[info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 38.490349] can: request_module (can-proto-0) failed. [ 38.499345] can: request_module (can-proto-0) failed. [ 39.879706] tipc: TX() has been purged, node left! Warning: Permanently added '10.128.0.159' (ECDSA) to the list of known hosts. 2020/02/12 03:15:45 parsed 1 programs 2020/02/12 03:15:45 executed programs: 0 [ 48.857126] dccp_close: ABORT with 24 bytes unread [ 48.858880] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 48.875646] CPU: 1 PID: 4785 Comm: syz-executor3 Not tainted 5.6.0-rc1-syzkaller #0 [ 48.883442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.892916] Call Trace: [ 48.895518] [ 48.897678] dump_stack+0x12f/0x187 [ 48.901330] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 48.906549] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 48.911308] ? dccp_parse_options+0x333/0x1000 [ 48.915912] dccp_deliver_input_to_ccids+0xcc/0x220 [ 48.920958] dccp_rcv_established+0x49/0x70 [ 48.925285] dccp_v4_do_rcv+0xf4/0x160 [ 48.929321] __sk_receive_skb+0x2b6/0x9e0 [ 48.933488] ? sk_free+0x60/0x60 [ 48.934839] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 48.936861] ? dccp_invalid_packet+0x3ec/0x750 [ 48.936885] dccp_v4_rcv+0xc22/0x1c0b [ 48.936924] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 48.963304] ip_local_deliver_finish+0x1ee/0x2e0 [ 48.968056] ip_local_deliver+0x306/0x450 [ 48.972291] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 48.977232] ? lock_downgrade+0x900/0x900 [ 48.981397] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 48.986340] ip_rcv_finish+0xb0/0x170 [ 48.990137] ip_rcv+0xcb/0x2f0 [ 48.993418] ? ip_local_deliver+0x450/0x450 [ 48.997738] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 49.003108] ? ip_local_deliver+0x450/0x450 [ 49.007426] __netif_receive_skb_one_core+0x132/0x190 [ 49.012618] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 49.017819] ? lock_acquire+0x194/0x3e0 [ 49.021782] ? process_backlog+0x1a8/0x700 [ 49.026020] __netif_receive_skb+0x1f/0x1b0 [ 49.030331] process_backlog+0x1f1/0x700 [ 49.034377] ? __do_softirq+0x248/0x94c [ 49.038340] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 49.042934] net_rx_action+0x42d/0xde0 [ 49.046809] ? mark_lock+0xc5/0x1200 [ 49.050621] ? napi_busy_loop+0x6e0/0x6e0 [ 49.054770] ? rcu_is_watching+0x31/0x80 [ 49.058838] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 49.063790] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 49.069054] ? __do_softirq+0x1d9/0x94c [ 49.073015] ? ip_finish_output2+0x709/0x22a0 [ 49.077758] ? trace_hardirqs_on+0x28/0x180 [ 49.082086] __do_softirq+0x248/0x94c [ 49.085889] ? ip_finish_output2+0x709/0x22a0 [ 49.090384] do_softirq_own_stack+0x2a/0x40 [ 49.094698] [ 49.096932] do_softirq.part.17+0x11a/0x150 [ 49.101244] __local_bh_enable_ip+0x1ee/0x230 [ 49.106696] ip_finish_output2+0x72d/0x22a0 [ 49.111023] ? ip_frag_next+0xa10/0xa10 [ 49.114986] ? rcu_read_lock_held+0x9c/0xb0 [ 49.119318] ? rcu_read_lock_held_common+0x170/0x170 [ 