[ 54.427843][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.443214][ T9] device veth1_macvtap left promiscuous mode [ 54.449881][ T9] device veth0_macvtap left promiscuous mode [ 54.456172][ T9] device veth1_vlan left promiscuous mode [ 54.462440][ T9] device veth0_vlan left promiscuous mode [ 54.611176][ T9] team0 (unregistering): Port device team_slave_1 removed [ 54.623151][ T9] team0 (unregistering): Port device team_slave_0 removed [ 54.635030][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.649553][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.694630][ T9] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.158' (ECDSA) to the list of known hosts. 2022/11/23 05:33:09 ignoring optional flag "sandboxArg"="0" 2022/11/23 05:33:10 parsed 1 programs 2022/11/23 05:33:10 executed programs: 0 [ 70.528681][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.537038][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.545570][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.554164][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.561924][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.569113][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.577974][ T4103] Bluetooth: hci0: HCI_REQ-0x0c1a [ 70.670252][ T4103] chnl_net:caif_netlink_parms(): no params data found [ 70.714842][ T4103] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.722190][ T4103] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.730598][ T4103] device bridge_slave_0 entered promiscuous mode [ 70.739416][ T4103] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.746642][ T4103] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.754743][ T4103] device bridge_slave_1 entered promiscuous mode [ 70.775189][ T4103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.786168][ T4103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.808934][ T4103] team0: Port device team_slave_0 added [ 70.816385][ T4103] team0: Port device team_slave_1 added [ 70.834667][ T4103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.841772][ T4103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.867861][ T4103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.880220][ T4103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.887189][ T4103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.913469][ T4103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.943218][ T4103] device hsr_slave_0 entered promiscuous mode [ 70.950067][ T4103] device hsr_slave_1 entered promiscuous mode [ 71.211481][ T154] cfg80211: failed to load regulatory.db [ 71.951839][ T4103] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.963299][ T4103] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.973579][ T4103] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.984886][ T4103] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.059205][ T4103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.075357][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.084019][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.096641][ T4103] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.108722][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.118278][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.128505][ T3718] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.135762][ T3718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.162510][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.171220][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.182104][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.192542][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.199675][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.208829][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.218274][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.228786][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.238113][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.248151][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.257335][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.274901][ T4103] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.291356][ T4103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.307006][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.315906][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.326318][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.335431][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.345381][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.359671][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.532163][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.540422][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.550455][ T4103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.572594][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.584826][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.606475][ T4103] device veth0_vlan entered promiscuous mode [ 72.615309][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.624826][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.638145][ T4103] device veth1_vlan entered promiscuous mode [ 72.640585][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 72.647268][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.660466][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.668431][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.692614][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.702521][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.713814][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.724929][ T4103] device veth0_macvtap entered promiscuous mode [ 72.738428][ T4103] device veth1_macvtap entered promiscuous mode [ 72.758083][ T4103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.767062][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.777079][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.786313][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.796616][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.811998][ T4103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.819376][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.830903][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.844200][ T4103] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.855583][ T4103] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.864776][ T4103] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.876028][ T4103] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.947873][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.973187][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.993418][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.007140][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.015626][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.025182][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.075782][ T4172] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 73.099279][ T4172] dccp_xmit_packet: Payload too large (65475) for featneg. [ 73.164406][ T4177] dccp_xmit_packet: Payload too large (65475) for featneg. [ 73.213664][ T4180] dccp_xmit_packet: Payload too large (65475) for featneg. [ 73.273518][ T4183] dccp_xmit_packet: Payload too large (65475) for featneg. [ 73.330405][ T4186] dccp_xmit_packet: Payload too large (65475) for featneg. [ 73.382560][ T4189] dccp_xmit_packet: Payload too large (65475) for featneg. [ 73.435454][ T4193] dccp_xmit_packet: Payload too large (65475) for featneg. [ 73.505512][ T4198] dccp_xmit_packet: Payload too large (65475) for featneg. [ 73.584847][ T4203] dccp_xmit_packet: Payload too large (65475) for featneg. [ 73.654520][ T4207] dccp_xmit_packet: Payload too large (65475) for featneg. [ 74.719974][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 75.443103][ C1] Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1537/dccp_feat_activate_values() 2022/11/23 05:33:15 executed programs: 46 [ 75.955570][ C1] BUG: stored value of X_recv is zero at net/dccp/ccids/ccid3.c:691/ccid3_first_li() [ 75.965368][ C1] CPU: 1 PID: 4359 Comm: syz-executor.0 Not tainted 6.1.0-rc6-syzkaller #0 [ 75.973960][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 75.984033][ C1] Call Trace: [ 75.987330][ C1] [ 75.990181][ C1] dump_stack_lvl+0x163/0x213 [ 75.994877][ C1] ? nf_tcp_handle_invalid+0x4d9/0x4d9 [ 76.000356][ C1] ? panic+0x539/0x539 [ 76.004443][ C1] ? ktime_get+0x11b/0x1f0 [ 76.008877][ C1] ccid3_first_li+0x27b/0x340 [ 76.013573][ C1] tfrc_lh_interval_add+0x4d3/0x6e0 [ 76.018793][ C1] ? ccid3_hc_tx_update_x+0x640/0x640 [ 76.024173][ C1] tfrc_rx_handle_loss+0x65f/0x1760 [ 76.029383][ C1] ? ccid3_hc_tx_update_x+0x640/0x640 [ 76.034781][ C1] ccid3_hc_rx_packet_recv+0x27d/0xe40 [ 76.040343][ C1] dccp_rcv_established+0x14e/0x250 [ 76.045552][ C1] dccp_v4_do_rcv+0xc0/0x190 [ 76.050154][ C1] ? ip_protocol_deliver_rcu+0x56/0x590 [ 76.055703][ C1] __sk_receive_skb+0x370/0x880 [ 76.060568][ C1] ? ip_protocol_deliver_rcu+0x56/0x590 [ 76.066135][ C1] ip_protocol_deliver_rcu+0x56/0x590 [ 76.071523][ C1] ip_local_deliver_finish+0x20d/0x440 [ 76.077011][ C1] ? ip_local_deliver+0xfd/0x170 [ 76.081954][ C1] ? ip_local_deliver_finish+0x440/0x440 [ 76.087678][ C1] __netif_receive_skb+0x1b3/0x4e0 [ 76.092888][ C1] ? read_lock_is_recursive+0x10/0x10 [ 76.098361][ C1] ? __netif_receive_skb_list_core+0x830/0x830 [ 76.104535][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 76.110528][ C1] ? print_irqtrace_events+0x220/0x220 [ 76.116089][ C1] ? _raw_spin_lock_irq+0xdb/0x110 [ 76.121314][ C1] ? do_raw_spin_unlock+0x134/0x8a0 [ 76.126540][ C1] process_backlog+0x498/0x830 [ 76.131420][ C1] ? trigger_rx_softirq+0x50/0x50 [ 76.136477][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 76.142465][ C1] ? print_irqtrace_events+0x220/0x220 [ 76.147938][ C1] __napi_poll+0x93/0x390 [ 76.152283][ C1] net_rx_action+0x6a2/0xed0 [ 76.156900][ C1] ? net_tx_action+0x720/0x720 [ 76.161684][ C1] ? rcu_read_lock_sched_held+0x89/0x130 [ 76.167347][ C1] __do_softirq+0x277/0x75b [ 76.171865][ C1] ? do_softirq+0x161/0x240 [ 76.176376][ C1] ? __entry_text_end+0x1feacb/0x1feacb [ 76.182984][ C1] do_softirq+0x161/0x240 [ 76.187323][ C1] [ 76.190267][ C1] [ 76.193391][ C1] ? __local_bh_enable_ip+0x1f0/0x1f0 [ 76.198769][ C1] ? lockdep_hardirqs_on_prepare+0x7b0/0x7b0 [ 76.204861][ C1] ? __local_bh_enable_ip+0x101/0x1f0 [ 76.210247][ C1] ? lockdep_hardirqs_off+0x71/0x100 [ 76.215546][ C1] __local_bh_enable_ip+0x1b0/0x1f0 [ 76.220757][ C1] ? rcu_lock_release+0x10/0x10 [ 76.225619][ C1] ? _local_bh_enable+0xa0/0xa0 [ 76.230490][ C1] ip_finish_output2+0x99a/0xd60 [ 76.235446][ C1] ? ip_fragment+0x1c0/0x1c0 [ 76.240046][ C1] ? ip_skb_dst_mtu+0x95/0x780 [ 76.244831][ C1] ? __ip_finish_output+0x12a/0x380 [ 76.250053][ C1] __ip_queue_xmit+0xf09/0x1b60 [ 76.254945][ C1] dccp_transmit_skb+0xc47/0x13c0 [ 