[info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 40.730060] can: request_module (can-proto-0) failed. [ 40.734695] can: request_module (can-proto-0) failed. [ 42.037036] tipc: TX() has been purged, node left! Warning: Permanently added '10.128.1.56' (ECDSA) to the list of known hosts. 2020/01/13 01:49:13 parsed 1 programs 2020/01/13 01:49:13 executed programs: 0 [ 50.844583] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 50.858016] CPU: 1 PID: 4788 Comm: syz-executor3 Not tainted 5.5.0-rc6-syzkaller #0 [ 50.865836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.867690] dccp_close: ABORT with 24 bytes unread [ 50.875189] Call Trace: [ 50.875199] [ 50.875211] dump_stack+0x12f/0x187 [ 50.875231] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 50.875246] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 50.898554] ? dccp_parse_options+0x333/0x1000 [ 50.903172] dccp_deliver_input_to_ccids+0xcc/0x220 [ 50.908204] dccp_rcv_established+0x49/0x70 [ 50.912531] dccp_v4_do_rcv+0xf4/0x160 [ 50.916469] __sk_receive_skb+0x2b6/0x9e0 [ 50.920643] ? sk_free+0x60/0x60 [ 50.924007] ? dccp_invalid_packet+0x3ec/0x750 [ 50.928599] dccp_v4_rcv+0xc22/0x1c0b [ 50.932428] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 50.937216] ip_local_deliver_finish+0x1ee/0x2e0 [ 50.941976] ip_local_deliver+0x306/0x450 [ 50.946129] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 50.951068] ? lock_downgrade+0x900/0x900 [ 50.954807] dccp_close: ABORT with 24 bytes unread [ 50.955217] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 50.955240] ip_rcv_finish+0xb0/0x170 [ 50.955251] ip_rcv+0xcb/0x2f0 [ 50.955262] ? ip_local_deliver+0x450/0x450 [ 50.955275] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 50.979650] dccp_close: ABORT with 24 bytes unread [ 50.982197] ? ip_local_deliver+0x450/0x450 [ 50.982209] __netif_receive_skb_one_core+0x132/0x190 [ 50.982219] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 50.982233] ? lock_acquire+0x194/0x3e0 [ 50.982239] ? process_backlog+0x182/0x6d0 [ 50.982251] __netif_receive_skb+0x1f/0x1b0 [ 50.999191] dccp_close: ABORT with 24 bytes unread [ 51.001871] process_backlog+0x1cb/0x6d0 [ 51.001878] ? __do_softirq+0x248/0x94c [ 51.001888] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 51.001908] net_rx_action+0x42d/0xde0 [ 51.001919] ? mark_lock+0xc5/0x1200 [ 51.001933] ? napi_busy_loop+0x6e0/0x6e0 [ 51.032581] dccp_close: ABORT with 24 bytes unread [ 51.035922] ? rcu_is_watching+0x31/0x80 [ 51.035939] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 51.035948] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 51.035954] ? __do_softirq+0x1d9/0x94c [ 51.035959] ? ip_finish_output2+0x709/0x22a0 [ 51.035966] ? trace_hardirqs_on+0x28/0x180 [ 51.035979] __do_softirq+0x248/0x94c [ 51.035996] ? ip_finish_output2+0x709/0x22a0 [ 51.047828] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 51.048764] do_softirq_own_stack+0x2a/0x40 [ 51.048769] [ 51.048779] do_softirq.part.17+0x11a/0x150 [ 51.048788] __local_bh_enable_ip+0x1ee/0x230 [ 51.048799] ip_finish_output2+0x72d/0x22a0 [ 51.048819] ? ip_frag_next+0xa10/0xa10 [ 51.120927] ? rcu_read_lock_held+0x9c/0xb0 [ 51.125255] ? rcu_read_lock_held_common+0x170/0x170 [ 51.130346] __ip_finish_output+0x401/0xa50 [ 51.134650] ? __ip_finish_output+0x401/0xa50 [ 51.139138] ip_finish_output+0x27/0x170 [ 51.143184] ip_output+0x1c6/0x560 [ 51.146709] ? ip_mc_output+0xd10/0xd10 [ 51.150667] ? __ip_finish_output+0xa50/0xa50 [ 51.155156] ? rcu_read_lock_held_common+0x170/0x170 [ 51.160255] ? rcu_read_lock_held+0x9c/0xb0 [ 51.164575] ip_local_out+0x7e/0x130 [ 51.168273] __ip_queue_xmit+0x6f6/0x1de0 [ 51.172403] ? __skb_checksum+0x7c0/0x7c0 [ 51.176544] ? skb_send_sock_locked+0x750/0x750 [ 51.181191] ? reqsk_fastopen_remove+0x560/0x560 [ 51.185927] ? dccp_insert_options+0x1e2/0xb20 [ 51.190502] ip_queue_xmit+0x45/0x70 [ 51.194211] dccp_transmit_skb+0xb76/0x12a0 [ 51.198524] dccp_xmit_packet+0x1a0/0x580 [ 51.202658] dccp_write_xmit+0x128/0x180 [ 51.206705] dccp_sendmsg+0x68f/0xdb0 [ 51.210490] ? aa_sk_perm+0x182/0x740 [ 51.214305] ? dccp_disconnect+0xa90/0xa90 [ 51.218522] ? aa_af_perm+0x240/0x240 [ 51.222323] inet_sendmsg+0xbd/0xe0 [ 51.225933] ? inet_send_prepare+0x3a0/0x3a0 [ 51.230329] sock_sendmsg+0xdf/0x110 [ 51.234028] ____sys_sendmsg+0x687/0xae0 [ 51.238069] ? copy_msghdr_from_user+0x20d/0x3f0 [ 51.242810] ? kernel_sendmsg+0x30/0x30 [ 51.246768] ? __fget+0x2ae/0x440 [ 51.250214] ___sys_sendmsg+0xe4/0x160 [ 51.254085] ? sendmsg_copy_msghdr+0x30/0x30 [ 51.258475] ? rcu_read_lock_held+0x9c/0xb0 [ 51.262790] ? rcu_read_lock_held_common+0x170/0x170 [ 51.267882] ? __fget+0x2c8/0x440 [ 51.271760] ? __x64_sys_dup2+0x2e0/0x2e0 [ 51.275901] ? lock_downgrade+0x900/0x900 [ 51.280053] ? __fget_light+0x17f/0x1f0 [ 51.284018] ? __fdget+0xe/0x10 [ 51.287288] __sys_sendmsg+0xd9/0x180 [ 51.291073] ? __sys_sendmsg_sock+0xa0/0xa0 [ 51.295384] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 51.300641] ? __sched_text_start+0x8/0x8 [ 51.304784] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.310135] __x64_sys_sendmsg+0x73/0xb0 [ 51.314194] do_syscall_64+0xd0/0x600 [ 51.317982] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.323166] RIP: 0033:0x452f89 [ 51.326344] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 51.345226] RSP: 002b:00007f333aedcc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 51.353182] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 51.360448] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 51.367706] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 51.374978] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 51.382321] R13: 00000000ffffffff R14: 00007f333aedd6d4 R15: 0000000000000002 [ 51.389607] CPU: 0 PID: 4818 Comm: syz-executor1 Not tainted 5.5.0-rc6-syzkaller #0 [ 51.397414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.406780] Call Trace: [ 51.409383] [ 51.411537] dump_stack+0x12f/0x187 [ 51.412622] dccp_close: ABORT with 24 bytes unread [ 51.415167] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 51.415182] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 51.415189] ? dccp_parse_options+0x333/0x1000 [ 51.415206] dccp_deliver_input_to_ccids+0xcc/0x220 [ 51.429437] dccp_close: ABORT with 24 bytes unread [ 51.430181] dccp_rcv_established+0x49/0x70 [ 51.430192] dccp_v4_do_rcv+0xf4/0x160 [ 51.430205] __sk_receive_skb+0x2b6/0x9e0 [ 51.430221] ? sk_free+0x60/0x60 [ 51.430229] ? dccp_invalid_packet+0x3ec/0x750 [ 51.451899] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 51.453723] dccp_v4_rcv+0xc22/0x1c0b [ 51.453760] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 51.453780] ip_local_deliver_finish+0x1ee/0x2e0 [ 51.453794] ip_local_deliver+0x306/0x450 [ 51.496461] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 51.501389] ? lock_downgrade+0x900/0x900 [ 51.505629] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 51.510695] ip_rcv_finish+0xb0/0x170 [ 51.514494] ip_rcv+0xcb/0x2f0 [ 51.517675] ? ip_local_deliver+0x450/0x450 [ 51.522008] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 51.527364] ? ip_local_deliver+0x450/0x450 [ 51.531761] __netif_receive_skb_one_core+0x132/0x190 [ 51.536955] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 51.542142] ? lock_acquire+0x194/0x3e0 [ 51.546102] ? process_backlog+0x182/0x6d0 [ 51.550337] __netif_receive_skb+0x1f/0x1b0 [ 51.554648] process_backlog+0x1cb/0x6d0 [ 51.558711] ? __do_softirq+0x248/0x94c [ 51.562757] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 51.567439] net_rx_action+0x42d/0xde0 [ 51.571319] ? mark_lock+0xc5/0x1200 [ 51.575021] ? napi_busy_loop+0x6e0/0x6e0 [ 51.579163] ? rcu_is_watching+0x31/0x80 [ 51.583212] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 51.588051] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 51.593306] ? __do_softirq+0x1d9/0x94c [ 51.597262] ? ip_finish_output2+0x709/0x22a0 [ 51.601740] ? trace_hardirqs_on+0x28/0x180 [ 51.606052] __do_softirq+0x248/0x94c [ 51.609860] ? ip_finish_output2+0x709/0x22a0 [ 51.614351] do_softirq_own_stack+0x2a/0x40 [ 51.618667] [ 51.620887] do_softirq.part.17+0x11a/0x150 [ 51.625196] __local_bh_enable_ip+0x1ee/0x230 [ 51.629682] ip_finish_output2+0x72d/0x22a0 [ 51.633997] ? ip_frag_next+0xa10/0xa10 [ 51.637957] ? rcu_read_lock_held+0x9c/0xb0 [ 51.642272] ? rcu_read_lock_held_common+0x170/0x170 [ 51.647490] __ip_finish_output+0x401/0xa50 [ 51.651807] ? __ip_finish_output+0x401/0xa50 [ 51.656312] ip_finish_output+0x27/0x170 [ 51.660373] ip_output+0x1c6/0x560 [ 51.663908] ? ip_mc_output+0xd10/0xd10 [ 51.667875] ? __ip_finish_output+0xa50/0xa50 [ 51.672377] ? rcu_read_lock_held_common+0x170/0x170 [ 51.677469] ? rcu_read_lock_held+0x9c/0xb0 [ 51.681798] ip_local_out+0x7e/0x130 [ 51.685501] __ip_queue_xmit+0x6f6/0x1de0 [ 51.689631] ? __skb_checksum+0x7c0/0x7c0 [ 51.693765] ? skb_send_sock_locked+0x750/0x750 [ 51.698418] ? reqsk_fastopen_remove+0x560/0x560 [ 51.703156] ? dccp_insert_options+0x1e2/0xb20 [ 51.707730] ip_queue_xmit+0x45/0x70 [ 51.711428] dccp_transmit_skb+0xb76/0x12a0 [ 51.715743] dccp_xmit_packet+0x1a0/0x580 [ 51.719878] dccp_write_xmit+0x128/0x180 [ 51.723931] dccp_sendmsg+0x68f/0xdb0 [ 51.727733] ? aa_sk_perm+0x182/0x740 [ 51.731519] ? dccp_disconnect+0xa90/0xa90 [ 51.735739] ? aa_af_perm+0x240/0x240 [ 51.739574] inet_sendmsg+0xbd/0xe0 [ 51.743200] ? inet_send_prepare+0x3a0/0x3a0 [ 51.747726] sock_sendmsg+0xdf/0x110 [ 51.751430] ____sys_sendmsg+0x687/0xae0 [ 51.755485] ? copy_msghdr_from_user+0x20d/0x3f0 [ 51.760235] ? kernel_sendmsg+0x30/0x30 [ 51.764201] ? __fget+0x2ae/0x440 [ 51.767647] ___sys_sendmsg+0xe4/0x160 [ 51.771521] ? sendmsg_copy_msghdr+0x30/0x30 [ 51.775916] ? rcu_read_lock_held+0x9c/0xb0 [ 51.780221] ? rcu_read_lock_held_common+0x170/0x170 [ 51.785315] ? __fget+0x2c8/0x440 [ 51.788761] ? __x64_sys_dup2+0x2e0/0x2e0 [ 51.792897] ? lock_downgrade+0x900/0x900 [ 51.797050] ? __fget_light+0x17f/0x1f0 [ 51.801034] ? __fdget+0xe/0x10 [ 51.804305] __sys_sendmsg+0xd9/0x180 [ 51.808089] ? __sys_sendmsg_sock+0xa0/0xa0 [ 51.812405] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 51.817674] ? __sched_text_start+0x8/0x8 [ 51.821818] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.827186] __x64_sys_sendmsg+0x73/0xb0 [ 51.831245] do_syscall_64+0xd0/0x600 [ 51.835036] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.840209] RIP: 0033:0x452f89 [ 51.843402] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 51.862286] RSP: 002b:00007fc466345c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 51.869988] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 51.877259] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 51.884520] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 51.891786] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 51.899052] R13: 00000000ffffffff R14: 00007fc4663466d4 R15: 0000000000000002 [ 51.906337] CPU: 1 PID: 4826 Comm: syz-executor5 Not tainted 5.5.0-rc6-syzkaller #0 [ 51.914134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.923485] Call Trace: [ 51.926063] [ 51.928211] dump_stack+0x12f/0x187 [ 51.931872] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 51.937079] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 51.941837] ? dccp_parse_options+0x333/0x1000 [ 51.946440] dccp_deliver_input_to_ccids+0xcc/0x220 [ 51.951355] dccp_close: ABORT with 24 bytes unread [ 51.951462] dccp_rcv_established+0x49/0x70 [ 51.960721] dccp_v4_do_rcv+0xf4/0x160 [ 51.964616] __sk_receive_skb+0x2b6/0x9e0 [ 51.968767] ? sk_free+0x60/0x60 [ 51.971561] dccp_close: ABORT with 24 bytes unread [ 51.972127] ? dccp_invalid_packet+0x3ec/0x750 [ 51.972148] dccp_v4_rcv+0xc22/0x1c0b [ 51.972181] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 51.990225] ip_local_deliver_finish+0x1ee/0x2e0 [ 51.992170] dccp_close: ABORT with 24 bytes unread [ 51.994982] ip_local_deliver+0x306/0x450 [ 51.994993] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 51.995000] ? lock_downgrade+0x900/0x900 [ 51.995011] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 51.995029] ip_rcv_finish+0xb0/0x170 [ 52.022266] ip_rcv+0xcb/0x2f0 [ 52.026080] ? ip_local_deliver+0x450/0x450 [ 