syzkaller login: [ 128.385210][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 128.394177][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 128.407009][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 128.425579][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:13500' (ECDSA) to the list of known hosts. 1970/01/01 00:03:04 fuzzer started 1970/01/01 00:03:08 connecting to host at localhost:44339 1970/01/01 00:03:08 checking machine... 1970/01/01 00:03:08 checking revisions... 1970/01/01 00:03:11 testing simple program... executing program [ 192.207355][ T3070] cgroup: Unknown subsys name 'net' [ 192.800078][ T3070] cgroup: Unknown subsys name 'rlimit' executing program executing program [ 200.142055][ T3074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.185853][ T3074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program [ 203.843571][ T3074] device hsr_slave_0 entered promiscuous mode [ 203.990445][ T3074] device hsr_slave_1 entered promiscuous mode executing program [ 206.339665][ T3074] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.463596][ T3074] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.632493][ T3074] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.694298][ T3074] netdevsim netdevsim0 netdevsim3: renamed from eth3 executing program [ 209.355624][ T3074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.445295][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.464958][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready executing program [ 211.079229][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.087078][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.207122][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.215081][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.314658][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.388929][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.574302][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.589697][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.664510][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.691732][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.766002][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program [ 213.144193][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.147074][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready executing program [ 216.681036][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.686311][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.429270][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.436650][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.451884][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.461547][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.593643][ T3074] device veth0_vlan entered promiscuous mode [ 218.723764][ T3074] device veth1_vlan entered promiscuous mode [ 218.976559][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.985020][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready executing program [ 219.055420][ T3074] device veth0_macvtap entered promiscuous mode [ 219.106683][ T3074] device veth1_macvtap entered promiscuous mode [ 219.277231][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.287224][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.300518][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.309961][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.418249][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.424508][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.500875][ T3074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.503990][ T3074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.506068][ T3074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.510313][ T3074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:03:40 building call list... executing program [ 222.205798][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.473570][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.742117][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.985371][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 226.223169][ T51] device hsr_slave_0 left promiscuous mode [ 226.291120][ T51] device hsr_slave_1 left promiscuous mode [ 226.556524][ T51] device veth1_macvtap left promiscuous mode [ 226.559971][ T51] device veth0_macvtap left promiscuous mode [ 226.563194][ T51] device veth1_vlan left promiscuous mode [ 226.565309][ T51] device veth0_vlan left promiscuous mode executing program [ 230.290568][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.511513][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.596226][ T51] bond0 (unregistering): Released all slaves executing program executing program executing program executing program [ 243.670045][ T51] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 243.671617][ T51] leaked reference. [ 243.673035][ T51] ipv6_add_dev+0x300/0xeec [ 243.674473][ T51] addrconf_notify+0x3ac/0x1080 [ 243.676503][ T51] notifier_call_chain+0xc0/0x180 [ 243.678359][ T51] raw_notifier_call_chain+0x18/0x24 [ 243.679919][ T51] call_netdevice_notifiers_info+0x80/0xe0 [ 243.680520][ T51] register_netdevice+0xa7c/0x1094 [ 243.680915][ T51] register_netdev+0x24/0x4c [ 243.681289][ T51] loopback_net_init+0x6c/0x124 [ 243.681697][ T51] ops_init+0x8c/0x46c [ 243.682110][ T51] setup_net+0x638/0xbec [ 243.682491][ T51] copy_net_ns+0x1fc/0x560 [ 243.682873][ T51] create_new_namespaces+0x300/0x840 [ 243.683455][ T51] unshare_nsproxy_namespaces+0x7c/0x174 [ 243.683899][ T51] ksys_unshare+0x284/0x580 [ 243.684485][ T51] __arm64_sys_unshare+0x30/0x50 [ 243.684928][ T51] invoke_syscall+0x6c/0x260 executing program [ 248.579753][ T3066] can: request_module (can-proto-0) failed. [ 248.923186][ T3066] can: request_module (can-proto-0) failed. executing program [ 249.120205][ T3066] can: request_module (can-proto-0) failed. executing program [ 253.769869][ T51] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 253.770722][ T51] leaked reference. [ 253.771108][ T51] ipv6_add_dev+0x300/0xeec [ 253.771593][ T51] addrconf_notify+0x3ac/0x1080 [ 253.772013][ T51] notifier_call_chain+0xc0/0x180 [ 253.772491][ T51] raw_notifier_call_chain+0x18/0x24 [ 253.772933][ T51] call_netdevice_notifiers_info+0x80/0xe0 [ 253.773394][ T51] register_netdevice+0xa7c/0x1094 [ 253.773825][ T51] register_netdev+0x24/0x4c [ 253.774279][ T51] loopback_net_init+0x6c/0x124 [ 253.774736][ T51] ops_init+0x8c/0x46c [ 253.775142][ T51] setup_net+0x638/0xbec [ 253.775667][ T51] copy_net_ns+0x1fc/0x560 [ 253.776051][ T51] create_new_namespaces+0x300/0x840 [ 253.776472][ T51] unshare_nsproxy_namespaces+0x7c/0x174 [ 253.776909][ T51] ksys_unshare+0x284/0x580 [ 253.777330][ T51] __arm64_sys_unshare+0x30/0x50 [ 253.777970][ T51] invoke_syscall+0x6c/0x260 executing program executing program executing program [ 262.334941][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 262.349240][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 262.362365][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 262.374488][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 264.000322][ T51] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 264.001223][ T51] leaked reference. [ 264.001656][ T51] ipv6_add_dev+0x300/0xeec [ 264.002190][ T51] addrconf_notify+0x3ac/0x1080 [ 264.002751][ T51] notifier_call_chain+0xc0/0x180 [ 264.003218][ T51] raw_notifier_call_chain+0x18/0x24 [ 264.003629][ T51] call_netdevice_notifiers_info+0x80/0xe0 [ 264.004056][ T51] register_netdevice+0xa7c/0x1094 [ 264.004576][ T51] register_netdev+0x24/0x4c [ 264.005013][ T51] loopback_net_init+0x6c/0x124 [ 264.005478][ T51] ops_init+0x8c/0x46c [ 264.005841][ T51] setup_net+0x638/0xbec [ 264.006227][ T51] copy_net_ns+0x1fc/0x560 [ 264.006736][ T51] create_new_namespaces+0x300/0x840 [ 264.008657][ T51] unshare_nsproxy_namespaces+0x7c/0x174 [ 264.010031][ T51] ksys_unshare+0x284/0x580 [ 264.011560][ T51] __arm64_sys_unshare+0x30/0x50 [ 264.012992][ T51] invoke_syscall+0x6c/0x260 executing program executing program VM DIAGNOSIS: 02:20:41 Registers: info registers vcpu 0 PC=ffff8000097cca9c X00=0000000000000002 X01=ffff000009e7e080 X02=0000000000000000 X03=0000000000000002 X04=dfff800000000000 X05=0000000000000000 X06=0000000000000001 X07=0000000000000004 X08=ffff8000113c7173 X09=dfff800000000000 X10=ffff700002278e2e X11=1ffff00002278e2e X12=ffff700002278e2f X13=0000000000000000 X14=1ffff00002278e04 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=ffff00006a93ac00 X19=0000000000000037 X20=ffff800010f3d000 X21=ffff80000e951280 X22=ffff000009e7e080 X23=dfff800000000000 X24=ffff800010c007d1 X25=0000000000000000 X26=ffff000009e7e080 X27=dfff800000000000 X28=0000000000000031 X29=ffff8000113c7120 X30=ffff8000097ccab0 SP=ffff8000113c7120 PSTATE=800000c5 N--- EL1h FPCR=00000000 FPSR=00000010 Q00=fa54ac4d48984dff:88eabce1fca9db96 Q01=65706f7469646572:635f6963685f666f Q02=501014dc0c69221c:04e6f55299203837 Q03=0000000000000000:0000000000000000 Q04=0000000040000000:0000000000000000 Q05=4010040140100401:4010040140100401 Q06=0040000000000000:0040000000000000 Q07=0000000000000000:3feaaaaaaaaaaaab Q08=0000000000000000:3fda12c0781bf122 Q09=0000000000000000:3fe1e8f7c28191e1 Q10=0000000000000000:3fe0000000000000 Q11=0000000000000000:ae19fb4b7634b092 Q12=0000000000000000:817ccc1458919d14 Q13=0000000000000000:5150f9031c523a8c Q14=0000000000000000:0200fc6a8d259781 Q15=0000000000000000:23f828ecf688ac5b Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000006:0000000021a181f4 Q31=0000000000000000:0000000000000000 info registers vcpu 1 PC=ffff8000088a1918 X00=fffffc000038d748 X01=ffff800010f30000 X02=ffff80001a4978e0 X03=0000000000000000 X04=1fffe00001f91a23 X05=1fffe00001f91cc0 X06=00000000f3f3f3f3 X07=1ffff00003492f1c X08=ffff80001a4978e2 X09=ffff700003492ea2 X10=00000000f3000000 X11=dfff800000000000 X12=000000000000f1f1 X13=1fffe00001f91b5e X14=1ffff00003492e18 X15=0000ffffc8b5ec60 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=ffff80000f90b6e0 X20=ffff80000e1c7c88 X21=ffff80000e21cb70 X22=0000000000000000 X23=ffff00000f8c1e48 X24=ffff80000e1c7c88 X25=ffff00000eb7f140 X26=ffff00000fc8dac8 X27=ffff00000fc8d100 X28=0000000000000144 X29=ffff80001a4973a0 X30=ffff800009137b24 SP=ffff80001a497470 PSTATE=60000005 -ZC- EL1h FPCR=00000000 FPSR=00000010 Q00=0000000000000000:0000000000000000 Q01=0000000000000000:00000000447a0000 Q02=732500657361656c:207325206120676e Q03=0000000000000000:00000000ff000000 Q04=0000ff0000000000:0000000000000000 Q05=0000000000000000:0000000140000001 Q06=0010040000000000:0000040000000000 Q07=4010040140100401:4010040140100401 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=1400040000000141:1400040000000141 Q17=0000400000000002:0040000200000000 Q18=0000000040000000:0000000000000002 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000