Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 40.993926] can: request_module (can-proto-0) failed. [ 40.999245] can: request_module (can-proto-0) failed. [ 41.765572] ip (3123) used greatest stack depth: 23264 bytes left [ 42.485362] tipc: TX() has been purged, node left! Warning: Permanently added '10.128.10.33' (ECDSA) to the list of known hosts. 2020/05/16 16:01:35 parsed 1 programs 2020/05/16 16:01:35 executed programs: 0 [ 50.023348] ip (3661) used greatest stack depth: 23256 bytes left [ 51.763510] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 51.778658] CPU: 0 PID: 4196 Comm: syz-executor3 Not tainted 5.7.0-rc5-syzkaller #0 [ 51.787261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.797328] Call Trace: [ 51.800002] [ 51.802549] dump_stack+0x12f/0x187 [ 51.806210] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 51.811617] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 51.817340] ? dccp_parse_options+0x333/0x1000 [ 51.822378] dccp_deliver_input_to_ccids+0xcc/0x220 [ 51.827904] dccp_rcv_established+0x49/0x70 [ 51.832701] dccp_v4_do_rcv+0xf4/0x160 [ 51.837577] __sk_receive_skb+0x2b6/0x9e0 [ 51.841862] ? sk_free+0x60/0x60 [ 51.845838] ? dccp_invalid_packet+0x3ec/0x750 [ 51.850807] dccp_v4_rcv+0xc62/0x1da3 [ 51.855241] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 51.860203] ip_local_deliver_finish+0x1ee/0x2e0 [ 51.866243] ip_local_deliver+0x306/0x450 [ 51.870904] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 51.876325] ? lock_downgrade+0x960/0x960 [ 51.880502] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 51.886723] ip_rcv_finish+0xb0/0x170 [ 51.890784] ip_rcv+0xcb/0x2f0 [ 51.894241] ? ip_local_deliver+0x450/0x450 [ 51.898818] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 51.904325] ? ip_local_deliver+0x450/0x450 [ 51.908760] __netif_receive_skb_one_core+0x132/0x190 [ 51.914330] ? __netif_receive_skb_core+0x2900/0x2900 [ 51.919742] ? lock_release+0x960/0x960 [ 51.920783] dccp_close: ABORT with 24 bytes unread [ 51.923940] ? process_backlog+0x3fe/0x700 [ 51.923956] ? net_rx_action+0x42d/0xde0 [ 51.923976] __netif_receive_skb+0x1f/0x1b0 [ 51.923992] process_backlog+0x1f1/0x700 [ 51.923998] ? __do_softirq+0x248/0x9a6 [ 51.924009] ? lockdep_hardirqs_on+0x19e/0x620 [ 51.924034] net_rx_action+0x42d/0xde0 [ 51.924049] ? __kasan_check_read+0x11/0x20 [ 51.964489] ? napi_busy_loop+0x6e0/0x6e0 [ 51.969022] ? rcu_is_watching+0x31/0x80 [ 51.973144] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 51.977988] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 51.983393] ? __do_softirq+0x1d9/0x9a6 [ 51.987363] ? ip_finish_output2+0x709/0x22a0 [ 51.991852] ? trace_hardirqs_on+0x28/0x180 [ 51.996349] __do_softirq+0x248/0x9a6 [ 52.000332] ? ip_finish_output2+0x709/0x22a0 [ 52.004832] do_softirq_own_stack+0x2a/0x40 [ 52.009146] [ 52.011376] do_softirq.part.17+0x11a/0x150 [ 52.015700] __local_bh_enable_ip+0x1ee/0x230 [ 52.020345] ip_finish_output2+0x72d/0x22a0 [ 52.024835] ? ip_frag_next+0xa10/0xa10 [ 52.028931] ? rcu_read_lock_held+0x9c/0xb0 [ 52.033456] ? rcu_read_lock_held_common+0x170/0x170 [ 52.038567] __ip_finish_output+0x401/0xa80 [ 52.042943] ? __ip_finish_output+0x401/0xa80 [ 52.047447] ip_finish_output+0x27/0x170 [ 52.051508] ip_output+0x1c6/0x560 [ 52.055174] ? ip_mc_output+0xd10/0xd10 [ 52.059145] ? __ip_finish_output+0xa80/0xa80 [ 52.063697] ? rcu_read_lock_held_common+0x170/0x170 [ 52.068971] ? rcu_read_lock_held+0x9c/0xb0 [ 52.073584] ip_local_out+0x7e/0x130 [ 52.077411] __ip_queue_xmit+0x700/0x1de0 [ 52.081553] ? __skb_checksum+0x7c0/0x7c0 [ 52.085873] ? skb_send_sock_locked+0x750/0x750 [ 52.090531] ? reqsk_fastopen_remove+0x560/0x560 [ 52.095405] ? dccp_insert_options+0x1e2/0xb20 [ 52.099992] ip_queue_xmit+0x45/0x70 [ 52.103702] dccp_transmit_skb+0xb76/0x12a0 [ 52.108131] ? skb_unlink+0x117/0x1a0 [ 52.111947] dccp_xmit_packet+0x1a0/0x580 [ 52.116336] dccp_write_xmit+0x128/0x180 [ 52.120489] dccp_sendmsg+0x691/0xdb0 [ 52.124442] ? aa_sk_perm+0x182/0x740 [ 52.128384] ? dccp_disconnect+0xb00/0xb00 [ 52.132735] ? aa_af_perm+0x240/0x240 [ 52.136751] ? rw_copy_check_uvector+0x66/0x3b0 [ 52.141428] ? __kasan_check_write+0x14/0x20 [ 52.146188] inet_sendmsg+0xbd/0xe0 [ 52.150539] ? inet_send_prepare+0x3a0/0x3a0 [ 52.155031] sock_sendmsg+0xdf/0x110 [ 52.158873] ____sys_sendmsg+0x68d/0xae0 [ 52.163058] ? copy_msghdr_from_user+0xa3/0xf0 [ 52.167930] ? kernel_sendmsg+0x30/0x30 [ 52.172214] ? find_held_lock+0x36/0x1d0 [ 52.176542] ? __fget_files+0x28b/0x410 [ 52.180565] ___sys_sendmsg+0xe4/0x160 [ 52.184524] ? sendmsg_copy_msghdr+0x30/0x30 [ 52.189501] ? rcu_read_lock_held_common+0x170/0x170 [ 52.194702] ? __fget_files+0x2a5/0x410 [ 52.198978] ? __x64_sys_dup2+0x2e0/0x2e0 [ 52.203364] ? __fget_light+0x1b3/0x230 [ 52.207573] ? __fdget+0xe/0x10 [ 52.211767] __sys_sendmsg+0xd9/0x180 [ 52.217199] ? __sys_sendmsg_sock+0xa0/0xa0 [ 52.222058] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 52.228481] ? __sched_text_start+0x8/0x8 [ 52.232706] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 52.238076] __x64_sys_sendmsg+0x73/0xb0 [ 52.242937] do_syscall_64+0xd0/0x630 [ 52.246830] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 52.252159] RIP: 0033:0x452f89 [ 52.255443] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 52.275204] RSP: 002b:00007f89f7d22c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 52.283425] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 52.290686] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 52.298096] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 52.305507] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 52.312774] R13: 00000000ffffffff R14: 00007f89f7d236d4 R15: 0000000000000002 [ 52.351527] dccp_close: ABORT with 24 bytes unread [ 52.402516] dccp_close: ABORT with 24 bytes unread [ 52.437114] dccp_close: ABORT with 24 bytes unread [ 52.485261] dccp_close: ABORT with 24 bytes unread [ 52.508849] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 52.524054] CPU: 1 PID: 4263 Comm: syz-executor2 Not tainted 5.7.0-rc5-syzkaller #0 [ 52.530149] dccp_close: ABORT with 24 bytes unread [ 52.533391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.533396] Call Trace: [ 52.533400] [ 52.533414] dump_stack+0x12f/0x187 [ 52.533438] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 52.533455] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 52.557315] dccp_close: ABORT with 24 bytes unread [ 52.559891] ? dccp_parse_options+0x333/0x1000 [ 52.559919] dccp_deliver_input_to_ccids+0xcc/0x220 [ 52.559936] dccp_rcv_established+0x49/0x70 [ 52.559947] dccp_v4_do_rcv+0xf4/0x160 [ 52.559963] __sk_receive_skb+0x2b6/0x9e0 [ 52.597603] ? sk_free+0x60/0x60 [ 52.601141] ? dccp_invalid_packet+0x3ec/0x750 [ 52.605754] dccp_v4_rcv+0xc62/0x1da3 [ 52.609608] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 52.614742] ip_local_deliver_finish+0x1ee/0x2e0 [ 52.619668] dccp_close: ABORT with 24 bytes unread [ 52.619778] ip_local_deliver+0x306/0x450 [ 52.629274] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 52.634219] ? lock_downgrade+0x960/0x960 [ 52.636719] dccp_close: ABORT with 24 bytes unread [ 52.638650] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 52.638681] ip_rcv_finish+0xb0/0x170 [ 52.638694] ip_rcv+0xcb/0x2f0 [ 52.638707] ? ip_local_deliver+0x450/0x450 [ 52.638723] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 52.650618] dccp_close: ABORT with 24 bytes unread [ 52.652663] ? ip_local_deliver+0x450/0x450 [ 52.652680] __netif_receive_skb_one_core+0x132/0x190 [ 52.652693] ? __netif_receive_skb_core+0x2900/0x2900 [ 52.652700] ? lock_release+0x960/0x960 [ 52.652710] ? process_backlog+0x3fe/0x700 [ 52.695117] ? net_rx_action+0x42d/0xde0 [ 52.699635] __netif_receive_skb+0x1f/0x1b0 [ 52.704069] process_backlog+0x1f1/0x700 [ 52.708230] ? __do_softirq+0x248/0x9a6 [ 52.709371] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 52.712209] ? lockdep_hardirqs_on+0x19e/0x620 [ 52.712240] net_rx_action+0x42d/0xde0 [ 52.712254] ? __kasan_check_read+0x11/0x20 [ 52.738903] ? napi_busy_loop+0x6e0/0x6e0 [ 52.743116] ? rcu_is_watching+0x31/0x80 [ 52.747219] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 52.752305] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 52.757650] ? __do_softirq+0x1d9/0x9a6 [ 52.761682] ? ip_finish_output2+0x709/0x22a0 [ 52.766313] ? trace_hardirqs_on+0x28/0x180 [ 52.770765] __do_softirq+0x248/0x9a6 [ 52.774704] ? ip_finish_output2+0x709/0x22a0 [ 52.779472] do_softirq_own_stack+0x2a/0x40 [ 52.783885] [ 52.786122] do_softirq.part.17+0x11a/0x150 [ 52.790529] __local_bh_enable_ip+0x1ee/0x230 [ 52.795029] ip_finish_output2+0x72d/0x22a0 [ 52.799361] ? ip_frag_next+0xa10/0xa10 [ 52.803493] ? rcu_read_lock_held+0x9c/0xb0 [ 52.807899] ? rcu_read_lock_held_common+0x170/0x170 [ 52.813706] __ip_finish_output+0x401/0xa80 [ 52.818087] ? __ip_finish_output+0x401/0xa80 [ 52.822904] ip_finish_output+0x27/0x170 [ 52.828470] ip_output+0x1c6/0x560 [ 52.832446] ? ip_mc_output+0xd10/0xd10 [ 52.836448] ? __ip_finish_output+0xa80/0xa80 [ 52.841175] ? rcu_read_lock_held_common+0x170/0x170 [ 52.846281] ? rcu_read_lock_held+0x9c/0xb0 [ 52.850775] ip_local_out+0x7e/0x130 [ 52.856137] __ip_queue_xmit+0x700/0x1de0 [ 52.861194] ? __skb_checksum+0x7c0/0x7c0 [ 52.866344] ? skb_send_sock_locked+0x750/0x750 [ 52.871424] ? reqsk_fastopen_remove+0x560/0x560 [ 52.876815] ? dccp_insert_options+0x1e2/0xb20 [ 52.887440] ip_queue_xmit+0x45/0x70 [ 52.891636] dccp_transmit_skb+0xb76/0x12a0 [ 52.896516] ? skb_unlink+0x117/0x1a0 [ 52.901029] dccp_xmit_packet+0x1a0/0x580 [ 52.905994] dccp_write_xmit+0x128/0x180 [ 52.910295] dccp_sendmsg+0x691/0xdb0 [ 52.914533] ? aa_sk_perm+0x182/0x740 [ 52.918738] ? dccp_disconnect+0xb00/0xb00 [ 52.923262] ? aa_af_perm+0x240/0x240 [ 52.927203] ? rw_copy_check_uvector+0x66/0x3b0 [ 52.932016] ? __kasan_check_write+0x14/0x20 [ 52.937184] inet_sendmsg+0xbd/0xe0 [ 52.941291] ? inet_send_prepare+0x3a0/0x3a0 [ 52.946120] sock_sendmsg+0xdf/0x110 [ 52.955087] ____sys_sendmsg+0x68d/0xae0 [ 52.959695] ? copy_msghdr_from_user+0xa3/0xf0 [ 52.964686] ? kernel_sendmsg+0x30/0x30 [ 52.968871] ? find_held_lock+0x36/0x1d0 [ 52.973407] ? __fget_files+0x28b/0x410 [ 52.978026] ___sys_sendmsg+0xe4/0x160 [ 52.982276] ? sendmsg_copy_msghdr+0x30/0x30 [ 52.987478] ? rcu_read_lock_held_common+0x170/0x170 [ 52.992863] ? __fget_files+0x2a5/0x410 [ 52.997841] ? __x64_sys_dup2+0x2e0/0x2e0 [ 53.003095] ? release_sock+0x122/0x180 [ 53.008629] ? trace_hardirqs_on+0x28/0x180 [ 53.014694] ? inet_release+0x1c0/0x1c0 [ 53.019789] ? release_sock+0x122/0x180 [ 53.024609] ? __fget_light+0x1b3/0x230 [ 53.032889] ? __fdget+0xe/0x10 [ 53.036484] __sys_sendmsg+0xd9/0x180 [ 53.040695] ? __sys_sendmsg_sock+0xa0/0xa0 [ 53.046139] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 53.051767] ? __sys_listen+0x1e8/0x230 [ 53.055902] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 53.061577] __x64_sys_sendmsg+0x73/0xb0 [ 53.065881] do_syscall_64+0xd0/0x630 [ 53.069884] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 53.077948] RIP: 0033:0x452f89 [ 53.081539] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.104557] RSP: 002b:00007f43ca38bc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 