Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts. 2023/09/07 00:19:35 ignoring optional flag "sandboxArg"="0" 2023/09/07 00:19:35 parsed 1 programs 2023/09/07 00:19:35 executed programs: 0 [ 73.692971][ T4434] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.700356][ T4434] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.708145][ T4434] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.715602][ T4434] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.722758][ T4434] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.809749][ T5381] chnl_net:caif_netlink_parms(): no params data found [ 73.851567][ T5381] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.858745][ T5381] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.865986][ T5381] bridge_slave_0: entered allmulticast mode [ 73.872864][ T5381] bridge_slave_0: entered promiscuous mode [ 73.880459][ T5381] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.887618][ T5381] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.894866][ T5381] bridge_slave_1: entered allmulticast mode [ 73.901823][ T5381] bridge_slave_1: entered promiscuous mode [ 73.922288][ T5381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.933537][ T5381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.956470][ T5381] team0: Port device team_slave_0 added [ 73.964322][ T5381] team0: Port device team_slave_1 added [ 73.983094][ T5381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.990259][ T5381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.017017][ T5381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.030024][ T5381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.037596][ T5381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.064066][ T5381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.093772][ T5381] hsr_slave_0: entered promiscuous mode [ 74.100243][ T5381] hsr_slave_1: entered promiscuous mode [ 74.554487][ T5381] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.567618][ T5381] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.578684][ T5381] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.589302][ T5381] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.614244][ T5381] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.621460][ T5381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.628998][ T5381] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.636326][ T5381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.700222][ T5381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.716773][ T27] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.724806][ T27] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.740459][ T5381] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.753223][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.760493][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.774846][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.782024][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.824003][ T5381] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.836670][ T5381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.967915][ T5381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.010320][ T5381] veth0_vlan: entered promiscuous mode [ 75.023169][ T5381] veth1_vlan: entered promiscuous mode [ 75.054287][ T5381] veth0_macvtap: entered promiscuous mode [ 75.064382][ T5381] veth1_macvtap: entered promiscuous mode [ 75.085508][ T5381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.100417][ T5381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.113722][ T5381] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.123739][ T5381] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.134883][ T5381] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.145553][ T5381] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.202833][ T23] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.216565][ T23] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.241747][ T23] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.251585][ T23] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.300739][ T5450] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 75.320905][ T5450] dccp_xmit_packet: Payload too large (65475) for featneg. [ 75.426552][ T5459] dccp_xmit_packet: Payload too large (65475) for featneg. [ 75.495337][ T5464] dccp_xmit_packet: Payload too large (65475) for featneg. [ 75.544292][ T5469] dccp_xmit_packet: Payload too large (65475) for featneg. [ 75.608164][ T5472] dccp_xmit_packet: Payload too large (65475) for featneg. [ 75.669147][ T5477] dccp_xmit_packet: Payload too large (65475) for featneg. [ 75.717473][ T5481] dccp_xmit_packet: Payload too large (65475) for featneg. [ 75.755445][ T4434] Bluetooth: hci0: command 0x0409 tx timeout [ 75.769655][ T5484] dccp_xmit_packet: Payload too large (65475) for featneg. [ 75.831796][ T5491] dccp_xmit_packet: Payload too large (65475) for featneg. [ 75.892983][ T5495] dccp_xmit_packet: Payload too large (65475) for featneg. [ 76.432969][ C1] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:417/tfrc_rx_hist_sample_rtt() [ 76.447062][ C1] CPU: 1 PID: 5539 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12107-g7ba2090ca64e #0 [ 76.457684][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 