Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 40.174067] can: request_module (can-proto-0) failed. [ 40.179896] can: request_module (can-proto-0) failed. [ 40.976705] ip (3133) used greatest stack depth: 23584 bytes left [ 41.635612] tipc: TX() has been purged, node left! Warning: Permanently added '10.128.15.206' (ECDSA) to the list of known hosts. 2020/04/16 15:36:22 parsed 1 programs 2020/04/16 15:36:22 executed programs: 0 [ 51.095300] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 51.108505] dccp_close: ABORT with 24 bytes unread [ 51.108815] CPU: 0 PID: 4248 Comm: syz-executor2 Not tainted 5.7.0-rc1-syzkaller #0 [ 51.121555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.130922] Call Trace: [ 51.133512] [ 51.135679] dump_stack+0x12f/0x187 [ 51.137868] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 51.139325] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 51.139346] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 51.139353] ? dccp_parse_options+0x333/0x1000 [ 51.139376] dccp_deliver_input_to_ccids+0xcc/0x220 [ 51.172867] dccp_rcv_established+0x49/0x70 [ 51.177203] dccp_v4_do_rcv+0xf4/0x160 [ 51.181087] __sk_receive_skb+0x2b6/0x9e0 [ 51.185319] ? sk_free+0x60/0x60 [ 51.188688] ? dccp_invalid_packet+0x3ec/0x750 [ 51.193283] dccp_v4_rcv+0xc62/0x1da3 [ 51.197100] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 51.201868] ip_local_deliver_finish+0x1ee/0x2e0 [ 51.206617] ip_local_deliver+0x306/0x450 [ 51.210756] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 51.215682] ? lock_downgrade+0x960/0x960 [ 51.219823] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 51.224753] ip_rcv_finish+0xb0/0x170 [ 51.228556] ip_rcv+0xcb/0x2f0 [ 51.231745] ? ip_local_deliver+0x450/0x450 [ 51.236069] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 51.241949] ? ip_local_deliver+0x450/0x450 [ 51.246289] __netif_receive_skb_one_core+0x132/0x190 [ 51.251474] ? __netif_receive_skb_core+0x2900/0x2900 [ 51.256686] ? lock_release+0x960/0x960 [ 51.260661] ? process_backlog+0x3fe/0x700 [ 51.264898] ? net_rx_action+0x42d/0xde0 [ 51.268968] __netif_receive_skb+0x1f/0x1b0 [ 51.273298] process_backlog+0x1f1/0x700 [ 51.277346] ? __do_softirq+0x248/0x9a6 [ 51.281310] ? lockdep_hardirqs_on+0x19e/0x620 [ 51.285893] net_rx_action+0x42d/0xde0 [ 51.289784] ? __kasan_check_read+0x11/0x20 [ 51.294115] ? napi_busy_loop+0x6e0/0x6e0 [ 51.298249] ? rcu_is_watching+0x31/0x80 [ 51.302437] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 51.307279] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 51.312537] ? __do_softirq+0x1d9/0x9a6 [ 51.316494] ? ip_finish_output2+0x709/0x22a0 [ 51.320981] ? trace_hardirqs_on+0x28/0x180 [ 51.325304] __do_softirq+0x248/0x9a6 [ 51.329108] ? ip_finish_output2+0x709/0x22a0 [ 51.333594] do_softirq_own_stack+0x2a/0x40 [ 51.337908] [ 51.340129] do_softirq.part.17+0x11a/0x150 [ 51.344439] __local_bh_enable_ip+0x1ee/0x230 [ 51.348925] ip_finish_output2+0x72d/0x22a0 [ 51.353249] ? ip_frag_next+0xa10/0xa10 [ 51.357209] ? rcu_read_lock_held+0x9c/0xb0 [ 51.361516] ? rcu_read_lock_held_common+0x170/0x170 [ 51.366617] __ip_finish_output+0x401/0xa80 [ 51.371012] ? __ip_finish_output+0x401/0xa80 [ 51.375502] ip_finish_output+0x27/0x170 [ 51.379554] ip_output+0x1c6/0x560 [ 51.383089] ? ip_mc_output+0xd10/0xd10 [ 51.387083] ? __ip_finish_output+0xa80/0xa80 [ 51.391653] ? rcu_read_lock_held_common+0x170/0x170 [ 51.396766] ? rcu_read_lock_held+0x9c/0xb0 [ 51.401091] ip_local_out+0x7e/0x130 [ 51.404939] __ip_queue_xmit+0x700/0x1de0 [ 51.409089] ? __skb_checksum+0x7c0/0x7c0 [ 51.413232] ? skb_send_sock_locked+0x750/0x750 [ 51.417894] ? reqsk_fastopen_remove+0x560/0x560 [ 51.422654] ? dccp_insert_options+0x1e2/0xb20 [ 51.427239] ip_queue_xmit+0x45/0x70 [ 51.430964] dccp_transmit_skb+0xb76/0x12a0 [ 51.435272] ? skb_unlink+0x117/0x1a0 [ 51.439072] dccp_xmit_packet+0x1a0/0x580 [ 51.443214] dccp_write_xmit+0x128/0x180 [ 51.447371] dccp_sendmsg+0x691/0xdb0 [ 51.451162] ? aa_sk_perm+0x182/0x740 [ 51.454957] ? dccp_disconnect+0xb00/0xb00 [ 51.459178] ? aa_af_perm+0x240/0x240 [ 51.462969] ? rw_copy_check_uvector+0x66/0x3b0 [ 51.467623] ? __kasan_check_write+0x14/0x20 [ 51.472038] inet_sendmsg+0xbd/0xe0 [ 51.475653] ? inet_send_prepare+0x3a0/0x3a0 [ 51.480046] sock_sendmsg+0xdf/0x110 [ 51.483753] ____sys_sendmsg+0x68d/0xae0 [ 51.487808] ? copy_msghdr_from_user+0xa3/0xf0 [ 51.492379] ? kernel_sendmsg+0x30/0x30 [ 51.496341] ? find_held_lock+0x36/0x1d0 [ 51.500397] ? __fget_files+0x28b/0x410 [ 51.504384] ___sys_sendmsg+0xe4/0x160 [ 51.508260] ? sendmsg_copy_msghdr+0x30/0x30 [ 51.512659] ? rcu_read_lock_held_common+0x170/0x170 [ 51.517935] ? __fget_files+0x2a5/0x410 [ 51.521922] ? __x64_sys_dup2+0x2e0/0x2e0 [ 51.526110] ? __fget_light+0x1b3/0x230 [ 51.530074] ? __fdget+0xe/0x10 [ 51.533351] __sys_sendmsg+0xd9/0x180 [ 51.537137] ? __sys_sendmsg_sock+0xa0/0xa0 [ 51.541461] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 51.546748] ? __sched_text_start+0x8/0x8 [ 51.550905] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 51.556280] __x64_sys_sendmsg+0x73/0xb0 [ 51.560329] do_syscall_64+0xd0/0x630 [ 51.564128] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 51.569305] RIP: 0033:0x452f89 [ 51.572486] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 51.591476] RSP: 002b:00007f8e0ee4ec58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 51.599190] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 51.606457] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 51.613737] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 51.621110] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 51.628392] R13: 00000000ffffffff R14: 00007f8e0ee4f6d4 R15: 0000000000000002 [ 51.635688] CPU: 1 PID: 4255 Comm: syz-executor4 Not tainted 5.7.0-rc1-syzkaller #0 [ 51.643496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.652856] Call Trace: [ 51.655438] [ 51.657608] dump_stack+0x12f/0x187 [ 51.661260] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 51.663796] dccp_close: ABORT with 24 bytes unread [ 51.666813] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 51.666822] ? dccp_parse_options+0x333/0x1000 [ 51.666848] dccp_deliver_input_to_ccids+0xcc/0x220 [ 51.666864] dccp_rcv_established+0x49/0x70 [ 51.666875] dccp_v4_do_rcv+0xf4/0x160 [ 51.666891] __sk_receive_skb+0x2b6/0x9e0 [ 51.698565] ? sk_free+0x60/0x60 [ 51.701948] ? dccp_invalid_packet+0x3ec/0x750 [ 51.706570] dccp_v4_rcv+0xc62/0x1da3 [ 51.710423] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 51.715210] ip_local_deliver_finish+0x1ee/0x2e0 [ 51.719989] ip_local_deliver+0x306/0x450 [ 51.724159] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 51.729115] ? lock_downgrade+0x960/0x960 [ 51.733282] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 51.738856] ip_rcv_finish+0xb0/0x170 [ 51.742915] ip_rcv+0xcb/0x2f0 [ 51.746230] ? ip_local_deliver+0x450/0x450 [ 51.750137] dccp_close: ABORT with 24 bytes unread [ 51.750564] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 51.750588] ? ip_local_deliver+0x450/0x450 [ 51.750603] __netif_receive_skb_one_core+0x132/0x190 [ 51.750614] ? __netif_receive_skb_core+0x2900/0x2900 [ 51.775749] ? lock_release+0x960/0x960 [ 51.779741] ? process_backlog+0x3fe/0x700 [ 51.783989] ? net_rx_action+0x42d/0xde0 [ 51.788110] __netif_receive_skb+0x1f/0x1b0 [ 51.792461] process_backlog+0x1f1/0x700 [ 51.796532] ? __do_softirq+0x248/0x9a6 [ 51.800519] ? lockdep_hardirqs_on+0x19e/0x620 [ 51.805359] net_rx_action+0x42d/0xde0 [ 51.809409] ? __kasan_check_read+0x11/0x20 [ 51.813757] ? napi_busy_loop+0x6e0/0x6e0 [ 51.817948] ? rcu_is_watching+0x31/0x80 [ 51.822033] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 51.826886] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 51.832192] ? __do_softirq+0x1d9/0x9a6 [ 51.833908] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 51.836189] ? ip_finish_output2+0x709/0x22a0 [ 51.836199] ? trace_hardirqs_on+0x28/0x180 [ 51.836220] __do_softirq+0x248/0x9a6 [ 51.836249] ? ip_finish_output2+0x709/0x22a0 [ 51.836264] do_softirq_own_stack+0x2a/0x40 [ 51.836270] [ 51.836278] do_softirq.part.17+0x11a/0x150 [ 51.880192] __local_bh_enable_ip+0x1ee/0x230 [ 51.884810] ip_finish_output2+0x72d/0x22a0 [ 51.889275] ? ip_frag_next+0xa10/0xa10 [ 51.893257] ? rcu_read_lock_held+0x9c/0xb0 [ 51.897725] ? rcu_read_lock_held_common+0x170/0x170 [ 51.902861] __ip_finish_output+0x401/0xa80 [ 51.907214] ? __ip_finish_output+0x401/0xa80 [ 51.912252] ip_finish_output+0x27/0x170 [ 51.916311] ip_output+0x1c6/0x560 [ 51.919849] ? ip_mc_output+0xd10/0xd10 [ 51.923829] ? __ip_finish_output+0xa80/0xa80 [ 51.928310] ? rcu_read_lock_held_common+0x170/0x170 [ 51.933410] ? rcu_read_lock_held+0x9c/0xb0 [ 51.937748] ip_local_out+0x7e/0x130 [ 51.941454] __ip_queue_xmit+0x700/0x1de0 [ 51.945591] ? __skb_checksum+0x7c0/0x7c0 [ 51.949726] ? skb_send_sock_locked+0x750/0x750 [ 51.954724] ? reqsk_fastopen_remove+0x560/0x560 [ 51.959659] ? dccp_insert_options+0x1e2/0xb20 [ 51.964237] ip_queue_xmit+0x45/0x70 [ 51.967941] dccp_transmit_skb+0xb76/0x12a0 [ 51.972247] ? skb_unlink+0x117/0x1a0 [ 51.976074] dccp_xmit_packet+0x1a0/0x580 [ 51.980242] dccp_write_xmit+0x128/0x180 [ 51.984309] dccp_sendmsg+0x691/0xdb0 [ 51.988112] ? aa_sk_perm+0x182/0x740 [ 51.991914] ? dccp_disconnect+0xb00/0xb00 [ 51.996136] ? aa_af_perm+0x240/0x240 [ 51.999930] ? rw_copy_check_uvector+0x66/0x3b0 [ 52.004731] ? __kasan_check_write+0x14/0x20 [ 52.009159] inet_sendmsg+0xbd/0xe0 [ 52.012791] ? inet_send_prepare+0x3a0/0x3a0 [ 52.017306] sock_sendmsg+0xdf/0x110 [ 52.021018] ____sys_sendmsg+0x68d/0xae0 [ 52.025077] ? copy_msghdr_from_user+0xa3/0xf0 [ 52.029681] ? kernel_sendmsg+0x30/0x30 [ 52.033861] ? find_held_lock+0x36/0x1d0 [ 52.037931] ? __fget_files+0x28b/0x410 [ 52.041916] ___sys_sendmsg+0xe4/0x160 [ 52.045802] ? sendmsg_copy_msghdr+0x30/0x30 [ 52.050206] ? rcu_read_lock_held_common+0x170/0x170 [ 52.055308] ? __fget_files+0x2a5/0x410 [ 52.059280] ? __x64_sys_dup2+0x2e0/0x2e0 [ 52.063437] ? __fget_light+0x1b3/0x230 [ 52.067398] ? __fdget+0xe/0x10 [ 52.070672] __sys_sendmsg+0xd9/0x180 [ 52.074465] ? __sys_sendmsg_sock+0xa0/0xa0 [ 52.078788] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 52.084057] ? __sched_text_start+0x8/0x8 [ 52.088207] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 52.093563] __x64_sys_sendmsg+0x73/0xb0 [ 52.097617] do_syscall_64+0xd0/0x630 [ 52.101409] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 52.106824] RIP: 0033:0x452f89 [ 52.110006] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 52.128979] RSP: 002b:00007f99a4c36c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 52.137026] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 52.144282] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 52.151541] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 52.158796] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 52.166064] R13: 00000000ffffffff R14: 00007f99a4c376d4 R15: 0000000000000002 [ 52.173355] CPU: 0 PID: 4274 Comm: syz-executor3 Not tainted 5.7.0-rc1-syzkaller #0 [ 52.181163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.186280] dccp_close: ABORT with 24 bytes unread [ 52.190518] Call Trace: [ 52.190523] [ 52.190537] dump_stack+0x12f/0x187 [ 52.190565] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 52.190583] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 52.190591] ? dccp_parse_options+0x333/0x1000 [ 52.218471] dccp_deliver_input_to_ccids+0xcc/0x220 [ 52.223512] dccp_rcv_established+0x49/0x70 [ 52.227985] dccp_v4_do_rcv+0xf4/0x160 [ 52.231885] __sk_receive_skb+0x2b6/0x9e0 [ 52.236049] ? sk_free+0x60/0x60 [ 52.239420] ? dccp_invalid_packet+0x3ec/0x750 [ 52.244024] dccp_v4_rcv+0xc62/0x1da3 [ 52.247876] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 52.252657] ip_local_deliver_finish+0x1ee/0x2e0 [ 52.257433] ip_local_deliver+0x306/0x450 [ 52.261591] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 52.266538] ? lock_downgrade+0x960/0x960 [ 52.270711] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 52.275683] ip_rcv_finish+0xb0/0x170 [ 52.279487] ip_rcv+0xcb/0x2f0 [ 