53.112904] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 53.120747] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 53.129134] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 53.137174] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 53.147136] R13: 00000000ffffffff R14: 00007f43ca38c6d4 R15: 0000000000000002 [ 53.157199] CPU: 0 PID: 4287 Comm: syz-executor4 Not tainted 5.7.0-rc5-syzkaller #0 [ 53.166730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.177578] Call Trace: [ 53.180684] [ 53.183028] dump_stack+0x12f/0x187 [ 53.187605] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 53.192962] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 53.201093] ? dccp_parse_options+0x333/0x1000 [ 53.206339] dccp_deliver_input_to_ccids+0xcc/0x220 [ 53.211731] dccp_rcv_established+0x49/0x70 [ 53.216367] dccp_v4_do_rcv+0xf4/0x160 [ 53.220814] __sk_receive_skb+0x2b6/0x9e0 [ 53.225115] ? sk_free+0x60/0x60 [ 53.228786] ? dccp_invalid_packet+0x3ec/0x750 [ 53.234835] dccp_v4_rcv+0xc62/0x1da3 [ 53.238681] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 53.243755] ip_local_deliver_finish+0x1ee/0x2e0 [ 53.248602] ip_local_deliver+0x306/0x450 [ 53.253373] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 53.259008] ? lock_downgrade+0x960/0x960 [ 53.263263] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 53.268865] ip_rcv_finish+0xb0/0x170 [ 53.272910] ip_rcv+0xcb/0x2f0 [ 53.276127] ? ip_local_deliver+0x450/0x450 [ 53.281025] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 53.286637] ? ip_local_deliver+0x450/0x450 [ 53.287945] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 53.291252] __netif_receive_skb_one_core+0x132/0x190 [ 53.291265] ? __netif_receive_skb_core+0x2900/0x2900 [ 53.291273] ? lock_release+0x960/0x960 [ 53.291285] ? process_backlog+0x3fe/0x700 [ 53.291293] ? net_rx_action+0x42d/0xde0 [ 53.291315] __netif_receive_skb+0x1f/0x1b0 [ 53.291329] process_backlog+0x1f1/0x700 [ 53.291338] ? __do_softirq+0x248/0x9a6 [ 53.344624] ? lockdep_hardirqs_on+0x19e/0x620 [ 53.349289] net_rx_action+0x42d/0xde0 [ 53.353863] ? __kasan_check_read+0x11/0x20 [ 53.358567] ? napi_busy_loop+0x6e0/0x6e0 [ 53.363280] ? rcu_is_watching+0x31/0x80 [ 53.367702] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 53.372981] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 53.378418] ? __do_softirq+0x1d9/0x9a6 [ 53.382702] ? ip_finish_output2+0x709/0x22a0 [ 53.387585] ? trace_hardirqs_on+0x28/0x180 [ 53.392794] __do_softirq+0x248/0x9a6 [ 53.397584] ? ip_finish_output2+0x709/0x22a0 [ 53.403532] do_softirq_own_stack+0x2a/0x40 [ 53.410028] [ 53.413017] do_softirq.part.17+0x11a/0x150 [ 53.418307] __local_bh_enable_ip+0x1ee/0x230 [ 53.423994] ip_finish_output2+0x72d/0x22a0 [ 53.429559] ? ip_frag_next+0xa10/0xa10 [ 53.434418] ? rcu_read_lock_held+0x9c/0xb0 [ 53.439917] ? rcu_read_lock_held_common+0x170/0x170 [ 53.445473] __ip_finish_output+0x401/0xa80 [ 53.450863] ? __ip_finish_output+0x401/0xa80 [ 53.455993] ip_finish_output+0x27/0x170 [ 53.460427] ip_output+0x1c6/0x560 [ 53.464477] ? ip_mc_output+0xd10/0xd10 [ 53.469693] ? __ip_finish_output+0xa80/0xa80 [ 53.475005] ? rcu_read_lock_held_common+0x170/0x170 [ 53.480346] ? rcu_read_lock_held+0x9c/0xb0 [ 53.484759] ip_local_out+0x7e/0x130 [ 53.488696] __ip_queue_xmit+0x700/0x1de0 [ 53.493038] ? __skb_checksum+0x7c0/0x7c0 [ 53.497480] ? skb_send_sock_locked+0x750/0x750 [ 53.502266] ? reqsk_fastopen_remove+0x560/0x560 [ 53.507337] ? dccp_insert_options+0x1e2/0xb20 [ 53.512050] ip_queue_xmit+0x45/0x70 [ 53.516169] dccp_transmit_skb+0xb76/0x12a0 [ 53.520631] ? skb_unlink+0x117/0x1a0 [ 53.524451] dccp_xmit_packet+0x1a0/0x580 [ 53.528788] dccp_write_xmit+0x128/0x180 [ 53.532899] dccp_sendmsg+0x691/0xdb0 [ 53.536872] ? aa_sk_perm+0x182/0x740 [ 53.540808] ? dccp_disconnect+0xb00/0xb00 [ 53.545147] ? aa_af_perm+0x240/0x240 [ 53.548945] ? rw_copy_check_uvector+0x66/0x3b0 [ 53.553693] ? __kasan_check_write+0x14/0x20 [ 53.558430] inet_sendmsg+0xbd/0xe0 [ 53.562423] ? inet_send_prepare+0x3a0/0x3a0 [ 53.567062] sock_sendmsg+0xdf/0x110 [ 53.570905] ____sys_sendmsg+0x68d/0xae0 [ 53.575112] ? copy_msghdr_from_user+0xa3/0xf0 [ 53.580013] ? kernel_sendmsg+0x30/0x30 [ 53.584084] ? find_held_lock+0x36/0x1d0 [ 53.588182] ? __fget_files+0x28b/0x410 [ 53.592159] ___sys_sendmsg+0xe4/0x160 [ 53.596091] ? sendmsg_copy_msghdr+0x30/0x30 [ 53.600655] ? rcu_read_lock_held_common+0x170/0x170 [ 53.605814] ? __fget_files+0x2a5/0x410 [ 53.609817] ? __x64_sys_dup2+0x2e0/0x2e0 [ 53.614101] ? __fget_light+0x1b3/0x230 [ 53.618159] ? __fdget+0xe/0x10 [ 53.621479] __sys_sendmsg+0xd9/0x180 [ 53.625542] ? __sys_sendmsg_sock+0xa0/0xa0 [ 53.629901] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 53.635373] ? __sched_text_start+0x8/0x8 [ 53.639700] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 53.645226] __x64_sys_sendmsg+0x73/0xb0 [ 53.649520] do_syscall_64+0xd0/0x630 [ 53.653327] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 53.658757] RIP: 0033:0x452f89 [ 53.662248] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.683000] RSP: 002b:00007f9659eaec58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 53.691582] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 53.699006] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 53.708251] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 53.715924] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 53.723979] R13: 00000000ffffffff R14: 00007f9659eaf6d4 R15: 0000000000000002 [ 53.732003] CPU: 1 PID: 4304 Comm: syz-executor1 Not tainted 5.7.0-rc5-syzkaller #0 [ 53.740462] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 53.740865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.740870] Call Trace: [ 53.740874] [ 53.740888] dump_stack+0x12f/0x187 [ 53.740909] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 53.779230] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 53.784677] ? dccp_parse_options+0x333/0x1000 [ 53.790033] dccp_deliver_input_to_ccids+0xcc/0x220 [ 53.795567] dccp_rcv_established+0x49/0x70 [ 53.800158] dccp_v4_do_rcv+0xf4/0x160 [ 53.804081] __sk_receive_skb+0x2b6/0x9e0 [ 53.808232] ? sk_free+0x60/0x60 [ 53.811608] ? dccp_invalid_packet+0x3ec/0x750 [ 53.816435] dccp_v4_rcv+0xc62/0x1da3 [ 53.820261] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 53.825111] ip_local_deliver_finish+0x1ee/0x2e0 [ 53.830217] ip_local_deliver+0x306/0x450 [ 53.834446] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 53.839600] ? lock_downgrade+0x960/0x960 [ 53.843760] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 53.848794] ip_rcv_finish+0xb0/0x170 [ 53.852609] ip_rcv+0xcb/0x2f0 [ 53.855806] ? ip_local_deliver+0x450/0x450 [ 53.860311] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 53.866031] ? ip_local_deliver+0x450/0x450 [ 53.870696] __netif_receive_skb_one_core+0x132/0x190 [ 53.876108] ? __netif_receive_skb_core+0x2900/0x2900 [ 53.881536] ? lock_release+0x960/0x960 [ 53.886253] ? process_backlog+0x3fe/0x700 [ 53.890482] ? net_rx_action+0x42d/0xde0 [ 53.894872] __netif_receive_skb+0x1f/0x1b0 [ 53.899192] process_backlog+0x1f1/0x700 [ 53.903746] ? __do_softirq+0x248/0x9a6 [ 53.908307] ? lockdep_hardirqs_on+0x19e/0x620 [ 53.913023] net_rx_action+0x42d/0xde0 [ 53.916911] ? __kasan_check_read+0x11/0x20 [ 53.921369] ? napi_busy_loop+0x6e0/0x6e0 [ 53.925548] ? rcu_is_watching+0x31/0x80 [ 53.929938] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 53.935502] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 53.941547] ? __do_softirq+0x1d9/0x9a6 [ 53.947467] ? ip_finish_output2+0x709/0x22a0 [ 53.952049] ? trace_hardirqs_on+0x28/0x180 [ 53.956415] __do_softirq+0x248/0x9a6 [ 53.960414] ? ip_finish_output2+0x709/0x22a0 [ 53.965297] do_softirq_own_stack+0x2a/0x40 [ 53.969707] [ 53.972030] do_softirq.part.17+0x11a/0x150 [ 53.976642] __local_bh_enable_ip+0x1ee/0x230 [ 53.981329] ip_finish_output2+0x72d/0x22a0 [ 53.986073] ? ip_frag_next+0xa10/0xa10 [ 53.990350] ? rcu_read_lock_held+0x9c/0xb0 [ 53.995449] ? rcu_read_lock_held_common+0x170/0x170 [ 54.000741] __ip_finish_output+0x401/0xa80 [ 54.005616] ? __ip_finish_output+0x401/0xa80 [ 54.010336] ip_finish_output+0x27/0x170 [ 54.014604] ip_output+0x1c6/0x560 [ 54.018998] ? ip_mc_output+0xd10/0xd10 [ 54.023923] ? __ip_finish_output+0xa80/0xa80 [ 54.028711] ? rcu_read_lock_held_common+0x170/0x170 [ 54.034071] ? rcu_read_lock_held+0x9c/0xb0 [ 54.039057] ip_local_out+0x7e/0x130 [ 54.043342] __ip_queue_xmit+0x700/0x1de0 [ 54.048444] ? __skb_checksum+0x7c0/0x7c0 [ 54.052937] ? skb_send_sock_locked+0x750/0x750 [ 54.057778] ? reqsk_fastopen_remove+0x560/0x560 [ 54.062645] ? dccp_insert_options+0x1e2/0xb20 [ 54.067375] ip_queue_xmit+0x45/0x70 [ 54.071081] dccp_transmit_skb+0xb76/0x12a0 [ 54.075398] ? skb_unlink+0x117/0x1a0 [ 54.079219] dccp_xmit_packet+0x1a0/0x580 [ 54.083362] dccp_write_xmit+0x128/0x180 [ 54.087419] dccp_sendmsg+0x691/0xdb0 [ 54.091217] ? aa_sk_perm+0x182/0x740 [ 54.095010] ? dccp_disconnect+0xb00/0xb00 [ 54.099232] ? aa_af_perm+0x240/0x240 [ 54.103722] ? rw_copy_check_uvector+0x66/0x3b0 [ 54.108378] ? __kasan_check_write+0x14/0x20 [ 54.112791] inet_sendmsg+0xbd/0xe0 [ 54.116680] ? inet_send_prepare+0x3a0/0x3a0 [ 54.121071] sock_sendmsg+0xdf/0x110 [ 54.124773] ____sys_sendmsg+0x68d/0xae0 [ 54.128851] ? copy_msghdr_from_user+0xa3/0xf0 [ 54.133527] ? kernel_sendmsg+0x30/0x30 [ 54.137485] ? find_held_lock+0x36/0x1d0 [ 54.141544] ? __fget_files+0x28b/0x410 [ 54.145519] ___sys_sendmsg+0xe4/0x160 [ 54.149391] ? sendmsg_copy_msghdr+0x30/0x30 [ 54.157107] ? rcu_read_lock_held_common+0x170/0x170 [ 54.162725] ? __fget_files+0x2a5/0x410 [ 54.166712] ? __x64_sys_dup2+0x2e0/0x2e0 [ 54.170861] ? __fget_light+0x1b3/0x230 [ 54.174820] ? __fdget+0xe/0x10 [ 54.178540] __sys_sendmsg+0xd9/0x180 [ 54.182323] ? __sys_sendmsg_sock+0xa0/0xa0 [ 54.186643] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 54.191921] ? __sched_text_start+0x8/0x8 [ 54.196082] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 54.201439] __x64_sys_sendmsg+0x73/0xb0 [ 54.205502] do_syscall_64+0xd0/0x630 [ 54.209307] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 54.214476] RIP: 0033:0x452f89 [ 54.217650] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.236549] RSP: 002b:00007fdf9cfcfc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 54.244237] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 54.251687] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 54.259039] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 54.266657] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 54.274713] R13: 00000000ffffffff R14: 00007fdf9cfd06d4 R15: 0000000000000002 [ 54.285852] CPU: 0 PID: 4307 Comm: syz-executor5 Not tainted 5.7.0-rc5-syzkaller #0 [ 54.293666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.303019] Call Trace: [ 54.305587] [ 54.307731] dump_stack+0x12f/0x187 [ 54.311474] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 54.316668] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 54.321548] ? dccp_parse_options+0x333/0x1000 [ 54.326216] dccp_deliver_input_to_ccids+0xcc/0x220 [ 54.331235] dccp_rcv_established+0x49/0x70 [ 54.337198] dccp_v4_do_rcv+0xf4/0x160 [ 54.341090] __sk_receive_skb+0x2b6/0x9e0 [ 54.345233] ? sk_free+0x60/0x60 [ 54.349302] ? dccp_invalid_packet+0x3ec/0x750 [ 54.355181] dccp_v4_rcv+0xc62/0x1da3 [ 54.358991] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 54.363748] ip_local_deliver_finish+0x1ee/0x2e0 [ 54.368502] ip_local_deliver+0x306/0x450 [ 54.372654] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 54.377680] ? lock_downgrade+0x960/0x960 [ 54.381870] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 54.386800] ip_rcv_finish+0xb0/0x170 [ 54.390697] ip_rcv+0xcb/0x2f0 [ 54.393985] ? ip_local_deliver+0x450/0x450 [ 54.398553] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 54.403904] ? ip_local_deliver+0x450/0x450 [ 54.408556] __netif_receive_skb_one_core+0x132/0x190 [ 54.413730] ? __netif_receive_skb_core+0x2900/0x2900 [ 54.418901] ? lock_release+0x960/0x960 [ 54.422855] ? process_backlog+0x3fe/0x700 [ 54.427067] ? net_rx_action+0x42d/0xde0 [ 54.431126] __netif_receive_skb+0x1f/0x1b0 [ 54.435432] process_backlog+0x1f1/0x700 [ 54.439469] ? __do_softirq+0x248/0x9a6 [ 54.443424] ? lockdep_hardirqs_on+0x19e/0x620 [ 54.447999] net_rx_action+0x42d/0xde0 [ 54.451869] ? __kasan_check_read+0x11/0x20 [ 54.456177] ? napi_busy_loop+0x6e0/0x6e0 [ 54.460302] ? rcu_is_watching+0x31/0x80 [ 54.464365] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 54.469450] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 54.474707] ? __do_softirq+0x1d9/0x9a6 [ 54.478665] ? ip_finish_output2+0x709/0x22a0 [ 54.483148] ? trace_hardirqs_on+0x28/0x180 [ 54.487464] __do_softirq+0x248/0x9a6 [ 54.491256] ? ip_finish_output2+0x709/0x22a0 [ 54.495735] do_softirq_own_stack+0x2a/0x40 [ 54.500033] [ 54.502248] do_softirq.part.17+0x11a/0x150 [ 54.506551] __local_bh_enable_ip+0x1ee/0x230 [ 54.511026] ip_finish_output2+0x72d/0x22a0 [ 54.515347] ? ip_frag_next+0xa10/0xa10 [ 54.519302] ? rcu_read_lock_held+0x9c/0xb0 [ 54.523605] ? rcu_read_lock_held_common+0x170/0x170 [ 54.528717] __ip_finish_output+0x401/0xa80 [ 54.533022] ? __ip_finish_output+0x401/0xa80 [ 54.537534] ip_finish_output+0x27/0x170 [ 54.541587] ip_output+0x1c6/0x560 [ 54.545144] ? ip_mc_output+0xd10/0xd10 [ 54.549103] ? __ip_finish_output+0xa80/0xa80 [ 54.553577] ? rcu_read_lock_held_common+0x170/0x170 [ 54.558671] ? rcu_read_lock_held+0x9c/0xb0 [ 54.562977] ip_local_out+0x7e/0x130 [ 54.566763] __ip_queue_xmit+0x700/0x1de0 [ 54.570888] ? __skb_checksum+0x7c0/0x7c0 [ 54.575146] ? skb_send_sock_locked+0x750/0x750 [ 54.580143] ? reqsk_fastopen_remove+0x560/0x560 [ 54.584884] ? dccp_insert_options+0x1e2/0xb20 [ 54.589463] ip_queue_xmit+0x45/0x70 [ 54.593172] dccp_transmit_skb+0xb76/0x12a0 [ 54.597494] ? skb_unlink+0x117/0x1a0 [ 54.601314] dccp_xmit_packet+0x1a0/0x580 [ 54.605463] dccp_write_xmit+0x128/0x180 [ 54.609542] dccp_sendmsg+0x691/0xdb0 [ 54.613345] ? aa_sk_perm+0x182/0x740 [ 54.617803] ? dccp_disconnect+0xb00/0xb00 [ 54.622026] ? aa_af_perm+0x240/0x240 [ 54.625833] ? rw_copy_check_uvector+0x66/0x3b0 [ 54.630482] ? __kasan_check_write+0x14/0x20 [ 54.634890] inet_sendmsg+0xbd/0xe0 [ 54.638502] ? inet_send_prepare+0x3a0/0x3a0 [ 54.642910] sock_sendmsg+0xdf/0x110 [ 54.646611] ____sys_sendmsg+0x68d/0xae0 [ 54.650672] ? copy_msghdr_from_user+0xa3/0xf0 [ 54.655338] ? kernel_sendmsg+0x30/0x30 [ 54.659297] ? find_held_lock+0x36/0x1d0 [ 54.663355] ? __fget_files+0x28b/0x410 [ 54.667329] ___sys_sendmsg+0xe4/0x160 [ 54.671202] ? sendmsg_copy_msghdr+0x30/0x30 [ 54.675595] ? rcu_read_lock_held_common+0x170/0x170 [ 54.680712] ? __fget_files+0x2a5/0x410 [ 54.684767] ? __x64_sys_dup2+0x2e0/0x2e0 [ 54.689110] ? __kasan_check_read+0x11/0x20 [ 54.693417] ? __lock_acquire+0x1924/0x4180 [ 54.697754] ? __fget_light+0x1b3/0x230 [ 54.701725] ? __fdget+0xe/0x10 [ 54.704997] __sys_sendmsg+0xd9/0x180 [ 54.708816] ? __sys_sendmsg_sock+0xa0/0xa0 [ 54.713133] ? rcu_is_watching+0x31/0x80 [ 54.717185] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 54.722018] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 54.727294] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 54.732648] __x64_sys_sendmsg+0x73/0xb0 [ 54.737654] do_syscall_64+0xd0/0x630 [ 54.741532] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 54.746704] RIP: 0033:0x452f89 [ 54.749878] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.768757] RSP: 002b:00007fd4a6551c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 54.776455] RAX: ffffffffffffffda RBX: 000000000071c010 RCX: 0000000000452f89 [ 54.783706] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 2020/05/16 16:01:41 executed programs: 19 [ 54.790954] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 54.798202] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 54.805450] R13: 00000000ffffffff R14: 00007fd4a65526d4 R15: 0000000000000008 [ 55.007129] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 55.020459] CPU: 0 PID: 4351 Comm: syz-executor1 Not tainted 5.7.0-rc5-syzkaller #0 [ 55.028484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.037858] Call Trace: [ 55.040434] [ 55.042582] dump_stack+0x12f/0x187 [ 55.046222] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 55.051458] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 55.056253] ? dccp_parse_options+0x333/0x1000 [ 55.060961] dccp_deliver_input_to_ccids+0xcc/0x220 [ 55.066015] dccp_rcv_established+0x49/0x70 [ 55.070398] dccp_v4_do_rcv+0xf4/0x160 [ 55.074302] __sk_receive_skb+0x2b6/0x9e0 [ 55.078570] ? sk_free+0x60/0x60 [ 55.081944] ? dccp_invalid_packet+0x3ec/0x750 [ 55.086547] dccp_v4_rcv+0xc62/0x1da3 [ 55.090390] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 55.095171] ip_local_deliver_finish+0x1ee/0x2e0 [ 55.100896] ip_local_deliver+0x306/0x450 [ 55.105055] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 55.109990] ? lock_downgrade+0x960/0x960 [ 55.114193] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 55.117790] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 55.119750] ip_rcv_finish+0xb0/0x170 [ 55.119764] ip_rcv+0xcb/0x2f0 [ 55.119778] ? ip_local_deliver+0x450/0x450 [ 55.119796] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 55.119818] ? ip_local_deliver+0x450/0x450 [ 55.119833] __netif_receive_skb_one_core+0x132/0x190 [ 55.159238] ? __netif_receive_skb_core+0x2900/0x2900 [ 55.164425] ? lock_release+0x960/0x960 [ 55.168397] ? process_backlog+0x3fe/0x700 [ 55.172631] ? net_rx_action+0x42d/0xde0 [ 55.176687] __netif_receive_skb+0x1f/0x1b0 [ 55.180997] process_backlog+0x1f1/0x700 [ 55.185040] ? __do_softirq+0x248/0x9a6 [ 55.189016] ? lockdep_hardirqs_on+0x19e/0x620 [ 55.193639] net_rx_action+0x42d/0xde0 [ 55.197527] ? __kasan_check_read+0x11/0x20 [ 55.201858] ? napi_busy_loop+0x6e0/0x6e0 [ 55.205986] ? rcu_is_watching+0x31/0x80 [ 55.210052] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 55.214893] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 55.220167] ? __do_softirq+0x1d9/0x9a6 [ 55.224212] ? ip_finish_output2+0x709/0x22a0 [ 55.228710] ? trace_hardirqs_on+0x28/0x180 [ 55.233024] __do_softirq+0x248/0x9a6 [ 55.236831] ? ip_finish_output2+0x709/0x22a0 [ 55.241314] do_softirq_own_stack+0x2a/0x40 [ 55.245616] [ 55.247841] do_softirq.part.17+0x11a/0x150 [ 55.252334] __local_bh_enable_ip+0x1ee/0x230 [ 55.256817] ip_finish_output2+0x72d/0x22a0 [ 55.261144] ? ip_frag_next+0xa10/0xa10 [ 55.265108] ? rcu_read_lock_held+0x9c/0xb0 [ 55.269440] ? rcu_read_lock_held_common+0x170/0x170 [ 55.274538] __ip_finish_output+0x401/0xa80 [ 55.278856] ? __ip_finish_output+0x401/0xa80 [ 55.283346] ip_finish_output+0x27/0x170 [ 55.287416] ip_output+0x1c6/0x560 [ 55.290959] ? ip_mc_output+0xd10/0xd10 [ 55.294935] ? __ip_finish_output+0xa80/0xa80 [ 55.299412] ? rcu_read_lock_held_common+0x170/0x170 [ 55.304501] ? rcu_read_lock_held+0x9c/0xb0 [ 55.308830] ip_local_out+0x7e/0x130 [ 55.312736] __ip_queue_xmit+0x700/0x1de0 [ 55.316955] ? __skb_checksum+0x7c0/0x7c0 [ 55.321099] ? skb_send_sock_locked+0x750/0x750 [ 55.325759] ? reqsk_fastopen_remove+0x560/0x560 [ 55.330493] ? dccp_insert_options+0x1e2/0xb20 [ 55.335164] ip_queue_xmit+0x45/0x70 [ 55.338880] dccp_transmit_skb+0xb76/0x12a0 [ 55.343195] ? skb_unlink+0x117/0x1a0 [ 55.347010] dccp_xmit_packet+0x1a0/0x580 [ 55.351150] dccp_write_xmit+0x128/0x180 [ 55.355206] dccp_sendmsg+0x691/0xdb0 [ 55.358993] ? aa_sk_perm+0x182/0x740 [ 55.362785] ? dccp_disconnect+0xb00/0xb00 [ 55.367202] ? aa_af_perm+0x240/0x240 [ 55.370994] ? rw_copy_check_uvector+0x66/0x3b0 [ 55.375752] ? __kasan_check_write+0x14/0x20 [ 55.380272] inet_sendmsg+0xbd/0xe0 [ 55.383897] ? inet_send_prepare+0x3a0/0x3a0 [ 55.388289] sock_sendmsg+0xdf/0x110 [ 55.392080] ____sys_sendmsg+0x68d/0xae0 [ 55.396133] ? copy_msghdr_from_user+0xa3/0xf0 [ 55.400874] ? kernel_sendmsg+0x30/0x30 [ 55.405020] ? find_held_lock+0x36/0x1d0 [ 55.409163] ? __fget_files+0x28b/0x410 [ 55.413141] ___sys_sendmsg+0xe4/0x160 [ 55.417025] ? sendmsg_copy_msghdr+0x30/0x30 [ 55.422393] ? rcu_read_lock_held_common+0x170/0x170 [ 55.427494] ? __fget_files+0x2a5/0x410 [ 55.431494] ? __x64_sys_dup2+0x2e0/0x2e0 [ 55.435739] ? __fget_light+0x1b3/0x230 [ 55.439722] ? __fdget+0xe/0x10 [ 55.443095] __sys_sendmsg+0xd9/0x180 [ 55.446892] ? __sys_sendmsg_sock+0xa0/0xa0 [ 55.451220] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 55.456491] ? __sched_text_start+0x8/0x8 [ 55.460729] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 55.466098] __x64_sys_sendmsg+0x73/0xb0 [ 55.473440] do_syscall_64+0xd0/0x630 [ 55.477234] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 55.482538] RIP: 0033:0x452f89 [ 55.485740] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 55.504816] RSP: 002b:00007fdf9cfcfc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 55.512522] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 55.520039] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 55.527298] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 55.534550] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 55.541894] R13: 00000000ffffffff R14: 00007fdf9cfd06d4 R15: 0000000000000002 [ 55.549201] CPU: 1 PID: 4373 Comm: syz-executor2 Not tainted 5.7.0-rc5-syzkaller #0 [ 55.557036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.566392] Call Trace: [ 55.568976] [ 55.571130] dump_stack+0x12f/0x187 [ 55.574780] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 55.579990] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 55.584924] ? dccp_parse_options+0x333/0x1000 [ 55.589547] dccp_deliver_input_to_ccids+0xcc/0x220 [ 55.594578] dccp_rcv_established+0x49/0x70 [ 55.598907] dccp_v4_do_rcv+0xf4/0x160 [ 55.602824] __sk_receive_skb+0x2b6/0x9e0 [ 55.606998] ? sk_free+0x60/0x60 [ 55.610382] ? dccp_invalid_packet+0x3ec/0x750 [ 55.615055] dccp_v4_rcv+0xc62/0x1da3 [ 55.618886] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 55.623668] ip_local_deliver_finish+0x1ee/0x2e0 [ 55.628530] ip_local_deliver+0x306/0x450 [ 55.632693] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 55.637629] ? lock_downgrade+0x960/0x960 [ 55.641794] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 55.646786] ip_rcv_finish+0xb0/0x170 [ 55.650597] ip_rcv+0xcb/0x2f0 [ 55.653801] ? ip_local_deliver+0x450/0x450 [ 55.658136] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 