syzkaller login: [ 106.476663][ T2902] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 106.489165][ T2902] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 106.504429][ T2902] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:17862' (ECDSA) to the list of known hosts. 1970/01/01 00:02:26 fuzzer started 1970/01/01 00:02:29 connecting to host at localhost:34807 1970/01/01 00:02:29 checking machine... 1970/01/01 00:02:29 checking revisions... 1970/01/01 00:02:32 testing simple program... [ 152.917345][ T3062] cgroup: Unknown subsys name 'net' executing program [ 153.414824][ T3062] cgroup: Unknown subsys name 'rlimit' executing program executing program [ 160.546150][ T3065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.606954][ T3065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program [ 163.454900][ T3065] device hsr_slave_0 entered promiscuous mode [ 163.511774][ T3065] device hsr_slave_1 entered promiscuous mode executing program [ 165.297505][ T3065] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 165.392984][ T3065] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 165.474980][ T3065] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.549236][ T3065] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 167.617677][ T3065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.710038][ T3376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.727872][ T3376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready executing program [ 169.049501][ T3376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.065886][ T3376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.119993][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.128886][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.213666][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.297175][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.440675][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.448682][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.494335][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.513502][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.579460][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.568675][ T3376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.570172][ T3376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready executing program [ 173.358231][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.367457][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready executing program [ 174.780938][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.815662][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.837556][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.848417][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.908522][ T3065] device veth0_vlan entered promiscuous mode [ 175.019094][ T3065] device veth1_vlan entered promiscuous mode [ 175.318563][ T3376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.335545][ T3376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.407070][ T3065] device veth0_macvtap entered promiscuous mode [ 175.489316][ T3065] device veth1_macvtap entered promiscuous mode [ 175.710450][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.720258][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.736378][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.749459][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.810694][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.824667][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.920231][ T3065] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.921708][ T3065] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.923636][ T3065] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.924273][ T3065] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program 1970/01/01 00:02:57 building call list... [ 178.561060][ T1158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.860192][ T1158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.117274][ T1158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.403146][ T1158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 182.648845][ T1158] device hsr_slave_0 left promiscuous mode [ 182.735346][ T1158] device hsr_slave_1 left promiscuous mode [ 182.990196][ T1158] device veth1_macvtap left promiscuous mode [ 182.997333][ T1158] device veth0_macvtap left promiscuous mode [ 183.008084][ T1158] device veth1_vlan left promiscuous mode [ 183.010566][ T1158] device veth0_vlan left promiscuous mode executing program executing program [ 186.566284][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.731140][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.449914][ T1158] bond0 (unregistering): Released all slaves executing program executing program executing program executing program [ 199.365750][ T1158] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 199.367359][ T1158] leaked reference. [ 199.369244][ T1158] ipv6_add_dev+0x300/0xeec [ 199.370211][ T1158] addrconf_notify+0x3ac/0x1080 [ 199.370602][ T1158] notifier_call_chain+0xc0/0x180 [ 199.371048][ T1158] raw_notifier_call_chain+0x18/0x24 [ 199.371502][ T1158] call_netdevice_notifiers_info+0x80/0xe0 [ 199.372290][ T1158] register_netdevice+0xa7c/0x1094 [ 199.372874][ T1158] register_netdev+0x24/0x4c [ 199.373382][ T1158] loopback_net_init+0x6c/0x124 [ 199.373890][ T1158] ops_init+0x8c/0x46c [ 199.374317][ T1158] setup_net+0x638/0xbec [ 199.374933][ T1158] copy_net_ns+0x1fc/0x560 [ 199.375380][ T1158] create_new_namespaces+0x300/0x840 [ 199.375895][ T1158] unshare_nsproxy_namespaces+0x7c/0x174 [ 199.376494][ T1158] ksys_unshare+0x284/0x580 [ 199.377112][ T1158] __arm64_sys_unshare+0x30/0x50 [ 199.377763][ T1158] invoke_syscall+0x6c/0x260 executing program [ 203.724798][ T3055] can: request_module (can-proto-0) failed. [ 203.966527][ T3055] can: request_module (can-proto-0) failed. [ 204.135764][ T3055] can: request_module (can-proto-0) failed. executing program executing program [ 209.483671][ T1158] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 209.486670][ T1158] leaked reference. [ 209.487108][ T1158] ipv6_add_dev+0x300/0xeec [ 209.488630][ T1158] addrconf_notify+0x3ac/0x1080 [ 209.489061][ T1158] notifier_call_chain+0xc0/0x180 [ 209.489459][ T1158] raw_notifier_call_chain+0x18/0x24 [ 209.489902][ T1158] call_netdevice_notifiers_info+0x80/0xe0 [ 209.490310][ T1158] register_netdevice+0xa7c/0x1094 [ 209.490707][ T1158] register_netdev+0x24/0x4c [ 209.491085][ T1158] loopback_net_init+0x6c/0x124 [ 209.491496][ T1158] ops_init+0x8c/0x46c [ 209.491991][ T1158] setup_net+0x638/0xbec [ 209.492378][ T1158] copy_net_ns+0x1fc/0x560 [ 209.492860][ T1158] create_new_namespaces+0x300/0x840 [ 209.493285][ T1158] unshare_nsproxy_namespaces+0x7c/0x174 [ 209.493707][ T1158] ksys_unshare+0x284/0x580 [ 209.494206][ T1158] __arm64_sys_unshare+0x30/0x50 [ 209.494695][ T1158] invoke_syscall+0x6c/0x260 executing program executing program executing program [ 217.579519][ T2902] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 217.616103][ T2902] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 217.626930][ T2902] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 217.638521][ T2902] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. executing program [ 219.783356][ T1158] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 219.784204][ T1158] leaked reference. [ 219.784586][ T1158] ipv6_add_dev+0x300/0xeec [ 219.785036][ T1158] addrconf_notify+0x3ac/0x1080 [ 219.785566][ T1158] notifier_call_chain+0xc0/0x180 [ 219.785974][ T1158] raw_notifier_call_chain+0x18/0x24 [ 219.786414][ T1158] call_netdevice_notifiers_info+0x80/0xe0 [ 219.786831][ T1158] register_netdevice+0xa7c/0x1094 [ 219.787230][ T1158] register_netdev+0x24/0x4c [ 219.787781][ T1158] loopback_net_init+0x6c/0x124 [ 219.789169][ T1158] ops_init+0x8c/0x46c [ 219.790090][ T1158] setup_net+0x638/0xbec [ 219.790471][ T1158] copy_net_ns+0x1fc/0x560 [ 219.790851][ T1158] create_new_namespaces+0x300/0x840 [ 219.791241][ T1158] unshare_nsproxy_namespaces+0x7c/0x174 [ 219.791652][ T1158] ksys_unshare+0x284/0x580 [ 219.792127][ T1158] __arm64_sys_unshare+0x30/0x50 [ 219.792713][ T1158] invoke_syscall+0x6c/0x260 executing program VM DIAGNOSIS: 22:44:00 Registers: info registers vcpu 0 PC=ffff80000cb3d6f0 X00=ffff000011200008 X01=0000000000000003 X02=0000000000000003 X03=1fffe0000d527591 X04=1fffe00002240001 X05=0000000000000000 X06=00000000f3f3f3f3 X07=1fffe0000224013e X08=ffff0000112009f0 X09=0000000000000000 X10=ffff0000112009b4 X11=0000000000000004 X12=000000000000f1f1 X13=1fffe0000224013e X14=1ffff000034e8ee2 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=1ffff000034e8f00 X20=0000000000000000 X21=ffff0000112009d0 X22=ffff000011200000 X23=ffff000011200000 X24=ffff80000e1c7c88 X25=ffff80000cbe28c0 X26=00000000ffffffff X27=0000000000000000 X28=ffff8000115c0000 X29=ffff80001a7477d0 X30=ffff80000cb3e7d0 SP=ffff80001a747820 PSTATE=10000005 ---V EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=0000400a00000065:7361656c2e346874 Q02=00000000000080fe:0002001400000015 Q03=8020000080200800:0000000000000000 Q04=8020080280200000:8000080080200800 Q05=0000000000000000:0000000040000000 Q06=0000000000000000:0000000000000000 Q07=8020080280200802:8020080280200802 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=4010040140100401:4010040140100401 Q17=a00aa0008008a008:aaa088a8a0a80040 Q18=8020080280200000:8000080080200800 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 PC=ffff8000097ccd40 X00=0000000000000002 X01=0000000000000002 X02=ffff000009eaf172 X03=dfff800000000000 X04=1fffe000013d5e2e X05=0000000000000000 X06=0000000000000001 X07=0000000000000004 X08=ffff8000139f7173 X09=dfff800000000000 X10=ffff70000273ee2e X11=1ffff0000273ee2e X12=ffff70000273ee2f X13=0000000000000000 X14=1ffff0000273ee04 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=ffff00006a959c00 X19=ffff000009eaf080 X20=ffff800010f3d018 X21=ffff80000e9574c0 X22=ffff000009eaf080 X23=dfff800000000000 X24=ffff800010c0c7d1 X25=0000000000000004 X26=ffff000009eaf080 X27=dfff800000000000 X28=0000000000000031 X29=ffff8000139f7120 X30=ffff8000097ce0cc SP=ffff8000139f7120 PSTATE=800000c5 N--- EL1h FPCR=00000000 FPSR=00000010 Q00=2525252525252525:2525252525252525 Q01=2f6463706368642f:62642f7261762f00 Q02=2f7261762f006573:61656c2e73257325 Q03=0000000000000000:00000000000000ff Q04=0000000000ff0000:0000000000000000 Q05=0000000000000000:0000000000000001 Q06=0000000000100000:0000000000100001 Q07=4010040140100401:4010040140100401 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0010001100000001:0010001100000001 Q17=a00a8000a0000000:aa80a000a000a200 Q18=8020080280000000:8020000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000