[ 395.653178] syz-executor.1 (5909) used greatest stack depth: 23032 bytes left [ 396.565428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.572431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.580287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.587076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.596706] device bridge_slave_1 left promiscuous mode [ 396.602759] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.644509] device bridge_slave_0 left promiscuous mode [ 396.650101] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.706908] device veth1_macvtap left promiscuous mode [ 396.713001] device veth0_macvtap left promiscuous mode [ 396.718317] device veth1_vlan left promiscuous mode [ 396.724202] device veth0_vlan left promiscuous mode [ 396.823473] device hsr_slave_1 left promiscuous mode [ 396.865027] device hsr_slave_0 left promiscuous mode [ 396.908842] team0 (unregistering): Port device team_slave_1 removed [ 396.918695] team0 (unregistering): Port device team_slave_0 removed [ 396.928805] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 396.975525] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 397.032006] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.118' (ECDSA) to the list of known hosts. [ 400.713603] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 400.722622] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 400.731987] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 400.741667] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 400.750733] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 400.760052] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 400.834350] ================================================================== [ 400.841880] BUG: KASAN: use-after-free in tcf_action_destroy+0xda/0xf0 [ 400.848531] Read of size 8 at addr ffff8881f4089ac0 by task syz-executor615/31197 [ 400.856214] [ 400.857907] CPU: 1 PID: 31197 Comm: syz-executor615 Not tainted 4.19.198-syzkaller #0 [ 400.865951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.875297] Call Trace: [ 400.877867] dump_stack+0x17c/0x226 [ 400.881482] print_address_description.cold.6+0x9/0x211 [ 400.887032] kasan_report.cold.7+0x242/0x2fe [ 400.891432] ? tcf_action_destroy+0xda/0xf0 [ 400.895835] __asan_report_load8_noabort+0x14/0x20 [ 400.900935] tcf_action_destroy+0xda/0xf0 [ 400.905077] tcf_action_init+0x292/0x300 [ 400.909130] ? tcf_action_init_1+0xbc0/0xbc0 [ 400.913529] tcf_action_add+0xf2/0x320 [ 400.917397] ? tca_action_gd+0x1440/0x1440 [ 400.921760] ? __mutex_lock+0xd2f/0x1190 [ 400.925862] ? lock_downgrade+0x860/0x860 [ 400.930001] ? memset+0x31/0x40 [ 400.933258] ? nla_parse+0x34/0x280 [ 400.936870] tc_ctl_action+0x28d/0x3d0 [ 400.940749] ? tcf_action_add+0x320/0x320 [ 400.944889] rtnetlink_rcv_msg+0x34f/0x950 [ 400.949119] ? rtnl_calcit.isra.10+0x360/0x360 [ 400.953692] ? __netlink_lookup+0x2fd/0x630 [ 400.957991] ? lock_downgrade+0x860/0x860 [ 400.962126] netlink_rcv_skb+0x13e/0x3d0 [ 400.966170] ? lock_downgrade+0x860/0x860 [ 400.970318] ? rtnl_calcit.isra.10+0x360/0x360 [ 400.974878] ? netlink_ack+0x990/0x990 [ 400.978760] ? netlink_deliver_tap+0x182/0xb00 [ 400.983324] ? kasan_check_read+0x11/0x20 [ 400.987457] rtnetlink_rcv+0x10/0x20 [ 400.991409] netlink_unicast+0x443/0x660 [ 400.995483] ? netlink_sendskb+0x40/0x40 [ 400.999528] ? _copy_from_iter_full+0x189/0x770 [ 401.004182] ? __check_object_size+0x1e0/0x300 [ 401.008754] netlink_sendmsg+0x667/0xc60 [ 401.012816] ? nlmsg_notify+0x140/0x140 [ 401.016772] ? apparmor_socket_sendmsg+0x1b/0x20 [ 401.021503] ? nlmsg_notify+0x140/0x140 [ 401.025456] sock_sendmsg+0xac/0xf0 [ 401.029061] ___sys_sendmsg+0x647/0x950 [ 401.033466] ? do_huge_pmd_anonymous_page+0xdb8/0x1dd0 [ 401.038737] ? copy_msghdr_from_user+0x430/0x430 [ 401.043479] ? __fget+0x285/0x400 [ 401.046921] ? kasan_check_read+0x11/0x20 [ 401.051150] ? __fget+0x2a2/0x400 [ 401.054679] ? do_dup2+0x3f0/0x3f0 [ 401.058206] ? __handle_mm_fault+0x21a4/0x4100 [ 401.062771] ? __fget_light+0x174/0x1e0 [ 401.066728] ? __fdget+0xe/0x10 [ 