[....] Starting enhanced syslogd: rsyslogd[ 13.423460] audit: type=1400 audit(1512675194.731:5): avc: denied { syslog } for pid=3000 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 28.154869] audit: type=1400 audit(1512675209.462:6): avc: denied { map } for pid=3142 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added 'ci-upstream-next-kasan-gce-2,10.128.0.13' (ECDSA) to the list of known hosts. [ 50.640636] audit: type=1400 audit(1512675231.948:7): avc: denied { map } for pid=3156 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2017/12/07 19:33:52 parsed 1 programs 2017/12/07 19:33:52 executed programs: 0 [ 51.119863] audit: type=1400 audit(1512675232.427:8): avc: denied { map } for pid=3156 comm="syz-execprog" path="/root/syzkaller-shm334785579" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 51.181177] netlink: 2 bytes leftover after parsing attributes in process `syz-executor0'. [ 51.193601] netlink: 2 bytes leftover after parsing attributes in process `syz-executor4'. [ 51.202133] audit: type=1400 audit(1512675232.509:9): avc: denied { name_bind } for pid=3169 comm="syz-executor0" src=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 51.202148] audit: type=1400 audit(1512675232.509:10): avc: denied { node_bind } for pid=3169 comm="syz-executor0" src=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 51.229132] audit: type=1400 audit(1512675232.533:11): avc: denied { name_connect } for pid=3169 comm="syz-executor0" dest=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 51.274192] netlink: 2 bytes leftover after parsing attributes in process `syz-executor0'. [ 51.287487] netlink: 2 bytes leftover after parsing attributes in process `syz-executor4'. [ 51.303349] netlink: 2 bytes leftover after parsing attributes in process `syz-executor1'. [ 51.314617] dccp_close: ABORT with 36 bytes unread [ 51.324938] netlink: 2 bytes leftover after parsing attributes in process `syz-executor0'. [ 51.339285] netlink: 2 bytes leftover after parsing attributes in process `syz-executor2'. [ 51.352858] netlink: 2 bytes leftover after parsing attributes in process `syz-executor5'. [ 51.355838] dccp_close: ABORT with 36 bytes unread [ 51.370763] netlink: 2 bytes leftover after parsing attributes in process `syz-executor0'. [ 51.379452] netlink: 2 bytes leftover after parsing attributes in process `syz-executor1'. [ 51.407620] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:425/tfrc_rx_hist_sample_rtt() [ 51.420922] CPU: 1 PID: 3194 Comm: syz-executor1 Not tainted 4.15.0-rc2-next-20171207+ #62 [ 51.429296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.438631] Call Trace: [ 51.441187] [ 51.443316] dump_stack+0x194/0x257 [ 51.446919] ? arch_local_irq_restore+0x53/0x53 [ 51.451563] ? tfrc_rx_handle_loss+0xb38/0x24d0 [ 51.456206] ? __lock_is_held+0xbc/0x140 [ 51.456261] dccp_close: ABORT with 36 bytes unread [ 51.465143] tfrc_rx_hist_sample_rtt+0x407/0x4d0 [ 51.469876] ccid3_hc_rx_packet_recv+0x690/0xea7 [ 51.474602] ? dccp_parse_options+0x3d8/0x1030 [ 51.479163] ? ccid3_hc_tx_packet_recv+0xd20/0xd20 [ 51.484067] dccp_deliver_input_to_ccids+0xd9/0x250 [ 51.486451] dccp_close: ABORT with 36 bytes unread [ 51.486677] dccp_close: ABORT with 36 bytes unread [ 51.498852] dccp_rcv_established+0x88/0xb0 [ 51.503151] dccp_v4_do_rcv+0x12f/0x160 [ 51.507101] __sk_receive_skb+0x33e/0xc10 [ 51.511228] ? sk_free+0x40/0x40 [ 51.514571] ? inet_lhash2_lookup+0x4b0/0x4b0 [ 51.519045] ? skb_send_sock+0x50/0x50 [ 51.522916] ? dccp_invalid_packet+0x55/0x7c0 [ 51.527385] ? __lock_acquire+0x324e/0x47f0 [ 51.531685] dccp_v4_rcv+0xeeb/0x1bf0 [ 51.535471] ? dccp_v4_err+0x1550/0x1550 [ 51.539511] ? find_held_lock+0x39/0x1d0 [ 51.540070] dccp_close: ABORT with 36 bytes unread [ 51.548445] ? lock_release+0xda0/0xda0 [ 51.552396] ? __lock_is_held+0xbc/0x140 [ 51.556451] ip_local_deliver_finish+0x2e2/0xba0 [ 51.561193] ? inet_del_offload+0x40/0x40 [ 51.565343] ip_local_deliver+0x1ce/0x6e0 [ 51.569480] ? ip_call_ra_chain+0x6d0/0x6d0 [ 51.570772] dccp_close: ABORT with 36 bytes unread [ 51.578769] ? __lock_acquire+0x6e9/0x47f0 [ 51.582977] ? unwind_get_return_address+0x61/0xa0 [ 51.585970] dccp_close: ABORT with 36 bytes unread [ 51.592789] ? check_noncircular+0x20/0x20 [ 51.597005] ip_rcv_finish+0x881/0x19a0 [ 51.600968] ? ip_local_deliver_finish+0xba0/0xba0 [ 51.604726] dccp_close: ABORT with 36 bytes unread [ 51.610771] ? lock_downgrade+0x980/0x980 [ 51.614893] ? ip_rcv+0xc80/0x1820 [ 51.618409] ? update_stack_state+0x225/0x700 [ 51.622878] ? lock_release+0xda0/0xda0 [ 51.626827] ? __lock_is_held+0xbc/0x140 [ 51.630890] ip_rcv+0xc3f/0x1820 [ 51.634248] ? ip_local_deliver+0x6e0/0x6e0 [ 51.638550] ? find_held_lock+0x39/0x1d0 [ 51.642588] ? __lock_is_held+0xbc/0x140 [ 51.646628] ? ip_local_deliver+0x6e0/0x6e0 [ 51.650927] __netif_receive_skb_core+0x1a3e/0x3450 [ 51.655933] ? nf_ingress+0x9f0/0x9f0 [ 51.659724] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 51.664899] ? __read_once_size_nocheck.constprop.8+0x10/0x10 [ 51.670756] ? unwind_next_frame+0x3e/0x50 [ 51.674965] ? update_curr+0x47b/0xa60 [ 51.678824] ? save_stack_trace+0x1a/0x20 [ 51.682950] ? unwind_next_frame.part.6+0x1a6/0xb40 [ 51.687951] ? unwind_next_frame.part.6+0x1a6/0xb40 [ 51.689184] dccp_close: ABORT with 36 bytes unread [ 51.697841] ? unwind_dump+0x4d0/0x4d0 [ 51.701705] ? check_noncircular+0x20/0x20 [ 51.705910] ? check_noncircular+0x20/0x20 [ 51.710136] ? update_curr+0x2e3/0xa60 [ 51.713995] ? __enqueue_entity+0x109/0x1e0 [ 51.718294] ? __unwind_start+0x169/0x330 [ 51.722419] ? unwind_get_return_address+0x61/0xa0 [ 51.727329] ? find_held_lock+0x39/0x1d0 [ 51.731385] ? print_usage_bug+0x3f0/0x3f0 [ 51.735603] ? lock_acquire+0x1d5/0x580 [ 51.739558] ? process_backlog+0x1ab/0x740 [ 51.743773] ? lock_release+0xda0/0xda0 [ 51.747731] __netif_receive_skb+0x2c/0x1b0 [ 51.752027] ? __netif_receive_skb+0x2c/0x1b0 [ 51.756500] process_backlog+0x203/0x740 [ 51.760535] ? mark_held_locks+0xb2/0x100 [ 51.764668] net_rx_action+0x792/0x1910 [ 51.768628] ? napi_complete_done+0x6c0/0x6c0 [ 51.773097] ? trace_hardirqs_off+0xd/0x10 [ 51.777310] ? _raw_spin_unlock_irqrestore+0xa6/0xba [ 51.782395] ? try_to_wake_up+0xf9/0x1600 [ 51.786529] ? check_noncircular+0x20/0x20 [ 51.790737] ? check_noncircular+0x20/0x20 [ 51.794953] ? lock_acquire+0x1d5/0x580 [ 51.798904] ? __hrtimer_run_queues+0x385/0xe10 [ 51.803554] ? lock_release+0xda0/0xda0 [ 51.807503] ? find_held_lock+0x39/0x1d0 [ 51.811548] ? lock_downgrade+0x980/0x980 [ 51.815671] ? lock_acquire+0x1d5/0x580 [ 51.819617] ? clockevents_program_event+0x163/0x2e0 [ 51.824690] ? lock_downgrade+0x980/0x980 [ 51.828823] ? pvclock_read_flags+0x160/0x160 [ 51.833299] ? find_held_lock+0x39/0x1d0 [ 51.837343] ? check_noncircular+0x20/0x20 [ 51.841560] ? print_usage_bug+0x3f0/0x3f0 [ 51.845768] ? ktime_get_resolution_ns+0x300/0x300 [ 51.850680] ? check_noncircular+0x20/0x20 [ 51.854896] ? do_timer+0x50/0x50 [ 51.858326] ? __lock_is_held+0xbc/0x140 [ 51.862373] __do_softirq+0x29d/0xbb2 [ 51.866146] ? task_prio+0x40/0x40 [ 51.869668] ? __irqentry_text_end+0x1f8db4/0x1f8db4 [ 51.874741] ? irq_exit+0x103/0x210 [ 51.878338] ? smp_apic_timer_interrupt+0x16b/0x700 [ 51.883323] ? smp_reschedule_interrupt+0xe6/0x670 [ 51.888224] ? smp_call_function_single_interrupt+0x640/0x640 [ 51.894084] ? _raw_spin_lock+0x32/0x40 [ 51.898037] ? _raw_spin_unlock+0x22/0x30 [ 51.902160] ? handle_edge_irq+0x2b4/0x7c0 [ 51.906380] ? task_prio+0x40/0x40 [ 51.909995] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.914814] do_softirq_own_stack+0x2a/0x40 [ 51.919104] [ 51.921312] do_softirq.part.19+0x14d/0x190 [ 51.925607] ? ip_finish_output2+0x874/0x1460 [ 51.930074] __local_bh_enable_ip+0x1ee/0x230 [ 51.934543] ip_finish_output2+0x8a7/0x1460 [ 51.938839] ? check_noncircular+0x20/0x20 [ 51.943049] ? dst_output+0x140/0x140 [ 51.946824] ? check_noncircular+0x20/0x20 [ 51.951038] ? ip_route_input_noref+0x1e0/0x1e0 [ 51.955680] ? __save_stack_trace+0x61/0xd0 [ 51.959976] ? xfrm_lookup+0x71a/0x23e0 [ 51.963926] ? ipv4_mtu+0x28c/0x3d0 [ 51.967534] ? __lock_is_held+0xbc/0x140 [ 51.971587] ip_finish_output+0x85e/0xd10 [ 51.975707] ? ip_finish_output+0x85e/0xd10 [ 51.980003] ? ip_fragment.constprop.49+0x200/0x200 [ 51.984999] ? nf_hook_slow+0xd3/0x1a0 [ 51.988865] ip_output+0x1cc/0x860 [ 51.992382] ? ip_mc_output+0x1340/0x1340 [ 51.996515] ? ip_fragment.constprop.49+0x200/0x200 [ 52.001520] ip_local_out+0x95/0x160 [ 52.005212] ip_queue_xmit+0x8c0/0x18e0 [ 52.009167] ? ip_build_and_send_pkt+0xc30/0xc30 [ 52.013891] ? skb_send_sock+0x50/0x50 [ 52.017746] ? reqsk_fastopen_remove+0x5e1/0x610 [ 52.022473] ? dccp_insert_option_padding+0xad/0xd0 [ 52.027468] ? dccp_insert_options+0x20f/0xcf0 [ 52.032025] ? dccp_v4_send_check+0x181/0x3b0 [ 52.036497] dccp_transmit_skb+0x9ac/0x10f0 [ 52.040807] dccp_xmit_packet+0x20f/0x730 [ 52.044929] ? dccp_send_ack+0x350/0x350 [ 52.048964] ? ccid3_hc_tx_send_packet+0x2de/0x840 [ 52.053881] dccp_write_xmit+0x17d/0x1d0 [ 52.057919] dccp_sendmsg+0x6d0/0xa80 [ 52.061691] ? lock_downgrade+0x980/0x980 [ 52.065814] ? avc_has_perm+0xd0/0x680 [ 52.069675] ? compat_dccp_getsockopt+0x70/0x70 [ 52.074318] ? sock_has_perm+0x29c/0x400 [ 52.078355] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 52.083691] ? lock_release+0xda0/0xda0 [ 52.087644] inet_sendmsg+0x11f/0x5e0 [ 52.091416] ? inet_recvmsg+0x5f0/0x5f0 [ 52.095367] ? selinux_socket_sendmsg+0x36/0x40 [ 52.100008] ? security_socket_sendmsg+0x89/0xb0 [ 52.104736] ? inet_recvmsg+0x5f0/0x5f0 [ 52.108683] sock_sendmsg+0xca/0x110 [ 52.112372] sock_write_iter+0x320/0x5e0 [ 52.116406] ? sock_sendmsg+0x110/0x110 [ 52.120362] ? iov_iter_init+0xaf/0x1d0 [ 52.124320] __vfs_write+0x68a/0x970 [ 52.128009] ? kernel_read+0x120/0x120 [ 52.131866] ? bpf_fd_pass+0x280/0x280 [ 52.135726] ? _cond_resched+0x14/0x30 [ 52.139610] ? selinux_file_permission+0x82/0x460 [ 52.144447] ? rw_verify_area+0xe5/0x2b0 [ 52.148480] ? __fdget_raw+0x20/0x20 [ 52.152172] vfs_write+0x18f/0x510 [ 52.155690] SyS_write+0xef/0x220 [ 52.159120] ? SyS_read+0x220/0x220 [ 52.162715] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 52.167703] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 52.172441] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 52.177168] RIP: 0033:0x452a39 [ 52.180328] RSP: 002b:00007f3b32184c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000001 [ 52.188018] RAX: ffffffffffffffda RBX: 00000000007580d8 RCX: 0000000000452a39 [ 52.195261] RDX: 000000000000005a RSI: 000000002077f000 RDI: 0000000000000005 [ 52.202504] RBP: 000000000000004e R08: 0000000000000000 R09: 0000000000000000 [ 52.209743] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ed7f0 [ 52.216985] R13: 00000000ffffffff R14: 00007f3b321856d4 R15: 0000000000000009 [ 52.323045] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:425/tfrc_rx_hist_sample_rtt() [ 52.336443] CPU: 0 PID: 3285 Comm: syz-executor2 Not tainted 4.15.0-rc2-next-20171207+ #62 [ 52.344830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.354158] Call Trace: [ 52.356711] [ 52.358845] dump_stack+0x194/0x257 [ 52.362537] ? arch_local_irq_restore+0x53/0x53 [ 52.367190] ? tfrc_rx_handle_loss+0xb38/0x24d0 [ 52.371848] ? __lock_is_held+0xbc/0x140 [ 52.375893] tfrc_rx_hist_sample_rtt+0x407/0x4d0 [ 52.379033] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:425/tfrc_rx_hist_sample_rtt() [ 52.393768] ccid3_hc_rx_packet_recv+0x690/0xea7 [ 52.398493] ? dccp_parse_options+0x3d8/0x1030 [ 52.403056] ? ccid3_hc_tx_packet_recv+0xd20/0xd20 [ 52.407972] dccp_deliver_input_to_ccids+0xd9/0x250 [ 52.412965] dccp_rcv_established+0x88/0xb0 [ 52.417263] dccp_v4_do_rcv+0x12f/0x160 [ 52.421218] __sk_receive_skb+0x33e/0xc10 [ 52.425345] ? sk_free+0x40/0x40 [ 52.428692] ? inet_lhash2_lookup+0x4b0/0x4b0 [ 52.433161] ? skb_send_sock+0x50/0x50 [ 52.437024] ? print_usage_bug+0x3f0/0x3f0 [ 52.441237] ? dccp_invalid_packet+0x55/0x7c0 [ 52.445712] dccp_v4_rcv+0xeeb/0x1bf0 [ 52.449499] ? dccp_v4_err+0x1550/0x1550 [ 52.453531] ? find_held_lock+0x39/0x1d0 [ 52.457573] ? lock_release+0xda0/0xda0 [ 52.461523] ? __lock_is_held+0xbc/0x140 [ 52.465572] ip_local_deliver_finish+0x2e2/0xba0 [ 52.470305] ? inet_del_offload+0x40/0x40 [ 52.474435] ip_local_deliver+0x1ce/0x6e0 [ 52.478576] ? ip_call_ra_chain+0x6d0/0x6d0 [ 52.482878] ? __lock_acquire+0x6e9/0x47f0 [ 52.487087] ? check_noncircular+0x20/0x20 [ 52.491301] ip_rcv_finish+0x881/0x19a0 [ 52.495255] ? ip_local_deliver_finish+0xba0/0xba0 [ 52.500166] ? lock_downgrade+0x980/0x980 [ 52.504373] ? ip_rcv+0xc80/0x1820 [ 52.507888] ? update_stack_state+0x225/0x700 [ 52.512360] ? lock_release+0xda0/0xda0 [ 52.516311] ? __lock_is_held+0xbc/0x140 [ 52.520365] ip_rcv+0xc3f/0x1820 [ 52.523710] ? ip_local_deliver+0x6e0/0x6e0 [ 52.528008] ? find_held_lock+0x39/0x1d0 [ 52.532045] ? __lock_is_held+0xbc/0x140 [ 52.536087] ? ip_local_deliver+0x6e0/0x6e0 [ 52.540387] __netif_receive_skb_core+0x1a3e/0x3450 [ 52.545384] ? nf_ingress+0x9f0/0x9f0 [ 52.549172] ? update_stack_state+0x225/0x700 [ 52.553655] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 52.558818] ? unwind_next_frame.part.6+0x1a6/0xb40 [ 52.563810] ? unwind_next_frame.part.6+0x1a6/0xb40 [ 52.568827] ? unwind_dump+0x4d0/0x4d0 [ 52.572691] ? unwind_next_frame.part.6+0x1a6/0xb40 [ 52.577681] ? unwind_dump+0x4d0/0x4d0 [ 52.581547] ? check_noncircular+0x20/0x20 [ 52.585754] ? check_noncircular+0x20/0x20 [ 52.589966] ? __kernel_text_address+0xd/0x40 [ 52.594436] ? unwind_get_return_address+0x61/0xa0 [ 52.599342] ? __save_stack_trace+0x61/0xd0 [ 52.603645] ? ip_finish_output2+0x8a7/0x1460 [ 52.608117] ? find_held_lock+0x39/0x1d0 [ 52.612157] ? print_usage_bug+0x3f0/0x3f0 [ 52.616369] ? lock_acquire+0x1d5/0x580 [ 52.620319] ? process_backlog+0x1ab/0x740 [ 52.624529] ? lock_release+0xda0/0xda0 [ 52.628488] __netif_receive_skb+0x2c/0x1b0 [ 52.632868] ? __netif_receive_skb+0x2c/0x1b0 [ 52.637360] process_backlog+0x203/0x740 [ 52.641390] ? mark_held_locks+0xb2/0x100 [ 52.645525] net_rx_action+0x792/0x1910 [ 52.649485] ? napi_complete_done+0x6c0/0x6c0 [ 52.653956] ? mark_held_locks+0xb2/0x100 [ 52.658081] ? cpu_needs_another_gp+0x69e/0x8d0 [ 52.662722] ? check_noncircular+0x20/0x20 [ 52.666933] ? print_usage_bug+0x3f0/0x3f0 [ 52.671143] ? synchronize_rcu_expedited+0x10/0x10 [ 52.676047] ? rcu_accelerate_cbs+0x196/0x970 [ 52.680517] ? lock_release+0xda0/0xda0 [ 52.684465] ? __lock_is_held+0xbc/0x140 [ 52.688510] ? rcu_read_lock_sched_held+0x108/0x120 [ 52.693514] ? rcu_process_callbacks+0x3a0/0x17d0 [ 52.698339] ? note_gp_changes+0x650/0x650 [ 52.702555] ? pvclock_read_flags+0x160/0x160 [ 52.707023] ? find_held_lock+0x39/0x1d0 [ 52.711066] ? check_noncircular+0x20/0x20 [ 52.715274] ? print_usage_bug+0x3f0/0x3f0 [ 52.719484] ? ktime_get_resolution_ns+0x300/0x300 [ 52.724477] ? do_timer+0x50/0x50 [ 52.727906] ? __lock_is_held+0xbc/0x140 [ 52.731955] __do_softirq+0x29d/0xbb2 [ 52.735726] ? task_prio+0x40/0x40 [ 52.739245] ? __irqentry_text_end+0x1f8db4/0x1f8db4 [ 52.744322] ? irq_exit+0x103/0x210 [ 52.747923] ? smp_apic_timer_interrupt+0x16b/0x700 [ 52.752907] ? smp_reschedule_interrupt+0xe6/0x670 [ 52.757807] ? smp_call_function_single_interrupt+0x640/0x640 [ 52.763759] ? _raw_spin_lock+0x32/0x40 [ 52.767707] ? _raw_spin_unlock+0x22/0x30 [ 52.771831] ? handle_edge_irq+0x2b4/0x7c0 [ 52.776047] ? task_prio+0x40/0x40 [ 52.779576] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.784490] do_softirq_own_stack+0x2a/0x40 [ 52.788779] [ 52.790994] do_softirq.part.19+0x14d/0x190 [ 52.795295] ? ip_finish_output2+0x874/0x1460 [ 52.799763] __local_bh_enable_ip+0x1ee/0x230 [ 52.804230] ip_finish_output2+0x8a7/0x1460 [ 52.808523] ? check_noncircular+0x20/0x20 [ 52.812738] ? dst_output+0x140/0x140 [ 52.816508] ? check_noncircular+0x20/0x20 [ 52.820719] ? ip_route_input_noref+0x1e0/0x1e0 [ 52.825365] ? __save_stack_trace+0x61/0xd0 [ 52.829656] ? xfrm_lookup+0x71a/0x23e0 [ 52.833604] ? ipv4_mtu+0x28c/0x3d0 [ 52.837207] ? __lock_is_held+0xbc/0x140 [ 52.841259] ip_finish_output+0x85e/0xd10 [ 52.845380] ? ip_finish_output+0x85e/0xd10 [ 52.849684] ? ip_fragment.constprop.49+0x200/0x200 [ 52.854680] ? nf_hook_slow+0xd3/0x1a0 [ 52.858542] ip_output+0x1cc/0x860 [ 52.862056] ? ip_mc_output+0x1340/0x1340 [ 52.866191] ? ip_fragment.constprop.49+0x200/0x200 [ 52.871195] ip_local_out+0x95/0x160 [ 52.874884] ip_queue_xmit+0x8c0/0x18e0 [ 52.878836] ? ip_build_and_send_pkt+0xc30/0xc30 [ 52.883562] ? skb_send_sock+0x50/0x50 [ 52.887419] ? reqsk_fastopen_remove+0x5e1/0x610 [ 52.892152] ? dccp_insert_option_padding+0xad/0xd0 [ 52.898442] ? dccp_insert_options+0x20f/0xcf0 [ 52.903009] ? dccp_v4_send_check+0x181/0x3b0 [ 52.907492] dccp_transmit_skb+0x9ac/0x10f0 [ 52.911795] dccp_xmit_packet+0x20f/0x730 [ 52.915922] ? dccp_send_ack+0x350/0x350 [ 52.919958] ? ccid3_hc_tx_send_packet+0x2de/0x840 [ 52.924864] dccp_write_xmit+0x17d/0x1d0 [ 52.928909] dccp_sendmsg+0x6d0/0xa80 [ 52.932690] ? lock_downgrade+0x980/0x980 [ 52.936813] ? avc_has_perm+0xd0/0x680 [ 52.940676] ? compat_dccp_getsockopt+0x70/0x70 [ 52.945317] ? sock_has_perm+0x29c/0x400 [ 52.949354] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 52.954688] ? lock_release+0xda0/0xda0 [ 52.958641] inet_sendmsg+0x11f/0x5e0 [ 52.962416] ? inet_recvmsg+0x5f0/0x5f0 [ 52.966374] ? selinux_socket_sendmsg+0x36/0x40 [ 52.971015] ? security_socket_sendmsg+0x89/0xb0 [ 52.975747] ? inet_recvmsg+0x5f0/0x5f0 [ 52.979704] sock_sendmsg+0xca/0x110 [ 52.983400] sock_write_iter+0x320/0x5e0 [ 52.987440] ? sock_sendmsg+0x110/0x110 [ 52.991399] ? iov_iter_init+0xaf/0x1d0 [ 52.995351] __vfs_write+0x68a/0x970 [ 52.999046] ? kernel_read+0x120/0x120 [ 53.002995] ? bpf_fd_pass+0x280/0x280 [ 53.006860] ? _cond_resched+0x14/0x30 [ 53.010728] ? selinux_file_permission+0x82/0x460 [ 53.015550] ? rw_verify_area+0xe5/0x2b0 [ 53.019583] ? __fdget_raw+0x20/0x20 [ 53.023271] vfs_write+0x18f/0x510 [ 53.026784] SyS_write+0xef/0x220 [ 53.030209] ? SyS_read+0x220/0x220 [ 53.033806] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 53.038799] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 53.043536] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 