49.124432] __ip_finish_output+0x401/0xa80 [ 49.128739] ? __ip_finish_output+0x401/0xa80 [ 49.133858] ip_finish_output+0x27/0x170 [ 49.137922] ip_output+0x1c6/0x560 [ 49.141463] ? ip_mc_output+0xd10/0xd10 [ 49.145444] ? __ip_finish_output+0xa80/0xa80 [ 49.149935] ? rcu_read_lock_held_common+0x170/0x170 [ 49.155035] ? rcu_read_lock_held+0x9c/0xb0 [ 49.159358] ip_local_out+0x7e/0x130 [ 49.163071] __ip_queue_xmit+0x700/0x1de0 [ 49.167215] ? __skb_checksum+0x7c0/0x7c0 [ 49.171362] ? skb_send_sock_locked+0x750/0x750 [ 49.176025] ? reqsk_fastopen_remove+0x560/0x560 [ 49.180775] ? dccp_insert_options+0x1e2/0xb20 [ 49.185369] ip_queue_xmit+0x45/0x70 [ 49.189082] dccp_transmit_skb+0xb76/0x12a0 [ 49.193405] ? skb_unlink+0x117/0x1a0 [ 49.197207] dccp_xmit_packet+0x1a0/0x580 [ 49.201364] dccp_write_xmit+0x128/0x180 [ 49.205694] dccp_sendmsg+0x68f/0xdb0 [ 49.209489] ? aa_sk_perm+0x182/0x740 [ 49.213288] ? dccp_disconnect+0xb00/0xb00 [ 49.217519] ? aa_af_perm+0x240/0x240 [ 49.221394] inet_sendmsg+0xbd/0xe0 [ 49.225042] ? inet_send_prepare+0x3a0/0x3a0 [ 49.229436] sock_sendmsg+0xdf/0x110 [ 49.233148] ____sys_sendmsg+0x687/0xae0 [ 49.237206] ? copy_msghdr_from_user+0x20d/0x3f0 [ 49.241962] ? kernel_sendmsg+0x30/0x30 [ 49.245940] ? __fget_files+0x285/0x410 [ 49.249930] ___sys_sendmsg+0xe4/0x160 [ 49.253820] ? sendmsg_copy_msghdr+0x30/0x30 [ 49.258244] ? rcu_read_lock_held_common+0x170/0x170 [ 49.263342] ? __lock_acquire+0xfac/0x47f0 [ 49.267586] ? __fget_files+0x29f/0x410 [ 49.271581] ? __x64_sys_dup2+0x2e0/0x2e0 [ 49.275742] ? __fget_light+0x1a9/0x230 [ 49.279706] ? __fdget+0xe/0x10 [ 49.282982] __sys_sendmsg+0xd9/0x180 [ 49.286789] ? __sys_sendmsg_sock+0xa0/0xa0 [ 49.291139] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 49.296409] ? __sched_text_start+0x8/0x8 [ 49.300572] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.305940] __x64_sys_sendmsg+0x73/0xb0 [ 49.310433] do_syscall_64+0xd0/0x600 [ 49.314244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.319429] RIP: 0033:0x452f89 [ 49.322626] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 49.341802] RSP: 002b:00007fdb7c106c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 49.349599] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 49.356974] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 49.364253] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 49.371519] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 49.378791] R13: 00000000ffffffff R14: 00007fdb7c1076d4 R15: 0000000000000002 [ 49.386090] CPU: 0 PID: 4798 Comm: syz-executor2 Not tainted 5.6.0-rc1-syzkaller #0 [ 49.393895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.403251] Call Trace: [ 49.405830] [ 49.407984] dump_stack+0x12f/0x187 [ 49.411634] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 49.416939] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 49.421696] ? dccp_parse_options+0x333/0x1000 [ 49.426295] dccp_deliver_input_to_ccids+0xcc/0x220 [ 49.431320] dccp_rcv_established+0x49/0x70 [ 49.435644] dccp_v4_do_rcv+0xf4/0x160 [ 49.439537] __sk_receive_skb+0x2b6/0x9e0 [ 49.443709] ? sk_free+0x60/0x60 [ 49.447082] ? dccp_invalid_packet+0x3ec/0x750 [ 49.451688] dccp_v4_rcv+0xc22/0x1c0b [ 49.455524] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 49.460407] ip_local_deliver_finish+0x1ee/0x2e0 [ 49.465187] ip_local_deliver+0x306/0x450 [ 49.469356] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 49.474290] ? lock_downgrade+0x900/0x900 [ 49.478453] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 49.483404] ip_rcv_finish+0xb0/0x170 [ 49.487299] ip_rcv+0xcb/0x2f0 [ 49.490502] ? ip_local_deliver+0x450/0x450 [ 49.494834] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 49.500212] ? ip_local_deliver+0x450/0x450 [ 49.504534] __netif_receive_skb_one_core+0x132/0x190 [ 49.509218] dccp_close: ABORT with 24 bytes unread [ 49.509720] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 49.509737] ? lock_acquire+0x194/0x3e0 [ 49.509743] ? process_backlog+0x1a8/0x700 [ 49.509767] __netif_receive_skb+0x1f/0x1b0 [ 49.509780] process_backlog+0x1f1/0x700 [ 49.533030] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 49.536422] ? __do_softirq+0x248/0x94c [ 49.536434] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 49.536460] net_rx_action+0x42d/0xde0 [ 49.536477] ? mark_lock+0xc5/0x1200 [ 49.536494] ? napi_busy_loop+0x6e0/0x6e0 [ 49.569871] ? rcu_is_watching+0x31/0x80 [ 49.573926] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 49.578761] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 49.584016] ? __do_softirq+0x1d9/0x94c [ 49.587969] ? ip_finish_output2+0x709/0x22a0 [ 49.592454] ? trace_hardirqs_on+0x28/0x180 [ 49.596764] __do_softirq+0x248/0x94c [ 49.600562] ? ip_finish_output2+0x709/0x22a0 [ 49.605053] do_softirq_own_stack+0x2a/0x40 [ 49.609354] [ 49.611576] do_softirq.part.17+0x11a/0x150 [ 49.615887] __local_bh_enable_ip+0x1ee/0x230 [ 49.620366] ip_finish_output2+0x72d/0x22a0 [ 49.624689] ? ip_frag_next+0xa10/0xa10 [ 49.628648] ? rcu_read_lock_held+0x9c/0xb0 [ 49.632962] ? rcu_read_lock_held_common+0x170/0x170 [ 49.638054] __ip_finish_output+0x401/0xa80 [ 49.642359] ? __ip_finish_output+0x401/0xa80 [ 49.646842] ip_finish_output+0x27/0x170 [ 49.650902] ip_output+0x1c6/0x560 [ 49.654514] ? ip_mc_output+0xd10/0xd10 [ 49.658476] ? __ip_finish_output+0xa80/0xa80 [ 49.662951] ? rcu_read_lock_held_common+0x170/0x170 [ 49.668041] ? rcu_read_lock_held+0x9c/0xb0 [ 49.672352] ip_local_out+0x7e/0x130 [ 49.676061] __ip_queue_xmit+0x700/0x1de0 [ 49.680194] ? __skb_checksum+0x7c0/0x7c0 [ 49.684326] ? skb_send_sock_locked+0x750/0x750 [ 49.688975] ? reqsk_fastopen_remove+0x560/0x560 [ 49.693713] ? dccp_insert_options+0x1e2/0xb20 [ 49.698285] ip_queue_xmit+0x45/0x70 [ 49.701987] dccp_transmit_skb+0xb76/0x12a0 [ 49.706295] ? skb_unlink+0x117/0x1a0 [ 49.710089] dccp_xmit_packet+0x1a0/0x580 [ 49.714222] dccp_write_xmit+0x128/0x180 [ 49.718270] dccp_sendmsg+0x68f/0xdb0 [ 49.722062] ? aa_sk_perm+0x182/0x740 [ 49.725851] ? dccp_disconnect+0xb00/0xb00 [ 49.730072] ? aa_af_perm+0x240/0x240 [ 