401.069995] __sys_sendmsg+0xd9/0x180 [ 401.073856] ? __ia32_sys_shutdown+0x70/0x70 [ 401.078434] ? up_read+0x1a/0x110 [ 401.081896] ? __do_page_fault+0x53a/0xb30 [ 401.086118] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.091461] __x64_sys_sendmsg+0x73/0xb0 [ 401.095506] do_syscall_64+0xd0/0x4e0 [ 401.099301] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.104482] RIP: 0033:0x445c79 [ 401.107658] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 401.127074] RSP: 002b:00007f9b2e85f318 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.134763] RAX: ffffffffffffffda RBX: 00000000004cb428 RCX: 0000000000445c79 [ 401.142017] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000003 [ 401.149269] RBP: 00000000004cb420 R08: 0000000000000000 R09: 0000000000000000 [ 401.156542] R10: 0000000000000000 R11: 0000000000000246 R12: 6b72616d6e6e6f63 [ 401.163884] R13: 00007ffe1dac9f6f R14: 00007f9b2e85f400 R15: 0000000000022000 [ 401.171146] [ 401.172873] Allocated by task 31195: [ 401.176567] kasan_kmalloc.part.1+0x62/0xf0 [ 401.180865] kasan_kmalloc+0xaf/0xc0 [ 401.184583] __kmalloc+0x15d/0x3d0 [ 401.188109] tcf_idr_create+0x55/0x560 [ 401.191970] tcf_connmark_init+0x3d8/0x6a0 [ 401.196527] tcf_action_init_1+0x8c6/0xbc0 [ 401.200739] tcf_action_init+0x178/0x300 [ 401.204784] tcf_action_add+0xf2/0x320 [ 401.208652] tc_ctl_action+0x28d/0x3d0 [ 401.212536] rtnetlink_rcv_msg+0x34f/0x950 [ 401.216751] netlink_rcv_skb+0x13e/0x3d0 [ 401.220788] rtnetlink_rcv+0x10/0x20 [ 401.224713] netlink_unicast+0x443/0x660 [ 401.228756] netlink_sendmsg+0x667/0xc60 [ 401.232795] sock_sendmsg+0xac/0xf0 [ 401.236401] ___sys_sendmsg+0x647/0x950 [ 401.240386] __sys_sendmsg+0xd9/0x180 [ 401.244168] __x64_sys_sendmsg+0x73/0xb0 [ 401.248224] do_syscall_64+0xd0/0x4e0 [ 401.252044] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.257352] [ 401.258961] Freed by task 31196: [ 401.262318] __kasan_slab_free+0x13c/0x220 [ 401.266540] kasan_slab_free+0xe/0x10 [ 401.270316] kfree+0xcf/0x220 [ 401.273399] tcf_action_cleanup+0xfd/0x130 [ 401.277615] __tcf_action_put+0xbe/0x100 [ 401.281656] __tcf_idr_release+0x6a/0x90 [ 401.285733] tcf_action_destroy+0x7d/0xf0 [ 401.290036] tcf_action_init+0x292/0x300 [ 401.294078] tcf_action_add+0xf2/0x320 [ 401.297973] tc_ctl_action+0x28d/0x3d0 [ 401.301844] rtnetlink_rcv_msg+0x34f/0x950 [ 401.306064] netlink_rcv_skb+0x13e/0x3d0 [ 401.310125] rtnetlink_rcv+0x10/0x20 [ 401.313816] netlink_unicast+0x443/0x660 [ 401.317943] netlink_sendmsg+0x667/0xc60 [ 401.321993] sock_sendmsg+0xac/0xf0 [ 401.325604] ___sys_sendmsg+0x647/0x950 [ 401.329588] __sys_sendmsg+0xd9/0x180 [ 401.333388] __x64_sys_sendmsg+0x73/0xb0 [ 401.337630] do_syscall_64+0xd0/0x4e0 [ 401.341679] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.347042] [ 401.348646] The buggy address belongs to the object at ffff8881f4089ac0 [ 401.348646] which belongs to the cache kmalloc-256 of size 256 [ 401.361280] The buggy address is located 0 bytes inside of [ 401.361280] 256-byte region [ffff8881f4089ac0, ffff8881f4089bc0) [ 401.372978] The buggy address belongs to the page: [ 401.378243] page:ffffea0007d02240 count:1 mapcount:0 mapping:ffff8881f60007c0 index:0x0 [ 401.386730] flags: 0x17ffe0000000100(slab) [ 401.390948] raw: 017ffe0000000100 ffffea0007d29708 ffffea0007d02788 ffff8881f60007c0 [ 401.399077] raw: 0000000000000000 ffff8881f40890c0 000000010000000c 0000000000000000 [ 401.407219] page dumped because: kasan: bad access detected [ 401.413258] [ 401.414886] Memory state around the buggy address: [ 401.419807] ffff8881f4089980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 401.427146] ffff8881f4089a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 401.435439] >ffff8881f4089a80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 401.443472] ^ [ 401.449178] ffff8881f4089b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 401.456531] ffff8881f4089b80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 401.463877] ================================================================== [ 401.471592] Disabling lock debugging due to kernel