52.282679] ? ip_local_deliver+0x450/0x450 [ 52.287020] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 52.292423] ? ip_local_deliver+0x450/0x450 [ 52.296758] __netif_receive_skb_one_core+0x132/0x190 [ 52.301973] ? __netif_receive_skb_core+0x2900/0x2900 [ 52.307180] ? lock_release+0x960/0x960 [ 52.311158] ? process_backlog+0x3fe/0x700 [ 52.315396] ? net_rx_action+0x42d/0xde0 [ 52.319623] __netif_receive_skb+0x1f/0x1b0 [ 52.320506] dccp_close: ABORT with 24 bytes unread [ 52.323964] process_backlog+0x1f1/0x700 [ 52.323972] ? __do_softirq+0x248/0x9a6 [ 52.323983] ? lockdep_hardirqs_on+0x19e/0x620 [ 52.324008] net_rx_action+0x42d/0xde0 [ 52.338664] dccp_close: ABORT with 24 bytes unread [ 52.341546] ? __kasan_check_read+0x11/0x20 [ 52.341577] ? napi_busy_loop+0x6e0/0x6e0 [ 52.341584] ? rcu_is_watching+0x31/0x80 [ 52.351929] dccp_close: ABORT with 289 bytes unread [ 52.354707] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 52.354718] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 52.354724] ? __do_softirq+0x1d9/0x9a6 [ 52.354732] ? ip_finish_output2+0x709/0x22a0 [ 52.372998] dccp_close: ABORT with 24 bytes unread [ 52.378156] ? trace_hardirqs_on+0x28/0x180 [ 52.378178] __do_softirq+0x248/0x9a6 [ 52.378208] ? ip_finish_output2+0x709/0x22a0 [ 52.378223] do_softirq_own_stack+0x2a/0x40 [ 52.409147] [ 52.411400] do_softirq.part.17+0x11a/0x150 [ 52.415732] __local_bh_enable_ip+0x1ee/0x230 [ 52.420251] ip_finish_output2+0x72d/0x22a0 [ 52.424612] ? ip_frag_next+0xa10/0xa10 [ 52.431931] ? rcu_read_lock_held+0x9c/0xb0 [ 52.436274] ? rcu_read_lock_held_common+0x170/0x170 [ 52.441412] __ip_finish_output+0x401/0xa80 [ 52.445757] ? __ip_finish_output+0x401/0xa80 [ 52.450282] ip_finish_output+0x27/0x170 [ 52.454373] ip_output+0x1c6/0x560 [ 52.457925] ? ip_mc_output+0xd10/0xd10 [ 52.458875] dccp_close: ABORT with 24 bytes unread [ 52.461910] ? __ip_finish_output+0xa80/0xa80 [ 52.461919] ? rcu_read_lock_held_common+0x170/0x170 [ 52.461932] ? rcu_read_lock_held+0x9c/0xb0 [ 52.461952] ip_local_out+0x7e/0x130 [ 52.461970] __ip_queue_xmit+0x700/0x1de0 [ 52.461979] ? __skb_checksum+0x7c0/0x7c0 [ 52.461986] ? skb_send_sock_locked+0x750/0x750 [ 52.480909] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 52.480937] ? reqsk_fastopen_remove+0x560/0x560 [ 52.515708] ? dccp_insert_options+0x1e2/0xb20 [ 52.520291] ip_queue_xmit+0x45/0x70 [ 52.524004] dccp_transmit_skb+0xb76/0x12a0 [ 52.528309] ? skb_unlink+0x117/0x1a0 [ 52.532126] dccp_xmit_packet+0x1a0/0x580 [ 52.536353] dccp_write_xmit+0x128/0x180 [ 52.540404] dccp_sendmsg+0x691/0xdb0 [ 52.544210] ? aa_sk_perm+0x182/0x740 [ 52.548001] ? dccp_disconnect+0xb00/0xb00 [ 52.552224] ? aa_af_perm+0x240/0x240 [ 52.556013] ? rw_copy_check_uvector+0x66/0x3b0 [ 52.560673] ? __kasan_check_write+0x14/0x20 [ 52.565085] inet_sendmsg+0xbd/0xe0 [ 52.568697] ? inet_send_prepare+0x3a0/0x3a0 [ 52.573103] sock_sendmsg+0xdf/0x110 [ 52.576806] ____sys_sendmsg+0x68d/0xae0 [ 52.580862] ? copy_msghdr_from_user+0xa3/0xf0 [ 52.585431] ? kernel_sendmsg+0x30/0x30 [ 52.589388] ? find_held_lock+0x36/0x1d0 [ 52.593445] ? __fget_files+0x28b/0x410 [ 52.597414] ___sys_sendmsg+0xe4/0x160 [ 52.601288] ? sendmsg_copy_msghdr+0x30/0x30 [ 52.605699] ? rcu_read_lock_held_common+0x170/0x170 [ 52.610800] ? __fget_files+0x2a5/0x410 [ 52.614781] ? __x64_sys_dup2+0x2e0/0x2e0 [ 52.618933] ? __fget_light+0x1b3/0x230 [ 52.622896] ? __fdget+0xe/0x10 [ 52.626170] __sys_sendmsg+0xd9/0x180 [ 52.629970] ? __sys_sendmsg_sock+0xa0/0xa0 [ 52.634301] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 52.639563] ? __sched_text_start+0x8/0x8 [ 52.643716] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 52.649077] __x64_sys_sendmsg+0x73/0xb0 [ 52.653141] do_syscall_64+0xd0/0x630 [ 52.656938] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 52.662225] RIP: 0033:0x452f89 [ 52.665407] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 52.684305] RSP: 002b:00007fa3f5ca3c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 52.692005] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 52.699265] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 52.706520] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 52.713777] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 52.721155] R13: 00000000ffffffff R14: 00007fa3f5ca46d4 R15: 0000000000000002 [ 52.728636] CPU: 1 PID: 4295 Comm: syz-executor2 Not tainted 5.7.0-rc1-syzkaller #0 [ 52.736583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.745947] Call Trace: [ 52.748535] [ 52.750709] dump_stack+0x12f/0x187 [ 52.754356] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 52.757893] dccp_close: ABORT with 24 bytes unread [ 52.759564] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 52.759572] ? dccp_parse_options+0x333/0x1000 [ 52.759600] dccp_deliver_input_to_ccids+0xcc/0x220 [ 52.759615] dccp_rcv_established+0x49/0x70 [ 52.759626] dccp_v4_do_rcv+0xf4/0x160 [ 52.759643] __sk_receive_skb+0x2b6/0x9e0 [ 52.791373] ? sk_free+0x60/0x60 [ 52.794752] ? dccp_invalid_packet+0x3ec/0x750 [ 52.799360] dccp_v4_rcv+0xc62/0x1da3 [ 52.803204] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 52.807987] ip_local_deliver_finish+0x1ee/0x2e0 [ 52.812758] ip_local_deliver+0x306/0x450 [ 52.816921] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 52.822033] ? lock_downgrade+0x960/0x960 [ 52.826215] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 52.831172] ip_rcv_finish+0xb0/0x170 [ 52.834986] ip_rcv+0xcb/0x2f0 [ 52.838187] ? ip_local_deliver+0x450/0x450 [ 52.840172] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 52.842602] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 52.842623] ? ip_local_deliver+0x450/0x450 [ 52.842638] __netif_receive_skb_one_core+0x132/0x190 [ 52.842651] ? __netif_receive_skb_core+0x2900/0x2900 [ 52.842660] ? lock_release+0x960/0x960 [ 52.842672] ? process_backlog+0x3fe/0x700 [ 52.842679] ? net_rx_action+0x42d/0xde0 [ 52.842698] __netif_receive_skb+0x1f/0x1b0 [ 52.896924] process_backlog+0x1f1/0x700 [ 52.900968] ? __do_softirq+0x248/0x9a6 [ 52.904929] ? lockdep_hardirqs_on+0x19e/0x620 [ 52.909675] net_rx_action+0x42d/0xde0 [ 52.913566] ? __kasan_check_read+0x11/0x20 [ 52.917900] ? napi_busy_loop+0x6e0/0x6e0 [ 52.922037] ? rcu_is_watching+0x31/0x80 [ 52.926096] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 52.930926] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 52.936186] ? __do_softirq+0x1d9/0x9a6 [ 52.940143] ? ip_finish_output2+0x709/0x22a0 [ 52.944626] ? trace_hardirqs_on+0x28/0x180 [ 52.948939] __do_softirq+0x248/0x9a6 [ 52.952737] ? ip_finish_output2+0x709/0x22a0 [ 52.957221] do_softirq_own_stack+0x2a/0x40 [ 52.961527] [ 52.963821] do_softirq.part.17+0x11a/0x150 [ 52.968152] __local_bh_enable_ip+0x1ee/0x230 [ 52.972691] ip_finish_output2+0x72d/0x22a0 [ 52.977042] ? ip_frag_next+0xa10/0xa10 [ 52.981010] ? rcu_read_lock_held+0x9c/0xb0 [ 52.985322] ? rcu_read_lock_held_common+0x170/0x170 [ 52.990435] __ip_finish_output+0x401/0xa80 [ 52.994741] ? __ip_finish_output+0x401/0xa80 [ 52.999227] ip_finish_output+0x27/0x170 [ 53.003276] ip_output+0x1c6/0x560 [ 53.006805] ? ip_mc_output+0xd10/0xd10 [ 53.010793] ? __ip_finish_output+0xa80/0xa80 [ 53.015285] ? rcu_read_lock_held_common+0x170/0x170 [ 53.020374] ? rcu_read_lock_held+0x9c/0xb0 [ 53.024698] ip_local_out+0x7e/0x130 [ 53.028405] __ip_queue_xmit+0x700/0x1de0 [ 53.032539] ? __skb_checksum+0x7c0/0x7c0 [ 53.036670] ? skb_send_sock_locked+0x750/0x750 [ 53.041325] ? reqsk_fastopen_remove+0x560/0x560 [ 53.046062] ? dccp_insert_options+0x1e2/0xb20 [ 53.051084] ip_queue_xmit+0x45/0x70 [ 53.054797] dccp_transmit_skb+0xb76/0x12a0 [ 53.059102] ? skb_unlink+0x117/0x1a0 [ 53.062899] dccp_xmit_packet+0x1a0/0x580 [ 53.067175] dccp_write_xmit+0x128/0x180 [ 53.071243] dccp_sendmsg+0x691/0xdb0 [ 53.075050] ? aa_sk_perm+0x182/0x740 [ 53.078864] ? dccp_disconnect+0xb00/0xb00 [ 53.083094] ? aa_af_perm+0x240/0x240 [ 53.086886] ? ___might_sleep+0x13e/0x2b0 [ 53.091046] inet_sendmsg+0xbd/0xe0 [ 53.094674] ? inet_send_prepare+0x3a0/0x3a0 [ 53.099256] sock_sendmsg+0xdf/0x110 [ 53.103047] __sys_sendto+0x206/0x320 [ 53.106859] ? __ia32_sys_getpeername+0xb0/0xb0 [ 53.111691] ? __kasan_check_write+0x14/0x20 [ 53.116105] ? fput_many+0x1b/0x130 [ 53.119725] ? fput+0xe/0x10 [ 53.122753] ? __sys_setsockopt+0x3a2/0x480 [ 53.127087] ? sock_create_kern+0x20/0x20 [ 53.131276] ? rcu_is_watching+0x31/0x80 [ 53.135351] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 53.140283] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 53.145557] ? fd_install+0x47/0x60 [ 53.149180] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 53.153924] ? do_syscall_64+0x21/0x630 [ 53.157894] __x64_sys_sendto+0xdc/0x1a0 [ 53.162304] do_syscall_64+0xd0/0x630 [ 53.166098] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 53.171273] RIP: 0033:0x452f89 [ 53.174454] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.193341] RSP: 002b:00007f8e0ee6fc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002c [ 53.201118] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452f89 [ 53.208373] RDX: 00000000000000b9 RSI: 00000000206c2f47 RDI: 0000000000000005 [ 53.215712] RBP: 0000000000000498 R08: 0000000020c69ff0 R09: 0000000000000010 [ 53.222969] R10: 0000000020000000 R11: 0000000000000212 R12: 00000000006f4ee0 [ 53.230225] R13: 00000000ffffffff R14: 00007f8e0ee706d4 R15: 0000000000000000 [ 53.237515] CPU: 0 PID: 4321 Comm: syz-executor1 Not tainted 5.7.0-rc1-syzkaller #0 [ 53.245319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.254677] Call Trace: [ 53.257272] [ 53.259432] dump_stack+0x12f/0x187 [ 53.263081] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 53.268287] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 53.273048] ? dccp_parse_options+0x333/0x1000 [ 53.277660] dccp_deliver_input_to_ccids+0xcc/0x220 [ 53.282692] dccp_rcv_established+0x49/0x70 [ 53.287021] dccp_v4_do_rcv+0xf4/0x160 [ 53.291062] __sk_receive_skb+0x2b6/0x9e0 [ 53.295239] ? sk_free+0x60/0x60 [ 53.298615] ? dccp_invalid_packet+0x3ec/0x750 2020/04/16 15:36:27 executed programs: 21 [ 53.303223] dccp_v4_rcv+0xc62/0x1da3 [ 53.307077] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 53.311857] ip_local_deliver_finish+0x1ee/0x2e0 [ 53.316635] ip_local_deliver+0x306/0x450 [ 53.320797] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 53.325729] ? lock_downgrade+0x960/0x960 [ 53.329887] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 53.334836] ip_rcv_finish+0xb0/0x170 [ 53.338645] ip_rcv+0xcb/0x2f0 [ 53.341875] ? ip_local_deliver+0x450/0x450 [ 53.346208] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 53.351587] ? ip_local_deliver+0x450/0x450 [ 53.355916] __netif_receive_skb_one_core+0x132/0x190 [ 53.361116] ? __netif_receive_skb_core+0x2900/0x2900 [ 53.366320] ? lock_release+0x960/0x960 [ 53.370316] ? process_backlog+0x3fe/0x700 [ 53.374557] ? net_rx_action+0x42d/0xde0 [ 53.378635] __netif_receive_skb+0x1f/0x1b0 [ 53.382975] process_backlog+0x1f1/0x700 [ 53.387042] ? __do_softirq+0x248/0x9a6 [ 53.391033] ? lockdep_hardirqs_on+0x19e/0x620 [ 53.395785] net_rx_action+0x42d/0xde0 [ 53.399696] ? __kasan_check_read+0x11/0x20 [ 53.404042] ? napi_busy_loop+0x6e0/0x6e0 [ 53.408200] ? rcu_is_watching+0x31/0x80 [ 53.412280] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 53.417134] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 53.422412] ? __do_softirq+0x1d9/0x9a6 [ 53.426524] ? ip_finish_output2+0x709/0x22a0 [ 53.431024] ? trace_hardirqs_on+0x28/0x180 [ 53.435364] __do_softirq+0x248/0x9a6 [ 53.439173] ? ip_finish_output2+0x709/0x22a0 [ 53.443684] do_softirq_own_stack+0x2a/0x40 [ 53.448011] [ 53.450249] do_softirq.part.17+0x11a/0x150 [ 53.454579] __local_bh_enable_ip+0x1ee/0x230 [ 53.459078] ip_finish_output2+0x72d/0x22a0 [ 53.463402] ? ip_frag_next+0xa10/0xa10 [ 53.467394] ? rcu_read_lock_held+0x9c/0xb0 [ 53.471718] ? rcu_read_lock_held_common+0x170/0x170 [ 53.476852] __ip_finish_output+0x401/0xa80 [ 53.481190] ? __ip_finish_output+0x401/0xa80 [ 53.485756] ip_finish_output+0x27/0x170 [ 53.489830] ip_output+0x1c6/0x560 [ 53.493387] ? ip_mc_output+0xd10/0xd10 [ 53.497375] ? __ip_finish_output+0xa80/0xa80 [ 53.501869] ? rcu_read_lock_held_common+0x170/0x170 [ 53.506983] ? rcu_read_lock_held+0x9c/0xb0 [ 53.511327] ip_local_out+0x7e/0x130 [ 53.515202] __ip_queue_xmit+0x700/0x1de0 [ 53.519391] ? __skb_checksum+0x7c0/0x7c0 [ 53.523547] ? skb_send_sock_locked+0x750/0x750 [ 53.528216] ? reqsk_fastopen_remove+0x560/0x560 [ 53.532966] ? dccp_insert_options+0x1e2/0xb20 [ 53.537823] ip_queue_xmit+0x45/0x70 [ 53.541670] dccp_transmit_skb+0xb76/0x12a0 [ 53.545983] ? skb_unlink+0x117/0x1a0 [ 53.549864] dccp_xmit_packet+0x1a0/0x580 [ 53.554115] dccp_write_xmit+0x128/0x180 [ 53.558169] dccp_sendmsg+0x691/0xdb0 [ 53.561955] ? aa_sk_perm+0x182/0x740 [ 53.565740] ? dccp_disconnect+0xb00/0xb00 [ 53.569974] ? aa_af_perm+0x240/0x240 [ 53.573771] ? rw_copy_check_uvector+0x66/0x3b0 [ 53.578428] ? __kasan_check_write+0x14/0x20 [ 53.582840] inet_sendmsg+0xbd/0xe0 [ 53.586699] ? inet_send_prepare+0x3a0/0x3a0 [ 53.591093] sock_sendmsg+0xdf/0x110 [ 53.594792] ____sys_sendmsg+0x68d/0xae0 [ 53.598846] ? copy_msghdr_from_user+0xa3/0xf0 [ 53.603415] ? kernel_sendmsg+0x30/0x30 [ 53.607420] ? find_held_lock+0x36/0x1d0 [ 53.611535] ? __fget_files+0x28b/0x410 [ 53.615545] ___sys_sendmsg+0xe4/0x160 [ 53.619441] ? sendmsg_copy_msghdr+0x30/0x30 [ 53.623833] ? rcu_read_lock_held_common+0x170/0x170 [ 53.628926] ? __fget_files+0x2a5/0x410 [ 53.632901] ? __x64_sys_dup2+0x2e0/0x2e0 [ 53.637054] ? __fget_light+0x1b3/0x230 [ 53.641013] ? __fdget+0xe/0x10 [ 53.644285] __sys_sendmsg+0xd9/0x180 [ 53.648065] ? __sys_sendmsg_sock+0xa0/0xa0 [ 53.652379] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 53.657643] ? __sched_text_start+0x8/0x8 [ 53.661835] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 53.667187] __x64_sys_sendmsg+0x73/0xb0 [ 53.671230] do_syscall_64+0xd0/0x630 [ 53.675019] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 53.680210] RIP: 0033:0x452f89 [ 53.683382] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.702278] RSP: 002b:00007f03a9c45c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 53.709967] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 53.717215] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 53.724476] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 53.732465] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 53.739754] R13: 00000000ffffffff R14: 00007f03a9c466d4 R15: 0000000000000002 [ 53.840384] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 53.853846] CPU: 1 PID: 4379 Comm: syz-executor3 Not tainted 5.7.0-rc1-syzkaller #0 [ 53.861653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.871025] Call Trace: [ 53.873610] [ 53.875776] dump_stack+0x12f/0x187 [ 53.879439] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 53.884677] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 53.889585] ? dccp_parse_options+0x333/0x1000 [ 53.891922] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 53.894211] dccp_deliver_input_to_ccids+0xcc/0x220 [ 53.894227] dccp_rcv_established+0x49/0x70 [ 53.894240] dccp_v4_do_rcv+0xf4/0x160 [ 53.894258] __sk_receive_skb+0x2b6/0x9e0 [ 53.894278] ? sk_free+0x60/0x60 [ 53.928592] ? dccp_invalid_packet+0x3ec/0x750 [ 53.933183] dccp_v4_rcv+0xc62/0x1da3 [ 53.937012] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 53.941771] ip_local_deliver_finish+0x1ee/0x2e0 [ 53.946561] ip_local_deliver+0x306/0x450 [ 53.950723] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 53.955648] ? lock_downgrade+0x960/0x960 [ 53.959796] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 53.964855] ip_rcv_finish+0xb0/0x170 [ 53.968651] ip_rcv+0xcb/0x2f0 [ 53.972193] ? ip_local_deliver+0x450/0x450 [ 53.976514] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 53.981877] ? ip_local_deliver+0x450/0x450 [ 53.986209] __netif_receive_skb_one_core+0x132/0x190 [ 53.991407] ? __netif_receive_skb_core+0x2900/0x2900 [ 53.996775] ? lock_release+0x960/0x960 [ 54.000746] ? process_backlog+0x3fe/0x700 [ 54.004969] ? net_rx_action+0x42d/0xde0 [ 54.009040] __netif_receive_skb+0x1f/0x1b0 [ 54.013354] process_backlog+0x1f1/0x700 [ 54.017409] ? __do_softirq+0x248/0x9a6 [ 54.021370] ? lockdep_hardirqs_on+0x19e/0x620 [ 54.025974] net_rx_action+0x42d/0xde0 [ 54.029949] ? __kasan_check_read+0x11/0x20 [ 54.034282] ? napi_busy_loop+0x6e0/0x6e0 [ 54.038417] ? rcu_is_watching+0x31/0x80 [ 54.042646] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 54.047479] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 54.052746] ? __do_softirq+0x1d9/0x9a6 [ 54.056707] ? ip_finish_output2+0x709/0x22a0 [ 54.061202] ? trace_hardirqs_on+0x28/0x180 [ 54.065518] __do_softirq+0x248/0x9a6 [ 54.069316] ? ip_finish_output2+0x709/0x22a0 [ 54.073816] do_softirq_own_stack+0x2a/0x40 [ 54.078119] [ 54.080343] do_softirq.part.17+0x11a/0x150 [ 54.084652] __local_bh_enable_ip+0x1ee/0x230 [ 54.089135] ip_finish_output2+0x72d/0x22a0 [ 54.093458] ? ip_frag_next+0xa10/0xa10 [ 54.097439] ? rcu_read_lock_held+0x9c/0xb0 [ 54.101748] ? rcu_read_lock_held_common+0x170/0x170 [ 54.106855] __ip_finish_output+0x401/0xa80 [ 54.111160] ? __ip_finish_output+0x401/0xa80 [ 54.115667] ip_finish_output+0x27/0x170 [ 54.119723] ip_output+0x1c6/0x560 [ 54.123253] ? ip_mc_output+0xd10/0xd10 [ 54.127231] ? __ip_finish_output+0xa80/0xa80 [ 54.131882] ? rcu_read_lock_held_common+0x170/0x170 [ 54.136990] ? rcu_read_lock_held+0x9c/0xb0 [ 54.141308] ip_local_out+0x7e/0x130 [ 54.145016] __ip_queue_xmit+0x700/0x1de0 [ 54.149385] ? __skb_checksum+0x7c0/0x7c0 [ 54.153875] ? skb_send_sock_locked+0x750/0x750 [ 54.158542] ? reqsk_fastopen_remove+0x560/0x560 [ 54.163285] ? dccp_insert_options+0x1e2/0xb20 [ 54.167866] ip_queue_xmit+0x45/0x70 [ 54.171625] dccp_transmit_skb+0xb76/0x12a0 [ 54.175936] ? skb_unlink+0x117/0x1a0 [ 54.179906] dccp_xmit_packet+0x1a0/0x580 [ 54.184064] dccp_write_xmit+0x128/0x180 [ 54.188129] dccp_sendmsg+0x691/0xdb0 [ 54.191920] ? aa_sk_perm+0x182/0x740 [ 54.195715] ? dccp_disconnect+0xb00/0xb00 [ 54.199938] ? aa_af_perm+0x240/0x240 [ 54.203727] ? rw_copy_check_uvector+0x66/0x3b0 [ 54.208378] ? __kasan_check_write+0x14/0x20 [ 54.212791] inet_sendmsg+0xbd/0xe0 [ 54.216405] ? inet_send_prepare+0x3a0/0x3a0 [ 54.220800] sock_sendmsg+0xdf/0x110 [ 54.224590] ____sys_sendmsg+0x68d/0xae0 [ 54.228729] ? copy_msghdr_from_user+0xa3/0xf0 [ 54.233299] ? kernel_sendmsg+0x30/0x30 [ 54.237258] ? find_held_lock+0x36/0x1d0 [ 54.241311] ? __fget_files+0x28b/0x410 [ 54.245290] ___sys_sendmsg+0xe4/0x160 [ 54.249167] ? sendmsg_copy_msghdr+0x30/0x30 [ 54.253571] ? rcu_read_lock_held_common+0x170/0x170 [ 54.258672] ? __fget_files+0x2a5/0x410 [ 54.262656] ? __x64_sys_dup2+0x2e0/0x2e0 [ 54.266806] ? __fget_light+0x1b3/0x230 [ 54.270768] ? __fdget+0xe/0x10 [ 54.274040] __sys_sendmsg+0xd9/0x180 [ 54.277826] ? __sys_sendmsg_sock+0xa0/0xa0 [ 54.282147] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 54.287408] ? __sched_text_start+0x8/0x8 [ 54.291581] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 54.296938] __x64_sys_sendmsg+0x73/0xb0 [ 54.300988] do_syscall_64+0xd0/0x630 [ 54.304796] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 54.309969] RIP: 0033:0x452f89 [ 54.313157] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.332589] RSP: 002b:00007fa3f5ca3c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 54.340404] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 54.350733] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 54.357996] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 54.365268] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 54.372547] R13: 00000000ffffffff R14: 00007fa3f5ca46d4 R15: 0000000000000002 [ 54.379859] CPU: 0 PID: 4391 Comm: syz-executor4 Not tainted 5.7.0-rc1-syzkaller #0 [ 54.387757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.397131] Call Trace: [ 54.399730] [ 54.401890] dump_stack+0x12f/0x187 [ 54.405540] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 54.410865] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 54.415750] ? dccp_parse_options+0x333/0x1000 [ 54.420516] dccp_deliver_input_to_ccids+0xcc/0x220 [ 54.425551] dccp_rcv_established+0x49/0x70 [ 54.429937] dccp_v4_do_rcv+0xf4/0x160 [ 54.433850] __sk_receive_skb+0x2b6/0x9e0 [ 54.438029] ? sk_free+0x60/0x60 [ 54.441420] ? dccp_invalid_packet+0x3ec/0x750 [ 54.446031] dccp_v4_rcv+0xc62/0x1da3 [ 54.450057] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 54.455008] ip_local_deliver_finish+0x1ee/0x2e0 [ 54.459802] ip_local_deliver+0x306/0x450 [ 54.464232] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 54.469175] ? lock_downgrade+0x960/0x960 [ 54.473359] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 54.478322] ip_rcv_finish+0xb0/0x170 [ 54.482140] ip_rcv+0xcb/0x2f0 [ 54.485350] ? ip_local_deliver+0x450/0x450 [ 54.489703] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 54.495095] ? ip_local_deliver+0x450/0x450 [ 54.499448] __netif_receive_skb_one_core+0x132/0x190 [ 54.504663] ? __netif_receive_skb_core+0x2900/0x2900 [ 54.509864] ? lock_release+0x960/0x960 [ 54.513860] ? process_backlog+0x3fe/0x700 [ 54.518115] ? net_rx_action+0x42d/0xde0 [ 54.522294] __netif_receive_skb+0x1f/0x1b0 [ 54.526755] process_backlog+0x1f1/0x700 [ 54.531081] ? __do_softirq+0x248/0x9a6 [ 54.535072] ? lockdep_hardirqs_on+0x19e/0x620 [ 54.539775] net_rx_action+0x42d/0xde0 [ 54.543684] ? __kasan_check_read+0x11/0x20 [ 54.548037] ? napi_busy_loop+0x6e0/0x6e0 [ 54.552191] ? rcu_is_watching+0x31/0x80 [ 54.556274] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 54.561333] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 54.566746] ? __do_softirq+0x1d9/0x9a6 [ 54.570738] ? ip_finish_output2+0x709/0x22a0 [ 54.575242] ? trace_hardirqs_on+0x28/0x180 [ 54.579633] __do_softirq+0x248/0x9a6 [ 54.583567] ? ip_finish_output2+0x709/0x22a0 [ 54.588099] do_softirq_own_stack+0x2a/0x40 [ 54.592467] [ 54.594818] do_softirq.part.17+0x11a/0x150 [ 54.599153] __local_bh_enable_ip+0x1ee/0x230 [ 54.603672] ip_finish_output2+0x72d/0x22a0 [ 54.608034] ? ip_frag_next+0xa10/0xa10 [ 54.612071] ? rcu_read_lock_held+0x9c/0xb0 [ 54.616432] ? rcu_read_lock_held_common+0x170/0x170 [ 54.621692] __ip_finish_output+0x401/0xa80 [ 54.626038] ? __ip_finish_output+0x401/0xa80 [ 54.630557] ip_finish_output+0x27/0x170 [ 54.634644] ip_output+0x1c6/0x560 [ 54.638224] ? ip_mc_output+0xd10/0xd10 [ 54.642219] ? __ip_finish_output+0xa80/0xa80 [ 54.646719] ? rcu_read_lock_held_common+0x170/0x170 [ 54.651846] ? rcu_read_lock_held+0x9c/0xb0 [ 54.657420] ip_local_out+0x7e/0x130 [ 54.661153] __ip_queue_xmit+0x700/0x1de0 [ 54.665314] ? __skb_checksum+0x7c0/0x7c0 [ 54.668546] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 54.669638] ? skb_send_sock_locked+0x750/0x750 [ 54.669645] ? reqsk_fastopen_remove+0x560/0x560 [ 54.669653] ? dccp_insert_options+0x1e2/0xb20 [ 54.669680] ip_queue_xmit+0x45/0x70 [ 54.669693] dccp_transmit_skb+0xb76/0x12a0 [ 54.705937] ? skb_unlink+0x117/0x1a0 [ 54.709760] dccp_xmit_packet+0x1a0/0x580 [ 54.713998] dccp_write_xmit+0x128/0x180 [ 54.718052] dccp_sendmsg+0x691/0xdb0 [ 54.721843] ? aa_sk_perm+0x182/0x740 [ 54.725635] ? dccp_disconnect+0xb00/0xb00 [ 54.730020] ? aa_af_perm+0x240/0x240 [ 54.733817] ? rw_copy_check_uvector+0x66/0x3b0 [ 54.738474] ? __kasan_check_write+0x14/0x20 [ 54.742894] inet_sendmsg+0xbd/0xe0 [ 54.746519] ? inet_send_prepare+0x3a0/0x3a0 [ 54.750950] sock_sendmsg+0xdf/0x110 [ 54.754658] ____sys_sendmsg+0x68d/0xae0 [ 54.758710] ? copy_msghdr_from_user+0xa3/0xf0 [ 54.763288] ? kernel_sendmsg+0x30/0x30 [ 54.767248] ? find_held_lock+0x36/0x1d0 [ 54.771315] ? __fget_files+0x28b/0x410 [ 54.775378] ___sys_sendmsg+0xe4/0x160 [ 54.779255] ? sendmsg_copy_msghdr+0x30/0x30 [ 54.783656] ? rcu_read_lock_held_common+0x170/0x170 [ 54.788880] ? __fget_files+0x2a5/0x410 [ 54.792879] ? __x64_sys_dup2+0x2e0/0x2e0 [ 54.797680] ? __fget_light+0x1b3/0x230 [ 54.801659] ? __fdget+0xe/0x10 [ 54.804968] __sys_sendmsg+0xd9/0x180 [ 54.808760] ? __sys_sendmsg_sock+0xa0/0xa0 [ 54.813088] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 54.818371] ? __sched_text_start+0x8/0x8 [ 54.822539] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 54.827903] __x64_sys_sendmsg+0x73/0xb0 [ 54.832359] do_syscall_64+0xd0/0x630 [ 54.836176] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 54.842061] RIP: 0033:0x452f89 [ 54.845353] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.864261] RSP: 002b:00007f99a4c36c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 54.871968] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 54.879225] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 54.886611] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 54.893876] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 54.901161] R13: 00000000ffffffff R14: 00007f99a4c376d4 R15: 0000000000000002 [ 54.908560] CPU: 1 PID: 4433 Comm: syz-executor3 Not tainted 5.7.0-rc1-syzkaller #0 [ 54.916370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.925731] Call Trace: [ 54.928327] [ 54.930491] dump_stack+0x12f/0x187 [ 54.934149] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 54.939460] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 54.944226] ? dccp_parse_options+0x333/0x1000 [ 54.948845] dccp_deliver_input_to_ccids+0xcc/0x220 [ 54.953963] dccp_rcv_established+0x49/0x70 [ 54.958298] dccp_v4_do_rcv+0xf4/0x160 [ 54.962183] __sk_receive_skb+0x2b6/0x9e0 [ 54.966338] ? sk_free+0x60/0x60 [ 54.969715] ? dccp_invalid_packet+0x3ec/0x750 [ 54.974333] dccp_v4_rcv+0xc62/0x1da3 [ 54.978199] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 54.982991] ip_local_deliver_finish+0x1ee/0x2e0 [ 54.987763] ip_local_deliver+0x306/0x450 [ 54.991936] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 54.996870] ? lock_downgrade+0x960/0x960 [ 54.998012] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 55.001034] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 55.001064] ip_rcv_finish+0xb0/0x170 [ 55.001078] ip_rcv+0xcb/0x2f0 [ 55.001092] ? ip_local_deliver+0x450/0x450 [ 55.001111] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 55.001129] ? ip_local_deliver+0x450/0x450 [ 55.040653] __netif_receive_skb_one_core+0x132/0x190 [ 55.045834] ? __netif_receive_skb_core+0x2900/0x2900 [ 55.051116] ? lock_release+0x960/0x960 [ 55.055081] ? process_backlog+0x3fe/0x700 [ 55.059315] ? net_rx_action+0x42d/0xde0 [ 55.063371] __netif_receive_skb+0x1f/0x1b0 [ 55.067688] process_backlog+0x1f1/0x700 [ 55.071746] ? __do_softirq+0x248/0x9a6 [ 55.075709] ? lockdep_hardirqs_on+0x19e/0x620 [ 55.080289] net_rx_action+0x42d/0xde0 [ 55.084171] ? __kasan_check_read+0x11/0x20 [ 55.088500] ? napi_busy_loop+0x6e0/0x6e0 [ 55.092634] ? rcu_is_watching+0x31/0x80 [ 55.096690] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 55.101674] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 55.106944] ? __do_softirq+0x1d9/0x9a6 [ 55.110916] ? ip_finish_output2+0x709/0x22a0 [ 55.115452] ? trace_hardirqs_on+0x28/0x180 [ 55.119781] __do_softirq+0x248/0x9a6 [ 55.123586] ? ip_finish_output2+0x709/0x22a0 [ 55.128077] do_softirq_own_stack+0x2a/0x40 [ 55.132403] [ 55.134629] do_softirq.part.17+0x11a/0x150 [ 55.138941] __local_bh_enable_ip+0x1ee/0x230 [ 55.143426] ip_finish_output2+0x72d/0x22a0 [ 55.147754] ? ip_frag_next+0xa10/0xa10 [ 55.151720] ? rcu_read_lock_held+0x9c/0xb0 [ 55.156046] ? rcu_read_lock_held_common+0x170/0x170 [ 55.161147] __ip_finish_output+0x401/0xa80 [ 55.165473] ? __ip_finish_output+0x401/0xa80 [ 55.169978] ip_finish_output+0x27/0x170 [ 55.174034] ip_output+0x1c6/0x560 [ 55.177569] ? ip_mc_output+0xd10/0xd10 [ 55.181558] ? __ip_finish_output+0xa80/0xa80 [ 55.186036] ? rcu_read_lock_held_common+0x170/0x170 [ 55.191125] ? rcu_read_lock_held+0x9c/0xb0 [ 55.195455] ip_local_out+0x7e/0x130 [ 55.199165] __ip_queue_xmit+0x700/0x1de0 [ 55.203298] ? __skb_checksum+0x7c0/0x7c0 [ 55.207429] ? skb_send_sock_locked+0x750/0x750 [ 55.212100] ? reqsk_fastopen_remove+0x560/0x560 [ 55.216934] ? dccp_insert_options+0x1e2/0xb20 [ 55.221702] ip_queue_xmit+0x45/0x70 [ 55.225426] dccp_transmit_skb+0xb76/0x12a0 [ 55.229742] ? skb_unlink+0x117/0x1a0 [ 55.233632] dccp_xmit_packet+0x1a0/0x580 [ 55.237791] dccp_write_xmit+0x128/0x180 [ 55.241864] dccp_sendmsg+0x691/0xdb0 [ 55.245678] ? aa_sk_perm+0x182/0x740 [ 55.249490] ? dccp_disconnect+0xb00/0xb00 [ 55.253730] ? aa_af_perm+0x240/0x240 [ 55.257711] ? rw_copy_check_uvector+0x66/0x3b0 [ 55.262378] ? __kasan_check_write+0x14/0x20 [ 55.266806] inet_sendmsg+0xbd/0xe0 [ 55.270428] ? inet_send_prepare+0x3a0/0x3a0 [ 55.274832] sock_sendmsg+0xdf/0x110 [ 55.278542] ____sys_sendmsg+0x68d/0xae0 [ 55.282606] ? copy_msghdr_from_user+0xa3/0xf0 [ 55.287175] ? kernel_sendmsg+0x30/0x30 [ 55.291261] ? find_held_lock+0x36/0x1d0 [ 55.295322] ? __fget_files+0x28b/0x410 [ 55.299294] ___sys_sendmsg+0xe4/0x160 [ 55.303173] ? sendmsg_copy_msghdr+0x30/0x30 [ 55.307575] ? rcu_read_lock_held_common+0x170/0x170 [ 55.312675] ? __fget_files+0x2a5/0x410 [ 55.316651] ? __x64_sys_dup2+0x2e0/0x2e0 [ 55.320804] ? __fget_light+0x1b3/0x230 [ 55.324807] ? __fdget+0xe/0x10 [ 55.328089] __sys_sendmsg+0xd9/0x180 [ 55.331876] ? __sys_sendmsg_sock+0xa0/0xa0 [ 55.336202] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 55.341467] ? __sched_text_start+0x8/0x8 [ 55.345627] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 55.351009] __x64_sys_sendmsg+0x73/0xb0 [ 55.355066] do_syscall_64+0xd0/0x630 [ 55.358860] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 55.364034] RIP: 0033:0x452f89 [ 55.367226] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 55.386373] RSP: 002b:00007fa3f5ca3c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 55.394062] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 55.401401] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 55.408656] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 55.416024] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 55.423277] R13: 00000000ffffffff R14: 00007fa3f5ca46d4 R15: 0000000000000002 [ 55.430580] CPU: 0 PID: 4445 Comm: syz-executor4 Not tainted 5.7.0-rc1-syzkaller #0 [ 55.438385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.448116] Call Trace: [ 55.450700] [ 55.452855] dump_stack+0x12f/0x187 [ 55.458555] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 55.463781] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 55.468554] ? dccp_parse_options+0x333/0x1000 [ 55.473161] dccp_deliver_input_to_ccids+0xcc/0x220 [ 55.478196] dccp_rcv_established+0x49/0x70 [ 55.482559] dccp_v4_do_rcv+0xf4/0x160 [ 55.486738] __sk_receive_skb+0x2b6/0x9e0 [ 55.490925] ? sk_free+0x60/0x60 [ 55.494307] ? dccp_invalid_packet+0x3ec/0x750 [ 55.498912] dccp_v4_rcv+0xc62/0x1da3 [ 55.502761] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 55.507543] ip_local_deliver_finish+0x1ee/0x2e0 [ 55.512502] ip_local_deliver+0x306/0x450 [ 55.516693] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 55.521626] ? lock_downgrade+0x960/0x960 [ 55.525794] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 55.530890] ip_rcv_finish+0xb0/0x170 [ 55.534703] ip_rcv+0xcb/0x2f0 [ 55.537906] ? ip_local_deliver+0x450/0x450 [ 55.542242] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 55.547817] ? ip_local_deliver+0x450/0x450 [ 55.552152] __netif_receive_skb_one_core+0x132/0x190 [ 55.557360] ? __netif_receive_skb_core+0x2900/0x2900 [ 55.562566] ? lock_release+0x960/0x960 [ 55.566563] ? process_backlog+0x3fe/0x700 [ 55.570813] ? net_rx_action+0x42d/0xde0 [ 55.570872] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 55.574878] __netif_receive_skb+0x1f/0x1b0 [ 55.574895] process_backlog+0x1f1/0x700 [ 55.574902] ? __do_softirq+0x248/0x9a6 [ 55.574916] ? lockdep_hardirqs_on+0x19e/0x620 [ 55.574943] net_rx_action+0x42d/0xde0 [ 55.574957] ? __kasan_check_read+0x11/0x20 [ 55.613849] ? napi_busy_loop+0x6e0/0x6e0 [ 55.617978] ? rcu_is_watching+0x31/0x80 [ 55.622032] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 55.626883] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 55.632140] ? __do_softirq+0x1d9/0x9a6 [ 55.636097] ? ip_finish_output2+0x709/0x22a0 [ 55.640579] ? trace_hardirqs_on+0x28/0x180 [ 55.644891] __do_softirq+0x248/0x9a6 [ 55.648701] ? ip_finish_output2+0x709/0x22a0 [ 55.653183] do_softirq_own_stack+0x2a/0x40 [ 55.657489] [ 55.659710] do_softirq.part.17+0x11a/0x150 [ 55.664016] __local_bh_enable_ip+0x1ee/0x230 [ 55.668533] ip_finish_output2+0x72d/0x22a0 [ 55.672854] ? ip_frag_next+0xa10/0xa10 [ 55.676902] ? rcu_read_lock_held+0x9c/0xb0 [ 55.681338] ? rcu_read_lock_held_common+0x170/0x170 [ 55.686449] __ip_finish_output+0x401/0xa80 [ 55.690790] ? __ip_finish_output+0x401/0xa80 [ 55.695297] ip_finish_output+0x27/0x170 [ 55.699353] ip_output+0x1c6/0x560 [ 55.702888] ? ip_mc_output+0xd10/0xd10 [ 55.706858] ? __ip_finish_output+0xa80/0xa80 [ 55.711357] ? rcu_read_lock_held_common+0x170/0x170 [ 55.716457] ? rcu_read_lock_held+0x9c/0xb0 [ 55.720782] ip_local_out+0x7e/0x130 [ 55.724502] __ip_queue_xmit+0x700/0x1de0 [ 55.728651] ? __skb_checksum+0x7c0/0x7c0 [ 55.732817] ? skb_send_sock_locked+0x750/0x750 [ 55.737477] ? reqsk_fastopen_remove+0x560/0x560 [ 55.742232] ? dccp_insert_options+0x1e2/0xb20 [ 55.747597] ip_queue_xmit+0x45/0x70 [ 55.751300] dccp_transmit_skb+0xb76/0x12a0 [ 55.755606] ? skb_unlink+0x117/0x1a0 [ 55.759412] dccp_xmit_packet+0x1a0/0x580 [ 55.763553] dccp_write_xmit+0x128/0x180 [ 55.767603] dccp_sendmsg+0x691/0xdb0 [ 55.771391] ? aa_sk_perm+0x182/0x740 [ 55.775183] ? dccp_disconnect+0xb00/0xb00 [ 55.779411] ? aa_af_perm+0x240/0x240 [ 55.783213] ? rw_copy_check_uvector+0x66/0x3b0 [ 55.787863] ? __kasan_check_write+0x14/0x20 [ 55.792276] inet_sendmsg+0xbd/0xe0 [ 55.795900] ? inet_send_prepare+0x3a0/0x3a0 [ 55.800381] sock_sendmsg+0xdf/0x110 [ 55.804096] ____sys_sendmsg+0x68d/0xae0 [ 55.808148] ? copy_msghdr_from_user+0xa3/0xf0 [ 55.812717] ? kernel_sendmsg+0x30/0x30 [ 55.816675] ? find_held_lock+0x36/0x1d0 [ 55.820726] ? __fget_files+0x28b/0x410 [ 55.824783] ___sys_sendmsg+0xe4/0x160 [ 55.828660] ? sendmsg_copy_msghdr+0x30/0x30 [ 55.833057] ? rcu_read_lock_held_common+0x170/0x170 [ 55.838160] ? __fget_files+0x2a5/0x410 [ 55.842136] ? __x64_sys_dup2+0x2e0/0x2e0 [ 55.846267] ? release_sock+0x122/0x180 [ 55.850236] ? trace_hardirqs_on+0x28/0x180 [ 55.854538] ? inet_release+0x1c0/0x1c0 [ 55.858496] ? release_sock+0x122/0x180 [ 55.862478] ? __fget_light+0x1b3/0x230 [ 55.866575] ? __fdget+0xe/0x10 [ 55.869884] __sys_sendmsg+0xd9/0x180 [ 55.873676] ? __sys_sendmsg_sock+0xa0/0xa0 [ 55.878017] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 55.883299] ? __sys_listen+0x1e8/0x230 [ 55.887289] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 55.892662] __x64_sys_sendmsg+0x73/0xb0 [ 55.896729] do_syscall_64+0xd0/0x630 [ 55.900716] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 55.905890] RIP: 0033:0x452f89 [ 55.909073] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 55.927976] RSP: 002b:00007f99a4c36c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 55.935670] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 55.942923] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 55.950180] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 55.957431] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 55.964684] R13: 00000000ffffffff R14: 00007f99a4c376d4 R15: 0000000000000002 [ 55.971981] CPU: 1 PID: 4465 Comm: syz-executor1 Not tainted 5.7.0-rc1-syzkaller #0 [ 55.979787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.989155] Call Trace: [ 55.991819] [ 55.994098] dump_stack+0x12f/0x187 [ 55.997765] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 56.003076] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 56.007861] ? dccp_parse_options+0x333/0x1000 [ 56.012560] dccp_deliver_input_to_ccids+0xcc/0x220 [ 56.017599] dccp_rcv_established+0x49/0x70 [ 56.021928] dccp_v4_do_rcv+0xf4/0x160 [ 56.025841] __sk_receive_skb+0x2b6/0x9e0 [ 56.030103] ? sk_free+0x60/0x60 [ 56.033480] ? dccp_invalid_packet+0x3ec/0x750 [ 56.038083] dccp_v4_rcv+0xc62/0x1da3 [ 56.041933] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 56.046715] ip_local_deliver_finish+0x1ee/0x2e0 [ 56.051919] ip_local_deliver+0x306/0x450 [ 56.056086] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 56.061020] ? lock_downgrade+0x960/0x960 [ 56.065185] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 56.070145] ip_rcv_finish+0xb0/0x170 [ 56.073950] ip_rcv+0xcb/0x2f0 [ 56.077151] ? ip_local_deliver+0x450/0x450 [ 56.081490] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 56.086879] ? ip_local_deliver+0x450/0x450 [ 56.091210] __netif_receive_skb_one_core+0x132/0x190 [ 56.096505] ? __netif_receive_skb_core+0x2900/0x2900 [ 56.098212] net_ratelimit: 31 callbacks suppressed [ 56.098216] dccp_close: ABORT with 24 bytes unread [ 56.101695] ? lock_release+0x960/0x960 [ 56.101709] ? process_backlog+0x3fe/0x700 [ 56.101715] ? net_rx_action+0x42d/0xde0 [ 56.101735] __netif_receive_skb+0x1f/0x1b0 [ 56.101759] process_backlog+0x1f1/0x700 [ 56.101767] ? __do_softirq+0x248/0x9a6 [ 56.101778] ? lockdep_hardirqs_on+0x19e/0x620 [ 56.101804] net_rx_action+0x42d/0xde0 [ 56.101821] ? __kasan_check_read+0x11/0x20 [ 56.101842] ? napi_busy_loop+0x6e0/0x6e0 [ 56.143894] dccp_close: ABORT with 24 bytes unread [ 56.144745] ? rcu_is_watching+0x31/0x80 [ 56.144768] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 56.144780] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 56.144787] ? __do_softirq+0x1d9/0x9a6 [ 56.144795] ? ip_finish_output2+0x709/0x22a0 [ 56.144804] ? trace_hardirqs_on+0x28/0x180 [ 56.144820] __do_softirq+0x248/0x9a6 [ 56.155615] dccp_close: ABORT with 24 bytes unread [ 56.158215] ? ip_finish_output2+0x709/0x22a0 [ 56.158233] do_softirq_own_stack+0x2a/0x40 [ 56.158238] [ 56.158247] do_softirq.part.17+0x11a/0x150 [ 56.158257] __local_bh_enable_ip+0x1ee/0x230 [ 56.158270] ip_finish_output2+0x72d/0x22a0 [ 56.158296] ? ip_frag_next+0xa10/0xa10 [ 56.191790] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 56.193984] ? rcu_read_lock_held+0x9c/0xb0 [ 56.193994] ? rcu_read_lock_held_common+0x170/0x170 [ 56.194017] __ip_finish_output+0x401/0xa80 [ 56.249180] ? __ip_finish_output+0x401/0xa80 [ 56.253681] ip_finish_output+0x27/0x170 [ 56.257732] ip_output+0x1c6/0x560 [ 56.261270] ? ip_mc_output+0xd10/0xd10 [ 56.265236] ? __ip_finish_output+0xa80/0xa80 [ 56.269719] ? rcu_read_lock_held_common+0x170/0x170 [ 56.274821] ? rcu_read_lock_held+0x9c/0xb0 [ 56.279137] ip_local_out+0x7e/0x130 [ 56.282998] __ip_queue_xmit+0x700/0x1de0 [ 56.287144] ? __skb_checksum+0x7c0/0x7c0 [ 56.291282] ? skb_send_sock_locked+0x750/0x750 [ 56.295939] ? reqsk_fastopen_remove+0x560/0x560 [ 56.300721] ? dccp_insert_options+0x1e2/0xb20 [ 56.305680] ip_queue_xmit+0x45/0x70 [ 56.309395] dccp_transmit_skb+0xb76/0x12a0 [ 56.313857] ? skb_unlink+0x117/0x1a0 [ 56.317727] dccp_xmit_packet+0x1a0/0x580 [ 56.321899] dccp_write_xmit+0x128/0x180 [ 56.325973] dccp_sendmsg+0x691/0xdb0 [ 56.329769] ? aa_sk_perm+0x182/0x740 [ 56.333573] ? dccp_disconnect+0xb00/0xb00 [ 56.337800] ? aa_af_perm+0x240/0x240 [ 56.342200] ? rw_copy_check_uvector+0x66/0x3b0 [ 56.346863] ? __kasan_check_write+0x14/0x20 [ 56.351292] inet_sendmsg+0xbd/0xe0 [ 56.354909] ? inet_send_prepare+0x3a0/0x3a0 [ 56.359306] sock_sendmsg+0xdf/0x110 [ 56.363182] ____sys_sendmsg+0x68d/0xae0 [ 56.367257] ? copy_msghdr_from_user+0xa3/0xf0 [ 56.371833] ? kernel_sendmsg+0x30/0x30 [ 56.375800] ? find_held_lock+0x36/0x1d0 [ 56.379854] ? __fget_files+0x28b/0x410 [ 56.383826] ___sys_sendmsg+0xe4/0x160 [ 56.387706] ? sendmsg_copy_msghdr+0x30/0x30 [ 56.392104] ? rcu_read_lock_held_common+0x170/0x170 [ 56.397214] ? __fget_files+0x2a5/0x410 [ 56.401193] ? __x64_sys_dup2+0x2e0/0x2e0 [ 56.405351] ? __fget_light+0x1b3/0x230 [ 56.409325] ? __fdget+0xe/0x10 [ 56.412606] __sys_sendmsg+0xd9/0x180 [ 56.416393] ? __sys_sendmsg_sock+0xa0/0xa0 [ 56.420716] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 56.425994] ? __sched_text_start+0x8/0x8 [ 56.430148] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 56.435506] __x64_sys_sendmsg+0x73/0xb0 [ 56.439691] do_syscall_64+0xd0/0x630 [ 56.443491] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 56.448680] RIP: 0033:0x452f89 [ 56.451860] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 56.470747] RSP: 002b:00007f03a9c45c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 56.478468] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 56.485721] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 56.492974] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 56.500402] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 56.507665] R13: 00000000ffffffff R14: 00007f03a9c466d4 R15: 0000000000000002 [ 56.515058] CPU: 0 PID: 4489 Comm: syz-executor3 Not tainted 5.7.0-rc1-syzkaller #0 [ 56.523022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.533260] Call Trace: [ 56.535849] [ 56.538013] dump_stack+0x12f/0x187 [ 56.541663] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 56.546893] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 56.548994] dccp_close: ABORT with 24 bytes unread [ 56.551683] ? dccp_parse_options+0x333/0x1000 [ 56.551713] dccp_deliver_input_to_ccids+0xcc/0x220 [ 56.551729] dccp_rcv_established+0x49/0x70 [ 56.551743] dccp_v4_do_rcv+0xf4/0x160 [ 56.551761] __sk_receive_skb+0x2b6/0x9e0 [ 56.578649] ? sk_free+0x60/0x60 [ 56.582143] ? dccp_invalid_packet+0x3ec/0x750 [ 56.586759] dccp_v4_rcv+0xc62/0x1da3 [ 56.590865] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 56.595704] ip_local_deliver_finish+0x1ee/0x2e0 [ 56.600500] ip_local_deliver+0x306/0x450 [ 56.604667] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 56.609611] ? lock_downgrade+0x960/0x960 [ 56.613775] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 56.618733] ip_rcv_finish+0xb0/0x170 [ 56.622693] ip_rcv+0xcb/0x2f0 [ 56.625898] ? ip_local_deliver+0x450/0x450 [ 56.628391] dccp_close: ABORT with 24 bytes unread [ 56.630247] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 56.630270] ? ip_local_deliver+0x450/0x450 [ 56.630285] __netif_receive_skb_one_core+0x132/0x190 [ 56.630297] ? __netif_receive_skb_core+0x2900/0x2900 [ 56.630307] ? lock_release+0x960/0x960 [ 56.630319] ? process_backlog+0x3fe/0x700 [ 56.630326] ? net_rx_action+0x42d/0xde0 [ 56.630344] __netif_receive_skb+0x1f/0x1b0 [ 56.636142] dccp_close: ABORT with 24 bytes unread [ 56.640800] process_backlog+0x1f1/0x700 [ 56.640806] ? __do_softirq+0x248/0x9a6 [ 56.640818] ? lockdep_hardirqs_on+0x19e/0x620 [ 56.640844] net_rx_action+0x42d/0xde0 [ 56.640861] ? __kasan_check_read+0x11/0x20 [ 56.640887] ? napi_busy_loop+0x6e0/0x6e0 [ 56.640894] ? rcu_is_watching+0x31/0x80 [ 56.640914] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 56.640924] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 56.650352] dccp_close: ABORT with 24 bytes unread [ 56.650429] ? __do_softirq+0x1d9/0x9a6 [ 56.715700] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 56.716744] ? ip_finish_output2+0x709/0x22a0 [ 56.716756] ? trace_hardirqs_on+0x28/0x180 [ 56.716778] __do_softirq+0x248/0x9a6 [ 56.716807] ? ip_finish_output2+0x709/0x22a0 [ 56.716823] do_softirq_own_stack+0x2a/0x40 [ 56.716829] [ 56.762488] do_softirq.part.17+0x11a/0x150 [ 56.767060] __local_bh_enable_ip+0x1ee/0x230 [ 56.771561] ip_finish_output2+0x72d/0x22a0 [ 56.776524] ? ip_frag_next+0xa10/0xa10 [ 56.780492] ? rcu_read_lock_held+0x9c/0xb0 [ 56.784804] ? rcu_read_lock_held_common+0x170/0x170 [ 56.789922] __ip_finish_output+0x401/0xa80 [ 56.795274] ? __ip_finish_output+0x401/0xa80 [ 56.799789] ip_finish_output+0x27/0x170 [ 56.803841] ip_output+0x1c6/0x560 [ 56.807389] ? ip_mc_output+0xd10/0xd10 [ 56.811356] ? __ip_finish_output+0xa80/0xa80 [ 56.815922] ? rcu_read_lock_held_common+0x170/0x170 [ 56.821014] ? rcu_read_lock_held+0x9c/0xb0 [ 56.825332] ip_local_out+0x7e/0x130 [ 56.829040] __ip_queue_xmit+0x700/0x1de0 [ 56.833178] ? __skb_checksum+0x7c0/0x7c0 [ 56.837323] ? skb_send_sock_locked+0x750/0x750 [ 56.841973] ? reqsk_fastopen_remove+0x560/0x560 [ 56.846717] ? dccp_insert_options+0x1e2/0xb20 [ 56.851311] ip_queue_xmit+0x45/0x70 [ 56.855015] dccp_transmit_skb+0xb76/0x12a0 [ 56.859319] ? skb_unlink+0x117/0x1a0 [ 56.863117] dccp_xmit_packet+0x1a0/0x580 [ 56.867258] dccp_write_xmit+0x128/0x180 [ 56.871314] dccp_sendmsg+0x691/0xdb0 [ 56.875102] ? aa_sk_perm+0x182/0x740 [ 56.878894] ? dccp_disconnect+0xb00/0xb00 [ 56.883113] ? aa_af_perm+0x240/0x240 [ 56.886900] ? rw_copy_check_uvector+0x66/0x3b0 [ 56.891551] ? __kasan_check_write+0x14/0x20 [ 56.895964] inet_sendmsg+0xbd/0xe0 [ 56.899580] ? inet_send_prepare+0x3a0/0x3a0 [ 56.903971] sock_sendmsg+0xdf/0x110 [ 56.907700] ____sys_sendmsg+0x68d/0xae0 [ 56.911766] ? copy_msghdr_from_user+0xa3/0xf0 [ 56.916483] ? kernel_sendmsg+0x30/0x30 [ 56.920450] ? find_held_lock+0x36/0x1d0 [ 56.924506] ? __fget_files+0x28b/0x410 [ 56.928485] ___sys_sendmsg+0xe4/0x160 [ 56.932362] ? sendmsg_copy_msghdr+0x30/0x30 [ 56.936898] ? rcu_read_lock_held_common+0x170/0x170 [ 56.942014] ? __fget_files+0x2a5/0x410 [ 56.945991] ? __x64_sys_dup2+0x2e0/0x2e0 [ 56.950226] ? __fget_light+0x1b3/0x230 [ 56.954209] ? __fdget+0xe/0x10 [ 56.957516] __sys_sendmsg+0xd9/0x180 [ 56.961324] ? __sys_sendmsg_sock+0xa0/0xa0 [ 56.965648] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 56.970924] ? __sched_text_start+0x8/0x8 [ 56.975117] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 56.980499] __x64_sys_sendmsg+0x73/0xb0 [ 56.984866] do_syscall_64+0xd0/0x630 [ 56.988797] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 56.993996] RIP: 0033:0x452f89 [ 56.997181] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.016066] RSP: 002b:00007fa3f5ca3c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 57.023757] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 57.031010] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 57.038260] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 57.045528] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 57.052870] R13: 00000000ffffffff R14: 00007fa3f5ca46d4 R15: 0000000000000002 [ 57.060161] CPU: 1 PID: 4520 Comm: syz-executor4 Not tainted 5.7.0-rc1-syzkaller #0 [ 57.067972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.077336] Call Trace: [ 57.079931] [ 57.082088] dump_stack+0x12f/0x187 [ 57.085737] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 57.090942] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 57.091139] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 57.095690] ? dccp_parse_options+0x333/0x1000 [ 57.095717] dccp_deliver_input_to_ccids+0xcc/0x220 [ 57.095731] dccp_rcv_established+0x49/0x70 [ 57.122892] dccp_v4_do_rcv+0xf4/0x160 [ 57.126772] __sk_receive_skb+0x2b6/0x9e0 [ 57.130914] ? sk_free+0x60/0x60 [ 57.134271] ? dccp_invalid_packet+0x3ec/0x750 [ 57.138853] dccp_v4_rcv+0xc62/0x1da3 [ 57.142679] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 57.147429] ip_local_deliver_finish+0x1ee/0x2e0 [ 57.152176] ip_local_deliver+0x306/0x450 [ 57.156326] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 57.161287] ? lock_downgrade+0x960/0x960 [ 57.165450] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 57.170384] ip_rcv_finish+0xb0/0x170 [ 57.174179] ip_rcv+0xcb/0x2f0 [ 57.177368] ? ip_local_deliver+0x450/0x450 [ 57.181686] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 57.187045] ? ip_local_deliver+0x450/0x450 [ 57.191361] __netif_receive_skb_one_core+0x132/0x190 [ 57.196554] ? __netif_receive_skb_core+0x2900/0x2900 [ 57.201826] ? lock_release+0x960/0x960 [ 57.205787] ? process_backlog+0x3fe/0x700 [ 57.210003] ? net_rx_action+0x42d/0xde0 [ 57.214061] __netif_receive_skb+0x1f/0x1b0 [ 57.218384] process_backlog+0x1f1/0x700 [ 57.222431] ? __do_softirq+0x248/0x9a6 [ 57.226390] ? lockdep_hardirqs_on+0x19e/0x620 [ 57.230969] net_rx_action+0x42d/0xde0 [ 57.234859] ? __kasan_check_read+0x11/0x20 [ 57.239188] ? napi_busy_loop+0x6e0/0x6e0 [ 57.243339] ? rcu_is_watching+0x31/0x80 [ 57.248486] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 57.253347] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 57.258618] ? __do_softirq+0x1d9/0x9a6 [ 57.262586] ? ip_finish_output2+0x709/0x22a0 [ 57.267072] ? trace_hardirqs_on+0x28/0x180 [ 57.271398] __do_softirq+0x248/0x9a6 [ 57.275201] ? ip_finish_output2+0x709/0x22a0 [ 57.279686] do_softirq_own_stack+0x2a/0x40 [ 57.283988] [ 57.286213] do_softirq.part.17+0x11a/0x150 [ 57.290520] __local_bh_enable_ip+0x1ee/0x230 [ 57.295000] ip_finish_output2+0x72d/0x22a0 [ 57.299336] ? ip_frag_next+0xa10/0xa10 [ 57.303326] ? rcu_read_lock_held+0x9c/0xb0 [ 57.307637] ? rcu_read_lock_held_common+0x170/0x170 [ 57.312741] __ip_finish_output+0x401/0xa80 [ 57.317081] ? __ip_finish_output+0x401/0xa80 [ 57.321658] ip_finish_output+0x27/0x170 [ 57.325710] ip_output+0x1c6/0x560 [ 57.329247] ? ip_mc_output+0xd10/0xd10 [ 57.333738] ? __ip_finish_output+0xa80/0xa80 [ 57.338220] ? rcu_read_lock_held_common+0x170/0x170 [ 57.343307] ? rcu_read_lock_held+0x9c/0xb0 [ 57.347625] ip_local_out+0x7e/0x130 [ 57.351338] __ip_queue_xmit+0x700/0x1de0 [ 57.355471] ? __skb_checksum+0x7c0/0x7c0 [ 57.359605] ? skb_send_sock_locked+0x750/0x750 [ 57.364410] ? reqsk_fastopen_remove+0x560/0x560 [ 57.369172] ? dccp_insert_options+0x1e2/0xb20 [ 57.373772] ip_queue_xmit+0x45/0x70 [ 57.377481] dccp_transmit_skb+0xb76/0x12a0 [ 57.381797] ? skb_unlink+0x117/0x1a0 [ 57.385738] dccp_xmit_packet+0x1a0/0x580 [ 57.389899] dccp_write_xmit+0x128/0x180 [ 57.393956] dccp_sendmsg+0x691/0xdb0 [ 57.397771] ? aa_sk_perm+0x182/0x740 [ 57.401581] ? dccp_disconnect+0xb00/0xb00 [ 57.405805] ? aa_af_perm+0x240/0x240 [ 57.409598] ? rw_copy_check_uvector+0x66/0x3b0 [ 57.414773] ? __kasan_check_write+0x14/0x20 [ 57.419199] inet_sendmsg+0xbd/0xe0 [ 57.422813] ? inet_send_prepare+0x3a0/0x3a0 [ 57.427210] sock_sendmsg+0xdf/0x110 [ 57.430914] ____sys_sendmsg+0x68d/0xae0 [ 57.434975] ? copy_msghdr_from_user+0xa3/0xf0 [ 57.439543] ? kernel_sendmsg+0x30/0x30 [ 57.443517] ? find_held_lock+0x36/0x1d0 [ 57.447568] ? __fget_files+0x28b/0x410 [ 57.451548] ___sys_sendmsg+0xe4/0x160 [ 57.455433] ? sendmsg_copy_msghdr+0x30/0x30 [ 57.459830] ? rcu_read_lock_held_common+0x170/0x170 [ 57.464949] ? __fget_files+0x2a5/0x410 [ 57.468929] ? __x64_sys_dup2+0x2e0/0x2e0 [ 57.473085] ? __fget_light+0x1b3/0x230 [ 57.477840] ? __fdget+0xe/0x10 [ 57.481128] __sys_sendmsg+0xd9/0x180 [ 57.484914] ? __sys_sendmsg_sock+0xa0/0xa0 [ 57.489245] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 57.494508] ? __sched_text_start+0x8/0x8 [ 57.498660] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 57.504016] __x64_sys_sendmsg+0x73/0xb0 [ 57.508067] do_syscall_64+0xd0/0x630 [ 57.511857] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 57.517029] RIP: 0033:0x452f89 [ 57.520207] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.539108] RSP: 002b:00007f99a4c36c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 57.546801] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 57.554053] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 57.561306] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 57.568572] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 57.575823] R13: 00000000ffffffff R14: 00007f99a4c376d4 R15: 0000000000000002 [ 57.583261] CPU: 0 PID: 4519 Comm: syz-executor5 Not tainted 5.7.0-rc1-syzkaller #0 [ 57.591152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.600506] Call Trace: [ 57.603077] [ 57.605222] dump_stack+0x12f/0x187 [ 57.608859] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 57.614042] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 57.618781] ? dccp_parse_options+0x333/0x1000 [ 57.623359] dccp_deliver_input_to_ccids+0xcc/0x220 [ 57.628364] dccp_rcv_established+0x49/0x70 [ 57.632687] dccp_v4_do_rcv+0xf4/0x160 [ 57.636561] __sk_receive_skb+0x2b6/0x9e0 [ 57.640700] ? sk_free+0x60/0x60 [ 57.644050] ? dccp_invalid_packet+0x3ec/0x750 [ 57.648628] dccp_v4_rcv+0xc62/0x1da3 [ 57.652436] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 57.657187] ip_local_deliver_finish+0x1ee/0x2e0 [ 57.661931] ip_local_deliver+0x306/0x450 [ 57.666072] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 57.670982] ? lock_downgrade+0x960/0x960 [ 57.675119] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 57.680063] ip_rcv_finish+0xb0/0x170 [ 57.683860] ip_rcv+0xcb/0x2f0 [ 57.687044] ? ip_local_deliver+0x450/0x450 [ 57.691360] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 57.696844] ? ip_local_deliver+0x450/0x450 [ 57.701163] __netif_receive_skb_one_core+0x132/0x190 [ 57.706370] ? __netif_receive_skb_core+0x2900/0x2900 [ 57.711545] ? lock_release+0x960/0x960 [ 57.715505] ? process_backlog+0x3fe/0x700 [ 57.719724] ? net_rx_action+0x42d/0xde0 [ 57.723778] __netif_receive_skb+0x1f/0x1b0 [ 57.728230] process_backlog+0x1f1/0x700 [ 57.732279] ? __do_softirq+0x248/0x9a6 [ 57.736242] ? lockdep_hardirqs_on+0x19e/0x620 [ 57.740825] net_rx_action+0x42d/0xde0 [ 57.744702] ? __kasan_check_read+0x11/0x20 [ 57.749625] ? napi_busy_loop+0x6e0/0x6e0 [ 57.753753] ? rcu_is_watching+0x31/0x80 [ 57.757887] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 57.762713] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 57.767968] ? __do_softirq+0x1d9/0x9a6 [ 57.771922] ? ip_finish_output2+0x709/0x22a0 [ 57.776416] ? trace_hardirqs_on+0x28/0x180 [ 57.780729] __do_softirq+0x248/0x9a6 [ 57.784540] ? ip_finish_output2+0x709/0x22a0 [ 57.789029] do_softirq_own_stack+0x2a/0x40 [ 57.793336] [ 57.795560] do_softirq.part.17+0x11a/0x150 [ 57.799876] __local_bh_enable_ip+0x1ee/0x230 [ 57.804360] ip_finish_output2+0x72d/0x22a0 [ 57.808702] ? ip_frag_next+0xa10/0xa10 [ 57.812688] ? rcu_read_lock_held+0x9c/0xb0 [ 57.816997] ? rcu_read_lock_held_common+0x170/0x170 [ 57.822117] __ip_finish_output+0x401/0xa80 [ 57.826438] ? __ip_finish_output+0x401/0xa80 [ 57.830931] ip_finish_output+0x27/0x170 [ 57.834984] ip_output+0x1c6/0x560 [ 57.838516] ? ip_mc_output+0xd10/0xd10 [ 57.842488] ? __ip_finish_output+0xa80/0xa80 [ 57.846971] ? rcu_read_lock_held_common+0x170/0x170 [ 57.852080] ? rcu_read_lock_held+0x9c/0xb0 [ 57.856416] ip_local_out+0x7e/0x130 [ 57.860122] __ip_queue_xmit+0x700/0x1de0 [ 57.864252] ? __skb_checksum+0x7c0/0x7c0 [ 57.868382] ? skb_send_sock_locked+0x750/0x750 [ 57.873033] ? reqsk_fastopen_remove+0x560/0x560 [ 57.877769] ? dccp_insert_options+0x1e2/0xb20 [ 57.882361] ip_queue_xmit+0x45/0x70 [ 57.886073] dccp_transmit_skb+0xb76/0x12a0 [ 57.890383] ? skb_unlink+0x117/0x1a0 [ 57.894181] dccp_xmit_packet+0x1a0/0x580 [ 57.898324] dccp_write_xmit+0x128/0x180 [ 57.902391] dccp_sendmsg+0x691/0xdb0 [ 57.906186] ? aa_sk_perm+0x182/0x740 [ 57.909992] ? dccp_disconnect+0xb00/0xb00 [ 57.914235] ? aa_af_perm+0x240/0x240 [ 57.918035] ? ___might_sleep+0x13e/0x2b0 [ 57.922184] inet_sendmsg+0xbd/0xe0 [ 57.925801] ? inet_send_prepare+0x3a0/0x3a0 [ 57.930220] sock_sendmsg+0xdf/0x110 [ 57.933976] __sys_sendto+0x206/0x320 [ 57.937785] ? __ia32_sys_getpeername+0xb0/0xb0 [ 57.942457] ? release_sock+0x122/0x180 [ 57.946425] ? trace_hardirqs_on+0x28/0x180 [ 57.950737] ? inet_release+0x1c0/0x1c0 [ 57.954702] ? release_sock+0x122/0x180 [ 57.958665] ? __local_bh_enable_ip+0x161/0x230 [ 57.963422] ? _raw_spin_unlock_bh+0x2b/0x30 [ 57.967836] ? inet_stream_connect+0x76/0xa0 [ 57.972244] ? rcu_is_watching+0x31/0x80 [ 57.976297] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 57.981137] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 57.986401] ? __sched_text_start+0x8/0x8 [ 57.990541] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 57.995293] ? do_syscall_64+0x21/0x630 [ 57.999260] __x64_sys_sendto+0xdc/0x1a0 [ 58.003500] do_syscall_64+0xd0/0x630 [ 58.007290] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 58.012474] RIP: 0033:0x452f89 [ 58.015671] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.034649] RSP: 002b:00007fbe3605ac58 EFLAGS: 00000212 ORIG_RAX: 000000000000002c [ 58.042370] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 58.049640] RDX: 00000000000000b9 RSI: 00000000206c2f47 RDI: 0000000000000005 [ 58.056930] RBP: 0000000000000498 R08: 0000000020c69ff0 R09: 0000000000000010 [ 58.064195] R10: 0000000020000000 R11: 0000000000000212 R12: 00000000006f4ee0 [ 58.071467] R13: 00000000ffffffff R14: 00007fbe3605b6d4 R15: 0000000000000002 [ 58.102832] dccp_close: ABORT with 24 bytes unread [ 58.120734] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 58.123511] dccp_close: ABORT with 24 bytes unread [ 58.134212] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.7.0-rc1-syzkaller #0 [ 58.146572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.155910] Call Trace: [ 58.158485] dump_stack+0x12f/0x187 [ 58.162106] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 58.167290] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 58.172181] ? dccp_parse_options+0x333/0x1000 [ 58.176770] dccp_deliver_input_to_ccids+0xcc/0x220 [ 58.181808] dccp_rcv_established+0x49/0x70 [ 58.186180] dccp_v4_do_rcv+0xf4/0x160 [ 58.190068] __sk_receive_skb+0x2b6/0x9e0 [ 58.194219] ? sk_free+0x60/0x60 [ 58.197577] ? dccp_invalid_packet+0x3ec/0x750 [ 58.202161] dccp_v4_rcv+0xc62/0x1da3 [ 58.205975] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 58.210725] ip_local_deliver_finish+0x1ee/0x2e0 [ 58.215481] ip_local_deliver+0x306/0x450 [ 58.219615] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 58.224526] ? lock_downgrade+0x960/0x960 [ 58.228680] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 58.233610] ip_rcv_finish+0xb0/0x170 [ 58.237836] ip_rcv+0xcb/0x2f0 [ 58.241150] ? ip_local_deliver+0x450/0x450 [ 58.245726] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 58.251082] ? ip_local_deliver+0x450/0x450 [ 58.255422] __netif_receive_skb_one_core+0x132/0x190 [ 58.260601] ? __netif_receive_skb_core+0x2900/0x2900 [ 58.265774] ? lock_release+0x960/0x960 [ 58.269746] ? process_backlog+0x3fe/0x700 [ 58.273964] ? net_rx_action+0x42d/0xde0 [ 58.278016] __netif_receive_skb+0x1f/0x1b0 [ 58.282324] process_backlog+0x1f1/0x700 [ 58.286365] ? __do_softirq+0x248/0x9a6 [ 58.290321] ? lockdep_hardirqs_on+0x19e/0x620 [ 58.294896] net_rx_action+0x42d/0xde0 [ 58.298780] ? napi_busy_loop+0x6e0/0x6e0 [ 58.302920] ? rcu_is_watching+0x31/0x80 [ 58.306971] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 58.311796] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 58.317065] ? __do_softirq+0x1d9/0x9a6 [ 58.321037] ? trace_hardirqs_on+0x28/0x180 [ 58.325370] __do_softirq+0x248/0x9a6 [ 58.329178] ? takeover_tasklets+0x7b0/0x7b0 [ 58.333583] run_ksoftirqd+0x88/0x100 [ 58.337469] smpboot_thread_fn+0x342/0x790 [ 58.341701] ? smpboot_unregister_percpu_thread+0x180/0x180 [ 58.347421] ? __kasan_check_read+0x11/0x20 2020/04/16 15:36:32 executed programs: 68 [ 58.351731] ? __kthread_parkme+0xd6/0x1b0 [ 58.355955] ? schedule+0xdd/0x2b0 [ 58.359485] kthread+0x342/0x400 [ 58.362863] ? smpboot_unregister_percpu_thread+0x180/0x180 [ 58.368559] ? kthread_mod_delayed_work+0x190/0x190 [ 58.373564] ret_from_fork+0x3a/0x50 [ 58.423144] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 58.431520] dccp_close: ABORT with 24 bytes unread [ 58.436494] CPU: 0 PID: 4536 Comm: syz-executor3 Not tainted 5.7.0-rc1-syzkaller #0 [ 58.449252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.458843] Call Trace: [ 58.461433] [ 58.463587] dump_stack+0x12f/0x187 [ 58.467234] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 58.472489] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 58.477349] ? dccp_parse_options+0x333/0x1000 [ 58.481962] dccp_deliver_input_to_ccids+0xcc/0x220 [ 58.486999] dccp_rcv_established+0x49/0x70 [ 58.491399] dccp_v4_do_rcv+0xf4/0x160 [ 58.495279] __sk_receive_skb+0x2b6/0x9e0 [ 58.499420] ? sk_free+0x60/0x60 [ 58.502784] ? dccp_invalid_packet+0x3ec/0x750 [ 58.507361] dccp_v4_rcv+0xc62/0x1da3 [ 58.511188] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 58.515938] ip_local_deliver_finish+0x1ee/0x2e0 [ 58.520688] ip_local_deliver+0x306/0x450 [ 58.524832] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 58.529742] ? lock_downgrade+0x960/0x960 [ 58.533875] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 58.538801] ip_rcv_finish+0xb0/0x170 [ 58.542588] ip_rcv+0xcb/0x2f0 [ 58.545775] ? ip_local_deliver+0x450/0x450 [ 58.550090] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 58.555541] ? ip_local_deliver+0x450/0x450 [ 58.559847] __netif_receive_skb_one_core+0x132/0x190 [ 58.565031] ? __netif_receive_skb_core+0x2900/0x2900 [ 58.570212] ? lock_release+0x960/0x960 [ 58.574180] ? process_backlog+0x3fe/0x700 [ 58.578404] ? net_rx_action+0x42d/0xde0 [ 58.582466] __netif_receive_skb+0x1f/0x1b0 [ 58.586777] process_backlog+0x1f1/0x700 [ 58.590821] ? __do_softirq+0x248/0x9a6 [ 