [ 1091.254873][ T2989] ? __seccomp_filter+0x5ac/0x1080 [ 1091.259998][ T2989] ? seccomp_notify_ioctl+0xea0/0xea0 [ 1091.265388][ T2989] ? __fget_light+0x20a/0x270 [ 1091.270090][ T2989] do_writev+0x279/0x2f0 [ 1091.274373][ T2989] ? vfs_writev+0x670/0x670 [ 1091.278906][ T2989] ? __secure_computing+0x20e/0x380 [ 1091.284120][ T2989] do_syscall_64+0x39/0xb0 [ 1091.288550][ T2989] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1091.294461][ T2989] RIP: 0033:0x7f85589b8e03 [ 1091.298880][ T2989] Code: 89 c7 48 89 44 24 08 e8 6a f2 f9 ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 14 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6d 48 8b 15 f6 5f 0d 00 f7 d8 64 89 02 48 83 [ 1091.318504][ T2989] RSP: 002b:00007ffe9be70b68 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1091.326932][ T2989] RAX: ffffffffffffffda RBX: 00007ffe9be80e18 RCX: 00007f85589b8e03 [ 1091.334918][ T2989] RDX: 0000000000000002 RSI: 00007ffe9be70b80 RDI: 0000000000000005 [ 1091.342903][ T2989] RBP: 000055e28be2d9c7 R08: 0000000042424242 R09: 0000000000000000 [ 1091.350906][ T2989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1091.358881][ T2989] R13: 000055e28d0a7960 R14: 00007ffe9be70c18 R15: 00007ffe9be70bc8 [ 1091.366910][ T2989] [ 1091.369946][ T2989] Modules linked in: [ 1091.373919][ T2989] ---[ end trace 0000000000000000 ]--- [ 1091.379416][ T2989] RIP: 0010:skb_panic+0x152/0x1d0 [ 1091.384494][ T2989] Code: 0f b6 04 01 84 c0 74 04 3c 03 7e 20 8b 4b 70 41 56 45 89 e8 48 c7 c7 c0 28 16 87 41 57 56 48 89 ee 52 4c 89 e2 e8 3e db 00 fc <0f> 0b 4c 89 4c 24 10 48 89 54 24 08 48 89 34 24 e8 39 43 66 fc 4c [ 1091.385395][ T9] usb 1-1: USB disconnect, device number 3 [ 1091.404143][ T2989] RSP: 0018:ffffc9000292f288 EFLAGS: 00010282 [ 1091.404168][ T2989] RAX: 0000000000000089 RBX: ffff888113ff4640 RCX: 0000000000000000 [ 1091.404185][ T2989] RDX: 0000000000000000 RSI: ffffffff812fd52c RDI: 0000000000000005 [ 1091.414666][ T9] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 1091.416062][ T2989] RBP: ffffffff87163720 R08: 0000000000000005 R09: 0000000000000000 [ 1091.449101][ T2989] R10: 0000000080000403 R11: 0000000000000001 R12: ffffffff83e701ab [ 1091.457084][ T2989] R13: 00000000000000ac R14: ffffffff87162880 R15: 0000000000000140 [ 1091.465065][ T2989] FS: 00007f85588ea740(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000 [ 1091.473998][ T2989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1091.480597][ T2989] CR2: 00007ffe9be70bc8 CR3: 000000011ad10000 CR4: 00000000003506e0 [ 1091.488625][ T2989] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1091.496612][ T2989] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1091.504620][ T2989] Kernel panic - not syncing: Fatal exception in interrupt [ 1091.512107][ T2989] Kernel Offset: disabled [ 1091.516444][ T2989] Rebooting in 86400 seconds..