syzkaller login: [ 76.263231][ T2909] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 78.086345][ T2909] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 80.193833][ T2909] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:24492' (ECDSA) to the list of known hosts. 1970/01/01 00:01:56 fuzzer started 1970/01/01 00:01:59 connecting to host at localhost:38321 1970/01/01 00:01:59 checking machine... 1970/01/01 00:01:59 checking revisions... 1970/01/01 00:02:01 testing simple program... [ 121.919504][ T3069] cgroup: Unknown subsys name 'net' [ 122.359179][ T3069] cgroup: Unknown subsys name 'rlimit' executing program executing program [ 127.207768][ T3072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.243362][ T3072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program [ 129.247522][ T3072] device hsr_slave_0 entered promiscuous mode [ 129.308230][ T3072] device hsr_slave_1 entered promiscuous mode [ 130.703546][ T3072] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 130.796925][ T3072] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 130.869343][ T3072] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 130.954066][ T3072] netdevsim netdevsim0 netdevsim3: renamed from eth3 executing program [ 132.525302][ T3072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.629388][ T3383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.649277][ T3383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.510646][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.518297][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.560533][ T3383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.568080][ T3383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.618555][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.661884][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.759810][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.765354][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.828084][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.839684][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.873771][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.653742][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.655219][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready executing program [ 136.663204][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.666693][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.925681][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.942750][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.982400][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.988277][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.004842][ T3072] device veth0_vlan entered promiscuous mode executing program [ 138.093728][ T3072] device veth1_vlan entered promiscuous mode [ 138.305027][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.310353][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.376178][ T3072] device veth0_macvtap entered promiscuous mode [ 138.428417][ T3072] device veth1_macvtap entered promiscuous mode [ 138.534954][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.538958][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.552868][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.557204][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.607782][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.615650][ T1720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.659006][ T3072] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.659946][ T3072] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.660398][ T3072] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.667393][ T3072] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:02:19 building call list... [ 140.917522][ T148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 141.146078][ T148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.333912][ T148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.539173][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 144.243965][ T148] device hsr_slave_0 left promiscuous mode [ 144.324017][ T148] device hsr_slave_1 left promiscuous mode [ 144.566031][ T148] device veth1_macvtap left promiscuous mode [ 144.567435][ T148] device veth0_macvtap left promiscuous mode [ 144.569481][ T148] device veth1_vlan left promiscuous mode [ 144.576705][ T148] device veth0_vlan left promiscuous mode executing program [ 147.538957][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.690610][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.328618][ T148] bond0 (unregistering): Released all slaves executing program executing program executing program executing program [ 160.202330][ T148] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 160.203274][ T148] leaked reference. [ 160.203999][ T148] ipv6_add_dev+0x300/0xeec [ 160.204820][ T148] addrconf_notify+0x3ac/0x1080 [ 160.205585][ T148] notifier_call_chain+0xc0/0x180 [ 160.206080][ T148] raw_notifier_call_chain+0x18/0x24 [ 160.206370][ T148] call_netdevice_notifiers_info+0x80/0xe0 [ 160.206837][ T148] register_netdevice+0xa7c/0x1094 [ 160.207284][ T148] register_netdev+0x24/0x4c [ 160.207531][ T148] loopback_net_init+0x6c/0x124 [ 160.207833][ T148] ops_init+0x8c/0x46c [ 160.208071][ T148] setup_net+0x638/0xbec [ 160.208463][ T148] copy_net_ns+0x1fc/0x560 [ 160.208718][ T148] create_new_namespaces+0x300/0x840 [ 160.209046][ T148] unshare_nsproxy_namespaces+0x7c/0x174 [ 160.209504][ T148] ksys_unshare+0x284/0x580 [ 160.209812][ T148] __arm64_sys_unshare+0x30/0x50 [ 160.210234][ T148] invoke_syscall+0x6c/0x260 [ 161.357802][ T3066] can: request_module (can-proto-0) failed. [ 161.590729][ T3066] can: request_module (can-proto-0) failed. [ 161.743079][ T3066] can: request_module (can-proto-0) failed. executing program executing program executing program [ 170.362039][ T148] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 170.362572][ T148] leaked reference. [ 170.362805][ T148] ipv6_add_dev+0x300/0xeec [ 170.363110][ T148] addrconf_notify+0x3ac/0x1080 [ 170.363347][ T148] notifier_call_chain+0xc0/0x180 [ 170.363675][ T148] raw_notifier_call_chain+0x18/0x24 [ 170.363932][ T148] call_netdevice_notifiers_info+0x80/0xe0 [ 170.364436][ T148] register_netdevice+0xa7c/0x1094 [ 170.364816][ T148] register_netdev+0x24/0x4c [ 170.365081][ T148] loopback_net_init+0x6c/0x124 [ 170.365391][ T148] ops_init+0x8c/0x46c [ 170.365666][ T148] setup_net+0x638/0xbec [ 170.365905][ T148] copy_net_ns+0x1fc/0x560 [ 170.366150][ T148] create_new_namespaces+0x300/0x840 [ 170.366404][ T148] unshare_nsproxy_namespaces+0x7c/0x174 [ 170.366675][ T148] ksys_unshare+0x284/0x580 [ 170.366946][ T148] __arm64_sys_unshare+0x30/0x50 [ 170.367200][ T148] invoke_syscall+0x6c/0x260 [ 170.805868][ T2909] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 170.809105][ T2909] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 170.815955][ T2909] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. executing program [ 172.853514][ T2909] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. executing program [ 180.512636][ T148] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 180.513430][ T148] leaked reference. [ 180.513797][ T148] ipv6_add_dev+0x300/0xeec [ 180.514237][ T148] addrconf_notify+0x3ac/0x1080 [ 180.514627][ T148] notifier_call_chain+0xc0/0x180 [ 180.515064][ T148] raw_notifier_call_chain+0x18/0x24 [ 180.515466][ T148] call_netdevice_notifiers_info+0x80/0xe0 [ 180.515895][ T148] register_netdevice+0xa7c/0x1094 [ 180.516323][ T148] register_netdev+0x24/0x4c [ 180.516715][ T148] loopback_net_init+0x6c/0x124 [ 180.517110][ T148] ops_init+0x8c/0x46c [ 180.517484][ T148] setup_net+0x638/0xbec [ 180.517873][ T148] copy_net_ns+0x1fc/0x560 [ 180.518260][ T148] create_new_namespaces+0x300/0x840 [ 180.518671][ T148] unshare_nsproxy_namespaces+0x7c/0x174 [ 180.519094][ T148] ksys_unshare+0x284/0x580 [ 180.519456][ T148] __arm64_sys_unshare+0x30/0x50 [ 180.519835][ T148] invoke_syscall+0x6c/0x260 VM DIAGNOSIS: 09:59:53 Registers: info registers vcpu 0 PC=ffff80000b611ab8 X00=ffff80000b611ab0 X01=0000000000000000 X02=ffff00000abda4c8 X03=1ffff00001c45f71 X04=1fffe0000157b361 X05=ffff80001b3d7b90 X06=0000000000000001 X07=0000000000000004 X08=ffff80001b3d7b93 X09=dfff800000000000 X10=ffff70000367af72 X11=1ffff0000367af72 X12=ffff70000367af73 X13=1fffe0000157b49e X14=1ffff0000367af48 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=ffff80000e445ab0 X20=0000000000000000 X21=0000000000000003 X22=0000000000000028 X23=ffff80000e445b40 X24=dfff800000000000 X25=ffff80000e445a80 X26=0000000000000004 X27=ffff80000e445ab0 X28=ffff00000abda4d0 X29=ffff80001b3d7b10 X30=ffff8000083a3538 SP=ffff80001b3d7b10 PSTATE=600000c5 -ZC- EL1h FPCR=00000000 FPSR=00000010 Q00=0000000000000000:0000000000000004 Q01=0000000000000000:414fffffe0000000 Q02=4724fb7f6b60f742:0d53c530fdaf0771 Q03=0000000040000000:0000000000000000 Q04=4010040140100401:4000000000000000 Q05=4010040140100401:4010040140100401 Q06=5555400000400000:5555400000400000 Q07=0000000000000000:0000000000000000 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000010:0000001ad3680a50 Q31=0000000000000000:0000000000000000 info registers vcpu 1 PC=ffff80000cb50e24 X00=ffff00000d86c0c0 X01=0000000000000004 X02=ffff80000e1d5008 X03=1fffe00001b0d6c1 X04=1fffe0000d52a601 X05=0000000000000000 X06=ffff8000082d27c0 X07=ffff80000e1d799c X08=ffff00000d86c0e0 X09=00000000000000f0 X10=ffff00000d86bfb4 X11=0000000000000007 X12=1fffe00001b0d7f6 X13=1fffe00001b0d81c X14=1ffff000022d4e16 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=ffff80000e910fc0 X20=0000000000000004 X21=ffff80000ce91440 X22=0000000000000001 X23=0000000000000001 X24=ffff80000e1d7c88 X25=ffff80000cbf28e0 X26=00000000ffffffff X27=00000000000000c0 X28=ffff00000d86b600 X29=ffff8000116a7020 X30=ffff8000082b16dc SP=ffff8000116a6e70 PSTATE=800000c5 N--- EL1h FPCR=00000000 FPSR=00000010 Q00=3dd75bbcd2960eb9:2124672cfdf809ee Q01=696272615f616776:2474616e65706f73 Q02=4724fb7f6b60f742:0d53c530fdaf0771 Q03=0000000100100000:0000040000000000 Q04=0000000000000000:4000000000000000 Q05=4010040140100401:4010040140100401 Q06=0000400001100400:0000400001100400 Q07=0000000000000000:3feaaaaaaaaaaaab Q08=0000000000000000:3fcb04b37b8eb0bc Q09=0000000000000000:3fe23c9464a84c98 Q10=0000000000000000:3fe0000000000000 Q11=0000000000000000:d8b60641be0ac341 Q12=0000000000000000:91f95046b437df33 Q13=0000000000000000:6f76b0ffb78d361a Q14=0000000000000000:92fe0dd978251b70 Q15=0000000000000000:28bb36f8d1628b38 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:000000004caa11fa Q31=0000000000000000:0000000000000000