syzkaller login: [ 98.223766][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 98.261804][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 98.278669][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:27917' (ECDSA) to the list of known hosts. 1970/01/01 00:02:28 fuzzer started 1970/01/01 00:02:31 connecting to host at localhost:33221 1970/01/01 00:02:32 checking machine... 1970/01/01 00:02:32 checking revisions... 1970/01/01 00:02:34 testing simple program... [ 154.927913][ T3063] cgroup: Unknown subsys name 'net' executing program [ 155.384661][ T3063] cgroup: Unknown subsys name 'rlimit' executing program executing program [ 161.969808][ T3066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.020387][ T3066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program [ 164.862592][ T3066] device hsr_slave_0 entered promiscuous mode [ 164.942625][ T3066] device hsr_slave_1 entered promiscuous mode [ 166.738931][ T3066] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.813979][ T3066] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.903191][ T3066] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.988177][ T3066] netdevsim netdevsim0 netdevsim3: renamed from eth3 executing program [ 168.752596][ T3066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.870053][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.886938][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.192217][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.212693][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.253041][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.258528][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.299168][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready executing program [ 170.380261][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.493561][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.503238][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.573585][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.582561][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.639776][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.751430][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.753495][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready executing program [ 174.152213][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.173708][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.589958][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.609139][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.652295][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.659493][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.672953][ T3066] device veth0_vlan entered promiscuous mode [ 175.772401][ T3066] device veth1_vlan entered promiscuous mode [ 175.982143][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.994662][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.048214][ T3066] device veth0_macvtap entered promiscuous mode [ 176.094417][ T3066] device veth1_macvtap entered promiscuous mode [ 176.262574][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.269898][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.288743][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.294795][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready executing program [ 176.370543][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.378541][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.420295][ T3066] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.421317][ T3066] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.421753][ T3066] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.422141][ T3066] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:02:58 building call list... [ 178.821082][ T44] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.032898][ T44] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 179.317108][ T44] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.553281][ T44] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 182.853919][ T44] device hsr_slave_0 left promiscuous mode [ 182.920727][ T44] device hsr_slave_1 left promiscuous mode [ 183.133206][ T44] device veth1_macvtap left promiscuous mode [ 183.134797][ T44] device veth0_macvtap left promiscuous mode [ 183.143349][ T44] device veth1_vlan left promiscuous mode [ 183.160170][ T44] device veth0_vlan left promiscuous mode [ 186.441957][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface executing program [ 186.659679][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.328009][ T44] bond0 (unregistering): Released all slaves executing program executing program executing program executing program [ 199.099307][ T44] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 199.100720][ T44] leaked reference. [ 199.101845][ T44] ipv6_add_dev+0x300/0xeec [ 199.103010][ T44] addrconf_notify+0x3ac/0x1080 [ 199.103899][ T44] notifier_call_chain+0xc0/0x180 [ 199.104440][ T44] raw_notifier_call_chain+0x18/0x24 [ 199.104852][ T44] call_netdevice_notifiers_info+0x80/0xe0 [ 199.105553][ T44] register_netdevice+0xa7c/0x1094 [ 199.105988][ T44] register_netdev+0x24/0x4c [ 199.106549][ T44] loopback_net_init+0x6c/0x124 [ 199.107014][ T44] ops_init+0x8c/0x46c [ 199.107462][ T44] setup_net+0x638/0xbec [ 199.107936][ T44] copy_net_ns+0x1fc/0x560 [ 199.108604][ T44] create_new_namespaces+0x300/0x840 [ 199.109119][ T44] unshare_nsproxy_namespaces+0x7c/0x174 [ 199.109913][ T44] ksys_unshare+0x284/0x580 [ 199.110445][ T44] __arm64_sys_unshare+0x30/0x50 [ 199.111071][ T44] invoke_syscall+0x6c/0x260 executing program [ 202.947220][ T3059] can: request_module (can-proto-0) failed. [ 203.223820][ T3059] can: request_module (can-proto-0) failed. executing program [ 203.384805][ T3059] can: request_module (can-proto-0) failed. executing program [ 209.177817][ T44] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 209.178650][ T44] leaked reference. [ 209.179007][ T44] ipv6_add_dev+0x300/0xeec [ 209.179493][ T44] addrconf_notify+0x3ac/0x1080 [ 209.179885][ T44] notifier_call_chain+0xc0/0x180 [ 209.180665][ T44] raw_notifier_call_chain+0x18/0x24 [ 209.181104][ T44] call_netdevice_notifiers_info+0x80/0xe0 [ 209.181519][ T44] register_netdevice+0xa7c/0x1094 [ 209.181930][ T44] register_netdev+0x24/0x4c [ 209.182325][ T44] loopback_net_init+0x6c/0x124 [ 209.182736][ T44] ops_init+0x8c/0x46c [ 209.183123][ T44] setup_net+0x638/0xbec [ 209.183531][ T44] copy_net_ns+0x1fc/0x560 [ 209.183916][ T44] create_new_namespaces+0x300/0x840 [ 209.184323][ T44] unshare_nsproxy_namespaces+0x7c/0x174 [ 209.184731][ T44] ksys_unshare+0x284/0x580 [ 209.185137][ T44] __arm64_sys_unshare+0x30/0x50 [ 209.185545][ T44] invoke_syscall+0x6c/0x260 executing program executing program executing program [ 215.378382][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 215.384780][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 215.396780][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 215.400545][ T2903] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. executing program [ 219.327224][ T44] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 219.328105][ T44] leaked reference. [ 219.328484][ T44] ipv6_add_dev+0x300/0xeec [ 219.328945][ T44] addrconf_notify+0x3ac/0x1080 [ 219.329349][ T44] notifier_call_chain+0xc0/0x180 [ 219.329770][ T44] raw_notifier_call_chain+0x18/0x24 [ 219.330233][ T44] call_netdevice_notifiers_info+0x80/0xe0 [ 219.330642][ T44] register_netdevice+0xa7c/0x1094 [ 219.331014][ T44] register_netdev+0x24/0x4c [ 219.331422][ T44] loopback_net_init+0x6c/0x124 [ 219.331834][ T44] ops_init+0x8c/0x46c [ 219.332218][ T44] setup_net+0x638/0xbec [ 219.332606][ T44] copy_net_ns+0x1fc/0x560 [ 219.332990][ T44] create_new_namespaces+0x300/0x840 [ 219.333387][ T44] unshare_nsproxy_namespaces+0x7c/0x174 [ 219.333804][ T44] ksys_unshare+0x284/0x580 [ 219.334200][ T44] __arm64_sys_unshare+0x30/0x50 [ 219.334600][ T44] invoke_syscall+0x6c/0x260 VM DIAGNOSIS: 12:13:47 Registers: info registers vcpu 0 PC=ffff800008494d88 X00=ffff0000133b8008 X01=0000000000000003 X02=0000000000000000 X03=1fffe00002677001 X04=1ffff00002298f30 X05=0000000000000000 X06=0000000000000001 X07=00009ffff2ad84a0 X08=ffff00006a93db00 X09=dfff800000000000 X10=ffff60000d527b60 X11=1fffe0000d527b60 X12=ffff60000d527b61 X13=1fffe00002677143 X14=1ffff00002298eea X15=000000400005def8 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=ffff80000e1d3ae8 X20=0000000000000002 X21=ffff80000cb5ac30 X22=ffff0000133b8000 X23=ffff00006a93db00 X24=1ffff00002298f96 X25=ffff8000114c7c80 X26=ffff00006a93db80 X27=0000000000000000 X28=dfff800000000000 X29=ffff8000114c79c0 X30=ffff800008494d2c SP=ffff8000114c79c0 PSTATE=100000c5 ---V EL1h FPCR=00000000 FPSR=00000010 Q00=0000000000000000:0000000000000004 Q01=0000000000000000:414fffffe0000000 Q02=e3ed6a41eac453d4:dae864a779a8fdbe Q03=0000000040000000:0000000000000000 Q04=4010040140100401:4000000000000000 Q05=4010040140100401:4010040140100401 Q06=5555400000400000:5555400000400000 Q07=0000000000000000:0000000000000000 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000010:000000220bc87670 Q31=0000000000000000:0000000000000000 info registers vcpu 1 PC=ffff8000097cb710 X00=0000000000000002 X01=0000000000000002 X02=ffff000009eac172 X03=dfff800000000000 X04=1fffe000013d582e X05=0000000000000000 X06=0000000000000001 X07=0000000000000004 X08=ffff800011357173 X09=dfff800000000000 X10=ffff70000226ae2e X11=1ffff0000226ae2e X12=ffff70000226ae2f X13=0000000000000000 X14=1ffff0000226ae04 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=ffff00006a959c00 X19=ffff000009eac080 X20=ffff800010f3d018 X21=ffff80000e951280 X22=ffff000009eac080 X23=dfff800000000000 X24=ffff800010c007d5 X25=0000000000000001 X26=ffff000009eac080 X27=dfff800000000000 X28=0000000000000035 X29=ffff800011357120 X30=ffff8000097cca9c SP=ffff800011357120 PSTATE=800000c5 N--- EL1h FPCR=00000000 FPSR=00000000 Q00=2525252525252525:2525252525252525 Q01=252f7325006c6c61:00736d5f656d6974 Q02=63615000676e6964:726177726f662f73 Q03=00000000ff000000:ff00000000000000 Q04=000000ff00000000:0000000000000000 Q05=4000000140000000:4000000000000000 Q06=0000000100000000:0000000000000000 Q07=4010040140100401:4010040140100401 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0100000041404000:0100000041404000 Q17=a00aa008a008a00a:aaa8a8aaa8a82aa0 Q18=8020080280200800:8020080080200802 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000