76.260008][ C1] dccp_rcv_established+0x14e/0x250 [ 76.265227][ C1] dccp_v4_do_rcv+0xc0/0x190 [ 76.269835][ C1] __release_sock+0x194/0x420 [ 76.274541][ C1] release_sock+0x51/0x170 [ 76.278972][ C1] dccp_sendmsg+0x421/0x730 [ 76.283488][ C1] ? dccp_getsockopt+0xa20/0xa20 [ 76.288438][ C1] ? inet_sendmsg+0x48/0x270 [ 76.293061][ C1] ? inet_send_prepare+0x200/0x200 [ 76.298175][ C1] ____sys_sendmsg+0x487/0x780 [ 76.303043][ C1] ? __sys_sendmsg_sock+0x10/0x10 [ 76.308187][ C1] __sys_sendmmsg+0x32d/0x650 [ 76.312888][ C1] ? __ia32_sys_sendmsg+0x80/0x80 [ 76.318003][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 76.323924][ C1] ? try_to_wake_up+0x5f5/0xad0 [ 76.328801][ C1] ? do_raw_spin_unlock+0x134/0x8a0 [ 76.334011][ C1] ? wake_up_q+0xae/0xf0 [ 76.338264][ C1] ? futex_wake+0x44b/0x4e0 [ 76.342782][ C1] ? futex_wake_mark+0x110/0x110 [ 76.347734][ C1] ? __local_bh_enable_ip+0x163/0x1f0 [ 76.353203][ C1] ? inet_stream_connect+0x7b/0x90 [ 76.358325][ C1] ? _local_bh_enable+0xa0/0xa0 [ 76.363184][ C1] ? do_raw_spin_unlock+0x134/0x8a0 [ 76.368516][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 76.374513][ C1] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 76.380512][ C1] __x64_sys_sendmmsg+0x97/0xb0 [ 76.385380][ C1] do_syscall_64+0x2b/0x70 [ 76.389804][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.395718][ C1] RIP: 0033:0x7f215708c189 [ 76.400142][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.419761][ C1] RSP: 002b:00007f2157d43168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 76.428273][ C1] RAX: ffffffffffffffda RBX: 00007f21571abf80 RCX: 00007f215708c189 [ 76.436269][ C1] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 76.444252][ C1] RBP: 00007f21570e7b01 R08: 0000000000000000 R09: 0000000000000000 [ 76.452242][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.460223][ C1] R13: 00007fff9c3e770f R14: 00007f2157d43300 R15: 0000000000022000 [ 76.468224][ C1] [ 76.799757][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 78.101620][ T4485] net_ratelimit: 72 callbacks suppressed [ 78.101632][ T4485] dccp_xmit_packet: Payload too large (65475) for featneg. [ 78.187632][ T4489] dccp_xmit_packet: Payload too large (65475) for featneg. [ 78.245981][ T4493] dccp_xmit_packet: Payload too large (65475) for featneg. [ 78.302589][ T4495] dccp_xmit_packet: Payload too large (65475) for featneg. [ 78.365969][ T4498] dccp_xmit_packet: Payload too large (65475) for featneg. [ 78.435171][ T4503] dccp_xmit_packet: Payload too large (65475) for featneg. [ 78.494970][ T4507] dccp_xmit_packet: Payload too large (65475) for featneg. [ 78.570216][ T4512] dccp_xmit_packet: Payload too large (65475) for featneg. [ 78.705953][ T4520] dccp_xmit_packet: Payload too large (65475) for featneg. [ 78.762935][ T4525] dccp_xmit_packet: Payload too large (65475) for featneg. [ 78.880911][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 79.533900][ C0] BUG: stored value of X_recv is zero at net/dccp/ccids/ccid3.c:691/ccid3_first_li() [ 79.543490][ C0] CPU: 0 PID: 4577 Comm: syz-executor.0 Not tainted 6.1.0-rc6-syzkaller #0 [ 79.552098][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 79.562348][ C0] Call Trace: [ 79.565646][ C0] [ 79.568499][ C0] dump_stack_lvl+0x163/0x213 [ 79.573186][ C0] ? nf_tcp_handle_invalid+0x4d9/0x4d9 [ 79.578729][ C0] ? panic+0x539/0x539 [ 79.582795][ C0] ? ktime_get+0x11b/0x1f0 [ 79.587195][ C0] ccid3_first_li+0x27b/0x340 [ 79.591857][ C0] tfrc_lh_interval_add+0x4d3/0x6e0 [ 79.597036][ C0] ? ccid3_hc_tx_update_x+0x640/0x640 [ 79.602393][ C0] tfrc_rx_handle_loss+0x65f/0x1760 [ 79.607578][ C0] ? ccid3_hc_tx_update_x+0x640/0x640 [ 79.612946][ C0] ccid3_hc_rx_packet_recv+0x27d/0xe40 [ 79.618391][ C0] dccp_rcv_established+0x14e/0x250 [ 79.623604][ C0] dccp_v4_do_rcv+0xc0/0x190 [ 79.628204][ C0] ? ip_protocol_deliver_rcu+0x56/0x590 [ 79.633837][ C0] __sk_receive_skb+0x370/0x880 [ 79.638681][ C0] ? ip_protocol_deliver_rcu+0x56/0x590 [ 79.644216][ C0] ip_protocol_deliver_rcu+0x56/0x590 [ 79.649582][ C0] ip_local_deliver_finish+0x20d/0x440 [ 79.655042][ C0] ? ip_local_deliver+0xfd/0x170 [ 79.659974][ C0] ? ip_local_deliver_finish+0x440/0x440 [ 79.665608][ C0] __netif_receive_skb+0x1b3/0x4e0 [ 79.670805][ C0] ? read_lock_is_recursive+0x10/0x10 [ 79.676160][ C0] ? __netif_receive_skb_list_core+0x830/0x830 [ 79.682291][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 79.688245][ C0] ? print_irqtrace_events+0x220/0x220 [ 79.693679][ C0] ? _raw_spin_lock_irq+0xdb/0x110 [ 79.698768][ C0] ? do_raw_spin_unlock+0x134/0x8a0 [ 79.704005][ C0] process_backlog+0x498/0x830 [ 79.708766][ C0] ? trigger_rx_softirq+0x50/0x50 [ 79.713786][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 79.719747][ C0] ? print_irqtrace_events+0x220/0x220 [ 79.725183][ C0] __napi_poll+0x93/0x390 [ 79.729498][ C0] net_rx_action+0x6a2/0xed0 [ 79.734075][ C0] ? net_tx_action+0x720/0x720 [ 79.738822][ C0] ? rcu_read_lock_sched_held+0x89/0x130 [ 79.744446][ C0] __do_softirq+0x277/0x75b [ 79.748947][ C0] ? do_softirq+0x161/0x240 [ 79.753428][ C0] ? __entry_text_end+0x1feacb/0x1feacb [ 79.758956][ C0] do_softirq+0x161/0x240 [ 79.763271][ C0] [ 79.766189][ C0] [ 79.769101][ C0] ? __local_bh_enable_ip+0x1f0/0x1f0 [ 79.774447][ C0] ? lockdep_hardirqs_on_prepare+0x7b0/0x7b0 [ 79.780410][ C0] ? __local_bh_enable_ip+0x101/0x1f0 [ 79.785758][ C0] ? lockdep_hardirqs_off+0x71/0x100 [ 79.791022][ C0] __local_bh_enable_ip+0x1b0/0x1f0 [ 79.796284][ C0] ? rcu_lock_release+0x10/0x10 [ 79.801118][ C0] ? _local_bh_enable+0xa0/0xa0 [ 79.805952][ C0] ip_finish_output2+0x99a/0xd60 [ 79.810882][ C0] ? ip_fragment+0x1c0/0x1c0 [ 79.815454][ C0] ? skb_dst+0x36/0x70 [ 79.819950][ C0] ? ip_skb_dst_mtu+0x95/0x780 [ 79.824706][ C0] ? __ip_finish_output+0x12a/0x380 [ 79.829975][ C0] __ip_queue_xmit+0xf09/0x1b60 [ 79.834813][ C0] dccp_transmit_skb+0xc47/0x13c0 [ 79.839918][ C0] __dccp_rcv_established+0x205/0x2b0 [ 79.845268][ C0] dccp_rcv_established+0x1ef/0x250 [ 79.850446][ C0] dccp_v4_do_rcv+0xc0/0x190 [ 79.855103][ C0] __release_sock+0x194/0x420 [ 79.859766][ C0] release_sock+0x51/0x170 [ 79.864159][ C0] dccp_sendmsg+0x421/0x730 [ 79.868642][ C0] ? dccp_getsockopt+0xa20/0xa20 [ 79.873562][ C0] ? inet_sendmsg+0x48/0x270 [ 79.878133][ C0] ? inet_send_prepare+0x200/0x200 [ 79.883218][ C0] ____sys_sendmsg+0x487/0x780 [ 79.887974][ C0] ? finish_lock_switch+0x8e/0x100 [ 79.893244][ C0] ? __sys_sendmsg_sock+0x10/0x10 [ 79.898260][ C0] __sys_sendmmsg+0x32d/0x650 [ 79.902936][ C0] ? __ia32_sys_sendmsg+0x80/0x80 [ 79.907976][ C0] ? futex_wait_queue+0xf6/0x180 [ 79.912999][ C0] ? futex_wait_setup+0x2b0/0x2b0 [ 79.918007][ C0] ? futex_wake+0x44b/0x4e0 [ 79.922673][ C0] ? _local_bh_enable+0xa0/0xa0 [ 79.927504][ C0] ? do_raw_spin_unlock+0x134/0x8a0 [ 79.932710][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 79.938672][ C0] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 79.944637][ C0] __x64_sys_sendmmsg+0x97/0xb0 [ 79.949475][ C0] do_syscall_64+0x2b/0x70 [ 79.953875][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.959748][ C0] RIP: 0033:0x7f215708c189 [ 79.964236][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 79.984086][ C0] RSP: 002b:00007f2157d43168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 