syzkaller login: [ 65.429498][ T2900] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 65.442593][ T2900] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 67.317977][ T2900] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:64868' (ECDSA) to the list of known hosts. 1970/01/01 00:01:16 fuzzer started 1970/01/01 00:01:19 connecting to host at localhost:45111 1970/01/01 00:01:19 checking machine... 1970/01/01 00:01:19 checking revisions... 1970/01/01 00:01:20 testing simple program... [ 80.935480][ T3060] cgroup: Unknown subsys name 'net' [ 81.319061][ T3060] cgroup: Unknown subsys name 'rlimit' executing program executing program [ 85.432688][ T3064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.467969][ T3064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.398614][ T3064] device hsr_slave_0 entered promiscuous mode [ 87.497032][ T3064] device hsr_slave_1 entered promiscuous mode executing program [ 88.595793][ T3064] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.656113][ T3064] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.709159][ T3064] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.773340][ T3064] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.065151][ T3064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.127974][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.139199][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.940273][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.944621][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.987091][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.990802][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.018166][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.051235][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.131025][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.136303][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.168281][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.176179][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.225904][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program [ 91.859649][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.860761][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.475573][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.479887][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.283863][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.288648][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.298991][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.306753][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.328495][ T3064] device veth0_vlan entered promiscuous mode [ 94.377716][ T3064] device veth1_vlan entered promiscuous mode executing program [ 94.482844][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.486948][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.506432][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.510069][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.537655][ T3064] device veth0_macvtap entered promiscuous mode [ 94.577806][ T3064] device veth1_macvtap entered promiscuous mode [ 94.688973][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.695166][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.703531][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.707913][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.775316][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.780136][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.809248][ T3064] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.810214][ T3064] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.810585][ T3064] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.810933][ T3064] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:36 building call list... [ 96.997477][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.194245][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.363108][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 97.585095][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.896993][ T51] device hsr_slave_0 left promiscuous mode [ 99.953538][ T51] device hsr_slave_1 left promiscuous mode [ 100.236163][ T51] device veth1_macvtap left promiscuous mode [ 100.237643][ T51] device veth0_macvtap left promiscuous mode [ 100.239032][ T51] device veth1_vlan left promiscuous mode [ 100.240336][ T51] device veth0_vlan left promiscuous mode executing program [ 102.038267][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.139506][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.571847][ T51] bond0 (unregistering): Released all slaves executing program executing program executing program executing program [ 112.655362][ T3056] can: request_module (can-proto-0) failed. [ 112.832911][ T3056] can: request_module (can-proto-0) failed. [ 112.958694][ T3056] can: request_module (can-proto-0) failed. [ 114.184918][ T51] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 114.185753][ T51] leaked reference. [ 114.186356][ T51] ipv6_add_dev+0x300/0xeec [ 114.186680][ T51] addrconf_notify+0x3ac/0x1080 [ 114.186924][ T51] notifier_call_chain+0xc0/0x180 [ 114.187545][ T51] raw_notifier_call_chain+0x18/0x24 [ 114.188420][ T51] call_netdevice_notifiers_info+0x80/0xe0 [ 114.188955][ T51] register_netdevice+0xa7c/0x1094 [ 114.189202][ T51] register_netdev+0x24/0x4c [ 114.189429][ T51] loopback_net_init+0x6c/0x124 [ 114.189706][ T51] ops_init+0x8c/0x46c [ 114.189966][ T51] setup_net+0x638/0xbec [ 114.190193][ T51] copy_net_ns+0x1fc/0x560 [ 114.190446][ T51] create_new_namespaces+0x300/0x840 [ 114.190683][ T51] unshare_nsproxy_namespaces+0x7c/0x174 [ 114.190924][ T51] ksys_unshare+0x284/0x580 [ 114.191260][ T51] __arm64_sys_unshare+0x30/0x50 [ 114.191603][ T51] invoke_syscall+0x6c/0x260 executing program executing program executing program [ 121.396714][ T2900] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 121.399876][ T2900] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 124.292519][ T51] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 124.293015][ T51] leaked reference. [ 124.293241][ T51] ipv6_add_dev+0x300/0xeec [ 124.293516][ T51] addrconf_notify+0x3ac/0x1080 [ 124.293745][ T51] notifier_call_chain+0xc0/0x180 [ 124.294111][ T51] raw_notifier_call_chain+0x18/0x24 [ 124.294371][ T51] call_netdevice_notifiers_info+0x80/0xe0 [ 124.294628][ T51] register_netdevice+0xa7c/0x1094 [ 124.294864][ T51] register_netdev+0x24/0x4c [ 124.295112][ T51] loopback_net_init+0x6c/0x124 [ 124.295383][ T51] ops_init+0x8c/0x46c [ 124.295609][ T51] setup_net+0x638/0xbec [ 124.295846][ T51] copy_net_ns+0x1fc/0x560 [ 124.296085][ T51] create_new_namespaces+0x300/0x840 [ 124.296354][ T51] unshare_nsproxy_namespaces+0x7c/0x174 [ 124.296605][ T51] ksys_unshare+0x284/0x580 [ 124.296858][ T51] __arm64_sys_unshare+0x30/0x50 [ 124.297100][ T51] invoke_syscall+0x6c/0x260 [ 124.399380][ T2900] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 124.413490][ T2900] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 134.552100][ T51] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 134.552611][ T51] leaked reference. [ 134.552829][ T51] ipv6_add_dev+0x300/0xeec [ 134.553102][ T51] addrconf_notify+0x3ac/0x1080 [ 134.553340][ T51] notifier_call_chain+0xc0/0x180 [ 134.553591][ T51] raw_notifier_call_chain+0x18/0x24 [ 134.553834][ T51] call_netdevice_notifiers_info+0x80/0xe0 [ 134.554098][ T51] register_netdevice+0xa7c/0x1094 [ 134.554342][ T51] register_netdev+0x24/0x4c [ 134.554573][ T51] loopback_net_init+0x6c/0x124 [ 134.554817][ T51] ops_init+0x8c/0x46c [ 134.555076][ T51] setup_net+0x638/0xbec [ 134.555344][ T51] copy_net_ns+0x1fc/0x560 [ 134.555589][ T51] create_new_namespaces+0x300/0x840 [ 134.555862][ T51] unshare_nsproxy_namespaces+0x7c/0x174 [ 134.556114][ T51] ksys_unshare+0x284/0x580 [ 134.556372][ T51] __arm64_sys_unshare+0x30/0x50 [ 134.556618][ T51] invoke_syscall+0x6c/0x260 VM DIAGNOSIS: 10:14:13 Registers: info registers vcpu 0 PC=ffff8000097e3880 X00=0000000000000002 X01=ffff000009ef8080 X02=0000000000000000 X03=0000000000000002 X04=dfff800000000000 X05=0000000000000030 X06=0000000000000001 X07=0000000000000004 X08=ffff8000113e7173 X09=dfff800000000000 X10=ffff70000227ce2e X11=1ffff0000227ce2e X12=ffff70000227ce2f X13=0000000000000000 X14=1ffff0000227ce04 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=ffff00006a936c00 X19=0000000000000f01 X20=ffff800010f5d030 X21=ffff80000e971bc0 X22=1fffe000013df058 X23=00000000000000c0 X24=0000000000000001 X25=0000000000000f01 X26=ffff000009ef8080 X27=1ffff0000227cea2 X28=000000000000003a X29=ffff8000113e7190 X30=ffff8000097e9c08 SP=ffff8000113e7190 PSTATE=800000c5 N--- EL1h FPCR=00000000 FPSR=00000010 Q00=0000000000000000:0000000000000000 Q01=0000000000000000:00000000447a0000 Q02=6274736f68746567:000000000064252e Q03=0000000000000000:ff00000000000000 Q04=0000000000000000:ffffffffff000000 Q05=0010000040000001:4000000000000000 Q06=0000000000000000:4010040140000400 Q07=4010040140100401:4010040140100401 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000554410414000:0000554410414000 Q17=a0000000a00a0000:a000aa00aa00aa00 Q18=8020000000000000:8020080200000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 PC=ffff8000082a0abc X00=0000000000000000 X01=fffffc0000188ec0 X02=ffff0000113b9b08 X03=1fffe00002277361 X04=1fffe00002277361 X05=1ffff00001c45f77 X06=0000000000000001 X07=0000807ffffcee28 X08=fffffc0000188ec7 X09=ffff80000e22c000 X10=00000000f3000000 X11=dfff800000000000 X12=000000000000f1f1 X13=0000000000000000 X14=1ffff000022baeea X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=ffff80000e1e4000 X20=fffffc0000188ec0 X21=ffff80000ce91480 X22=dfff800000000000 X23=ffff7f80000311df X24=fffffc0000188ef8 X25=0000000000000000 X26=0000000000000000 X27=ffff000016108b70 X28=ffff80000e22cb70 X29=ffff8000115d7710 X30=ffff8000083084f4 SP=ffff8000115d7750 PSTATE=100000c5 ---V EL1h FPCR=00000000 FPSR=00000000 Q00=7171717171717171:7171717171717171 Q01=0000000000480b00:6244726c61737176 Q02=00000000004811f4:0000ffffc945dc80 Q03=8020080280000002:0000000000000000 Q04=8020080280000000:8020000000000000 Q05=0000000000000000:0000000000000400 Q06=0000000000000000:0000000000000000 Q07=8020080280200802:8020080280200802 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=4010040140100401:4010040140100401 Q17=a00a8000a0000000:aa80a000aa820004 Q18=8020080280000000:8020000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000