Warning: Permanently added '10.128.0.246' (ECDSA) to the list of known hosts. 2023/02/28 14:01:27 ignoring optional flag "sandboxArg"="0" 2023/02/28 14:01:28 parsed 1 programs 2023/02/28 14:01:28 executed programs: 0 [ 72.417048][ T5076] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.426872][ T5076] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.435526][ T5076] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.448178][ T5076] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.455495][ T5076] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.675602][ T5472] chnl_net:caif_netlink_parms(): no params data found [ 72.821560][ T5472] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.829049][ T5472] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.836208][ T5472] bridge_slave_0: entered allmulticast mode [ 72.843659][ T5472] bridge_slave_0: entered promiscuous mode [ 72.852259][ T5472] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.860543][ T5472] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.868195][ T5472] bridge_slave_1: entered allmulticast mode [ 72.875084][ T5472] bridge_slave_1: entered promiscuous mode [ 72.904691][ T5472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.916534][ T5472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.949575][ T5472] team0: Port device team_slave_0 added [ 72.959034][ T5472] team0: Port device team_slave_1 added [ 72.985796][ T5472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.993123][ T5472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.019839][ T5472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.033681][ T5472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.041187][ T5472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.067620][ T5472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.109111][ T5472] hsr_slave_0: entered promiscuous mode [ 73.115252][ T5472] hsr_slave_1: entered promiscuous mode [ 73.783447][ T5472] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.792620][ T5472] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.805352][ T5472] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.818469][ T5472] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.896978][ T5472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.912739][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.921309][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.932845][ T5472] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.944853][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.955408][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.966044][ T899] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.973331][ T899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.002903][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.011611][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.023078][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.032107][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.039327][ T5072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.050340][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.060843][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.070444][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.080341][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.089509][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.098753][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.115700][ T5472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.131964][ T5472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.145185][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.155585][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.165474][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.176140][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.186492][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.201884][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.367282][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.374858][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.392294][ T5472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.414293][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.422992][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.443744][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.453868][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.464999][ T5472] veth0_vlan: entered promiscuous mode [ 74.473111][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.481995][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.497057][ T5472] veth1_vlan: entered promiscuous mode [ 74.517889][ T4393] Bluetooth: hci0: command 0x0409 tx timeout [ 74.531800][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.540850][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.551287][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.560714][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.573465][ T5472] veth0_macvtap: entered promiscuous mode [ 74.589064][ T5472] veth1_macvtap: entered promiscuous mode [ 74.612326][ T5472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.620245][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.631570][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.640759][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.651955][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.664824][ T5472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.675512][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.685628][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.700913][ T5472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.711550][ T5472] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.722890][ T5472] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.732640][ T5472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.825921][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.850477][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.865222][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.888893][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.899704][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.909541][ T899] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.968811][ T5567] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 74.993732][ T5567] dccp_xmit_packet: Payload too large (65475) for featneg. [ 75.071453][ T5570] dccp_xmit_packet: Payload too large (65475) for featneg. [ 75.137393][ T5574] dccp_xmit_packet: Payload too large (65475) for featneg. [ 75.345506][ T5585] dccp_xmit_packet: Payload too large (65475) for featneg. [ 75.469238][ T5594] dccp_xmit_packet: Payload too large (65475) for featneg. [ 75.542630][ T5597] dccp_xmit_packet: Payload too large (65475) for featneg. [ 75.623075][ T5601] dccp_xmit_packet: Payload too large (65475) for featneg. [ 75.677686][ T5605] dccp_xmit_packet: Payload too large (65475) for featneg. [ 75.739819][ T5607] dccp_xmit_packet: Payload too large (65475) for featneg. [ 75.812233][ T5612] dccp_xmit_packet: Payload too large (65475) for featneg. [ 76.038080][ C0] Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1537/dccp_feat_activate_values() [ 76.209672][ T7] cfg80211: failed to load regulatory.db [ 76.606744][ T4393] Bluetooth: hci0: command 0x041b tx timeout 2023/02/28 14:01:33 executed programs: 39 [ 77.857957][ C0] BUG: stored value of X_recv is zero at net/dccp/ccids/ccid3.c:691/ccid3_first_li() [ 77.868054][ C0] CPU: 0 PID: 5733 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller #0 [ 77.876443][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 77.886533][ C0] Call Trace: [ 77.889824][ C0] [ 77.892666][ C0] dump_stack_lvl+0x167/0x220 [ 77.897386][ C0] ? nf_tcp_handle_invalid+0x4e0/0x4e0 [ 77.902839][ C0] ? panic+0x540/0x540 [ 77.906922][ C0] ? ktime_get+0xf5/0x1c0 [ 77.911260][ C0] ccid3_first_li+0x27c/0x340 [ 77.915950][ C0] tfrc_lh_interval_add+0x4e7/0x6f0 [ 77.921241][ C0] ? ccid3_hc_tx_update_x+0x640/0x640 [ 77.926614][ C0] tfrc_rx_handle_loss+0x673/0x1720 [ 77.931819][ C0] ? ccid3_hc_tx_update_x+0x640/0x640 [ 77.937473][ C0] ccid3_hc_rx_packet_recv+0x28a/0xe60 [ 77.942941][ C0] dccp_rcv_established+0x153/0x250 [ 77.948249][ C0] dccp_v4_do_rcv+0xc6/0x190 [ 77.952830][ C0] ? ip_protocol_deliver_rcu+0x62/0xa20 [ 77.958365][ C0] __sk_receive_skb+0x36e/0x880 [ 77.963218][ C0] ip_protocol_deliver_rcu+0x62/0xa20 [ 77.968699][ C0] ip_local_deliver_finish+0x21d/0x460 [ 77.974185][ C0] NF_HOOK+0x255/0x300 [ 77.978267][ C0] ? NF_HOOK+0x300/0x300 [ 77.982505][ C0] ? ip_local_deliver+0x160/0x160 [ 77.987519][ C0] ? ip_rcv_finish_core+0x435/0x1580 [ 77.992796][ C0] ? NF_HOOK+0x300/0x300 [ 77.997035][ C0] NF_HOOK+0x255/0x300 [ 78.001097][ C0] ? ip_rcv_core+0xbc0/0xbc0 [ 78.005673][ C0] ? ip_local_deliver+0x160/0x160 [ 78.010680][ C0] ? ip_rcv_core+0x542/0xbc0 [ 78.015257][ C0] ? ip_rcv_core+0xbc0/0xbc0 [ 78.019853][ C0] ? ip_local_deliver_finish+0x460/0x460 [ 78.025492][ C0] ? ip_local_deliver_finish+0x460/0x460 [ 78.031128][ C0] __netif_receive_skb+0x1b7/0x4f0 [ 78.036230][ C0] ? read_lock_is_recursive+0x20/0x20 [ 78.041593][ C0] ? __netif_receive_skb_list_core+0x7f0/0x7f0 [ 78.047738][ C0] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 78.053711][ C0] ? print_irqtrace_events+0x220/0x220 [ 78.059157][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 78.066735][ C0] ? do_raw_spin_unlock+0x13b/0x8b0 [ 78.071954][ C0] process_backlog+0x2dd/0x640 [ 78.076726][ C0] ? trigger_rx_softirq+0x50/0x50 [ 78.081750][ C0] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 78.087739][ C0] ? print_irqtrace_events+0x220/0x220 [ 78.093217][ C0] __napi_poll+0x94/0x380 [ 78.097600][ C0] net_rx_action+0x65c/0xd60 [ 78.102222][ C0] ? net_tx_action+0x750/0x750 [ 78.107012][ C0] ? __do_softirq+0x1ef/0xb1a [ 78.111797][ C0] __do_softirq+0x311/0xb1a [ 78.116312][ C0] ? do_softirq+0x166/0x250 [ 78.120823][ C0] ? __lock_text_end+0xc/0xc [ 78.125419][ C0] do_softirq+0x166/0x250 [ 78.129741][ C0] [ 78.132661][ C0] [ 78.135690][ C0] ? __local_bh_enable_ip+0x1f0/0x1f0 [ 78.141076][ C0] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 78.147246][ C0] __local_bh_enable_ip+0x1b5/0x1f0 [ 78.153590][ C0] ? rcu_lock_release+0x10/0x10 [ 78.158436][ C0] ? _local_bh_enable+0xa0/0xa0 [ 78.163306][ C0] ip_finish_output2+0x998/0xd80 [ 78.168256][ C0] ? ip_fragment+0x1c0/0x1c0 [ 78.172865][ C0] ? ip_skb_dst_mtu+0xba/0x740 [ 78.177637][ C0] ? __ip_finish_output+0x12c/0x390 [ 78.182840][ C0] __ip_queue_xmit+0xf82/0x1be0 [ 78.187863][ C0] dccp_transmit_skb+0xbf9/0x1410 [ 78.192902][ C0] __dccp_rcv_established+0xe9/0x310 [ 78.198180][ C0] dccp_rcv_established+0x1f6/0x250 [ 78.203371][ C0] dccp_v4_do_rcv+0xc6/0x190 [ 78.207953][ C0] __release_sock+0x17f/0x410 [ 78.212660][ C0] release_sock+0x55/0x180 [ 78.217085][ C0] dccp_sendmsg+0x4ec/0x8f0 [ 78.221598][ C0] ? dccp_getsockopt+0xb00/0xb00 [ 78.226533][ C0] ? __import_iovec+0x6b/0x470 [ 78.231318][ C0] ? inet_sendmsg+0x4c/0x270 [ 78.235910][ C0] ? inet_send_prepare+0x210/0x210 [ 78.241018][ C0] ____sys_sendmsg+0x4aa/0x780 [ 78.245790][ C0] ? __sys_sendmsg_sock+0x20/0x20 [ 78.250816][ C0] ? __fdget+0x13e/0x1c0 [ 78.255048][ C0] __sys_sendmmsg+0x336/0x650 [ 78.259723][ C0] ? __ia32_sys_sendmsg+0x90/0x90 [ 78.264764][ C0] ? do_raw_spin_unlock+0x13b/0x8b0 [ 78.269957][ C0] ? wake_up_q+0xa3/0xe0 [ 78.274286][ C0] ? futex_wake+0x44c/0x4e0 [ 78.278971][ C0] ? futex_wake_mark+0x110/0x110 [ 78.283935][ C0] ? __local_bh_enable_ip+0x168/0x1f0 [ 78.289308][ C0] ? inet_stream_connect+0x7f/0x90 [ 78.294702][ C0] ? _local_bh_enable+0xa0/0xa0 [ 78.299556][ C0] ? do_raw_spin_unlock+0x13b/0x8b0 [ 78.304879][ C0] ? print_irqtrace_events+0x220/0x220 [ 78.310411][ C0] ? fpregs_activate+0x97/0x1f0 [ 78.315253][ C0] ? syscall_enter_from_user_mode+0x32/0x2c0 [ 78.321223][ C0] __x64_sys_sendmmsg+0x9b/0xb0 [ 78.326075][ C0] do_syscall_64+0x41/0xc0 [ 78.330480][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.336364][ C0] RIP: 0033:0x7f346de8c189 [ 78.340782][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.360380][ C0] RSP: 002b:00007f346eb26168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 78.368784][ C0] RAX: ffffffffffffffda RBX: 00007f346dfabf80 RCX: 00007f346de8c189 [ 78.376761][ C0] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 78.384746][ C0] RBP: 00007f346dee7b01 R08: 0000000000000000 R09: 0000000000000000 [ 78.392725][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.400707][ C0] R13: 00007ffd34fefcff R14: 00007f346eb26300 R15: 0000000000022000 [ 78.408718][ C0] [ 78.676747][ T4393] Bluetooth: hci0: command 0x040f tx timeout [ 80.021419][ T5831] net_ratelimit: 53 callbacks suppressed [ 80.021430][ T5831] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.078769][ T5835] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.136541][ T5838] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.190005][ T5840] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.278671][ T5845] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.339972][ T5849] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.400459][ T5854] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.487440][ T5859] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.565837][ T5863] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.648954][ T5868] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.756737][ T4393] Bluetooth: hci0: command 0x0419 tx timeout [ 82.400147][ C0] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:417/tfrc_rx_hist_sample_rtt() [ 82.414362][ C0] CPU: 0 PID: 5965 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller #0 [ 82.422622][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 82.432682][ C0] Call Trace: [ 82.435960][ C0] [ 82.438802][ C0] dump_stack_lvl+0x167/0x220 [ 82.443484][ C0] ? nf_tcp_handle_invalid+0x4e0/0x4e0 [ 82.448955][ C0] ? panic+0x540/0x540 [ 82.453046][ C0] ? ccid3_hc_tx_update_x+0x640/0x640 [ 82.458419][ C0] tfrc_rx_hist_sample_rtt+0x2d6/0x3e0 [ 82.463876][ C0] ccid3_hc_rx_packet_recv+0x56f/0xe60 [ 82.469364][ C0] dccp_rcv_established+0x153/0x250 [ 82.474591][ C0] dccp_v4_do_rcv+0xc6/0x190 [ 82.479290][ C0] ? ip_protocol_deliver_rcu+0x62/0xa20 [ 82.484872][ C0] __sk_receive_skb+0x36e/0x880 [ 82.489858][ C0] ip_protocol_deliver_rcu+0x62/0xa20 [ 82.495267][ C0] ip_local_deliver_finish+0x21d/0x460 [ 82.500850][ C0] NF_HOOK+0x255/0x300 [ 82.504947][ C0] ? NF_HOOK+0x300/0x300 [ 82.509214][ C0] ? ip_local_deliver+0x160/0x160 [ 82.514260][ C0] ? ip_rcv_finish_core+0x435/0x1580 [ 82.519565][ C0] ? NF_HOOK+0x300/0x300 [ 82.523858][ C0] NF_HOOK+0x255/0x300 [ 82.527956][ C0] ? ip_rcv_core+0xbc0/0xbc0 [ 82.532556][ C0] ? ip_local_deliver+0x160/0x160 [ 82.537576][ C0] ? ip_rcv_core+0x542/0xbc0 [ 82.542169][ C0] ? ip_rcv_core+0xbc0/0xbc0 [ 82.546761][ C0] ? ip_local_deliver_finish+0x460/0x460 [ 82.552409][ C0] ? ip_local_deliver_finish+0x460/0x460 [ 82.558058][ C0] __netif_receive_skb+0x1b7/0x4f0 [ 82.563176][ C0] ? read_lock_is_recursive+0x20/0x20 [ 82.568555][ C0] ? __netif_receive_skb_list_core+0x7f0/0x7f0 [ 82.574727][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 82.579788][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 82.584921][ C0] ? do_raw_spin_unlock+0x13b/0x8b0 [ 82.590149][ C0] process_backlog+0x2dd/0x640 [ 82.594946][ C0] ? trigger_rx_softirq+0x50/0x50 [ 82.599990][ C0] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 82.605980][ C0] ? print_irqtrace_events+0x220/0x220 [ 82.611450][ C0] __napi_poll+0x94/0x380 [ 82.615806][ C0] net_rx_action+0x65c/0xd60 [ 82.620432][ C0] ? net_tx_action+0x750/0x750 [ 82.625235][ C0] ? __do_softirq+0x1ef/0xb1a [ 82.629946][ C0] __do_softirq+0x311/0xb1a [ 82.634517][ C0] ? do_softirq+0x166/0x250 [ 82.639130][ C0] ? __lock_text_end+0xc/0xc [ 82.643727][ C0] do_softirq+0x166/0x250 [ 82.648065][ C0] [ 82.651016][ C0] [ 82.653966][ C0] ? __local_bh_enable_ip+0x1f0/0x1f0 [ 82.659360][ C0] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 82.665457][ C0] __local_bh_enable_ip+0x1b5/0x1f0 [ 82.670668][ C0] ? rcu_lock_release+0x10/0x10 [ 82.675528][ C0] ? _local_bh_enable+0xa0/0xa0 [ 82.680380][ C0] ip_finish_output2+0x998/0xd80 [ 82.685323][ C0] ? ip_fragment+0x1c0/0x1c0 [ 82.689915][ C0] ? ip_skb_dst_mtu+0xba/0x740 [ 82.694700][ C0] ? __ip_finish_output+0x12c/0x390 [ 82.699924][ C0] __ip_queue_xmit+0xf82/0x1be0 [ 82.704983][ C0] dccp_transmit_skb+0xbf9/0x1410 [ 82.710050][ C0] dccp_rcv_established+0x153/0x250 [ 82.715283][ C0] dccp_v4_do_rcv+0xc6/0x190 [ 82.719916][ C0] __release_sock+0x17f/0x410 [ 82.724636][ C0] release_sock+0x55/0x180 [ 82.729079][ C0] dccp_sendmsg+0x4ec/0x8f0 [ 82.733625][ C0] ? dccp_getsockopt+0xb00/0xb00 [ 82.738587][ C0] ? __import_iovec+0x6b/0x470 [ 82.743380][ C0] ? inet_sendmsg+0x4c/0x270 [ 82.747990][ C0] ? inet_send_prepare+0x210/0x210 [ 82.753124][ C0] ____sys_sendmsg+0x4aa/0x780 [ 82.757930][ C0] ? __sys_sendmsg_sock+0x20/0x20 [ 82.762982][ C0] ? __fdget+0x13e/0x1c0 [ 82.767249][ C0] __sys_sendmmsg+0x336/0x650 [ 82.772047][ C0] ? __ia32_sys_sendmsg+0x90/0x90 [ 82.777123][ C0] ? futex_wait_queue+0xfd/0x190 [ 82.782108][ C0] ? futex_wait_setup+0x2b0/0x2b0 [ 82.787172][ C0] ? futex_wake+0x148/0x4e0 [ 82.791760][ C0] ? _local_bh_enable+0xa0/0xa0 [ 82.796893][ C0] ? do_raw_spin_unlock+0x13b/0x8b0 [ 82.802164][ C0] ? print_irqtrace_events+0x220/0x220 [ 82.807779][ C0] ? fpregs_activate+0x97/0x1f0 [ 82.812656][ C0] ? syscall_enter_from_user_mode+0x32/0x2c0 [ 82.818846][ C0] __x64_sys_sendmmsg+0x9b/0xb0 [ 82.823712][ C0] do_syscall_64+0x41/0xc0 [ 82.828145][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 82.834059][ C0] RIP: 0033:0x7f346de8c189 [ 82.838493][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 82.858479][ C0] RSP: 002b:00007f346eb26168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 82.867019][ C0] RAX: ffffffffffffffda RBX: 00007f346dfabf80 RCX: 00007f346de8c189 [ 82.875366][ C0] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 82.884091][ C0] RBP: 00007f346dee7b01 R08: 0000000000000000 R09: 0000000000000000 [ 82.892278][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 2023/02/28 14:01:38 executed programs: 98 [ 82.900338][ C0] R13: 00007ffd34fefcff