taint [ 401.481203] ------------[ cut here ]------------ [ 401.486927] refcount_t: underflow; use-after-free. [ 401.492956] WARNING: CPU: 1 PID: 31197 at lib/refcount.c:280 refcount_dec_not_one+0x141/0x160 [ 401.501620] Modules linked in: [ 401.504803] CPU: 1 PID: 31197 Comm: syz-executor615 Tainted: G B 4.19.198-syzkaller #0 [ 401.514149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.523587] RIP: 0010:refcount_dec_not_one+0x141/0x160 [ 401.529061] Code: 83 f8 01 74 29 44 8d 60 ff 44 39 e0 73 8f 80 3d a4 9d fb 05 00 75 ab 48 c7 c7 20 5d 8b 87 c6 05 94 9d fb 05 01 e8 e7 90 98 03 <0f> 0b eb 94 31 c0 eb 95 48 89 df e8 4f 9a 4a fe e9 3d ff ff ff e8 [ 401.548488] RSP: 0018:ffff8881e8c07118 EFLAGS: 00010282 [ 401.553941] RAX: 0000000000000000 RBX: ffff8881f4089adc RCX: 0000000000000000 [ 401.561282] RDX: 0000000000000004 RSI: ffffffff878b78c0 RDI: ffffffff8a3e0aa0 [ 401.568532] RBP: ffff8881e8c071a0 R08: ffffed103ece5081 R09: ffffed103ece5080 [ 401.576088] R10: ffffed103ece5080 R11: ffff8881f6728407 R12: 00000000ffffffff [ 401.583436] R13: ffff8881e8c07138 R14: 1ffff1103d180e23 R15: ffff8881e8c07178 [ 401.590698] FS: 00007f9b2e85f700(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000 [ 401.598920] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.604878] CR2: 00007ffe1dbeba10 CR3: 00000001ed08f005 CR4: 00000000001606e0 [ 401.612131] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 401.619650] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 401.626923] Call Trace: [ 401.629492] ? refcount_dec_checked+0x40/0x40 [ 401.633981] ? preempt_schedule+0x4d/0x60 [ 401.638106] ? ___preempt_schedule+0x16/0x18 [ 401.642499] refcount_dec_and_lock+0x17/0x50 [ 401.647069] __tcf_action_put+0x42/0x100 [ 401.651109] __tcf_idr_release+0x6a/0x90 [ 401.655163] tcf_action_destroy+0x7d/0xf0 [ 401.659375] tcf_action_init+0x292/0x300 [ 401.663483] ? tcf_action_init_1+0xbc0/0xbc0 [ 401.668051] tcf_action_add+0xf2/0x320 [ 401.671930] ? tca_action_gd+0x1440/0x1440 [ 401.676517] ? __mutex_lock+0xd2f/0x1190 [ 401.680557] ? lock_downgrade+0x860/0x860 [ 401.684687] ? memset+0x31/0x40 [ 401.687945] ? nla_parse+0x34/0x280 [ 401.691658] tc_ctl_action+0x28d/0x3d0 [ 401.695535] ? tcf_action_add+0x320/0x320 [ 401.699680] rtnetlink_rcv_msg+0x34f/0x950 [ 401.703894] ? rtnl_calcit.isra.10+0x360/0x360 [ 401.708465] ? __netlink_lookup+0x2fd/0x630 [ 401.712887] ? lock_downgrade+0x860/0x860 [ 401.717015] netlink_rcv_skb+0x13e/0x3d0 [ 401.721052] ? lock_downgrade+0x860/0x860 [ 401.725193] ? rtnl_calcit.isra.10+0x360/0x360 [ 401.729759] ? netlink_ack+0x990/0x990 [ 401.733751] ? netlink_deliver_tap+0x182/0xb00 [ 401.738314] ? kasan_check_read+0x11/0x20 [ 401.742668] rtnetlink_rcv+0x10/0x20 [ 401.746394] netlink_unicast+0x443/0x660 [ 401.750454] ? netlink_sendskb+0x40/0x40 [ 401.754586] ? _copy_from_iter_full+0x189/0x770 [ 401.759337] ? __check_object_size+0x1e0/0x300 [ 401.764168] netlink_sendmsg+0x667/0xc60 [ 401.768333] ? nlmsg_notify+0x140/0x140 [ 401.772333] ? apparmor_socket_sendmsg+0x1b/0x20 [ 401.777076] ? nlmsg_notify+0x140/0x140 [ 401.781042] sock_sendmsg+0xac/0xf0 [ 401.784650] ___sys_sendmsg+0x647/0x950 [ 401.788600] ? do_huge_pmd_anonymous_page+0xdb8/0x1dd0 [ 401.793868] ? copy_msghdr_from_user+0x430/0x430 [ 401.798605] ? __fget+0x285/0x400 [ 401.802052] ? kasan_check_read+0x11/0x20 [ 401.806183] ? __fget+0x2a2/0x400 [ 401.809628] ? do_dup2+0x3f0/0x3f0 [ 401.813232] ? __handle_mm_fault+0x21a4/0x4100 [ 401.817793] ? __fget_light+0x174/0x1e0 [ 401.821750] ? __fdget+0xe/0x10 [ 401.825014] __sys_sendmsg+0xd9/0x180 [ 401.828877] ? __ia32_sys_shutdown+0x70/0x70 [ 401.833266] ? up_read+0x1a/0x110 [ 401.836702] ? __do_page_fault+0x53a/0xb30 [ 401.840921] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.846266] __x64_sys_sendmsg+0x73/0xb0 [ 401.850316] do_syscall_64+0xd0/0x4e0 [ 401.854107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.859486] RIP: 0033:0x445c79 [ 401.862740] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 401.881632] RSP: 002b:00007f9b2e85f318 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.889326] RAX: ffffffffffffffda RBX: 00000000004cb428 RCX: 0000000000445c79 [ 401.896584] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000003 [ 401.903944] RBP: 00000000004cb420 R08: 0000000000000000 R09: 0000000000000000 [ 401.911367] R10: 0000000000000000 R11: 0000000000000246 R12: 6b72616d6e6e6f63 [ 401.918743] R13: 00007ffe1dac9f6f R14: 00007f9b2e85f400 R15: 0000000000022000 [ 401.926010] irq event stamp: 196 [ 401.929373] hardirqs last enabled at (195): [] _raw_spin_unlock_irq+0x27/0x90 [ 401.938332] hardirqs last disabled at (196): [] _raw_spin_lock_irqsave+0x74/0xd0 [ 401.947637] softirqs last enabled at (134): [] __do_softirq+0x62d/0x919 [ 401.956030] softirqs last disabled at (113): [] irq_exit+0x17f/0x1c0 [ 401.964063] ---[ end trace e9a5f43679ce1202 ]--- [ 401.971893] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 402.022484] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 402.034694] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 402.044898] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 402.575081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.581843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.588811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.596652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.604302] device bridge_slave_1 left promiscuous mode [ 402.609743] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.652086] device bridge_slave_0 left promiscuous mode [ 402.657636] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.713402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.720567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.727985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.734882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.742175] device bridge_slave_1 left promiscuous mode [ 402.747781] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.782142] device bridge_slave_0 left promiscuous mode [ 402.787770] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.822950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.829708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.837186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.844196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.851351] device bridge_slave_1 left promiscuous mode [ 402.856958] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.892249] device bridge_slave_0 left promiscuous mode [ 402.897863] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.943425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.950451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.958303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.965308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.973129] device bridge_slave_1 left promiscuous mode [ 402.978597] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.022052] device bridge_slave_0 left promiscuous mode [ 403.027540] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.082845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.089876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.098340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.105267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.113289] device bridge_slave_1 left promiscuous mode [ 403.118862] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.162348] device bridge_slave_0 left promiscuous mode [ 403.167954] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.214297] device veth1_macvtap left promiscuous mode [ 403.219621] device veth0_macvtap left promiscuous mode [ 403.225122] device veth1_vlan left promiscuous mode [ 403.230225] device veth0_vlan left promiscuous mode [ 403.235712] device veth1_macvtap left promiscuous mode [ 403.241019] device veth0_macvtap left promiscuous mode [ 403.246636] device veth1_vlan left promiscuous mode [ 403.252079] device veth0_vlan left promiscuous mode [ 403.257266] device veth1_macvtap left promiscuous mode [ 403.262829] device veth0_macvtap left promiscuous mode [ 403.268167] device veth1_vlan left promiscuous mode [ 403.273452] device veth0_vlan left