49.733877] inet_sendmsg+0xbd/0xe0 [ 49.737485] ? inet_send_prepare+0x3a0/0x3a0 [ 49.741886] sock_sendmsg+0xdf/0x110 [ 49.745593] ____sys_sendmsg+0x687/0xae0 [ 49.749649] ? copy_msghdr_from_user+0x20d/0x3f0 [ 49.754393] ? kernel_sendmsg+0x30/0x30 [ 49.758377] ? __fget_files+0x285/0x410 [ 49.762343] ___sys_sendmsg+0xe4/0x160 [ 49.766215] ? sendmsg_copy_msghdr+0x30/0x30 [ 49.770696] ? rcu_read_lock_held_common+0x170/0x170 [ 49.775779] ? __lock_acquire+0xfac/0x47f0 [ 49.780006] ? __fget_files+0x29f/0x410 [ 49.783978] ? __x64_sys_dup2+0x2e0/0x2e0 [ 49.788125] ? __fget_light+0x1a9/0x230 [ 49.792087] ? __fdget+0xe/0x10 [ 49.795370] __sys_sendmsg+0xd9/0x180 [ 49.799155] ? __sys_sendmsg_sock+0xa0/0xa0 [ 49.803471] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 49.808740] ? __sched_text_start+0x8/0x8 [ 49.812884] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.818245] __x64_sys_sendmsg+0x73/0xb0 [ 49.822293] do_syscall_64+0xd0/0x600 [ 49.826091] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.831260] RIP: 0033:0x452f89 [ 49.834437] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 49.853319] RSP: 002b:00007fd3650e3c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 49.861010] RAX: ffffffffffffffda RBX: 000000000071c010 RCX: 0000000000452f89 [ 49.868628] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 49.875886] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 49.883147] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 49.890397] R13: 00000000ffffffff R14: 00007fd3650e46d4 R15: 0000000000000004 [ 49.897680] CPU: 1 PID: 4820 Comm: syz-executor1 Not tainted 5.6.0-rc1-syzkaller #0 [ 49.905481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.914865] Call Trace: [ 49.917447] [ 49.919620] dump_stack+0x12f/0x187 [ 49.923271] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 49.928473] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 49.933230] ? dccp_parse_options+0x333/0x1000 [ 49.937842] dccp_deliver_input_to_ccids+0xcc/0x220 [ 49.942646] dccp_close: ABORT with 24 bytes unread [ 49.942855] dccp_rcv_established+0x49/0x70 [ 49.952087] dccp_v4_do_rcv+0xf4/0x160 [ 49.953832] dccp_close: ABORT with 24 bytes unread [ 49.955977] __sk_receive_skb+0x2b6/0x9e0 [ 49.955996] ? sk_free+0x60/0x60 [ 49.966079] dccp_close: ABORT with 24 bytes unread [ 49.968413] ? dccp_invalid_packet+0x3ec/0x750 [ 49.968435] dccp_v4_rcv+0xc22/0x1c0b [ 49.981752] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 49.986542] ip_local_deliver_finish+0x1ee/0x2e0 [ 49.991320] ip_local_deliver+0x306/0x450 [ 49.995482] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 50.000421] ? lock_downgrade+0x900/0x900 [ 50.004589] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 50.009550] ip_rcv_finish+0xb0/0x170 [ 50.013364] ip_rcv+0xcb/0x2f0 [ 50.016573] ? ip_local_deliver+0x450/0x450 [ 50.020937] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 50.027019] ? ip_local_deliver+0x450/0x450 [ 50.031353] __netif_receive_skb_one_core+0x132/0x190 [ 50.035177] dccp_close: ABORT