55.660509] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 55.663699] ? ip_local_deliver+0x450/0x450 [ 55.663713] __netif_receive_skb_one_core+0x132/0x190 [ 55.663726] ? __netif_receive_skb_core+0x2900/0x2900 [ 55.663734] ? lock_release+0x960/0x960 [ 55.663746] ? process_backlog+0x3fe/0x700 [ 55.663754] ? net_rx_action+0x42d/0xde0 [ 55.663775] __netif_receive_skb+0x1f/0x1b0 [ 55.663788] process_backlog+0x1f1/0x700 [ 55.712626] ? __do_softirq+0x248/0x9a6 [ 55.716586] ? lockdep_hardirqs_on+0x19e/0x620 [ 55.721184] net_rx_action+0x42d/0xde0 [ 55.725069] ? __kasan_check_read+0x11/0x20 [ 55.729409] ? napi_busy_loop+0x6e0/0x6e0 [ 55.733536] ? rcu_is_watching+0x31/0x80 [ 55.737586] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 55.742416] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 55.747744] ? __do_softirq+0x1d9/0x9a6 [ 55.751713] ? ip_finish_output2+0x709/0x22a0 [ 55.756207] ? trace_hardirqs_on+0x28/0x180 [ 55.760536] __do_softirq+0x248/0x9a6 [ 55.764447] ? ip_finish_output2+0x709/0x22a0 [ 55.769163] do_softirq_own_stack+0x2a/0x40 [ 55.773464] [ 55.775705] do_softirq.part.17+0x11a/0x150 [ 55.780099] __local_bh_enable_ip+0x1ee/0x230 [ 55.784581] ip_finish_output2+0x72d/0x22a0 [ 55.788920] ? ip_frag_next+0xa10/0xa10 [ 55.792992] ? rcu_read_lock_held+0x9c/0xb0 [ 55.797297] ? rcu_read_lock_held_common+0x170/0x170 [ 55.802491] __ip_finish_output+0x401/0xa80 [ 55.806990] ? __ip_finish_output+0x401/0xa80 [ 55.811744] ip_finish_output+0x27/0x170 [ 55.815881] ip_output+0x1c6/0x560 [ 55.819415] ? ip_mc_output+0xd10/0xd10 [ 55.823392] ? __ip_finish_output+0xa80/0xa80 [ 55.827869] ? rcu_read_lock_held_common+0x170/0x170 [ 55.832960] ? rcu_read_lock_held+0x9c/0xb0 [ 55.837294] ip_local_out+0x7e/0x130 [ 55.841517] __ip_queue_xmit+0x700/0x1de0 [ 55.845649] ? __skb_checksum+0x7c0/0x7c0 [ 55.849979] ? skb_send_sock_locked+0x750/0x750 [ 55.854735] ? reqsk_fastopen_remove+0x560/0x560 [ 55.859476] ? dccp_insert_options+0x1e2/0xb20 [ 55.864070] ip_queue_xmit+0x45/0x70 [ 55.867771] dccp_transmit_skb+0xb76/0x12a0 [ 55.872103] ? skb_unlink+0x117/0x1a0 [ 55.876007] dccp_xmit_packet+0x1a0/0x580 [ 55.880170] dccp_write_xmit+0x128/0x180 [ 55.884314] dccp_sendmsg+0x691/0xdb0 [ 55.888107] ? aa_sk_perm+0x182/0x740 [ 55.892176] ? dccp_disconnect+0xb00/0xb00 [ 55.896403] ? aa_af_perm+0x240/0x240 [ 55.900549] ? rw_copy_check_uvector+0x66/0x3b0 [ 55.905205] ? __kasan_check_write+0x14/0x20 [ 55.909737] inet_sendmsg+0xbd/0xe0 [ 55.913635] ? inet_send_prepare+0x3a0/0x3a0 [ 55.918903] sock_sendmsg+0xdf/0x110 [ 55.922728] ____sys_sendmsg+0x68d/0xae0 [ 55.926795] ? copy_msghdr_from_user+0xa3/0xf0 [ 55.931384] ? kernel_sendmsg+0x30/0x30 [ 55.935365] ? find_held_lock+0x36/0x1d0 [ 55.939437] ? __fget_files+0x28b/0x410 [ 55.943413] ___sys_sendmsg+0xe4/0x160 [ 55.948105] ? sendmsg_copy_msghdr+0x30/0x30 [ 55.952505] ? rcu_read_lock_held_common+0x170/0x170 [ 55.957622] ? __fget_files+0x2a5/0x410 [ 55.961614] ? __x64_sys_dup2+0x2e0/0x2e0 [ 55.965765] ? __fget_light+0x1b3/0x230 [ 55.970698] ? __fdget+0xe/0x10 [ 55.973976] __sys_sendmsg+0xd9/0x180 [ 55.977776] ? __sys_sendmsg_sock+0xa0/0xa0 [ 55.982199] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 55.987546] ? __sched_text_start+0x8/0x8 [ 55.991703] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 55.997077] __x64_sys_sendmsg+0x73/0xb0 [ 56.001137] do_syscall_64+0xd0/0x630 [ 56.005289] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 56.010465] RIP: 0033:0x452f89 [ 56.013651] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 56.034278] RSP: 002b:00007f43ca38bc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 56.041986] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 56.049253] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 56.056535] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 56.063997] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 56.072383] R13: 00000000ffffffff R14: 00007f43ca38c6d4 R15: 0000000000000002 [ 56.079674] CPU: 0 PID: 4386 Comm: syz-executor5 Not tainted 5.7.0-rc5-syzkaller #0 [ 56.087483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.096846] Call Trace: [ 56.099426] [ 56.101577] dump_stack+0x12f/0x187 [ 56.105224] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 56.110522] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 56.115284] ? dccp_parse_options+0x333/0x1000 [ 56.120421] dccp_deliver_input_to_ccids+0xcc/0x220 [ 56.125494] dccp_rcv_established+0x49/0x70 [ 56.130172] dccp_v4_do_rcv+0xf4/0x160 [ 56.134073] __sk_receive_skb+0x2b6/0x9e0 [ 56.138244] ? sk_free+0x60/0x60 [ 56.141635] ? dccp_invalid_packet+0x3ec/0x750 [ 56.146243] dccp_v4_rcv+0xc62/0x1da3 [ 56.150088] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 56.154868] ip_local_deliver_finish+0x1ee/0x2e0 [ 56.159669] ip_local_deliver+0x306/0x450 [ 56.163843] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 56.168777] ? lock_downgrade+0x960/0x960 [ 56.172941] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 56.177899] ip_rcv_finish+0xb0/0x170 [ 56.181712] ip_rcv+0xcb/0x2f0 [ 56.184943] ? ip_local_deliver+0x450/0x450 [ 56.189275] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 56.195013] ? ip_local_deliver+0x450/0x450 [ 56.199358] __netif_receive_skb_one_core+0x132/0x190 [ 56.205152] ? __netif_receive_skb_core+0x2900/0x2900 [ 56.210348] ? lock_release+0x960/0x960 [ 56.214336] ? process_backlog+0x3fe/0x700 [ 56.218676] ? net_rx_action+0x42d/0xde0 [ 56.222796] __netif_receive_skb+0x1f/0x1b0 [ 56.227317] process_backlog+0x1f1/0x700 [ 56.231384] ? __do_softirq+0x248/0x9a6 [ 56.235384] ? lockdep_hardirqs_on+0x19e/0x620 [ 56.240016] net_rx_action+0x42d/0xde0 [ 56.243923] ? __kasan_check_read+0x11/0x20 [ 56.248273] ? napi_busy_loop+0x6e0/0x6e0 [ 56.252466] ? rcu_is_watching+0x31/0x80 [ 56.256559] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 56.262638] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 56.267928] ? __do_softirq+0x1d9/0x9a6 [ 56.271920] ? ip_finish_output2+0x709/0x22a0 [ 56.276425] ? trace_hardirqs_on+0x28/0x180 [ 56.280939] __do_softirq+0x248/0x9a6 [ 56.284873] ? ip_finish_output2+0x709/0x22a0 [ 56.289664] do_softirq_own_stack+0x2a/0x40 [ 56.294517] [ 56.296853] do_softirq.part.17+0x11a/0x150 [ 56.301527] __local_bh_enable_ip+0x1ee/0x230 [ 56.306491] ip_finish_output2+0x72d/0x22a0 [ 56.310870] ? ip_frag_next+0xa10/0xa10 [ 56.314860] ? rcu_read_lock_held+0x9c/0xb0 [ 56.319284] ? rcu_read_lock_held_common+0x170/0x170 [ 56.324973] __ip_finish_output+0x401/0xa80 [ 56.329797] ? __ip_finish_output+0x401/0xa80 [ 56.334508] ip_finish_output+0x27/0x170 [ 56.338771] ip_output+0x1c6/0x560 [ 56.342328] ? ip_mc_output+0xd10/0xd10 [ 56.346754] ? __ip_finish_output+0xa80/0xa80 [ 56.351544] ? rcu_read_lock_held_common+0x170/0x170 [ 56.356746] ? rcu_read_lock_held+0x9c/0xb0 [ 56.361086] ip_local_out+0x7e/0x130 [ 56.364939] __ip_queue_xmit+0x700/0x1de0 [ 56.369093] ? __skb_checksum+0x7c0/0x7c0 [ 56.373260] ? skb_send_sock_locked+0x750/0x750 [ 56.377946] ? reqsk_fastopen_remove+0x560/0x560 [ 56.382880] ? dccp_insert_options+0x1e2/0xb20 [ 56.388090] ip_queue_xmit+0x45/0x70 [ 56.391859] dccp_transmit_skb+0xb76/0x12a0 [ 56.396540] ? skb_unlink+0x117/0x1a0 [ 56.400376] dccp_xmit_packet+0x1a0/0x580 [ 56.405009] dccp_write_xmit+0x128/0x180 [ 56.410720] dccp_sendmsg+0x691/0xdb0 [ 56.414840] ? aa_sk_perm+0x182/0x740 [ 56.418754] ? dccp_disconnect+0xb00/0xb00 [ 56.423100] ? aa_af_perm+0x240/0x240 [ 56.426908] ? rw_copy_check_uvector+0x66/0x3b0 [ 56.431676] ? __kasan_check_write+0x14/0x20 [ 56.436318] inet_sendmsg+0xbd/0xe0 [ 56.440300] ? inet_send_prepare+0x3a0/0x3a0 [ 56.445067] sock_sendmsg+0xdf/0x110 [ 56.448918] ____sys_sendmsg+0x68d/0xae0 [ 56.453342] ? copy_msghdr_from_user+0xa3/0xf0 [ 56.458321] ? kernel_sendmsg+0x30/0x30 [ 56.462306] ? find_held_lock+0x36/0x1d0 [ 56.466653] ? __fget_files+0x28b/0x410 [ 56.471957] ___sys_sendmsg+0xe4/0x160 [ 56.476236] ? sendmsg_copy_msghdr+0x30/0x30 [ 56.481029] ? rcu_read_lock_held_common+0x170/0x170 [ 56.486453] ? __fget_files+0x2a5/0x410 [ 56.490630] ? __x64_sys_dup2+0x2e0/0x2e0 [ 56.494808] ? __fget_light+0x1b3/0x230 [ 56.498811] ? __fdget+0xe/0x10 [ 56.502126] __sys_sendmsg+0xd9/0x180 [ 56.505930] ? __sys_sendmsg_sock+0xa0/0xa0 [ 56.510258] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 56.515520] ? __sched_text_start+0x8/0x8 [ 56.519679] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 56.525045] __x64_sys_sendmsg+0x73/0xb0 [ 56.529140] do_syscall_64+0xd0/0x630 [ 56.532927] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 56.538112] RIP: 0033:0x452f89 [ 56.541417] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 56.560878] RSP: 002b:00007fd4a6572c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 56.568573] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 56.575831] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 56.583346] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 56.590698] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 56.597950] R13: 00000000ffffffff R14: 00007fd4a65736d4 R15: 0000000000000002 [ 56.651983] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 56.665376] CPU: 0 PID: 4452 Comm: syz-executor5 Not tainted 5.7.0-rc5-syzkaller #0 [ 56.673195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.682678] Call Trace: [ 56.685360] [ 56.686261] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 56.687531] dump_stack+0x12f/0x187 [ 56.687556] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 56.687576] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 56.687584] ? dccp_parse_options+0x333/0x1000 [ 56.687611] dccp_deliver_input_to_ccids+0xcc/0x220 [ 56.687624] dccp_rcv_established+0x49/0x70 [ 56.729409] dccp_v4_do_rcv+0xf4/0x160 [ 56.733296] __sk_receive_skb+0x2b6/0x9e0 [ 56.737451] ? sk_free+0x60/0x60 [ 56.741239] ? dccp_invalid_packet+0x3ec/0x750 [ 56.745932] dccp_v4_rcv+0xc62/0x1da3 [ 56.749745] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 56.754496] ip_local_deliver_finish+0x1ee/0x2e0 [ 56.759242] ip_local_deliver+0x306/0x450 [ 56.763376] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 56.768291] ? lock_downgrade+0x960/0x960 [ 56.772442] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 56.777371] ip_rcv_finish+0xb0/0x170 [ 56.781158] ip_rcv+0xcb/0x2f0 [ 56.784349] ? ip_local_deliver+0x450/0x450 [ 56.788663] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 56.794051] ? ip_local_deliver+0x450/0x450 [ 56.798370] __netif_receive_skb_one_core+0x132/0x190 [ 56.803638] ? __netif_receive_skb_core+0x2900/0x2900 [ 56.808903] ? lock_release+0x960/0x960 [ 56.812968] ? process_backlog+0x3fe/0x700 [ 56.817189] ? net_rx_action+0x42d/0xde0 [ 56.821262] __netif_receive_skb+0x1f/0x1b0 [ 56.825572] process_backlog+0x1f1/0x700 [ 56.829628] ? __do_softirq+0x248/0x9a6 [ 56.833677] ? lockdep_hardirqs_on+0x19e/0x620 [ 56.838265] net_rx_action+0x42d/0xde0 [ 56.842221] ? __kasan_check_read+0x11/0x20 [ 56.846537] ? napi_busy_loop+0x6e0/0x6e0 [ 56.850693] ? rcu_is_watching+0x31/0x80 [ 56.854754] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 56.859585] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 56.864850] ? __do_softirq+0x1d9/0x9a6 [ 56.868820] ? ip_finish_output2+0x709/0x22a0 [ 