52.030408] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 52.035788] ? ip_local_deliver+0x450/0x450 [ 52.040125] __netif_receive_skb_one_core+0x132/0x190 [ 52.045323] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 52.050539] ? lock_acquire+0x194/0x3e0 [ 52.054508] ? process_backlog+0x182/0x6d0 [ 52.058758] __netif_receive_skb+0x1f/0x1b0 [ 52.063083] process_backlog+0x1cb/0x6d0 [ 52.067141] ? __do_softirq+0x248/0x94c [ 52.071116] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 52.075709] net_rx_action+0x42d/0xde0 [ 52.079691] ? mark_lock+0xc5/0x1200 [ 52.083461] ? napi_busy_loop+0x6e0/0x6e0 [ 52.087620] ? rcu_is_watching+0x31/0x80 [ 52.087997] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 52.091695] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 52.091703] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 52.091709] ? __do_softirq+0x1d9/0x94c [ 52.091715] ? ip_finish_output2+0x709/0x22a0 [ 52.091722] ? trace_hardirqs_on+0x28/0x180 [ 52.091736] __do_softirq+0x248/0x94c [ 52.091756] ? ip_finish_output2+0x709/0x22a0 [ 52.091768] do_softirq_own_stack+0x2a/0x40 [ 52.091773] [ 52.091781] do_softirq.part.17+0x11a/0x150 [ 52.091788] __local_bh_enable_ip+0x1ee/0x230 [ 52.151480] ip_finish_output2+0x72d/0x22a0 [ 52.155798] ? ip_frag_next+0xa10/0xa10 [ 52.159758] ? rcu_read_lock_held+0x9c/0xb0 [ 52.164182] ? rcu_read_lock_held_common+0x170/0x170 [ 52.169281] __ip_finish_output+0x401/0xa50 [ 52.173615] ? __ip_finish_output+0x401/0xa50 [ 52.178108] ip_finish_output+0x27/0x170 [ 52.182157] ip_output+0x1c6/0x560 [ 52.185699] ? ip_mc_output+0xd10/0xd10 [ 52.189662] ? __ip_finish_output+0xa50/0xa50 [ 52.194140] ? rcu_read_lock_held_common+0x170/0x170 [ 52.199227] ? rcu_read_lock_held+0x9c/0xb0 [ 52.203534] ip_local_out+0x7e/0x130 [ 52.207233] __ip_queue_xmit+0x6f6/0x1de0 [ 52.211362] ? __skb_checksum+0x7c0/0x7c0 [ 52.215501] ? skb_send_sock_locked+0x750/0x750 [ 52.220236] ? reqsk_fastopen_remove+0x560/0x560 [ 52.224972] ? dccp_insert_options+0x1e2/0xb20 [ 52.229567] ip_queue_xmit+0x45/0x70 [ 52.233264] dccp_transmit_skb+0xb76/0x12a0 [ 52.237577] dccp_xmit_packet+0x1a0/0x580 [ 52.241712] dccp_write_xmit+0x128/0x180 [ 52.245776] dccp_sendmsg+0x68f/0xdb0 [ 52.249560] ? aa_sk_perm+0x182/0x740 [ 52.253344] ? dccp_disconnect+0xa90/0xa90 [ 52.257572] ? aa_af_perm+0x240/0x240 [ 52.261371] inet_sendmsg+0xbd/0xe0 [ 52.264987] ? inet_send_prepare+0x3a0/0x3a0 [ 52.269376] sock_sendmsg+0xdf/0x110 [ 52.273073] ____sys_sendmsg+0x687/0xae0 [ 52.277114] ? copy_msghdr_from_user+0x20d/0x3f0 [ 52.281853] ? kernel_sendmsg+0x30/0x30 [ 52.285814] ? __fget+0x2ae/0x440 [ 52.289255] ___sys_sendmsg+0xe4/0x160 [ 52.293126] ? sendmsg_copy_msghdr+0x30/0x30 [ 52.297516] ? rcu_read_lock_held+0x9c/0xb0 [ 52.301818] ? rcu_read_lock_held_common+0x170/0x170 [ 52.307543] ? __fget+0x2c8/0x440 [ 52.311333] ? __x64_sys_dup2+0x2e0/0x2e0 [ 52.315465] ? lock_downgrade+0x900/0x900 [ 52.319602] ? __fget_light+0x17f/0x1f0 [ 52.323574] ? __fdget+0xe/0x10 [ 52.326841] __sys_sendmsg+0xd9/0x180 [ 52.330638] ? __sys_sendmsg_sock+0xa0/0xa0 [ 52.334959] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 52.340216] ? __sched_text_start+0x8/0x8 [ 52.344371] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.349722] __x64_sys_sendmsg+0x73/0xb0 [ 52.353770] do_syscall_64+0xd0/0x600 [ 52.357554] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.362725] RIP: 0033:0x452f89 [ 52.365914] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 52.384801] RSP: 002b:00007feddfc49c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 52.392487] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 52.400011] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 52.407265] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 52.414601] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 52.421852] R13: 00000000ffffffff R14: 00007feddfc4a6d4 R15: 0000000000000002 [ 52.429276] CPU: 0 PID: 4853 Comm: syz-executor2 Not tainted 5.5.0-rc6-syzkaller #0 [ 52.437082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.439798] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 52.446436] Call Trace: [ 52.446441] [ 52.446453] dump_stack+0x12f/0x187 [ 52.446475] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 52.446490] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 52.446496] ? dccp_parse_options+0x333/0x1000 [ 52.446515] dccp_deliver_input_to_ccids+0xcc/0x220 [ 52.446526] dccp_rcv_established+0x49/0x70 [ 52.491758] dccp_v4_do_rcv+0xf4/0x160 [ 52.495637] __sk_receive_skb+0x2b6/0x9e0 [ 52.499790] ? sk_free+0x60/0x60 [ 52.503143] ? dccp_invalid_packet+0x3ec/0x750 [ 52.507727] dccp_v4_rcv+0xc22/0x1c0b [ 52.511528] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 52.516274] ip_local_deliver_finish+0x1ee/0x2e0 [ 52.521017] ip_local_deliver+0x306/0x450 [ 52.525150] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 52.530060] ? lock_downgrade+0x900/0x900 [ 52.534194] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 52.539123] ip_rcv_finish+0xb0/0x170 [ 52.542907] ip_rcv+0xcb/0x2f0 [ 52.546099] ? ip_local_deliver+0x450/0x450 [ 52.550408] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 52.555758] ? ip_local_deliver+0x450/0x450 [ 52.560087] __netif_receive_skb_one_core+0x132/0x190 [ 52.565262] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 52.571754] ? lock_acquire+0x194/0x3e0 [ 52.575910] ? process_backlog+0x182/0x6d0 [ 52.580136] __netif_receive_skb+0x1f/0x1b0 [ 52.584449] process_backlog+0x1cb/0x6d0 [ 52.588495] ? __do_softirq+0x248/0x94c [ 52.592461] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 52.597149] net_rx_action+0x42d/0xde0 [ 52.601177] ? mark_lock+0xc5/0x1200 [ 52.604897] ? napi_busy_loop+0x6e0/0x6e0 [ 52.609043] ? rcu_is_watching+0x31/0x80 [ 52.613097] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 52.617930] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 52.623210] ? __do_softirq+0x1d9/0x94c [ 52.627181] ? ip_finish_output2+0x709/0x22a0 [ 52.631672] ? trace_hardirqs_on+0x28/0x180 [ 52.635992] __do_softirq+0x248/0x94c [ 52.639842] ? ip_finish_output2+0x709/0x22a0 [ 52.644343] do_softirq_own_stack+0x2a/0x40 [ 52.648657] [ 52.650880] do_softirq.part.17+0x11a/0x150 [ 52.655285] __local_bh_enable_ip+0x1ee/0x230 [ 52.659778] ip_finish_output2+0x72d/0x22a0 [ 52.664159] ? ip_frag_next+0xa10/0xa10 [ 52.668132] ? rcu_read_lock_held+0x9c/0xb0 [ 52.672466] ? rcu_read_lock_held_common+0x170/0x170 [ 52.677591] __ip_finish_output+0x401/0xa50 [ 52.681908] ? __ip_finish_output+0x401/0xa50 [ 52.686407] ip_finish_output+0x27/0x170 [ 52.690467] ip_output+0x1c6/0x560 [ 52.694006] ? ip_mc_output+0xd10/0xd10 [ 52.697985] ? __ip_finish_output+0xa50/0xa50 [ 52.702466] ? rcu_read_lock_held_common+0x170/0x170 [ 52.707707] ? rcu_read_lock_held+0x9c/0xb0 [ 52.712031] ip_local_out+0x7e/0x130 [ 52.715745] __ip_queue_xmit+0x6f6/0x1de0 [ 52.719992] ? __skb_checksum+0x7c0/0x7c0 [ 52.724133] ? skb_send_sock_locked+0x750/0x750 [ 52.728795] ? reqsk_fastopen_remove+0x560/0x560 [ 52.733544] ? dccp_insert_options+0x1e2/0xb20 [ 52.738138] ip_queue_xmit+0x45/0x70 [ 52.741843] dccp_transmit_skb+0xb76/0x12a0 [ 52.746165] dccp_xmit_packet+0x1a0/0x580 [ 52.750303] dccp_write_xmit+0x128/0x180 [ 52.754351] dccp_sendmsg+0x68f/0xdb0 [ 52.758137] ? aa_sk_perm+0x182/0x740 [ 52.761925] ? dccp_disconnect+0xa90/0xa90 [ 52.766146] ? aa_af_perm+0x240/0x240 [ 52.769950] inet_sendmsg+0xbd/0xe0 [ 52.773563] ? inet_send_prepare+0x3a0/0x3a0 [ 52.777957] sock_sendmsg+0xdf/0x110 [ 52.781667] ____sys_sendmsg+0x687/0xae0 [ 52.785734] ? copy_msghdr_from_user+0x20d/0x3f0 [ 52.790476] ? kernel_sendmsg+0x30/0x30 [ 52.794456] ? __fget+0x2ae/0x440 [ 52.797913] ___sys_sendmsg+0xe4/0x160 [ 52.801806] ? sendmsg_copy_msghdr+0x30/0x30 [ 52.806205] ? rcu_read_lock_held+0x9c/0xb0 [ 52.810526] ? rcu_read_lock_held_common+0x170/0x170 [ 52.815632] ? __fget+0x2c8/0x440 [ 52.819097] ? __x64_sys_dup2+0x2e0/0x2e0 [ 52.823238] ? lock_downgrade+0x900/0x900 [ 52.827382] ? __fget_light+0x17f/0x1f0 [ 52.831346] ? __fdget+0xe/0x10 [ 52.834623] __sys_sendmsg+0xd9/0x180 [ 52.838407] ? __sys_sendmsg_sock+0xa0/0xa0 [ 52.842724] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 52.847984] ? __sched_text_start+0x8/0x8 [ 52.852126] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.857501] __x64_sys_sendmsg+0x73/0xb0 [ 52.861557] do_syscall_64+0xd0/0x600 [ 52.865352] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.870524] RIP: 0033:0x452f89 [ 52.873704] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 52.892597] RSP: 002b:00007f536a3a1c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 52.900299] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 52.907568] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 52.914825] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 52.922079] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 52.929331] R13: 00000000ffffffff R14: 00007f536a3a26d4 R15: 0000000000000002 [ 52.936613] CPU: 1 PID: 4852 Comm: syz-executor Not tainted 5.5.0-rc6-syzkaller #0 [ 52.944322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.954103] Call Trace: [ 52.956677] [ 52.958822] dump_stack+0x12f/0x187 [ 52.962442] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 52.967641] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 52.972553] ? dccp_parse_options+0x333/0x1000 [ 52.977126] dccp_deliver_input_to_ccids+0xcc/0x220 [ 52.982141] dccp_rcv_established+0x49/0x70 [ 52.986448] dccp_v4_do_rcv+0xf4/0x160 [ 52.990320] __sk_receive_skb+0x2b6/0x9e0 [ 52.996406] ? sk_free+0x60/0x60 [ 52.999757] ? dccp_invalid_packet+0x3ec/0x750 [ 53.004602] dccp_v4_rcv+0xc22/0x1c0b [ 53.008415] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 53.013171] ip_local_deliver_finish+0x1ee/0x2e0 [ 53.017922] ip_local_deliver+0x306/0x450 [ 53.022058] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 53.026970] ? lock_downgrade+0x900/0x900 [ 53.031106] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 53.036027] ip_rcv_finish+0xb0/0x170 [ 53.039813] ip_rcv+0xcb/0x2f0 [ 53.042988] ? ip_local_deliver+0x450/0x450 [ 53.047296] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 53.052646] ? ip_local_deliver+0x450/0x450 [ 53.056953] __netif_receive_skb_one_core+0x132/0x190 [ 53.062904] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 53.068075] ? lock_acquire+0x194/0x3e0 [ 53.072028] ? process_backlog+0x182/0x6d0 [ 53.076248] __netif_receive_skb+0x1f/0x1b0 [ 53.080551] process_backlog+0x1cb/0x6d0 [ 53.084620] ? __do_softirq+0x248/0x94c [ 53.088932] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 53.093508] net_rx_action+0x42d/0xde0 [ 53.097398] ? mark_lock+0xc5/0x1200 [ 53.101101] ? napi_busy_loop+0x6e0/0x6e0 [ 53.105229] ? rcu_is_watching+0x31/0x80 [ 53.109275] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 53.114098] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 53.119351] ? __do_softirq+0x1d9/0x94c [ 53.123302] ? ip_finish_output2+0x709/0x22a0 [ 53.127788] ? trace_hardirqs_on+0x28/0x180 [ 53.132092] __do_softirq+0x248/0x94c [ 53.135888] ? ip_finish_output2+0x709/0x22a0 [ 53.140383] do_softirq_own_stack+0x2a/0x40 [ 53.144692] [ 53.146926] do_softirq.part.17+0x11a/0x150 [ 53.151246] __local_bh_enable_ip+0x1ee/0x230 [ 53.155730] ip_finish_output2+0x72d/0x22a0 [ 53.160039] ? ip_frag_next+0xa10/0xa10 [ 53.163995] ? rcu_read_lock_held+0x9c/0xb0 [ 53.168297] ? rcu_read_lock_held_common+0x170/0x170 [ 53.173406] __ip_finish_output+0x401/0xa50 [ 53.177712] ? __ip_finish_output+0x401/0xa50 [ 53.182194] ip_finish_output+0x27/0x170 [ 53.186243] ip_output+0x1c6/0x560 [ 53.189768] ? ip_mc_output+0xd10/0xd10 [ 53.193729] ? __ip_finish_output+0xa50/0xa50 [ 53.198207] ? rcu_read_lock_held_common+0x170/0x170 [ 53.203295] ? rcu_read_lock_held+0x9c/0xb0 [ 53.207618] ip_local_out+0x7e/0x130 [ 53.211327] __ip_queue_xmit+0x6f6/0x1de0 [ 53.215467] ? __skb_checksum+0x7c0/0x7c0 [ 53.219599] ? skb_send_sock_locked+0x750/0x750 [ 53.224250] ? reqsk_fastopen_remove+0x560/0x560 [ 53.228993] ? dccp_insert_options+0x1e2/0xb20 [ 53.233566] ip_queue_xmit+0x45/0x70 [ 53.237268] dccp_transmit_skb+0xb76/0x12a0 [ 53.241586] dccp_xmit_packet+0x1a0/0x580 [ 53.245722] dccp_write_xmit+0x128/0x180 [ 