79.992483][ C0] RAX: ffffffffffffffda RBX: 00007f21571abf80 RCX: 00007f215708c189 [ 80.000440][ C0] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 80.008393][ C0] RBP: 00007f21570e7b01 R08: 0000000000000000 R09: 0000000000000000 [ 80.016430][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.024468][ C0] R13: 00007fff9c3e770f R14: 00007f2157d43300 R15: 0000000000022000 [ 80.032442][ C0] 2022/11/23 05:33:20 executed programs: 121 [ 80.590598][ C1] Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1537/dccp_feat_activate_values() [ 82.757895][ C1] Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1537/dccp_feat_activate_values() [ 83.165781][ T4787] net_ratelimit: 67 callbacks suppressed [ 83.165797][ T4787] dccp_xmit_packet: Payload too large (65475) for featneg. [ 83.222727][ T4791] dccp_xmit_packet: Payload too large (65475) for featneg. [ 83.268498][ T4795] dccp_xmit_packet: Payload too large (65475) for featneg. [ 83.333328][ T4800] dccp_xmit_packet: Payload too large (65475) for featneg. [ 83.400438][ T4804] dccp_xmit_packet: Payload too large (65475) for featneg. [ 83.459390][ T4807] dccp_xmit_packet: Payload too large (65475) for featneg. [ 83.511370][ T4810] dccp_xmit_packet: Payload too large (65475) for featneg. [ 83.560571][ T4812] dccp_xmit_packet: Payload too large (65475) for featneg. [ 83.613363][ T4816] dccp_xmit_packet: Payload too large (65475) for featneg. [ 83.689548][ T4821] dccp_xmit_packet: Payload too large (65475) for featneg. [ 84.556519][ C1] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:417/tfrc_rx_hist_sample_rtt() [ 84.570488][ C1] CPU: 1 PID: 4878 Comm: syz-executor.0 Not tainted 6.1.0-rc6-syzkaller #0 [ 84.579080][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 84.589142][ C1] Call Trace: [ 84.592439][ C1] [ 84.595290][ C1] dump_stack_lvl+0x163/0x213 [ 84.599979][ C1] ? nf_tcp_handle_invalid+0x4d9/0x4d9 [ 84.605480][ C1] ? panic+0x539/0x539 [ 84.609572][ C1] ? ccid3_hc_tx_update_x+0x640/0x640 [ 84.615040][ C1] tfrc_rx_hist_sample_rtt+0x2ce/0x3e0 [ 84.620515][ C1] ccid3_hc_rx_packet_recv+0x556/0xe40 [ 84.625995][ C1] dccp_rcv_established+0x14e/0x250 [ 84.631207][ C1] dccp_v4_do_rcv+0xc0/0x190 [ 84.635807][ C1] ? ip_protocol_deliver_rcu+0x56/0x590 [ 84.641357][ C1] __sk_receive_skb+0x370/0x880 [ 84.646241][ C1] ? ip_protocol_deliver_rcu+0x56/0x590 [ 84.651811][ C1] ip_protocol_deliver_rcu+0x56/0x590 [ 84.657197][ C1] ip_local_deliver_finish+0x20d/0x440 [ 84.662658][ C1] ? ip_local_deliver+0xfd/0x170 [ 84.667604][ C1] ? ip_local_deliver_finish+0x440/0x440 [ 84.673235][ C1] __netif_receive_skb+0x1b3/0x4e0 [ 84.678351][ C1] ? read_lock_is_recursive+0x10/0x10 [ 84.683743][ C1] ? __netif_receive_skb_list_core+0x830/0x830 [ 84.689900][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 84.695882][ C1] ? __lock_acquire+0x1f60/0x1f60 [ 84.700909][ C1] ? _raw_spin_lock_irq+0xdb/0x110 [ 84.706036][ C1] ? do_raw_spin_unlock+0x134/0x8a0 [ 84.711250][ C1] process_backlog+0x498/0x830 [ 84.716074][ C1] ? trigger_rx_softirq+0x50/0x50 [ 84.721103][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 84.727175][ C1] ? print_irqtrace_events+0x220/0x220 [ 84.732649][ C1] __napi_poll+0x93/0x390 [ 84.736989][ C1] net_rx_action+0x6a2/0xed0 [ 84.741615][ C1] ? net_tx_action+0x720/0x720 [ 84.746387][ C1] ? rcu_read_lock_sched_held+0x89/0x130 [ 84.752042][ C1] __do_softirq+0x277/0x75b [ 84.756653][ C1] ? __irq_exit_rcu+0xec/0x170 [ 84.761517][ C1] ? __entry_text_end+0x1feacb/0x1feacb [ 84.767079][ C1] __irq_exit_rcu+0xec/0x170 [ 84.771672][ C1] ? irq_exit_rcu+0x20/0x20 [ 84.776195][ C1] irq_exit_rcu+0x5/0x20 [ 