syzkaller login: [ 94.168025][ T2895] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 94.191190][ T2895] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 94.219846][ T2895] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:54577' (ECDSA) to the list of known hosts. 1970/01/01 00:02:06 fuzzer started 1970/01/01 00:02:10 connecting to host at localhost:35307 1970/01/01 00:02:11 checking machine... 1970/01/01 00:02:11 checking revisions... 1970/01/01 00:02:13 testing simple program... [ 134.316341][ T3055] cgroup: Unknown subsys name 'net' executing program [ 134.855958][ T3055] cgroup: Unknown subsys name 'rlimit' executing program executing program [ 141.052613][ T3059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.093098][ T3059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program [ 143.781903][ T3059] device hsr_slave_0 entered promiscuous mode [ 143.849366][ T3059] device hsr_slave_1 entered promiscuous mode [ 145.579996][ T3059] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 145.650606][ T3059] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 145.728204][ T3059] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 145.831547][ T3059] netdevsim netdevsim0 netdevsim3: renamed from eth3 executing program [ 147.839844][ T3059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.936450][ T1716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.952353][ T1716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.207576][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.221947][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.259157][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.267971][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.317831][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.378552][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.497054][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.508547][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.550450][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.559778][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.602105][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program [ 150.551667][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.557412][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready executing program [ 152.953156][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.966034][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.323754][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.343045][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.358983][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.372939][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.415311][ T3059] device veth0_vlan entered promiscuous mode [ 154.508280][ T3059] device veth1_vlan entered promiscuous mode [ 154.748174][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.765616][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.818300][ T3059] device veth0_macvtap entered promiscuous mode [ 154.889004][ T3059] device veth1_macvtap entered promiscuous mode [ 155.059643][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.071071][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.091830][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.102560][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.171623][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.190492][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.240738][ T3059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.242427][ T3059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.243831][ T3059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.250464][ T3059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program 1970/01/01 00:02:35 building call list... [ 157.058468][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.266910][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.487309][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.692635][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 160.325038][ T50] device hsr_slave_0 left promiscuous mode [ 160.368697][ T50] device hsr_slave_1 left promiscuous mode [ 160.600007][ T50] device veth1_macvtap left promiscuous mode [ 160.601762][ T50] device veth0_macvtap left promiscuous mode [ 160.603788][ T50] device veth1_vlan left promiscuous mode [ 160.619311][ T50] device veth0_vlan left promiscuous mode executing program [ 163.223019][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.358225][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.937377][ T50] bond0 (unregistering): Released all slaves executing program executing program executing program executing program [ 175.445939][ T50] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 175.448228][ T50] leaked reference. [ 175.449222][ T50] ipv6_add_dev+0x13c/0x580 [ 175.451582][ T50] addrconf_notify+0x1a0/0x710 [ 175.452939][ T50] raw_notifier_call_chain+0x54/0x74 [ 175.454385][ T50] call_netdevice_notifiers_info+0x54/0xa0 [ 175.456006][ T50] register_netdevice+0x3f0/0x564 [ 175.457286][ T50] register_netdev+0x24/0x4c [ 175.458538][ T50] loopback_net_init+0x4c/0xb0 [ 175.460236][ T50] ops_init+0x40/0x14c [ 175.461535][ T50] setup_net+0x190/0x3c0 [ 175.462835][ T50] copy_net_ns+0xec/0x360 [ 175.464436][ T50] create_new_namespaces+0x114/0x350 [ 175.465915][ T50] unshare_nsproxy_namespaces+0x64/0xb0 [ 175.467342][ T50] ksys_unshare+0x18c/0x320 [ 175.468592][ T50] __arm64_sys_unshare+0x14/0x24 [ 175.469875][ T50] invoke_syscall+0x48/0x114 [ 175.471141][ T50] el0_svc_common.constprop.0+0x44/0xec executing program executing program executing program executing program [ 185.686235][ T50] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 185.687968][ T50] leaked reference. [ 185.688882][ T50] ipv6_add_dev+0x13c/0x580 [ 185.690094][ T50] addrconf_notify+0x1a0/0x710 [ 185.691247][ T50] raw_notifier_call_chain+0x54/0x74 [ 185.692452][ T50] call_netdevice_notifiers_info+0x54/0xa0 [ 185.693761][ T50] register_netdevice+0x3f0/0x564 [ 185.695131][ T50] register_netdev+0x24/0x4c [ 185.696347][ T50] loopback_net_init+0x4c/0xb0 [ 185.697435][ T50] ops_init+0x40/0x14c [ 185.698501][ T50] setup_net+0x190/0x3c0 [ 185.699562][ T50] copy_net_ns+0xec/0x360 [ 185.700573][ T50] create_new_namespaces+0x114/0x350 [ 185.701712][ T50] unshare_nsproxy_namespaces+0x64/0xb0 [ 185.702981][ T50] ksys_unshare+0x18c/0x320 [ 185.704125][ T50] __arm64_sys_unshare+0x14/0x24 [ 185.705384][ T50] invoke_syscall+0x48/0x114 [ 185.706482][ T50] el0_svc_common.constprop.0+0x44/0xec executing program executing program [ 191.815901][ T2895] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 191.823099][ T2895] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 191.836397][ T2895] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 191.846457][ T2895] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. executing program [ 195.995371][ T50] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 195.997104][ T50] leaked reference. [ 195.998042][ T50] ipv6_add_dev+0x13c/0x580 [ 195.999215][ T50] addrconf_notify+0x1a0/0x710 [ 196.000332][ T50] raw_notifier_call_chain+0x54/0x74 [ 196.001570][ T50] call_netdevice_notifiers_info+0x54/0xa0 [ 196.003074][ T50] register_netdevice+0x3f0/0x564 [ 196.004397][ T50] register_netdev+0x24/0x4c [ 196.005506][ T50] loopback_net_init+0x4c/0xb0 [ 196.006653][ T50] ops_init+0x40/0x14c [ 196.007695][ T50] setup_net+0x190/0x3c0 [ 196.008861][ T50] copy_net_ns+0xec/0x360 [ 196.010014][ T50] create_new_namespaces+0x114/0x350 [ 196.011177][ T50] unshare_nsproxy_namespaces+0x64/0xb0 [ 196.012425][ T50] ksys_unshare+0x18c/0x320 [ 196.013559][ T50] __arm64_sys_unshare+0x14/0x24 [ 196.018714][ T50] invoke_syscall+0x48/0x114 [ 196.020617][ T50] el0_svc_common.constprop.0+0x44/0xec [ 196.116632][ T3488] can: request_module (can-proto-0) failed. [ 196.423616][ T3488] can: request_module (can-proto-0) failed. [ 196.668043][ T3488] can: request_module (can-proto-0) failed. executing program executing program executing program VM DIAGNOSIS: 23:10:53 Registers: info registers vcpu 0 PC=ffff8000087bbba0 X00=fdff000002d18080 X01=0000000000000002 X02=ffff80000a7bd030 X03=0000000000000030 X04=0000000000000000 X05=ffff80000a61bcd7 X06=342e35373120205b X07=205b5d3232323934 X08=7f7f7f7f7f7f7f7f X09=ffff80000aa4b6a0 X10=000000000000005d X11=fffffffffffcc0f8 X12=5b5d323232393434 X13=205d303554202020 X14=0000000000000000 X15=0000000000000020 X16=617355202e656572 X17=746e756f63206567 X18=00000000fffffffd X19=fdff000002d18080 X20=ffff80000a61bcc0 X21=00000000000000c0 X22=0000000000000001 X23=0000000000000000 X24=0000000000000031 X25=ffff80000a61c0e0 X26=0000000000000000 X27=00000000000000c0 X28=0000000000000031 X29=ffff80000aa4b790 X30=029a8000087bc704 SP=ffff80000aa4b790 PSTATE=804000c9 N--- EL2h BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=2525252525252525:2525252525252525 Z01=252f7325006c6c61:00736d5f656d6974 Z02=63615000676e6964:726177726f662f73 Z03=00000000ff000000:ff00000000000000 Z04=000000ff00000000:0000000000000000 Z05=4000000140000000:4000000000000000 Z06=0000000100000000:0000000000000000 Z07=4010040140100401:4010040140100401 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0100000041404000:0100000041404000 Z17=8000000020022000:8000222000000000 Z18=8000000000000000:0020000200200000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000 info registers vcpu 1 PC=ffff8000091b61e0 X00=000000000000000d X01=ffff00007fbda200 X02=ffff8000091b61e0 X03=ffff80007582f000 X04=ffff80000800bf70 X05=ffff80007582f000 X06=000000000217fba4 X07=0000000000000004 X08=f3ff000003f35cc8 X09=326de6f58850da54 X10=6b73f095b2104e5e X11=0000000000000001 X12=ffff80000a3bfef8 X13=ffff800009fc42f0 X14=000000000000016f X15=0000000000004000 X16=ffff80000800c000 X17=ffff80007582f000 X18=0000000000000000 X19=faff000002c28a00 X20=ffff800009a00c10 X21=fdff000002c2ac00 X22=000000000000000d X23=ffff80000a3a4e30 X24=f3ff000003f34d80 X25=0000000000000001 X26=0000000000000000 X27=0000000000000000 X28=f3ff000003f34d80 X29=ffff80000800bf70 X30=ffff8000081186e4 SP=ffff80000800bf70 PSTATE=204008c9 --C- EL2h BTYPE=2 FPCR=00000000 FPSR=00000010 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0000000000000000:0000000000000004 Z01=0000000000000000:414fffffe0000000 Z02=f0e7f8f04295de03:2ef77cf373856043 Z03=0000000040000000:0000000000000000 Z04=4010040140100401:4000000000000000 Z05=4010040140100401:4010040140100401 Z06=5555400000400000:5555400000400000 Z07=0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000010:0000001cfd2c3f50 Z31=0000000000000000:0000000000000000