[ 397.252636] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 397.289579] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 397.303112] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 397.319659] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 397.329337] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 397.353205] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 397.403367] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 397.423210] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 397.434027] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 397.444247] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 402.276422] nla_parse: 319 callbacks suppressed [ 402.276426] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 402.311661] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 402.321812] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 402.333059] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 402.350137] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 402.370234] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 402.439981] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 402.459639] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 402.474053] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 402.487908] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 403.839738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.846872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.856263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.863058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.872162] device bridge_slave_1 left promiscuous mode [ 403.878550] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.928279] device bridge_slave_0 left promiscuous mode [ 403.933845] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.002259] device veth1_macvtap left promiscuous mode [ 404.008267] device veth0_macvtap left promiscuous mode [ 404.013935] device veth1_vlan left promiscuous mode [ 404.020512] device veth0_vlan left promiscuous mode [ 404.108463] device hsr_slave_1 left promiscuous mode [ 404.147949] device hsr_slave_0 left promiscuous mode [ 404.213167] team0 (unregistering): Port device team_slave_1 removed [ 404.222621] team0 (unregistering): Port device team_slave_0 removed [ 404.233239] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 404.281278] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 404.334895] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.165' (ECDSA) to the list of known hosts. [ 407.448232] nla_parse: 2 callbacks suppressed [ 407.448237] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 407.463258] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 407.472347] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 407.483091] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 407.492320] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 407.502348] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 407.513354] ================================================================== [ 407.522147] BUG: KASAN: use-after-free in tcf_action_destroy+0xda/0xf0 [ 407.529377] Read of size 8 at addr ffff8881d8f9e700 by task syz-executor378/27789 [ 407.537527] [ 407.539295] CPU: 1 PID: 27789 Comm: syz-executor378 Not tainted 4.19.206-syzkaller #0 [ 407.547631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.557681] Call Trace: [ 407.560515] dump_stack+0x17c/0x226 [ 407.564628] print_address_description.cold.6+0x9/0x211 [ 407.570004] kasan_report.cold.7+0x242/0x2fe [ 407.574695] ? tcf_action_destroy+0xda/0xf0 [ 407.579150] __asan_report_load8_noabort+0x14/0x20 [ 407.584570] tcf_action_destroy+0xda/0xf0 [ 407.588815] tcf_action_init+0x292/0x300 [ 407.592967] ? tcf_action_init_1+0xbc0/0xbc0 [ 407.597478] tcf_action_add+0xf2/0x320 [ 407.601864] ? tca_action_gd+0x1440/0x1440 [ 407.606416] ? __mutex_lock+0xd2f/0x1190 [ 407.611332] ? lock_downgrade+0x860/0x860 [ 407.616009] ? memset+0x31/0x40 [ 407.619516] ? nla_parse+0x34/0x280 [ 407.623320] tc_ctl_action+0x28d/0x3d0 [ 407.627224] ? tcf_action_add+0x320/0x320 [ 407.631602] rtnetlink_rcv_msg+0x34f/0x950 [ 407.635830] ? rtnl_calcit.isra.10+0x360/0x360 [ 407.640790] ? __netlink_lookup+0x2fd/0x630 [ 407.645139] ? lock_downgrade+0x860/0x860 [ 