syzkaller login: [ 114.435124][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 114.452582][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 114.473285][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:20229' (ECDSA) to the list of known hosts. 1970/01/01 00:02:40 fuzzer started 1970/01/01 00:02:45 connecting to host at localhost:37705 1970/01/01 00:02:45 checking machine... 1970/01/01 00:02:45 checking revisions... 1970/01/01 00:02:48 testing simple program... [ 168.609501][ T3063] cgroup: Unknown subsys name 'net' executing program [ 169.090642][ T3063] cgroup: Unknown subsys name 'rlimit' executing program executing program [ 175.624409][ T3066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.661090][ T3066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program [ 178.583314][ T3066] device hsr_slave_0 entered promiscuous mode [ 178.675388][ T3066] device hsr_slave_1 entered promiscuous mode [ 180.552202][ T3066] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 180.635854][ T3066] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 180.715574][ T3066] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.806067][ T3066] netdevsim netdevsim0 netdevsim3: renamed from eth3 executing program [ 183.000943][ T3066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.115816][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.154750][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready executing program [ 184.542714][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.561932][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.612650][ T3383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.617661][ T3383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.673905][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.727032][ T3383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.889839][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.895587][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.960199][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.966889][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.027627][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.076645][ T3383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.081092][ T3383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready executing program [ 188.696035][ T3383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.707426][ T3383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready executing program [ 190.091450][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.105740][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.153082][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.167438][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.176696][ T3066] device veth0_vlan entered promiscuous mode [ 190.256227][ T3066] device veth1_vlan entered promiscuous mode [ 190.495874][ T3383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.503304][ T3383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.543975][ T3066] device veth0_macvtap entered promiscuous mode [ 190.605938][ T3066] device veth1_macvtap entered promiscuous mode [ 190.730367][ T3383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.736570][ T3383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.747302][ T3383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.754554][ T3383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.816727][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.825400][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.895270][ T3066] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.896592][ T3066] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.897066][ T3066] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.897510][ T3066] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:03:12 building call list... executing program [ 193.453577][ T29] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.740335][ T29] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.984528][ T29] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.296815][ T29] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 197.881985][ T29] device hsr_slave_0 left promiscuous mode [ 197.934007][ T29] device hsr_slave_1 left promiscuous mode [ 198.207196][ T29] device veth1_macvtap left promiscuous mode [ 198.211722][ T29] device veth0_macvtap left promiscuous mode [ 198.231464][ T29] device veth1_vlan left promiscuous mode [ 198.235219][ T29] device veth0_vlan left promiscuous mode executing program [ 201.865843][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.050323][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface executing program [ 202.834772][ T29] bond0 (unregistering): Released all slaves executing program executing program executing program executing program [ 214.759232][ T29] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 214.763885][ T29] leaked reference. [ 214.764831][ T29] ipv6_add_dev+0x300/0xeec [ 214.765302][ T29] addrconf_notify+0x3ac/0x1080 [ 214.765625][ T29] notifier_call_chain+0xc0/0x180 [ 214.765935][ T29] raw_notifier_call_chain+0x18/0x24 [ 214.766273][ T29] call_netdevice_notifiers_info+0x80/0xe0 [ 214.766641][ T29] register_netdevice+0xa7c/0x1094 [ 214.766960][ T29] register_netdev+0x24/0x4c [ 214.767280][ T29] loopback_net_init+0x6c/0x124 [ 214.767603][ T29] ops_init+0x8c/0x46c [ 214.768173][ T29] setup_net+0x638/0xbec [ 214.768629][ T29] copy_net_ns+0x1fc/0x560 [ 214.768999][ T29] create_new_namespaces+0x300/0x840 [ 214.769366][ T29] unshare_nsproxy_namespaces+0x7c/0x174 [ 214.769662][ T29] ksys_unshare+0x284/0x580 [ 214.769988][ T29] __arm64_sys_unshare+0x30/0x50 [ 214.770304][ T29] invoke_syscall+0x6c/0x260 [ 216.527793][ T3062] can: request_module (can-proto-0) failed. [ 216.756495][ T3062] can: request_module (can-proto-0) failed. [ 216.945781][ T3062] can: request_module (can-proto-0) failed. executing program executing program executing program [ 224.889535][ T29] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 224.890357][ T29] leaked reference. [ 224.890722][ T29] ipv6_add_dev+0x300/0xeec [ 224.891182][ T29] addrconf_notify+0x3ac/0x1080 [ 224.891566][ T29] notifier_call_chain+0xc0/0x180 [ 224.892011][ T29] raw_notifier_call_chain+0x18/0x24 [ 224.892417][ T29] call_netdevice_notifiers_info+0x80/0xe0 [ 224.892846][ T29] register_netdevice+0xa7c/0x1094 [ 224.893282][ T29] register_netdev+0x24/0x4c [ 224.893680][ T29] loopback_net_init+0x6c/0x124 [ 224.894985][ T29] ops_init+0x8c/0x46c [ 224.896029][ T29] setup_net+0x638/0xbec [ 224.897207][ T29] copy_net_ns+0x1fc/0x560 [ 224.898682][ T29] create_new_namespaces+0x300/0x840 [ 224.900034][ T29] unshare_nsproxy_namespaces+0x7c/0x174 [ 224.900698][ T29] ksys_unshare+0x284/0x580 [ 224.901145][ T29] __arm64_sys_unshare+0x30/0x50 [ 224.901556][ T29] invoke_syscall+0x6c/0x260 executing program executing program executing program [ 234.805678][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 234.814935][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 234.826928][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 234.832623][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. executing program [ 235.050016][ T29] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 235.050768][ T29] leaked reference. [ 235.051107][ T29] ipv6_add_dev+0x300/0xeec [ 235.051489][ T29] addrconf_notify+0x3ac/0x1080 [ 235.051876][ T29] notifier_call_chain+0xc0/0x180 [ 235.052255][ T29] raw_notifier_call_chain+0x18/0x24 [ 235.052592][ T29] call_netdevice_notifiers_info+0x80/0xe0 [ 235.052932][ T29] register_netdevice+0xa7c/0x1094 [ 235.053328][ T29] register_netdev+0x24/0x4c [ 235.053681][ T29] loopback_net_init+0x6c/0x124 [ 235.053989][ T29] ops_init+0x8c/0x46c [ 235.054265][ T29] setup_net+0x638/0xbec [ 235.054572][ T29] copy_net_ns+0x1fc/0x560 [ 235.054948][ T29] create_new_namespaces+0x300/0x840 [ 235.055257][ T29] unshare_nsproxy_namespaces+0x7c/0x174 [ 235.055561][ T29] ksys_unshare+0x284/0x580 [ 235.055879][ T29] __arm64_sys_unshare+0x30/0x50 [ 235.056253][ T29] invoke_syscall+0x6c/0x260 VM DIAGNOSIS: 19:29:57 Registers: info registers vcpu 0 PC=ffff80000b5fb2d8 X00=ffff80000b5fb2d0 X01=0000000000000000 X02=1fffe0000d52759d X03=0000000000000001 X04=ffff800011227630 X05=ffff700002244e92 X06=ffff000009d3d100 X07=00000000f2f2f2f2 X08=00000000f3f3f300 X09=00000000f2000000 X10=00000000f204f204 X11=00000000f3f3f3f3 X12=00000000f1f1f1f1 X13=0000000000000000 X14=1ffff00002244ec4 X15=6620656d6f636562 X16=617355202e656572 X17=746e756f63206567 X18=0000000000000000 X19=ffff80000e435ab0 X20=0000000000000000 X21=0000000000000003 X22=0000000000000028 X23=ffff80000e435b40 X24=dfff800000000000 X25=ffff80000e435a80 X26=0000000000000004 X27=ffff80000e435ab0 X28=ffff00000f488570 X29=ffff800011227370 X30=ffff8000083a3458 SP=ffff800011227370 PSTATE=800000c5 N--- EL1h FPCR=00000000 FPSR=00000010 Q00=0000000000000000:0000000000000000 Q01=0000000000000000:414fffffe0000000 Q02=65aa7fee8a1051f5:17b1b380dff05d15 Q03=0000000040000000:0000000000000000 Q04=4010040140100401:4000000000000000 Q05=4010040140100401:4010040140100401 Q06=5555400000400000:5555400000400000 Q07=0000000000000000:0000000000000000 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000010:00000024cccc2e00 Q31=0000000000000000:0000000000000000 info registers vcpu 1 PC=ffff8000082b0694 X00=ffff0000105f1b08 X01=0000000000000000 X02=0000000000000003 X03=ffff000009577860 X04=0000000000000c3c X05=0000000000000000 X06=0000000000000000 X07=ffff000009577858 X08=ffff000009577800 X09=dfff800000000000 X10=ffff60000d52e1ec X11=1fffff800007298e X12=ffff7f800007298f X13=0000000000000000 X14=1ffff00003584ebc X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=0000000000000001 X20=ffff80000cb5b740 X21=0000000000000001 X22=ffff80001ac27470 X23=ffff0000105f1b00 X24=0000000000000000 X25=ffff800010d8f290 X26=0000000000000000 X27=ffff80000918ad70 X28=ffff0000105f1b00 X29=ffff80001ac27330 X30=ffff80000cb3a6b4 SP=ffff80001ac273d0 PSTATE=700000c5 -ZCV EL1h FPCR=00000000 FPSR=00000000 Q00=2525252525252525:2525252525252525 Q01=252f7325006c6c61:00736d5f656d6974 Q02=63615000676e6964:726177726f662f73 Q03=00000000ff000000:ff00000000000000 Q04=000000ff00000000:0000000000000000 Q05=4000000140000000:4000000000000000 Q06=0000000100000000:0000000000000000 Q07=4010040140100401:4010040140100401 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0100000041404000:0100000041404000 Q17=a00aa00aa00a0000:aaaaaa0080002220 Q18=8020080280200802:8020080200000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000