53.249784] dccp_sendmsg+0x68f/0xdb0 [ 53.253570] ? aa_sk_perm+0x182/0x740 [ 53.257357] ? dccp_disconnect+0xa90/0xa90 [ 53.261576] ? aa_af_perm+0x240/0x240 [ 53.265375] inet_sendmsg+0xbd/0xe0 [ 53.269006] ? inet_send_prepare+0x3a0/0x3a0 [ 53.273395] sock_sendmsg+0xdf/0x110 [ 53.277108] ____sys_sendmsg+0x687/0xae0 [ 53.281154] ? copy_msghdr_from_user+0x20d/0x3f0 [ 53.285907] ? kernel_sendmsg+0x30/0x30 [ 53.289868] ? __fget+0x2ae/0x440 [ 53.293314] ___sys_sendmsg+0xe4/0x160 [ 53.297189] ? sendmsg_copy_msghdr+0x30/0x30 [ 53.301579] ? rcu_read_lock_held+0x9c/0xb0 [ 53.305970] ? rcu_read_lock_held_common+0x170/0x170 [ 53.311076] ? __fget+0x2c8/0x440 [ 53.314537] ? __x64_sys_dup2+0x2e0/0x2e0 [ 53.318669] ? lock_downgrade+0x900/0x900 [ 53.322810] ? __fget_light+0x17f/0x1f0 [ 53.326769] ? __fdget+0xe/0x10 [ 53.330045] __sys_sendmsg+0xd9/0x180 [ 53.333839] ? __sys_sendmsg_sock+0xa0/0xa0 [ 53.338163] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 53.343423] ? __sched_text_start+0x8/0x8 [ 53.347577] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.353012] __x64_sys_sendmsg+0x73/0xb0 [ 53.357077] do_syscall_64+0xd0/0x600 [ 53.360869] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.366044] RIP: 0033:0x452f89 [ 53.369220] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.388103] RSP: 002b:00007f75c30edc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 53.395788] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 2020/01/13 01:49:18 executed programs: 18 [ 53.403039] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 53.410287] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 53.417798] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 53.425058] R13: 00000000ffffffff R14: 00007f75c30ee6d4 R15: 0000000000000002 [ 53.506927] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 53.514478] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 53.520667] CPU: 1 PID: 4875 Comm: syz-executor4 Not tainted 5.5.0-rc6-syzkaller #0 [ 53.541865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.551633] Call Trace: [ 53.554198] [ 53.556337] dump_stack+0x12f/0x187 [ 53.559960] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 53.565138] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 53.569876] ? dccp_parse_options+0x333/0x1000 [ 53.574447] dccp_deliver_input_to_ccids+0xcc/0x220 [ 53.579449] dccp_rcv_established+0x49/0x70 [ 53.583753] dccp_v4_do_rcv+0xf4/0x160 [ 53.587712] __sk_receive_skb+0x2b6/0x9e0 [ 53.591862] ? sk_free+0x60/0x60 [ 53.595226] ? dccp_invalid_packet+0x3ec/0x750 [ 53.599803] dccp_v4_rcv+0xc22/0x1c0b [ 53.603629] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 53.608372] ip_local_deliver_finish+0x1ee/0x2e0 [ 53.613111] ip_local_deliver+0x306/0x450 [ 53.617253] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 53.622163] ? lock_downgrade+0x900/0x900 [ 53.626296] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 53.631341] ip_rcv_finish+0xb0/0x170 [ 53.635139] ip_rcv+0xcb/0x2f0 [ 53.638320] ? ip_local_deliver+0x450/0x450 [ 53.642638] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 53.648000] ? ip_local_deliver+0x450/0x450 [ 53.652310] __netif_receive_skb_one_core+0x132/0x190 [ 53.657486] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 53.662665] ? lock_acquire+0x194/0x3e0 [ 53.666622] ? process_backlog+0x182/0x6d0 [ 53.670861] __netif_receive_skb+0x1f/0x1b0 [ 53.675183] process_backlog+0x1cb/0x6d0 [ 53.679240] ? __do_softirq+0x248/0x94c [ 53.683200] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 53.687795] net_rx_action+0x42d/0xde0 [ 53.691710] ? mark_lock+0xc5/0x1200 [ 53.695417] ? napi_busy_loop+0x6e0/0x6e0 [ 53.699548] ? rcu_is_watching+0x31/0x80 [ 53.703611] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 53.708434] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 53.713714] ? __do_softirq+0x1d9/0x94c [ 53.717667] ? ip_finish_output2+0x709/0x22a0 [ 53.722143] ? trace_hardirqs_on+0x28/0x180 [ 53.726479] __do_softirq+0x248/0x94c [ 53.730280] ? ip_finish_output2+0x709/0x22a0 [ 53.734776] do_softirq_own_stack+0x2a/0x40 [ 53.739083] [ 53.741324] do_softirq.part.17+0x11a/0x150 [ 53.745632] __local_bh_enable_ip+0x1ee/0x230 [ 53.750111] ip_finish_output2+0x72d/0x22a0 [ 53.754425] ? ip_frag_next+0xa10/0xa10 [ 53.758386] ? rcu_read_lock_held+0x9c/0xb0 [ 53.762689] ? rcu_read_lock_held_common+0x170/0x170 [ 53.767784] __ip_finish_output+0x401/0xa50 [ 53.772117] ? __ip_finish_output+0x401/0xa50 [ 53.776609] ip_finish_output+0x27/0x170 [ 53.780666] ip_output+0x1c6/0x560 [ 53.784203] ? ip_mc_output+0xd10/0xd10 [ 53.788183] ? __ip_finish_output+0xa50/0xa50 [ 53.792678] ? rcu_read_lock_held_common+0x170/0x170 [ 53.797780] ? rcu_read_lock_held+0x9c/0xb0 [ 53.802096] ip_local_out+0x7e/0x130 [ 53.805799] __ip_queue_xmit+0x6f6/0x1de0 [ 53.809948] ? __skb_checksum+0x7c0/0x7c0 [ 53.814095] ? skb_send_sock_locked+0x750/0x750 [ 53.818748] ? reqsk_fastopen_remove+0x560/0x560 [ 53.823489] ? dccp_insert_options+0x1e2/0xb20 [ 53.828094] ip_queue_xmit+0x45/0x70 [ 53.831798] dccp_transmit_skb+0xb76/0x12a0 [ 53.836138] dccp_xmit_packet+0x1a0/0x580 [ 53.840278] dccp_write_xmit+0x128/0x180 [ 53.844325] dccp_sendmsg+0x68f/0xdb0 [ 53.848110] ? aa_sk_perm+0x182/0x740 [ 53.851895] ? dccp_disconnect+0xa90/0xa90 [ 53.856111] ? aa_af_perm+0x240/0x240 [ 53.860024] inet_sendmsg+0xbd/0xe0 [ 53.863646] ? inet_send_prepare+0x3a0/0x3a0 [ 53.868040] sock_sendmsg+0xdf/0x110 [ 53.871753] ____sys_sendmsg+0x687/0xae0 [ 53.875916] ? copy_msghdr_from_user+0x20d/0x3f0 [ 53.880662] ? kernel_sendmsg+0x30/0x30 [ 53.884626] ? __fget+0x2ae/0x440 [ 53.888076] ___sys_sendmsg+0xe4/0x160 [ 53.891956] ? sendmsg_copy_msghdr+0x30/0x30 [ 53.896350] ? rcu_read_lock_held+0x9c/0xb0 [ 53.900670] ? rcu_read_lock_held_common+0x170/0x170 [ 53.905774] ? __fget+0x2c8/0x440 [ 53.909220] ? __x64_sys_dup2+0x2e0/0x2e0 [ 53.913366] ? lock_downgrade+0x900/0x900 [ 53.917507] ? __fget_light+0x17f/0x1f0 [ 53.921469] ? __fdget+0xe/0x10 [ 53.924753] __sys_sendmsg+0xd9/0x180 [ 53.928550] ? __sys_sendmsg_sock+0xa0/0xa0 [ 53.932867] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 53.938136] ? __sched_text_start+0x8/0x8 [ 53.942304] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.947670] __x64_sys_sendmsg+0x73/0xb0 [ 53.951734] do_syscall_64+0xd0/0x600 [ 53.955522] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.960691] RIP: 0033:0x452f89 [ 53.963866] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.982749] RSP: 002b:00007fceb6132c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 53.990452] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 53.997708] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 54.005065] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 54.012329] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 54.019603] R13: 00000000ffffffff R14: 00007fceb61336d4 R15: 0000000000000002 [ 54.026896] CPU: 0 PID: 4883 Comm: syz-executor3 Not tainted 5.5.0-rc6-syzkaller #0 [ 54.034697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.044035] Call Trace: [ 54.046599] [ 54.048756] dump_stack+0x12f/0x187 [ 54.052403] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 54.057595] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 54.062353] ? dccp_parse_options+0x333/0x1000 [ 54.066931] dccp_deliver_input_to_ccids+0xcc/0x220 [ 54.071960] dccp_rcv_established+0x49/0x70 [ 54.076279] dccp_v4_do_rcv+0xf4/0x160 [ 54.080148] __sk_receive_skb+0x2b6/0x9e0 [ 54.084283] ? sk_free+0x60/0x60 [ 54.087630] ? dccp_invalid_packet+0x3ec/0x750 [ 54.092206] dccp_v4_rcv+0xc22/0x1c0b [ 54.096023] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 54.100886] ip_local_deliver_finish+0x1ee/0x2e0 [ 54.105634] ip_local_deliver+0x306/0x450 [ 54.109862] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 54.114779] ? lock_downgrade+0x900/0x900 [ 54.118913] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 54.123830] ip_rcv_finish+0xb0/0x170 [ 54.127615] ip_rcv+0xcb/0x2f0 [ 54.130875] ? ip_local_deliver+0x450/0x450 [ 54.135193] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 54.140546] ? ip_local_deliver+0x450/0x450 [ 54.144850] __netif_receive_skb_one_core+0x132/0x190 [ 54.150024] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 54.155200] ? lock_acquire+0x194/0x3e0 [ 54.159153] ? process_backlog+0x182/0x6d0 [ 54.163371] __netif_receive_skb+0x1f/0x1b0 [ 54.167673] process_backlog+0x1cb/0x6d0 [ 54.172147] ? __do_softirq+0x248/0x94c [ 54.176113] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 54.180680] net_rx_action+0x42d/0xde0 [ 54.184549] ? mark_lock+0xc5/0x1200 [ 54.188270] ? napi_busy_loop+0x6e0/0x6e0 [ 54.192400] ? rcu_is_watching+0x31/0x80 [ 54.196459] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 54.201299] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 54.206565] ? __do_softirq+0x1d9/0x94c [ 54.210520] ? ip_finish_output2+0x709/0x22a0 [ 54.215002] ? trace_hardirqs_on+0x28/0x180 [ 54.219308] __do_softirq+0x248/0x94c [ 54.223096] ? ip_finish_output2+0x709/0x22a0 [ 54.227589] do_softirq_own_stack+0x2a/0x40 [ 54.231929] [ 54.234170] do_softirq.part.17+0x11a/0x150 [ 54.238498] __local_bh_enable_ip+0x1ee/0x230 [ 54.242999] ip_finish_output2+0x72d/0x22a0 [ 54.247340] ? ip_frag_next+0xa10/0xa10 [ 54.251325] ? rcu_read_lock_held+0x9c/0xb0 [ 54.255651] ? rcu_read_lock_held_common+0x170/0x170 [ 54.260762] __ip_finish_output+0x401/0xa50 [ 54.265087] ? __ip_finish_output+0x401/0xa50 [ 54.269602] ip_finish_output+0x27/0x170 [ 54.273671] ip_output+0x1c6/0x560 [ 54.277252] ? ip_mc_output+0xd10/0xd10 [ 54.281243] ? __ip_finish_output+0xa50/0xa50 [ 54.285748] ? rcu_read_lock_held_common+0x170/0x170 [ 54.290903] ? rcu_read_lock_held+0x9c/0xb0 [ 54.295221] ip_local_out+0x7e/0x130 [ 54.298948] __ip_queue_xmit+0x6f6/0x1de0 [ 54.301329] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 54.303113] ? __skb_checksum+0x7c0/0x7c0 [ 54.303120] ? skb_send_sock_locked+0x750/0x750 [ 54.303125] ? reqsk_fastopen_remove+0x560/0x560 [ 54.303133] ? dccp_insert_options+0x1e2/0xb20 [ 54.303152] ip_queue_xmit+0x45/0x70 [ 54.303163] dccp_transmit_skb+0xb76/0x12a0 [ 54.303183] dccp_xmit_packet+0x1a0/0x580 [ 54.346562] dccp_write_xmit+0x128/0x180 [ 54.350610] dccp_sendmsg+0x68f/0xdb0 [ 54.356145] ? aa_sk_perm+0x182/0x740 [ 54.359952] ? dccp_disconnect+0xa90/0xa90 [ 54.364193] ? aa_af_perm+0x240/0x240 [ 54.367996] inet_sendmsg+0xbd/0xe0 [ 54.371604] ? inet_send_prepare+0x3a0/0x3a0 [ 54.376008] sock_sendmsg+0xdf/0x110 [ 54.379713] ____sys_sendmsg+0x687/0xae0 [ 54.383769] ? copy_msghdr_from_user+0x20d/0x3f0 [ 54.388510] ? kernel_sendmsg+0x30/0x30 [ 54.392485] ? __fget+0x2ae/0x440 [ 54.395931] ___sys_sendmsg+0xe4/0x160 [ 54.399805] ? sendmsg_copy_msghdr+0x30/0x30 [ 54.404191] ? rcu_read_lock_held+0x9c/0xb0 [ 54.408593] ? rcu_read_lock_held_common+0x170/0x170 [ 54.413686] ? __fget+0x2c8/0x440 [ 54.417143] ? __x64_sys_dup2+0x2e0/0x2e0 [ 54.421273] ? lock_downgrade+0x900/0x900 [ 54.425402] ? __kasan_check_write+0x14/0x20 [ 54.429805] ? do_raw_spin_lock+0x132/0x2e0 [ 54.434116] ? __fget_light+0x17f/0x1f0 [ 54.438092] ? __fdget+0xe/0x10 [ 54.441364] __sys_sendmsg+0xd9/0x180 [ 54.445160] ? __sys_sendmsg_sock+0xa0/0xa0 [ 54.449465] ? rcu_is_watching+0x31/0x80 [ 54.453521] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 54.458345] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 54.463614] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.468968] __x64_sys_sendmsg+0x73/0xb0 [ 54.473019] do_syscall_64+0xd0/0x600 [ 54.476805] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.481975] RIP: 0033:0x452f89 [ 54.485150] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.504034] RSP: 002b:00007f333aebbc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 54.511721] RAX: ffffffffffffffda RBX: 000000000071c010 RCX: 0000000000452f89 [ 54.518985] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 54.526336] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 54.533610] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 54.540893] R13: 00000000ffffffff R14: 00007f333aebc6d4 R15: 0000000000000008 [ 54.548189] CPU: 1 PID: 4894 Comm: syz-executor2 Not tainted 5.5.0-rc6-syzkaller #0 [ 