407.649563] netlink_rcv_skb+0x13e/0x3d0 [ 407.654241] ? lock_downgrade+0x860/0x860 [ 407.659107] ? rtnl_calcit.isra.10+0x360/0x360 [ 407.664036] ? netlink_ack+0x990/0x990 [ 407.668705] ? netlink_deliver_tap+0x182/0xb00 [ 407.673555] ? kasan_check_read+0x11/0x20 [ 407.677853] rtnetlink_rcv+0x10/0x20 [ 407.681686] netlink_unicast+0x443/0x660 [ 407.685736] ? netlink_sendskb+0x40/0x40 [ 407.690143] ? _copy_from_iter_full+0x189/0x770 [ 407.694886] ? __check_object_size+0x1e0/0x300 [ 407.699547] netlink_sendmsg+0x667/0xc60 [ 407.703713] ? nlmsg_notify+0x140/0x140 [ 407.707819] ? apparmor_socket_sendmsg+0x1b/0x20 [ 407.712719] ? nlmsg_notify+0x140/0x140 [ 407.716691] sock_sendmsg+0xac/0xf0 [ 407.720307] ___sys_sendmsg+0x647/0x950 [ 407.724616] ? do_huge_pmd_anonymous_page+0xdb8/0x1dd0 [ 407.729971] ? copy_msghdr_from_user+0x430/0x430 [ 407.735445] ? __fget+0x285/0x400 [ 407.738940] ? kasan_check_read+0x11/0x20 [ 407.743369] ? __fget+0x2a2/0x400 [ 407.747101] ? do_raw_spin_unlock+0x177/0x260 [ 407.752149] ? do_dup2+0x3f0/0x3f0 [ 407.755870] ? __handle_mm_fault+0x21a4/0x4100 [ 407.760726] ? __fget_light+0x174/0x1e0 [ 407.765225] ? __fdget+0xe/0x10 [ 407.768574] __sys_sendmsg+0xd9/0x180 [ 407.772388] ? __ia32_sys_shutdown+0x70/0x70 [ 407.776973] ? up_read+0x1a/0x110 [ 407.780600] ? __do_page_fault+0x53a/0xb30 [ 407.785647] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.791512] __x64_sys_sendmsg+0x73/0xb0 [ 407.795597] do_syscall_64+0xd0/0x4e0 [ 407.799602] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.804974] RIP: 0033:0x7fa13301bda9 [ 407.808672] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 407.828332] RSP: 002b:00007fa132fcd318 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.836307] RAX: ffffffffffffffda RBX: 00007fa1330a3408 RCX: 00007fa13301bda9 [ 407.843926] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000003 [ 407.851942] RBP: 00007fa1330a3400 R08: 0000000000000000 R09: 0000000000000000 [ 407.859816] R10: 0000000000000000 R11: 0000000000000246 R12: 6b72616d6e6e6f63 [ 407.867350] R13: 00007ffe2b7e8ecf R14: 00007fa132fcd400 R15: 0000000000022000 [ 407.875027] [ 407.876733] Allocated by task 27780: [ 407.881009] kasan_kmalloc.part.1+0x62/0xf0 [ 407.885324] kasan_kmalloc+0xaf/0xc0 [ 407.889653] __kmalloc+0x15d/0x3d0 [ 407.893584] tcf_idr_create+0x55/0x560 [ 407.897841] tcf_connmark_init+0x3d8/0x6a0 [ 407.902106] tcf_action_init_1+0x8c6/0xbc0 [ 407.906686] tcf_action_init+0x178/0x300 [ 407.910827] tcf_action_add+0xf2/0x320 [ 407.915152] tc_ctl_action+0x28d/0x3d0 [ 407.919505] rtnetlink_rcv_msg+0x34f/0x950 [ 407.923902] netlink_rcv_skb+0x13e/0x3d0 [ 407.927983] rtnetlink_rcv+0x10/0x20 [ 407.931986] netlink_unicast+0x443/0x660 [ 407.936070] netlink_sendmsg+0x667/0xc60 [ 407.940790] sock_sendmsg+0xac/0xf0 [ 407.945082] ___sys_sendmsg+0x647/0x950 [ 407.950222] __sys_sendmsg+0xd9/0x180 [ 407.954677] __x64_sys_sendmsg+0x73/0xb0 [ 407.959206] do_syscall_64+0xd0/0x4e0 [ 407.963443] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.968910] [ 407.970662] Freed by task 27780: [ 407.974262] __kasan_slab_free+0x13c/0x220 [ 407.978686] kasan_slab_free+0xe/0x10 [ 407.983018] kfree+0xcf/0x220 [ 407.986127] tcf_action_cleanup+0xfd/0x130 [ 407.990538] __tcf_action_put+0xbe/0x100 [ 407.994959] __tcf_idr_release+0x6a/0x90 [ 407.999456] tcf_action_destroy+0x7d/0xf0 [ 408.004000] tcf_action_init+0x292/0x300 [ 408.008177] tcf_action_add+0xf2/0x320 [ 408.012180] tc_ctl_action+0x28d/0x3d0 [ 408.016331] rtnetlink_rcv_msg+0x34f/0x950 [ 408.020694] netlink_rcv_skb+0x13e/0x3d0 [ 408.024753] rtnetlink_rcv+0x10/0x20 [ 408.028455] netlink_unicast+0x443/0x660 [ 408.032647] netlink_sendmsg+0x667/0xc60 [ 408.037050] sock_sendmsg+0xac/0xf0 [ 408.040815] ___sys_sendmsg+0x647/0x950 [ 408.045677] __sys_sendmsg+0xd9/0x180 [ 408.049662] __x64_sys_sendmsg+0x73/0xb0 [ 408.054099] do_syscall_64+0xd0/0x4e0 [ 408.058588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.063911] [ 408.065523] The buggy address belongs to the object at ffff8881d8f9e700 [ 408.065523] which belongs to the cache kmalloc-256 of size 256 [ 408.078834] The buggy address is located 0 bytes inside of [ 408.078834] 256-byte region [ffff8881d8f9e700, ffff8881d8f9e800) [ 408.091611] The buggy address belongs to the page: [ 408.096921] page:ffffea000763e780 count:1 