76.468100][ C1] Call Trace: [ 76.471491][ C1] [ 76.474552][ C1] dump_stack_lvl+0x1e7/0x2d0 [ 76.479269][ C1] ? nf_tcp_handle_invalid+0x650/0x650 [ 76.485126][ C1] ? panic+0x770/0x770 [ 76.489339][ C1] tfrc_rx_hist_sample_rtt+0x393/0x4b0 [ 76.494934][ C1] ccid3_hc_rx_packet_recv+0x6ae/0xf50 [ 76.500692][ C1] ? ccid3_hc_tx_exit+0x60/0x60 [ 76.505938][ C1] dccp_rcv_established+0x1b7/0x310 [ 76.511444][ C1] dccp_v4_do_rcv+0xff/0x1e0 [ 76.516163][ C1] ? ip_protocol_deliver_rcu+0x208/0x3f0 [ 76.521929][ C1] __sk_receive_skb+0x41e/0x9d0 [ 76.527007][ C1] ip_protocol_deliver_rcu+0x208/0x3f0 [ 76.532699][ C1] ip_local_deliver_finish+0x28e/0x4c0 [ 76.538393][ C1] NF_HOOK+0x368/0x410 [ 76.542501][ C1] ? ipt_alloc_initial_table+0x570/0x570 [ 76.548171][ C1] ? NF_HOOK+0x410/0x410 [ 76.552463][ C1] ? ip_local_deliver+0x190/0x190 [ 76.558442][ C1] ? ip_rcv_finish_core+0xc46/0x1b40 [ 76.563772][ C1] ? NF_HOOK+0x410/0x410 [ 76.568050][ C1] ? ip_local_deliver+0x111/0x190 [ 76.573126][ C1] NF_HOOK+0x368/0x410 [ 76.577321][ C1] ? ip_rcv_core+0xd90/0xd90 [ 76.581953][ C1] ? ip_local_deliver+0x190/0x190 [ 76.587370][ C1] ? ip_rcv_core+0x877/0xd90 [ 76.592009][ C1] ? ip_rcv_core+0xd90/0xd90 [ 76.596989][ C1] ? ip_local_deliver_finish+0x4c0/0x4c0 [ 76.602664][ C1] ? ip_local_deliver_finish+0x4c0/0x4c0 [ 76.608820][ C1] __netif_receive_skb+0x1ca/0x530 [ 76.614326][ C1] ? read_lock_is_recursive+0x20/0x20 [ 76.620015][ C1] ? __netif_receive_skb_list_core+0x890/0x890 [ 76.626295][ C1] ? print_irqtrace_events+0x220/0x220 [ 76.631982][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 76.637409][ C1] ? rcu_is_watching+0x15/0xb0 [ 76.642346][ C1] process_backlog+0x34b/0x710 [ 76.647382][ C1] ? trigger_rx_softirq+0x60/0x60 [ 76.652908][ C1] ? print_irqtrace_events+0x220/0x220 [ 76.658594][ C1] ? __asan_memset+0x23/0x40 [ 76.663239][ C1] __napi_poll+0xc7/0x470 [ 76.667627][ C1] net_rx_action+0x78b/0x1010 [ 76.672882][ C1] ? net_tx_action+0xa00/0xa00 [ 76.677686][ C1] ? net_tx_action+0x989/0xa00 [ 76.682503][ C1] __do_softirq+0x2ab/0x908 [ 76.687064][ C1] ? __irq_exit_rcu+0xf1/0x1b0 [ 76.691977][ C1] ? __lock_text_end+0xc/0xc [ 76.696625][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 76.702057][ C1] __irq_exit_rcu+0xf1/0x1b0 [ 76.706783][ C1] ? irq_exit_rcu+0x20/0x20 [ 76.711421][ C1] irq_exit_rcu+0x9/0x20 [ 76.715970][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 76.721739][ C1] [ 76.724865][ C1] [ 76.727908][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 76.733932][ C1] RIP: 0010:bpf_lsm_socket_sendmsg+0x0/0x10 [ 76.739869][ C1] Code: 04 d8 ff 31 c0 c3 0f 1f 40 00 f3 0f 1e fa e8 37 04 d8 ff 31 c0 c3 0f 1f 40 00 f3 0f 1e fa e8 27 04 d8 ff 31 c0 c3 0f 1f 40 00 0f 1e fa e8 17 04 d8 ff 31 c0 c3 0f 1f 40 00 f3 0f 1e fa e8 07 [ 76.760129][ C1] RSP: 0018:ffffc9000552f880 EFLAGS: 00000246 [ 76.766327][ C1] RAX: 1ffffffff1998274 RBX: ffffffff8ccc1388 RCX: ffff888020efd940 [ 76.774592][ C1] RDX: 0000000000000000 RSI: ffffc9000552fd40 RDI: ffff888076673000 [ 76.782949][ C1] RBP: ffffffff8ccc13a0 R08: ffffffff83fd9045 R09: ffffffff83fd8fad [ 76.791072][ C1] R10: 0000000000000003 R11: ffff888020efd940 R12: ffff888076673000 [ 76.795516][ T780] cfg80211: failed to load regulatory.db [ 76.799398][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9000552fd40 [ 76.813358][ C1] ? tomoyo_socket_sendmsg_permission+0x12d/0x410 [ 76.819821][ C1] ? tomoyo_socket_sendmsg_permission+0x1c5/0x410 [ 76.826385][ C1] security_socket_sendmsg+0x71/0xa0 [ 76.831898][ C1] ____sys_sendmsg+0x513/0x890 [ 76.836886][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 76.842158][ C1] __sys_sendmmsg+0x3b2/0x730 [ 76.846994][ C1] ? __ia32_sys_sendmsg+0x90/0x90 [ 76.852076][ C1] ? futex_unqueue+0xcb/0xf0 [ 76.856800][ C1] ? rcu_is_watching+0x15/0xb0 [ 76.861593][ C1] ? lock_acquire+0xe3/0x520 [ 76.866386][ C1] ? rcu_is_watching+0x15/0xb0 [ 76.871182][ C1] ? lock_release+0xbf/0x9d0 [ 76.876254][ C1] ? __might_sleep+0xc0/0xc0 [ 76.880975][ C1] ? __lock_acquire+0x7f70/0x7f70 [ 76.886070][ C1] ? wait_woken+0x180/0x180 [ 76.890707][ C1] ? inet_stream_connect+0x88/0xa0 [ 76.895948][ C1] ? _local_bh_enable+0xa0/0xa0 [ 76.901286][ C1] ? print_irqtrace_events+0x220/0x220 [ 76.907054][ C1] ? rcu_is_watching+0x15/0xb0 [ 76.912138][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 76.917134][ C1] do_syscall_64+0x41/0xc0 [ 76.921773][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.928047][ C1] RIP: 0033:0x7f62b347c8c9 [ 76.932595][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 76.952942][ C1] RSP: 002b:00007f62b42930c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 76.961926][ C1] RAX: ffffffffffffffda RBX: 00007f62b359bf80 RCX: 00007f62b347c8c9 [ 76.970022][ C1] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 76.978109][ C1] RBP: 00007f62b34d8ae8 R08: 0000000000000000 R09: 0000000000000000 [ 76.986367][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.994548][ C1] R13: 000000000000000b R14: 00007f62b359bf80 R15: 00007ffc9f33d478 [ 77.002731][ C1] [ 77.188279][ C1] Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1537/dccp_feat_activate_values() [ 77.840961][ T4434] Bluetooth: hci0: command 0x041b tx timeout [ 78.088981][ C0] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:417/tfrc_rx_hist_sample_rtt() [ 78.103338][ C0] CPU: 0 PID: 