BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:417/tfrc_rx_hist_sample_rtt()
CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.12.0-rc1-syzkaller-00237-gcf9545686230 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: rcu_gp process_srcu
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 tfrc_rx_hist_sample_rtt+0x397/0x4b0 net/dccp/ccids/lib/packet_history.c:414
 ccid3_hc_rx_packet_recv+0x69d/0xe60 net/dccp/ccids/ccid3.c:760
 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline]
 dccp_deliver_input_to_ccids net/dccp/input.c:176 [inline]
 dccp_rcv_established+0x1bb/0x320 net/dccp/input.c:374
 dccp_v4_do_rcv+0xff/0x1f0 net/dccp/ipv4.c:680
 sk_backlog_rcv include/net/sock.h:1119 [inline]
 __sk_receive_skb+0x82b/0x8b0 net/core/sock.c:570
 ip_protocol_deliver_rcu+0x2e9/0x440 net/ipv4/ip_input.c:205
 ip_local_deliver_finish+0x341/0x5f0 net/ipv4/ip_input.c:233
 NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314
 NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314
 __netif_receive_skb_one_core net/core/dev.c:5666 [inline]
 __netif_receive_skb+0x2bf/0x650 net/core/dev.c:5779
 process_backlog+0x662/0x15b0 net/core/dev.c:6111
 __napi_poll+0xcb/0x490 net/core/dev.c:6775
 napi_poll net/core/dev.c:6844 [inline]
 net_rx_action+0x89b/0x1240 net/core/dev.c:6966
 handle_softirqs+0x2c5/0x980 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1037
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:rdtsc_ordered arch/x86/include/asm/msr.h:217 [inline]
RIP: 0010:delay_tsc+0x73/0xe0 arch/x86/lib/delay.c:72
Code: 00 e8 41 c7 a1 f5 65 8b 05 32 6b 42 74 85 c0 74 2f f3 90 bf 01 00 00 00 e8 8a c5 a1 f5 e8 65 07 04 00 41 39 c7 75 20 0f 01 f9 <66> 90 48 89 d5 48 c1 e5 20 48 09 c5 48 29 dd 49 39 ee 77 be eb 23
RSP: 0018:ffffc900001f7a30 EFLAGS: 00000246
RAX: 00000000fe55c89a RBX: 0000004efe55baba RCX: 0000000000000001
RDX: 000000000000004e RSI: ffffffff8c60f840 RDI: ffffffff8c60f800
RBP: 0000000000000d50 R08: ffff8880b874660f R09: 1ffff110170e8cc1
R10: dffffc0000000000 R11: ffffffff8bc16c40 R12: ffffffff9a440d68
R13: 0000000000000002 R14: 0000000000002afa R15: 0000000000000001
 try_check_zero+0x392/0x3e0 kernel/rcu/srcutree.c:1087
 srcu_advance_state kernel/rcu/srcutree.c:1709 [inline]
 process_srcu+0x24a/0x1320 kernel/rcu/srcutree.c:1818
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310
 worker_thread+0x870/0xd30 kernel/workqueue.c:3391
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
----------------
Code disassembly (best guess):
   0:	00 e8                	add    %ch,%al
   2:	41 c7                	rex.B (bad)
   4:	a1 f5 65 8b 05 32 6b 	movabs 0x74426b32058b65f5,%eax
   b:	42 74
   d:	85 c0                	test   %eax,%eax
   f:	74 2f                	je     0x40
  11:	f3 90                	pause
  13:	bf 01 00 00 00       	mov    $0x1,%edi
  18:	e8 8a c5 a1 f5       	call   0xf5a1c5a7
  1d:	e8 65 07 04 00       	call   0x40787
  22:	41 39 c7             	cmp    %eax,%r15d
  25:	75 20                	jne    0x47
  27:	0f 01 f9             	rdtscp
* 2a:	66 90                	xchg   %ax,%ax <-- trapping instruction
  2c:	48 89 d5             	mov    %rdx,%rbp
  2f:	48 c1 e5 20          	shl    $0x20,%rbp
  33:	48 09 c5             	or     %rax,%rbp
  36:	48 29 dd             	sub    %rbx,%rbp
  39:	49 39 ee             	cmp    %rbp,%r14
  3c:	77 be                	ja     0xfffffffc
  3e:	eb 23                	jmp    0x63