54.555996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.556791] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 54.565355] Call Trace: [ 54.565360] [ 54.565373] dump_stack+0x12f/0x187 [ 54.565392] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 54.565406] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 54.565413] ? dccp_parse_options+0x333/0x1000 [ 54.565433] dccp_deliver_input_to_ccids+0xcc/0x220 [ 54.565446] dccp_rcv_established+0x49/0x70 [ 54.565455] dccp_v4_do_rcv+0xf4/0x160 [ 54.565467] __sk_receive_skb+0x2b6/0x9e0 [ 54.565482] ? sk_free+0x60/0x60 [ 54.622061] ? dccp_invalid_packet+0x3ec/0x750 [ 54.626638] dccp_v4_rcv+0xc22/0x1c0b [ 54.630455] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 54.635199] ip_local_deliver_finish+0x1ee/0x2e0 [ 54.639942] ip_local_deliver+0x306/0x450 [ 54.644083] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 54.648993] ? lock_downgrade+0x900/0x900 [ 54.653125] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 54.658055] ip_rcv_finish+0xb0/0x170 [ 54.661839] ip_rcv+0xcb/0x2f0 [ 54.665015] ? ip_local_deliver+0x450/0x450 [ 54.669322] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 54.674672] ? ip_local_deliver+0x450/0x450 [ 54.678979] __netif_receive_skb_one_core+0x132/0x190 [ 54.684166] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 54.689340] ? lock_acquire+0x194/0x3e0 [ 54.693298] ? process_backlog+0x182/0x6d0 [ 54.697530] __netif_receive_skb+0x1f/0x1b0 [ 54.701852] process_backlog+0x1cb/0x6d0 [ 54.705898] ? __do_softirq+0x248/0x94c [ 54.709859] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 54.714436] net_rx_action+0x42d/0xde0 [ 54.718401] ? mark_lock+0xc5/0x1200 [ 54.722118] ? napi_busy_loop+0x6e0/0x6e0 [ 54.726246] ? rcu_is_watching+0x31/0x80 [ 54.730298] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 54.735134] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 54.740390] ? __do_softirq+0x1d9/0x94c [ 54.744344] ? ip_finish_output2+0x709/0x22a0 [ 54.748833] ? trace_hardirqs_on+0x28/0x180 [ 54.753161] __do_softirq+0x248/0x94c [ 54.756959] ? ip_finish_output2+0x709/0x22a0 [ 54.761526] do_softirq_own_stack+0x2a/0x40 [ 54.765840] [ 54.768335] do_softirq.part.17+0x11a/0x150 [ 54.772637] __local_bh_enable_ip+0x1ee/0x230 [ 54.777115] ip_finish_output2+0x72d/0x22a0 [ 54.781433] ? ip_frag_next+0xa10/0xa10 [ 54.785391] ? rcu_read_lock_held+0x9c/0xb0 [ 54.789710] ? rcu_read_lock_held_common+0x170/0x170 [ 54.794801] __ip_finish_output+0x401/0xa50 [ 54.799102] ? __ip_finish_output+0x401/0xa50 [ 54.803584] ip_finish_output+0x27/0x170 [ 54.807627] ip_output+0x1c6/0x560 [ 54.811152] ? ip_mc_output+0xd10/0xd10 [ 54.815112] ? __ip_finish_output+0xa50/0xa50 [ 54.819589] ? rcu_read_lock_held_common+0x170/0x170 [ 54.824688] ? rcu_read_lock_held+0x9c/0xb0 [ 54.829009] ip_local_out+0x7e/0x130 [ 54.832731] __ip_queue_xmit+0x6f6/0x1de0 [ 54.836876] ? __skb_checksum+0x7c0/0x7c0 [ 54.841013] ? skb_send_sock_locked+0x750/0x750 [ 54.845667] ? reqsk_fastopen_remove+0x560/0x560 [ 54.850415] ? dccp_insert_options+0x1e2/0xb20 [ 54.854996] ip_queue_xmit+0x45/0x70 [ 54.858700] dccp_transmit_skb+0xb76/0x12a0 [ 54.863026] dccp_xmit_packet+0x1a0/0x580 [ 54.867163] dccp_write_xmit+0x128/0x180 [ 54.871212] dccp_sendmsg+0x68f/0xdb0 [ 54.874999] ? aa_sk_perm+0x182/0x740 [ 54.878786] ? dccp_disconnect+0xa90/0xa90 [ 54.883005] ? aa_af_perm+0x240/0x240 [ 54.886811] inet_sendmsg+0xbd/0xe0 [ 54.890426] ? inet_send_prepare+0x3a0/0x3a0 [ 54.894816] sock_sendmsg+0xdf/0x110 [ 54.898517] ____sys_sendmsg+0x687/0xae0 [ 54.902563] ? copy_msghdr_from_user+0x20d/0x3f0 [ 54.907328] ? kernel_sendmsg+0x30/0x30 [ 54.911295] ? __fget+0x2ae/0x440 [ 54.914741] ___sys_sendmsg+0xe4/0x160 [ 54.918630] ? sendmsg_copy_msghdr+0x30/0x30 [ 54.923026] ? rcu_read_lock_held+0x9c/0xb0 [ 54.927330] ? rcu_read_lock_held_common+0x170/0x170 [ 54.932434] ? __fget+0x2c8/0x440 [ 54.935893] ? __x64_sys_dup2+0x2e0/0x2e0 [ 54.940024] ? lock_downgrade+0x900/0x900 [ 54.944294] ? __fget_light+0x17f/0x1f0 [ 54.948263] ? __fdget+0xe/0x10 [ 54.951540] __sys_sendmsg+0xd9/0x180 [ 54.955331] ? __sys_sendmsg_sock+0xa0/0xa0 [ 54.959660] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 54.964925] ? __sched_text_start+0x8/0x8 [ 54.969114] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.974475] __x64_sys_sendmsg+0x73/0xb0 [ 54.978538] do_syscall_64+0xd0/0x600 [ 54.982332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.987522] RIP: 0033:0x452f89 [ 54.990696] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 55.009598] RSP: 002b:00007f536a3a1c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 55.017299] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 55.024554] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 55.031820] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 55.039086] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 55.046337] R13: 00000000ffffffff R14: 00007f536a3a26d4 R15: 0000000000000002 [ 55.053612] CPU: 0 PID: 4893 Comm: syz-executor Not tainted 5.5.0-rc6-syzkaller #0 [ 55.061328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.070670] Call Trace: [ 55.073239] [ 55.075389] dump_stack+0x12f/0x187 [ 55.079019] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 55.084211] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 55.088960] ? dccp_parse_options+0x333/0x1000 [ 55.093549] dccp_deliver_input_to_ccids+0xcc/0x220 [ 55.098571] dccp_rcv_established+0x49/0x70 [ 55.102877] dccp_v4_do_rcv+0xf4/0x160 [ 55.106750] __sk_receive_skb+0x2b6/0x9e0 [ 55.110910] ? sk_free+0x60/0x60 [ 55.114262] ? dccp_invalid_packet+0x3ec/0x750 [ 55.118833] dccp_v4_rcv+0xc22/0x1c0b [ 55.122633] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 55.127376] ip_local_deliver_finish+0x1ee/0x2e0 [ 55.132118] ip_local_deliver+0x306/0x450 [ 55.136265] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 55.141175] ? lock_downgrade+0x900/0x900 [ 55.145307] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 55.150230] ip_rcv_finish+0xb0/0x170 [ 55.154012] ip_rcv+0xcb/0x2f0 [ 55.157190] ? ip_local_deliver+0x450/0x450 [ 55.161496] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 55.166846] ? ip_local_deliver+0x450/0x450 [ 55.171150] __netif_receive_skb_one_core+0x132/0x190 [ 55.176320] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 55.181493] ? lock_acquire+0x194/0x3e0 [ 55.185447] ? process_backlog+0x182/0x6d0 [ 55.189665] __netif_receive_skb+0x1f/0x1b0 [ 55.193974] process_backlog+0x1cb/0x6d0 [ 55.198014] ? __do_softirq+0x248/0x94c [ 55.201972] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 55.206543] net_rx_action+0x42d/0xde0 [ 55.210413] ? mark_lock+0xc5/0x1200 [ 55.214112] ? napi_busy_loop+0x6e0/0x6e0 [ 55.218242] ? rcu_is_watching+0x31/0x80 [ 55.222301] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 55.227124] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 55.232378] ? __do_softirq+0x1d9/0x94c [ 55.236349] ? ip_finish_output2+0x709/0x22a0 [ 55.240825] ? trace_hardirqs_on+0x28/0x180 [ 55.245133] __do_softirq+0x248/0x94c [ 55.248935] ? ip_finish_output2+0x709/0x22a0 [ 55.253418] do_softirq_own_stack+0x2a/0x40 [ 55.257720] [ 55.259939] do_softirq.part.17+0x11a/0x150 [ 55.264246] __local_bh_enable_ip+0x1ee/0x230 [ 55.268723] ip_finish_output2+0x72d/0x22a0 [ 55.273047] ? ip_frag_next+0xa10/0xa10 [ 55.277035] ? rcu_read_lock_held+0x9c/0xb0 [ 55.281345] ? rcu_read_lock_held_common+0x170/0x170 [ 55.286438] __ip_finish_output+0x401/0xa50 [ 55.290745] ? __ip_finish_output+0x401/0xa50 [ 55.295231] ip_finish_output+0x27/0x170 [ 55.299278] ip_output+0x1c6/0x560 [ 55.302806] ? ip_mc_output+0xd10/0xd10 [ 55.306766] ? __ip_finish_output+0xa50/0xa50 [ 55.311242] ? rcu_read_lock_held_common+0x170/0x170 [ 55.316326] ? rcu_read_lock_held+0x9c/0xb0 [ 55.320647] ip_local_out+0x7e/0x130 [ 55.324344] __ip_queue_xmit+0x6f6/0x1de0 [ 55.328471] ? __skb_checksum+0x7c0/0x7c0 [ 55.332598] ? skb_send_sock_locked+0x750/0x750 [ 55.337246] ? reqsk_fastopen_remove+0x560/0x560 [ 55.341982] ? dccp_insert_options+0x1e2/0xb20 [ 55.346585] ip_queue_xmit+0x45/0x70 [ 55.350396] dccp_transmit_skb+0xb76/0x12a0 [ 55.354716] dccp_xmit_packet+0x1a0/0x580 [ 55.358852] dccp_write_xmit+0x128/0x180 [ 55.362913] dccp_sendmsg+0x68f/0xdb0 [ 55.366718] ? aa_sk_perm+0x182/0x740 [ 55.370507] ? dccp_disconnect+0xa90/0xa90 [ 55.374724] ? aa_af_perm+0x240/0x240 [ 55.378525] inet_sendmsg+0xbd/0xe0 [ 55.382134] ? inet_send_prepare+0x3a0/0x3a0 [ 55.386695] sock_sendmsg+0xdf/0x110 [ 55.390393] ____sys_sendmsg+0x687/0xae0 [ 55.394436] ? copy_msghdr_from_user+0x20d/0x3f0 [ 55.399179] ? kernel_sendmsg+0x30/0x30 [ 55.403137] ? __fget+0x2ae/0x440 [ 55.406592] ___sys_sendmsg+0xe4/0x160 [ 55.410462] ? sendmsg_copy_msghdr+0x30/0x30 [ 55.414851] ? rcu_read_lock_held+0x9c/0xb0 [ 55.419158] ? rcu_read_lock_held_common+0x170/0x170 [ 55.424268] ? __fget+0x2c8/0x440 [ 55.427711] ? __x64_sys_dup2+0x2e0/0x2e0 [ 55.431838] ? lock_downgrade+0x900/0x900 [ 55.435975] ? __fget_light+0x17f/0x1f0 [ 55.439952] ? __fdget+0xe/0x10 [ 55.443220] __sys_sendmsg+0xd9/0x180 [ 55.447001] ? __sys_sendmsg_sock+0xa0/0xa0 [ 55.451312] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 55.456584] ? __sched_text_start+0x8/0x8 [ 55.460727] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.466078] __x64_sys_sendmsg+0x73/0xb0 [ 55.470139] do_syscall_64+0xd0/0x600 [ 55.473928] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.479116] RIP: 0033:0x452f89 [ 55.482293] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 55.501267] RSP: 002b:00007f75c30edc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 55.508959] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 55.516213] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 55.523462] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 55.530711] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 55.537962] R13: 00000000ffffffff R14: 00007f75c30ee6d4 R15: 0000000000000002 [ 55.599694] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 55.612972] CPU: 1 PID: 4909 Comm: syz-executor1 Not tainted 5.5.0-rc6-syzkaller #0 [ 55.620772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.630388] Call Trace: [ 55.632971] [ 55.635139] dump_stack+0x12f/0x187 [ 55.638779] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 55.643983] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 55.648740] ? dccp_parse_options+0x333/0x1000 [ 55.648998] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 55.653330] dccp_deliver_input_to_ccids+0xcc/0x220 [ 55.653343] dccp_rcv_established+0x49/0x70 [ 55.653353] dccp_v4_do_rcv+0xf4/0x160 [ 55.653366] __sk_receive_skb+0x2b6/0x9e0 [ 55.653384] ? sk_free+0x60/0x60 [ 55.653392] ? dccp_invalid_packet+0x3ec/0x750 [ 55.653411] dccp_v4_rcv+0xc22/0x1c0b [ 55.695629] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 55.700381] ip_local_deliver_finish+0x1ee/0x2e0 [ 55.705146] ip_local_deliver+0x306/0x450 [ 55.709280] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 55.714191] ? lock_downgrade+0x900/0x900 [ 55.718325] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 55.723258] ip_rcv_finish+0xb0/0x170 [ 55.727045] ip_rcv+0xcb/0x2f0 [ 55.730228] ? ip_local_deliver+0x450/0x450 [ 55.734534] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 55.739886] ? ip_local_deliver+0x450/0x450 [ 55.744191] __netif_receive_skb_one_core+0x132/0x190 [ 55.749367] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 55.754629] ? lock_acquire+0x194/0x3e0 [ 55.758600] ? process_backlog+0x182/0x6d0 [ 55.762866] __netif_receive_skb+0x1f/0x1b0 [ 55.767191] process_backlog+0x1cb/0x6d0 [ 55.771257] ? __do_softirq+0x248/0x94c [ 55.775222] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 55.779800] net_rx_action+0x42d/0xde0 [ 55.783677] ? mark_lock+0xc5/0x1200 [ 55.787383] ? napi_busy_loop+0x6e0/0x6e0 [ 55.791512] ? rcu_is_watching+0x31/0x80 [ 55.795561] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 55.800385] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 55.805644] ? __do_softirq+0x1d9/0x94c [ 55.809599] ? ip_finish_output2+0x709/0x22a0 [ 55.814100] ? trace_hardirqs_on+0x28/0x180 [ 55.818415] __do_softirq+0x248/0x94c [ 55.822234] ? ip_finish_output2+0x709/0x22a0 [ 55.826718] do_softirq_own_stack+0x2a/0x40 [ 55.831023] [ 55.833244] do_softirq.part.17+0x11a/0x150 [ 55.837548] __local_bh_enable_ip+0x1ee/0x230 [ 55.842028] ip_finish_output2+0x72d/0x22a0 [ 55.846351] ? ip_frag_next+0xa10/0xa10 [ 55.850310] ? rcu_read_lock_held+0x9c/0xb0 [ 55.854617] ? rcu_read_lock_held_common+0x170/0x170 [ 55.859723] __ip_finish_output+0x401/0xa50 [ 55.865068] ? __ip_finish_output+0x401/0xa50 [ 55.869567] ip_finish_output+0x27/0x170 [ 55.873625] ip_output+0x1c6/0x560 [ 55.877166] ? ip_mc_output+0xd10/0xd10 [ 55.881130] ? __ip_finish_output+0xa50/0xa50 [ 55.885605] ? rcu_read_lock_held_common+0x170/0x170 [ 55.890725] ? rcu_read_lock_held+0x9c/0xb0 [ 55.895074] ip_local_out+0x7e/0x130 [ 55.898781] __ip_queue_xmit+0x6f6/0x1de0 [ 55.902924] ? __skb_checksum+0x7c0/0x7c0 [ 55.907080] ? skb_send_sock_locked+0x750/0x750 [ 55.911736] ? reqsk_fastopen_remove+0x560/0x560 [ 55.916480] ? dccp_insert_options+0x1e2/0xb20 [ 55.921059] ip_queue_xmit+0x45/0x70 [ 55.924774] dccp_transmit_skb+0xb76/0x12a0 [ 55.929087] dccp_xmit_packet+0x1a0/0x580 [ 55.933225] dccp_write_xmit+0x128/0x180 [ 55.937271] dccp_sendmsg+0x68f/0xdb0 [ 55.941062] ? aa_sk_perm+0x182/0x740 [ 55.944876] ? dccp_disconnect+0xa90/0xa90 [ 55.949118] ? aa_af_perm+0x240/0x240 [ 55.952919] inet_sendmsg+0xbd/0xe0 [ 55.956542] ? inet_send_prepare+0x3a0/0x3a0 [ 55.960931] sock_sendmsg+0xdf/0x110 [ 55.964731] ____sys_sendmsg+0x687/0xae0 [ 55.968776] ? copy_msghdr_from_user+0x20d/0x3f0 [ 55.974131] ? kernel_sendmsg+0x30/0x30 [ 55.978105] ? __fget+0x2ae/0x440 [ 55.981547] ___sys_sendmsg+0xe4/0x160 [ 55.985435] ? sendmsg_copy_msghdr+0x30/0x30 [ 55.989823] ? rcu_read_lock_held+0x9c/0xb0 [ 55.994126] ? rcu_read_lock_held_common+0x170/0x170 [ 55.999220] ? __fget+0x2c8/0x440 [ 56.002665] ? __x64_sys_dup2+0x2e0/0x2e0 [ 56.006796] ? lock_downgrade+0x900/0x900 [ 56.010938] ? __fget_light+0x17f/0x1f0 [ 56.014921] ? __fdget+0xe/0x10 [ 56.018299] __sys_sendmsg+0xd9/0x180 [ 56.022117] ? __sys_sendmsg_sock+0xa0/0xa0 [ 56.026449] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 56.031711] ? __sched_text_start+0x8/0x8 [ 56.035870] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.041226] __x64_sys_sendmsg+0x73/0xb0 [ 56.045276] do_syscall_64+0xd0/0x600 [ 56.049065] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.054237] RIP: 0033:0x452f89 [ 56.057433] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 56.076318] RSP: 002b:00007fc466345c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 56.084006] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 56.091257] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 56.098512] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 56.105763] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 56.113032] R13: 00000000ffffffff R14: 00007fc4663466d4 R15: 0000000000000002 [ 56.120309] CPU: 0 PID: 4920 Comm: syz-executor5 Not tainted 5.5.0-rc6-syzkaller #0 [ 56.126687] net_ratelimit: 20 callbacks suppressed [ 56.126691] dccp_close: ABORT with 24 bytes unread [ 56.128110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.128114] Call Trace: [ 56.128118] [ 56.128130] dump_stack+0x12f/0x187 [ 56.128154] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 56.128167] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 56.134628] dccp_close: ABORT with 24 bytes unread [ 56.138044] ? dccp_parse_options+0x333/0x1000 [ 56.138065] dccp_deliver_input_to_ccids+0xcc/0x220 [ 56.138076] dccp_rcv_established+0x49/0x70 [ 56.152776] dccp_close: ABORT with 24 bytes unread [ 56.156399] dccp_v4_do_rcv+0xf4/0x160 [ 56.156413] __sk_receive_skb+0x2b6/0x9e0 [ 56.156430] ? sk_free+0x60/0x60 [ 56.167901] dccp_close: ABORT with 24 bytes unread [ 56.171334] ? dccp_invalid_packet+0x3ec/0x750 [ 56.171353] dccp_v4_rcv+0xc22/0x1c0b [ 56.185266] dccp_close: ABORT with 24 bytes unread [ 56.185889] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 56.185905] ip_local_deliver_finish+0x1ee/0x2e0 [ 56.229964] ip_local_deliver+0x306/0x450 [ 56.234120] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 56.239046] ? lock_downgrade+0x900/0x900 [ 56.243202] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 56.248151] ip_rcv_finish+0xb0/0x170 [ 56.251960] ip_rcv+0xcb/0x2f0 [ 56.255161] ? ip_local_deliver+0x450/0x450 [ 56.259488] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 56.264877] ? ip_local_deliver+0x450/0x450 [ 56.265486] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 56.269196] __netif_receive_skb_one_core+0x132/0x190 [ 56.269206] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 56.269219] ? lock_acquire+0x194/0x3e0 [ 56.269226] ? process_backlog+0x182/0x6d0 [ 56.269241] __netif_receive_skb+0x1f/0x1b0 [ 56.269253] process_backlog+0x1cb/0x6d0 [ 56.269259] ? __do_softirq+0x248/0x94c [ 56.269267] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 56.269284] net_rx_action+0x42d/0xde0 [ 56.325396] ? mark_lock+0xc5/0x1200 [ 56.329100] ? napi_busy_loop+0x6e0/0x6e0 [ 56.333227] ? rcu_is_watching+0x31/0x80 [ 56.337276] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 56.342227] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 56.347497] ? __do_softirq+0x1d9/0x94c [ 56.351579] ? ip_finish_output2+0x709/0x22a0 [ 56.356063] ? trace_hardirqs_on+0x28/0x180 [ 56.360376] __do_softirq+0x248/0x94c [ 56.364172] ? ip_finish_output2+0x709/0x22a0 [ 56.368674] do_softirq_own_stack+0x2a/0x40 [ 56.373154] [ 56.375378] do_softirq.part.17+0x11a/0x150 [ 56.379685] __local_bh_enable_ip+0x1ee/0x230 [ 56.384164] ip_finish_output2+0x72d/0x22a0 [ 56.388488] ? ip_frag_next+0xa10/0xa10 [ 56.392468] ? rcu_read_lock_held+0x9c/0xb0 [ 56.396774] ? rcu_read_lock_held_common+0x170/0x170 [ 56.401878] __ip_finish_output+0x401/0xa50 [ 56.406191] ? __ip_finish_output+0x401/0xa50 [ 56.410706] ip_finish_output+0x27/0x170 [ 56.414772] ip_output+0x1c6/0x560 [ 56.418304] ? ip_mc_output+0xd10/0xd10 [ 56.422268] ? __ip_finish_output+0xa50/0xa50 [ 56.426756] ? rcu_read_lock_held_common+0x170/0x170 [ 56.431843] ? rcu_read_lock_held+0x9c/0xb0 [ 56.436151] ip_local_out+0x7e/0x130 [ 56.439849] __ip_queue_xmit+0x6f6/0x1de0 [ 56.443976] ? __skb_checksum+0x7c0/0x7c0 [ 56.448106] ? skb_send_sock_locked+0x750/0x750 [ 56.452773] ? reqsk_fastopen_remove+0x560/0x560 [ 56.457511] ? dccp_insert_options+0x1e2/0xb20 [ 56.462096] ip_queue_xmit+0x45/0x70 [ 56.465810] dccp_transmit_skb+0xb76/0x12a0 [ 56.470131] dccp_xmit_packet+0x1a0/0x580 [ 56.474280] dccp_write_xmit+0x128/0x180 [ 56.478326] dccp_sendmsg+0x68f/0xdb0 [ 56.482130] ? aa_sk_perm+0x182/0x740 [ 56.485917] ? dccp_disconnect+0xa90/0xa90 [ 56.490138] ? aa_af_perm+0x240/0x240 [ 56.493967] inet_sendmsg+0xbd/0xe0 [ 56.497578] ? inet_send_prepare+0x3a0/0x3a0 [ 56.501967] sock_sendmsg+0xdf/0x110 [ 56.505665] ____sys_sendmsg+0x687/0xae0 [ 56.509725] ? copy_msghdr_from_user+0x20d/0x3f0 [ 56.514483] ? kernel_sendmsg+0x30/0x30 [ 56.518472] ? __fget+0x2ae/0x440 [ 56.521916] ___sys_sendmsg+0xe4/0x160 [ 56.525790] ? sendmsg_copy_msghdr+0x30/0x30 [ 56.530181] ? rcu_read_lock_held+0x9c/0xb0 [ 56.534483] ? rcu_read_lock_held_common+0x170/0x170 [ 56.539575] ? __fget+0x2c8/0x440 [ 56.543019] ? __x64_sys_dup2+0x2e0/0x2e0 [ 56.547164] ? lock_downgrade+0x900/0x900 [ 56.551301] ? __fget_light+0x17f/0x1f0 [ 56.555259] ? __fdget+0xe/0x10 [ 56.558528] __sys_sendmsg+0xd9/0x180 [ 56.562319] ? __sys_sendmsg_sock+0xa0/0xa0 [ 56.566632] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 56.571892] ? __sched_text_start+0x8/0x8 [ 56.576332] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.581685] __x64_sys_sendmsg+0x73/0xb0 [ 56.585731] do_syscall_64+0xd0/0x600 [ 56.589516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.594689] RIP: 0033:0x452f89 [ 56.597868] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 56.616750] RSP: 002b:00007feddfc49c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 56.624448] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 56.631700] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 56.638952] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 56.646205] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 56.653456] R13: 00000000ffffffff R14: 00007feddfc4a6d4 R15: 0000000000000002 [ 56.660733] CPU: 1 PID: 4933 Comm: syz-executor4 Not tainted 5.5.0-rc6-syzkaller #0 [ 56.668519] dccp_close: ABORT with 24 bytes unread [ 56.668633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.682380] dccp_close: ABORT with 24 bytes unread [ 56.683012] Call Trace: [ 56.683018] [ 56.683030] dump_stack+0x12f/0x187 [ 56.683052] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 56.683067] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 56.683075] ? dccp_parse_options+0x333/0x1000 [ 56.683096] dccp_deliver_input_to_ccids+0xcc/0x220 [ 56.683108] dccp_rcv_established+0x49/0x70 [ 56.683116] dccp_v4_do_rcv+0xf4/0x160 [ 56.683129] __sk_receive_skb+0x2b6/0x9e0 [ 56.683145] ? sk_free+0x60/0x60 [ 56.683154] ? dccp_invalid_packet+0x3ec/0x750 [ 56.683171] dccp_v4_rcv+0xc22/0x1c0b [ 56.693764] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 56.696582] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 56.696602] ip_local_deliver_finish+0x1ee/0x2e0 [ 56.696616] ip_local_deliver+0x306/0x450 [ 56.696627] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 56.696634] ? lock_downgrade+0x900/0x900 [ 56.775949] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 56.780875] ip_rcv_finish+0xb0/0x170 [ 56.784663] ip_rcv+0xcb/0x2f0 [ 56.787841] ? ip_local_deliver+0x450/0x450 [ 56.792148] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 56.797499] ? ip_local_deliver+0x450/0x450 [ 56.801806] __netif_receive_skb_one_core+0x132/0x190 [ 56.806981] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 56.812170] ? lock_acquire+0x194/0x3e0 [ 56.816139] ? process_backlog+0x182/0x6d0 [ 56.820363] __netif_receive_skb+0x1f/0x1b0 [ 56.824687] process_backlog+0x1cb/0x6d0 [ 56.828748] ? __do_softirq+0x248/0x94c [ 56.832725] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 56.837307] net_rx_action+0x42d/0xde0 [ 56.841186] ? mark_lock+0xc5/0x1200 [ 56.844894] ? napi_busy_loop+0x6e0/0x6e0 [ 56.849030] ? rcu_is_watching+0x31/0x80 [ 56.853084] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 56.857912] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 56.863181] ? __do_softirq+0x1d9/0x94c [ 56.867137] ? ip_finish_output2+0x709/0x22a0 [ 56.871619] ? trace_hardirqs_on+0x28/0x180 [ 56.875933] __do_softirq+0x248/0x94c [ 56.879729] ? ip_finish_output2+0x709/0x22a0 [ 56.884227] do_softirq_own_stack+0x2a/0x40 [ 56.888529] [ 56.890756] do_softirq.part.17+0x11a/0x150 [ 56.895407] __local_bh_enable_ip+0x1ee/0x230 [ 56.899888] ip_finish_output2+0x72d/0x22a0 [ 56.904206] ? ip_frag_next+0xa10/0xa10 [ 56.908179] ? rcu_read_lock_held+0x9c/0xb0 [ 56.912507] ? rcu_read_lock_held_common+0x170/0x170 [ 56.917606] __ip_finish_output+0x401/0xa50 [ 56.921914] ? __ip_finish_output+0x401/0xa50 [ 56.926402] ip_finish_output+0x27/0x170 [ 56.930454] ip_output+0x1c6/0x560 [ 56.933981] ? ip_mc_output+0xd10/0xd10 [ 56.937945] ? __ip_finish_output+0xa50/0xa50 [ 56.942422] ? rcu_read_lock_held_common+0x170/0x170 [ 56.947507] ? rcu_read_lock_held+0x9c/0xb0 [ 56.951816] ip_local_out+0x7e/0x130 [ 56.955530] __ip_queue_xmit+0x6f6/0x1de0 [ 56.959671] ? __skb_checksum+0x7c0/0x7c0 [ 56.963817] ? skb_send_sock_locked+0x750/0x750 [ 56.968480] ? reqsk_fastopen_remove+0x560/0x560 [ 56.973221] ? dccp_insert_options+0x1e2/0xb20 [ 56.977812] ip_queue_xmit+0x45/0x70 [ 56.981517] dccp_transmit_skb+0xb76/0x12a0 [ 56.985839] dccp_xmit_packet+0x1a0/0x580 [ 56.990000] dccp_write_xmit+0x128/0x180 [ 56.994050] dccp_sendmsg+0x68f/0xdb0 [ 56.997837] ? aa_sk_perm+0x182/0x740 [ 57.001624] ? dccp_disconnect+0xa90/0xa90 [ 57.005845] ? aa_af_perm+0x240/0x240 [ 57.009648] inet_sendmsg+0xbd/0xe0 [ 57.013266] ? inet_send_prepare+0x3a0/0x3a0 [ 57.017655] sock_sendmsg+0xdf/0x110 [ 57.021354] ____sys_sendmsg+0x687/0xae0 [ 57.025423] ? copy_msghdr_from_user+0x20d/0x3f0 [ 57.030165] ? kernel_sendmsg+0x30/0x30 [ 57.034142] ? __fget+0x2ae/0x440 [ 57.037597] ___sys_sendmsg+0xe4/0x160 [ 57.041468] ? sendmsg_copy_msghdr+0x30/0x30 [ 57.045859] ? rcu_read_lock_held+0x9c/0xb0 [ 57.050163] ? rcu_read_lock_held_common+0x170/0x170 [ 57.055261] ? __fget+0x2c8/0x440 [ 57.058703] ? __x64_sys_dup2+0x2e0/0x2e0 [ 57.062833] ? lock_downgrade+0x900/0x900 [ 57.066974] ? __fget_light+0x17f/0x1f0 [ 57.070932] ? __fdget+0xe/0x10 [ 57.074205] __sys_sendmsg+0xd9/0x180 [ 57.077989] ? __sys_sendmsg_sock+0xa0/0xa0 [ 57.082304] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 57.087674] ? __sched_text_start+0x8/0x8 [ 57.091833] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.097223] __x64_sys_sendmsg+0x73/0xb0 [ 57.101278] do_syscall_64+0xd0/0x600 [ 57.105089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.110265] RIP: 0033:0x452f89 [ 57.113449] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.132339] RSP: 002b:00007fceb6132c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 57.140031] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 57.147723] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 57.154978] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 57.162230] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 57.169483] R13: 00000000ffffffff R14: 00007fceb61336d4 R15: 0000000000000002 [ 57.176762] CPU: 0 PID: 4937 Comm: syz-executor Not tainted 5.5.0-rc6-syzkaller #0 [ 57.184491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.193835] Call Trace: [ 57.196400] [ 57.198538] dump_stack+0x12f/0x187 [ 57.202156] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 57.207346] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 57.212098] ? dccp_parse_options+0x333/0x1000 [ 57.216674] dccp_deliver_input_to_ccids+0xcc/0x220 [ 57.221809] dccp_rcv_established+0x49/0x70 [ 57.226130] dccp_v4_do_rcv+0xf4/0x160 [ 57.230017] __sk_receive_skb+0x2b6/0x9e0 [ 57.234170] ? sk_free+0x60/0x60 [ 57.237530] ? dccp_invalid_packet+0x3ec/0x750 [ 57.242106] dccp_v4_rcv+0xc22/0x1c0b [ 57.245922] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 57.250675] ip_local_deliver_finish+0x1ee/0x2e0 [ 57.255419] ip_local_deliver+0x306/0x450 [ 57.259554] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 57.264464] ? lock_downgrade+0x900/0x900 [ 57.268593] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 57.273527] ip_rcv_finish+0xb0/0x170 [ 57.277316] ip_rcv+0xcb/0x2f0 [ 57.280490] ? ip_local_deliver+0x450/0x450 [ 57.284808] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 57.290173] ? ip_local_deliver+0x450/0x450 [ 57.294478] __netif_receive_skb_one_core+0x132/0x190 [ 57.299649] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 57.304821] ? lock_acquire+0x194/0x3e0 [ 57.308775] ? process_backlog+0x182/0x6d0 [ 57.312994] __netif_receive_skb+0x1f/0x1b0 [ 57.317312] process_backlog+0x1cb/0x6d0 [ 57.321354] ? __do_softirq+0x248/0x94c [ 57.325311] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 57.329887] net_rx_action+0x42d/0xde0 [ 57.333756] ? mark_lock+0xc5/0x1200 [ 57.337456] ? napi_busy_loop+0x6e0/0x6e0 [ 57.341588] ? rcu_is_watching+0x31/0x80 [ 57.345649] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 57.350476] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 57.355735] ? __do_softirq+0x1d9/0x94c [ 57.359686] ? ip_finish_output2+0x709/0x22a0 [ 57.364164] ? trace_hardirqs_on+0x28/0x180 [ 57.368484] __do_softirq+0x248/0x94c [ 57.372275] ? ip_finish_output2+0x709/0x22a0 [ 57.376767] do_softirq_own_stack+0x2a/0x40 [ 57.381068] [ 57.383287] do_softirq.part.17+0x11a/0x150 [ 57.387677] __local_bh_enable_ip+0x1ee/0x230 [ 57.392161] ip_finish_output2+0x72d/0x22a0 [ 57.396485] ? ip_frag_next+0xa10/0xa10 [ 57.400455] ? rcu_read_lock_held+0x9c/0xb0 [ 57.404781] ? rcu_read_lock_held_common+0x170/0x170 [ 57.409898] __ip_finish_output+0x401/0xa50 [ 57.414210] ? __ip_finish_output+0x401/0xa50 [ 57.418701] ip_finish_output+0x27/0x170 [ 57.424422] ip_output+0x1c6/0x560 [ 57.427955] ? ip_mc_output+0xd10/0xd10 [ 57.431919] ? __ip_finish_output+0xa50/0xa50 [ 57.436416] ? rcu_read_lock_held_common+0x170/0x170 [ 57.441505] ? rcu_read_lock_held+0x9c/0xb0 [ 57.445816] ip_local_out+0x7e/0x130 [ 57.449524] __ip_queue_xmit+0x6f6/0x1de0 [ 57.453652] ? __skb_checksum+0x7c0/0x7c0 [ 57.457782] ? skb_send_sock_locked+0x750/0x750 [ 57.462443] ? reqsk_fastopen_remove+0x560/0x560 [ 57.467179] ? dccp_insert_options+0x1e2/0xb20 [ 57.471756] ip_queue_xmit+0x45/0x70 [ 57.475468] dccp_transmit_skb+0xb76/0x12a0 [ 57.479814] dccp_xmit_packet+0x1a0/0x580 [ 57.483964] dccp_write_xmit+0x128/0x180 [ 57.488022] dccp_sendmsg+0x68f/0xdb0 [ 57.491845] ? aa_sk_perm+0x182/0x740 [ 57.495665] ? dccp_disconnect+0xa90/0xa90 [ 57.499884] ? aa_af_perm+0x240/0x240 [ 57.503686] inet_sendmsg+0xbd/0xe0 [ 57.507317] ? inet_send_prepare+0x3a0/0x3a0 [ 57.511709] sock_sendmsg+0xdf/0x110 [ 57.515409] ____sys_sendmsg+0x687/0xae0 [ 57.519456] ? copy_msghdr_from_user+0x20d/0x3f0 [ 57.524196] ? kernel_sendmsg+0x30/0x30 [ 57.528156] ? __fget+0x2ae/0x440 [ 57.531601] ___sys_sendmsg+0xe4/0x160 [ 57.535471] ? sendmsg_copy_msghdr+0x30/0x30 [ 57.539861] ? rcu_read_lock_held+0x9c/0xb0 [ 57.544163] ? rcu_read_lock_held_common+0x170/0x170 [ 57.549246] ? find_held_lock+0x36/0x1d0 [ 57.553312] ? __fget+0x2c8/0x440 [ 57.556754] ? __x64_sys_dup2+0x2e0/0x2e0 [ 57.560886] ? trace_hardirqs_on+0x28/0x180 [ 57.565190] ? release_sock+0x122/0x180 [ 57.569152] ? __fget_light+0x17f/0x1f0 [ 57.573555] ? _raw_spin_unlock_bh+0x2b/0x30 [ 57.577953] ? __fdget+0xe/0x10 [ 57.581221] __sys_sendmsg+0xd9/0x180 [ 57.585011] ? __sys_sendmsg_sock+0xa0/0xa0 [ 57.589321] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 57.594605] ? __sys_listen+0x1e8/0x230 [ 57.598593] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.604032] __x64_sys_sendmsg+0x73/0xb0 [ 57.608087] do_syscall_64+0xd0/0x600 [ 57.611880] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.617332] RIP: 0033:0x452f89 [ 57.620508] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.639392] RSP: 002b:00007f75c30edc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 57.647100] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 57.654352] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 57.661614] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 57.668865] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 57.676129] R13: 00000000ffffffff R14: 00007f75c30ee6d4 R15: 0000000000000002 [ 57.692907] dccp_close: ABORT with 24 bytes unread [ 57.698374] dccp_close: ABORT with 24 bytes unread [ 57.699165] dccp_close: ABORT with 24 bytes unread [ 57.745084] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 57.758524] CPU: 1 PID: 4956 Comm: syz-executor3 Not tainted 5.5.0-rc6-syzkaller #0 [ 57.766333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.775726] Call Trace: [ 57.778320] [ 57.780474] dump_stack+0x12f/0x187 [ 57.784111] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 57.784194] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 57.789301] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 57.789307] ? dccp_parse_options+0x333/0x1000 [ 57.789328] dccp_deliver_input_to_ccids+0xcc/0x220 [ 57.789339] dccp_rcv_established+0x49/0x70 [ 57.789348] dccp_v4_do_rcv+0xf4/0x160 [ 57.789362] __sk_receive_skb+0x2b6/0x9e0 [ 57.789379] ? sk_free+0x60/0x60 [ 57.789387] ? dccp_invalid_packet+0x3ec/0x750 [ 57.789404] dccp_v4_rcv+0xc22/0x1c0b [ 57.840943] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 57.845693] ip_local_deliver_finish+0x1ee/0x2e0 [ 57.850438] ip_local_deliver+0x306/0x450 [ 57.854570] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 57.859484] ? lock_downgrade+0x900/0x900 [ 57.863622] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 57.868547] ip_rcv_finish+0xb0/0x170 [ 57.872336] ip_rcv+0xcb/0x2f0 [ 57.875537] ? ip_local_deliver+0x450/0x450 [ 57.879848] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 57.885213] ? ip_local_deliver+0x450/0x450 [ 57.889536] __netif_receive_skb_one_core+0x132/0x190 [ 57.894740] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 57.899940] ? lock_acquire+0x194/0x3e0 [ 57.903921] ? process_backlog+0x182/0x6d0 [ 57.908184] __netif_receive_skb+0x1f/0x1b0 [ 57.912498] process_backlog+0x1cb/0x6d0 [ 57.916547] ? __do_softirq+0x248/0x94c [ 57.920527] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 57.925112] net_rx_action+0x42d/0xde0 [ 57.928986] ? mark_lock+0xc5/0x1200 [ 57.932702] ? napi_busy_loop+0x6e0/0x6e0 [ 57.936855] ? rcu_is_watching+0x31/0x80 [ 57.940903] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 57.945728] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 57.950996] ? __do_softirq+0x1d9/0x94c [ 57.954954] ? ip_finish_output2+0x709/0x22a0 [ 57.959445] ? trace_hardirqs_on+0x28/0x180 [ 57.963754] __do_softirq+0x248/0x94c [ 57.967549] ? ip_finish_output2+0x709/0x22a0 [ 57.972047] do_softirq_own_stack+0x2a/0x40 [ 57.976347] [ 57.978585] do_softirq.part.17+0x11a/0x150 [ 57.982888] __local_bh_enable_ip+0x1ee/0x230 [ 57.987366] ip_finish_output2+0x72d/0x22a0 [ 57.991680] ? ip_frag_next+0xa10/0xa10 [ 57.995639] ? rcu_read_lock_held+0x9c/0xb0 [ 57.999943] ? rcu_read_lock_held_common+0x170/0x170 [ 58.005037] __ip_finish_output+0x401/0xa50 [ 58.009340] ? __ip_finish_output+0x401/0xa50 [ 58.013825] ip_finish_output+0x27/0x170 [ 58.017883] ip_output+0x1c6/0x560 [ 58.021546] ? ip_mc_output+0xd10/0xd10 [ 58.025523] ? __ip_finish_output+0xa50/0xa50 [ 58.030012] ? rcu_read_lock_held_common+0x170/0x170 [ 58.035120] ? rcu_read_lock_held+0x9c/0xb0 [ 58.039440] ip_local_out+0x7e/0x130 [ 58.043278] __ip_queue_xmit+0x6f6/0x1de0 [ 58.047513] ? __skb_checksum+0x7c0/0x7c0 [ 58.051750] ? skb_send_sock_locked+0x750/0x750 [ 58.056409] ? reqsk_fastopen_remove+0x560/0x560 [ 58.061212] ? dccp_insert_options+0x1e2/0xb20 [ 58.065807] ip_queue_xmit+0x45/0x70 [ 58.069517] dccp_transmit_skb+0xb76/0x12a0 [ 58.073847] dccp_xmit_packet+0x1a0/0x580 [ 58.077982] dccp_write_xmit+0x128/0x180 [ 58.082048] dccp_sendmsg+0x68f/0xdb0 [ 58.086806] ? aa_sk_perm+0x182/0x740 [ 58.090625] ? dccp_disconnect+0xa90/0xa90 [ 58.094855] ? aa_af_perm+0x240/0x240 [ 58.098670] inet_sendmsg+0xbd/0xe0 [ 58.102287] ? inet_send_prepare+0x3a0/0x3a0 [ 58.106695] sock_sendmsg+0xdf/0x110 [ 58.110409] ____sys_sendmsg+0x687/0xae0 [ 58.114497] ? copy_msghdr_from_user+0x20d/0x3f0 [ 58.119270] ? kernel_sendmsg+0x30/0x30 [ 58.123254] ? __fget+0x2ae/0x440 [ 58.126744] ___sys_sendmsg+0xe4/0x160 [ 58.130623] ? sendmsg_copy_msghdr+0x30/0x30 [ 58.135026] ? rcu_read_lock_held+0x9c/0xb0 [ 58.139345] ? rcu_read_lock_held_common+0x170/0x170 [ 58.144801] ? __fget+0x2c8/0x440 [ 58.148258] ? __x64_sys_dup2+0x2e0/0x2e0 [ 58.152401] ? lock_downgrade+0x900/0x900 [ 58.156688] ? __fget_light+0x17f/0x1f0 [ 58.160664] ? __fdget+0xe/0x10 [ 58.164265] __sys_sendmsg+0xd9/0x180 [ 58.168057] ? __sys_sendmsg_sock+0xa0/0xa0 [ 58.172374] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 58.177643] ? __sched_text_start+0x8/0x8 [ 58.181801] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.187166] __x64_sys_sendmsg+0x73/0xb0 [ 58.191231] do_syscall_64+0xd0/0x600 [ 58.195025] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.200199] RIP: 0033:0x452f89 [ 58.203391] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.222279] RSP: 002b:00007f333aedcc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 58.229969] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 58.237219] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 58.244479] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 58.251750] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 58.259190] R13: 00000000ffffffff R14: 00007f333aedd6d4 R15: 0000000000000002 [ 58.266478] CPU: 0 PID: 4955 Comm: syz-executor5 Not tainted 5.5.0-rc6-syzkaller #0 [ 58.274280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.283624] Call Trace: [ 58.286197] [ 58.288347] dump_stack+0x12f/0x187 [ 58.292236] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 58.297416] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 58.302158] ? dccp_parse_options+0x333/0x1000 [ 58.306744] dccp_deliver_input_to_ccids+0xcc/0x220 [ 58.311862] dccp_rcv_established+0x49/0x70 [ 58.316173] dccp_v4_do_rcv+0xf4/0x160 [ 58.320054] __sk_receive_skb+0x2b6/0x9e0 [ 58.324203] ? sk_free+0x60/0x60 [ 58.327560] ? dccp_invalid_packet+0x3ec/0x750 [ 58.332149] dccp_v4_rcv+0xc22/0x1c0b [ 