53.048267] RIP: 0033:0x452a39 [ 53.051427] RSP: 002b:00007fd766d88c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000001 [ 53.059119] RAX: ffffffffffffffda RBX: 00007fd766d89700 RCX: 0000000000452a39 [ 53.066359] RDX: 000000000000005a RSI: 000000002077f000 RDI: 0000000000000005 [ 53.073599] RBP: 00007ffd438c3910 R08: 0000000000000000 R09: 0000000000000000 [ 53.081562] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000 [ 53.088806] R13: 00007ffd438c388f R14: 00007fd766d899c0 R15: 000000000000000a [ 53.096081] CPU: 1 PID: 3271 Comm: syz-executor6 Not tainted 4.15.0-rc2-next-20171207+ #62 [ 53.104499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.113829] Call Trace: [ 53.116383] [ 53.118515] dump_stack+0x194/0x257 [ 53.122127] ? arch_local_irq_restore+0x53/0x53 [ 53.126774] ? tfrc_rx_handle_loss+0xb38/0x24d0 [ 53.131419] ? __lock_is_held+0xbc/0x140 [ 53.135459] tfrc_rx_hist_sample_rtt+0x407/0x4d0 [ 53.140193] ccid3_hc_rx_packet_recv+0x690/0xea7 [ 53.145441] ? dccp_parse_options+0x3d8/0x1030 [ 53.150003] ? ccid3_hc_tx_packet_recv+0xd20/0xd20 [ 53.154904] dccp_deliver_input_to_ccids+0xd9/0x250 [ 53.159894] dccp_rcv_established+0x88/0xb0 [ 53.164190] dccp_v4_do_rcv+0x12f/0x160 [ 53.168143] __sk_receive_skb+0x33e/0xc10 [ 53.172270] ? sk_free+0x40/0x40 [ 53.175613] ? inet_lhash2_lookup+0x4b0/0x4b0 [ 53.180079] ? skb_send_sock+0x50/0x50 [ 53.183942] ? refcount_sub_and_test+0x115/0x1b0 [ 53.188685] ? dccp_invalid_packet+0x55/0x7c0 [ 53.193159] dccp_v4_rcv+0xeeb/0x1bf0 [ 53.196944] ? dccp_v4_err+0x1550/0x1550 [ 53.200975] ? find_held_lock+0x39/0x1d0 [ 53.205020] ? lock_release+0xda0/0xda0 [ 53.208969] ? __lock_is_held+0xbc/0x140 [ 53.213014] ip_local_deliver_finish+0x2e2/0xba0 [ 53.217747] ? inet_del_offload+0x40/0x40 [ 53.221879] ip_local_deliver+0x1ce/0x6e0 [ 53.226001] ? ip_call_ra_chain+0x6d0/0x6d0 [ 53.230301] ? __lock_acquire+0x6e9/0x47f0 [ 53.234513] ? check_noncircular+0x20/0x20 [ 53.238727] ip_rcv_finish+0x881/0x19a0 [ 53.242681] ? ip_local_deliver_finish+0xba0/0xba0 [ 53.247762] ? lock_downgrade+0x980/0x980 [ 53.251883] ? ip_rcv+0xc80/0x1820 [ 53.255408] ? update_stack_state+0x225/0x700 [ 53.259876] ? lock_release+0xda0/0xda0 [ 53.263827] ? __lock_is_held+0xbc/0x140 [ 53.267891] ip_rcv+0xc3f/0x1820 [ 53.271237] ? ip_local_deliver+0x6e0/0x6e0 [ 53.275535] ? print_usage_bug+0x3f0/0x3f0 [ 53.279742] ? print_usage_bug+0x3f0/0x3f0 [ 53.283948] ? find_held_lock+0x39/0x1d0 [ 53.288011] ? __lock_is_held+0xbc/0x140 [ 53.292069] ? ip_local_deliver+0x6e0/0x6e0 [ 53.296380] __netif_receive_skb_core+0x1a3e/0x3450 [ 53.301399] ? nf_ingress+0x9f0/0x9f0 [ 53.305207] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 53.310375] ? __read_once_size_nocheck.constprop.8+0x10/0x10 [ 53.316236] ? ___might_sleep+0x35e/0x470 [ 53.320369] ? __update_load_avg_se.isra.27+0x56a/0x7c0 [ 53.325720] ? unwind_next_frame.part.6+0x1a6/0xb40 [ 53.330719] ? unwind_next_frame.part.6+0x1a6/0xb40 [ 53.335711] ? unwind_dump+0x4d0/0x4d0 [ 53.339574] ? update_cfs_rq_load_avg.part.69+0x2d0/0x2d0 [ 53.345105] ? check_noncircular+0x20/0x20 [ 53.349319] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 53.354492] ? __unwind_start+0x169/0x330 [ 53.358618] ? unwind_get_return_address+0x61/0xa0 [ 53.363528] ? find_held_lock+0x39/0x1d0 [ 53.367574] ? print_usage_bug+0x3f0/0x3f0 [ 53.371790] ? lock_acquire+0x1d5/0x580 [ 53.375741] ? process_backlog+0x1ab/0x740 [ 53.379958] ? lock_release+0xda0/0xda0 [ 53.383921] __netif_receive_skb+0x2c/0x1b0 [ 53.388217] ? __netif_receive_skb+0x2c/0x1b0 [ 53.392690] process_backlog+0x203/0x740 [ 53.396725] ? mark_held_locks+0xb2/0x100 [ 53.400863] net_rx_action+0x792/0x1910 [ 53.404829] ? napi_complete_done+0x6c0/0x6c0 [ 53.409306] ? cpu_load_update_nohz_stop+0x2e0/0x2e0 [ 53.414398] ? do_raw_spin_trylock+0x190/0x190 [ 53.418963] ? check_noncircular+0x20/0x20 [ 53.423176] ? __lock_is_held+0xbc/0x140 [ 53.427221] ? timerqueue_add+0x1e9/0x280 [ 53.431440] ? enqueue_hrtimer+0x162/0x490 [ 53.435653] ? find_held_lock+0x39/0x1d0 [ 53.439707] ? lock_downgrade+0x980/0x980 [ 53.443831] ? lock_acquire+0x1d5/0x580 [ 53.447783] ? clockevents_program_event+0x163/0x2e0 [ 53.452865] ? lock_downgrade+0x980/0x980 [ 53.457000] ? pvclock_read_flags+0x160/0x160 [ 53.461486] ? find_held_lock+0x39/0x1d0 [ 53.465532] ? check_noncircular+0x20/0x20 [ 53.469746] ? print_usage_bug+0x3f0/0x3f0 [ 53.473964] ? ktime_get_resolution_ns+0x300/0x300 [ 53.478874] ? check_noncircular+0x20/0x20 [ 53.483085] ? do_timer+0x50/0x50 [ 53.487181] ? __lock_is_held+0xbc/0x140 [ 53.491249] __do_softirq+0x29d/0xbb2 [ 53.495031] ? task_prio+0x40/0x40 [ 53.498555] ? __irqentry_text_end+0x1f8db4/0x1f8db4 [ 53.503634] ? irq_exit+0x103/0x210 [ 53.507241] ? smp_apic_timer_interrupt+0x16b/0x700 [ 53.512231] ? smp_reschedule_interrupt+0xe6/0x670 [ 53.517144] ? smp_call_function_single_interrupt+0x640/0x640 [ 53.523009] ? _raw_spin_lock+0x32/0x40 [ 53.526970] ? _raw_spin_unlock+0x22/0x30 [ 53.531098] ? handle_edge_irq+0x2b4/0x7c0 [ 53.535313] ? task_prio+0x40/0x40 [ 53.538842] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 53.543674] do_softirq_own_stack+0x2a/0x40 [ 53.547968] [ 53.550181] do_softirq.part.19+0x14d/0x190 [ 53.554478] ? ip_finish_output2+0x874/0x1460 [ 53.558947] __local_bh_enable_ip+0x1ee/0x230 [ 53.563421] ip_finish_output2+0x8a7/0x1460 [ 53.567718] ? check_noncircular+0x20/0x20 [ 53.571941] ? dst_output+0x140/0x140 [ 53.575716] ? check_noncircular+0x20/0x20 [ 53.579929] ? ip_route_input_noref+0x1e0/0x1e0 [ 53.584582] ? __save_stack_trace+0x61/0xd0 [ 53.588880] ? xfrm_lookup+0x71a/0x23e0 [ 53.592836] ? ipv4_mtu+0x28c/0x3d0 [ 53.596444] ? __lock_is_held+0xbc/0x140 [ 53.600493] ip_finish_output+0x85e/0xd10 [ 53.604614] ? ip_finish_output+0x85e/0xd10 [ 53.608916] ? ip_fragment.constprop.49+0x200/0x200 [ 53.613919] ? nf_hook_slow+0xd3/0x1a0 [ 53.617797] ip_output+0x1cc/0x860 [ 53.621315] ? ip_mc_output+0x1340/0x1340 [ 53.625450] ? ip_fragment.constprop.49+0x200/0x200 [ 53.630449] ip_local_out+0x95/0x160 [ 53.634145] ip_queue_xmit+0x8c0/0x18e0 [ 53.638104] ? ip_build_and_send_pkt+0xc30/0xc30 [ 53.642836] ? skb_send_sock+0x50/0x50 [ 53.646700] ? reqsk_fastopen_remove+0x5e1/0x610 [ 53.651429] ? dccp_insert_option_padding+0xad/0xd0 [ 53.656422] ? dccp_insert_options+0x20f/0xcf0 [ 53.660986] ? dccp_v4_send_check+0x181/0x3b0 [ 53.665462] dccp_transmit_skb+0x9ac/0x10f0 [ 53.669770] dccp_xmit_packet+0x20f/0x730 [ 53.673896] ? dccp_send_ack+0x350/0x350 [ 53.677936] ? ccid3_hc_tx_send_packet+0x2de/0x840 [ 53.682848] dccp_write_xmit+0x17d/0x1d0 [ 53.686890] dccp_sendmsg+0x6d0/0xa80 [ 53.690692] ? compat_dccp_getsockopt+0x70/0x70 [ 53.695340] ? sock_has_perm+0x29c/0x400 [ 53.699397] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 53.704734] ? lock_release+0xcb2/0xda0 [ 53.708683] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 53.714545] ? __check_object_size+0x25d/0x4f0 [ 53.719110] inet_sendmsg+0x11f/0x5e0 [ 53.722883] ? __might_sleep+0x95/0x190 [ 53.726834] ? inet_recvmsg+0x5f0/0x5f0 [ 53.730786] ? selinux_socket_sendmsg+0x36/0x40 [ 53.735440] ? security_socket_sendmsg+0x89/0xb0 [ 53.740170] ? inet_recvmsg+0x5f0/0x5f0 [ 53.744141] sock_sendmsg+0xca/0x110 [ 53.747837] SYSC_sendto+0x358/0x5a0 [ 53.751531] ? SYSC_connect+0x480/0x480 [ 53.755480] ? trace_hardirqs_on+0xd/0x10 [ 53.759606] ? __local_bh_enable_ip+0x121/0x230 [ 53.764258] ? inet_stream_connect+0x7b/0xa0 [ 53.768656] ? fput+0xd2/0x140 [ 53.771827] ? SYSC_connect+0x2d7/0x480 [ 53.775805] ? SyS_setsockopt+0x215/0x360 [ 53.779945] ? do_futex+0x2280/0x2280 [ 53.783723] ? entry_SYSCALL_64_fastpath+0x5/0x96 [ 53.788544] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 53.793547] SyS_sendto+0x40/0x50 [ 53.796980] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 53.801710] RIP: 0033:0x452a39 [ 53.804874] RSP: 002b:00007f5f2f1ffc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002c [ 53.812559] RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452a39 [ 53.819817] RDX: 0000000000000002 RSI: 0000000020529ffe RDI: 0000000000000005 [ 53.827063] RBP: 000000000000054b R08: 0000000020c0fff0 R09: 0000000000000010 [ 53.834307] R10: 0000000000000001 R11: 0000000000000212 R12: 00000000006f4fa8 [ 53.841554] R13: 00000000ffffffff R14: 00007f5f2f2006d4 R15: 0000000000000000 [ 54.552583] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:425/tfrc_rx_hist_sample_rtt() [ 54.565979] CPU: 1 PID: 3469 Comm: syz-executor3 Not tainted 4.15.0-rc2-next-20171207+ #62 [ 54.574389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.583746] Call Trace: [ 54.586316] [ 54.588463] dump_stack+0x194/0x257 [ 54.592098] ? arch_local_irq_restore+0x53/0x53 [ 54.596777] ? tfrc_rx_handle_loss+0xb38/0x24d0 [ 54.601449] ? __lock_is_held+0xbc/0x140 [ 54.605528] tfrc_rx_hist_sample_rtt+0x407/0x4d0 [ 54.610323] ccid3_hc_rx_packet_recv+0x690/0xea7 [ 54.615082] ? dccp_parse_options+0x3d8/0x1030 [ 54.619660] ? ccid3_hc_tx_packet_recv+0xd20/0xd20 [ 54.624589] dccp_deliver_input_to_ccids+0xd9/0x250 [ 54.629616] dccp_rcv_established+0x88/0xb0 [ 54.633957] dccp_v4_do_rcv+0x12f/0x160 [ 