BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:422/tfrc_rx_hist_sample_rtt() CPU: 0 PID: 28642 Comm: syz-executor.2 Not tainted 5.0.0-rc8+ #88 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x172/0x1f0 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold+0x56/0x61 net/dccp/ccids/lib/packet_history.c:422 ccid3_hc_rx_packet_recv+0x5c6/0xeb0 net/dccp/ccids/ccid3.c:767 ccid_hc_rx_packet_recv net/dccp/ccid.h:185 [inline] dccp_deliver_input_to_ccids+0xee/0x280 net/dccp/input.c:180 dccp_rcv_established net/dccp/input.c:378 [inline] dccp_rcv_established+0x83/0xb0 net/dccp/input.c:368 dccp_v4_do_rcv+0x139/0x190 net/dccp/ipv4.c:659 sk_backlog_rcv include/net/sock.h:936 [inline] __release_sock+0x12e/0x3a0 net/core/sock.c:2284 release_sock+0x59/0x1c0 net/core/sock.c:2800 dccp_sendmsg+0x683/0xd00 net/dccp/proto.c:818 inet_sendmsg+0x147/0x5d0 net/ipv4/af_inet.c:798 sock_sendmsg_nosec net/socket.c:621 [inline] sock_sendmsg+0xdd/0x130 net/socket.c:631 ___sys_sendmsg+0x3e2/0x930 net/socket.c:2114 __sys_sendmmsg+0x1c3/0x4e0 net/socket.c:2209 __do_sys_sendmmsg net/socket.c:2238 [inline] __se_sys_sendmmsg net/socket.c:2235 [inline] __x64_sys_sendmmsg+0x9d/0x100 net/socket.c:2235 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457e29 Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f710c6cdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 RDX: 00000000000003a6 RSI: 0000000020005700 RDI: 0000000000000008 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f710c6ce6d4 R13: 00000000004c4dd7 R14: 00000000004d8b10 R15: 00000000ffffffff cgroup: cgroup2: unknown option "6]ce!?ecZ%" dccp_close: ABORT with 1061 bytes unread dccp_close: ABORT with 1061 bytes unread dccp_close: ABORT with 9729 bytes unread netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. cgroup: cgroup2: unknown option "6]Lce!?ecZ%" netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. cgroup: cgroup2: unknown option "6] e!?ecZ%" cgroup: cgroup2: unknown option "6] e!?ecZ%" netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. cgroup: cgroup2: unknown option "6]%e!?ecZ%" netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. cgroup: cgroup2: unknown option "6]c e!?ecZ%" cgroup: cgroup2: unknown option "6]c e!?ecZ%" netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. cgroup: cgroup2: unknown option "6]cLe!?ecZ%" Unknown ioctl 19304 Unknown ioctl 19304 cgroup: cgroup2: unknown option "6]ce ?ecZ%" cgroup: cgroup2: unknown option "6]ce ?ecZ%" cgroup: cgroup2: unknown option "6]ceL?ecZ%" cgroup: cgroup2: unknown option "6]ce! ecZ%" cgroup: cgroup2: unknown option "6]ce! ecZ%" cgroup: cgroup2: unknown option "6]ce!LecZ%" cgroup: cgroup2: unknown option "6]ce!? cZ%" cgroup: cgroup2: unknown option "6]ce!? cZ%" cgroup: cgroup2: unknown option "6]ce!?e Z%" cgroup: cgroup2: unknown option "6]ce!?e Z%" cgroup: cgroup2: unknown option "6]ce!?e%Z%" Invalid option length (1048117) for dns_resolver key Invalid option length (1048117) for dns_resolver key __nla_parse: 16 callbacks suppressed netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. cgroup: cgroup2: unknown option "6]ce!?ec %" cgroup: cgroup2: unknown option "6]ce!?ec %" bond0: Releasing backup interface bond_slave_1 cgroup: cgroup2: unknown option "6]ce!?ecZ " kvm [29031]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 kvm [29031]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. cgroup: cgroup2: unknown option "6]ce!?ecZ " cgroup: cgroup2: unknown option "6]ce!?ecZL" netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) ptrace attach of "/root/syz-executor.3"[7530] was attempted by "/root/syz-executor.3"[29083] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. cgroup: cgroup2: unknown option "6]ce!?ecZ%Y˚ \c؏ Y6 l <1:)O{(*$?}9E)bXc:TE" cgroup: cgroup2: unknown option "6]ce!?ecZ%Y˚ \c؏ Y6 l <1:)O{(*$?}9E)bXc:TE" bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. cgroup: cgroup2: unknown option "6]ce!?ecZ%Y˚ \c؏ Y6 l <1:)O{(*$?}9E)bXc:TE" netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. cgroup: cgroup2: unknown option "6]ce!?ecZ%Y˚ \c؏ Y6 l <1:)O{(*$?}9E)bXc:TE" netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. ptrace attach of "/root/syz-executor.3"[7530] was attempted by "/root/syz-executor.3"[29154] cgroup: cgroup2: unknown option "6]ce!?ecZ%Y˚ \c؏ Y6 l <1:)O{(*$?}9E)bXc:TE" netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. cgroup: cgroup2: unknown option "6]ce!?ecZ%Y˚ \c؏ Y6 l <1:)O{(*$?}9E)bXc:TE" netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. device bond_slave_1 entered promiscuous mode bond0: Enslaving bond_slave_1 as an active interface with an up link ptrace attach of "/root/syz-executor.2"[6924] was attempted by "/root/syz-executor.2"[29207] cgroup: cgroup2: unknown option "6]ce!?ecZ%Y˚ \c؏ Y6 l <1:)O{(*$?}9E)bXc:TE" bond0: Releasing backup interface bond_slave_1 bond0: the permanent HWaddr of bond_slave_1 - aa:77:cf:3f:a6:fb - is still in use by bond0 - set the HWaddr of bond_slave_1 to a different address to avoid conflicts ptrace attach of "/root/syz-executor.3"[7530] was attempted by "/root/syz-executor.3"[29221] device bond_slave_1 left promiscuous mode cgroup: cgroup2: unknown option "6]ce!?ecZ%`Y˚ \c؏ Y6 l <1:)O{(*$?}9E)bXc:TE" ptrace attach of "/root/syz-executor.3"[7530] was attempted by "/root/syz-executor.3"[29238] cgroup: cgroup2: unknown option "6]ce!?ecZ%" ptrace attach of "/root/syz-executor.2"[6924] was attempted by "/root/syz-executor.2"[29246] cgroup: cgroup2: unknown option "6]ce!?ecZ%" cgroup: cgroup2: unknown option "6]ce!?ecZ%" cgroup: cgroup2: unknown option "6]ce!?ecZ%" cgroup: cgroup2: unknown option "6]ce!?ecZ%" cgroup: cgroup2: unknown option "6]ce!?ecZ%" cgroup: cgroup2: unknown option "6]ce!?ecZ%" bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) cgroup: cgroup2: unknown option "6]ce!?ecZ%" cgroup: cgroup2: unknown option "6]ce!?ecZ%" QAT: Invalid ioctl QAT: Invalid ioctl __nla_parse: 1 callbacks suppressed netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. cgroup: cgroup2: unknown option "6]ce!?ecZ%" QAT: Invalid ioctl cgroup: cgroup2: unknown option "6]ce!?ecZ%"