can: request_module (can-proto-0) failed. dccp_close: ABORT with 24 bytes unread BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() CPU: 1 PID: 4740 Comm: syz-executor1 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 dccp_close: ABORT with 24 bytes unread ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f152c256c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f152c2576d4 R15: 0000000000000002 CPU: 0 PID: 4759 Comm: syz-executor3 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f4552b51c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f4552b526d4 R15: 0000000000000002 CPU: 1 PID: 4765 Comm: syz-executor2 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 dccp_close: ABORT with 24 bytes unread sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 dccp_close: ABORT with 24 bytes unread dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f1136d0fc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f1136d106d4 R15: 0000000000000002 CPU: 0 PID: 4780 Comm: syz-executor5 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 dccp_close: ABORT with 24 bytes unread Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f6b497a0c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f6b497a16d4 R15: 0000000000000002 CPU: 1 PID: 4789 Comm: syz-executor Not tainted 5.3.0-rc2+ #1 dccp_close: ABORT with 24 bytes unread Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 dccp_close: ABORT with 24 bytes unread ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_close: ABORT with 24 bytes unread dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f5f643d3c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f5f643d46d4 R15: 0000000000000002 CPU: 0 PID: 4812 Comm: syz-executor5 Not tainted 5.3.0-rc2+ #1 dccp_close: ABORT with 24 bytes unread Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 dccp_close: ABORT with 24 bytes unread ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f6b4977fc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071c010 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f6b497806d4 R15: 0000000000000004 CPU: 1 PID: 4823 Comm: syz-executor1 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f152c256c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f152c2576d4 R15: 0000000000000002 CPU: 0 PID: 4849 Comm: syz-executor4 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f68bd687c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f68bd6886d4 R15: 0000000000000002 CPU: 1 PID: 4870 Comm: syz-executor5 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f6b497a0c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f6b497a16d4 R15: 0000000000000002 CPU: 0 PID: 4872 Comm: syz-executor2 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f1136d0fc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f1136d106d4 R15: 0000000000000002 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() CPU: 0 PID: 4888 Comm: syz-executor4 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f68bd687c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f68bd6886d4 R15: 0000000000000002 CPU: 1 PID: 4909 Comm: syz-executor5 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f6b497a0c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f6b497a16d4 R15: 0000000000000002 CPU: 0 PID: 4915 Comm: syz-executor3 Not tainted 5.3.0-rc2+ #1 net_ratelimit: 25 callbacks suppressed dccp_close: ABORT with 24 bytes unread Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 dccp_close: ABORT with 24 bytes unread ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 dccp_close: ABORT with 24 bytes unread sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 dccp_close: ABORT with 24 bytes unread ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 dccp_close: ABORT with 24 bytes unread dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f4552b51c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f4552b526d4 R15: 0000000000000002 CPU: 1 PID: 4940 Comm: syz-executor5 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 dccp_close: ABORT with 24 bytes unread Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 dccp_close: ABORT with 24 bytes unread sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 dccp_close: ABORT with 24 bytes unread ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 dccp_close: ABORT with 24 bytes unread __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 dccp_close: ABORT with 24 bytes unread napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f6b497a0c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f6b497a16d4 R15: 0000000000000002 CPU: 0 PID: 4966 Comm: syz-executor2 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f1136ceec58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071c010 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f1136cef6d4 R15: 0000000000000004 CPU: 1 PID: 4980 Comm: syz-executor5 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f6b497a0c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f6b497a16d4 R15: 0000000000000002 CPU: 0 PID: 4991 Comm: syz-executor Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f5f643d3c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f5f643d46d4 R15: 0000000000000002 CPU: 1 PID: 4998 Comm: syz-executor3 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f4552b51c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f4552b526d4 R15: 0000000000000002 CPU: 0 PID: 5014 Comm: syz-executor5 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f6b497a0c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f6b497a16d4 R15: 0000000000000002 CPU: 1 PID: 5020 Comm: syz-executor1 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f152c256c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f152c2576d4 R15: 0000000000000002 CPU: 0 PID: 5038 Comm: syz-executor3 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f4552b51c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f4552b526d4 R15: 0000000000000002 CPU: 1 PID: 5066 Comm: syz-executor5 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5113 process_backlog+0x1cc/0x680 net/core/dev.c:5924 napi_poll net/core/dev.c:6347 [inline] net_rx_action+0x42d/0xd50 net/core/dev.c:6413 __do_softirq+0x248/0x94c kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1080 do_softirq.part.17+0x11a/0x150 kernel/softirq.c:337 do_softirq arch/x86/include/asm/preempt.h:26 [inline] __local_bh_enable_ip+0x1ee/0x230 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:681 [inline] ip_finish_output2+0x6da/0x2220 net/ipv4/ip_output.c:229 __ip_finish_output+0x382/0xa90 net/ipv4/ip_output.c:308 ip_finish_output+0x27/0x170 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0x1b3/0x5d0 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x7a/0x140 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x6f6/0x1df0 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x70 include/net/ip.h:236 dccp_transmit_skb+0xb76/0x1290 net/dccp/output.c:138 dccp_xmit_packet+0x1a0/0x580 net/dccp/output.c:277 dccp_write_xmit+0x128/0x180 net/dccp/output.c:359 dccp_sendmsg+0x676/0xd90 net/dccp/proto.c:812 inet_sendmsg+0xbd/0xe0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xdf/0x110 net/socket.c:657 ___sys_sendmsg+0x658/0x990 net/socket.c:2311 __sys_sendmsg+0xd9/0x180 net/socket.c:2356 __do_sys_sendmsg net/socket.c:2365 [inline] __se_sys_sendmsg net/socket.c:2363 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2363 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x452f89 Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f6b497a0c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 R13: 00000000ffffffff R14: 00007f6b497a16d4 R15: 0000000000000002 CPU: 0 PID: 5084 Comm: syz-executor1 Not tainted 5.3.0-rc2+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x115/0x167 lib/dump_stack.c:113 tfrc_rx_hist_sample_rtt.cold.4+0x47/0x4f net/dccp/ccids/lib/packet_history.c:409 ccid3_hc_rx_packet_recv+0x471/0xeb0 net/dccp/ccids/ccid3.c:754 ccid_hc_rx_packet_recv net/dccp/ccid.h:182 [inline] dccp_deliver_input_to_ccids+0xcc/0x220 net/dccp/input.c:176 dccp_rcv_established+0x49/0x70 net/dccp/input.c:374 dccp_v4_do_rcv+0xf4/0x160 net/dccp/ipv4.c:655 sk_backlog_rcv include/net/sock.h:945 [inline] __sk_receive_skb+0x2a8/0x9b0 net/core/sock.c:522 dccp_v4_rcv+0xbea/0x1bbd net/dccp/ipv4.c:876 ip_protocol_deliver_rcu+0x537/0x740 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0x1ee/0x2f0 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:305 [inline] ip_local_deliver+0x30b/0x460 net/ipv4/ip_input.c:252 dst_input include/net/dst.h:442 [inline] ip_rcv_finish+0xae/0x180 net/ipv4/ip_input.c:413 NF_HOOK include/linux/netfilter.h:305 [inline] ip_rcv+0xcb/0x2f0 net/ipv4/ip_input.c:523 __netif_receive_skb_one_core+0x132/0x190 net/core/dev.c:4999