54.637950] __sk_receive_skb+0x33e/0xc10 [ 54.642120] ? sk_free+0x40/0x40 [ 54.645498] ? inet_lhash2_lookup+0x4b0/0x4b0 [ 54.649997] ? skb_send_sock+0x50/0x50 [ 54.653900] ? dccp_invalid_packet+0x55/0x7c0 [ 54.658392] ? __lock_acquire+0x324e/0x47f0 [ 54.662726] dccp_v4_rcv+0xeeb/0x1bf0 [ 54.666549] ? dccp_v4_err+0x1550/0x1550 [ 54.670614] ? find_held_lock+0x39/0x1d0 [ 54.674677] ? lock_release+0xda0/0xda0 [ 54.678658] ? __lock_is_held+0xbc/0x140 [ 54.682756] ip_local_deliver_finish+0x2e2/0xba0 [ 54.687579] ? inet_del_offload+0x40/0x40 [ 54.691735] ip_local_deliver+0x1ce/0x6e0 [ 54.695873] ? ip_call_ra_chain+0x6d0/0x6d0 [ 54.700203] ? __lock_acquire+0x6e9/0x47f0 [ 54.704448] ? check_noncircular+0x20/0x20 [ 54.708712] ip_rcv_finish+0x881/0x19a0 [ 54.712709] ? ip_local_deliver_finish+0xba0/0xba0 [ 54.717662] ? lock_downgrade+0x980/0x980 [ 54.721826] ? ip_rcv+0xc80/0x1820 [ 54.725370] ? update_stack_state+0x225/0x700 [ 54.729869] ? lock_release+0xda0/0xda0 [ 54.733847] ? __lock_is_held+0xbc/0x140 [ 54.738015] ip_rcv+0xc3f/0x1820 [ 54.741399] ? ip_local_deliver+0x6e0/0x6e0 [ 54.745734] ? find_held_lock+0x39/0x1d0 [ 54.749816] ? __lock_is_held+0xbc/0x140 [ 54.753895] ? ip_local_deliver+0x6e0/0x6e0 [ 54.758397] __netif_receive_skb_core+0x1a3e/0x3450 [ 54.763438] ? nf_ingress+0x9f0/0x9f0 [ 54.767277] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 54.772469] ? __read_once_size_nocheck.constprop.8+0x10/0x10 [ 54.778363] ? finish_task_switch+0x1d3/0x740 [ 54.782874] ? update_curr+0x47b/0xa60 [ 54.786766] ? save_stack_trace+0x1a/0x20 [ 54.790932] ? unwind_next_frame.part.6+0x1a6/0xb40 [ 54.795965] ? unwind_next_frame.part.6+0x1a6/0xb40 [ 54.800990] ? unwind_dump+0x4d0/0x4d0 [ 54.804898] ? check_noncircular+0x20/0x20 [ 54.809155] ? update_curr+0x2e3/0xa60 [ 54.813039] ? __enqueue_entity+0x109/0x1e0 [ 54.817379] ? __unwind_start+0x169/0x330 [ 54.821547] ? unwind_get_return_address+0x61/0xa0 [ 54.826507] ? find_held_lock+0x39/0x1d0 [ 54.830855] ? print_usage_bug+0x3f0/0x3f0 [ 54.835114] ? lock_acquire+0x1d5/0x580 [ 54.839116] ? process_backlog+0x1ab/0x740 [ 54.843365] ? lock_release+0xda0/0xda0 [ 54.847361] __netif_receive_skb+0x2c/0x1b0 [ 54.852940] ? __netif_receive_skb+0x2c/0x1b0 [ 54.857450] process_backlog+0x203/0x740 [ 54.861503] ? mark_held_locks+0xb2/0x100 [ 54.865653] net_rx_action+0x792/0x1910 [ 54.869655] ? napi_complete_done+0x6c0/0x6c0 [ 54.874154] ? trace_hardirqs_off+0xd/0x10 [ 54.878397] ? _raw_spin_unlock_irqrestore+0xa6/0xba [ 54.883521] ? try_to_wake_up+0xf9/0x1600 [ 54.887721] ? check_noncircular+0x20/0x20 [ 54.891976] ? lock_acquire+0x1d5/0x580 [ 54.895953] ? __hrtimer_run_queues+0x385/0xe10 [ 54.900620] ? lock_release+0xda0/0xda0 [ 54.904616] ? find_held_lock+0x39/0x1d0 [ 54.908704] ? lock_downgrade+0x980/0x980 [ 54.912852] ? lock_acquire+0x1d5/0x580 [ 54.916841] ? clockevents_program_event+0x163/0x2e0 [ 54.921939] ? lock_downgrade+0x980/0x980 [ 54.926095] ? pvclock_read_flags+0x160/0x160 [ 54.930606] ? find_held_lock+0x39/0x1d0 [ 54.934689] ? check_noncircular+0x20/0x20 [ 54.938906] ? print_usage_bug+0x3f0/0x3f0 [ 54.943138] ? ktime_get_resolution_ns+0x300/0x300 [ 54.948074] ? do_timer+0x50/0x50 [ 54.951534] ? __lock_is_held+0xbc/0x140 [ 54.955617] __do_softirq+0x29d/0xbb2 [ 54.959403] ? task_prio+0x40/0x40 [ 54.962935] ? __irqentry_text_end+0x1f8db4/0x1f8db4 [ 54.968021] ? irq_exit+0x103/0x210 [ 54.971630] ? smp_apic_timer_interrupt+0x16b/0x700 [ 54.976617] ? smp_reschedule_interrupt+0xe6/0x670 [ 54.981539] ? smp_call_function_single_interrupt+0x640/0x640 [ 54.987411] ? _raw_spin_lock+0x32/0x40 [ 54.991364] ? _raw_spin_unlock+0x22/0x30 [ 54.995501] ? handle_edge_irq+0x2b4/0x7c0 [ 54.999729] ? task_prio+0x40/0x40 [ 55.003270] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 55.008097] do_softirq_own_stack+0x2a/0x40 [ 55.012389] [ 55.014604] do_softirq.part.19+0x14d/0x190 [ 55.018907] ? ip_finish_output2+0x874/0x1460 [ 55.023382] __local_bh_enable_ip+0x1ee/0x230 [ 55.027861] ip_finish_output2+0x8a7/0x1460 [ 55.032166] ? check_noncircular+0x20/0x20 [ 55.036390] ? dst_output+0x140/0x140 [ 55.040163] ? check_noncircular+0x20/0x20 [ 55.044376] ? ip_route_input_noref+0x1e0/0x1e0 [ 55.049040] ? __save_stack_trace+0x61/0xd0 [ 55.053335] ? xfrm_lookup+0x71a/0x23e0 [ 55.057292] ? ipv4_mtu+0x28c/0x3d0 [ 55.060899] ? __lock_is_held+0xbc/0x140 [ 55.064952] ip_finish_output+0x85e/0xd10 [ 55.069072] ? ip_finish_output+0x85e/0xd10 [ 55.073378] ? ip_fragment.constprop.49+0x200/0x200 [ 55.078393] ? nf_hook_slow+0xd3/0x1a0 [ 55.082258] ip_output+0x1cc/0x860 [ 55.085778] ? ip_mc_output+0x1340/0x1340 [ 55.089916] ? ip_fragment.constprop.49+0x200/0x200 [ 55.094920] ip_local_out+0x95/0x160 [ 55.098629] ip_queue_xmit+0x8c0/0x18e0 [ 55.102589] ? ip_build_and_send_pkt+0xc30/0xc30 [ 55.107318] ? skb_send_sock+0x50/0x50 [ 55.111187] ? reqsk_fastopen_remove+0x5e1/0x610 [ 55.115915] ? dccp_insert_option_padding+0xad/0xd0 [ 55.120917] ? dccp_insert_options+0x20f/0xcf0 [ 55.125477] ? dccp_v4_send_check+0x181/0x3b0 [ 55.129953] dccp_transmit_skb+0x9ac/0x10f0 [ 55.134259] dccp_xmit_packet+0x20f/0x730 [ 55.138384] ? dccp_send_ack+0x350/0x350 [ 55.142422] ? ccid3_hc_tx_send_packet+0x2de/0x840 [ 55.147332] dccp_write_xmit+0x17d/0x1d0 [ 55.151370] dccp_sendmsg+0x6d0/0xa80 [ 55.155148] ? lock_downgrade+0x980/0x980 [ 55.159273] ? avc_has_perm+0xd0/0x680 [ 55.163152] ? compat_dccp_getsockopt+0x70/0x70 [ 55.167795] ? sock_has_perm+0x29c/0x400 [ 55.171832] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 55.177179] ? lock_release+0xda0/0xda0 [ 55.181138] inet_sendmsg+0x11f/0x5e0 [ 55.184936] ? inet_recvmsg+0x5f0/0x5f0 [ 55.188887] ? selinux_socket_sendmsg+0x36/0x40 [ 55.193533] ? security_socket_sendmsg+0x89/0xb0 [ 55.198263] ? inet_recvmsg+0x5f0/0x5f0 [ 55.202234] sock_sendmsg+0xca/0x110 [ 55.205943] sock_write_iter+0x320/0x5e0 [ 55.209984] ? sock_sendmsg+0x110/0x110 [ 55.213944] ? iov_iter_init+0xaf/0x1d0 [ 55.217897] __vfs_write+0x68a/0x970 [ 55.221589] ? kernel_read+0x120/0x120 [ 55.225448] ? bpf_fd_pass+0x280/0x280 [ 55.229324] ? _cond_resched+0x14/0x30 [ 55.233191] ? selinux_file_permission+0x82/0x460 [ 55.238037] ? rw_verify_area+0xe5/0x2b0 [ 55.242079] ? __fdget_raw+0x20/0x20 [ 55.245770] vfs_write+0x18f/0x510 [ 55.249290] SyS_write+0xef/0x220 [ 55.252731] ? SyS_read+0x220/0x220 [ 55.256331] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 55.261322] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 55.266060] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 55.270793] RIP: 0033:0x452a39 [ 55.273956] RSP: 002b:00007f3c3f96fc58 EFLAGS: 00000212 ORIG_RAX: 0000000000000001 [ 55.281641] RAX: ffffffffffffffda RBX: 00007f3c3f970700 RCX: 0000000000452a39 [ 55.288897] RDX: 000000000000005a RSI: 000000002077f000 RDI: 0000000000000005 [ 55.296161] RBP: 00007ffe68ddca80 R08: 0000000000000000 R09: 0000000000000000 [ 55.303420] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000 [ 55.310665] R13: 00007ffe68ddc9ff R14: 00007f3c3f9709c0 R15: 000000000000000a [ 55.584851] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:425/tfrc_rx_hist_sample_rtt() [ 55.598194] CPU: 1 PID: 3593 Comm: syz-executor7 Not tainted 4.15.0-rc2-next-20171207+ #62 [ 55.606593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.615952] Call Trace: [ 55.618534] [ 55.620686] dump_stack+0x194/0x257 [ 55.624334] ? arch_local_irq_restore+0x53/0x53 [ 55.628995] ? tfrc_rx_handle_loss+0xb38/0x24d0 [ 55.633690] ? __lock_is_held+0xbc/0x140 [ 55.637748] tfrc_rx_hist_sample_rtt+0x407/0x4d0 [ 55.642517] ccid3_hc_rx_packet_recv+0x690/0xea7 [ 55.647282] ? dccp_parse_options+0x3d8/0x1030 [ 55.651872] ? ccid3_hc_tx_packet_recv+0xd20/0xd20 [ 55.656813] dccp_deliver_input_to_ccids+0xd9/0x250 [ 55.661858] dccp_rcv_established+0x88/0xb0 [ 55.666181] dccp_v4_do_rcv+0x12f/0x160 [ 55.670161] __sk_receive_skb+0x33e/0xc10 [ 55.674318] ? sk_free+0x40/0x40 [ 55.677690] ? inet_lhash2_lookup+0x4b0/0x4b0 [ 55.682186] ? skb_send_sock+0x50/0x50 [ 55.686095] ? dccp_invalid_packet+0x55/0x7c0 [ 55.690610] dccp_v4_rcv+0xeeb/0x1bf0 [ 55.694433] ? dccp_v4_err+0x1550/0x1550 [ 55.698514] ? find_held_lock+0x39/0x1d0 [ 55.702599] ? lock_release+0xda0/0xda0 [ 55.706582] ? __lock_is_held+0xbc/0x140 [ 55.710663] ip_local_deliver_finish+0x2e2/0xba0 [ 55.715435] ? inet_del_offload+0x40/0x40 [ 55.719601] ip_local_deliver+0x1ce/0x6e0 [ 55.723756] ? ip_call_ra_chain+0x6d0/0x6d0 [ 55.728101] ? __lock_acquire+0x6e9/0x47f0 [ 55.732348] ? check_noncircular+0x20/0x20 [ 55.736590] ? find_held_lock+0x39/0x1d0 [ 55.740664] ip_rcv_finish+0x881/0x19a0 [ 55.744648] ? ip_local_deliver_finish+0xba0/0xba0 [ 55.749582] ? lock_downgrade+0x980/0x980 [ 55.753731] ? ip_rcv+0xc80/0x1820 [ 55.757286] ? update_stack_state+0x225/0x700 [ 55.761797] ? lock_release+0xda0/0xda0 [ 55.765785] ? __lock_is_held+0xbc/0x140 [ 55.769869] ip_rcv+0xc3f/0x1820 [ 55.773256] ? ip_local_deliver+0x6e0/0x6e0 [ 55.777589] ? find_held_lock+0x39/0x1d0 [ 55.781658] ? __lock_is_held+0xbc/0x140 [ 55.785737] ? ip_local_deliver+0x6e0/0x6e0 [ 55.790074] __netif_receive_skb_core+0x1a3e/0x3450 [ 55.795106] ? nf_ingress+0x9f0/0x9f0 [ 55.798943] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 55.804143] ? __read_once_size_nocheck.constprop.8+0x10/0x10 [ 55.810022] ? __might_fault+0x13a/0x1d0 [ 55.814080] ? update_curr+0x47b/0xa60 [ 55.817969] ? save_stack_trace+0x1a/0x20 [ 55.822123] ? unwind_next_frame.part.6+0x1a6/0xb40 [ 55.827144] ? unwind_next_frame.part.6+0x1a6/0xb40 [ 55.832158] ? unwind_dump+0x4d0/0x4d0 [ 55.836048] ? check_noncircular+0x20/0x20 [ 55.840288] ? check_noncircular+0x20/0x20 [ 55.844532] ? update_curr+0x2e3/0xa60 [ 55.848418] ? __enqueue_entity+0x109/0x1e0 [ 55.852749] ? __unwind_start+0x169/0x330 [ 55.856908] ? unwind_get_return_address+0x61/0xa0 [ 55.861859] ? find_held_lock+0x39/0x1d0 [ 55.865934] ? print_usage_bug+0x3f0/0x3f0 [ 55.870177] ? lock_acquire+0x1d5/0x580 [ 55.874149] ? process_backlog+0x1ab/0x740 [ 55.878393] ? lock_release+0xda0/0xda0 [ 55.882389] __netif_receive_skb+0x2c/0x1b0 [ 55.886725] ? __netif_receive_skb+0x2c/0x1b0 [ 55.891232] process_backlog+0x203/0x740 [ 55.895292] ? mark_held_locks+0xb2/0x100 [ 55.899522] net_rx_action+0x792/0x1910 [ 55.903527] ? napi_complete_done+0x6c0/0x6c0 [ 55.908021] ? trace_hardirqs_off+0xd/0x10 [ 55.912271] ? _raw_spin_unlock_irqrestore+0xa6/0xba [ 55.917373] ? try_to_wake_up+0xf9/0x1600 [ 55.921518] ? cpu_needs_another_gp+0x69e/0x8d0 [ 55.926206] ? check_noncircular+0x20/0x20 [ 55.930437] ? check_noncircular+0x20/0x20 [ 55.934692] ? lock_acquire+0x1d5/0x580 [ 55.938670] ? __hrtimer_run_queues+0x385/0xe10 [ 55.943359] ? lock_release+0xda0/0xda0 [ 55.947349] ? find_held_lock+0x39/0x1d0 [ 55.951433] ? lock_downgrade+0x980/0x980 [ 55.955584] ? lock_acquire+0x1d5/0x580 [ 55.959554] ? clockevents_program_event+0x163/0x2e0 [ 55.964662] ? lock_downgrade+0x980/0x980 [ 55.968798] ? pvclock_read_flags+0x160/0x160 [ 55.973281] ? find_held_lock+0x39/0x1d0 [ 55.977351] ? check_noncircular+0x20/0x20 [ 55.981583] ? print_usage_bug+0x3f0/0x3f0 [ 55.985827] ? ktime_get_resolution_ns+0x300/0x300 [ 55.990764] ? check_noncircular+0x20/0x20 [ 55.995014] ? do_timer+0x50/0x50 [ 55.998483] ? __lock_is_held+0xbc/0x140 [ 56.002544] __do_softirq+0x29d/0xbb2 [ 56.006334] ? task_prio+0x40/0x40 [ 56.009887] ? __irqentry_text_end+0x1f8db4/0x1f8db4 [ 56.014978] ? irq_exit+0x103/0x210 [ 56.018591] ? smp_apic_timer_interrupt+0x16b/0x700 [ 56.023600] ? smp_reschedule_interrupt+0xe6/0x670 [ 56.028519] ? smp_call_function_single_interrupt+0x640/0x640 [ 56.034388] ? _raw_spin_lock+0x32/0x40 [ 56.038601] ? _raw_spin_unlock+0x22/0x30 [ 56.042740] ? handle_edge_irq+0x2b4/0x7c0 [ 56.046956] ? task_prio+0x40/0x40 [ 56.050489] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 56.055337] do_softirq_own_stack+0x2a/0x40 [ 56.059652] [ 56.061868] do_softirq.part.19+0x14d/0x190 [ 56.066166] ? ip_finish_output2+0x874/0x1460 [ 56.070634] __local_bh_enable_ip+0x1ee/0x230 [ 56.075114] ip_finish_output2+0x8a7/0x1460 [ 56.079410] ? check_noncircular+0x20/0x20 [ 56.083624] ? dst_output+0x140/0x140 [ 56.087402] ? check_noncircular+0x20/0x20 [ 56.091614] ? ip_route_input_noref+0x1e0/0x1e0 [ 56.096266] ? __save_stack_trace+0x61/0xd0 [ 56.100564] ? xfrm_lookup+0x71a/0x23e0 [ 56.104516] ? ipv4_mtu+0x28c/0x3d0 [ 56.108134] ? __lock_is_held+0xbc/0x140 [ 56.112181] ip_finish_output+0x85e/0xd10 [ 56.116314] ? ip_finish_output+0x85e/0xd10 [ 56.120612] ? ip_fragment.constprop.49+0x200/0x200 [ 56.125619] ? nf_hook_slow+0xd3/0x1a0 [ 56.129493] ip_output+0x1cc/0x860 [ 56.133028] ? ip_mc_output+0x1340/0x1340 [ 56.137173] ? ip_fragment.constprop.49+0x200/0x200 [ 56.142171] ip_local_out+0x95/0x160 [ 56.145863] ip_queue_xmit+0x8c0/0x18e0 [ 56.149821] ? ip_build_and_send_pkt+0xc30/0xc30 [ 56.154551] ? skb_send_sock+0x50/0x50 [ 56.158425] ? reqsk_fastopen_remove+0x5e1/0x610 [ 56.163176] ? dccp_insert_option_padding+0xad/0xd0 [ 56.168169] ? dccp_insert_options+0x20f/0xcf0 [ 56.172733] ? dccp_v4_send_check+0x181/0x3b0 [ 56.177206] dccp_transmit_skb+0x9ac/0x10f0 [ 56.181511] dccp_xmit_packet+0x20f/0x730 [ 56.185642] ? dccp_send_ack+0x350/0x350 [ 56.189695] ? ccid3_hc_tx_send_packet+0x2de/0x840 [ 56.194620] dccp_write_xmit+0x17d/0x1d0 [ 56.198659] dccp_sendmsg+0x6d0/0xa80 [ 56.202439] ? lock_downgrade+0x980/0x980 [ 56.206562] ? avc_has_perm+0xd0/0x680 [ 56.210429] ? compat_dccp_getsockopt+0x70/0x70 [ 56.215072] ? sock_has_perm+0x29c/0x400 [ 56.219117] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 56.224459] ? lock_release+0xda0/0xda0 [ 56.228414] inet_sendmsg+0x11f/0x5e0 [ 56.232202] ? inet_recvmsg+0x5f0/0x5f0 [ 56.236151] ? selinux_socket_sendmsg+0x36/0x40 [ 56.240794] ? security_socket_sendmsg+0x89/0xb0 [ 56.245524] ? inet_recvmsg+0x5f0/0x5f0 [ 56.249474] sock_sendmsg+0xca/0x110 [ 56.253163] sock_write_iter+0x320/0x5e0 [ 56.257205] ? sock_sendmsg+0x110/0x110 [ 56.261163] ? iov_iter_init+0xaf/0x1d0 [ 56.265116] __vfs_write+0x68a/0x970 [ 56.268807] ? kernel_read+0x120/0x120 [ 56.272667] ? bpf_fd_pass+0x280/0x280 [ 56.276532] ? _cond_resched+0x14/0x30 [ 56.280398] ? selinux_file_permission+0x82/0x460 [ 56.285226] ? rw_verify_area+0xe5/0x2b0 [ 56.289260] ? __fdget_raw+0x20/0x20 [ 56.292953] vfs_write+0x18f/0x510 [ 56.296472] SyS_write+0xef/0x220 [ 56.299911] ? SyS_read+0x220/0x220 [ 56.303520] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 56.308514] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 56.313251] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 56.317981] RIP: 0033:0x452a39 [ 56.321145] RSP: 002b:00007fb83751ec58 EFLAGS: 00000212 ORIG_RAX: 0000000000000001 [ 56.328832] RAX: ffffffffffffffda RBX: 00007fb83751f700 RCX: 0000000000452a39 2017/12/07 19:33:57 executed programs: 109 [ 56.336075] RDX: 000000000000005a RSI: 000000002077f000 RDI: 0000000000000005 [ 56.343318] RBP: 00007ffe4d0b4300 R08: 0000000000000000 R09: 0000000000000000 [ 56.350561] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000 [ 56.357804] R13: 00007ffe4d0b427f R14: 00007fb83751f9c0 R15: 000000000000000a [ 56.367588] net_ratelimit: 67 callbacks suppressed [ 56.367594] dccp_close: ABORT with 36 bytes unread [ 56.390520] nla_parse: 202 callbacks suppressed [ 56.390526] netlink: 2 bytes leftover after parsing attributes in process `syz-executor0'. [ 56.406040] netlink: 2 bytes leftover after parsing attributes in process `syz-executor2'. [ 56.414913] netlink: 2 bytes leftover after parsing attributes in process `syz-executor3'. [ 56.424627] netlink: 2 bytes leftover after parsing attributes in process `syz-executor1'. [ 56.434149] netlink: 2 bytes leftover after parsing attributes in process `syz-executor4'. [ 56.443647] netlink: 2 bytes leftover after parsing attributes in process `syz-executor7'. [ 56.458458] netlink: 2 bytes leftover after parsing attributes in process `syz-executor6'. [ 56.467544] netlink: 2 bytes leftover after parsing attributes in process `syz-executor5'. [ 56.492677] netlink: 2 bytes leftover after parsing attributes in process `syz-executor1'. [ 56.508152] netlink: 2 bytes leftover after parsing attributes in process `syz-executor0'. [ 56.587572] dccp_close: ABORT with 36 bytes unread [ 56.594423] dccp_close: ABORT with 36 bytes unread [ 56.596482] dccp_close: ABORT with 36 bytes unread [ 56.599515] dccp_close: ABORT with 36 bytes unread [ 56.708411] dccp_close: ABORT with 36 bytes unread [ 56.718725] dccp_close: ABORT with 36 bytes unread [ 56.727439] dccp_close: ABORT with 36 bytes unread [ 56.747920] dccp_close: ABORT with 36 bytes unread [ 56.842218] dccp_close: ABORT with 36 bytes unread [ 57.218477] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:425/tfrc_rx_hist_sample_rtt() [ 57.231877] CPU: 1 PID: 3855 Comm: syz-executor1 Not tainted 4.15.0-rc2-next-20171207+ #62 [ 57.240289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.249647] Call Trace: [ 57.252230] [ 57.254388] dump_stack+0x194/0x257 [ 57.258021] ? arch_local_irq_restore+0x53/0x53 [ 57.262702] ? tfrc_rx_handle_loss+0xb38/0x24d0 [ 57.267390] ? __lock_is_held+0xbc/0x140 [ 57.271472] tfrc_rx_hist_sample_rtt+0x407/0x4d0 [ 57.276262] ccid3_hc_rx_packet_recv+0x690/0xea7 [ 57.281010] ? dccp_parse_options+0x3d8/0x1030 [ 57.285626] ? ccid3_hc_tx_packet_recv+0xd20/0xd20 [ 57.290573] dccp_deliver_input_to_ccids+0xd9/0x250 [ 57.295603] dccp_rcv_established+0x88/0xb0 [ 57.299926] dccp_v4_do_rcv+0x12f/0x160 [ 57.303906] __sk_receive_skb+0x33e/0xc10 [ 57.308065] ? sk_free+0x40/0x40 [ 57.311448] ? inet_lhash2_lookup+0x4b0/0x4b0 [ 57.315960] ? skb_send_sock+0x50/0x50 [ 57.319853] ? __update_load_avg_se.isra.27+0x56a/0x7c0 [ 57.325237] ? dccp_invalid_packet+0x55/0x7c0 [ 57.329754] dccp_v4_rcv+0xeeb/0x1bf0 [ 57.333584] ? dccp_v4_err+0x1550/0x1550 [ 57.337653] ? find_held_lock+0x39/0x1d0 [ 57.341727] ? lock_release+0xda0/0xda0 [ 57.345714] ? __lock_is_held+0xbc/0x140 [ 57.349804] ip_local_deliver_finish+0x2e2/0xba0 [ 57.354570] ? inet_del_offload+0x40/0x40 [ 57.358746] ip_local_deliver+0x1ce/0x6e0 [ 57.362909] ? ip_call_ra_chain+0x6d0/0x6d0 [ 57.367239] ? lock_release+0xda0/0xda0 [ 57.371216] ? __lock_is_held+0xbc/0x140 [ 57.375275] ? check_noncircular+0x20/0x20 [ 57.379520] ip_rcv_finish+0x881/0x19a0 [ 57.383497] ? ip_local_deliver_finish+0xba0/0xba0 [ 57.388410] ? lock_downgrade+0x980/0x980 [ 57.392545] ? ip_rcv+0xc80/0x1820 [ 57.396066] ? update_stack_state+0x225/0x700 [ 57.400540] ? lock_release+0xda0/0xda0 [ 57.404494] ? __lock_is_held+0xbc/0x140 [ 57.408544] ip_rcv+0xc3f/0x1820 [ 57.411895] ? ip_local_deliver+0x6e0/0x6e0 [ 57.416193] ? check_noncircular+0x20/0x20 [ 57.420412] ? __lock_is_held+0xbc/0x140 [ 57.424455] ? ip_local_deliver+0x6e0/0x6e0 [ 57.428759] __netif_receive_skb_core+0x1a3e/0x3450 [ 57.433761] ? nf_ingress+0x9f0/0x9f0 [ 57.437541] ? ttwu_do_wakeup+0x523/0x710 [ 57.441667] ? check_preempt_curr+0x350/0x350 [ 57.446151] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 57.451325] ? trace_hardirqs_off+0xd/0x10 [ 57.455536] ? _raw_spin_unlock_irqrestore+0xa6/0xba [ 57.460706] ? find_held_lock+0x39/0x1d0 [ 57.464749] ? print_usage_bug+0x3f0/0x3f0 [ 57.468965] ? check_noncircular+0x20/0x20 [ 57.473187] ? lock_release+0xda0/0xda0 [ 57.477135] ? __unwind_start+0x169/0x330 [ 57.481271] ? mark_held_locks+0xb2/0x100 [ 57.485398] ? find_held_lock+0x39/0x1d0 [ 57.489442] ? print_usage_bug+0x3f0/0x3f0 [ 57.493657] ? lock_acquire+0x1d5/0x580 [ 57.497605] ? process_backlog+0x1ab/0x740 [ 57.501823] ? lock_release+0xda0/0xda0 [ 57.505771] ? mark_held_locks+0xb2/0x100 [ 57.509919] __netif_receive_skb+0x2c/0x1b0 [ 57.514214] ? __netif_receive_skb+0x2c/0x1b0 [ 57.518687] process_backlog+0x203/0x740 [ 57.522723] ? mark_held_locks+0xb2/0x100 [ 57.526858] net_rx_action+0x792/0x1910 [ 57.530829] ? napi_complete_done+0x6c0/0x6c0 [ 57.535314] ? rcu_read_lock_sched_held+0x108/0x120 [ 57.540333] ? rcu_process_callbacks+0x3a0/0x17d0 [ 57.545152] ? check_noncircular+0x20/0x20 [ 57.549376] ? note_gp_changes+0x650/0x650 [ 57.553588] ? timerqueue_add+0x1e9/0x280 [ 57.557718] ? enqueue_hrtimer+0x162/0x490 [ 57.561933] ? find_held_lock+0x39/0x1d0 [ 57.565972] ? check_noncircular+0x20/0x20 [ 57.570182] ? print_usage_bug+0x3f0/0x3f0 [ 57.574394] ? lock_downgrade+0x980/0x980 [ 57.578525] ? lock_acquire+0x1d5/0x580 [ 57.582478] ? clockevents_program_event+0x163/0x2e0 [ 57.587558] ? lock_downgrade+0x980/0x980 [ 57.591692] ? __lock_is_held+0xbc/0x140 [ 57.595738] ? check_noncircular+0x20/0x20 [ 57.599950] ? print_usage_bug+0x3f0/0x3f0 [ 57.604171] ? __irqentry_text_end+0x1f8db4/0x1f8db4 [ 57.609258] ? do_timer+0x50/0x50 [ 57.612695] ? __lock_is_held+0xbc/0x140 [ 57.616747] __do_softirq+0x29d/0xbb2 [ 57.620523] ? task_prio+0x40/0x40 [ 57.624051] ? __irqentry_text_end+0x1f8db4/0x1f8db4 [ 57.629137] ? irq_exit+0x103/0x210 [ 57.632738] ? smp_apic_timer_interrupt+0x16b/0x700 [ 57.637735] ? smp_reschedule_interrupt+0xe6/0x670 [ 57.642641] ? smp_call_function_single_interrupt+0x640/0x640 [ 57.648502] ? _raw_spin_lock+0x32/0x40 [ 57.652469] ? _raw_spin_unlock+0x22/0x30 [ 57.656593] ? handle_edge_irq+0x2b4/0x7c0 [ 57.660808] ? task_prio+0x40/0x40 [ 57.664335] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 57.669161] do_softirq_own_stack+0x2a/0x40 [ 57.673456] [ 57.675670] do_softirq.part.19+0x14d/0x190 [ 57.679970] ? ip_finish_output2+0x874/0x1460 [ 57.684438] __local_bh_enable_ip+0x1ee/0x230 [ 57.688911] ip_finish_output2+0x8a7/0x1460 [ 57.693218] ? check_noncircular+0x20/0x20 [ 57.697453] ? dst_output+0x140/0x140 [ 57.701230] ? check_noncircular+0x20/0x20 [ 57.705444] ? ip_route_input_noref+0x1e0/0x1e0 [ 57.710089] ? __save_stack_trace+0x61/0xd0 [ 57.714386] ? xfrm_lookup+0x71a/0x23e0 [ 57.718340] ? ipv4_mtu+0x28c/0x3d0 [ 57.721949] ? __lock_is_held+0xbc/0x140 [ 57.725998] ip_finish_output+0x85e/0xd10 [ 57.730140] ? ip_finish_output+0x85e/0xd10 [ 57.734441] ? ip_fragment.constprop.49+0x200/0x200 [ 57.739443] ? nf_hook_slow+0xd3/0x1a0 [ 57.743315] ip_output+0x1cc/0x860 [ 57.746833] ? ip_mc_output+0x1340/0x1340 [ 57.750968] ? ip_fragment.constprop.49+0x200/0x200 [ 57.755968] ip_local_out+0x95/0x160 [ 57.759665] ip_queue_xmit+0x8c0/0x18e0 [ 57.763622] ? ip_build_and_send_pkt+0xc30/0xc30 [ 57.768351] ? skb_send_sock+0x50/0x50 [ 57.772211] ? reqsk_fastopen_remove+0x5e1/0x610 [ 57.776940] ? dccp_insert_option_padding+0xad/0xd0 [ 57.781935] ? dccp_insert_options+0x20f/0xcf0 [ 57.786497] ? dccp_v4_send_check+0x181/0x3b0 [ 57.790973] dccp_transmit_skb+0x9ac/0x10f0 [ 57.795280] dccp_xmit_packet+0x20f/0x730 [ 57.799409] ? dccp_send_ack+0x350/0x350 [ 57.803448] ? ccid3_hc_tx_send_packet+0x2de/0x840 [ 57.808362] dccp_write_xmit+0x17d/0x1d0 [ 57.812402] dccp_sendmsg+0x6d0/0xa80 [ 57.816194] ? lock_downgrade+0x980/0x980 [ 57.820321] ? avc_has_perm+0xd0/0x680 [ 57.824294] ? compat_dccp_getsockopt+0x70/0x70 [ 57.828952] ? sock_has_perm+0x29c/0x400 [ 57.832992] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 57.838336] ? lock_release+0xda0/0xda0 [ 57.842305] inet_sendmsg+0x11f/0x5e0 [ 57.846084] ? inet_recvmsg+0x5f0/0x5f0 [ 57.850039] ? selinux_socket_sendmsg+0x36/0x40 [ 57.854684] ? security_socket_sendmsg+0x89/0xb0 [ 57.859414] ? inet_recvmsg+0x5f0/0x5f0 [ 57.863374] sock_sendmsg+0xca/0x110 [ 57.867067] sock_write_iter+0x320/0x5e0 [ 57.871108] ? sock_sendmsg+0x110/0x110 [ 57.875070] ? iov_iter_init+0xaf/0x1d0 [ 57.879034] __vfs_write+0x68a/0x970 [ 57.882728] ? kernel_read+0x120/0x120 [ 57.886588] ? bpf_fd_pass+0x280/0x280 [ 57.890456] ? _cond_resched+0x14/0x30 [ 57.894325] ? selinux_file_permission+0x82/0x460 [ 57.899156] ? rw_verify_area+0xe5/0x2b0 [ 57.903194] ? __fdget_raw+0x20/0x20 [ 57.906888] vfs_write+0x18f/0x510 [ 57.910408] SyS_write+0xef/0x220 [ 57.913841] ? SyS_read+0x220/0x220 [ 57.917442] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 57.922434] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 57.927173] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 57.931903] RIP: 0033:0x452a39 [ 57.935069] RSP: 002b:00007f3b32163c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000001 [ 57.942756] RAX: ffffffffffffffda RBX: 00007f3b32164700 RCX: 0000000000452a39 [ 57.949999] RDX: 000000000000005a RSI: 000000002077f000 RDI: 0000000000000005 [ 57.957249] RBP: 00007ffdd9aff2b0 R08: 0000000000000000 R09: 0000000000000000 [ 57.964493] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000 [ 57.971737] R13: 00007ffdd9aff22f R14: 00007f3b321649c0 R15: 000000000000000a [ 58.967391] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:425/tfrc_rx_hist_sample_rtt() [ 58.980717] CPU: 0 PID: 4122 Comm: syz-executor7 Not tainted 4.15.0-rc2-next-20171207+ #62 [ 58.989123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.998485] Call Trace: [ 59.001068] [ 59.003232] dump_stack+0x194/0x257 [ 59.006862] ? arch_local_irq_restore+0x53/0x53 [ 59.011522] ? tfrc_rx_handle_loss+0xb38/0x24d0 [ 59.017092] ? __lock_is_held+0xbc/0x140 [ 59.021170] tfrc_rx_hist_sample_rtt+0x407/0x4d0 [ 59.025946] ccid3_hc_rx_packet_recv+0x690/0xea7 [ 59.030711] ? dccp_parse_options+0x3d8/0x1030 [ 59.035299] ? ccid3_hc_tx_packet_recv+0xd20/0xd20 [ 59.040228] dccp_deliver_input_to_ccids+0xd9/0x250 [ 59.045264] dccp_rcv_established+0x88/0xb0 [ 59.049605] dccp_v4_do_rcv+0x12f/0x160 [ 59.053587] __sk_receive_skb+0x33e/0xc10 [ 59.057834] ? sk_free+0x40/0x40 [ 59.061212] ? inet_lhash2_lookup+0x4b0/0x4b0 [ 59.065704] ? skb_send_sock+0x50/0x50 [ 59.069590] ? refcount_sub_and_test+0x115/0x1b0 [ 59.074357] ? dccp_invalid_packet+0x55/0x7c0 [ 59.078872] dccp_v4_rcv+0xeeb/0x1bf0 [ 59.082716] ? dccp_v4_err+0x1550/0x1550 [ 59.086767] ? find_held_lock+0x39/0x1d0 [ 59.090829] ? lock_release+0xda0/0xda0 [ 59.094819] ? __lock_is_held+0xbc/0x140 [ 59.098900] ip_local_deliver_finish+0x2e2/0xba0 [ 59.103660] ? inet_del_offload+0x40/0x40 [ 59.107831] ip_local_deliver+0x1ce/0x6e0 [ 59.111997] ? ip_call_ra_chain+0x6d0/0x6d0 [ 59.116326] ? unwind_next_frame.part.6+0x1a6/0xb40 [ 59.121366] ? unwind_next_frame.part.6+0x1a6/0xb40 [ 59.126389] ? unwind_dump+0x4d0/0x4d0 [ 59.130305] ? unwind_dump+0x4d0/0x4d0 [ 59.134200] ip_rcv_finish+0x881/0x19a0 [ 59.138195] ? ip_local_deliver_finish+0xba0/0xba0 [ 59.143131] ? lock_downgrade+0x980/0x980 [ 59.147284] ? ip_rcv+0xc80/0x1820 [ 59.150822] ? update_stack_state+0x225/0x700 [ 59.155318] ? lock_release+0xda0/0xda0 [ 59.159298] ? __lock_is_held+0xbc/0x140 [ 59.163383] ip_rcv+0xc3f/0x1820 [ 59.166760] ? ip_local_deliver+0x6e0/0x6e0 [ 59.171098] ? __lock_is_held+0xbc/0x140 [ 59.175170] ? ip_local_deliver+0x6e0/0x6e0 [ 59.179510] __netif_receive_skb_core+0x1a3e/0x3450 [ 59.184544] ? nf_ingress+0x9f0/0x9f0 [ 59.188376] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 59.193575] ? apic_timer_interrupt+0xa9/0xb0 [ 59.198072] ? save_stack_trace+0x1a/0x20 [ 59.202215] ? __lock_acquire+0x324e/0x47f0 [ 59.206553] ? check_noncircular+0x20/0x20 [ 59.210810] ? mark_held_locks+0xb2/0x100 [ 59.214971] ? check_noncircular+0x20/0x20 [ 59.219214] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 59.224409] ? try_to_wake_up+0xf9/0x1600 [ 59.228597] ? __unwind_start+0x169/0x330 [ 59.232747] ? find_held_lock+0x39/0x1d0 [ 59.236811] ? find_held_lock+0x39/0x1d0 [ 59.240887] ? print_usage_bug+0x3f0/0x3f0 [ 59.245133] ? lock_acquire+0x1d5/0x580 [ 59.249104] ? process_backlog+0x1ab/0x740 [ 59.253353] ? lock_release+0xda0/0xda0 [ 59.257358] __netif_receive_skb+0x2c/0x1b0 [ 59.261677] ? __netif_receive_skb+0x2c/0x1b0 [ 59.266182] process_backlog+0x203/0x740 [ 59.270232] ? mark_held_locks+0xb2/0x100 [ 59.274386] net_rx_action+0x792/0x1910 [ 59.278378] ? napi_complete_done+0x6c0/0x6c0 [ 59.282882] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 59.287897] ? trace_hardirqs_on+0xd/0x10 [ 59.292043] ? _raw_spin_unlock_irq+0x27/0x70 [ 59.296558] ? __run_timers+0x16f/0xb60 [ 59.300556] ? del_timer_sync+0x240/0x240 [ 59.304700] ? timerqueue_add+0x1e9/0x280 [ 59.308848] ? enqueue_hrtimer+0x162/0x490 [ 59.313091] ? find_held_lock+0x39/0x1d0 [ 59.317165] ? lock_downgrade+0x980/0x980 [ 59.321226] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:425/tfrc_rx_hist_sample_rtt() [ 59.334479] ? lock_acquire+0x1d5/0x580 [ 59.338442] ? clockevents_program_event+0x163/0x2e0 [ 59.343548] ? rcu_pm_notify+0xc0/0xc0 [ 59.347438] ? check_noncircular+0x20/0x20 [ 59.351672] ? print_usage_bug+0x3f0/0x3f0 [ 59.355907] ? __irqentry_text_end+0x1f8db4/0x1f8db4 [ 59.360998] ? do_timer+0x50/0x50 [ 59.364450] ? __lock_is_held+0xbc/0x140 [ 59.368517] __do_softirq+0x29d/0xbb2 [ 59.372386] ? task_prio+0x40/0x40 [ 59.375924] ? __irqentry_text_end+0x1f8db4/0x1f8db4 [ 59.381009] ? irq_exit+0x103/0x210 [ 59.384622] ? smp_apic_timer_interrupt+0x16b/0x700 [ 59.389619] ? smp_reschedule_interrupt+0xe6/0x670 [ 59.394532] ? smp_call_function_single_interrupt+0x640/0x640 [ 59.400398] ? _raw_spin_lock+0x32/0x40 [ 59.404364] ? _raw_spin_unlock+0x22/0x30 [ 59.408517] ? handle_edge_irq+0x2b4/0x7c0 [ 59.412737] ? task_prio+0x40/0x40 [ 59.416275] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 59.421115] do_softirq_own_stack+0x2a/0x40 [ 59.425415] [ 59.427635] do_softirq.part.19+0x14d/0x190 [ 59.431945] ? ip_finish_output2+0x874/0x1460 [ 59.436422] __local_bh_enable_ip+0x1ee/0x230 [ 59.440907] ip_finish_output2+0x8a7/0x1460 [ 59.445214] ? check_noncircular+0x20/0x20 [ 59.449442] ? dst_output+0x140/0x140 [ 59.453229] ? check_noncircular+0x20/0x20 [ 59.457459] ? ip_route_input_noref+0x1e0/0x1e0 [ 59.462114] ? __save_stack_trace+0x61/0xd0 [ 59.466506] ? xfrm_lookup+0x71a/0x23e0 [ 59.470481] ? ipv4_mtu+0x28c/0x3d0 [ 59.474102] ? __lock_is_held+0xbc/0x140 [ 59.478167] ip_finish_output+0x85e/0xd10 [ 59.482296] ? ip_finish_output+0x85e/0xd10 [ 59.486607] ? ip_fragment.constprop.49+0x200/0x200 [ 59.491624] ? nf_hook_slow+0xd3/0x1a0 [ 59.495509] ip_output+0x1cc/0x860 [ 59.499039] ? ip_mc_output+0x1340/0x1340 [ 59.503189] ? ip_fragment.constprop.49+0x200/0x200 [ 59.508202] ip_local_out+0x95/0x160 [ 59.511908] ip_queue_xmit+0x8c0/0x18e0 [ 59.515885] ? ip_build_and_send_pkt+0xc30/0xc30 [ 59.520625] ? skb_send_sock+0x50/0x50 [ 59.524497] ? reqsk_fastopen_remove+0x5e1/0x610 [ 59.529237] ? dccp_insert_option_padding+0xad/0xd0 [ 59.534244] ? dccp_insert_options+0x20f/0xcf0 [ 59.538819] ? dccp_v4_send_check+0x181/0x3b0 [ 59.543307] dccp_transmit_skb+0x9ac/0x10f0 [ 59.547630] dccp_xmit_packet+0x20f/0x730 [ 59.551770] ? dccp_send_ack+0x350/0x350 [ 59.555817] ? ccid3_hc_tx_send_packet+0x2de/0x840 [ 59.560745] dccp_write_xmit+0x17d/0x1d0 [ 59.564797] dccp_sendmsg+0x6d0/0xa80 [ 59.568591] ? lock_downgrade+0x980/0x980 [ 59.572728] ? avc_has_perm+0xd0/0x680 [ 59.576608] ? compat_dccp_getsockopt+0x70/0x70 [ 59.581259] ? sock_has_perm+0x29c/0x400 [ 59.585308] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 59.590676] ? lock_release+0xda0/0xda0 [ 59.594650] inet_sendmsg+0x11f/0x5e0 [ 59.598442] ? inet_recvmsg+0x5f0/0x5f0 [ 59.602407] ? selinux_socket_sendmsg+0x36/0x40 [ 59.607064] ? security_socket_sendmsg+0x89/0xb0 [ 59.611805] ? inet_recvmsg+0x5f0/0x5f0 [ 59.615767] sock_sendmsg+0xca/0x110 [ 59.619469] sock_write_iter+0x320/0x5e0 [ 59.623519] ? sock_sendmsg+0x110/0x110 [ 59.627499] ? iov_iter_init+0xaf/0x1d0 [ 59.631465] __vfs_write+0x68a/0x970 [ 59.635170] ? kernel_read+0x120/0x120 [ 59.639040] ? bpf_fd_pass+0x280/0x280 [ 59.642918] ? _cond_resched+0x14/0x30 [ 59.646798] ? selinux_file_permission+0x82/0x460 [ 59.651643] ? rw_verify_area+0xe5/0x2b0 [ 59.655686] ? __fdget_raw+0x20/0x20 [ 59.659388] vfs_write+0x18f/0x510 [ 59.662919] SyS_write+0xef/0x220 [ 59.666359] ? SyS_read+0x220/0x220 [ 59.669970] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 59.674973] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 59.679743] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 59.684483] RIP: 0033:0x452a39 [ 59.687656] RSP: 002b:00007fb837560c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000001 [ 59.695353] RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452a39 [ 59.702604] RDX: 000000000000005a RSI: 000000002077f000 RDI: 0000000000000005 [ 59.709860] RBP: 0000000000000384 R08: 0000000000000000 R09: 0000000000000000 [ 59.717112] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f2500 [ 59.724362] R13: 00000000ffffffff R14: 00007fb8375616d4 R15: 0000000000000000 [ 59.731649] CPU: 1 PID: 4203 Comm: syz-executor1 Not tainted 4.15.0-rc2-next-20171207+ #62 [ 59.740056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.749414] Call Trace: [ 59.751986] [ 59.754118] dump_stack+0x194/0x257 [ 59.757728] ? arch_local_irq_restore+0x53/0x53 [ 59.762384] ? tfrc_rx_handle_loss+0xb38/0x24d0 [ 59.767046] ? __lock_is_held+0xbc/0x140 [ 59.771106] tfrc_rx_hist_sample_rtt+0x407/0x4d0 [ 59.775870] ccid3_hc_rx_packet_recv+0x690/0xea7 [ 59.780624] ? dccp_parse_options+0x3d8/0x1030 [ 59.785223] ? ccid3_hc_tx_packet_recv+0xd20/0xd20 [ 59.790154] dccp_deliver_input_to_ccids+0xd9/0x250 [ 59.795172] dccp_rcv_established+0x88/0xb0 [ 59.799505] dccp_v4_do_rcv+0x12f/0x160 [ 59.803491] __sk_receive_skb+0x33e/0xc10 [ 59.807652] ? sk_free+0x40/0x40 [ 59.811032] ? inet_lhash2_lookup+0x4b0/0x4b0 [ 59.815528] ? skb_send_sock+0x50/0x50 [ 59.819430] ? dccp_invalid_packet+0x55/0x7c0 [ 59.823925] dccp_v4_rcv+0xeeb/0x1bf0 [ 59.827727] ? dccp_v4_err+0x1550/0x1550 [ 59.831776] ? find_held_lock+0x39/0x1d0 [ 59.835859] ? lock_release+0xda0/0xda0 [ 59.839841] ? __lock_is_held+0xbc/0x140 [ 59.843929] ip_local_deliver_finish+0x2e2/0xba0 [ 59.848700] ? inet_del_offload+0x40/0x40 [ 59.852871] ip_local_deliver+0x1ce/0x6e0 [ 59.857027] ? ip_call_ra_chain+0x6d0/0x6d0 [ 59.861351] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 59.866536] ? __lock_acquire+0x6e9/0x47f0 [ 59.870762] ? lock_downgrade+0x980/0x980 [ 59.874913] ip_rcv_finish+0x881/0x19a0 [ 59.878895] ? ip_local_deliver_finish+0xba0/0xba0 [ 59.883816] ? lock_downgrade+0x980/0x980 [ 59.887960] ? ip_rcv+0xc80/0x1820 [ 59.891516] ? lock_release+0xda0/0xda0 [ 59.895496] ? __lock_is_held+0xbc/0x140 [ 59.899565] ip_rcv+0xc3f/0x1820 [ 59.902930] ? ip_local_deliver+0x6e0/0x6e0 [ 59.907260] ? lock_release+0xda0/0xda0 [ 59.911422] ? __lock_is_held+0xbc/0x140 [ 59.915501] ? ip_local_deliver+0x6e0/0x6e0 [ 59.919839] __netif_receive_skb_core+0x1a3e/0x3450 [ 59.924873] ? nf_ingress+0x9f0/0x9f0 [ 59.928660] ? pvclock_read_flags+0x160/0x160 [ 59.933141] ? find_held_lock+0x39/0x1d0 [ 59.937223] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 59.942418] ? ktime_get_resolution_ns+0x300/0x300 [ 59.947360] ? check_noncircular+0x20/0x20 [ 59.951596] ? do_timer+0x50/0x50 [ 59.955050] ? native_apic_msr_write+0x5c/0x80 [ 59.959727] ? rcu_idle_enter+0x530/0x530 [ 59.963852] ? clockevents_program_event+0x108/0x2e0 [ 59.968989] ? task_prio+0x40/0x40 [ 59.972536] ? print_usage_bug+0x3f0/0x3f0 [ 59.976787] ? irq_exit+0x103/0x210 [ 59.980412] ? smp_apic_timer_interrupt+0x16b/0x700 [ 59.985421] ? smp_call_function_single_interrupt+0x640/0x640 [ 59.991292] ? find_held_lock+0x39/0x1d0 [ 59.995356] ? mark_held_locks+0xb2/0x100 [ 59.999500] ? lock_acquire+0x1d5/0x580 [ 60.003480] ? process_backlog+0x1ab/0x740 [ 60.007710] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 60.012461] ? lock_release+0xda0/0xda0 [ 60.016423] ? retint_kernel+0x10/0x10 [ 60.020298] __netif_receive_skb+0x2c/0x1b0 [ 60.024612] ? __netif_receive_skb+0x2c/0x1b0 [ 60.029114] process_backlog+0x203/0x740 [ 60.033170] ? mark_held_locks+0xb2/0x100 [ 60.037336] net_rx_action+0x792/0x1910 [ 60.041317] ? napi_complete_done+0x6c0/0x6c0 [ 60.045811] ? rebalance_domains+0x396/0xcc0 [ 60.050209] ? _raw_spin_unlock_irq+0x27/0x70 [ 60.054698] ? pick_next_task_fair+0x16b0/0x16b0 [ 60.059440] ? del_timer_sync+0x240/0x240 [ 60.063588] ? timerqueue_add+0x1e9/0x280 [ 60.067732] ? enqueue_hrtimer+0x162/0x490 [ 60.071953] ? find_held_lock+0x39/0x1d0 [ 60.076013] ? run_rebalance_domains+0x381/0x780 [ 60.080771] ? lock_acquire+0x1d5/0x580 [ 60.084750] ? rebalance_domains+0xcc0/0xcc0 [ 60.089185] ? rcu_pm_notify+0xc0/0xc0 [ 60.093069] ? check_noncircular+0x20/0x20 [ 60.097293] ? print_usage_bug+0x3f0/0x3f0 [ 60.101538] ? __irqentry_text_end+0x1f8db4/0x1f8db4 [ 60.106634] ? do_timer+0x50/0x50 [ 60.110085] ? __lock_is_held+0xbc/0x140 [ 60.114174] __do_softirq+0x29d/0xbb2 [ 60.117968] ? task_prio+0x40/0x40 [ 60.121521] ? __irqentry_text_end+0x1f8db4/0x1f8db4 [ 60.126610] ? irq_exit+0x103/0x210 [ 60.130221] ? smp_apic_timer_interrupt+0x16b/0x700 [ 60.135221] ? smp_reschedule_interrupt+0xe6/0x670 [ 