58.336030] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 58.340916] ip_local_deliver_finish+0x1ee/0x2e0 [ 58.345678] ip_local_deliver+0x306/0x450 [ 58.349815] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 58.354733] ? lock_downgrade+0x900/0x900 [ 58.358883] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 58.363817] ip_rcv_finish+0xb0/0x170 [ 58.367728] ip_rcv+0xcb/0x2f0 [ 58.370906] ? ip_local_deliver+0x450/0x450 [ 58.375210] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 58.380672] ? ip_local_deliver+0x450/0x450 [ 58.385019] __netif_receive_skb_one_core+0x132/0x190 [ 58.390204] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 58.395383] ? lock_acquire+0x194/0x3e0 [ 58.399365] ? process_backlog+0x182/0x6d0 [ 58.403586] __netif_receive_skb+0x1f/0x1b0 [ 58.407892] process_backlog+0x1cb/0x6d0 [ 58.411947] ? __do_softirq+0x248/0x94c [ 58.415972] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 58.420545] net_rx_action+0x42d/0xde0 [ 58.424432] ? mark_lock+0xc5/0x1200 [ 58.428146] ? napi_busy_loop+0x6e0/0x6e0 [ 58.432288] ? rcu_is_watching+0x31/0x80 [ 58.436342] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 58.441168] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 58.446432] ? __do_softirq+0x1d9/0x94c [ 58.450393] ? ip_finish_output2+0x709/0x22a0 [ 58.454872] ? trace_hardirqs_on+0x28/0x180 [ 58.459193] __do_softirq+0x248/0x94c [ 58.462986] ? ip_finish_output2+0x709/0x22a0 [ 58.467466] do_softirq_own_stack+0x2a/0x40 [ 58.471771] [ 58.473993] do_softirq.part.17+0x11a/0x150 [ 58.478371] __local_bh_enable_ip+0x1ee/0x230 [ 58.482873] ip_finish_output2+0x72d/0x22a0 [ 58.487198] ? ip_frag_next+0xa10/0xa10 [ 58.491171] ? rcu_read_lock_held+0x9c/0xb0 [ 58.495480] ? rcu_read_lock_held_common+0x170/0x170 [ 58.500576] __ip_finish_output+0x401/0xa50 [ 58.504884] ? __ip_finish_output+0x401/0xa50 [ 58.509385] ip_finish_output+0x27/0x170 [ 58.513549] ip_output+0x1c6/0x560 [ 58.517095] ? ip_mc_output+0xd10/0xd10 [ 58.521065] ? __ip_finish_output+0xa50/0xa50 [ 58.525556] ? rcu_read_lock_held_common+0x170/0x170 [ 58.530657] ? rcu_read_lock_held+0x9c/0xb0 [ 58.534977] ip_local_out+0x7e/0x130 [ 58.538685] __ip_queue_xmit+0x6f6/0x1de0 [ 58.542933] ? __skb_checksum+0x7c0/0x7c0 [ 58.547230] ? skb_send_sock_locked+0x750/0x750 [ 58.551887] ? reqsk_fastopen_remove+0x560/0x560 [ 58.556637] ? dccp_insert_options+0x1e2/0xb20 [ 58.561348] ip_queue_xmit+0x45/0x70 [ 58.565048] dccp_transmit_skb+0xb76/0x12a0 [ 58.569365] dccp_xmit_packet+0x1a0/0x580 [ 58.573514] dccp_write_xmit+0x128/0x180 [ 58.577573] dccp_sendmsg+0x68f/0xdb0 [ 58.581361] ? aa_sk_perm+0x182/0x740 [ 58.585159] ? dccp_disconnect+0xa90/0xa90 [ 58.589403] ? aa_af_perm+0x240/0x240 [ 58.593208] inet_sendmsg+0xbd/0xe0 [ 58.596830] ? inet_send_prepare+0x3a0/0x3a0 [ 58.601221] sock_sendmsg+0xdf/0x110 [ 58.604932] ____sys_sendmsg+0x687/0xae0 [ 58.609004] ? copy_msghdr_from_user+0x20d/0x3f0 [ 58.613749] ? kernel_sendmsg+0x30/0x30 [ 58.617729] ? __fget+0x2ae/0x440 [ 58.621179] ___sys_sendmsg+0xe4/0x160 [ 58.625062] ? sendmsg_copy_msghdr+0x30/0x30 [ 58.629456] ? rcu_read_lock_held+0x9c/0xb0 [ 58.633764] ? rcu_read_lock_held_common+0x170/0x170 [ 58.638891] ? __fget+0x2c8/0x440 [ 58.642340] ? __x64_sys_dup2+0x2e0/0x2e0 [ 58.646475] ? lock_downgrade+0x900/0x900 [ 58.650628] ? __fget_light+0x17f/0x1f0 [ 58.654598] ? __fdget+0xe/0x10 [ 58.657874] __sys_sendmsg+0xd9/0x180 [ 58.661673] ? __sys_sendmsg_sock+0xa0/0xa0 [ 58.666870] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 58.672284] ? __sched_text_start+0x8/0x8 [ 58.676442] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.681799] __x64_sys_sendmsg+0x73/0xb0 [ 58.685849] do_syscall_64+0xd0/0x600 [ 58.689642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.694815] RIP: 0033:0x452f89 [ 58.697993] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.716882] RSP: 002b:00007feddfc49c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 58.726053] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 58.733320] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 58.740571] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 2020/01/13 01:49:24 executed programs: 46 [ 58.747823] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 58.755076] R13: 00000000ffffffff R14: 00007feddfc4a6d4 R15: 0000000000000002 [ 58.846513] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 58.859839] CPU: 1 PID: 4985 Comm: syz-executor1 Not tainted 5.5.0-rc6-syzkaller #0 [ 58.867635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.876997] Call Trace: [ 58.879593] [ 58.881756] dump_stack+0x12f/0x187 [ 58.885398] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 58.890600] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 58.895358] ? dccp_parse_options+0x333/0x1000 [ 58.900176] dccp_deliver_input_to_ccids+0xcc/0x220 [ 58.905199] dccp_rcv_established+0x49/0x70 [ 58.909537] dccp_v4_do_rcv+0xf4/0x160 [ 58.913431] __sk_receive_skb+0x2b6/0x9e0 [ 58.917586] ? sk_free+0x60/0x60 [ 58.920957] ? dccp_invalid_packet+0x3ec/0x750 [ 58.925556] dccp_v4_rcv+0xc22/0x1c0b [ 58.929378] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 58.934157] ip_local_deliver_finish+0x1ee/0x2e0 [ 58.938920] ip_local_deliver+0x306/0x450 [ 58.943073] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 58.948001] ? lock_downgrade+0x900/0x900 [ 58.952154] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 58.957101] ip_rcv_finish+0xb0/0x170 [ 58.960917] ip_rcv+0xcb/0x2f0 [ 58.964116] ? ip_local_deliver+0x450/0x450 [ 58.968458] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 58.973838] ? ip_local_deliver+0x450/0x450 [ 58.978163] __netif_receive_skb_one_core+0x132/0x190 [ 58.983355] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 58.988554] ? lock_acquire+0x194/0x3e0 [ 58.992527] ? process_backlog+0x182/0x6d0 [ 58.996771] __netif_receive_skb+0x1f/0x1b0 [ 59.001107] process_backlog+0x1cb/0x6d0 [ 59.005168] ? __do_softirq+0x248/0x94c [ 59.009169] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 59.013773] net_rx_action+0x42d/0xde0 [ 59.017665] ? mark_lock+0xc5/0x1200 [ 59.021391] ? napi_busy_loop+0x6e0/0x6e0 [ 59.025557] ? rcu_is_watching+0x31/0x80 [ 59.029629] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 59.033279] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 59.034561] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 59.034567] ? __do_softirq+0x1d9/0x94c [ 59.034573] ? ip_finish_output2+0x709/0x22a0 [ 59.034580] ? trace_hardirqs_on+0x28/0x180 [ 59.034593] __do_softirq+0x248/0x94c [ 59.034614] ? ip_finish_output2+0x709/0x22a0 [ 59.034626] do_softirq_own_stack+0x2a/0x40 [ 59.034631] [ 59.034640] do_softirq.part.17+0x11a/0x150 [ 59.034648] __local_bh_enable_ip+0x1ee/0x230 [ 59.034656] ip_finish_output2+0x72d/0x22a0 [ 59.034674] ? ip_frag_next+0xa10/0xa10 [ 59.097669] ? rcu_read_lock_held+0x9c/0xb0 [ 59.101976] ? rcu_read_lock_held_common+0x170/0x170 [ 59.107071] __ip_finish_output+0x401/0xa50 [ 59.111381] ? __ip_finish_output+0x401/0xa50 [ 59.115873] ip_finish_output+0x27/0x170 [ 59.119936] ip_output+0x1c6/0x560 [ 59.123469] ? ip_mc_output+0xd10/0xd10 [ 59.127431] ? __ip_finish_output+0xa50/0xa50 [ 59.131914] ? rcu_read_lock_held_common+0x170/0x170 [ 59.137001] ? rcu_read_lock_held+0x9c/0xb0 [ 59.141308] ip_local_out+0x7e/0x130 [ 59.145008] __ip_queue_xmit+0x6f6/0x1de0 [ 59.149140] ? __skb_checksum+0x7c0/0x7c0 [ 59.153288] ? skb_send_sock_locked+0x750/0x750 [ 59.157943] ? reqsk_fastopen_remove+0x560/0x560 [ 59.162706] ? dccp_insert_options+0x1e2/0xb20 [ 59.167281] ip_queue_xmit+0x45/0x70 [ 59.170981] dccp_transmit_skb+0xb76/0x12a0 [ 59.175298] dccp_xmit_packet+0x1a0/0x580 [ 59.179447] dccp_write_xmit+0x128/0x180 [ 59.183497] dccp_sendmsg+0x68f/0xdb0 [ 59.187287] ? aa_sk_perm+0x182/0x740 [ 59.191076] ? dccp_disconnect+0xa90/0xa90 [ 59.195293] ? aa_af_perm+0x240/0x240 [ 59.199462] inet_sendmsg+0xbd/0xe0 [ 59.203073] ? inet_send_prepare+0x3a0/0x3a0 [ 59.207483] sock_sendmsg+0xdf/0x110 [ 59.211182] ____sys_sendmsg+0x687/0xae0 [ 59.215255] ? copy_msghdr_from_user+0x20d/0x3f0 [ 59.220010] ? kernel_sendmsg+0x30/0x30 [ 59.224020] ? __fget+0x2ae/0x440 [ 59.227484] ___sys_sendmsg+0xe4/0x160 [ 59.231362] ? sendmsg_copy_msghdr+0x30/0x30 [ 59.235755] ? rcu_read_lock_held+0x9c/0xb0 [ 59.240067] ? rcu_read_lock_held_common+0x170/0x170 [ 59.245155] ? find_held_lock+0x36/0x1d0 [ 59.249207] ? __fget+0x2c8/0x440 [ 59.252659] ? __x64_sys_dup2+0x2e0/0x2e0 [ 59.256802] ? trace_hardirqs_on+0x28/0x180 [ 59.261105] ? release_sock+0x122/0x180 [ 59.265068] ? __fget_light+0x17f/0x1f0 [ 59.269025] ? _raw_spin_unlock_bh+0x2b/0x30 [ 59.273429] ? __fdget+0xe/0x10 [ 59.276723] __sys_sendmsg+0xd9/0x180 [ 59.280524] ? __sys_sendmsg_sock+0xa0/0xa0 [ 59.284858] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 59.290116] ? __sched_text_start+0x8/0x8 [ 59.294256] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.299609] __x64_sys_sendmsg+0x73/0xb0 [ 59.303656] do_syscall_64+0xd0/0x600 [ 59.307445] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.312617] RIP: 0033:0x452f89 [ 59.315791] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.334682] RSP: 002b:00007fc466345c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 59.342370] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 59.349629] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 59.356986] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 59.364259] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 59.371512] R13: 00000000ffffffff R14: 00007fc4663466d4 R15: 0000000000000002 [ 59.378796] CPU: 0 PID: 5020 Comm: syz-executor5 Not tainted 5.5.0-rc6-syzkaller #0 [ 59.386603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.395959] Call Trace: [ 59.398890] [ 59.401043] dump_stack+0x12f/0x187 [ 59.404694] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 59.409898] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 59.414661] ? dccp_parse_options+0x333/0x1000 [ 59.419293] dccp_deliver_input_to_ccids+0xcc/0x220 [ 59.419298] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 59.437488] dccp_rcv_established+0x49/0x70 [ 59.441792] dccp_v4_do_rcv+0xf4/0x160 [ 59.445668] __sk_receive_skb+0x2b6/0x9e0 [ 59.449840] ? sk_free+0x60/0x60 [ 59.453189] ? dccp_invalid_packet+0x3ec/0x750 [ 59.457764] dccp_v4_rcv+0xc22/0x1c0b [ 59.461594] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 59.466353] ip_local_deliver_finish+0x1ee/0x2e0 [ 59.471115] ip_local_deliver+0x306/0x450 [ 59.475246] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 59.480169] ? lock_downgrade+0x900/0x900 [ 59.484303] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 59.489237] ip_rcv_finish+0xb0/0x170 [ 59.493030] ip_rcv+0xcb/0x2f0 [ 59.496208] ? ip_local_deliver+0x450/0x450 [ 59.500515] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 59.505866] ? ip_local_deliver+0x450/0x450 [ 59.510170] __netif_receive_skb_one_core+0x132/0x190 [ 59.515358] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 59.520532] ? lock_acquire+0x194/0x3e0 [ 59.524489] ? process_backlog+0x182/0x6d0 [ 59.528726] __netif_receive_skb+0x1f/0x1b0 [ 59.533033] process_backlog+0x1cb/0x6d0 [ 59.537078] ? __do_softirq+0x248/0x94c [ 59.541035] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 59.545644] net_rx_action+0x42d/0xde0 [ 59.549539] ? mark_lock+0xc5/0x1200 [ 59.553252] ? napi_busy_loop+0x6e0/0x6e0 [ 59.557388] ? rcu_is_watching+0x31/0x80 [ 59.561465] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 59.566295] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 59.571557] ? __do_softirq+0x1d9/0x94c [ 59.575516] ? ip_finish_output2+0x709/0x22a0 [ 59.579996] ? trace_hardirqs_on+0x28/0x180 [ 59.584308] __do_softirq+0x248/0x94c [ 59.588100] ? ip_finish_output2+0x709/0x22a0 [ 59.592581] do_softirq_own_stack+0x2a/0x40 [ 59.596914] [ 59.599161] do_softirq.part.17+0x11a/0x150 [ 59.604076] __local_bh_enable_ip+0x1ee/0x230 [ 59.608570] ip_finish_output2+0x72d/0x22a0 [ 59.612890] ? ip_frag_next+0xa10/0xa10 [ 59.616857] ? rcu_read_lock_held+0x9c/0xb0 [ 59.621192] ? rcu_read_lock_held_common+0x170/0x170 [ 59.626298] __ip_finish_output+0x401/0xa50 [ 59.630616] ? __ip_finish_output+0x401/0xa50 [ 59.635123] ip_finish_output+0x27/0x170 [ 59.639174] ip_output+0x1c6/0x560 [ 59.642719] ? ip_mc_output+0xd10/0xd10 [ 59.646683] ? __ip_finish_output+0xa50/0xa50 [ 59.651163] ? rcu_read_lock_held_common+0x170/0x170 [ 59.656254] ? rcu_read_lock_held+0x9c/0xb0 [ 59.660594] ip_local_out+0x7e/0x130 [ 59.664300] __ip_queue_xmit+0x6f6/0x1de0 [ 59.668431] ? __skb_checksum+0x7c0/0x7c0 [ 59.672562] ? skb_send_sock_locked+0x750/0x750 [ 59.677214] ? reqsk_fastopen_remove+0x560/0x560 [ 59.681957] ? dccp_insert_options+0x1e2/0xb20 [ 59.686540] ip_queue_xmit+0x45/0x70 [ 59.690261] dccp_transmit_skb+0xb76/0x12a0 [ 59.694577] dccp_xmit_packet+0x1a0/0x580 [ 59.698715] dccp_write_xmit+0x128/0x180 [ 59.702764] dccp_sendmsg+0x68f/0xdb0 [ 59.706550] ? aa_sk_perm+0x182/0x740 [ 59.710364] ? dccp_disconnect+0xa90/0xa90 [ 59.714588] ? aa_af_perm+0x240/0x240 [ 59.718394] inet_sendmsg+0xbd/0xe0 [ 59.722100] ? inet_send_prepare+0x3a0/0x3a0 [ 59.726495] sock_sendmsg+0xdf/0x110 [ 59.730209] ____sys_sendmsg+0x687/0xae0 [ 59.734268] ? copy_msghdr_from_user+0x20d/0x3f0 [ 59.739048] ? kernel_sendmsg+0x30/0x30 [ 59.743018] ? __fget+0x2ae/0x440 [ 59.746466] ___sys_sendmsg+0xe4/0x160 [ 59.750341] ? sendmsg_copy_msghdr+0x30/0x30 [ 59.754737] ? rcu_read_lock_held+0x9c/0xb0 [ 59.759045] ? rcu_read_lock_held_common+0x170/0x170 [ 59.764142] ? find_held_lock+0x36/0x1d0 [ 59.768193] ? __fget+0x2c8/0x440 [ 59.771635] ? __x64_sys_dup2+0x2e0/0x2e0 [ 59.775766] ? trace_hardirqs_on+0x28/0x180 [ 59.780071] ? release_sock+0x122/0x180 [ 59.784035] ? __fget_light+0x17f/0x1f0 [ 59.787997] ? _raw_spin_unlock_bh+0x2b/0x30 [ 59.792400] ? __fdget+0xe/0x10 [ 59.795712] __sys_sendmsg+0xd9/0x180 [ 59.799496] ? __sys_sendmsg_sock+0xa0/0xa0 [ 59.803811] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 59.809069] ? __sched_text_start+0x8/0x8 [ 59.813234] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.818599] __x64_sys_sendmsg+0x73/0xb0 [ 59.822650] do_syscall_64+0xd0/0x600 [ 59.826455] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.831627] RIP: 0033:0x452f89 [ 59.834818] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.853700] RSP: 002b:00007feddfc49c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 59.862405] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 59.869677] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 59.876948] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 59.884338] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 59.891603] R13: 00000000ffffffff R14: 00007feddfc4a6d4 R15: 0000000000000002 [ 59.898889] CPU: 1 PID: 5028 Comm: syz-executor4 Not tainted 5.5.0-rc6-syzkaller #0 [ 59.902977] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 59.906698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.906701] Call Trace: [ 59.906705] [ 59.906716] dump_stack+0x12f/0x187 [ 59.906736] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 59.906749] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 59.948277] ? dccp_parse_options+0x333/0x1000 [ 59.952853] dccp_deliver_input_to_ccids+0xcc/0x220 [ 59.957858] dccp_rcv_established+0x49/0x70 [ 59.962165] dccp_v4_do_rcv+0xf4/0x160 [ 59.966039] __sk_receive_skb+0x2b6/0x9e0 [ 59.970176] ? sk_free+0x60/0x60 [ 59.973613] ? dccp_invalid_packet+0x3ec/0x750 [ 59.978186] dccp_v4_rcv+0xc22/0x1c0b [ 59.982000] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 59.986747] ip_local_deliver_finish+0x1ee/0x2e0 [ 59.991489] ip_local_deliver+0x306/0x450 [ 59.995628] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 60.000552] ? lock_downgrade+0x900/0x900 [ 60.004702] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 60.009623] ip_rcv_finish+0xb0/0x170 [ 60.013408] ip_rcv+0xcb/0x2f0 [ 60.016589] ? ip_local_deliver+0x450/0x450 [ 60.020898] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 60.026269] ? ip_local_deliver+0x450/0x450 [ 60.030613] __netif_receive_skb_one_core+0x132/0x190 [ 60.035809] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 60.040994] ? lock_acquire+0x194/0x3e0 [ 60.044968] ? process_backlog+0x182/0x6d0 [ 60.049197] __netif_receive_skb+0x1f/0x1b0 [ 60.053529] process_backlog+0x1cb/0x6d0 [ 60.057586] ? __do_softirq+0x248/0x94c [ 60.061543] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 60.066115] net_rx_action+0x42d/0xde0 [ 60.069994] ? mark_lock+0xc5/0x1200 [ 60.073712] ? napi_busy_loop+0x6e0/0x6e0 [ 60.077843] ? rcu_is_watching+0x31/0x80 [ 60.081892] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 60.086717] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 60.091983] ? __do_softirq+0x1d9/0x94c [ 60.095956] ? ip_finish_output2+0x709/0x22a0 [ 60.100453] ? trace_hardirqs_on+0x28/0x180 [ 60.104762] __do_softirq+0x248/0x94c [ 60.108552] ? ip_finish_output2+0x709/0x22a0 [ 60.113033] do_softirq_own_stack+0x2a/0x40 [ 60.117344] [ 60.119568] do_softirq.part.17+0x11a/0x150 [ 60.123884] __local_bh_enable_ip+0x1ee/0x230 [ 60.128362] ip_finish_output2+0x72d/0x22a0 [ 60.132677] ? ip_frag_next+0xa10/0xa10 [ 60.136636] ? rcu_read_lock_held+0x9c/0xb0 [ 60.140942] ? rcu_read_lock_held_common+0x170/0x170 [ 60.146036] __ip_finish_output+0x401/0xa50 [ 60.150339] ? __ip_finish_output+0x401/0xa50 [ 60.154841] ip_finish_output+0x27/0x170 [ 60.159018] ip_output+0x1c6/0x560 [ 60.162553] ? ip_mc_output+0xd10/0xd10 [ 60.166518] ? __ip_finish_output+0xa50/0xa50 [ 60.170998] ? rcu_read_lock_held_common+0x170/0x170 [ 60.176088] ? rcu_read_lock_held+0x9c/0xb0 [ 60.180400] ip_local_out+0x7e/0x130 [ 60.184104] __ip_queue_xmit+0x6f6/0x1de0 [ 60.188771] ? __skb_checksum+0x7c0/0x7c0 [ 60.192901] ? skb_send_sock_locked+0x750/0x750 [ 60.197565] ? reqsk_fastopen_remove+0x560/0x560 [ 60.202302] ? dccp_insert_options+0x1e2/0xb20 [ 60.206878] ip_queue_xmit+0x45/0x70 [ 60.210581] dccp_transmit_skb+0xb76/0x12a0 [ 60.214908] dccp_xmit_packet+0x1a0/0x580 [ 60.219044] dccp_write_xmit+0x128/0x180 [ 60.223093] dccp_sendmsg+0x68f/0xdb0 [ 60.226888] ? aa_sk_perm+0x182/0x740 [ 60.230677] ? dccp_disconnect+0xa90/0xa90 [ 60.234897] ? aa_af_perm+0x240/0x240 [ 60.238697] inet_sendmsg+0xbd/0xe0 [ 60.242309] ? inet_send_prepare+0x3a0/0x3a0 [ 60.246704] sock_sendmsg+0xdf/0x110 [ 60.250425] ____sys_sendmsg+0x687/0xae0 [ 60.254471] ? copy_msghdr_from_user+0x20d/0x3f0 [ 60.259214] ? kernel_sendmsg+0x30/0x30 [ 60.263176] ? __fget+0x2ae/0x440 [ 60.266645] ___sys_sendmsg+0xe4/0x160 [ 60.270530] ? sendmsg_copy_msghdr+0x30/0x30 [ 60.274930] ? rcu_read_lock_held+0x9c/0xb0 [ 60.279282] ? rcu_read_lock_held_common+0x170/0x170 [ 60.284369] ? find_held_lock+0x36/0x1d0 [ 60.288434] ? __fget+0x2c8/0x440 [ 60.291890] ? __x64_sys_dup2+0x2e0/0x2e0 [ 60.296027] ? trace_hardirqs_on+0x28/0x180 [ 60.300340] ? release_sock+0x122/0x180 [ 60.304395] ? __fget_light+0x17f/0x1f0 [ 60.308366] ? _raw_spin_unlock_bh+0x2b/0x30 [ 60.312759] ? __fdget+0xe/0x10 [ 60.316032] __sys_sendmsg+0xd9/0x180 [ 60.319818] ? __sys_sendmsg_sock+0xa0/0xa0 [ 60.324136] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 60.329407] ? __sys_listen+0x1e8/0x230 [ 60.333379] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.338748] __x64_sys_sendmsg+0x73/0xb0 [ 60.342796] do_syscall_64+0xd0/0x600 [ 60.346584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.351758] RIP: 0033:0x452f89 [ 60.354949] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.374453] RSP: 002b:00007fceb6132c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 60.382142] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 60.389395] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 60.396646] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 60.403898] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 60.411147] R13: 00000000ffffffff R14: 00007fceb61336d4 R15: 0000000000000002 [ 60.418447] CPU: 0 PID: 5029 Comm: syz-executor2 Not tainted 5.5.0-rc6-syzkaller #0 [ 60.426351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.435703] Call Trace: [ 60.438273] [ 60.440423] dump_stack+0x12f/0x187 [ 60.444043] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 60.449219] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 60.453963] ? dccp_parse_options+0x333/0x1000 [ 60.458538] dccp_deliver_input_to_ccids+0xcc/0x220 [ 60.463539] dccp_rcv_established+0x49/0x70 [ 60.467843] dccp_v4_do_rcv+0xf4/0x160 [ 60.471714] __sk_receive_skb+0x2b6/0x9e0 [ 60.475848] ? sk_free+0x60/0x60 [ 60.479208] ? dccp_invalid_packet+0x3ec/0x750 [ 60.483777] dccp_v4_rcv+0xc22/0x1c0b [ 60.487575] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 60.492326] ip_local_deliver_finish+0x1ee/0x2e0 [ 60.497068] ip_local_deliver+0x306/0x450 [ 60.501198] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 60.506123] ? lock_downgrade+0x900/0x900 [ 60.510257] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 60.515175] ip_rcv_finish+0xb0/0x170 [ 60.518980] ip_rcv+0xcb/0x2f0 [ 60.522157] ? ip_local_deliver+0x450/0x450 [ 60.526463] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 60.531815] ? ip_local_deliver+0x450/0x450 [ 60.536727] __netif_receive_skb_one_core+0x132/0x190 [ 60.541900] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 60.547085] ? lock_acquire+0x194/0x3e0 [ 60.551041] ? process_backlog+0x182/0x6d0 [ 60.555263] __netif_receive_skb+0x1f/0x1b0 [ 60.559569] process_backlog+0x1cb/0x6d0 [ 60.563609] ? __do_softirq+0x248/0x94c [ 60.567564] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 60.572136] net_rx_action+0x42d/0xde0 [ 60.576006] ? mark_lock+0xc5/0x1200 [ 60.579746] ? napi_busy_loop+0x6e0/0x6e0 [ 60.583884] ? rcu_is_watching+0x31/0x80 [ 60.587930] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 60.592758] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 60.598026] ? __do_softirq+0x1d9/0x94c [ 60.601979] ? ip_finish_output2+0x709/0x22a0 [ 60.606473] ? trace_hardirqs_on+0x28/0x180 [ 60.610794] __do_softirq+0x248/0x94c [ 60.614740] ? ip_finish_output2+0x709/0x22a0 [ 60.619223] do_softirq_own_stack+0x2a/0x40 [ 60.623787] [ 60.626006] do_softirq.part.17+0x11a/0x150 [ 60.630324] __local_bh_enable_ip+0x1ee/0x230 [ 60.634804] ip_finish_output2+0x72d/0x22a0 [ 60.639119] ? ip_frag_next+0xa10/0xa10 [ 60.643077] ? rcu_read_lock_held+0x9c/0xb0 [ 60.647379] ? rcu_read_lock_held_common+0x170/0x170 [ 60.652470] __ip_finish_output+0x401/0xa50 [ 60.656780] ? __ip_finish_output+0x401/0xa50 [ 60.661263] ip_finish_output+0x27/0x170 [ 60.665306] ip_output+0x1c6/0x560 [ 60.668837] ? ip_mc_output+0xd10/0xd10 [ 60.672797] ? __ip_finish_output+0xa50/0xa50 [ 60.677276] ? rcu_read_lock_held_common+0x170/0x170 [ 60.682358] ? rcu_read_lock_held+0x9c/0xb0 [ 60.686673] ip_local_out+0x7e/0x130 [ 60.690382] __ip_queue_xmit+0x6f6/0x1de0 [ 60.694527] ? __skb_checksum+0x7c0/0x7c0 [ 60.698666] ? skb_send_sock_locked+0x750/0x750 [ 60.703337] ? reqsk_fastopen_remove+0x560/0x560 [ 60.708091] ? dccp_insert_options+0x1e2/0xb20 [ 60.712664] ip_queue_xmit+0x45/0x70 [ 60.716360] dccp_transmit_skb+0xb76/0x12a0 [ 60.720677] dccp_xmit_packet+0x1a0/0x580 [ 60.724808] dccp_write_xmit+0x128/0x180 [ 60.728858] dccp_sendmsg+0x68f/0xdb0 [ 60.732654] ? aa_sk_perm+0x182/0x740 [ 60.736445] ? dccp_disconnect+0xa90/0xa90 [ 60.740668] ? aa_af_perm+0x240/0x240 [ 60.744467] inet_sendmsg+0xbd/0xe0 [ 60.748089] ? inet_send_prepare+0x3a0/0x3a0 [ 60.752479] sock_sendmsg+0xdf/0x110 [ 60.756176] ____sys_sendmsg+0x687/0xae0 [ 60.760219] ? copy_msghdr_from_user+0x20d/0x3f0 [ 60.764961] ? kernel_sendmsg+0x30/0x30 [ 60.768922] ? __fget+0x2ae/0x440 [ 60.772363] ___sys_sendmsg+0xe4/0x160 [ 60.776232] ? sendmsg_copy_msghdr+0x30/0x30 [ 60.780621] ? rcu_read_lock_held+0x9c/0xb0 [ 60.784921] ? rcu_read_lock_held_common+0x170/0x170 [ 60.790004] ? find_held_lock+0x36/0x1d0 [ 60.794056] ? __fget+0x2c8/0x440 [ 60.797496] ? __x64_sys_dup2+0x2e0/0x2e0 [ 60.801641] ? trace_hardirqs_on+0x28/0x180 [ 60.805942] ? release_sock+0x122/0x180 [ 60.809907] ? __fget_light+0x17f/0x1f0 [ 60.813858] ? _raw_spin_unlock_bh+0x2b/0x30 [ 60.818249] ? __fdget+0xe/0x10 [ 60.821514] __sys_sendmsg+0xd9/0x180 [ 60.825296] ? __sys_sendmsg_sock+0xa0/0xa0 [ 60.829627] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 60.834880] ? __sys_listen+0x1e8/0x230 [ 60.838848] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.844197] __x64_sys_sendmsg+0x73/0xb0 [ 60.848240] do_syscall_64+0xd0/0x600