5645 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12107-g7ba2090ca64e #0 [ 78.113441][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 78.123612][ C0] Call Trace: [ 78.126904][ C0] [ 78.129864][ C0] dump_stack_lvl+0x1e7/0x2d0 [ 78.135066][ C0] ? nf_tcp_handle_invalid+0x650/0x650 [ 78.140625][ C0] ? panic+0x770/0x770 [ 78.144711][ C0] tfrc_rx_hist_sample_rtt+0x393/0x4b0 [ 78.150378][ C0] ccid3_hc_rx_packet_recv+0x6ae/0xf50 [ 78.155968][ C0] ? ccid3_hc_tx_exit+0x60/0x60 [ 78.161395][ C0] dccp_rcv_established+0x1b7/0x310 [ 78.166617][ C0] dccp_v4_do_rcv+0xff/0x1e0 [ 78.171310][ C0] ? ip_protocol_deliver_rcu+0x208/0x3f0 [ 78.178240][ C0] __sk_receive_skb+0x41e/0x9d0 [ 78.183168][ C0] ip_protocol_deliver_rcu+0x208/0x3f0 [ 78.188711][ C0] ip_local_deliver_finish+0x28e/0x4c0 [ 78.194265][ C0] NF_HOOK+0x368/0x410 [ 78.198333][ C0] ? ipt_alloc_initial_table+0x570/0x570 [ 78.204996][ C0] ? NF_HOOK+0x410/0x410 [ 78.209420][ C0] ? ip_local_deliver+0x190/0x190 [ 78.214436][ C0] ? ip_rcv_finish_core+0xc46/0x1b40 [ 78.219805][ C0] ? NF_HOOK+0x410/0x410 [ 78.224296][ C0] ? ip_local_deliver+0x111/0x190 [ 78.229320][ C0] NF_HOOK+0x368/0x410 [ 78.233423][ C0] ? ip_rcv_core+0xd90/0xd90 [ 78.238013][ C0] ? ip_local_deliver+0x190/0x190 [ 78.243823][ C0] ? ip_rcv_core+0x877/0xd90 [ 78.248512][ C0] ? ip_rcv_core+0xd90/0xd90 [ 78.253216][ C0] ? ip_local_deliver_finish+0x4c0/0x4c0 [ 78.259140][ C0] ? ip_local_deliver_finish+0x4c0/0x4c0 [ 78.264956][ C0] __netif_receive_skb+0x1ca/0x530 [ 78.270085][ C0] ? read_lock_is_recursive+0x20/0x20 [ 78.275582][ C0] ? __netif_receive_skb_list_core+0x890/0x890 [ 78.282022][ C0] ? print_irqtrace_events+0x220/0x220 [ 78.287643][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 78.292758][ C0] ? rcu_is_watching+0x15/0xb0 [ 78.297515][ C0] process_backlog+0x34b/0x710 [ 78.302284][ C0] ? trigger_rx_softirq+0x60/0x60 [ 78.307373][ C0] ? print_irqtrace_events+0x220/0x220 [ 78.312877][ C0] ? __asan_memset+0x23/0x40 [ 78.317485][ C0] __napi_poll+0xc7/0x470 [ 78.321847][ C0] net_rx_action+0x78b/0x1010 [ 78.326570][ C0] ? net_tx_action+0xa00/0xa00 [ 78.331458][ C0] ? net_tx_action+0x989/0xa00 [ 78.336369][ C0] __do_softirq+0x2ab/0x908 [ 78.341399][ C0] ? __irq_exit_rcu+0xf1/0x1b0 [ 78.346342][ C0] ? __lock_text_end+0xc/0xc [ 78.351065][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 78.356284][ C0] __irq_exit_rcu+0xf1/0x1b0 [ 78.360874][ C0] ? irq_exit_rcu+0x20/0x20 [ 78.365374][ C0] irq_exit_rcu+0x9/0x20 [ 78.369606][ C0] sysvec_apic_timer_interrupt+0x95/0xb0 [ 78.375230][ C0] [ 78.378148][ C0] [ 78.381058][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 78.387038][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 78.393369][ C0] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 74 c8 0c 0d 48 89 de 5b e9 53 14 59 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 80 1f 76 7e 65 8b 15 81 1f 76 7e f7 c2 00 01 ff 00 74 [ 78.413217][ C0] RSP: 0018:ffffc9000578ee00 EFLAGS: 00000202 [ 78.419266][ C0] RAX: ffffffff813d8884 RBX: 0000000000000002 RCX: ffff888022b4d940 [ 78.427305][ C0] RDX: 0000000000000002 RSI: ffffffff8d19cda0 RDI: 0000000000000002 [ 78.435354][ C0] RBP: ffffffff8f232120 R08: 0000000000000003 R09: ffffffff813d8857 [ 78.443577][ C0] R10: 0000000000000002 R11: ffff888022b4d940 R12: ffffffff8eb17700 [ 78.451614][ C0] R13: dffffc0000000000 R14: 1ffff92000af1ddc R15: ffffffff8f23211c [ 78.459661][ C0] ? unwind_next_frame+0x6c7/0x29e0 [ 78.464844][ C0] ? unwind_next_frame+0x6f4/0x29e0 [ 78.470026][ C0] unwind_next_frame+0x6f4/0x29e0 [ 78.475221][ C0] ? __kasan_slab_alloc+0x22/0x70 [ 78.480324][ C0] ? __kasan_slab_alloc+0x23/0x70 [ 78.485683][ C0] ? __kasan_slab_alloc+0x23/0x70 [ 78.490704][ C0] ? __kernel_text_address+0xd/0x40 [ 78.495976][ C0] ? __kasan_slab_alloc+0x23/0x70 [ 78.501064][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 78.506247][ C0] arch_stack_walk+0x146/0x1a0 [ 78.511082][ C0] ? __kasan_slab_alloc+0x23/0x70 [ 78.516097][ C0] stack_trace_save+0x117/0x1c0 [ 78.521068][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 78.526255][ C0] ? rcu_is_watching+0x15/0xb0 [ 78.531086][ C0] ? lock_acquire+0xe3/0x520 [ 78.535760][ C0] save_stack+0xfa/0x1e0 [ 78.540165][ C0] ? __reset_page_owner+0x190/0x190 [ 78.545354][ C0] ? rcu_is_watching+0x15/0xb0 [ 78.550193][ C0] ? free_unref_page_prepare+0x8c3/0x9f0 [ 78.555903][ C0] ? free_unref_page+0x37/0x3f0 [ 78.560852][ C0] ? __slab_free+0x2f6/0x390 [ 78.565437][ C0] ? qlist_free_all+0x22/0x60 [ 78.570103][ C0] ? kasan_quarantine_reduce+0x14b/0x160 [ 78.575721][ C0] ? __kasan_slab_alloc+0x23/0x70 [ 78.580756][ C0] ? rcu_read_lock_held+0xa/0x40 [ 78.585870][ C0] __reset_page_owner+0x4f/0x190 [ 78.590822][ C0] free_unref_page_prepare+0x8c3/0x9f0 [ 78.596289][ C0] free_unref_page+0x37/0x3f0 [ 78.601058][ C0] __slab_free+0x2f6/0x390 [ 78.605824][ C0] qlist_free_all+0x22/0x60 [ 78.610490][ C0] kasan_quarantine_reduce+0x14b/0x160 [ 78.615937][ C0] __kasan_slab_alloc+0x23/0x70 [ 78.620765][ C0] slab_post_alloc_hook+0x6c/0x3b0 [ 78.625973][ C0] kmem_cache_alloc_node+0x148/0x330 [ 78.631333][ C0] ? __alloc_skb+0x181/0x420 [ 78.636087][ C0] __alloc_skb+0x181/0x420 [ 78.640487][ C0] ? ____kasan_slab_free+0xd6/0x120 [ 78.645754][ C0] ? kmem_cache_free+0x292/0x500 [ 78.650768][ C0] ? dccp_write_xmit+0x156/0x220 [ 