promiscuous mode [ 403.278714] device veth1_macvtap left promiscuous mode [ 403.284223] device veth0_macvtap left promiscuous mode [ 403.289600] device veth1_vlan left promiscuous mode [ 403.294909] device veth0_vlan left promiscuous mode [ 403.300074] device veth1_macvtap left promiscuous mode [ 403.305741] device veth0_macvtap left promiscuous mode [ 403.311077] device veth1_vlan left promiscuous mode [ 403.316292] device veth0_vlan left promiscuous mode [ 403.473305] device hsr_slave_1 left promiscuous mode [ 403.512980] device hsr_slave_0 left promiscuous mode [ 403.554881] team0 (unregistering): Port device team_slave_1 removed [ 403.563013] team0 (unregistering): Port device team_slave_0 removed [ 403.571428] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 403.603921] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 403.650407] bond0 (unregistering): Released all slaves [ 403.753775] device hsr_slave_1 left promiscuous mode [ 403.793152] device hsr_slave_0 left promiscuous mode [ 403.865363] team0 (unregistering): Port device team_slave_1 removed [ 403.873443] team0 (unregistering): Port device team_slave_0 removed [ 403.880955] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 403.923594] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 403.970337] bond0 (unregistering): Released all slaves [ 404.104692] device hsr_slave_1 left promiscuous mode [ 404.143235] device hsr_slave_0 left promiscuous mode [ 404.214887] team0 (unregistering): Port device team_slave_1 removed [ 404.222964] team0 (unregistering): Port device team_slave_0 removed [ 404.230606] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 404.292788] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 404.351019] bond0 (unregistering): Released all slaves [ 404.463784] device hsr_slave_1 left promiscuous mode [ 404.503117] device hsr_slave_0 left promiscuous mode [ 404.545351] team0 (unregistering): Port device team_slave_1 removed [ 404.553202] team0 (unregistering): Port device team_slave_0 removed [ 404.560783] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 404.593599] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 404.640703] bond0 (unregistering): Released all slaves [ 404.743963] device hsr_slave_1 left promiscuous mode [ 404.783477] device hsr_slave_0 left promiscuous mode [ 404.826174] team0 (unregistering): Port device team_slave_1 removed [ 404.833942] team0 (unregistering): Port device team_slave_0 removed [ 404.842054] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 404.863994] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 404.920907] bond0 (unregistering): Released all slaves [ 405.723446] nla_parse: 267 callbacks suppressed [ 405.723450] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 405.740029] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 405.749812] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 405.769965] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 405.780364] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 405.789397] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 405.799115] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 405.809947] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 405.821224] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 405.832566] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 410.735519] nla_parse: 1733 callbacks suppressed [ 410.735523] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 410.750511] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 410.759866] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 410.769286] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 410.778411] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 410.788141] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 410.803095] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 410.812013] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 410.820745] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'. [ 410.829695] netlink: 32 bytes leftover after parsing attributes in process `syz-executor615'.