with 24 bytes unread [ 50.036552] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 50.036569] ? lock_acquire+0x194/0x3e0 [ 50.036576] ? process_backlog+0x1a8/0x700 [ 50.036594] __netif_receive_skb+0x1f/0x1b0 [ 50.036650] process_backlog+0x1f1/0x700 [ 50.063360] ? __do_softirq+0x248/0x94c [ 50.067342] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 50.071683] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 50.072023] net_rx_action+0x42d/0xde0 [ 50.089187] ? mark_lock+0xc5/0x1200 [ 50.092895] ? napi_busy_loop+0x6e0/0x6e0 [ 50.097026] ? rcu_is_watching+0x31/0x80 [ 50.101080] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 50.105915] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 50.111171] ? __do_softirq+0x1d9/0x94c [ 50.115126] ? ip_finish_output2+0x709/0x22a0 [ 50.119607] ? trace_hardirqs_on+0x28/0x180 [ 50.123916] __do_softirq+0x248/0x94c [ 50.127712] ? ip_finish_output2+0x709/0x22a0 [ 50.132193] do_softirq_own_stack+0x2a/0x40 [ 50.136492] [ 50.138713] do_softirq.part.17+0x11a/0x150 [ 50.143020] __local_bh_enable_ip+0x1ee/0x230 [ 50.147500] ip_finish_output2+0x72d/0x22a0 [ 50.151817] ? ip_frag_next+0xa10/0xa10 [ 50.155774] ? rcu_read_lock_held+0x9c/0xb0 [ 50.160089] ? rcu_read_lock_held_common+0x170/0x170 [ 50.165192] __ip_finish_output+0x401/0xa80 [ 50.169498] ? __ip_finish_output+0x401/0xa80 [ 50.173983] ip_finish_output+0x27/0x170 [ 50.178031] ip_output+0x1c6/0x560 [ 50.181556] ? ip_mc_output+0xd10/0xd10 [ 50.185518] ? __ip_finish_output+0xa80/0xa80 [ 50.189994] ? rcu_read_lock_held_common+0x170/0x170 [ 50.195082] ? rcu_read_lock_held+0x9c/0xb0 [ 50.199391] ip_local_out+0x7e/0x130 [ 50.203103] __ip_queue_xmit+0x700/0x1de0 [ 50.207235] ? __skb_checksum+0x7c0/0x7c0 [ 50.211363] ? skb_send_sock_locked+0x750/0x750 [ 50.216011] ? reqsk_fastopen_remove+0x560/0x560 [ 50.220747] ? dccp_insert_options+0x1e2/0xb20 [ 50.225328] ip_queue_xmit+0x45/0x70 [ 50.229029] dccp_transmit_skb+0xb76/0x12a0 [ 50.233340] ? skb_unlink+0x117/0x1a0 [ 50.237139] dccp_xmit_packet+0x1a0/0x580 [ 50.241399] dccp_write_xmit+0x128/0x180 [ 50.245482] dccp_sendmsg+0x68f/0xdb0 [ 50.249276] ? aa_sk_perm+0x182/0x740 [ 50.253124] ? dccp_disconnect+0xb00/0xb00 [ 50.257386] ? aa_af_perm+0x240/0x240 [ 50.261216] inet_sendmsg+0xbd/0xe0 [ 50.264846] ? inet_send_prepare+0x3a0/0x3a0 [ 50.269241] sock_sendmsg+0xdf/0x110 [ 50.272945] ____sys_sendmsg+0x687/0xae0 [ 50.277005] ? copy_msghdr_from_user+0x20d/0x3f0 [ 50.281746] ? kernel_sendmsg+0x30/0x30 [ 50.285709] ? __fget_files+0x285/0x410 [ 50.289682] ___sys_sendmsg+0xe4/0x160 [ 50.293565] ? sendmsg_copy_msghdr+0x30/0x30 [ 50.297964] ? rcu_read_lock_held_common+0x170/0x170 [ 50.303065] ? __lock_acquire+0xfac/0x47f0 [ 50.307295] ? __fget_files+0x29f/0x410 [ 50.311265] ? __x64_sys_dup2+0x2e0/0x2e0 [ 50.315599] ? __fget_light+0x1a9/0x230 [ 50.319561] ? __fdget+0xe/0x10 [ 50.322846] __sys_sendmsg+0xd9/0x180 [ 50.326628] ? __sys_sendmsg_sock+0xa0/0xa0 [ 50.330955] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 50.336229] ? __sched_text_start+0x8/0x8 [ 50.340376] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.345755] __x64_sys_sendmsg+0x73/0xb0 [ 50.349807] do_syscall_64+0xd0/0x600 [ 50.353606] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.358792] RIP: 0033:0x452f89 [ 50.361966] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 50.381642] RSP: 002b:00007fcad18d4c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 50.389361] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 50.396631] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 50.404021] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 50.411303] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 50.418558] R13: 00000000ffffffff R14: 00007fcad18d56d4 R15: 0000000000000002 [ 50.425856] CPU: 0 PID: 4843 Comm: syz-executor5 Not tainted 5.6.0-rc1-syzkaller #0 [ 50.433689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.443235] Call Trace: [ 50.445824] [ 50.447980] dump_stack+0x12f/0x187 [ 50.450416] dccp_close: ABORT with 24 bytes unread [ 50.452077] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 50.452096] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 50.452104] ? dccp_parse_options+0x333/0x1000 [ 50.452129] dccp_deliver_input_to_ccids+0xcc/0x220 [ 50.452143] dccp_rcv_established+0x49/0x70 [ 50.452153] dccp_v4_do_rcv+0xf4/0x160 [ 50.452170] __sk_receive_skb+0x2b6/0x9e0 [ 50.452191] ? sk_free+0x60/0x60 [ 50.452201] ? dccp_invalid_packet+0x3ec/0x750 [ 50.452222] dccp_v4_rcv+0xc22/0x1c0b [ 50.488180] dccp_close: ABORT with 24 bytes unread [ 50.489669] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 50.489694] ip_local_deliver_finish+0x1ee/0x2e0 [ 50.489709] ip_local_deliver+0x306/0x450 [ 50.489722] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 50.489729] ? lock_downgrade+0x900/0x900 [ 50.489741] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 50.495404] dccp_close: ABORT with 24 bytes unread [ 50.497728] ip_rcv_finish+0xb0/0x170 [ 50.497742] ip_rcv+0xcb/0x2f0 [ 50.497755] ? ip_local_deliver+0x450/0x450 [ 50.497772] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 50.497792] ? ip_local_deliver+0x450/0x450 [ 50.497802] __netif_receive_skb_one_core+0x132/0x190 [ 50.497813] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 50.497828] ? lock_acquire+0x194/0x3e0 [ 50.503391] dccp_close: ABORT with 24 bytes unread [ 50.506645] ? process_backlog+0x1a8/0x700 [ 50.506661] __netif_receive_skb+0x1f/0x1b0 [ 50.506674] process_backlog+0x1f1/0x700 [ 50.506680] ? __do_softirq+0x248/0x94c [ 50.506692] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 50.506717] net_rx_action+0x42d/0xde0 [ 50.506730] ? mark_lock+0xc5/0x1200 [ 50.506750] ? napi_busy_loop+0x6e0/0x6e0 [ 50.506757] ? rcu_is_watching+0x31/0x80 [ 50.557699] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 50.560553] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 50.560564] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 50.560569] ? __do_softirq+0x1d9/0x94c [ 50.560575] ? ip_finish_output2+0x709/0x22a0 [ 