60.140149] ? smp_call_function_single_interrupt+0x640/0x640 [ 60.146034] ? _raw_spin_lock+0x32/0x40 [ 60.150033] ? _raw_spin_unlock+0x22/0x30 [ 60.154193] ? handle_edge_irq+0x2b4/0x7c0 [ 60.158447] ? task_prio+0x40/0x40 [ 60.162510] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 60.167336] do_softirq_own_stack+0x2a/0x40 [ 60.171636] [ 60.173866] do_softirq.part.19+0x14d/0x190 [ 60.178184] ? ip_finish_output2+0x874/0x1460 [ 60.182675] __local_bh_enable_ip+0x1ee/0x230 [ 60.187154] ip_finish_output2+0x8a7/0x1460 [ 60.191454] ? check_noncircular+0x20/0x20 [ 60.195668] ? dst_output+0x140/0x140 [ 60.199463] ? check_noncircular+0x20/0x20 [ 60.203703] ? ip_route_input_noref+0x1e0/0x1e0 [ 60.208381] ? __save_stack_trace+0x61/0xd0 [ 60.212690] ? xfrm_lookup+0x71a/0x23e0 [ 60.216664] ? ipv4_mtu+0x28c/0x3d0 [ 60.220295] ? __lock_is_held+0xbc/0x140 [ 60.224356] ip_finish_output+0x85e/0xd10 [ 60.228487] ? ip_finish_output+0x85e/0xd10 [ 60.232795] ? ip_fragment.constprop.49+0x200/0x200 [ 60.237803] ? nf_hook_slow+0xd3/0x1a0 [ 60.241673] ip_output+0x1cc/0x860 [ 60.245189] ? ip_mc_output+0x1340/0x1340 [ 60.249323] ? ip_fragment.constprop.49+0x200/0x200 [ 60.254327] ip_local_out+0x95/0x160 [ 60.258036] ip_queue_xmit+0x8c0/0x18e0 [ 60.261997] ? ip_build_and_send_pkt+0xc30/0xc30 [ 60.266731] ? skb_send_sock+0x50/0x50 [ 60.270591] ? reqsk_fastopen_remove+0x5e1/0x610 [ 60.275320] ? dccp_insert_option_padding+0xad/0xd0 [ 60.280312] ? dccp_insert_options+0x20f/0xcf0 [ 60.284876] ? dccp_v4_send_check+0x181/0x3b0 [ 60.289524] dccp_transmit_skb+0x9ac/0x10f0 [ 60.293833] dccp_xmit_packet+0x20f/0x730 [ 60.297957] ? dccp_send_ack+0x350/0x350 [ 60.302000] ? ccid3_hc_tx_send_packet+0x2de/0x840 [ 60.306928] dccp_write_xmit+0x17d/0x1d0 [ 60.310966] dccp_sendmsg+0x6d0/0xa80 [ 60.314749] ? lock_downgrade+0x980/0x980 [ 60.318884] ? avc_has_perm+0xd0/0x680 [ 60.322755] ? compat_dccp_getsockopt+0x70/0x70 [ 60.327403] ? sock_has_perm+0x29c/0x400 [ 60.331454] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 60.336792] ? lock_release+0xda0/0xda0 [ 60.340749] inet_sendmsg+0x11f/0x5e0 [ 60.344526] ? inet_recvmsg+0x5f0/0x5f0 [ 60.348487] ? selinux_socket_sendmsg+0x36/0x40 [ 60.353140] ? security_socket_sendmsg+0x89/0xb0 [ 60.357869] ? inet_recvmsg+0x5f0/0x5f0 [ 60.361817] sock_sendmsg+0xca/0x110 [ 60.365513] sock_write_iter+0x320/0x5e0 [ 60.369549] ? sock_sendmsg+0x110/0x110 [ 60.373508] ? iov_iter_init+0xaf/0x1d0 [ 60.377458] __vfs_write+0x68a/0x970 [ 60.381151] ? kernel_read+0x120/0x120 [ 60.385012] ? bpf_fd_pass+0x280/0x280 [ 60.388896] ? _cond_resched+0x14/0x30 [ 60.392760] ? selinux_file_permission+0x82/0x460 [ 60.397584] ? rw_verify_area+0xe5/0x2b0 [ 60.401617] ? __fdget_raw+0x20/0x20 [ 60.405308] vfs_write+0x18f/0x510 [ 60.408824] SyS_write+0xef/0x220 [ 60.412256] ? SyS_read+0x220/0x220 [ 60.415854] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 60.420858] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 60.425607] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 60.430334] RIP: 0033:0x452a39 [ 60.433496] RSP: 002b:00007f3b32163c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000001 [ 60.441180] RAX: ffffffffffffffda RBX: 00007f3b32164700 RCX: 0000000000452a39 [ 60.448425] RDX: 000000000000005a RSI: 000000002077f000 RDI: 0000000000000005 [ 60.455681] RBP: 00007ffdd9aff2b0 R08: 0000000000000000 R09: 0000000000000000 [ 60.462924] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000 [ 60.470166] R13: 00007ffdd9aff22f R14: 00007f3b321649c0 R15: 000000000000000a [ 60.830289] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:425/tfrc_rx_hist_sample_rtt() [ 60.843692] CPU: 1 PID: 4369 Comm: syz-executor7 Not tainted 4.15.0-rc2-next-20171207+ #62 [ 60.853077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.862436] Call Trace: [ 60.865013] [ 60.867166] dump_stack+0x194/0x257 [ 60.870797] ? arch_local_irq_restore+0x53/0x53 [ 60.875470] ? tfrc_rx_handle_loss+0xb38/0x24d0 [ 60.880147] ? __lock_is_held+0xbc/0x140 [ 60.884223] tfrc_rx_hist_sample_rtt+0x407/0x4d0 [ 60.888969] ccid3_hc_rx_packet_recv+0x690/0xea7 [ 60.893716] ? dccp_parse_options+0x3d8/0x1030 [ 60.898309] ? ccid3_hc_tx_packet_recv+0xd20/0xd20 [ 60.903239] dccp_deliver_input_to_ccids+0xd9/0x250 [ 60.908258] dccp_rcv_established+0x88/0xb0 [ 60.912580] dccp_v4_do_rcv+0x12f/0x160 [ 60.916572] __sk_receive_skb+0x33e/0xc10 [ 60.920737] ? sk_free+0x40/0x40 [ 60.924104] ? inet_lhash2_lookup+0x4b0/0x4b0 [ 60.928595] ? skb_send_sock+0x50/0x50 [ 60.932477] ? refcount_sub_and_test+0x115/0x1b0 [ 60.937246] ? dccp_invalid_packet+0x55/0x7c0 [ 60.941750] dccp_v4_rcv+0xeeb/0x1bf0 [ 60.945571] ? dccp_v4_err+0x1550/0x1550 [ 60.949634] ? find_held_lock+0x39/0x1d0 [ 60.953709] ? lock_release+0xda0/0xda0 [ 60.957687] ? __lock_is_held+0xbc/0x140 [ 60.961767] ip_local_deliver_finish+0x2e2/0xba0 [ 60.966526] ? inet_del_offload+0x40/0x40 [ 60.970714] ip_local_deliver+0x1ce/0x6e0 [ 60.974871] ? ip_call_ra_chain+0x6d0/0x6d0 [ 60.979222] ? find_held_lock+0x39/0x1d0 [ 60.983288] ip_rcv_finish+0x881/0x19a0 [ 60.987283] ? ip_local_deliver_finish+0xba0/0xba0 [ 60.992227] ? lock_downgrade+0x980/0x980 [ 60.996372] ? ip_rcv+0xc80/0x1820 [ 60.999905] ? update_stack_state+0x225/0x700 [ 61.004382] ? lock_release+0xda0/0xda0 [ 61.008336] ? __lock_is_held+0xbc/0x140 [ 61.012385] ip_rcv+0xc3f/0x1820 [ 61.015739] ? ip_local_deliver+0x6e0/0x6e0 [ 61.020061] ? __lock_is_held+0xbc/0x140 [ 61.024105] ? ip_local_deliver+0x6e0/0x6e0 [ 61.028406] __netif_receive_skb_core+0x1a3e/0x3450 [ 61.033408] ? nf_ingress+0x9f0/0x9f0 [ 61.037206] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 61.042369] ? check_noncircular+0x20/0x20 [ 61.046582] ? apic_timer_interrupt+0xa9/0xb0 [ 61.051056] ? save_stack_trace+0x1a/0x20 [ 61.055179] ? __lock_acquire+0x324e/0x47f0 [ 61.059485] ? __lock_is_held+0xbc/0x140 [ 61.063523] ? check_noncircular+0x20/0x20 [ 61.067743] ? __lock_is_held+0xbc/0x140 [ 61.071796] ? find_held_lock+0x39/0x1d0 [ 61.075840] ? print_usage_bug+0x3f0/0x3f0 [ 61.080055] ? lock_acquire+0x1d5/0x580 [ 61.084001] ? process_backlog+0x1ab/0x740 [ 61.088225] ? lock_release+0xda0/0xda0 [ 61.092170] ? lock_release+0xda0/0xda0 [ 61.096129] __netif_receive_skb+0x2c/0x1b0 [ 61.100426] ? __netif_receive_skb+0x2c/0x1b0 [ 61.104897] process_backlog+0x203/0x740 [ 61.108929] ? mark_held_locks+0xb2/0x100 [ 61.113063] net_rx_action+0x792/0x1910 [ 61.117049] ? napi_complete_done+0x6c0/0x6c0 [ 61.121528] ? rcu_read_lock_sched_held+0x108/0x120 [ 61.127216] ? rcu_process_callbacks+0x3a0/0x17d0 [ 61.132043] ? del_timer_sync+0x240/0x240 [ 61.136166] ? note_gp_changes+0x650/0x650 [ 61.140378] ? timerqueue_add+0x1e9/0x280 [ 61.144510] ? enqueue_hrtimer+0x162/0x490 [ 61.148724] ? find_held_lock+0x39/0x1d0 [ 61.152769] ? lock_downgrade+0x980/0x980 [ 61.156890] ? lock_acquire+0x1d5/0x580 [ 61.160839] ? clockevents_program_event+0x163/0x2e0 [ 61.165923] ? lock_downgrade+0x980/0x980 [ 61.170056] ? rcu_pm_notify+0xc0/0xc0 [ 61.173926] ? check_noncircular+0x20/0x20 [ 61.178138] ? print_usage_bug+0x3f0/0x3f0 [ 61.182356] ? __irqentry_text_end+0x1f8db4/0x1f8db4 [ 61.187433] ? do_timer+0x50/0x50 [ 61.190868] ? __lock_is_held+0xbc/0x140 [ 61.194916] __do_softirq+0x29d/0xbb2 [ 61.198689] ? task_prio+0x40/0x40 [ 61.202214] ? __irqentry_text_end+0x1f8db4/0x1f8db4 [ 61.207290] ? irq_exit+0x103/0x210 [ 61.210889] ? smp_apic_timer_interrupt+0x16b/0x700 [ 61.215879] ? smp_reschedule_interrupt+0xe6/0x670 [ 61.220781] ? smp_call_function_single_interrupt+0x640/0x640 [ 61.226637] ? _raw_spin_lock+0x32/0x40 [ 61.230588] ? _raw_spin_unlock+0x22/0x30 [ 61.234708] ? handle_edge_irq+0x2b4/0x7c0 [ 61.238916] ? task_prio+0x40/0x40 [ 61.242439] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 61.247265] do_softirq_own_stack+0x2a/0x40 [ 61.251560] [ 61.253773] do_softirq.part.19+0x14d/0x190 [ 61.258070] ? ip_finish_output2+0x874/0x1460 [ 61.262537] __local_bh_enable_ip+0x1ee/0x230 [ 61.267015] ip_finish_output2+0x8a7/0x1460 [ 61.271318] ? check_noncircular+0x20/0x20 [ 61.275531] ? dst_output+0x140/0x140 [ 61.279305] ? check_noncircular+0x20/0x20 [ 61.283519] ? ip_route_input_noref+0x1e0/0x1e0 [ 61.288162] ? __save_stack_trace+0x61/0xd0 [ 61.292456] ? xfrm_lookup+0x71a/0x23e0 [ 61.296408] ? ipv4_mtu+0x28c/0x3d0 [ 61.300028] ? __lock_is_held+0xbc/0x140 [ 61.304079] ip_finish_output+0x85e/0xd10 [ 61.308200] ? ip_finish_output+0x85e/0xd10 [ 61.312499] ? ip_fragment.constprop.49+0x200/0x200 [ 61.317501] ? nf_hook_slow+0xd3/0x1a0 [ 61.321368] ip_output+0x1cc/0x860 [ 61.324884] ? ip_mc_output+0x1340/0x1340 [ 61.329031] ? ip_fragment.constprop.49+0x200/0x200 [ 61.334039] ip_local_out+0x95/0x160 [ 61.337734] ip_queue_xmit+0x8c0/0x18e0 [ 61.341692] ? ip_build_and_send_pkt+0xc30/0xc30 [ 61.346421] ? skb_send_sock+0x50/0x50 [ 61.350282] ? reqsk_fastopen_remove+0x5e1/0x610 [ 61.355019] ? dccp_insert_option_padding+0xad/0xd0 [ 61.360022] ? dccp_insert_options+0x20f/0xcf0 [ 61.364587] ? dccp_v4_send_check+0x181/0x3b0 [ 61.369074] dccp_transmit_skb+0x9ac/0x10f0 [ 61.373390] dccp_xmit_packet+0x20f/0x730 [ 61.377519] ? dccp_send_ack+0x350/0x350