78.656049][ C0] ? dccp_sendmsg+0x759/0xb60 [ 78.660914][ C0] ? napi_build_skb+0x270/0x270 [ 78.665899][ C0] alloc_skb_with_frags+0xc3/0x780 [ 78.671187][ C0] ? rcu_is_watching+0x15/0xb0 [ 78.676032][ C0] sock_alloc_send_pskb+0x919/0xa50 [ 78.681366][ C0] ? dccp_sendmsg+0x3c5/0xb60 [ 78.686471][ C0] ? sock_kzfree_s+0x50/0x50 [ 78.691315][ C0] ? __local_bh_enable_ip+0x168/0x1f0 [ 78.697279][ C0] ? dccp_sendmsg+0x3c5/0xb60 [ 78.702047][ C0] ? _local_bh_enable+0xa0/0xa0 [ 78.707244][ C0] dccp_sendmsg+0x3e1/0xb60 [ 78.711881][ C0] ? dccp_getsockopt+0x1910/0x1910 [ 78.717162][ C0] ? inet_sendmsg+0x85/0x310 [ 78.721827][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 78.727274][ C0] ? security_socket_sendmsg+0x81/0xa0 [ 78.732824][ C0] ? inet_send_prepare+0x250/0x250 [ 78.737980][ C0] ____sys_sendmsg+0x592/0x890 [ 78.742761][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 78.748060][ C0] __sys_sendmmsg+0x3b2/0x730 [ 78.752741][ C0] ? __ia32_sys_sendmsg+0x90/0x90 [ 78.757788][ C0] ? cpus_share_cache+0x120/0x120 [ 78.762811][ C0] ? rcu_is_watching+0x15/0xb0 [ 78.767578][ C0] ? lock_acquire+0xe3/0x520 [ 78.772256][ C0] ? wake_up_q+0x61/0xa0 [ 78.776590][ C0] ? rcu_is_watching+0x15/0xb0 [ 78.781458][ C0] ? lock_release+0xbf/0x9d0 [ 78.786036][ C0] ? __might_sleep+0xc0/0xc0 [ 78.790619][ C0] ? rcu_is_watching+0x15/0xb0 [ 78.795372][ C0] ? __lock_acquire+0x7f70/0x7f70 [ 78.800478][ C0] ? __local_bh_enable_ip+0x168/0x1f0 [ 78.805930][ C0] ? wait_woken+0x180/0x180 [ 78.810508][ C0] ? inet_stream_connect+0x88/0xa0 [ 78.815699][ C0] ? _local_bh_enable+0xa0/0xa0 [ 78.820546][ C0] ? rcu_is_watching+0x15/0xb0 [ 78.825470][ C0] ? print_irqtrace_events+0x220/0x220 [ 78.831194][ C0] ? rcu_is_watching+0x15/0xb0 [ 78.835944][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 78.840779][ C0] do_syscall_64+0x41/0xc0 [ 78.845183][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.851245][ C0] RIP: 0033:0x7f62b347c8c9 [ 78.855650][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 78.875513][ C0] RSP: 002b:00007f62b42930c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 78.883921][ C0] RAX: ffffffffffffffda RBX: 00007f62b359bf80 RCX: 00007f62b347c8c9 2023/09/07 00:19:40 executed programs: 40 [ 78.891963][ C0] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 78.900003][ C0] RBP: 00007f62b34d8ae8 R08: 0000000000000000 R09: 0000000000000000 [ 78.908055][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.916122][ C0] R13: 000000000000000b R14: 00007f62b359bf80 R15: 00007ffc9f33d478 [ 78.926183][ C0] [ 78.990333][ C0] Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1537/dccp_feat_activate_values() [ 79.864740][ C0] Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1537/dccp_feat_activate_values() [ 79.917223][ T4434] Bluetooth: hci0: command 0x040f tx timeout [ 80.416452][ T5770] net_ratelimit: 47 callbacks suppressed [ 80.416468][ T5770] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.487036][ T5776] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.601276][ T5786] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.652320][ T5790] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.708268][ T5793] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.765100][ T5798] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.823969][ T5803] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.891083][ T5809] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.944400][ T5813] dccp_xmit_packet: Payload too large (65475) for featneg. [ 81.017844][ T5818] dccp_xmit_packet: Payload too large (65475) for featneg. [ 81.995445][ T4434] Bluetooth: hci0: command 0x0419 tx timeout [ 82.728463][ C0] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:417/tfrc_rx_hist_sample_rtt() [ 82.742669][ C0] CPU: 0 PID: 5977 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12107-g7ba2090ca64e #0 [ 82.754991][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 82.765471][ C0] Call Trace: [ 82.768767][ C0] [ 82.771600][ C0] dump_stack_lvl+0x1e7/0x2d0 [ 82.776375][ C0] ? nf_tcp_handle_invalid+0x650/0x650 [ 82.781863][ C0] ? panic+0x770/0x770 [ 82.786018][ C0] tfrc_rx_hist_sample_rtt+0x393/0x4b0 [ 82.791556][ C0] ccid3_hc_rx_packet_recv+0x6ae/0xf50 [ 82.797105][ C0] ? ccid3_hc_tx_exit+0x60/0x60 [ 82.802137][ C0] dccp_rcv_established+0x1b7/0x310 [ 82.807879][ C0] dccp_v4_do_rcv+0xff/0x1e0 [ 82.812646][ C0] ? ip_protocol_deliver_rcu+0x208/0x3f0 [ 82.818701][ C0] __sk_receive_skb+0x41e/0x9d0 [ 82.823602][ C0] ip_protocol_deliver_rcu+0x208/0x3f0 [ 82.829227][ C0] ip_local_deliver_finish+0x28e/0x4c0 [ 82.834683][ C0] NF_HOOK+0x368/0x410 [ 82.838916][ C0] ? ipt_alloc_initial_table+0x570/0x570 [ 82.844628][ C0] ? NF_HOOK+0x410/0x410 [ 82.848964][ C0] ? ip_local_deliver+0x190/0x190 [ 82.853986][ C0] ? ip_rcv_finish_core+0xc46/0x1b40 [ 82.859276][ C0] ? NF_HOOK+0x410/0x410 [ 82.863545][ C0] ? ip_local_deliver+0x111/0x190 [ 82.868583][ C0] NF_HOOK+0x368/0x410 [ 82.872830][ C0] ? ip_rcv_core+0xd90/0xd90 [ 82.877510][ C0] ? ip_local_deliver+0x190/0x190 [ 82.882637][ C0] ? ip_rcv_core+0x877/0xd90 [ 82.887251][ C0] ? ip_rcv_core+0xd90/0xd90 [ 82.891892][ C0] ? ip_local_deliver_finish+0x4c0/0x4c0 [ 82.897981][ C0] ? ip_local_deliver_finish+0x4c0/0x4c0 [ 82.904224][ C0] __netif_receive_skb+0x1ca/0x530 [ 82.909351][ C0] ? read_lock_is_recursive+0x20/0x20 [ 82.914802][ C0] ? __netif_receive_skb_list_core+0x890/0x890 [ 82.921209][ C0] ? __lock_acquire+0x7f70/0x7f70 [ 82.926325][ C0] ? print_irqtrace_events+0x220/0x220 [ 82.931957][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 82.937068][ C0] ? rcu_is_watching+0x15/0xb0 [ 82.941932][ C0] process_backlog+0x34b/0x710 [ 82.946894][ C0] ? trigger_rx_softirq+0x60/0x60 [ 82.952528][ C0] ? print_irqtrace_events+0x220/0x220 [ 82.958245][ C0] ? __asan_memset+0x23/0x40 [ 82.962830][ C0] __napi_poll+0xc7/0x470 [ 82.967161][ C0] net_rx_action+0x78b/0x1010 [ 82.971927][ C0] ? net_tx_action+0xa00/0xa00 [ 82.977306][ C0] ? net_tx_action+0x989/0xa00 [ 82.982149][ C0] __do_softirq+0x2ab/0x908 [ 82.986658][ C0] ? __irq_exit_rcu+0xf1/0x1b0 [ 82.991582][ C0] ? __lock_text_end+0xc/0xc [ 82.996279][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 83.002025][ C0] __irq_exit_rcu+0xf1/0x1b0 [ 83.006618][ C0] ? irq_exit_rcu+0x20/0x20 [ 83.011204][ C0] irq_exit_rcu+0x9/0x20 [ 83.015543][ C0] sysvec_apic_timer_interrupt+0x95/0xb0 [ 83.021191][ C0] [ 83.024298][ C0] [ 83.027406][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 83.033561][ C0] RIP: 0010:__read_once_word_nocheck+0x0/0x10 [ 83.039982][ C0] Code: 00 e9 cd fd ff ff 89 d9 80 e1 07 38 c1 0f 8c 9b fc ff ff 48 89 df e8 af ca a9 00 e9 8e fc ff ff 66 2e 0f 1f 84 00 00 00 00 00 <53> 48 89 fb e8 97 e0 4f 00 48 8b 03 5b c3 66 90 66 0f 1f 00 e8 87 [ 83.060200][ C0] RSP: 0018:ffffc900060cf200 EFLAGS: 00000293 [ 83.066349][ C0] RAX: ffffffff813d9269 RBX: 0000000000000001 RCX: ffff88807dc29dc0 [ 83.074784][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffc900060cff28 [ 83.082918][ C0] RBP: 1ffff92000c19e5e R08: ffffffff813d922e R09: ffffffff813d9187 [ 83.091928][ C0] R10: 0000000000000003 R11: ffff88807dc29dc0 R12: ffffc900060cff28 [ 83.100423][ C0] R13: dffffc0000000000 R14: 1ffff92000c19e5d R15: 1ffff92000c19e5c [ 83.108489][ C0] ? unwind_next_frame+0xff7/0x29e0 [ 83.114040][ C0] ? unwind_next_frame+0x109e/0x29e0 [ 83.119628][ C0] ? unwind_next_frame+0x10d9/0x29e0 [ 83.125123][ C0] unwind_next_frame+0x1357/0x29e0 [ 83.130257][ C0] ? __x64_sys_sendmmsg+0xa0/0xb0 [ 83.135282][ C0] ? __x64_sys_sendmmsg+0xa0/0xb0 [ 83.140303][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 83.145423][ C0] arch_stack_walk+0x146/0x1a0 [ 83.150546][ C0] ? __x64_sys_sendmmsg+0xa0/0xb0 [ 83.156022][ C0] stack_trace_save+0x117/0x1c0 [ 83.160965][ C0] ? skb_release_data+0x660/0x850 [ 83.166148][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 83.171513][ C0] ? kasan_save_free_info+0x28/0x40 [ 83.176810][ C0] ? kfree_skb_reason+0x193/0x380 [ 83.181934][ C0] ? dccp_write_xmit+0x156/0x220 [ 83.187163][ C0] ? dccp_sendmsg+0x759/0xb60 [ 83.191931][ C0] ? ____sys_sendmsg+0x592/0x890 [ 83.196883][ C0] ? __sys_sendmmsg+0x3b2/0x730 [ 83.201821][ C0] ? do_syscall_64+0x41/0xc0 [ 83.206408][ C0] ? dccp_write_xmit+0x156/0x220 [ 83.211340][ C0] kasan_set_track+0x4f/0x70 [ 83.215930][ C0] ? kasan_set_track+0x4f/0x70 [ 83.220676][ C0] ? kasan_save_free_info+0x28/0x40 [ 83.226057][ C0] ? ____kasan_slab_free+0xd6/0x120 [ 83.231522][ C0] ? kmem_cache_free+0x292/0x500 [ 83.236740][ C0] ? dccp_write_xmit+0x156/0x220 [ 83.241740][ C0] ? dccp_sendmsg+0x759/0xb60 [ 83.246527][ C0] ? ____sys_sendmsg+0x592/0x890 [ 83.251464][ C0] ? __sys_sendmmsg+0x3b2/0x730 [ 83.256758][ C0] ? __x64_sys_sendmmsg+0xa0/0xb0 [ 83.262108][ C0] kasan_save_free_info+0x28/0x40 [ 83.267419][ C0] ____kasan_slab_free+0xd6/0x120 [ 83.272533][ C0] kmem_cache_free+0x292/0x500 [ 83.277674][ C0] ? dccp_write_xmit+0x156/0x220 [ 83.282862][ C0] dccp_write_xmit+0x156/0x220 [ 83.287751][ C0] dccp_sendmsg+0x759/0xb60 [ 83.292609][ C0] ? dccp_getsockopt+0x1910/0x1910 [ 83.297813][ C0] ? inet_sendmsg+0x85/0x310 [ 83.302847][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 83.308484][ C0] ? security_socket_sendmsg+0x81/0xa0 [ 83.314325][ C0] ? inet_send_prepare+0x250/0x250 [ 83.319548][ C0] ____sys_sendmsg+0x592/0x890 [ 83.324320][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 83.329341][ C0] __sys_sendmmsg+0x3b2/0x730 [ 83.334272][ C0] ? __ia32_sys_sendmsg+0x90/0x90 [ 83.339374][ C0] ? futex_unqueue+0xcb/0xf0 [ 83.343957][ C0] ? rcu_is_watching+0x15/0xb0 [ 83.348832][ C0] ? lock_acquire+0xe3/0x520 [ 83.353546][ C0] ? rcu_is_watching+0x15/0xb0 [ 83.358473][ C0] ? lock_release+0xbf/0x9d0 [ 83.363179][ C0] ? __might_sleep+0xc0/0xc0 [ 83.368110][ C0] ? __lock_acquire+0x7f70/0x7f70 [ 83.373388][ C0] ? wait_woken+0x180/0x180 [ 83.378147][ C0] ? inet_stream_connect+0x88/0xa0 [ 83.383334][ C0] ? _local_bh_enable+0xa0/0xa0 [ 83.388719][ C0] ? rcu_is_watching+0x15/0xb0 [ 83.393560][ C0] ? print_irqtrace_events+0x220/0x220 [ 83.399116][ C0] ? rcu_is_watching+0x15/0xb0 [ 83.403960][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 83.409114][ C0] do_syscall_64+0x41/0xc0 [ 83.414399][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.420313][ C0] RIP: 0033:0x7f62b347c8c9 [ 83.424717][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 83.444769][ C0] RSP: 002b:00007f62b42930c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 83.453440][ C0] RAX: ffffffffffffffda RBX: 00007f62b359bf80 RCX: 00007f62b347c8c9 [ 83.461677][ C0] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 83.469649][ C0] RBP: 00007f62b34d8ae8 R08: 