device team_slave_0 left promiscuous mode BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:422/tfrc_rx_hist_sample_rtt() IPVS: ftp: loaded support on port[0] = 21 device team_slave_1 left promiscuous mode bridge0: port 3(team0) entered disabled state CPU: 0 PID: 10811 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 tfrc_rx_hist_sample_rtt.cold+0x57/0x5c net/dccp/ccids/lib/packet_history.c:422 ccid3_hc_rx_packet_recv+0x5be/0xe90 net/dccp/ccids/ccid3.c:767 ccid_hc_rx_packet_recv net/dccp/ccid.h:185 [inline] dccp_deliver_input_to_ccids+0xe1/0x260 net/dccp/input.c:180 dccp_rcv_established net/dccp/input.c:378 [inline] dccp_rcv_established+0x107/0x160 net/dccp/input.c:368 dccp_v4_do_rcv+0x136/0x1a0 net/dccp/ipv4.c:656 sk_backlog_rcv include/net/sock.h:952 [inline] __release_sock+0x134/0x3a0 net/core/sock.c:2362 release_sock+0x54/0x1b0 net/core/sock.c:2901 dccp_sendmsg+0x639/0xc90 net/dccp/proto.c:818 inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798 sock_sendmsg_nosec net/socket.c:651 [inline] sock_sendmsg+0xc3/0x120 net/socket.c:661 ___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227 __sys_sendmmsg+0x195/0x470 net/socket.c:2322 __do_sys_sendmmsg net/socket.c:2351 [inline] __se_sys_sendmmsg net/socket.c:2348 [inline] __x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fce7632a109 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fce74c9f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00007fce7643cf60 RCX: 00007fce7632a109 RDX: 0000000000000002 RSI: 0000000020000580 RDI: 0000000000000006 RBP: 00007fce7638405d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000804 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffcf808bf1f R14: 00007fce74c9f300 R15: 0000000000022000 8021q: adding VLAN 0 to HW filter on device team0 bond0: Enslaving team0 as an active interface with an up link netlink: 'syz-executor.4': attribute type 10 has an invalid length. bond0: Releasing backup interface team0 dccp_close: ABORT with 18 bytes unread dccp_close: ABORT with 6461 bytes unread audit: type=1800 audit(1657467239.080:2): pid=10972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=14045 res=0 audit: type=1804 audit(1657467239.150:3): pid=10973 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1515725438/syzkaller.uyWJl3/21/file0" dev="sda1" ino=14045 res=1 audit: type=1804 audit(1657467239.180:4): pid=10973 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir1515725438/syzkaller.uyWJl3/21/file0" dev="sda1" ino=14045 res=1 audit: type=1800 audit(1657467239.950:5): pid=10981 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=14030 res=0 audit: type=1804 audit(1657467240.010:6): pid=10982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1515725438/syzkaller.uyWJl3/22/file0" dev="sda1" ino=14030 res=1 audit: type=1804 audit(1657467240.030:7): pid=10982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir1515725438/syzkaller.uyWJl3/22/file0" dev="sda1" ino=14030 res=1 bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered disabled state device team0 entered promiscuous mode device team_slave_0 entered promiscuous mode device team_slave_1 entered promiscuous mode syz-executor.4 (10840) used greatest stack depth: 23184 bytes left netlink: 'syz-executor.4': attribute type 10 has an invalid length. device team0 left promiscuous mode device team_slave_0 left promiscuous mode device team_slave_1 left promiscuous mode bridge0: port 3(team0) entered disabled state 8021q: adding VLAN 0 to HW filter on device team0 bond0: Enslaving team0 as an active interface with an up link netlink: 'syz-executor.4': attribute type 10 has an invalid length. bond0: Releasing backup interface team0 bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered disabled state device team0 entered promiscuous mode device team_slave_0 entered promiscuous mode device team_slave_1 entered promiscuous mode netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. IPVS: ftp: loaded support on port[0] = 21 audit: type=1800 audit(1657467242.500:8): pid=11067 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=14000 res=0 audit: type=1804 audit(1657467242.500:9): pid=11079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1515725438/syzkaller.uyWJl3/23/file0" dev="sda1" ino=14000 res=1 audit: type=1804 audit(1657467242.500:10): pid=11079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1515725438/syzkaller.uyWJl3/23/file0" dev="sda1" ino=14000 res=1 netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. audit: type=1804 audit(1657467242.500:11): pid=11079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1515725438/syzkaller.uyWJl3/23/file0" dev="sda1" ino=14000 res=1 netlink: 'syz-executor.2': attribute type 27 has an invalid length. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. IPVS: ftp: loaded support on port[0] = 21 EXT4-fs (loop0): Unrecognized mount option "00000000000000000000005" or missing value EXT4-fs (loop0): Unrecognized mount option "00000000000000000000005" or missing value IPVS: ftp: loaded support on port[0] = 21 FAT-fs (loop1): bogus number of reserved sectors FAT-fs (loop1): Can't find a valid FAT filesystem netlink: 'syz-executor.4': attribute type 1 has an invalid length. EXT4-fs (loop0): Unrecognized mount option "00000000000000000000005" or missing value IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready EXT4-fs (loop0): Unrecognized mount option "00000000000000000000005" or missing value 8021q: adding VLAN 0 to HW filter on device bond1 FAT-fs (loop1): bogus number of reserved sectors FAT-fs (loop1): Can't find a valid FAT filesystem netlink: 'syz-executor.4': attribute type 1 has an invalid length. IPv6: ADDRCONF(NETDEV_UP): bond2: link is not ready 8021q: adding VLAN 0 to HW filter on device bond2 IPVS: ftp: loaded support on port[0] = 21 FAT-fs (loop1): bogus number of reserved sectors FAT-fs (loop1): Can't find a valid FAT filesystem IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 1, id = 0 netlink: 'syz-executor.4': attribute type 1 has an invalid length. IPv6: ADDRCONF(NETDEV_UP): bond3: link is not ready 8021q: adding VLAN 0 to HW filter on device bond3 IPVS: Unknown mcast interface: ÿÿÿÿ0_macvtap IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 1, id = 0 netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. BFS-fs: bfs_fill_super(): loop1 is unclean, continuing BFS-fs: bfs_fill_super(): Last block not available: 63 __ntfs_error: 111 callbacks suppressed ntfs: (device loop3): parse_options(): Unrecognized mount option uid>18446744073709551615. ntfs: (device loop3): parse_options(): Unrecognized mount option fsname. BFS-fs: bfs_fill_super(): loop1 is unclean, continuing ntfs: (device loop3): parse_options(): Unrecognized mount option . BFS-fs: bfs_fill_super(): Last block not available: 63 netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue audit: type=1326 audit(1657467246.791:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11845 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7632a109 code=0x7ffc0000 BFS-fs: bfs_fill_super(): loop1 is unclean, continuing BFS-fs: bfs_fill_super(): Last block not available: 63 audit: type=1326 audit(1657467246.821:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11845 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7632a109 code=0x7ffc0000 audit: type=1326 audit(1657467246.881:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11845 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fce7632a109 code=0x7ffc0000