mapcount:0 mapping:ffff8881f60007c0 index:0xffff8881d8f9e5c0 [ 408.107074] flags: 0x17ffe0000000100(slab) [ 408.111605] raw: 017ffe0000000100 ffffea000775d008 ffffea00076c2048 ffff8881f60007c0 [ 408.119881] raw: ffff8881d8f9e5c0 ffff8881d8f9e0c0 000000010000000b 0000000000000000 [ 408.128858] page dumped because: kasan: bad access detected [ 408.134961] [ 408.136854] Memory state around the buggy address: [ 408.142031] ffff8881d8f9e600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 408.149817] ffff8881d8f9e680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 408.159125] >ffff8881d8f9e700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 408.167706] ^ [ 408.171628] ffff8881d8f9e780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 408.179819] ffff8881d8f9e800: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 408.188007] ================================================================== [ 408.195621] Disabling lock debugging due to kernel taint [ 408.203500] ------------[ cut here ]------------ [ 408.208351] refcount_t: underflow; use-after-free. [ 408.213847] WARNING: CPU: 1 PID: 27789 at lib/refcount.c:280 refcount_dec_not_one+0x141/0x160 [ 408.222699] Modules linked in: [ 408.226576] CPU: 1 PID: 27789 Comm: syz-executor378 Tainted: G B 4.19.206-syzkaller #0 [ 408.236114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.246337] RIP: 0010:refcount_dec_not_one+0x141/0x160 [ 408.252205] Code: 83 f8 01 74 29 44 8d 60 ff 44 39 e0 73 8f 80 3d f4 c5 fb 05 00 75 ab 48 c7 c7 80 5f 8b 87 c6 05 e4 c5 fb 05 01 e8 2b b4 98 03 <0f> 0b eb 94 31 c0 eb 95 48 89 df e8 5f bb 4a fe e9 3d ff ff ff e8 [ 408.271608] RSP: 0018:ffff8881f3aaf118 EFLAGS: 00010282 [ 408.277486] RAX: 0000000000000000 RBX: ffff8881d8f9e71c RCX: 0000000000000000 [ 408.284760] RDX: 0000000000000004 RSI: 0000000000000008 RDI: ffffffff8a3e1aa0 [ 408.292695] RBP: ffff8881f3aaf1a0 R08: ffffed103ece3ef7 R09: ffffed103ece3ef6 [ 408.300256] R10: ffffed103ece3ef6 R11: ffff8881f671f7b7 R12: 00000000ffffffff [ 408.308314] R13: ffff8881f3aaf138 R14: 1ffff1103e755e23 R15: ffff8881f3aaf178 [ 408.315872] FS: 00007fa132fcd700(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000 [ 408.324411] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.331098] CR2: 00007f05bfe22000 CR3: 00000001d5470001 CR4: 00000000001606e0 [ 408.340184] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 408.348305] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 408.355746] Call Trace: [ 408.358410] ? refcount_dec_checked+0x40/0x40 [ 408.363316] ? preempt_schedule+0x4d/0x60 [ 408.367794] ? ___preempt_schedule+0x16/0x18 [ 408.372526] refcount_dec_and_lock+0x17/0x50 [ 408.376918] __tcf_action_put+0x42/0x100 [ 408.381064] __tcf_idr_release+0x6a/0x90 [ 408.385294] tcf_action_destroy+0x7d/0xf0 [ 408.389683] tcf_action_init+0x292/0x300 [ 408.393757] ? tcf_action_init_1+0xbc0/0xbc0 [ 408.398484] tcf_action_add+0xf2/0x320 [ 408.402368] ? tca_action_gd+0x1440/0x1440 [ 408.406783] ? __mutex_lock+0xd2f/0x1190 [ 408.410994] ? lock_downgrade+0x860/0x860 [ 408.415397] ? memset+0x31/0x40 [ 408.418663] ? nla_parse+0x34/0x280 [ 408.422273] tc_ctl_action+0x28d/0x3d0 [ 408.426149] ? tcf_action_add+0x320/0x320 [ 408.430382] rtnetlink_rcv_msg+0x34f/0x950 [ 408.435219] ? rtnl_calcit.isra.10+0x360/0x360 [ 408.439992] ? __netlink_lookup+0x2fd/0x630 [ 408.444396] ? lock_downgrade+0x860/0x860 [ 408.448732] netlink_rcv_skb+0x13e/0x3d0 [ 408.452863] ? lock_downgrade+0x860/0x860 [ 408.457093] ? rtnl_calcit.isra.10+0x360/0x360 [ 408.462479] ? netlink_ack+0x990/0x990 [ 408.466457] ? netlink_deliver_tap+0x182/0xb00 [ 408.471658] ? kasan_check_read+0x11/0x20 [ 408.475881] rtnetlink_rcv+0x10/0x20 [ 408.479992] netlink_unicast+0x443/0x660 [ 408.484693] ? netlink_sendskb+0x40/0x40 [ 408.488740] ? _copy_from_iter_full+0x189/0x770 [ 408.493670] ? __check_object_size+0x1e0/0x300 [ 408.498250] netlink_sendmsg+0x667/0xc60 [ 408.502311] ? nlmsg_notify+0x140/0x140 [ 408.506370] ? apparmor_socket_sendmsg+0x1b/0x20 [ 408.511636] ? nlmsg_notify+0x140/0x140 [ 408.515585] sock_sendmsg+0xac/0xf0 [ 408.519375] ___sys_sendmsg+0x647/0x950 [ 408.523347] ? do_huge_pmd_anonymous_page+0xdb8/0x1dd0 [ 408.528957] ? copy_msghdr_from_user+0x430/0x430 [ 408.533957] ? __fget+0x285/0x400 [ 408.537484] ? kasan_check_read+0x11/0x20 [ 408.541702] ? __fget+0x2a2/0x400 [ 408.545244] ? do_raw_spin_unlock+0x177/0x260 [ 408.550710] ? do_dup2+0x3f0/0x3f0 [ 408.555161] ? __handle_mm_fault+0x21a4/0x4100 [ 408.560235] ? __fget_light+0x174/0x1e0 [ 408.564558] ? __fdget+0xe/0x10 [ 408.568248] __sys_sendmsg+0xd9/0x180 [ 408.572481] ? __ia32_sys_shutdown+0x70/0x70 [ 408.577122] ? up_read+0x1a/0x110 [ 408.580682] ? __do_page_fault+0x53a/0xb30 [ 408.585179] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.590628] __x64_sys_sendmsg+0x73/0xb0 [ 408.594881] do_syscall_64+0xd0/0x4e0 [ 408.599052] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.604868] RIP: 0033:0x7fa13301bda9 [ 408.609098] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 408.629725] RSP: 002b:00007fa132fcd318 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.638957] RAX: ffffffffffffffda RBX: 00007fa1330a3408 RCX: 00007fa13301bda9 [ 408.647812] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000003 [ 408.656177] RBP: 00007fa1330a3400 R08: 0000000000000000 R09: 0000000000000000 [ 408.663946] R10: 0000000000000000 R11: 0000000000000246 R12: 6b72616d6e6e6f63 [ 408.673679] R13: 00007ffe2b7e8ecf R14: 00007fa132fcd400 R15: 0000000000022000 [ 408.681944] irq event stamp: 218 [ 408.686017] hardirqs last enabled at (217): [] _raw_spin_unlock_irq+0x27/0x90 [ 408.695592] hardirqs last disabled at (218): [] _raw_spin_lock_irqsave+0x74/0xd0 [ 408.705538] softirqs last enabled at (178): [] __do_softirq+0x62d/0x919 [ 408.714583] softirqs last disabled at (135): [] irq_exit+0x17f/0x1c0 [ 408.723037] ---[ end trace 7e05933b3219d872 ]--- [ 408.748877] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 408.760364] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 408.770360] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 408.779795] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 409.868986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.876360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.884251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.892086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.900847] device bridge_slave_1 left promiscuous mode [ 409.906780] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.945633] device bridge_slave_0 left promiscuous mode [ 409.951476] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.016866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.024506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.032437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.039916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.047386] device bridge_slave_1 left promiscuous mode [ 410.053296] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.115509] device bridge_slave_0 left promiscuous mode [ 410.121101] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.176858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.184407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.191792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.198853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.205957] device bridge_slave_1 left promiscuous mode [ 410.211701] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.246508] device bridge_slave_0 left promiscuous mode [ 410.252255] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.307077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.314856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.322626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.330016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.337607] device bridge_slave_1 left promiscuous mode [ 410.343344] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.395640] device bridge_slave_0 left promiscuous mode [ 410.402065] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.457001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.464090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.471958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.480245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.488025] device bridge_slave_1 left promiscuous mode [ 410.494223] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.545628] device bridge_slave_0 left promiscuous mode [ 410.551669] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.608056] device veth1_macvtap left promiscuous