56.873306] ? trace_hardirqs_on+0x28/0x180 [ 56.877716] __do_softirq+0x248/0x9a6 [ 56.881519] ? ip_finish_output2+0x709/0x22a0 [ 56.886007] do_softirq_own_stack+0x2a/0x40 [ 56.890326] [ 56.892552] do_softirq.part.17+0x11a/0x150 [ 56.896869] __local_bh_enable_ip+0x1ee/0x230 [ 56.901376] ip_finish_output2+0x72d/0x22a0 [ 56.905699] ? ip_frag_next+0xa10/0xa10 [ 56.909661] ? rcu_read_lock_held+0x9c/0xb0 [ 56.913979] ? rcu_read_lock_held_common+0x170/0x170 [ 56.919098] __ip_finish_output+0x401/0xa80 [ 56.923420] ? __ip_finish_output+0x401/0xa80 [ 56.927911] ip_finish_output+0x27/0x170 [ 56.931974] ip_output+0x1c6/0x560 [ 56.935517] ? ip_mc_output+0xd10/0xd10 [ 56.939480] ? __ip_finish_output+0xa80/0xa80 [ 56.944045] ? rcu_read_lock_held_common+0x170/0x170 [ 56.949145] ? rcu_read_lock_held+0x9c/0xb0 [ 56.953462] ip_local_out+0x7e/0x130 [ 56.957202] __ip_queue_xmit+0x700/0x1de0 [ 56.961431] ? __skb_checksum+0x7c0/0x7c0 [ 56.965567] ? skb_send_sock_locked+0x750/0x750 [ 56.970322] ? reqsk_fastopen_remove+0x560/0x560 [ 56.975105] ? dccp_insert_options+0x1e2/0xb20 [ 56.979682] ip_queue_xmit+0x45/0x70 [ 56.983399] dccp_transmit_skb+0xb76/0x12a0 [ 56.987723] ? skb_unlink+0x117/0x1a0 [ 56.991799] dccp_xmit_packet+0x1a0/0x580 [ 56.995957] dccp_write_xmit+0x128/0x180 [ 57.000010] dccp_sendmsg+0x691/0xdb0 [ 57.003796] ? aa_sk_perm+0x182/0x740 [ 57.007593] ? dccp_disconnect+0xb00/0xb00 [ 57.011815] ? aa_af_perm+0x240/0x240 [ 57.015698] ? rw_copy_check_uvector+0x66/0x3b0 [ 57.020962] ? __kasan_check_write+0x14/0x20 [ 57.025403] inet_sendmsg+0xbd/0xe0 [ 57.029018] ? inet_send_prepare+0x3a0/0x3a0 [ 57.033416] sock_sendmsg+0xdf/0x110 [ 57.037118] ____sys_sendmsg+0x68d/0xae0 [ 57.041174] ? copy_msghdr_from_user+0xa3/0xf0 [ 57.045743] ? kernel_sendmsg+0x30/0x30 [ 57.049718] ? find_held_lock+0x36/0x1d0 [ 57.053792] ? __fget_files+0x28b/0x410 [ 57.057795] ___sys_sendmsg+0xe4/0x160 [ 57.061674] ? sendmsg_copy_msghdr+0x30/0x30 [ 57.066087] ? rcu_read_lock_held_common+0x170/0x170 [ 57.071219] ? __fget_files+0x2a5/0x410 [ 57.075235] ? __x64_sys_dup2+0x2e0/0x2e0 [ 57.079605] ? __fget_light+0x1b3/0x230 [ 57.083586] ? __fdget+0xe/0x10 [ 57.087235] __sys_sendmsg+0xd9/0x180 [ 57.091239] ? __sys_sendmsg_sock+0xa0/0xa0 [ 57.095738] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 57.102697] ? __sched_text_start+0x8/0x8 [ 57.106872] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 57.113801] __x64_sys_sendmsg+0x73/0xb0 [ 57.117859] do_syscall_64+0xd0/0x630 [ 57.121846] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 57.127490] RIP: 0033:0x452f89 [ 57.130671] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.150359] RSP: 002b:00007fd4a6572c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 57.158437] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 57.166319] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 57.173665] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 57.184246] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 57.191613] R13: 00000000ffffffff R14: 00007fd4a65736d4 R15: 0000000000000002 [ 57.199466] CPU: 1 PID: 4456 Comm: syz-executor2 Not tainted 5.7.0-rc5-syzkaller #0 [ 57.208356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.208448] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 57.218148] Call Trace: [ 57.218153] [ 57.218166] dump_stack+0x12f/0x187 [ 57.218189] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 57.218207] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 57.252768] ? dccp_parse_options+0x333/0x1000 [ 57.258243] dccp_deliver_input_to_ccids+0xcc/0x220 [ 57.263352] dccp_rcv_established+0x49/0x70 [ 57.267749] dccp_v4_do_rcv+0xf4/0x160 [ 57.271641] __sk_receive_skb+0x2b6/0x9e0 [ 57.275790] ? sk_free+0x60/0x60 [ 57.279158] ? dccp_invalid_packet+0x3ec/0x750 [ 57.284175] dccp_v4_rcv+0xc62/0x1da3 [ 57.288339] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 57.293193] ip_local_deliver_finish+0x1ee/0x2e0 [ 57.298821] ip_local_deliver+0x306/0x450 [ 57.302970] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 57.308909] ? lock_downgrade+0x960/0x960 [ 57.313138] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 57.318086] ip_rcv_finish+0xb0/0x170 [ 57.321904] ip_rcv+0xcb/0x2f0 [ 57.325105] ? ip_local_deliver+0x450/0x450 [ 57.329415] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 57.334912] ? ip_local_deliver+0x450/0x450 [ 57.339225] __netif_receive_skb_one_core+0x132/0x190 [ 57.344426] ? __netif_receive_skb_core+0x2900/0x2900 [ 57.349643] ? lock_release+0x960/0x960 [ 57.354084] ? process_backlog+0x3fe/0x700 [ 57.358306] ? net_rx_action+0x42d/0xde0 [ 57.365006] __netif_receive_skb+0x1f/0x1b0 [ 57.369347] process_backlog+0x1f1/0x700 [ 57.373502] ? __do_softirq+0x248/0x9a6 [ 57.377552] ? lockdep_hardirqs_on+0x19e/0x620 [ 57.382140] net_rx_action+0x42d/0xde0 [ 57.386034] ? __kasan_check_read+0x11/0x20 [ 57.390351] ? napi_busy_loop+0x6e0/0x6e0 [ 57.394580] ? rcu_is_watching+0x31/0x80 [ 57.398894] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 57.403730] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 57.409548] ? __do_softirq+0x1d9/0x9a6 [ 57.413515] ? ip_finish_output2+0x709/0x22a0 [ 57.418009] ? trace_hardirqs_on+0x28/0x180 [ 57.422333] __do_softirq+0x248/0x9a6 [ 57.426161] ? ip_finish_output2+0x709/0x22a0 [ 57.430658] do_softirq_own_stack+0x2a/0x40 [ 57.435152] [ 57.437474] do_softirq.part.17+0x11a/0x150 [ 57.441778] __local_bh_enable_ip+0x1ee/0x230 [ 57.446258] ip_finish_output2+0x72d/0x22a0 [ 57.450579] ? ip_frag_next+0xa10/0xa10 [ 57.454537] ? rcu_read_lock_held+0x9c/0xb0 [ 57.458844] ? rcu_read_lock_held_common+0x170/0x170 [ 57.463943] __ip_finish_output+0x401/0xa80 [ 57.468281] ? __ip_finish_output+0x401/0xa80 [ 57.472774] ip_finish_output+0x27/0x170 [ 57.476827] ip_output+0x1c6/0x560 [ 57.480362] ? ip_mc_output+0xd10/0xd10 [ 57.484328] ? __ip_finish_output+0xa80/0xa80 [ 57.488943] ? rcu_read_lock_held_common+0x170/0x170 [ 57.494109] ? rcu_read_lock_held+0x9c/0xb0 [ 57.498539] ip_local_out+0x7e/0x130 [ 57.502246] __ip_queue_xmit+0x700/0x1de0 [ 57.506377] ? __skb_checksum+0x7c0/0x7c0 [ 57.510504] ? skb_send_sock_locked+0x750/0x750 [ 57.515157] ? reqsk_fastopen_remove+0x560/0x560 [ 57.519902] ? dccp_insert_options+0x1e2/0xb20 [ 57.524566] ip_queue_xmit+0x45/0x70 [ 57.528264] dccp_transmit_skb+0xb76/0x12a0 [ 57.532564] ? skb_unlink+0x117/0x1a0 [ 57.536359] dccp_xmit_packet+0x1a0/0x580 [ 57.540505] dccp_write_xmit+0x128/0x180 [ 57.544557] dccp_sendmsg+0x691/0xdb0 [ 57.548361] ? aa_sk_perm+0x182/0x740 [ 57.552938] ? dccp_disconnect+0xb00/0xb00 [ 57.557167] ? aa_af_perm+0x240/0x240 [ 57.560969] ? rw_copy_check_uvector+0x66/0x3b0 [ 57.565620] ? __kasan_check_write+0x14/0x20 [ 57.570048] inet_sendmsg+0xbd/0xe0 [ 57.573667] ? inet_send_prepare+0x3a0/0x3a0 [ 57.578181] sock_sendmsg+0xdf/0x110 [ 57.582081] ____sys_sendmsg+0x68d/0xae0 [ 57.586149] ? copy_msghdr_from_user+0xa3/0xf0 [ 57.590750] ? kernel_sendmsg+0x30/0x30 [ 57.594725] ? find_held_lock+0x36/0x1d0 [ 57.598789] ? __fget_files+0x28b/0x410 [ 57.602765] ___sys_sendmsg+0xe4/0x160 [ 57.606643] ? sendmsg_copy_msghdr+0x30/0x30 [ 57.611034] ? rcu_read_lock_held_common+0x170/0x170 [ 57.616129] ? __fget_files+0x2a5/0x410 [ 57.620097] ? __x64_sys_dup2+0x2e0/0x2e0 [ 57.624244] ? __fget_light+0x1b3/0x230 [ 57.628220] ? __fdget+0xe/0x10 [ 57.631504] __sys_sendmsg+0xd9/0x180 [ 57.635373] ? __sys_sendmsg_sock+0xa0/0xa0 [ 57.639697] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 57.645048] ? __sched_text_start+0x8/0x8 [ 57.649200] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 57.654568] __x64_sys_sendmsg+0x73/0xb0 [ 57.658619] do_syscall_64+0xd0/0x630 [ 57.662411] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 57.667588] RIP: 0033:0x452f89 [ 57.670784] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.690640] RSP: 002b:00007f43ca38bc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 57.698424] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 57.706491] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 57.713757] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 57.721029] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 57.728522] R13: 00000000ffffffff R14: 00007f43ca38c6d4 R15: 0000000000000002 [ 57.735825] CPU: 0 PID: 4453 Comm: syz-executor4 Not tainted 5.7.0-rc5-syzkaller #0 [ 57.743656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.743779] net_ratelimit: 38 callbacks suppressed [ 57.743782] dccp_close: ABORT with 24 bytes unread [ 57.753011] Call Trace: [ 57.753015] [ 57.753029] dump_stack+0x12f/0x187 [ 57.753052] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 57.753069] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 57.753076] ? dccp_parse_options+0x333/0x1000 [ 57.753099] dccp_deliver_input_to_ccids+0xcc/0x220 [ 57.761585] dccp_close: ABORT with 24 bytes unread [ 57.762949] dccp_rcv_established+0x49/0x70 [ 57.762962] dccp_v4_do_rcv+0xf4/0x160 [ 57.762979] __sk_receive_skb+0x2b6/0x9e0 [ 57.770941] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 57.771321] ? sk_free+0x60/0x60 [ 57.825025] ? dccp_invalid_packet+0x3ec/0x750 [ 57.829600] dccp_v4_rcv+0xc62/0x1da3 [ 57.833411] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 57.838170] ip_local_deliver_finish+0x1ee/0x2e0 [ 57.842911] ip_local_deliver+0x306/0x450 [ 57.847139] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 57.852222] ? lock_downgrade+0x960/0x960 [ 57.856356] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 57.861281] ip_rcv_finish+0xb0/0x170 [ 57.865072] ip_rcv+0xcb/0x2f0 [ 57.868261] ? ip_local_deliver+0x450/0x450 [ 57.872585] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 57.877936] ? ip_local_deliver+0x450/0x450 [ 57.882246] __netif_receive_skb_one_core+0x132/0x190 [ 57.887420] ? __netif_receive_skb_core+0x2900/0x2900 [ 57.892593] ? lock_release+0x960/0x960 [ 57.896562] ? process_backlog+0x3fe/0x700 [ 57.900776] ? net_rx_action+0x42d/0xde0 [ 57.904830] __netif_receive_skb+0x1f/0x1b0 [ 57.909137] process_backlog+0x1f1/0x700 [ 57.913176] ? __do_softirq+0x248/0x9a6 [ 57.917129] ? lockdep_hardirqs_on+0x19e/0x620 [ 57.921706] net_rx_action+0x42d/0xde0 [ 57.925580] ? __kasan_check_read+0x11/0x20 [ 57.929893] ? napi_busy_loop+0x6e0/0x6e0 [ 57.934115] ? rcu_is_watching+0x31/0x80 [ 57.938174] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 57.943603] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 57.948858] ? __do_softirq+0x1d9/0x9a6 [ 57.952823] ? ip_finish_output2+0x709/0x22a0 [ 57.957392] ? trace_hardirqs_on+0x28/0x180 [ 57.961798] __do_softirq+0x248/0x9a6 [ 57.965684] ? ip_finish_output2+0x709/0x22a0 [ 57.970165] do_softirq_own_stack+0x2a/0x40 [ 57.974467] [ 57.976690] do_softirq.part.17+0x11a/0x150 [ 57.980997] __local_bh_enable_ip+0x1ee/0x230 [ 57.985483] ip_finish_output2+0x72d/0x22a0 [ 57.990588] ? ip_frag_next+0xa10/0xa10 [ 57.994555] ? rcu_read_lock_held+0x9c/0xb0 [ 57.998874] ? rcu_read_lock_held_common+0x170/0x170 [ 58.003970] __ip_finish_output+0x401/0xa80 [ 58.008365] ? __ip_finish_output+0x401/0xa80 [ 58.012855] ip_finish_output+0x27/0x170 [ 58.016914] ip_output+0x1c6/0x560 [ 58.020457] ? ip_mc_output+0xd10/0xd10 [ 58.024424] ? __ip_finish_output+0xa80/0xa80 [ 