58.594778] ? lockdep_hardirqs_on+0x19e/0x620 [ 58.599353] net_rx_action+0x42d/0xde0 [ 58.603235] ? __kasan_check_read+0x11/0x20 [ 58.607818] ? napi_busy_loop+0x6e0/0x6e0 [ 58.611953] ? rcu_is_watching+0x31/0x80 [ 58.616536] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 58.621363] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 58.626711] ? __do_softirq+0x1d9/0x9a6 [ 58.630700] ? ip_finish_output2+0x709/0x22a0 [ 58.635354] ? trace_hardirqs_on+0x28/0x180 [ 58.639663] __do_softirq+0x248/0x9a6 [ 58.643474] ? ip_finish_output2+0x709/0x22a0 [ 58.647976] do_softirq_own_stack+0x2a/0x40 [ 58.652367] [ 58.654612] do_softirq.part.17+0x11a/0x150 [ 58.659022] __local_bh_enable_ip+0x1ee/0x230 [ 58.663522] ip_finish_output2+0x72d/0x22a0 [ 58.668060] ? ip_frag_next+0xa10/0xa10 [ 58.672165] ? rcu_read_lock_held+0x9c/0xb0 [ 58.676494] ? rcu_read_lock_held_common+0x170/0x170 [ 58.681603] __ip_finish_output+0x401/0xa80 [ 58.686017] ? __ip_finish_output+0x401/0xa80 [ 58.690690] ip_finish_output+0x27/0x170 [ 58.694740] ip_output+0x1c6/0x560 [ 58.698271] ? ip_mc_output+0xd10/0xd10 [ 58.702234] ? __ip_finish_output+0xa80/0xa80 [ 58.706710] ? rcu_read_lock_held_common+0x170/0x170 [ 58.711800] ? rcu_read_lock_held+0x9c/0xb0 [ 58.716114] ip_local_out+0x7e/0x130 [ 58.719820] __ip_queue_xmit+0x700/0x1de0 [ 58.723952] ? __skb_checksum+0x7c0/0x7c0 [ 58.728087] ? skb_send_sock_locked+0x750/0x750 [ 58.732740] ? reqsk_fastopen_remove+0x560/0x560 [ 58.738523] ? dccp_insert_options+0x1e2/0xb20 [ 58.743100] ip_queue_xmit+0x45/0x70 [ 58.746825] dccp_transmit_skb+0xb76/0x12a0 [ 58.751160] ? skb_unlink+0x117/0x1a0 [ 58.755018] dccp_xmit_packet+0x1a0/0x580 [ 58.759181] dccp_write_xmit+0x128/0x180 [ 58.763239] dccp_sendmsg+0x691/0xdb0 [ 58.767045] ? aa_sk_perm+0x182/0x740 [ 58.770943] ? dccp_disconnect+0xb00/0xb00 [ 58.775179] ? aa_af_perm+0x240/0x240 [ 58.778982] ? rw_copy_check_uvector+0x66/0x3b0 [ 58.783710] ? __kasan_check_write+0x14/0x20 [ 58.788154] inet_sendmsg+0xbd/0xe0 [ 58.791976] ? inet_send_prepare+0x3a0/0x3a0 [ 58.796371] sock_sendmsg+0xdf/0x110 [ 58.800077] ____sys_sendmsg+0x68d/0xae0 [ 58.804145] ? copy_msghdr_from_user+0xa3/0xf0 [ 58.808713] ? kernel_sendmsg+0x30/0x30 [ 58.812844] ? find_held_lock+0x36/0x1d0 [ 58.816895] ? __fget_files+0x28b/0x410 [ 58.820877] ___sys_sendmsg+0xe4/0x160 [ 58.824751] ? sendmsg_copy_msghdr+0x30/0x30 [ 58.829157] ? rcu_read_lock_held_common+0x170/0x170 [ 58.834259] ? __fget_files+0x2a5/0x410 [ 58.838230] ? __x64_sys_dup2+0x2e0/0x2e0 [ 58.842359] ? release_sock+0x122/0x180 [ 58.846316] ? trace_hardirqs_on+0x28/0x180 [ 58.850703] ? inet_release+0x1c0/0x1c0 [ 58.854670] ? release_sock+0x122/0x180 [ 58.858635] ? __fget_light+0x1b3/0x230 [ 58.862598] ? __fdget+0xe/0x10 [ 58.865877] __sys_sendmsg+0xd9/0x180 [ 58.869676] ? __sys_sendmsg_sock+0xa0/0xa0 [ 58.874012] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 58.879275] ? __sys_listen+0x1e8/0x230 [ 58.883252] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 58.888617] __x64_sys_sendmsg+0x73/0xb0 [ 58.892669] do_syscall_64+0xd0/0x630 [ 58.896461] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 58.901635] RIP: 0033:0x452f89 [ 58.904813] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.923710] RSP: 002b:00007fa3f5ca3c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 58.931407] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 58.938659] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 58.945915] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 58.953253] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 58.960507] R13: 00000000ffffffff R14: 00007fa3f5ca46d4 R15: 0000000000000002 [ 59.012257] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 59.025751] CPU: 0 PID: 4551 Comm: syz-executor5 Not tainted 5.7.0-rc1-syzkaller #0 [ 59.033584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.042958] Call Trace: [ 59.045546] [ 59.047710] dump_stack+0x12f/0x187 [ 59.051355] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 59.056570] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 59.061352] ? dccp_parse_options+0x333/0x1000 [ 59.066028] dccp_deliver_input_to_ccids+0xcc/0x220 [ 59.071161] dccp_rcv_established+0x49/0x70 [ 59.071283] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 59.075483] dccp_v4_do_rcv+0xf4/0x160 [ 59.075503] __sk_receive_skb+0x2b6/0x9e0 [ 59.075527] ? sk_free+0x60/0x60 [ 59.075539] ? dccp_invalid_packet+0x3ec/0x750 [ 59.075566] dccp_v4_rcv+0xc62/0x1da3 [ 59.075605] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 59.113247] ip_local_deliver_finish+0x1ee/0x2e0 [ 59.118108] ip_local_deliver+0x306/0x450 [ 59.122257] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 59.127289] ? lock_downgrade+0x960/0x960 [ 59.131443] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 59.136377] ip_rcv_finish+0xb0/0x170 [ 59.140188] ip_rcv+0xcb/0x2f0 [ 59.143372] ? ip_local_deliver+0x450/0x450 [ 59.147688] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 59.153065] ? ip_local_deliver+0x450/0x450 [ 59.157487] __netif_receive_skb_one_core+0x132/0x190 [ 59.162668] ? __netif_receive_skb_core+0x2900/0x2900 [ 59.167843] ? lock_release+0x960/0x960 [ 59.171807] ? process_backlog+0x3fe/0x700 [ 59.176029] ? net_rx_action+0x42d/0xde0 [ 59.180446] __netif_receive_skb+0x1f/0x1b0 [ 59.184759] process_backlog+0x1f1/0x700 [ 59.188827] ? __do_softirq+0x248/0x9a6 [ 59.192789] ? lockdep_hardirqs_on+0x19e/0x620 [ 59.197384] net_rx_action+0x42d/0xde0 [ 59.201265] ? __kasan_check_read+0x11/0x20 [ 59.205585] ? napi_busy_loop+0x6e0/0x6e0 [ 59.209717] ? rcu_is_watching+0x31/0x80 [ 59.213794] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 59.218623] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 59.223882] ? __do_softirq+0x1d9/0x9a6 [ 59.227842] ? ip_finish_output2+0x709/0x22a0 [ 59.232323] ? trace_hardirqs_on+0x28/0x180 [ 59.236644] __do_softirq+0x248/0x9a6 [ 59.240450] ? ip_finish_output2+0x709/0x22a0 [ 59.244949] do_softirq_own_stack+0x2a/0x40 [ 59.249260] [ 59.251771] do_softirq.part.17+0x11a/0x150 [ 59.256193] __local_bh_enable_ip+0x1ee/0x230 [ 59.260696] ip_finish_output2+0x72d/0x22a0 [ 59.265027] ? ip_frag_next+0xa10/0xa10 [ 59.269001] ? rcu_read_lock_held+0x9c/0xb0 [ 59.273312] ? rcu_read_lock_held_common+0x170/0x170 [ 59.280498] __ip_finish_output+0x401/0xa80 [ 59.284805] ? __ip_finish_output+0x401/0xa80 [ 59.289296] ip_finish_output+0x27/0x170 [ 59.293348] ip_output+0x1c6/0x560 [ 59.296880] ? ip_mc_output+0xd10/0xd10 [ 59.300868] ? __ip_finish_output+0xa80/0xa80 [ 59.305355] ? rcu_read_lock_held_common+0x170/0x170 [ 59.310448] ? rcu_read_lock_held+0x9c/0xb0 [ 59.314782] ip_local_out+0x7e/0x130 [ 59.318504] __ip_queue_xmit+0x700/0x1de0 [ 59.322641] ? __skb_checksum+0x7c0/0x7c0 [ 59.326789] ? skb_send_sock_locked+0x750/0x750 [ 59.331455] ? reqsk_fastopen_remove+0x560/0x560 [ 59.336194] ? dccp_insert_options+0x1e2/0xb20 [ 59.340950] ip_queue_xmit+0x45/0x70 [ 59.345003] dccp_transmit_skb+0xb76/0x12a0 [ 59.349321] ? skb_unlink+0x117/0x1a0 [ 59.353383] dccp_xmit_packet+0x1a0/0x580 [ 59.357552] dccp_write_xmit+0x128/0x180 [ 59.362217] dccp_sendmsg+0x691/0xdb0 [ 59.366010] ? aa_sk_perm+0x182/0x740 [ 59.369889] ? dccp_disconnect+0xb00/0xb00 [ 59.374110] ? aa_af_perm+0x240/0x240 [ 59.378163] ? rw_copy_check_uvector+0x66/0x3b0 [ 59.383782] ? __kasan_check_write+0x14/0x20 [ 59.388200] inet_sendmsg+0xbd/0xe0 [ 59.391814] ? inet_send_prepare+0x3a0/0x3a0 [ 59.396554] sock_sendmsg+0xdf/0x110 [ 59.400289] ____sys_sendmsg+0x68d/0xae0 [ 59.404350] ? copy_msghdr_from_user+0xa3/0xf0 [ 59.408947] ? kernel_sendmsg+0x30/0x30 [ 59.413184] ? find_held_lock+0x36/0x1d0 [ 59.417276] ? __fget_files+0x28b/0x410 [ 59.421258] ___sys_sendmsg+0xe4/0x160 [ 59.425136] ? sendmsg_copy_msghdr+0x30/0x30 [ 59.429697] ? rcu_read_lock_held_common+0x170/0x170 [ 59.434928] ? __fget_files+0x2a5/0x410 [ 59.438906] ? __x64_sys_dup2+0x2e0/0x2e0 [ 59.443198] ? release_sock+0x122/0x180 [ 59.447165] ? trace_hardirqs_on+0x28/0x180 [ 59.451776] ? inet_release+0x1c0/0x1c0 [ 59.455760] ? release_sock+0x122/0x180 [ 59.459746] ? __fget_light+0x1b3/0x230 [ 59.463847] ? __fdget+0xe/0x10 [ 59.467132] __sys_sendmsg+0xd9/0x180 [ 59.471070] ? __sys_sendmsg_sock+0xa0/0xa0 [ 59.475424] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 59.480695] ? __sys_listen+0x1e8/0x230 [ 59.484692] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 59.490164] __x64_sys_sendmsg+0x73/0xb0 [ 59.494237] do_syscall_64+0xd0/0x630 [ 59.498056] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 59.503240] RIP: 0033:0x452f89 [ 59.506423] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.526055] RSP: 002b:00007fbe3605ac58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 59.533770] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 59.541040] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 59.548329] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 59.555760] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 59.563032] R13: 00000000ffffffff R14: 00007fbe3605b6d4 R15: 0000000000000002 [ 59.570350] CPU: 1 PID: 4561 Comm: syz-executor4 Not tainted 5.7.0-rc1-syzkaller #0 [ 59.578158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.587521] Call Trace: [ 59.590105] [ 59.592269] dump_stack+0x12f/0x187 [ 59.595932] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 59.601148] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 59.606024] ? dccp_parse_options+0x333/0x1000 [ 59.610767] dccp_deliver_input_to_ccids+0xcc/0x220 [ 59.615806] dccp_rcv_established+0x49/0x70 [ 59.620250] dccp_v4_do_rcv+0xf4/0x160 [ 59.624193] __sk_receive_skb+0x2b6/0x9e0 [ 59.628483] ? sk_free+0x60/0x60 [ 59.631871] ? dccp_invalid_packet+0x3ec/0x750 [ 59.636763] dccp_v4_rcv+0xc62/0x1da3 [ 59.640610] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 59.645444] ip_local_deliver_finish+0x1ee/0x2e0 [ 59.650218] ip_local_deliver+0x306/0x450 [ 59.654530] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 59.659465] ? lock_downgrade+0x960/0x960 [ 59.663717] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 59.668808] ip_rcv_finish+0xb0/0x170 [ 59.672622] ip_rcv+0xcb/0x2f0 [ 59.675824] ? ip_local_deliver+0x450/0x450 [ 59.680159] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 59.685543] ? ip_local_deliver+0x450/0x450 [ 59.689894] __netif_receive_skb_one_core+0x132/0x190 [ 59.695113] ? __netif_receive_skb_core+0x2900/0x2900 [ 59.700318] ? lock_release+0x960/0x960 [ 59.704317] ? process_backlog+0x3fe/0x700 [ 59.708561] ? net_rx_action+0x42d/0xde0 [ 59.712643] __netif_receive_skb+0x1f/0x1b0 [ 59.716990] process_backlog+0x1f1/0x700 [ 59.721056] ? __do_softirq+0x248/0x9a6 [ 59.725044] ? lockdep_hardirqs_on+0x19e/0x620 [ 59.729689] net_rx_action+0x42d/0xde0 [ 59.733592] ? __kasan_check_read+0x11/0x20 [ 59.737950] ? napi_busy_loop+0x6e0/0x6e0 [ 59.742222] ? rcu_is_watching+0x31/0x80 [ 59.746303] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 59.751276] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 59.756571] ? __do_softirq+0x1d9/0x9a6 [ 59.760553] ? ip_finish_output2+0x709/0x22a0 [ 59.765069] ? trace_hardirqs_on+0x28/0x180 [ 59.769489] __do_softirq+0x248/0x9a6 [ 59.773326] ? ip_finish_output2+0x709/0x22a0 [ 59.777835] do_softirq_own_stack+0x2a/0x40 [ 59.782173] [ 59.784441] do_softirq.part.17+0x11a/0x150 [ 59.788783] __local_bh_enable_ip+0x1ee/0x230 [ 59.793291] ip_finish_output2+0x72d/0x22a0 [ 59.797648] ? ip_frag_next+0xa10/0xa10 [ 59.801642] ? rcu_read_lock_held+0x9c/0xb0 [ 59.801650] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 59.805967] ? rcu_read_lock_held_common+0x170/0x170 [ 59.805991] __ip_finish_output+0x401/0xa80 [ 59.805999] ? __ip_finish_output+0x401/0xa80 [ 59.806020] ip_finish_output+0x27/0x170 [ 59.806036] ip_output+0x1c6/0x560 [ 59.806055] ? ip_mc_output+0xd10/0xd10 [ 59.806073] ? __ip_finish_output+0xa80/0xa80 [ 59.806078] ? rcu_read_lock_held_common+0x170/0x170 [ 59.806089] ? rcu_read_lock_held+0x9c/0xb0 [ 59.858787] ip_local_out+0x7e/0x130 [ 59.862507] __ip_queue_xmit+0x700/0x1de0 [ 59.866647] ? __skb_checksum+0x7c0/0x7c0 [ 59.870785] ? skb_send_sock_locked+0x750/0x750 [ 59.875462] ? reqsk_fastopen_remove+0x560/0x560 [ 