0000000000000000 R09: 0000000000000000 [ 83.477695][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.485800][ C0] R13: 000000000000000b R14: 00007f62b359bf80 R15: 00007ffc9f33d478 [ 83.493771][ C0] [ 83.930791][ C1] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:417/tfrc_rx_hist_sample_rtt() [ 83.945197][ C1] CPU: 1 PID: 6013 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12107-g7ba2090ca64e #0 [ 83.955657][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 83.966188][ C1] Call Trace: [ 83.969468][ C1] [ 83.972800][ C1] dump_stack_lvl+0x1e7/0x2d0 [ 83.977660][ C1] ? nf_tcp_handle_invalid+0x650/0x650 [ 83.983220][ C1] ? panic+0x770/0x770 [ 83.987336][ C1] tfrc_rx_hist_sample_rtt+0x393/0x4b0 [ 83.993034][ C1] ccid3_hc_rx_packet_recv+0x6ae/0xf50 [ 83.998503][ C1] ? ccid3_hc_tx_exit+0x60/0x60 [ 84.003399][ C1] dccp_rcv_established+0x1b7/0x310 [ 84.008623][ C1] dccp_v4_do_rcv+0xff/0x1e0 [ 84.013211][ C1] ? ip_protocol_deliver_rcu+0x208/0x3f0 [ 84.018851][ C1] __sk_receive_skb+0x41e/0x9d0 [ 84.023698][ C1] ip_protocol_deliver_rcu+0x208/0x3f0 [ 84.029157][ C1] ip_local_deliver_finish+0x28e/0x4c0 [ 84.034701][ C1] NF_HOOK+0x368/0x410 [ 84.038765][ C1] ? ipt_alloc_initial_table+0x570/0x570 [ 84.044479][ C1] ? NF_HOOK+0x410/0x410 [ 84.048879][ C1] ? ip_local_deliver+0x190/0x190 [ 84.054009][ C1] ? ip_rcv_finish_core+0xc46/0x1b40 [ 84.059407][ C1] ? NF_HOOK+0x410/0x410 [ 84.063651][ C1] ? ip_local_deliver+0x111/0x190 [ 84.069194][ C1] NF_HOOK+0x368/0x410 [ 84.073785][ C1] ? ip_rcv_core+0xd90/0xd90 [ 84.078731][ C1] ? ip_local_deliver+0x190/0x190 [ 84.083930][ C1] ? ip_rcv_core+0x877/0xd90 [ 84.088601][ C1] ? ip_rcv_core+0xd90/0xd90 [ 84.093308][ C1] ? ip_local_deliver_finish+0x4c0/0x4c0 [ 84.099114][ C1] ? ip_local_deliver_finish+0x4c0/0x4c0 [ 84.105052][ C1] __netif_receive_skb+0x1ca/0x530 [ 84.110353][ C1] ? read_lock_is_recursive+0x20/0x20 [ 84.116226][ C1] ? __netif_receive_skb_list_core+0x890/0x890 [ 84.122654][ C1] ? print_irqtrace_events+0x220/0x220 [ 84.128203][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 84.133402][ C1] ? rcu_is_watching+0x15/0xb0 [ 84.138181][ C1] process_backlog+0x34b/0x710 [ 84.143082][ C1] ? trigger_rx_softirq+0x60/0x60 [ 84.148614][ C1] ? print_irqtrace_events+0x220/0x220 [ 84.154086][ C1] ? __asan_memset+0x23/0x40 [ 84.158778][ C1] __napi_poll+0xc7/0x470 [ 84.163544][ C1] net_rx_action+0x78b/0x1010 [ 84.168696][ C1] ? net_tx_action+0xa00/0xa00 [ 84.173563][ C1] ? net_tx_action+0x989/0xa00 [ 84.178526][ C1] __do_softirq+0x2ab/0x908 [ 84.183129][ C1] ? __irq_exit_rcu+0xf1/0x1b0 [ 84.187982][ C1] ? __lock_text_end+0xc/0xc [ 84.192602][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 84.198059][ C1] __irq_exit_rcu+0xf1/0x1b0 [ 84.202643][ C1] ? irq_exit_rcu+0x20/0x20 [ 84.207235][ C1] irq_exit_rcu+0x9/0x20 [ 84.211473][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 84.217371][ C1] [ 84.220382][ C1] [ 84.223480][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 84.229729][ C1] RIP: 0010:free_tail_page_prepare+0x1d0/0x410 [ 84.236236][ C1] Code: 04 00 00 00 00 ad de 49 39 04 24 75 32 4c 8d 7b 08 4d 89 fc 49 c1 ec 03 43 80 3c 2c 00 74 08 4c 89 ff e8 33 52 0b 00 49 8b 07 01 0f 85 93 01 00 00 48 c7 04 24 e0 22 15 8b 0f 1f 44 00 00 48 [ 84.256447][ C1] RSP: 0018:ffffc9000313f1b0 EFLAGS: 00000246 [ 84.262508][ C1] RAX: ffffea0000acf401 RBX: ffffea0000acf480 RCX: dffffc0000000000 [ 84.271044][ C1] RDX: 0000000000000000 RSI: ffffea0000acf480 RDI: ffffea0000acf400 [ 84.279030][ C1] RBP: 0000000000000000 R08: ffffea0000acf477 R09: 1ffffd4000159e8e [ 84.287431][ C1] R10: dffffc0000000000 R11: fffff94000159e8f R12: 1ffffd4000159e91 [ 84.295825][ C1] R13: dffffc0000000000 R14: ffffea0000acf400 R15: ffffea0000acf488 [ 84.304130][ C1] free_unref_page_prepare+0x4bc/0x9f0 [ 84.309802][ C1] free_unref_page+0x37/0x3f0 [ 84.314525][ C1] __slab_free+0x2f6/0x390 [ 84.319057][ C1] ? print_irqtrace_events+0x220/0x220 [ 84.324627][ C1] qlist_free_all+0x22/0x60 [ 84.330012][ C1] kasan_quarantine_reduce+0x14b/0x160 [ 84.335650][ C1] __kasan_slab_alloc+0x23/0x70 [ 84.340513][ C1] slab_post_alloc_hook+0x6c/0x3b0 [ 84.345827][ C1] kmem_cache_alloc_node+0x148/0x330 [ 84.351223][ C1] ? __alloc_skb+0x181/0x420 [ 84.356088][ C1] __alloc_skb+0x181/0x420 [ 84.360505][ C1] ? ____kasan_slab_free+0xd6/0x120 [ 84.365804][ C1] ? kmem_cache_free+0x292/0x500 [ 84.370882][ C1] ? dccp_write_xmit+0x156/0x220 [ 84.375816][ C1] ? dccp_sendmsg+0x759/0xb60 [ 84.380673][ C1] ? napi_build_skb+0x270/0x270 [ 84.385707][ C1] alloc_skb_with_frags+0xc3/0x780 [ 84.390907][ C1] ? rcu_is_watching+0x15/0xb0 [ 84.395756][ C1] sock_alloc_send_pskb+0x919/0xa50 [ 84.401047][ C1] ? dccp_sendmsg+0x3c5/0xb60 [ 84.405734][ C1] ? sock_kzfree_s+0x50/0x50 [ 84.410320][ C1] ? __local_bh_enable_ip+0x168/0x1f0 [ 84.415777][ C1] ? dccp_sendmsg+0x3c5/0xb60 [ 84.420450][ C1] ? _local_bh_enable+0xa0/0xa0 [ 84.425527][ C1] dccp_sendmsg+0x3e1/0xb60 [ 84.430209][ C1] ? dccp_getsockopt+0x1910/0x1910 [ 84.435321][ C1] ? inet_sendmsg+0x85/0x310 [ 84.440010][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 84.445641][ C1] ? security_socket_sendmsg+0x81/0xa0 [ 84.451622][ C1] ? inet_send_prepare+0x250/0x250 [ 84.456741][ C1] ____sys_sendmsg+0x592/0x890 [ 84.461613][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 84.466839][ C1] __sys_sendmmsg+0x3b2/0x730 [ 84.471707][ C1] ? __ia32_sys_sendmsg+0x90/0x90 [ 84.477269][ C1] ? futex_unqueue+0xcb/0xf0 [ 84.482130][ C1] ? rcu_is_watching+0x15/0xb0 [ 84.486898][ C1] ? lock_acquire+0xe3/0x520 [ 84.492544][ C1] ? rcu_is_watching+0x15/0xb0 [ 84.497427][ C1] ? lock_release+0xbf/0x9d0 [ 84.502019][ C1] ? __might_sleep+0xc0/0xc0 [ 84.506702][ C1] ? __lock_acquire+0x7f70/0x7f70 [ 84.511735][ C1] ? wait_woken+0x180/0x180 [ 84.516417][ C1] ? inet_stream_connect+0x88/0xa0 [ 84.521621][ C1] ? _local_bh_enable+0xa0/0xa0 [ 84.526566][ C1] ? rcu_is_watching+0x15/0xb0 [ 84.531599][ C1] ? print_irqtrace_events+0x220/0x220 [ 84.537579][ C1] ? rcu_is_watching+0x15/0xb0 [ 84.542335][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 84.547187][ C1] do_syscall_64+0x41/0xc0 [ 84.551599][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.557597][ C1] RIP: 0033:0x7f62b347c8c9 [ 84.562090][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 2023/09/07 00:19:46 executed programs: 140 [ 84.581860][ C1] RSP: 002b:00007f62b42930c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 84.590278][ C1] RAX: ffffffffffffffda RBX: 00007f62b359bf80 RCX: 00007f62b347c8c9 [ 84.598519][ C1] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 84.606572][ C1] RBP: 00007f62b34d8ae8 R08: 0000000000000000 R09: 0000000000000000 [ 84.614631][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.622590][ C1] R13: 000000000000000b R14: 00007f62b359bf80 R15: 00007ffc9f33d478 [ 84.630562][ C1] [ 85.151605][ C0] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:417/tfrc_rx_hist_sample_rtt() [ 85.166279][ C0] CPU: 0 PID: 6057 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12107-g7ba2090ca64e #0 [ 85.176436][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 85.186568][ C0] Call Trace: [ 85.189839][ C0] [ 85.192864][ C0] dump_stack_lvl+0x1e7/0x2d0 [ 85.197537][ C0] ? nf_tcp_handle_invalid+0x650/0x650 [ 85.203090][ C0] ? panic+0x770/0x770 [ 85.207148][ C0] tfrc_rx_hist_sample_rtt+0x393/0x4b0 [ 85.212709][ C0] ccid3_hc_rx_packet_recv+0x6ae/0xf50 [ 85.218251][ C0] ? ccid3_hc_tx_exit+0x60/0x60 [ 85.223618][ C0] dccp_rcv_established+0x1b7/0x310 [ 85.228928][ C0] dccp_v4_do_rcv+0xff/0x1e0 [ 85.233524][ C0] ? ip_protocol_deliver_rcu+0x208/0x3f0 [ 85.239161][ C0] __sk_receive_skb+0x41e/0x9d0 [ 85.244110][ C0] ip_protocol_deliver_rcu+0x208/0x3f0 [ 85.249842][ C0] ip_local_deliver_finish+0x28e/0x4c0 [ 85.255403][ C0] NF_HOOK+0x368/0x410 [ 85.259491][ C0] ? ipt_alloc_initial_table+0x570/0x570 [ 85.265232][ C0] ? NF_HOOK+0x410/0x410 [ 85.269839][ C0] ? ip_local_deliver+0x190/0x190 [ 85.275007][ C0] ? ip_rcv_finish_core+0xc46/0x1b40 [ 85.280317][ C0] ? NF_HOOK+0x410/0x410 [ 85.284655][ C0] ? ip_local_deliver+0x111/0x190 [ 85.290026][ C0] NF_HOOK+0x368/0x410 [ 85.294095][ C0] ? ip_rcv_core+0xd90/0xd90 [ 85.298778][ C0] ? ip_local_deliver+0x190/0x190 [ 85.303820][ C0] ? ip_rcv_core+0x877/0xd90 [ 85.308446][ C0] ? ip_rcv_core+0xd90/0xd90 [ 85.313233][ C0] ? ip_local_deliver_finish+0x4c0/0x4c0 [ 85.318884][ C0] ? ip_local_deliver_finish+0x4c0/0x4c0 [ 85.324515][ C0] __netif_receive_skb+0x1ca/0x530 [ 85.329803][ C0] ? read_lock_is_recursive+0x20/0x20 [ 85.335291][ C0] ? __netif_receive_skb_list_core+0x890/0x890 [ 85.341444][ C0] ? print_irqtrace_events+0x220/0x220 [ 85.346898][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 85.352031][ C0] ? rcu_is_watching+0x15/0xb0 [ 85.356796][ C0] process_backlog+0x34b/0x710 [ 85.361624][ C0] ? trigger_rx_softirq+0x60/0x60 [ 85.366731][ C0] ? print_irqtrace_events+0x220/0x220 [ 85.372209][ C0] ? __asan_memset+0x23/0x40 [ 85.376796][ C0] __napi_poll+0xc7/0x470 [ 85.381122][ C0] net_rx_action+0x78b/0x1010 [ 85.385891][ C0] ? net_tx_action+0xa00/0xa00 [ 85.390648][ C0] ? net_tx_action+0x989/0xa00 [ 85.395410][ C0] __do_softirq+0x2ab/0x908 [ 85.400089][ C0] ? __irq_exit_rcu+0xf1/0x1b0 [ 85.404955][ C0] ? __lock_text_end+0xc/0xc [ 85.409720][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 85.414908][ C0] __irq_exit_rcu+0xf1/0x1b0 [ 85.419587][ C0] ? irq_exit_rcu+0x20/0x20 [ 85.424090][ C0] irq_exit_rcu+0x9/0x20 [ 85.428701][ C0] sysvec_apic_timer_interrupt+0x95/0xb0 [ 85.434433][ C0] [ 85.437446][ C0] [ 85.440376][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.446528][ C0] RIP: 0010:do_raw_spin_unlock+0x117/0x8b0 [ 85.453723][ C0] Code: 49 c7 45 00 ff ff ff ff 0f b6 04 2b 84 c0 0f 85 c9 03 00 00 41 c7 06 ff ff ff ff 48 c7 c0 20 b8 19 8d 48 c1 e8 03 80 3c 28 00 <74> 0c 48 c7 c7 20 b8 19 8d e8 fb 73 79 00 48 83 3d 23 a9 ab 0b 00 [ 85.474106][ C0] RSP: 0018:ffffc900032beef0 EFLAGS: 00000246 [ 85.480773][ C0] RAX: 1ffffffff1a33704 RBX: 1ffff11017308439 RCX: 0000000000000000 [ 85.488741][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b98421c0 [ 85.496791][ C0] RBP: dffffc0000000000 R08: ffff8880b98421c3 R09: 1ffff11017308438 [ 85.504751][ C0] R10: dffffc0000000000 R11: ffffed1017308439 R12: 1ffff1101730843a [ 85.512713][ C0] R13: ffff8880b98421d0 R14: ffff8880b98421c8 R15: ffff8880b98421c0 [ 85.520691][ C0] _raw_spin_unlock+0x1e/0x40 [ 85.525368][ C0] get_page_from_freelist+0x777/0x3360 [ 85.530820][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 85.535934][ C0] ? rcu_is_watching+0x15/0xb0 [ 85.540694][ C0] ? lock_release+0xbf/0x9d0 [ 85.545282][ C0] ? __might_sleep+0xc0/0xc0 [ 