84.780442][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 84.786078][ C1] [ 84.789013][ C1] [ 84.791959][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 84.797940][ C1] RIP: 0010:__sys_sendmmsg+0x32d/0x650 [ 84.803403][ C1] Code: b9 ec ff ff 85 c0 0f 88 60 01 00 00 48 89 de 48 8b 7c 24 38 44 89 ea 48 8d 8c 24 d0 03 00 00 41 b8 80 00 00 00 e8 93 f1 ff ff <89> c3 48 b8 00 00 00 00 00 fc ff df 41 80 3c 04 00 74 0d 48 8d bc [ 84.823015][ C1] RSP: 0018:ffffc900091c7a20 EFLAGS: 00000246 [ 84.829096][ C1] RAX: 0000000000000000 RBX: ffffc900091c7d60 RCX: a2d85f171b0e0400 [ 84.837085][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8a69bc40 [ 84.845066][ C1] RBP: ffffc900091c7f08 R08: dffffc0000000000 R09: ffffed1029553a54 [ 84.853222][ C1] R10: ffffed1029553a54 R11: 1ffff11029553a53 R12: 1ffff92001238f7c [ 84.861293][ C1] R13: 0000000000040000 R14: 0000000000000019 R15: 1ffff92001238f50 [ 84.869308][ C1] ? __ia32_sys_sendmsg+0x80/0x80 [ 84.874343][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 84.880271][ C1] ? try_to_wake_up+0x5f5/0xad0 [ 84.885152][ C1] ? do_raw_spin_unlock+0x134/0x8a0 [ 84.890361][ C1] ? wake_up_q+0xae/0xf0 [ 84.894610][ C1] ? futex_wake+0x44b/0x4e0 [ 84.899154][ C1] ? futex_wake_mark+0x110/0x110 [ 84.904095][ C1] ? __local_bh_enable_ip+0x163/0x1f0 [ 84.909465][ C1] ? inet_stream_connect+0x7b/0x90 [ 84.914592][ C1] ? _local_bh_enable+0xa0/0xa0 [ 84.919453][ C1] ? do_raw_spin_unlock+0x134/0x8a0 [ 84.924784][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 84.930774][ C1] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 84.936849][ C1] __x64_sys_sendmmsg+0x97/0xb0 [ 84.941875][ C1] do_syscall_64+0x2b/0x70 [ 84.946307][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.952203][ C1] RIP: 0033:0x7f215708c189 [ 84.956625][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 84.976232][ C1] RSP: 002b:00007f2157d43168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 84.984649][ C1] RAX: ffffffffffffffda RBX: 00007f21571abf80 RCX: 00007f215708c189 [ 84.992628][ C1] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 85.000703][ C1] RBP: 00007f21570e7b01 R08: 0000000000000000 R09: 0000000000000000 [ 85.008693][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.016685][ C1] R13: 00007fff9c3e770f R14: 00007f2157d43300 R15: 0000000000022000 [ 85.024787][ C1] [ 85.472742][ C0] BUG: stored value of X_recv is zero at net/dccp/ccids/ccid3.c:691/ccid3_first_li() [ 85.482601][ C0] CPU: 0 PID: 4925 Comm: syz-executor.0 Not tainted 6.1.0-rc6-syzkaller #0 [ 85.491558][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 85.501727][ C0] Call Trace: [ 85.505039][ C0] [ 85.507894][ C0] dump_stack_lvl+0x163/0x213 [ 85.512598][ C0] ? nf_tcp_handle_invalid+0x4d9/0x4d9 [ 85.518084][ C0] ? panic+0x539/0x539 [ 85.522348][ C0] ? ktime_get+0x11b/0x1f0 [ 85.526781][ C0] ccid3_first_li+0x27b/0x340 [ 85.531496][ C0] tfrc_lh_interval_add+0x4d3/0x6e0 [ 85.536706][ C0] ? ccid3_hc_tx_update_x+0x640/0x640 [ 85.542088][ C0] tfrc_rx_handle_loss+0x65f/0x1760 [ 85.547386][ C0] ? ccid3_hc_tx_update_x+0x640/0x640 [ 85.552867][ C0] ccid3_hc_rx_packet_recv+0x27d/0xe40 [ 85.558347][ C0] dccp_rcv_established+0x14e/0x250 [ 85.563560][ C0] dccp_v4_do_rcv+0xc0/0x190 [ 85.568164][ C0] ? ip_protocol_deliver_rcu+0x56/0x590 [ 85.573714][ C0] __sk_receive_skb+0x370/0x880 [ 85.578575][ C0] ? ip_protocol_deliver_rcu+0x56/0x590 [ 85.584141][ C0] ip_protocol_deliver_rcu+0x56/0x590 [ 85.589529][ C0] ip_local_deliver_finish+0x20d/0x440 [ 85.595011][ C0] ? ip_local_deliver+0xfd/0x170 [ 85.599967][ C0] ? ip_local_deliver_finish+0x440/0x440 [ 85.605615][ C0] __netif_receive_skb+0x1b3/0x4e0 [ 85.610739][ C0] ? read_lock_is_recursive+0x10/0x10 [ 85.616129][ C0] ? __netif_receive_skb_list_core+0x830/0x830 [ 85.622291][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 85.628462][ C0] ? print_irqtrace_events+0x220/0x220 [ 85.633934][ C0] ? _raw_spin_lock_irq+0xdb/0x110 [ 85.639173][ C0] ? do_raw_spin_unlock+0x134/0x8a0 [ 85.644664][ C0] process_backlog+0x498/0x830 [ 85.649451][ C0] ? trigger_rx_softirq+0x50/0x50 [ 85.654581][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 85.660758][ C0] ? print_irqtrace_events+0x220/0x220 [ 85.666231][ C0] __napi_poll+0x93/0x390 [ 85.670669][ C0] net_rx_action+0x6a2/0xed0 [ 85.675365][ C0] ? net_tx_action+0x720/0x720 [ 85.680132][ C0] ? rcu_read_lock_sched_held+0x89/0x130 [ 85.685790][ C0] __do_softirq+0x277/0x75b [ 85.690306][ C0] ? __irq_exit_rcu+0xec/0x170 [ 85.695082][ C0] ? __entry_text_end+0x1feacb/0x1feacb [ 85.700747][ C0] __irq_exit_rcu+0xec/0x170 [ 85.705338][ C0] ? irq_exit_rcu+0x20/0x20 [ 85.709879][ C0] irq_exit_rcu+0x5/0x20 [ 85.714123][ C0] sysvec_apic_timer_interrupt+0x91/0xb0 [ 85.719931][ C0] [ 85.722869][ C0] [ 85.725806][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 85.731800][ C0] RIP: 0010:unwind_next_frame+0x1dc/0x24c0 [ 85.737781][ C0] Code: 09 01 00 00 48 c7 c0 00 00 00 81 4d 89 e6 49 29 c6 49 c1 ee 08 48 c7 c0 d4 75 9b 8e 48 c7 c1 c4 f7 be 8e 48 29 c1 48 8d 41 03 <48> 85 c9 48 0f 49 c1 44 8a 2d 86 00 a4 0a 48 c1 e8 02 ff c8 45 84 [ 85.757396][ C0] RSP: 0018:ffffc90009b2f180 EFLAGS: 00000206 [ 85.763758][ C0] RAX: 00000000002381f3 RBX: ffffc90009b2f2a8 RCX: 00000000002381f0 [ 85.771743][ C0] RDX: dffffc0000000000 RSI: ffffffff81c31711 RDI: ffffffff8135adc3 [ 85.779733][ C0] RBP: 1ffff92001365e52 R08: 0000000000000004 R09: dffffc0000000000 [ 85.787716][ C0] R10: fffff52001365e58 R11: 1ffff92001365e56 R12: ffffffff81c31710 [ 85.795796][ C0] R13: ffffc90009b2f2a8 R14: 000000000000c317 R15: ffffc90009b2f295 [ 85.804093][ C0] ? __kmem_cache_free+0x70/0x110 [ 85.809140][ C0] ? __kmem_cache_free+0x71/0x110 [ 85.814174][ C0] ? unwind_next_frame+0xc3/0x24c0 [ 85.819322][ C0] ? __kmem_cache_free+0x71/0x110 [ 85.824362][ C0] ? stack_trace_save+0x1f0/0x1f0 [ 85.829577][ C0] arch_stack_walk+0x112/0x140 [ 85.834455][ C0] ? __kmem_cache_free+0x71/0x110 [ 85.839492][ C0] stack_trace_save+0x12d/0x1f0 [ 85.844446][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 85.849581][ C0] ? __kmem_cache_free+0x71/0x110 [ 85.854619][ C0] kasan_set_track+0x4c/0x70 [ 85.859219][ C0] ? kasan_set_track+0x4c/0x70 [ 85.863988][ C0] ? kasan_save_free_info+0x27/0x40 [ 85.869284][ C0] ? ____kasan_slab_free+0xd6/0x120 [ 85.874494][ C0] ? slab_free_freelist_hook+0x12e/0x1a0 [ 85.880132][ C0] ? __kmem_cache_free+0x71/0x110 [ 85.885218][ C0] kasan_save_free_info+0x27/0x40 [ 85.890256][ C0] ____kasan_slab_free+0xd6/0x120 [ 85.895294][ C0] slab_free_freelist_hook+0x12e/0x1a0 [ 85.900768][ C0] ? skb_release_data+0x3f9/0x610 [ 85.906062][ C0] __kmem_cache_free+0x71/0x110 [ 85.911016][ C0] skb_release_data+0x3f9/0x610 [ 85.915890][ C0] kfree_skb_reason+0xa2/0x1e0 [ 85.920668][ C0] dccp_write_xmit+0xeb/0x150 [ 85.925364][ C0] dccp_sendmsg+0x4d0/0x730 [ 85.929888][ C0] ? dccp_getsockopt+0xa20/0xa20 [ 85.935194][ C0] ? inet_sendmsg+0x48/0x270 [ 85.939802][ C0] ? inet_send_prepare+0x200/0x200 [ 85.944948][ C0] ____sys_sendmsg+0x487/0x780 [ 85.949730][ C0] ? __might_fault+0xa2/0xf0 [ 85.954321][ C0] ? __sys_sendmsg_sock+0x10/0x10 [ 85.959407][ C0] ? rcu_read_lock_sched_held+0x89/0x130 [ 85.965037][ C0] __sys_sendmmsg+0x32d/0x650 [ 85.970066][ C0] ? __ia32_sys_sendmsg+0x80/0x80