58.028915] ? rcu_read_lock_held_common+0x170/0x170 [ 58.034015] ? rcu_read_lock_held+0x9c/0xb0 [ 58.038330] ip_local_out+0x7e/0x130 [ 58.042036] __ip_queue_xmit+0x700/0x1de0 [ 58.046181] ? __skb_checksum+0x7c0/0x7c0 [ 58.050313] ? skb_send_sock_locked+0x750/0x750 [ 58.054960] ? reqsk_fastopen_remove+0x560/0x560 [ 58.059694] ? dccp_insert_options+0x1e2/0xb20 [ 58.064270] ip_queue_xmit+0x45/0x70 [ 58.068086] dccp_transmit_skb+0xb76/0x12a0 [ 58.072413] ? skb_unlink+0x117/0x1a0 [ 58.076240] dccp_xmit_packet+0x1a0/0x580 [ 58.080379] dccp_write_xmit+0x128/0x180 [ 58.084451] dccp_sendmsg+0x691/0xdb0 [ 58.088242] ? aa_sk_perm+0x182/0x740 [ 58.092037] ? dccp_disconnect+0xb00/0xb00 [ 58.096256] ? aa_af_perm+0x240/0x240 [ 58.100039] ? rw_copy_check_uvector+0x66/0x3b0 [ 58.104688] ? __kasan_check_write+0x14/0x20 [ 58.109103] inet_sendmsg+0xbd/0xe0 [ 58.112714] ? inet_send_prepare+0x3a0/0x3a0 [ 58.117102] sock_sendmsg+0xdf/0x110 [ 58.120805] ____sys_sendmsg+0x68d/0xae0 [ 58.124861] ? copy_msghdr_from_user+0xa3/0xf0 [ 58.129432] ? kernel_sendmsg+0x30/0x30 [ 58.133393] ? find_held_lock+0x36/0x1d0 [ 58.137457] ? __fget_files+0x28b/0x410 [ 58.141440] ___sys_sendmsg+0xe4/0x160 [ 58.145326] ? sendmsg_copy_msghdr+0x30/0x30 [ 58.149720] ? rcu_read_lock_held_common+0x170/0x170 [ 58.154865] ? __fget_files+0x2a5/0x410 [ 58.158838] ? __x64_sys_dup2+0x2e0/0x2e0 [ 58.162991] ? __fget_light+0x1b3/0x230 [ 58.166961] ? __fdget+0xe/0x10 [ 58.170232] __sys_sendmsg+0xd9/0x180 [ 58.174011] ? __sys_sendmsg_sock+0xa0/0xa0 [ 58.178337] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 58.183603] ? __sched_text_start+0x8/0x8 [ 58.187750] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 58.193138] __x64_sys_sendmsg+0x73/0xb0 [ 58.197189] do_syscall_64+0xd0/0x630 [ 58.201004] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 58.206205] RIP: 0033:0x452f89 [ 58.209404] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.228653] RSP: 002b:00007f9659eaec58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 58.236453] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 58.243707] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 58.250957] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 58.258206] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 58.265638] R13: 00000000ffffffff R14: 00007f9659eaf6d4 R15: 0000000000000002 [ 58.272929] CPU: 1 PID: 4458 Comm: syz-executor Not tainted 5.7.0-rc5-syzkaller #0 [ 58.280652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.290452] Call Trace: [ 58.293045] [ 58.295206] dump_stack+0x12f/0x187 [ 58.298887] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 58.304188] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 58.308971] ? dccp_parse_options+0x333/0x1000 [ 58.313666] dccp_deliver_input_to_ccids+0xcc/0x220 [ 58.318780] dccp_rcv_established+0x49/0x70 [ 58.323132] dccp_v4_do_rcv+0xf4/0x160 [ 58.327033] __sk_receive_skb+0x2b6/0x9e0 [ 58.331197] ? sk_free+0x60/0x60 [ 58.334599] ? dccp_invalid_packet+0x3ec/0x750 [ 58.339296] dccp_v4_rcv+0xc62/0x1da3 [ 58.343140] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 58.347921] ip_local_deliver_finish+0x1ee/0x2e0 [ 58.352693] ip_local_deliver+0x306/0x450 [ 58.356946] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 58.361879] ? lock_downgrade+0x960/0x960 [ 58.366039] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 58.371022] ip_rcv_finish+0xb0/0x170 [ 58.374851] ip_rcv+0xcb/0x2f0 [ 58.377905] dccp_close: ABORT with 24 bytes unread [ 58.378069] ? ip_local_deliver+0x450/0x450 [ 58.387435] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 58.387972] dccp_close: ABORT with 24 bytes unread [ 58.392922] ? ip_local_deliver+0x450/0x450 [ 58.392937] __netif_receive_skb_one_core+0x132/0x190 [ 58.392949] ? __netif_receive_skb_core+0x2900/0x2900 [ 58.414911] ? lock_release+0x960/0x960 [ 58.419064] ? process_backlog+0x3fe/0x700 [ 58.423403] ? net_rx_action+0x42d/0xde0 [ 58.427552] __netif_receive_skb+0x1f/0x1b0 [ 58.431970] process_backlog+0x1f1/0x700 [ 58.436361] ? __do_softirq+0x248/0x9a6 [ 58.440436] ? lockdep_hardirqs_on+0x19e/0x620 [ 58.445035] net_rx_action+0x42d/0xde0 [ 58.448922] ? __kasan_check_read+0x11/0x20 [ 58.453272] ? napi_busy_loop+0x6e0/0x6e0 [ 58.457523] ? rcu_is_watching+0x31/0x80 [ 58.461840] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 58.466670] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 58.472049] ? __do_softirq+0x1d9/0x9a6 [ 58.476097] ? ip_finish_output2+0x709/0x22a0 [ 58.480841] ? trace_hardirqs_on+0x28/0x180 [ 58.485531] __do_softirq+0x248/0x9a6 [ 58.489331] ? ip_finish_output2+0x709/0x22a0 [ 58.494043] do_softirq_own_stack+0x2a/0x40 [ 58.498519] [ 58.500749] do_softirq.part.17+0x11a/0x150 [ 58.505067] __local_bh_enable_ip+0x1ee/0x230 [ 58.509571] ip_finish_output2+0x72d/0x22a0 [ 58.513890] ? ip_frag_next+0xa10/0xa10 [ 58.517846] ? rcu_read_lock_held+0x9c/0xb0 [ 58.522305] ? rcu_read_lock_held_common+0x170/0x170 [ 58.528212] __ip_finish_output+0x401/0xa80 [ 58.532536] ? __ip_finish_output+0x401/0xa80 [ 58.537030] ip_finish_output+0x27/0x170 [ 58.541081] ip_output+0x1c6/0x560 [ 58.544746] ? ip_mc_output+0xd10/0xd10 [ 58.548726] ? __ip_finish_output+0xa80/0xa80 [ 58.553221] ? rcu_read_lock_held_common+0x170/0x170 [ 58.558316] ? rcu_read_lock_held+0x9c/0xb0 [ 58.562630] ip_local_out+0x7e/0x130 [ 58.566502] __ip_queue_xmit+0x700/0x1de0 [ 58.570630] ? __skb_checksum+0x7c0/0x7c0 [ 58.574799] ? skb_send_sock_locked+0x750/0x750 [ 58.579569] ? reqsk_fastopen_remove+0x560/0x560 [ 58.584309] ? dccp_insert_options+0x1e2/0xb20 [ 58.588898] ip_queue_xmit+0x45/0x70 [ 58.592598] dccp_transmit_skb+0xb76/0x12a0 [ 58.596922] ? skb_unlink+0x117/0x1a0 [ 58.600734] dccp_xmit_packet+0x1a0/0x580 [ 58.604893] dccp_write_xmit+0x128/0x180 [ 58.609034] dccp_sendmsg+0x691/0xdb0 [ 58.612878] ? aa_sk_perm+0x182/0x740 [ 58.616861] ? dccp_disconnect+0xb00/0xb00 [ 58.621172] ? aa_af_perm+0x240/0x240 [ 58.624983] ? ___might_sleep+0x13e/0x2b0 [ 58.629134] inet_sendmsg+0xbd/0xe0 [ 58.632748] ? inet_send_prepare+0x3a0/0x3a0 [ 58.637143] sock_sendmsg+0xdf/0x110 [ 58.640853] __sys_sendto+0x206/0x320 [ 58.644982] ? __ia32_sys_getpeername+0xb0/0xb0 [ 58.649641] ? __kasan_check_read+0x11/0x20 [ 58.653963] ? __lock_acquire+0x1924/0x4180 [ 58.658418] ? rcu_is_watching+0x31/0x80 [ 58.662662] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 58.667488] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 58.672875] ? lock_downgrade+0x960/0x960 [ 58.677067] ? __kasan_check_write+0x14/0x20 [ 58.681946] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 58.686690] ? do_syscall_64+0x21/0x630 [ 58.690656] __x64_sys_sendto+0xdc/0x1a0 [ 58.694704] do_syscall_64+0xd0/0x630 [ 58.698494] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 58.703692] RIP: 0033:0x452f89 [ 58.706869] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.725765] RSP: 002b:00007faf04634c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002c [ 58.733583] RAX: ffffffffffffffda RBX: 000000000071c010 RCX: 0000000000452f89 [ 58.740944] RDX: 00000000000000b9 RSI: 00000000206c2f47 RDI: 0000000000000005 [ 58.748298] RBP: 0000000000000498 R08: 0000000020c69ff0 R09: 0000000000000010 [ 58.755561] R10: 0000000020000000 R11: 0000000000000212 R12: 00000000006f4ee0 [ 58.762895] R13: 00000000ffffffff R14: 00007faf046356d4 R15: 0000000000000009 [ 58.800282] dccp_close: ABORT with 24 bytes unread [ 58.824894] dccp_close: ABORT with 24 bytes unread [ 58.855072] dccp_close: ABORT with 24 bytes unread [ 58.866931] dccp_close: ABORT with 24 bytes unread [ 58.880868] dccp_close: ABORT with 24 bytes unread [ 58.882560] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 58.899930] CPU: 1 PID: 4487 Comm: syz-executor Not tainted 5.7.0-rc5-syzkaller #0 [ 58.904772] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 58.907741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.907746] Call Trace: [ 58.907750] [ 58.907764] dump_stack+0x12f/0x187 [ 58.907792] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 58.907812] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 58.907820] ? dccp_parse_options+0x333/0x1000 [ 58.907844] dccp_deliver_input_to_ccids+0xcc/0x220 [ 58.958255] dccp_rcv_established+0x49/0x70 [ 58.962559] dccp_v4_do_rcv+0xf4/0x160 [ 58.966434] __sk_receive_skb+0x2b6/0x9e0 [ 58.970581] ? sk_free+0x60/0x60 [ 58.973930] ? dccp_invalid_packet+0x3ec/0x750 [ 58.978505] dccp_v4_rcv+0xc62/0x1da3 [ 58.982314] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 58.987065] ip_local_deliver_finish+0x1ee/0x2e0 [ 58.991806] ip_local_deliver+0x306/0x450 [ 58.995948] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 59.000862] ? lock_downgrade+0x960/0x960 [ 59.005086] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 59.010016] ip_rcv_finish+0xb0/0x170 [ 59.013811] ip_rcv+0xcb/0x2f0 [ 59.017075] ? ip_local_deliver+0x450/0x450 [ 59.021385] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 59.026750] ? ip_local_deliver+0x450/0x450 [ 59.031060] __netif_receive_skb_one_core+0x132/0x190 [ 59.036236] ? __netif_receive_skb_core+0x2900/0x2900 [ 59.041406] ? lock_release+0x960/0x960 [ 59.045370] ? process_backlog+0x3fe/0x700 [ 59.049593] ? net_rx_action+0x42d/0xde0 [ 59.053644] __netif_receive_skb+0x1f/0x1b0 [ 59.057952] process_backlog+0x1f1/0x700 [ 59.062006] ? __do_softirq+0x248/0x9a6 [ 59.065978] ? lockdep_hardirqs_on+0x19e/0x620 [ 59.070567] net_rx_action+0x42d/0xde0 [ 59.074442] ? __kasan_check_read+0x11/0x20 [ 59.078869] ? napi_busy_loop+0x6e0/0x6e0 [ 59.083008] ? rcu_is_watching+0x31/0x80 [ 59.087157] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 59.092069] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 59.097329] ? __do_softirq+0x1d9/0x9a6 [ 59.101376] ? ip_finish_output2+0x709/0x22a0 [ 59.105864] ? trace_hardirqs_on+0x28/0x180 [ 59.110351] __do_softirq+0x248/0x9a6 [ 59.114164] ? ip_finish_output2+0x709/0x22a0 [ 59.118645] do_softirq_own_stack+0x2a/0x40 [ 59.122943] [ 59.125178] do_softirq.part.17+0x11a/0x150 [ 59.129491] __local_bh_enable_ip+0x1ee/0x230 [ 59.133973] ip_finish_output2+0x72d/0x22a0 [ 59.138400] ? ip_frag_next+0xa10/0xa10 [ 59.142371] ? rcu_read_lock_held+0x9c/0xb0 [ 59.146674] ? rcu_read_lock_held_common+0x170/0x170 [ 59.151785] __ip_finish_output+0x401/0xa80 [ 59.156084] ? __ip_finish_output+0x401/0xa80 [ 59.160571] ip_finish_output+0x27/0x170 [ 59.164616] ip_output+0x1c6/0x560 [ 59.168140] ? ip_mc_output+0xd10/0xd10 [ 59.172119] ? __ip_finish_output+0xa80/0xa80 [ 59.176598] ? rcu_read_lock_held_common+0x170/0x170 [ 59.181711] ? rcu_read_lock_held+0x9c/0xb0 [ 59.186470] ip_local_out+0x7e/0x130 [ 59.190275] __ip_queue_xmit+0x700/0x1de0 [ 59.194688] ? __skb_checksum+0x7c0/0x7c0 [ 59.198911] ? skb_send_sock_locked+0x750/0x750 [ 59.203587] ? reqsk_fastopen_remove+0x560/0x560 [ 59.208430] ? dccp_insert_options+0x1e2/0xb20 [ 59.213446] ip_queue_xmit+0x45/0x70 [ 59.217146] dccp_transmit_skb+0xb76/0x12a0 [ 59.221454] ? skb_unlink+0x117/0x1a0 [ 59.225379] dccp_xmit_packet+0x1a0/0x580 [ 59.229532] dccp_write_xmit+0x128/0x180 [ 59.233938] dccp_sendmsg+0x691/0xdb0 [ 59.238209] ? aa_sk_perm+0x182/0x740 [ 59.242028] ? dccp_disconnect+0xb00/0xb00 [ 59.246254] ? aa_af_perm+0x240/0x240 [ 59.250043] ? rw_copy_check_uvector+0x66/0x3b0 [ 59.254700] ? __kasan_check_write+0x14/0x20 [ 59.259330] inet_sendmsg+0xbd/0xe0 [ 59.262970] ? inet_send_prepare+0x3a0/0x3a0 [ 59.267376] sock_sendmsg+0xdf/0x110 [ 59.271105] ____sys_sendmsg+0x68d/0xae0 [ 59.275161] ? copy_msghdr_from_user+0xa3/0xf0 [ 59.279725] ? kernel_sendmsg+0x30/0x30 [ 59.283682] ? find_held_lock+0x36/0x1d0 [ 59.287736] ? __fget_files+0x28b/0x410 [ 59.291709] ___sys_sendmsg+0xe4/0x160 [ 59.295581] ? sendmsg_copy_msghdr+0x30/0x30 [ 59.299989] ? rcu_read_lock_held_common+0x170/0x170 [ 59.305104] ? __fget_files+0x2a5/0x410 [ 59.309072] ? __x64_sys_dup2+0x2e0/0x2e0 [ 59.313205] ? release_sock+0x122/0x180 [ 59.317190] ? trace_hardirqs_on+0x28/0x180 [ 59.321496] ? inet_release+0x1c0/0x1c0 [ 59.325459] ? release_sock+0x122/0x180 [ 59.329425] ? __fget_light+0x1b3/0x230 [ 59.333383] ? __fdget+0xe/0x10 [ 59.336652] __sys_sendmsg+0xd9/0x180 [ 59.340434] ? __sys_sendmsg_sock+0xa0/0xa0 [ 59.344751] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 59.350019] ? __sched_text_start+0x8/0x8 [ 59.354177] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 59.359532] __x64_sys_sendmsg+0x73/0xb0 [ 59.363599] do_syscall_64+0xd0/0x630 [ 59.367400] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 59.372569] RIP: 0033:0x452f89 [ 59.375770] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.394867] RSP: 002b:00007faf04655c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 59.402580] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 59.409832] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 59.417084] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 59.424343] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 59.432563] R13: 00000000ffffffff R14: 00007faf046566d4 R15: 0000000000000004 [ 59.439972] CPU: 0 PID: 4486 Comm: syz-executor1 Not tainted 5.7.0-rc5-syzkaller #0 [ 59.447872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.457213] Call Trace: [ 59.459781] [ 59.461921] dump_stack+0x12f/0x187 [ 59.465537] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 59.470713] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 59.475445] ? dccp_parse_options+0x333/0x1000 [ 59.480017] dccp_deliver_input_to_ccids+0xcc/0x220 [ 59.485017] dccp_rcv_established+0x49/0x70 [ 59.489323] dccp_v4_do_rcv+0xf4/0x160 [ 59.493218] __sk_receive_skb+0x2b6/0x9e0 [ 59.497621] ? sk_free+0x60/0x60 [ 59.500969] ? dccp_invalid_packet+0x3ec/0x750 [ 59.505542] dccp_v4_rcv+0xc62/0x1da3 [ 59.509388] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 59.514168] ip_local_deliver_finish+0x1ee/0x2e0 [ 59.518927] ip_local_deliver+0x306/0x450 [ 59.523073] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 59.527986] ? lock_downgrade+0x960/0x960 [ 59.532121] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 59.537054] ip_rcv_finish+0xb0/0x170 [ 59.540870] ip_rcv+0xcb/0x2f0 [ 59.544046] ? ip_local_deliver+0x450/0x450 [ 59.548362] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 59.553714] ? ip_local_deliver+0x450/0x450 [ 59.558034] __netif_receive_skb_one_core+0x132/0x190 [ 59.563221] ? __netif_receive_skb_core+0x2900/0x2900 [ 59.568414] ? lock_release+0x960/0x960 [ 59.572397] ? process_backlog+0x3fe/0x700 [ 59.577056] ? net_rx_action+0x42d/0xde0 [ 59.581324] __netif_receive_skb+0x1f/0x1b0 [ 59.585650] process_backlog+0x1f1/0x700 [ 59.589707] ? __do_softirq+0x248/0x9a6 [ 59.593849] ? lockdep_hardirqs_on+0x19e/0x620 [ 59.598431] net_rx_action+0x42d/0xde0 [ 59.602312] ? __kasan_check_read+0x11/0x20 [ 59.606628] ? napi_busy_loop+0x6e0/0x6e0 [ 59.610787] ? rcu_is_watching+0x31/0x80 [ 59.615028] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 59.619856] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 59.625114] ? __do_softirq+0x1d9/0x9a6 [ 59.629083] ? ip_finish_output2+0x709/0x22a0 [ 59.633570] ? trace_hardirqs_on+0x28/0x180 [ 59.638136] __do_softirq+0x248/0x9a6 [ 59.642377] ? ip_finish_output2+0x709/0x22a0 [ 59.646879] do_softirq_own_stack+0x2a/0x40 [ 59.651181] [ 59.653414] do_softirq.part.17+0x11a/0x150 [ 59.657819] __local_bh_enable_ip+0x1ee/0x230 [ 59.662304] ip_finish_output2+0x72d/0x22a0 [ 59.667573] ? ip_frag_next+0xa10/0xa10 [ 59.671622] ? rcu_read_lock_held+0x9c/0xb0 [ 59.675924] ? rcu_read_lock_held_common+0x170/0x170 [ 59.681015] __ip_finish_output+0x401/0xa80 [ 59.685316] ? __ip_finish_output+0x401/0xa80 [ 59.689804] ip_finish_output+0x27/0x170 [ 59.693885] ip_output+0x1c6/0x560 [ 59.697415] ? ip_mc_output+0xd10/0xd10 [ 59.701378] ? __ip_finish_output+0xa80/0xa80 [ 59.705891] ? rcu_read_lock_held_common+0x170/0x170 [ 59.711240] ? rcu_read_lock_held+0x9c/0xb0 [ 59.715572] ip_local_out+0x7e/0x130 [ 59.719300] __ip_queue_xmit+0x700/0x1de0 [ 59.724665] ? __skb_checksum+0x7c0/0x7c0 [ 59.728818] ? skb_send_sock_locked+0x750/0x750 [ 59.733466] ? reqsk_fastopen_remove+0x560/0x560 [ 59.738212] ? dccp_insert_options+0x1e2/0xb20 [ 59.742789] ip_queue_xmit+0x45/0x70 [ 59.746485] dccp_transmit_skb+0xb76/0x12a0 [ 59.750799] ? skb_unlink+0x117/0x1a0 [ 59.754591] dccp_xmit_packet+0x1a0/0x580 [ 59.758724] dccp_write_xmit+0x128/0x180 [ 59.762783] dccp_sendmsg+0x691/0xdb0 [ 59.766567] ? aa_sk_perm+0x182/0x740 [ 59.770354] ? dccp_disconnect+0xb00/0xb00 [ 59.774568] ? aa_af_perm+0x240/0x240 [ 59.778361] ? rw_copy_check_uvector+0x66/0x3b0 [ 59.784053] ? __kasan_check_write+0x14/0x20 [ 59.788457] inet_sendmsg+0xbd/0xe0 [ 59.792065] ? inet_send_prepare+0x3a0/0x3a0 [ 59.796465] sock_sendmsg+0xdf/0x110 [ 59.800164] ____sys_sendmsg+0x68d/0xae0 [ 59.804230] ? copy_msghdr_from_user+0xa3/0xf0 [ 59.808804] ? kernel_sendmsg+0x30/0x30 [ 59.812763] ? find_held_lock+0x36/0x1d0 [ 59.816810] ? __fget_files+0x28b/0x410 [ 59.820813] ___sys_sendmsg+0xe4/0x160 [ 59.824684] ? sendmsg_copy_msghdr+0x30/0x30 [ 59.829095] ? rcu_read_lock_held_common+0x170/0x170 [ 59.834807] ? __fget_files+0x2a5/0x410 [ 59.838884] ? __x64_sys_dup2+0x2e0/0x2e0 [ 59.843118] ? __fget_light+0x1b3/0x230 [ 59.847077] ? __fdget+0xe/0x10 [ 59.850348] __sys_sendmsg+0xd9/0x180 [ 59.854307] ? __sys_sendmsg_sock+0xa0/0xa0 [ 59.858626] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 59.863902] ? __sched_text_start+0x8/0x8 [ 59.868050] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 59.873504] __x64_sys_sendmsg+0x73/0xb0 [ 59.877553] do_syscall_64+0xd0/0x630 [ 59.881342] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 59.886608] RIP: 0033:0x452f89 [ 59.890174] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.909252] RSP: 002b:00007fdf9cfcfc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 59.916945] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 59.924196] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 2020/05/16 16:01:46 executed programs: 67 [ 59.931450] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 59.938699] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 59.945946] R13: 00000000ffffffff R14: 00007fdf9cfd06d4 R15: 0000000000000002 [ 59.989941] dccp_close: ABORT with 24 bytes unread [ 59.990144] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 60.008198] CPU: 0 PID: 4500 Comm: syz-executor5 Not tainted 5.7.0-rc5-syzkaller #0 [ 60.016782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.026138] Call Trace: [ 60.028726] [ 60.031012] dump_stack+0x12f/0x187 [ 60.034667] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 60.039969] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 60.044911] ? dccp_parse_options+0x333/0x1000 [ 60.049532] dccp_deliver_input_to_ccids+0xcc/0x220 [ 60.054595] dccp_rcv_established+0x49/0x70 [ 60.059016] dccp_v4_do_rcv+0xf4/0x160 [ 60.062916] __sk_receive_skb+0x2b6/0x9e0 [ 60.067099] ? sk_free+0x60/0x60 [ 60.070575] ? dccp_invalid_packet+0x3ec/0x750 [ 60.075182] dccp_v4_rcv+0xc62/0x1da3 [ 60.079031] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 60.083854] ip_local_deliver_finish+0x1ee/0x2e0 [ 60.088628] ip_local_deliver+0x306/0x450 [ 60.092877] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 60.097945] ? lock_downgrade+0x960/0x960 [ 60.102226] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 60.107274] ip_rcv_finish+0xb0/0x170 [ 60.111099] ip_rcv+0xcb/0x2f0 [ 60.114302] ? ip_local_deliver+0x450/0x450 [ 60.118640] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 60.124020] ? ip_local_deliver+0x450/0x450 [ 60.128353] __netif_receive_skb_one_core+0x132/0x190 [ 60.133307] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 60.133546] ? __netif_receive_skb_core+0x2900/0x2900 [ 60.133555] ? lock_release+0x960/0x960 [ 60.133567] ? process_backlog+0x3fe/0x700 [ 60.133575] ? net_rx_action+0x42d/0xde0 [ 60.133598] __netif_receive_skb+0x1f/0x1b0 [ 60.133612] process_backlog+0x1f1/0x700 [ 60.172503] ? __do_softirq+0x248/0x9a6 [ 60.176464] ? lockdep_hardirqs_on+0x19e/0x620 [ 60.181131] net_rx_action+0x42d/0xde0 [ 60.185030] ? __kasan_check_read+0x11/0x20 [ 60.189353] ? napi_busy_loop+0x6e0/0x6e0 [ 60.193491] ? rcu_is_watching+0x31/0x80 [ 60.197636] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 60.202488] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 60.207759] ? __do_softirq+0x1d9/0x9a6 [ 60.211737] ? ip_finish_output2+0x709/0x22a0 [ 60.216228] ? trace_hardirqs_on+0x28/0x180 [ 60.220557] __do_softirq+0x248/0x9a6 [ 60.224364] ? ip_finish_output2+0x709/0x22a0 [ 60.228863] do_softirq_own_stack+0x2a/0x40 [ 60.233180] [ 60.235404] do_softirq.part.17+0x11a/0x150 [ 60.239725] __local_bh_enable_ip+0x1ee/0x230 [ 60.244234] ip_finish_output2+0x72d/0x22a0 [ 60.248566] ? ip_frag_next+0xa10/0xa10 [ 60.252540] ? rcu_read_lock_held+0x9c/0xb0 [ 60.256868] ? rcu_read_lock_held_common+0x170/0x170 [ 60.261969] __ip_finish_output+0x401/0xa80 [ 60.266273] ? __ip_finish_output+0x401/0xa80 [ 60.270758] ip_finish_output+0x27/0x170 [ 60.274823] ip_output+0x1c6/0x560 [ 60.278363] ? ip_mc_output+0xd10/0xd10 [ 60.282324] ? __ip_finish_output+0xa80/0xa80 [ 60.286813] ? rcu_read_lock_held_common+0x170/0x170 [ 60.291930] ? rcu_read_lock_held+0x9c/0xb0 [ 60.296251] ip_local_out+0x7e/0x130 [ 60.299959] __ip_queue_xmit+0x700/0x1de0 [ 60.304110] ? __skb_checksum+0x7c0/0x7c0 [ 60.308383] ? skb_send_sock_locked+0x750/0x750 [ 60.313061] ? reqsk_fastopen_remove+0x560/0x560 [ 60.317908] ? dccp_insert_options+0x1e2/0xb20 [ 60.322510] ip_queue_xmit+0x45/0x70 [ 60.326225] dccp_transmit_skb+0xb76/0x12a0 [ 60.330539] ? skb_unlink+0x117/0x1a0 [ 60.334338] dccp_xmit_packet+0x1a0/0x580 [ 60.338483] dccp_write_xmit+0x128/0x180 [ 60.342538] dccp_sendmsg+0x691/0xdb0 [ 60.346340] ? aa_sk_perm+0x182/0x740 [ 60.350128] ? dccp_disconnect+0xb00/0xb00 [ 60.354525] ? aa_af_perm+0x240/0x240 [ 60.358321] ? rw_copy_check_uvector+0x66/0x3b0 [ 60.362984] ? __kasan_check_write+0x14/0x20 [ 60.367409] inet_sendmsg+0xbd/0xe0 [ 60.371020] ? inet_send_prepare+0x3a0/0x3a0 [ 60.375531] sock_sendmsg+0xdf/0x110 [ 60.379259] ____sys_sendmsg+0x68d/0xae0 [ 60.383311] ? copy_msghdr_from_user+0xa3/0xf0 [ 60.387883] ? kernel_sendmsg+0x30/0x30 [ 60.391851] ? find_held_lock+0x36/0x1d0 [ 60.395916] ? __fget_files+0x28b/0x410 [ 60.400152] ___sys_sendmsg+0xe4/0x160 [ 60.404030] ? sendmsg_copy_msghdr+0x30/0x30 [ 60.408426] ? rcu_read_lock_held_common+0x170/0x170 [ 60.413626] ? __fget_files+0x2a5/0x410 [ 60.419502] ? __x64_sys_dup2+0x2e0/0x2e0 [ 60.423647] ? __fget_light+0x1b3/0x230 [ 60.427603] ? __fdget+0xe/0x10 [ 60.430872] __sys_sendmsg+0xd9/0x180 [ 60.434672] ? __sys_sendmsg_sock+0xa0/0xa0 [ 60.438997] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 60.444253] ? __sched_text_start+0x8/0x8 [ 60.448398] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 60.453750] __x64_sys_sendmsg+0x73/0xb0 [ 60.457883] do_syscall_64+0xd0/0x630 [ 60.461775] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 60.466957] RIP: 0033:0x452f89 [ 60.470132] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.489021] RSP: 002b:00007fd4a6572c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 60.496839] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 60.504265] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 60.511547] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 60.518816] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 60.526070] R13: 00000000ffffffff R14: 00007fd4a65736d4 R15: 0000000000000002 [ 60.533377] CPU: 1 PID: 4518 Comm: syz-executor Not tainted 5.7.0-rc5-syzkaller #0 [ 60.536018] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 60.541083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.541088] Call Trace: [ 60.541092] [ 60.541107] dump_stack+0x12f/0x187 [ 60.541132] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 60.541151] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 60.541158] ? dccp_parse_options+0x333/0x1000 [ 60.541180] dccp_deliver_input_to_ccids+0xcc/0x220 [ 60.592372] dccp_rcv_established+0x49/0x70 [ 60.596683] dccp_v4_do_rcv+0xf4/0x160 [ 60.600571] __sk_receive_skb+0x2b6/0x9e0 [ 60.604800] ? sk_free+0x60/0x60 [ 60.608154] ? dccp_invalid_packet+0x3ec/0x750 [ 60.612735] dccp_v4_rcv+0xc62/0x1da3 [ 60.616644] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 60.621481] ip_local_deliver_finish+0x1ee/0x2e0 [ 60.626246] ip_local_deliver+0x306/0x450 [ 60.630391] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 60.636101] ? lock_downgrade+0x960/0x960 [ 60.640246] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 60.645182] ip_rcv_finish+0xb0/0x170 [ 60.648982] ip_rcv+0xcb/0x2f0 [ 60.652159] ? ip_local_deliver+0x450/0x450 [ 60.656468] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 60.661824] ? ip_local_deliver+0x450/0x450 [ 60.666128] __netif_receive_skb_one_core+0x132/0x190 [ 60.671299] ? __netif_receive_skb_core+0x2900/0x2900 [ 60.676480] ? lock_release+0x960/0x960 [ 60.680453] ? process_backlog+0x3fe/0x700 [ 60.684774] ? net_rx_action+0x42d/0xde0 [ 60.688827] __netif_receive_skb+0x1f/0x1b0 [ 60.693136] process_backlog+0x1f1/0x700 [ 60.697186] ? __do_softirq+0x248/0x9a6 [ 60.701143] ? lockdep_hardirqs_on+0x19e/0x620 [ 60.705721] net_rx_action+0x42d/0xde0 [ 60.709595] ? __kasan_check_read+0x11/0x20 [ 60.713908] ? napi_busy_loop+0x6e0/0x6e0 [ 60.718036] ? rcu_is_watching+0x31/0x80 [ 60.722095] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 60.726937] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 60.732200] ? __do_softirq+0x1d9/0x9a6 [ 60.736159] ? ip_finish_output2+0x709/0x22a0 [ 60.740642] ? trace_hardirqs_on+0x28/0x180 [ 60.744959] __do_softirq+0x248/0x9a6 [ 60.749726] ? ip_finish_output2+0x709/0x22a0 [ 60.754214] do_softirq_own_stack+0x2a/0x40 [ 60.758606] [ 60.760829] do_softirq.part.17+0x11a/0x150 [ 60.765137] __local_bh_enable_ip+0x1ee/0x230 [ 60.769722] ip_finish_output2+0x72d/0x22a0 [ 60.774045] ? ip_frag_next+0xa10/0xa10 [ 60.778105] ? rcu_read_lock_held+0x9c/0xb0 [ 60.782423] ? rcu_read_lock_held_common+0x170/0x170 [ 60.787532] __ip_finish_output+0x401/0xa80 [ 60.791834] ? __ip_finish_output+0x401/0xa80 [ 60.796330] ip_finish_output+0x27/0x170 [ 60.800388] ip_output+0x1c6/0x560 [ 60.803917] ? ip_mc_output+0xd10/0xd10 [ 60.807878] ? __ip_finish_output+0xa80/0xa80 [ 60.812713] ? rcu_read_lock_held_common+0x170/0x170 [ 60.817810] ? rcu_read_lock_held+0x9c/0xb0 [ 60.822132] ip_local_out+0x7e/0x130 [ 60.825832] __ip_queue_xmit+0x700/0x1de0 [ 60.829970] ? __skb_checksum+0x7c0/0x7c0 [ 60.834096] ? skb_send_sock_locked+0x750/0x750 [ 60.838803] ? reqsk_fastopen_remove+0x560/0x560 [ 60.843546] ? dccp_insert_options+0x1e2/0xb20 [ 60.848121] ip_queue_xmit+0x45/0x70 [ 60.851829] dccp_transmit_skb+0xb76/0x12a0 [ 60.856130] ? skb_unlink+0x117/0x1a0 [ 60.859923] dccp_xmit_packet+0x1a0/0x580 [ 60.864148] dccp_write_xmit+0x128/0x180 [ 60.868202] dccp_sendmsg+0x691/0xdb0 [ 60.871991] ? aa_sk_perm+0x182/0x740 [ 60.875782] ? dccp_disconnect+0xb00/0xb00 [ 60.880000] ? aa_af_perm+0x240/0x240 [ 60.883781] ? rw_copy_check_uvector+0x66/0x3b0 [ 60.888428] ? __kasan_check_write+0x14/0x20 [ 60.892846] inet_sendmsg+0xbd/0xe0 [ 60.896455] ? inet_send_prepare+0x3a0/0x3a0 [ 60.900850] sock_sendmsg+0xdf/0x110 [ 60.904552] ____sys_sendmsg+0x68d/0xae0 [ 60.908607] ? copy_msghdr_from_user+0xa3/0xf0 [ 60.913171] ? kernel_sendmsg+0x30/0x30 [ 60.917137] ? find_held_lock+0x36/0x1d0 [ 60.921185] ? __fget_files+0x28b/0x410 [ 60.925164] ___sys_sendmsg+0xe4/0x160 [ 60.929034] ? sendmsg_copy_msghdr+0x30/0x30 [ 60.933428] ? rcu_read_lock_held_common+0x170/0x170 [ 60.938611] ? __fget_files+0x2a5/0x410 [ 60.942581] ? __x64_sys_dup2+0x2e0/0x2e0 [ 60.946726] ? __fget_light+0x1b3/0x230 [ 60.950689] ? __fdget+0xe/0x10 [ 60.953972] __sys_sendmsg+0xd9/0x180 [ 60.957764] ? __sys_sendmsg_sock+0xa0/0xa0 [ 60.962081] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 60.967337] ? __sched_text_start+0x8/0x8 [ 60.971501] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 60.976854] __x64_sys_sendmsg+0x73/0xb0 [ 60.980920] do_syscall_64+0xd0/0x630 [ 60.984704] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 60.990241] RIP: 0033:0x452f89 [ 60.993415] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 61.012307] RSP: 002b:00007faf04655c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 61.019993] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 61.027253] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 61.034503] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 61.041750] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 61.049033] R13: 00000000ffffffff R14: 00007faf046566d4 R15: 0000000000000002 [ 61.056319] CPU: 0 PID: 4519 Comm: syz-executor1 Not tainted 5.7.0-rc5-syzkaller #0 [ 61.064118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.073453] Call Trace: [ 61.076015] [ 61.078161] dump_stack+0x12f/0x187 [ 61.081788] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 61.086969] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 61.091703] ? dccp_parse_options+0x333/0x1000 [ 61.096278] dccp_deliver_input_to_ccids+0xcc/0x220 [ 61.101301] dccp_rcv_established+0x49/0x70 [ 61.105610] dccp_v4_do_rcv+0xf4/0x160 [ 61.109506] __sk_receive_skb+0x2b6/0x9e0 [ 61.113644] ? sk_free+0x60/0x60 [ 61.116997] ? dccp_invalid_packet+0x3ec/0x750 [ 61.122198] dccp_v4_rcv+0xc62/0x1da3 [ 61.126015] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 61.130782] ip_local_deliver_finish+0x1ee/0x2e0 [ 61.135546] ip_local_deliver+0x306/0x450 [ 61.139695] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 61.144622] ? lock_downgrade+0x960/0x960 [ 61.148772] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 61.153701] ip_rcv_finish+0xb0/0x170 [ 61.157492] ip_rcv+0xcb/0x2f0 [ 61.160684] ? ip_local_deliver+0x450/0x450 [ 61.165018] ? ip_rcv_finish_core.isra.17+0x1ba0/0x1ba0 [ 61.170379] ? ip_local_deliver+0x450/0x450 [ 61.174735] __netif_receive_skb_one_core+0x132/0x190 [ 61.179925] ? __netif_receive_skb_core+0x2900/0x2900 [ 61.185113] ? lock_release+0x960/0x960 [ 61.189250] ? process_backlog+0x3fe/0x700 [ 61.193486] ? net_rx_action+0x42d/0xde0 [ 61.197542] __netif_receive_skb+0x1f/0x1b0 [ 61.201853] process_backlog+0x1f1/0x700 [ 61.205948] ? __do_softirq+0x248/0x9a6 [ 61.209923] ? lockdep_hardirqs_on+0x19e/0x620 [ 61.214499] net_rx_action+0x42d/0xde0 [ 61.218388] ? __kasan_check_read+0x11/0x20 [ 61.222702] ? napi_busy_loop+0x6e0/0x6e0 [ 61.226842] ? rcu_is_watching+0x31/0x80 [ 61.230896] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 61.235735] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 61.240994] ? __do_softirq+0x1d9/0x9a6 [ 61.244955] ? ip_finish_output2+0x709/0x22a0 [ 61.249443] ? trace_hardirqs_on+0x28/0x180 [ 61.253753] __do_softirq+0x248/0x9a6 [ 61.257551] ? ip_finish_output2+0x709/0x22a0 [ 61.262038] do_softirq_own_stack+0x2a/0x40 [ 61.266547] [ 61.268766] do_softirq.part.17+0x11a/0x150 [ 61.273083] __local_bh_enable_ip+0x1ee/0x230 [ 61.277586] ip_finish_output2+0x72d/0x22a0 [ 61.281900] ? ip_frag_next+0xa10/0xa10 [ 61.285884] ? rcu_read_lock_held+0x9c/0xb0 [ 61.290201] ? rcu_read_lock_held_common+0x170/0x170 [ 61.295387] __ip_finish_output+0x401/0xa80 [ 61.299703] ? __ip_finish_output+0x401/0xa80 [ 61.304197] ip_finish_output+0x27/0x170 [ 61.308241] ip_output+0x1c6/0x560 [ 61.311865] ? ip_mc_output+0xd10/0xd10 [ 61.315863] ? __ip_finish_output+0xa80/0xa80 [ 61.320346] ? rcu_read_lock_held_common+0x170/0x170 [ 61.325448] ? rcu_read_lock_held+0x9c/0xb0 [ 61.329773] ip_local_out+0x7e/0x130 [ 61.333473] __ip_queue_xmit+0x700/0x1de0 [ 61.337613] ? __skb_checksum+0x7c0/0x7c0 [ 61.341739] ? skb_send_sock_locked+0x750/0x750 [ 61.346388] ? reqsk_fastopen_remove+0x560/0x560 [ 61.351123] ? dccp_insert_options+0x1e2/0xb20 [ 61.355720] ip_queue_xmit+0x45/0x70 [ 61.359433] dccp_transmit_skb+0xb76/0x12a0 [ 61.363886] ? skb_unlink+0x117/0x1a0 [ 61.367703] dccp_xmit_packet+0x1a0/0x580 [ 61.371852] dccp_write_xmit+0x128/0x180 [ 61.375920] dccp_sendmsg+0x691/0xdb0 [ 61.379711] ? aa_sk_perm+0x182/0x740 [ 61.383681] ? dccp_disconnect+0xb00/0xb00 [ 61.387907] ? aa_af_perm+0x240/0x240 [ 61.391706] ? rw_copy_check_uvector+0x66/0x3b0 [ 61.396441] ? __kasan_check_write+0x14/0x20 [ 61.401126] inet_sendmsg+0xbd/0xe0 [ 61.404766] ? inet_send_prepare+0x3a0/0x3a0 [ 61.409385] sock_sendmsg+0xdf/0x110 [ 61.413114] ____sys_sendmsg+0x68d/0xae0 [ 61.417170] ? copy_msghdr_from_user+0xa3/0xf0 [ 61.421740] ? kernel_sendmsg+0x30/0x30 [ 61.425694] ? find_held_lock+0x36/0x1d0 [ 61.429741] ? __fget_files+0x28b/0x410 [ 61.433706] ___sys_sendmsg+0xe4/0x160 [ 61.437577] ? sendmsg_copy_msghdr+0x30/0x30 [ 61.441990] ? rcu_read_lock_held_common+0x170/0x170 [ 61.447101] ? __fget_files+0x2a5/0x410 [ 61.451086] ? __x64_sys_dup2+0x2e0/0x2e0 [ 61.455241] ? __fget_light+0x1b3/0x230 [ 61.459206] ? __fdget+0xe/0x10 [ 61.462496] __sys_sendmsg+0xd9/0x180 [ 61.466414] ? __sys_sendmsg_sock+0xa0/0xa0 [ 61.470747] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 61.476025] ? __sched_text_start+0x8/0x8 [ 61.480183] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 61.485637] __x64_sys_sendmsg+0x73/0xb0 [ 61.489702] do_syscall_64+0xd0/0x630 [ 61.493487] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 61.498664] RIP: 0033:0x452f89 [ 61.501842] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 61.520862] RSP: 002b:00007fdf9cfcfc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 61.528567] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 61.535821] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 61.543085] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 61.550350] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 61.557609] R13: 00000000ffffffff R14: 00007fdf9cfd06d4 R15: 0000000000000002