syzkaller login: [ 116.714986][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 116.728501][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 116.758468][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 116.786955][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:15233' (ECDSA) to the list of known hosts. 1970/01/01 00:02:32 fuzzer started 1970/01/01 00:02:36 connecting to host at localhost:42561 1970/01/01 00:02:37 checking machine... 1970/01/01 00:02:37 checking revisions... 1970/01/01 00:02:39 testing simple program... [ 160.394807][ T3071] cgroup: Unknown subsys name 'net' executing program [ 160.975004][ T3071] cgroup: Unknown subsys name 'rlimit' executing program executing program [ 168.767527][ T3074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.794492][ T3074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program [ 172.217574][ T3074] device hsr_slave_0 entered promiscuous mode [ 172.265360][ T3074] device hsr_slave_1 entered promiscuous mode executing program [ 174.389371][ T3074] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 174.486582][ T3074] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 174.559042][ T3074] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.637816][ T3074] netdevsim netdevsim0 netdevsim3: renamed from eth3 executing program [ 176.862584][ T3074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.961629][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.978635][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.476074][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.483284][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.527050][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.536255][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready executing program [ 178.588906][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.655217][ T3337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.771592][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.778589][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.899788][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.906622][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.956243][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.197236][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.198731][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready executing program [ 183.227316][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.235011][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready executing program [ 184.836026][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.845608][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.883214][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.907738][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.916933][ T3074] device veth0_vlan entered promiscuous mode [ 185.035830][ T3074] device veth1_vlan entered promiscuous mode [ 185.306539][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.315501][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.378023][ T3074] device veth0_macvtap entered promiscuous mode [ 185.438245][ T3074] device veth1_macvtap entered promiscuous mode [ 185.628999][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.636509][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.652912][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.671851][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.771688][ T3337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.779630][ T3337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.837916][ T3074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.839543][ T3074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.842409][ T3074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.842824][ T3074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program 1970/01/01 00:03:07 building call list... [ 188.218643][ T54] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.523936][ T54] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.765534][ T54] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.036528][ T54] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 192.427340][ T54] device hsr_slave_0 left promiscuous mode [ 192.496645][ T54] device hsr_slave_1 left promiscuous mode [ 192.728141][ T54] device veth1_macvtap left promiscuous mode [ 192.747881][ T54] device veth0_macvtap left promiscuous mode [ 192.752501][ T54] device veth1_vlan left promiscuous mode [ 192.754713][ T54] device veth0_vlan left promiscuous mode executing program [ 196.458501][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.602278][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface executing program [ 197.427374][ T54] bond0 (unregistering): Released all slaves executing program executing program executing program executing program [ 209.122595][ T54] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 209.123797][ T54] leaked reference. [ 209.124922][ T54] ipv6_add_dev+0x300/0xeec [ 209.125918][ T54] addrconf_notify+0x3ac/0x1080 [ 209.126610][ T54] notifier_call_chain+0xc0/0x180 [ 209.126948][ T54] raw_notifier_call_chain+0x18/0x24 [ 209.127267][ T54] call_netdevice_notifiers_info+0x80/0xe0 [ 209.127622][ T54] register_netdevice+0xa7c/0x1094 [ 209.127946][ T54] register_netdev+0x24/0x4c [ 209.128264][ T54] loopback_net_init+0x6c/0x124 [ 209.128599][ T54] ops_init+0x8c/0x46c [ 209.128897][ T54] setup_net+0x638/0xbec [ 209.129195][ T54] copy_net_ns+0x1fc/0x560 [ 209.130298][ T54] create_new_namespaces+0x300/0x840 [ 209.131589][ T54] unshare_nsproxy_namespaces+0x7c/0x174 [ 209.133473][ T54] ksys_unshare+0x284/0x580 [ 209.135013][ T54] __arm64_sys_unshare+0x30/0x50 [ 209.136021][ T54] invoke_syscall+0x6c/0x260 executing program [ 212.032203][ T3068] can: request_module (can-proto-0) failed. [ 212.403923][ T3068] can: request_module (can-proto-0) failed. [ 212.702366][ T3068] can: request_module (can-proto-0) failed. executing program executing program [ 219.331724][ T54] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 219.332622][ T54] leaked reference. [ 219.333035][ T54] ipv6_add_dev+0x300/0xeec [ 219.333565][ T54] addrconf_notify+0x3ac/0x1080 [ 219.333998][ T54] notifier_call_chain+0xc0/0x180 [ 219.334462][ T54] raw_notifier_call_chain+0x18/0x24 [ 219.334940][ T54] call_netdevice_notifiers_info+0x80/0xe0 [ 219.335436][ T54] register_netdevice+0xa7c/0x1094 [ 219.335818][ T54] register_netdev+0x24/0x4c [ 219.336498][ T54] loopback_net_init+0x6c/0x124 [ 219.336916][ T54] ops_init+0x8c/0x46c [ 219.337214][ T54] setup_net+0x638/0xbec [ 219.337516][ T54] copy_net_ns+0x1fc/0x560 [ 219.337830][ T54] create_new_namespaces+0x300/0x840 [ 219.338153][ T54] unshare_nsproxy_namespaces+0x7c/0x174 [ 219.338587][ T54] ksys_unshare+0x284/0x580 [ 219.338920][ T54] __arm64_sys_unshare+0x30/0x50 [ 219.339251][ T54] invoke_syscall+0x6c/0x260 executing program executing program executing program [ 229.403785][ T54] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 229.404677][ T54] leaked reference. [ 229.405055][ T54] ipv6_add_dev+0x300/0xeec [ 229.405510][ T54] addrconf_notify+0x3ac/0x1080 [ 229.405936][ T54] notifier_call_chain+0xc0/0x180 [ 229.407415][ T54] raw_notifier_call_chain+0x18/0x24 [ 229.408774][ T54] call_netdevice_notifiers_info+0x80/0xe0 [ 229.410426][ T54] register_netdevice+0xa7c/0x1094 [ 229.412073][ T54] register_netdev+0x24/0x4c [ 229.413584][ T54] loopback_net_init+0x6c/0x124 [ 229.414079][ T54] ops_init+0x8c/0x46c [ 229.414468][ T54] setup_net+0x638/0xbec [ 229.414843][ T54] copy_net_ns+0x1fc/0x560 [ 229.415228][ T54] create_new_namespaces+0x300/0x840 [ 229.415620][ T54] unshare_nsproxy_namespaces+0x7c/0x174 [ 229.415992][ T54] ksys_unshare+0x284/0x580 [ 229.416353][ T54] __arm64_sys_unshare+0x30/0x50 [ 229.416706][ T54] invoke_syscall+0x6c/0x260 executing program [ 231.491584][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 231.512758][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 231.527883][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 231.541734][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. executing program VM DIAGNOSIS: 19:45:54 Registers: info registers vcpu 0 PC=ffff80000b5fc0d8 X00=ffff80000b5fc0d0 X01=0000000000000000 X02=ffff00000f0f89c8 X03=1ffff00001c43f6f X04=1fffe00001e1f001 X05=ffff8000114e7b90 X06=0000000000000001 X07=0000000000000004 X08=ffff8000114e7b93 X09=dfff800000000000 X10=ffff70000229cf72 X11=1ffff0000229cf72 X12=ffff70000229cf73 X13=1fffe00001e1f13e X14=1ffff0000229cf48 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=ffff80000e434a70 X20=0000000000000000 X21=0000000000000003 X22=0000000000000028 X23=ffff80000e434b00 X24=dfff800000000000 X25=ffff80000e434a40 X26=0000000000000004 X27=ffff80000e434a70 X28=ffff00000f0f89d0 X29=ffff8000114e7b10 X30=ffff8000083a3458 SP=ffff8000114e7b10 PSTATE=600000c5 -ZC- EL1h FPCR=00000000 FPSR=00000010 Q00=0000000000000000:0000000000000004 Q01=0000000000000000:414fffffe0000000 Q02=0cb36453261503c3:37f2d1d73fd59dc4 Q03=0000000040000000:0000000000000000 Q04=4010040140100401:4000000000000000 Q05=4010040140100401:4010040140100401 Q06=5555400000400000:5555400000400000 Q07=0000000000000000:0000000000000000 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000010:00000022f253c680 Q31=0000000000000000:0000000000000000 info registers vcpu 1 PC=ffff8000097cceec X00=0000000000000002 X01=ffff000009eac080 X02=0000000000000000 X03=0000000000000002 X04=dfff800000000000 X05=0000000000000000 X06=0000000000000001 X07=0000000000000004 X08=ffff800011407173 X09=dfff800000000000 X10=ffff700002280e2e X11=1ffff00002280e2e X12=ffff700002280e2f X13=0000000000000000 X14=1ffff00002280e04 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=ffff00006a959c00 X19=0000000000000054 X20=ffff800010f3d000 X21=ffff80000e951240 X22=ffff000009eac080 X23=dfff800000000000 X24=ffff800010c007d5 X25=0000000000000002 X26=ffff000009eac080 X27=dfff800000000000 X28=0000000000000035 X29=ffff800011407120 X30=ffff8000097ccf00 SP=ffff800011407120 PSTATE=800000c5 N--- EL1h FPCR=00000000 FPSR=00000000 Q00=2f2f2f2f2f2f2f2f:2f2f2f2f2f2f2f2f Q01=722d656b6f766e69:0000000011e737b0 Q02=0000000000000000:0000000000642e63 Q03=0000000000000000:8020080200000000 Q04=8020080280200802:8020080280000000 Q05=0000000000000000:0000000000000000 Q06=0000000000000000:0000000000000000 Q07=8020080280200802:8020080280200802 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=4010040140100401:4010040140100401 Q17=a00aa00aa00a8000:aaaaaa800000aa00 Q18=8020080280200802:8020080280000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000