R14: 00007f346eb26300 R15: 0000000000022000 [ 82.908368][ C0] [ 83.656388][ C1] Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1537/dccp_feat_activate_values() [ 85.029696][ T6109] net_ratelimit: 44 callbacks suppressed [ 85.029704][ T6109] dccp_xmit_packet: Payload too large (65475) for featneg. [ 85.095932][ T6113] dccp_xmit_packet: Payload too large (65475) for featneg. [ 85.153339][ T6116] dccp_xmit_packet: Payload too large (65475) for featneg. [ 85.231131][ T6119] dccp_xmit_packet: Payload too large (65475) for featneg. [ 85.291800][ T6124] dccp_xmit_packet: Payload too large (65475) for featneg. [ 85.354040][ T6128] dccp_xmit_packet: Payload too large (65475) for featneg. [ 85.426376][ T6131] dccp_xmit_packet: Payload too large (65475) for featneg. [ 85.550966][ T6137] dccp_xmit_packet: Payload too large (65475) for featneg. [ 85.641277][ T6144] dccp_xmit_packet: Payload too large (65475) for featneg. [ 85.713337][ T6149] dccp_xmit_packet: Payload too large (65475) for featneg. [ 86.645425][ C0] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:417/tfrc_rx_hist_sample_rtt() [ 86.659428][ C0] CPU: 0 PID: 6206 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller #0 [ 86.667683][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 86.677763][ C0] Call Trace: [ 86.681060][ C0] [ 86.683922][ C0] dump_stack_lvl+0x167/0x220 [ 86.688633][ C0] ? nf_tcp_handle_invalid+0x4e0/0x4e0 [ 86.694108][ C0] ? panic+0x540/0x540 [ 86.698230][ C0] ? ccid3_hc_tx_update_x+0x640/0x640 [ 86.703624][ C0] tfrc_rx_hist_sample_rtt+0x2d6/0x3e0 [ 86.709105][ C0] ccid3_hc_rx_packet_recv+0x56f/0xe60 [ 86.714591][ C0] dccp_rcv_established+0x153/0x250 [ 86.719813][ C0] dccp_v4_do_rcv+0xc6/0x190 [ 86.724419][ C0] ? ip_protocol_deliver_rcu+0x62/0xa20 [ 86.729988][ C0] __sk_receive_skb+0x36e/0x880 [ 86.734847][ C0] ip_protocol_deliver_rcu+0x62/0xa20 [ 86.740222][ C0] ip_local_deliver_finish+0x21d/0x460 [ 86.745677][ C0] NF_HOOK+0x255/0x300 [ 86.749741][ C0] ? NF_HOOK+0x300/0x300 [ 86.754059][ C0] ? ip_local_deliver+0x160/0x160 [ 86.759073][ C0] ? ip_rcv_finish_core+0x435/0x1580 [ 86.764437][ C0] ? NF_HOOK+0x300/0x300 [ 86.768699][ C0] NF_HOOK+0x255/0x300 [ 86.772761][ C0] ? ip_rcv_core+0xbc0/0xbc0 [ 86.777338][ C0] ? ip_local_deliver+0x160/0x160 [ 86.782345][ C0] ? ip_rcv_core+0x542/0xbc0 [ 86.786924][ C0] ? ip_rcv_core+0xbc0/0xbc0 [ 86.791511][ C0] ? ip_local_deliver_finish+0x460/0x460 [ 86.797132][ C0] ? ip_local_deliver_finish+0x460/0x460 [ 86.802754][ C0] __netif_receive_skb+0x1b7/0x4f0 [ 86.807857][ C0] ? read_lock_is_recursive+0x20/0x20 [ 86.813234][ C0] ? __netif_receive_skb_list_core+0x7f0/0x7f0 [ 86.819383][ C0] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 86.825351][ C0] ? print_irqtrace_events+0x220/0x220 [ 86.830795][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 86.835899][ C0] ? do_raw_spin_unlock+0x13b/0x8b0 [ 86.841092][ C0] process_backlog+0x2dd/0x640 [ 86.845862][ C0] ? trigger_rx_softirq+0x50/0x50 [ 86.850878][ C0] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 86.856850][ C0] ? print_irqtrace_events+0x220/0x220 [ 86.862297][ C0] __napi_poll+0x94/0x380 [ 86.866638][ C0] net_rx_action+0x65c/0xd60 [ 86.871233][ C0] ? net_tx_action+0x750/0x750 [ 86.876003][ C0] ? __do_softirq+0x1ef/0xb1a [ 86.880672][ C0] __do_softirq+0x311/0xb1a [ 86.885172][ C0] ? kvm_clock_read+0x14/0x30 [ 86.889937][ C0] ? __irq_exit_rcu+0x159/0x240 [ 86.894791][ C0] ? __lock_text_end+0xc/0xc [ 86.899388][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 86.904668][ C0] __irq_exit_rcu+0x159/0x240 [ 86.909344][ C0] ? irq_exit_rcu+0x20/0x20 [ 86.913844][ C0] irq_exit_rcu+0x9/0x20 [ 86.918159][ C0] sysvec_apic_timer_interrupt+0x95/0xb0 [ 86.923778][ C0] [ 86.926708][ C0] [ 86.929646][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.935616][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x30 [ 86.941758][ C0] Code: bd 65 91 03 00 75 e7 48 c7 c7 60 77 ea 89 48 c7 c6 e0 9b ea 89 e8 40 01 9d f7 0f 0b eb d0 66 2e 0f 1f 84 00 00 00 00 00 66 90 0f 1e fa 31 c0 83 3d fb 31 91 03 00 74 1d 83 3d 7e 65 91 03 00 [ 86.961360][ C0] RSP: 0018:ffffc90005e7f538 EFLAGS: 00000206 [ 86.967470][ C0] RAX: dffffc0000000000 RBX: 1ffff92000bcfeb0 RCX: ffffffff81621d5a [ 86.975446][ C0] RDX: dffffc0000000000 RSI: ffffffff89ea78c0 RDI: ffffffff8a3a1940 [ 86.983412][ C0] RBP: ffffc90005e7f610 R08: dffffc0000000000 R09: fffffbfff1e07c3f [ 86.991372][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888027efe000 [ 86.999331][ C0] R13: 1ffff92000bcfeac R14: dffffc0000000000 R15: ffffc90005e7f580 [ 87.007394][ C0] ? mark_lock+0x9a/0x340 [ 87.011720][ C0] count_memcg_event_mm+0x202/0x2e0 [ 87.016912][ C0] ? put_page+0x180/0x180 [ 87.021240][ C0] handle_mm_fault+0x155/0x3ce0 [ 87.026100][ C0] ? numa_migrate_prep+0x1c0/0x1c0 [ 87.031214][ C0] ? mtree_destroy+0x20/0x20 [ 87.035810][ C0] ? find_vma+0xff/0x170 [ 87.040042][ C0] ? vma_merge+0x1310/0x1310 [ 87.044634][ C0] ? exc_page_fault+0x131/0x8a0 [ 87.049476][ C0] exc_page_fault+0x685/0x8a0 [ 87.054147][ C0] asm_exc_page_fault+0x26/0x30 [ 87.059022][ C0] RIP: 0010:__put_user_4+0x16/0x20 [ 87.064131][ C0] Code: 89 01 31 c9 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 70 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 90 f3 0f 1e fa f3 0f 1e fa 0f 01 cb 89 [ 87.083739][ C0] RSP: 0018:ffffc90005e7fa18 EFLAGS: 00050293 [ 87.089805][ C0] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020002038 [ 87.097781][ C0] RDX: 0000000020002000 RSI: ffffffff89ea8a40 RDI: ffffffff8a3a1940 [ 87.105750][ C0] RBP: ffffc90005e7fef0 R08: dffffc0000000000 R09: fffffbfff1a7ef16 [ 87.113721][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000007 [ 87.121718][ C0] R13: 1ffff92000bcff4c R14: 1ffff92000bcff78 R15: 0000000000000006 [ 87.129803][ C0] __sys_sendmmsg+0x38c/0x650 [ 87.134496][ C0] ? __ia32_sys_sendmsg+0x90/0x90 [ 87.139541][ C0] ? do_raw_spin_unlock+0x13b/0x8b0 [ 87.144822][ C0] ? wake_up_q+0xa3/0xe0 [ 87.149059][ C0] ? futex_wake+0x44c/0x4e0 [ 87.153562][ C0] ? futex_wake_mark+0x110/0x110 [ 87.158489][ C0] ? __local_bh_enable_ip+0x168/0x1f0 [ 87.163847][ C0] ? inet_stream_connect+0x7f/0x90 [ 87.168951][ C0] ? _local_bh_enable+0xa0/0xa0 [ 87.173798][ C0] ? do_raw_spin_unlock+0x13b/0x8b0 [ 87.179014][ C0] ? print_irqtrace_events+0x220/0x220 [ 87.184463][ C0] ? fpregs_activate+0x97/0x1f0 [ 87.189306][ C0] ? syscall_enter_from_user_mode+0x32/0x2c0 [ 87.195285][ C0] __x64_sys_sendmmsg+0x9b/0xb0 [ 87.200128][ C0] do_syscall_64+0x41/0xc0 [ 87.204557][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 87.210438][ C0] RIP: 0033:0x7f346de8c189 [ 87.214847][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 87.234447][ C0] RSP: 002b:00007f346eb26168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 87.242866][ C0] RAX: ffffffffffffffda RBX: 00007f346dfabf80 RCX: 00007f346de8c189 [ 87.250829][ C0] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 87.258790][ C0] RBP: 00007f346dee7b01 R08: 0000000000000000 R09: 0000000000000000 [ 87.266752][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.274713][ C0] R13: 00007ffd34fefcff R14: 00007f346eb26300 R15: 0000000000022000 [ 87.282691][ C0] [ 87.782822][ C0] Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1537/dccp_feat_activate_values()