85.550057][ C0] ? __alloc_pages+0x670/0x670 [ 85.555069][ C0] ? prepare_alloc_pages+0x35b/0x5b0 [ 85.560437][ C0] __alloc_pages+0x255/0x670 [ 85.565041][ C0] ? zone_statistics+0x170/0x170 [ 85.569983][ C0] ? lock_release+0xbf/0x9d0 [ 85.574574][ C0] ? alloc_pages+0x510/0x780 [ 85.579857][ C0] ? read_lock_is_recursive+0x20/0x20 [ 85.585227][ C0] alloc_slab_page+0x6a/0x160 [ 85.589993][ C0] new_slab+0x84/0x2f0 [ 85.594298][ C0] ___slab_alloc+0xade/0x1100 [ 85.598973][ C0] ? __alloc_skb+0x181/0x420 [ 85.603569][ C0] kmem_cache_alloc_node+0x1e1/0x330 [ 85.608872][ C0] ? __alloc_skb+0x181/0x420 [ 85.613643][ C0] __alloc_skb+0x181/0x420 [ 85.618082][ C0] ? ____kasan_slab_free+0xd6/0x120 [ 85.623277][ C0] ? kmem_cache_free+0x292/0x500 [ 85.628446][ C0] ? dccp_write_xmit+0x156/0x220 [ 85.633729][ C0] ? dccp_sendmsg+0x759/0xb60 [ 85.638497][ C0] ? napi_build_skb+0x270/0x270 [ 85.643351][ C0] alloc_skb_with_frags+0xc3/0x780 [ 85.648634][ C0] ? rcu_is_watching+0x15/0xb0 [ 85.653480][ C0] sock_alloc_send_pskb+0x919/0xa50 [ 85.659115][ C0] ? dccp_sendmsg+0x3c5/0xb60 [ 85.663886][ C0] ? sock_kzfree_s+0x50/0x50 [ 85.668644][ C0] ? __local_bh_enable_ip+0x168/0x1f0 [ 85.674293][ C0] ? dccp_sendmsg+0x3c5/0xb60 [ 85.679004][ C0] ? _local_bh_enable+0xa0/0xa0 [ 85.683868][ C0] dccp_sendmsg+0x3e1/0xb60 [ 85.688376][ C0] ? dccp_getsockopt+0x1910/0x1910 [ 85.693660][ C0] ? inet_sendmsg+0x85/0x310 [ 85.698241][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 85.703528][ C0] ? security_socket_sendmsg+0x81/0xa0 [ 85.709420][ C0] ? inet_send_prepare+0x250/0x250 [ 85.714614][ C0] ____sys_sendmsg+0x592/0x890 [ 85.719391][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 85.724507][ C0] __sys_sendmmsg+0x3b2/0x730 [ 85.729188][ C0] ? __ia32_sys_sendmsg+0x90/0x90 [ 85.734300][ C0] ? futex_unqueue+0xcb/0xf0 [ 85.738898][ C0] ? rcu_is_watching+0x15/0xb0 [ 85.743665][ C0] ? lock_acquire+0xe3/0x520 [ 85.748442][ C0] ? rcu_is_watching+0x15/0xb0 [ 85.753521][ C0] ? lock_release+0xbf/0x9d0 [ 85.758138][ C0] ? __might_sleep+0xc0/0xc0 [ 85.762824][ C0] ? __lock_acquire+0x7f70/0x7f70 [ 85.767858][ C0] ? wait_woken+0x180/0x180 [ 85.772359][ C0] ? inet_stream_connect+0x88/0xa0 [ 85.777581][ C0] ? _local_bh_enable+0xa0/0xa0 [ 85.782448][ C0] ? rcu_is_watching+0x15/0xb0 [ 85.787292][ C0] ? print_irqtrace_events+0x220/0x220 [ 85.792923][ C0] ? rcu_is_watching+0x15/0xb0 [ 85.797691][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 85.802892][ C0] do_syscall_64+0x41/0xc0 [ 85.807315][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.813232][ C0] RIP: 0033:0x7f62b347c8c9 [ 85.817656][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 85.837527][ C0] RSP: 002b:00007f62b42930c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 85.846128][ C0] RAX: ffffffffffffffda RBX: 00007f62b359bf80 RCX: 00007f62b347c8c9 [ 85.854395][ C0] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 85.862389][ C0] RBP: 00007f62b34d8ae8 R08: 0000000000000000 R09: 0000000000000000 [ 85.870581][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.878748][ C0] R13: 000000000000000b R14: 00007f62b359bf80 R15: 00007ffc9f33d478 [ 85.886756][ C0] [ 85.920470][ T6059] net_ratelimit: 68 callbacks suppressed [ 85.920482][ T6059] dccp_xmit_packet: Payload too large (65475) for featneg. [ 85.954202][ T6061] dccp_xmit_packet: Payload too large (65475) for featneg. [ 85.987081][ T6063] dccp_xmit_packet: Payload too large (65475) for featneg. [ 86.039309][ T6067] dccp_xmit_packet: Payload too large (65475) for featneg. [ 86.071522][ T6069] dccp_xmit_packet: Payload too large (65475) for featneg. [ 86.102323][ T6071] dccp_xmit_packet: Payload too large (65475) for featneg. [ 86.132853][ T6073] dccp_xmit_packet: Payload too large (65475) for featneg. [ 86.163788][ T6075] dccp_xmit_packet: Payload too large (65475) for featneg. [ 86.193589][ T6077] dccp_xmit_packet: Payload too large (65475) for featneg. [ 86.224478][ T6079] dccp_xmit_packet: Payload too large (65475) for featneg. [ 86.283112][ C0] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:417/tfrc_rx_hist_sample_rtt() [ 86.297504][ C0] CPU: 0 PID: 6083 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12107-g7ba2090ca64e #0 [ 86.307942][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 86.318338][ C0] Call Trace: [ 86.321612][ C0] [ 86.324531][ C0] dump_stack_lvl+0x1e7/0x2d0 [ 86.329198][ C0] ? nf_tcp_handle_invalid+0x650/0x650 [ 86.334655][ C0] ? panic+0x770/0x770 [ 86.338807][ C0] tfrc_rx_hist_sample_rtt+0x393/0x4b0 [ 86.344256][ C0] ccid3_hc_rx_packet_recv+0x6ae/0xf50 [ 86.349879][ C0] ? ccid3_hc_tx_exit+0x60/0x60 [ 86.354812][ C0] dccp_rcv_established+0x1b7/0x310 [ 86.360204][ C0] dccp_v4_do_rcv+0xff/0x1e0 [ 86.364879][ C0] ? ip_protocol_deliver_rcu+0x208/0x3f0 [ 86.370852][ C0] __sk_receive_skb+0x41e/0x9d0 [ 86.375701][ C0] ip_protocol_deliver_rcu+0x208/0x3f0 [ 86.381163][ C0] ip_local_deliver_finish+0x28e/0x4c0 [ 86.386798][ C0] NF_HOOK+0x368/0x410 [ 86.391039][ C0] ? ipt_alloc_initial_table+0x570/0x570 [ 86.396925][ C0] ? NF_HOOK+0x410/0x410 [ 86.401175][ C0] ? ip_local_deliver+0x190/0x190 [ 86.406208][ C0] ? ip_rcv_finish_core+0xc46/0x1b40 [ 86.411490][ C0] ? NF_HOOK+0x410/0x410 [ 86.415731][ C0] ? ip_local_deliver+0x111/0x190 [ 86.420923][ C0] NF_HOOK+0x368/0x410 [ 86.424989][ C0] ? ip_rcv_core+0xd90/0xd90