59.880216] ? dccp_insert_options+0x1e2/0xb20 [ 59.884883] ip_queue_xmit+0x45/0x70 [ 59.888586] dccp_transmit_skb+0xb76/0x12a0 [ 59.892894] ? skb_unlink+0x117/0x1a0 [ 59.896709] dccp_xmit_packet+0x1a0/0x580 [ 59.900939] dccp_write_xmit+0x128/0x180 [ 59.904992] dccp_sendmsg+0x691/0xdb0 [ 59.908784] ? aa_sk_perm+0x182/0x740 [ 59.912579] ? dccp_disconnect+0xb00/0xb00 [ 59.917013] ? aa_af_perm+0x240/0x240 [ 59.920820] ? rw_copy_check_uvector+0x66/0x3b0 [ 59.925497] ? __kasan_check_write+0x14/0x20 [ 59.930064] inet_sendmsg+0xbd/0xe0 [ 59.933683] ? inet_send_prepare+0x3a0/0x3a0 [ 59.938092] sock_sendmsg+0xdf/0x110 [ 59.941799] ____sys_sendmsg+0x68d/0xae0 [ 59.945851] ? copy_msghdr_from_user+0xa3/0xf0 [ 59.950422] ? kernel_sendmsg+0x30/0x30 [ 59.954382] ? find_held_lock+0x36/0x1d0 [ 59.958452] ? __fget_files+0x28b/0x410 [ 59.962442] ___sys_sendmsg+0xe4/0x160 [ 59.966334] ? sendmsg_copy_msghdr+0x30/0x30 [ 59.970754] ? rcu_read_lock_held_common+0x170/0x170 [ 59.975871] ? __fget_files+0x2a5/0x410 [ 59.979862] ? __x64_sys_dup2+0x2e0/0x2e0 [ 59.984054] ? __fget_light+0x1b3/0x230 [ 59.988145] ? __fdget+0xe/0x10 [ 59.991451] __sys_sendmsg+0xd9/0x180 [ 59.995240] ? __sys_sendmsg_sock+0xa0/0xa0 [ 59.999565] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 60.005115] ? __sched_text_start+0x8/0x8 [ 60.009306] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 60.014862] __x64_sys_sendmsg+0x73/0xb0 [ 60.018927] do_syscall_64+0xd0/0x630 [ 60.022736] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 60.027920] RIP: 0033:0x452f89 [ 60.031173] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.050179] RSP: 002b:00007f99a4c36c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 60.058057] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 60.065318] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 60.072849] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 60.080104] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 60.087371] R13: 00000000ffffffff R14: 00007f99a4c376d4 R15: 0000000000000002 [ 60.094675] CPU: 0 PID: 4583 Comm: syz-executor3 Not tainted 5.7.0-rc1-syzkaller #0 [ 60.102485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.111933] Call Trace: [ 60.114537] [ 60.116695] dump_stack+0x12f/0x187 [ 60.120343] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 60.125556] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 60.130324] ? dccp_parse_options+0x333/0x1000 [ 60.135050] dccp_deliver_input_to_ccids+0xcc/0x220 [ 60.140175] dccp_rcv_established+0x49/0x70 [ 60.144525] dccp_v4_do_rcv+0xf4/0x160 [ 60.148434] __sk_receive_skb+0x2b6/0x9e0 [ 60.152701] ? sk_free+0x60/0x60 [ 60.156089] ? dccp_invalid_packet+0x3ec/0x750 [ 60.161243] dccp_v4_rcv+0xc62/0x1da3 [ 60.165163] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 60.169949] ip_local_deliver_finish+0x1ee/0x2e0 [ 60.174724] ip_local_deliver+0x306/0x450 [ 60.178894] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 60.183836] ? lock_downgrade+0x960/0x960 [ 60.188096] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 60.193080] ip_rcv_finish+0xb0/0x170 [ 60.197077] ip_rcv+0xcb/0x2f0 [ 60.197397] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 60.200282] ? ip_local_deliver+0x450/0x450 [ 60.200299] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 60.200321] ? ip_local_deliver+0x450/0x450 [ 60.200336] __netif_receive_skb_one_core+0x132/0x190 [ 60.200349] ? __netif_receive_skb_core+0x2900/0x2900 [ 60.200357] ? lock_release+0x960/0x960 [ 60.200369] ? process_backlog+0x3fe/0x700 [ 60.200377] ? net_rx_action+0x42d/0xde0 [ 60.200395] __netif_receive_skb+0x1f/0x1b0 [ 60.254606] process_backlog+0x1f1/0x700 [ 60.259003] ? __do_softirq+0x248/0x9a6 [ 60.262966] ? lockdep_hardirqs_on+0x19e/0x620 [ 60.267566] net_rx_action+0x42d/0xde0 [ 60.271443] ? __kasan_check_read+0x11/0x20 [ 60.275761] ? napi_busy_loop+0x6e0/0x6e0 [ 60.279893] ? rcu_is_watching+0x31/0x80 [ 60.283963] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 60.288814] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 60.294071] ? __do_softirq+0x1d9/0x9a6 [ 60.298030] ? ip_finish_output2+0x709/0x22a0 [ 60.302605] ? trace_hardirqs_on+0x28/0x180 [ 60.306923] __do_softirq+0x248/0x9a6 [ 60.310809] ? ip_finish_output2+0x709/0x22a0 [ 60.315293] do_softirq_own_stack+0x2a/0x40 [ 60.319607] [ 60.321844] do_softirq.part.17+0x11a/0x150 [ 60.326225] __local_bh_enable_ip+0x1ee/0x230 [ 60.330723] ip_finish_output2+0x72d/0x22a0 [ 60.335148] ? ip_frag_next+0xa10/0xa10 [ 60.339173] ? rcu_read_lock_held+0x9c/0xb0 [ 60.343480] ? rcu_read_lock_held_common+0x170/0x170 [ 60.348604] __ip_finish_output+0x401/0xa80 [ 60.352910] ? __ip_finish_output+0x401/0xa80 [ 60.357400] ip_finish_output+0x27/0x170 [ 60.361448] ip_output+0x1c6/0x560 [ 60.364981] ? ip_mc_output+0xd10/0xd10 [ 60.368948] ? __ip_finish_output+0xa80/0xa80 [ 60.373438] ? rcu_read_lock_held_common+0x170/0x170 [ 60.378541] ? rcu_read_lock_held+0x9c/0xb0 [ 60.382869] ip_local_out+0x7e/0x130 [ 60.386589] __ip_queue_xmit+0x700/0x1de0 [ 60.390723] ? __skb_checksum+0x7c0/0x7c0 [ 60.394865] ? skb_send_sock_locked+0x750/0x750 [ 60.399532] ? reqsk_fastopen_remove+0x560/0x560 [ 60.404272] ? dccp_insert_options+0x1e2/0xb20 [ 60.409524] ip_queue_xmit+0x45/0x70 [ 60.413227] dccp_transmit_skb+0xb76/0x12a0 [ 60.417532] ? skb_unlink+0x117/0x1a0 [ 60.421331] dccp_xmit_packet+0x1a0/0x580 [ 60.425475] dccp_write_xmit+0x128/0x180 [ 60.429528] dccp_sendmsg+0x691/0xdb0 [ 60.433315] ? aa_sk_perm+0x182/0x740 [ 60.437106] ? dccp_disconnect+0xb00/0xb00 [ 60.441328] ? aa_af_perm+0x240/0x240 [ 60.445125] ? rw_copy_check_uvector+0x66/0x3b0 [ 60.449787] ? __kasan_check_write+0x14/0x20 [ 60.454202] inet_sendmsg+0xbd/0xe0 [ 60.457814] ? inet_send_prepare+0x3a0/0x3a0 [ 60.462206] sock_sendmsg+0xdf/0x110 [ 60.465963] ____sys_sendmsg+0x68d/0xae0 [ 60.470046] ? copy_msghdr_from_user+0xa3/0xf0 [ 60.474634] ? kernel_sendmsg+0x30/0x30 [ 60.478616] ? find_held_lock+0x36/0x1d0 [ 60.482674] ? __fget_files+0x28b/0x410 [ 60.486652] ___sys_sendmsg+0xe4/0x160 [ 60.490552] ? sendmsg_copy_msghdr+0x30/0x30 [ 60.494963] ? rcu_read_lock_held_common+0x170/0x170 [ 60.500079] ? __fget_files+0x2a5/0x410 [ 60.504051] ? __x64_sys_dup2+0x2e0/0x2e0 [ 60.508200] ? __fget_light+0x1b3/0x230 [ 60.512166] ? __fdget+0xe/0x10 [ 60.515440] __sys_sendmsg+0xd9/0x180 [ 60.519928] ? __sys_sendmsg_sock+0xa0/0xa0 [ 60.524274] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 60.529534] ? __sched_text_start+0x8/0x8 [ 60.533688] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 60.539049] __x64_sys_sendmsg+0x73/0xb0 [ 60.543108] do_syscall_64+0xd0/0x630 [ 60.546990] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 60.552175] RIP: 0033:0x452f89 [ 60.555355] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.574252] RSP: 002b:00007fa3f5ca3c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 60.581952] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 60.589217] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 60.596494] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 60.603753] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 60.611151] R13: 00000000ffffffff R14: 00007fa3f5ca46d4 R15: 0000000000000002 [ 60.618471] CPU: 1 PID: 4602 Comm: syz-executor4 Not tainted 5.7.0-rc1-syzkaller #0 [ 60.626276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.635632] Call Trace: [ 60.638217] [ 60.640385] dump_stack+0x12f/0x187 [ 60.644032] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 60.649239] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 60.653996] ? dccp_parse_options+0x333/0x1000 [ 60.658600] dccp_deliver_input_to_ccids+0xcc/0x220 [ 60.663630] dccp_rcv_established+0x49/0x70 [ 60.667959] dccp_v4_do_rcv+0xf4/0x160 [ 60.671861] __sk_receive_skb+0x2b6/0x9e0 [ 60.676036] ? sk_free+0x60/0x60 [ 60.679417] ? dccp_invalid_packet+0x3ec/0x750 [ 60.684021] dccp_v4_rcv+0xc62/0x1da3 [ 60.687865] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 60.692641] ip_local_deliver_finish+0x1ee/0x2e0 [ 60.697420] ip_local_deliver+0x306/0x450 [ 60.701580] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 60.706518] ? lock_downgrade+0x960/0x960 [ 60.710687] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 60.715652] ip_rcv_finish+0xb0/0x170 [ 60.719467] ip_rcv+0xcb/0x2f0 [ 60.722696] ? ip_local_deliver+0x450/0x450 [ 60.727034] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 60.732441] ? ip_local_deliver+0x450/0x450 [ 60.736779] __netif_receive_skb_one_core+0x132/0x190 [ 60.741985] ? __netif_receive_skb_core+0x2900/0x2900 [ 60.747296] ? lock_release+0x960/0x960 [ 60.751293] ? process_backlog+0x3fe/0x700 [ 60.755546] ? net_rx_action+0x42d/0xde0 [ 60.759632] __netif_receive_skb+0x1f/0x1b0 [ 60.763973] process_backlog+0x1f1/0x700 [ 60.768069] ? __do_softirq+0x248/0x9a6 [ 60.772059] ? lockdep_hardirqs_on+0x19e/0x620 [ 60.776665] net_rx_action+0x42d/0xde0 [ 60.780583] ? __kasan_check_read+0x11/0x20 [ 60.782569] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 60.784942] ? napi_busy_loop+0x6e0/0x6e0 [ 60.784949] ? rcu_is_watching+0x31/0x80 [ 60.784971] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 60.784982] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 60.784988] ? __do_softirq+0x1d9/0x9a6 [ 60.784994] ? ip_finish_output2+0x709/0x22a0 [ 60.785003] ? trace_hardirqs_on+0x28/0x180 [ 60.785023] __do_softirq+0x248/0x9a6 [ 60.785046] ? ip_finish_output2+0x709/0x22a0 [ 60.838374] do_softirq_own_stack+0x2a/0x40 [ 60.842680] [ 60.844906] do_softirq.part.17+0x11a/0x150 [ 60.849306] __local_bh_enable_ip+0x1ee/0x230 [ 60.853789] ip_finish_output2+0x72d/0x22a0 [ 60.858108] ? ip_frag_next+0xa10/0xa10 [ 60.862070] ? rcu_read_lock_held+0x9c/0xb0 [ 60.866376] ? rcu_read_lock_held_common+0x170/0x170 [ 60.871472] __ip_finish_output+0x401/0xa80 [ 60.875778] ? __ip_finish_output+0x401/0xa80 [ 60.880273] ip_finish_output+0x27/0x170 [ 60.884328] ip_output+0x1c6/0x560 [ 60.887860] ? ip_mc_output+0xd10/0xd10 [ 60.891830] ? __ip_finish_output+0xa80/0xa80 [ 60.896508] ? rcu_read_lock_held_common+0x170/0x170 [ 60.901618] ? rcu_read_lock_held+0x9c/0xb0 [ 60.905944] ip_local_out+0x7e/0x130 [ 60.909664] __ip_queue_xmit+0x700/0x1de0 [ 60.913807] ? __skb_checksum+0x7c0/0x7c0 [ 60.917968] ? skb_send_sock_locked+0x750/0x750 [ 60.922759] ? reqsk_fastopen_remove+0x560/0x560 [ 60.927508] ? dccp_insert_options+0x1e2/0xb20 [ 60.932097] ip_queue_xmit+0x45/0x70 [ 60.935813] dccp_transmit_skb+0xb76/0x12a0 [ 60.940233] ? skb_unlink+0x117/0x1a0 [ 60.944056] dccp_xmit_packet+0x1a0/0x580 [ 60.948216] dccp_write_xmit+0x128/0x180 [ 60.952285] dccp_sendmsg+0x691/0xdb0 [ 60.956081] ? aa_sk_perm+0x182/0x740 [ 60.959875] ? dccp_disconnect+0xb00/0xb00 [ 60.964110] ? aa_af_perm+0x240/0x240 [ 60.967899] ? rw_copy_check_uvector+0x66/0x3b0 [ 60.972554] ? __kasan_check_write+0x14/0x20 [ 60.976981] inet_sendmsg+0xbd/0xe0 [ 60.980596] ? inet_send_prepare+0x3a0/0x3a0 [ 60.984989] sock_sendmsg+0xdf/0x110 [ 60.988696] ____sys_sendmsg+0x68d/0xae0 [ 60.992747] ? copy_msghdr_from_user+0xa3/0xf0 [ 60.997321] ? kernel_sendmsg+0x30/0x30 [ 61.001397] ? find_held_lock+0x36/0x1d0 [ 61.005453] ? __fget_files+0x28b/0x410 [ 61.009441] ___sys_sendmsg+0xe4/0x160 [ 61.013364] ? sendmsg_copy_msghdr+0x30/0x30 [ 61.017769] ? rcu_read_lock_held_common+0x170/0x170 [ 61.022895] ? __fget_files+0x2a5/0x410 [ 61.026883] ? __x64_sys_dup2+0x2e0/0x2e0 [ 61.031036] ? __fget_light+0x1b3/0x230 [ 61.035014] ? __fdget+0xe/0x10 [ 61.038293] __sys_sendmsg+0xd9/0x180 [ 61.042082] ? __sys_sendmsg_sock+0xa0/0xa0 [ 61.046475] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 61.051939] ? __sched_text_start+0x8/0x8 [ 61.056106] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 61.061513] __x64_sys_sendmsg+0x73/0xb0 [ 61.065572] do_syscall_64+0xd0/0x630 [ 61.069370] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 61.074546] RIP: 0033:0x452f89 [ 61.077727] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 61.096742] RSP: 002b:00007f99a4c36c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 61.104451] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 61.111713] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005