syzkaller login: [ 94.387092][ T2902] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 94.400536][ T2902] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 99.927884][ T2902] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:30937' (ECDSA) to the list of known hosts. 1970/01/01 00:02:20 fuzzer started 1970/01/01 00:02:23 connecting to host at localhost:46813 1970/01/01 00:02:24 checking machine... 1970/01/01 00:02:24 checking revisions... 1970/01/01 00:02:25 testing simple program... [ 146.441498][ T3062] cgroup: Unknown subsys name 'net' [ 146.953090][ T3062] cgroup: Unknown subsys name 'rlimit' executing program executing program [ 152.560846][ T3065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.592877][ T3065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program [ 155.215018][ T3065] device hsr_slave_0 entered promiscuous mode [ 155.286733][ T3065] device hsr_slave_1 entered promiscuous mode executing program [ 157.204079][ T3065] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 157.293644][ T3065] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 157.455431][ T3065] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 157.583991][ T3065] netdevsim netdevsim0 netdevsim3: renamed from eth3 executing program [ 160.437208][ T3065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.533459][ T3376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.552411][ T3376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.709072][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.717029][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.762150][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.769021][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.823765][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.887587][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.033307][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.038824][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.093490][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.097791][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.141210][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program [ 162.997432][ T1717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.999018][ T1717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready executing program [ 165.376018][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.392808][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.448807][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.456531][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.467470][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.475967][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.515467][ T3065] device veth0_vlan entered promiscuous mode [ 166.607112][ T3065] device veth1_vlan entered promiscuous mode [ 166.836880][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.844890][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.915019][ T3065] device veth0_macvtap entered promiscuous mode [ 166.974835][ T3065] device veth1_macvtap entered promiscuous mode [ 167.144573][ T3376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.155568][ T3376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.168078][ T3376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.181338][ T3376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.242691][ T3376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.248158][ T3376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.301635][ T3065] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.303120][ T3065] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.303708][ T3065] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.304356][ T3065] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program 1970/01/01 00:02:48 building call list... [ 169.592266][ T29] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.890397][ T29] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.225032][ T29] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.534156][ T29] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 173.520917][ T29] device hsr_slave_0 left promiscuous mode [ 173.563004][ T29] device hsr_slave_1 left promiscuous mode [ 173.838675][ T29] device veth1_macvtap left promiscuous mode [ 173.845932][ T29] device veth0_macvtap left promiscuous mode [ 173.855056][ T29] device veth1_vlan left promiscuous mode [ 173.858726][ T29] device veth0_vlan left promiscuous mode executing program [ 177.286532][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.477251][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface executing program [ 178.176902][ T29] bond0 (unregistering): Released all slaves executing program executing program executing program executing program [ 189.730660][ T29] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 189.731904][ T29] leaked reference. [ 189.732761][ T29] ipv6_add_dev+0x300/0xeec [ 189.733738][ T29] addrconf_notify+0x3ac/0x1080 [ 189.734633][ T29] notifier_call_chain+0xc0/0x180 [ 189.735436][ T29] raw_notifier_call_chain+0x18/0x24 [ 189.735816][ T29] call_netdevice_notifiers_info+0x80/0xe0 [ 189.736201][ T29] register_netdevice+0xa7c/0x1094 [ 189.736589][ T29] register_netdev+0x24/0x4c [ 189.736948][ T29] loopback_net_init+0x6c/0x124 [ 189.737360][ T29] ops_init+0x8c/0x46c [ 189.737724][ T29] setup_net+0x638/0xbec [ 189.738068][ T29] copy_net_ns+0x1fc/0x560 [ 189.738409][ T29] create_new_namespaces+0x300/0x840 [ 189.738775][ T29] unshare_nsproxy_namespaces+0x7c/0x174 [ 189.739212][ T29] ksys_unshare+0x284/0x580 [ 189.739685][ T29] __arm64_sys_unshare+0x30/0x50 [ 189.740154][ T29] invoke_syscall+0x6c/0x260 executing program [ 193.248691][ T3056] can: request_module (can-proto-0) failed. [ 193.563405][ T3056] can: request_module (can-proto-0) failed. [ 193.774838][ T3056] can: request_module (can-proto-0) failed. executing program executing program [ 199.837553][ T29] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 199.838374][ T29] leaked reference. [ 199.838739][ T29] ipv6_add_dev+0x300/0xeec [ 199.839273][ T29] addrconf_notify+0x3ac/0x1080 [ 199.839785][ T29] notifier_call_chain+0xc0/0x180 [ 199.840212][ T29] raw_notifier_call_chain+0x18/0x24 [ 199.840624][ T29] call_netdevice_notifiers_info+0x80/0xe0 [ 199.841056][ T29] register_netdevice+0xa7c/0x1094 [ 199.841533][ T29] register_netdev+0x24/0x4c [ 199.841922][ T29] loopback_net_init+0x6c/0x124 [ 199.842325][ T29] ops_init+0x8c/0x46c [ 199.842728][ T29] setup_net+0x638/0xbec [ 199.843104][ T29] copy_net_ns+0x1fc/0x560 [ 199.843484][ T29] create_new_namespaces+0x300/0x840 [ 199.843887][ T29] unshare_nsproxy_namespaces+0x7c/0x174 [ 199.844314][ T29] ksys_unshare+0x284/0x580 [ 199.844717][ T29] __arm64_sys_unshare+0x30/0x50 [ 199.845166][ T29] invoke_syscall+0x6c/0x260 executing program executing program [ 206.237593][ T2902] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 206.264009][ T2902] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 206.268547][ T2902] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 206.280630][ T2902] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. executing program [ 210.110841][ T29] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 210.111545][ T29] leaked reference. [ 210.111830][ T29] ipv6_add_dev+0x300/0xeec [ 210.112190][ T29] addrconf_notify+0x3ac/0x1080 [ 210.112574][ T29] notifier_call_chain+0xc0/0x180 [ 210.112927][ T29] raw_notifier_call_chain+0x18/0x24 [ 210.113248][ T29] call_netdevice_notifiers_info+0x80/0xe0 [ 210.113608][ T29] register_netdevice+0xa7c/0x1094 [ 210.113951][ T29] register_netdev+0x24/0x4c [ 210.114244][ T29] loopback_net_init+0x6c/0x124 [ 210.114551][ T29] ops_init+0x8c/0x46c [ 210.114834][ T29] setup_net+0x638/0xbec [ 210.115124][ T29] copy_net_ns+0x1fc/0x560 [ 210.115463][ T29] create_new_namespaces+0x300/0x840 [ 210.115775][ T29] unshare_nsproxy_namespaces+0x7c/0x174 [ 210.116116][ T29] ksys_unshare+0x284/0x580 [ 210.116408][ T29] __arm64_sys_unshare+0x30/0x50 [ 210.116732][ T29] invoke_syscall+0x6c/0x260 VM DIAGNOSIS: 12:13:37 Registers: info registers vcpu 0 PC=ffff8000097cb710 X00=0000000000000002 X01=0000000000000002 X02=ffff000009eac172 X03=dfff800000000000 X04=1fffe000013d582e X05=ffff800011227170 X06=0000000000000001 X07=0000000000000004 X08=ffff800011227173 X09=dfff800000000000 X10=ffff700002244e2e X11=1ffff00002244e2e X12=ffff700002244e2f X13=0000000000000000 X14=1ffff00002244e04 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=ffff00006a93ac00 X19=ffff000009eac080 X20=ffff800010f3d030 X21=ffff80000e951280 X22=1fffe000013d5858 X23=00000000000000c0 X24=0000000000000001 X25=0000000000000000 X26=ffff000009eac080 X27=1ffff00002244ea2 X28=0000000000000035 X29=ffff800011227190 X30=ffff8000097d2c9c SP=ffff800011227190 PSTATE=800000c5 N--- EL1h FPCR=00000000 FPSR=00000010 Q00=0000000000000000:0000000000000004 Q01=0000000000000000:414fffffe0000000 Q02=ce9596217bfc9f28:dc7f0deaee8eef00 Q03=0000000040000000:0000000000000000 Q04=4010040140100401:4000000000000000 Q05=4010040140100401:4010040140100401 Q06=5555400000400000:5555400000400000 Q07=0000000000000000:0000000000000000 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000010:000000204992ef20 Q31=0000000000000000:0000000000000000 info registers vcpu 1 PC=ffff8000082aa778 X00=ffff80001a6076d0 X01=dfff800000000000 X02=0000000000000003 X03=1fffe0000d52b391 X04=00000000f204f1f1 X05=ffff7000034c0e96 X06=dfff800000000000 X07=00000000f1f1f1f1 X08=ffff80001a6076e3 X09=dfff800000000000 X10=0000000000000000 X11=0000000000000004 X12=0000000000000000 X13=0000007fffffffff X14=a3a9a3ffb3bfa2a0 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=ffff00000f3cbda0 X20=ffff00000f3ed780 X21=ffff00000f3cbd68 X22=0000000000000003 X23=0000000000000004 X24=dfff800000000000 X25=2f2f2f2f2f2f2f2f X26=fefefefefefefeff X27=d0d0d0d0d0d0d0d0 X28=ffff80001a607a90 X29=ffff80001a607640 X30=ffff8000088e72c8 SP=ffff80001a607640 PSTATE=400000c5 -Z-- EL1h FPCR=00000000 FPSR=00000000 Q00=2525252525252525:2525252525252525 Q01=252f7325006c6c61:00736d5f656d6974 Q02=63615000676e6964:726177726f662f73 Q03=00000000ff000000:ff00000000000000 Q04=000000ff00000000:0000000000000000 Q05=4000000140000000:4000000000000000 Q06=0000000100000000:0000000000000000 Q07=4010040140100401:4010040140100401 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0100000041404000:0100000041404000 Q17=a00aa008a008a00a:aaa8a8aaa8a82aa0 Q18=8020080280200800:8020080080200802 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000