mode [ 410.613678] device veth0_macvtap left promiscuous mode [ 410.619685] device veth1_vlan left promiscuous mode [ 410.625593] device veth0_vlan left promiscuous mode [ 410.630821] device veth1_macvtap left promiscuous mode [ 410.636357] device veth0_macvtap left promiscuous mode [ 410.641746] device veth1_vlan left promiscuous mode [ 410.646843] device veth0_vlan left promiscuous mode [ 410.652105] device veth1_macvtap left promiscuous mode [ 410.657942] device veth0_macvtap left promiscuous mode [ 410.663503] device veth1_vlan left promiscuous mode [ 410.668672] device veth0_vlan left promiscuous mode [ 410.673965] device veth1_macvtap left promiscuous mode [ 410.679671] device veth0_macvtap left promiscuous mode [ 410.685213] device veth1_vlan left promiscuous mode [ 410.690610] device veth0_vlan left promiscuous mode [ 410.696570] device veth1_macvtap left promiscuous mode [ 410.701861] device veth0_macvtap left promiscuous mode [ 410.707205] device veth1_vlan left promiscuous mode [ 410.712332] device veth0_vlan left promiscuous mode [ 410.879243] device hsr_slave_1 left promiscuous mode [ 410.916505] device hsr_slave_0 left promiscuous mode [ 410.969221] team0 (unregistering): Port device team_slave_1 removed [ 410.977480] team0 (unregistering): Port device team_slave_0 removed [ 410.985908] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 411.007673] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 411.065111] bond0 (unregistering): Released all slaves [ 411.196342] device hsr_slave_1 left promiscuous mode [ 411.237044] device hsr_slave_0 left promiscuous mode [ 411.279171] team0 (unregistering): Port device team_slave_1 removed [ 411.287319] team0 (unregistering): Port device team_slave_0 removed [ 411.297022] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 411.337886] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 411.394317] bond0 (unregistering): Released all slaves [ 411.497177] device hsr_slave_1 left promiscuous mode [ 411.547093] device hsr_slave_0 left promiscuous mode [ 411.599900] team0 (unregistering): Port device team_slave_1 removed [ 411.608015] team0 (unregistering): Port device team_slave_0 removed [ 411.617634] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 411.656518] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 411.704425] bond0 (unregistering): Released all slaves [ 411.797676] device hsr_slave_1 left promiscuous mode [ 411.846430] device hsr_slave_0 left promiscuous mode [ 411.888956] team0 (unregistering): Port device team_slave_1 removed [ 411.897576] team0 (unregistering): Port device team_slave_0 removed [ 411.906567] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 411.956672] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 412.005904] bond0 (unregistering): Released all slaves [ 412.117363] device hsr_slave_1 left promiscuous mode [ 412.156972] device hsr_slave_0 left promiscuous mode [ 412.219800] team0 (unregistering): Port device team_slave_1 removed [ 412.227893] team0 (unregistering): Port device team_slave_0 removed [ 412.236403] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 412.276682] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 412.354814] bond0 (unregistering): Released all slaves [ 412.455737] nla_parse: 188 callbacks suppressed [ 412.455742] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 412.480984] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 412.490640] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 412.499920] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 412.510947] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 412.521075] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 412.536940] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 412.546370] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 412.556527] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 412.566309] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 417.465568] nla_parse: 1526 callbacks suppressed [ 417.465572] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 417.480933] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 417.493982] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'. [ 417.503388] netlink: 32 bytes leftover after parsing attributes in process `syz-executor378'.