50.560583] ? trace_hardirqs_on+0x28/0x180 [ 50.560601] __do_softirq+0x248/0x94c [ 50.560624] ? ip_finish_output2+0x709/0x22a0 [ 50.560639] do_softirq_own_stack+0x2a/0x40 [ 50.665400] [ 50.667640] do_softirq.part.17+0x11a/0x150 [ 50.671955] __local_bh_enable_ip+0x1ee/0x230 [ 50.676442] ip_finish_output2+0x72d/0x22a0 [ 50.681109] ? ip_frag_next+0xa10/0xa10 [ 50.685086] ? rcu_read_lock_held+0x9c/0xb0 [ 50.689426] ? rcu_read_lock_held_common+0x170/0x170 [ 50.694551] __ip_finish_output+0x401/0xa80 [ 50.698877] ? __ip_finish_output+0x401/0xa80 [ 50.703379] ip_finish_output+0x27/0x170 [ 50.707433] ip_output+0x1c6/0x560 [ 50.710968] ? ip_mc_output+0xd10/0xd10 [ 50.714941] ? __ip_finish_output+0xa80/0xa80 [ 50.719435] ? rcu_read_lock_held_common+0x170/0x170 [ 50.724803] ? rcu_read_lock_held+0x9c/0xb0 [ 50.729127] ip_local_out+0x7e/0x130 [ 50.732934] __ip_queue_xmit+0x700/0x1de0 [ 50.737066] ? __skb_checksum+0x7c0/0x7c0 [ 50.741208] ? skb_send_sock_locked+0x750/0x750 [ 50.745862] ? reqsk_fastopen_remove+0x560/0x560 [ 50.750622] ? dccp_insert_options+0x1e2/0xb20 [ 50.755215] ip_queue_xmit+0x45/0x70 [ 50.758938] dccp_transmit_skb+0xb76/0x12a0 [ 50.763258] ? skb_unlink+0x117/0x1a0 [ 50.767088] dccp_xmit_packet+0x1a0/0x580 [ 50.771261] dccp_write_xmit+0x128/0x180 [ 50.775327] dccp_sendmsg+0x68f/0xdb0 [ 50.779144] ? aa_sk_perm+0x182/0x740 [ 50.782960] ? dccp_disconnect+0xb00/0xb00 [ 50.787457] ? aa_af_perm+0x240/0x240 [ 50.791268] inet_sendmsg+0xbd/0xe0 [ 50.794885] ? inet_send_prepare+0x3a0/0x3a0 [ 50.799307] sock_sendmsg+0xdf/0x110 [ 50.803117] ____sys_sendmsg+0x687/0xae0 [ 50.807183] ? copy_msghdr_from_user+0x20d/0x3f0 [ 50.811940] ? kernel_sendmsg+0x30/0x30 [ 50.815934] ? __fget_files+0x285/0x410 [ 50.819920] ___sys_sendmsg+0xe4/0x160 [ 50.823810] ? sendmsg_copy_msghdr+0x30/0x30 [ 50.828230] ? rcu_read_lock_held_common+0x170/0x170 [ 50.833523] ? __lock_acquire+0xfac/0x47f0 [ 50.837773] ? __fget_files+0x29f/0x410 [ 50.841762] ? __x64_sys_dup2+0x2e0/0x2e0 [ 50.845933] ? __fget_light+0x1a9/0x230 [ 50.850249] ? __fdget+0xe/0x10 [ 50.853699] __sys_sendmsg+0xd9/0x180 [ 50.857626] ? __sys_sendmsg_sock+0xa0/0xa0 [ 50.861990] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 50.867626] ? __sched_text_start+0x8/0x8 [ 50.871874] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.877250] __x64_sys_sendmsg+0x73/0xb0 [ 50.881337] do_syscall_64+0xd0/0x600 [ 50.885228] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.890419] RIP: 0033:0x452f89 [ 50.893611] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 50.912510] RSP: 002b:00007fe724ceac58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 50.920477] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 50.927773] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 50.935118] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 50.943035] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 50.950581] R13: 00000000ffffffff R14: 00007fe724ceb6d4 R15: 0000000000000001 [ 50.957883] CPU: 1 PID: 4862 Comm: syz-executor1 Not tainted 5.6.0-rc1-syzkaller #0 [ 50.966000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.975673] Call Trace: [ 50.978259] [ 50.980428] dump_stack+0x12f/0x187 [ 50.984102] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 50.989414] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 50.994184] ? dccp_parse_options+0x333/0x1000 [ 50.998817] dccp_deliver_input_to_ccids+0xcc/0x220 [ 51.003854] dccp_rcv_established+0x49/0x70 [ 51.008187] dccp_v4_do_rcv+0xf4/0x160 [ 51.012092] __sk_receive_skb+0x2b6/0x9e0 [ 51.016262] ? sk_free+0x60/0x60 [ 51.019637] ? dccp_invalid_packet+0x3ec/0x750 [ 51.024266] dccp_v4_rcv+0xc22/0x1c0b [ 51.028113] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 51.032987] ip_local_deliver_finish+0x1ee/0x2e0 [ 51.037782] ip_local_deliver+0x306/0x450 [ 51.041951] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 51.046884] ? lock_downgrade+0x900/0x900 [ 51.051052] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 51.056004] ip_rcv_finish+0xb0/0x170 [ 51.059831] ip_rcv+0xcb/0x2f0 [ 51.063058] ? ip_local_deliver+0x450/0x450 [ 51.067394] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 51.070443] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 51.072768] ? ip_local_deliver+0x450/0x450 [ 51.072781] __netif_receive_skb_one_core+0x132/0x190 [ 51.072792] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 51.072809] ? lock_acquire+0x194/0x3e0 [ 51.072817] ? process_backlog+0x1a8/0x700 [ 51.109465] __netif_receive_skb+0x1f/0x1b0 [ 51.113774] process_backlog+0x1f1/0x700 [ 51.117820] ? __do_softirq+0x248/0x94c [ 51.121794] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 51.126973] net_rx_action+0x42d/0xde0 [ 51.130866] ? mark_lock+0xc5/0x1200 [ 51.134649] ? napi_busy_loop+0x6e0/0x6e0 [ 51.138962] ? rcu_is_watching+0x31/0x80 [ 51.143127] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 51.149187] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 51.154719] ? __do_softirq+0x1d9/0x94c [ 51.158695] ? ip_finish_output2+0x709/0x22a0 [ 51.171696] ? trace_hardirqs_on+0x28/0x180 [ 51.176031] __do_softirq+0x248/0x94c [ 51.179849] ? ip_finish_output2+0x709/0x22a0 [ 51.184343] do_softirq_own_stack+0x2a/0x40 [ 51.188648] [ 51.190868] do_softirq.part.17+0x11a/0x150 [ 51.195186] __local_bh_enable_ip+0x1ee/0x230 [ 51.199665] ip_finish_output2+0x72d/0x22a0 [ 51.203980] ? ip_frag_next+0xa10/0xa10 [ 51.208378] ? rcu_read_lock_held+0x9c/0xb0 [ 51.212684] ? rcu_read_lock_held_common+0x170/0x170 [ 51.217778] __ip_finish_output+0x401/0xa80 [ 51.222090] ? __ip_finish_output+0x401/0xa80 [ 51.227713] ip_finish_output+0x27/0x170 [ 51.231763] ip_output+0x1c6/0x560 [ 51.235290] ? ip_mc_output+0xd10/0xd10 [ 51.239264] ? __ip_finish_output+0xa80/0xa80 [ 51.243740] ? rcu_read_lock_held_common+0x170/0x170 [ 51.248836] ? rcu_read_lock_held+0x9c/0xb0 [ 51.253146] ip_local_out+0x7e/0x130 [ 51.256846] __ip_queue_xmit+0x700/0x1de0 [ 51.260972] ? __skb_checksum+0x7c0/0x7c0 [ 51.265101] ? skb_send_sock_locked+0x750/0x750 [ 51.269766] ? reqsk_fastopen_remove+0x560/0x560 [ 51.274519] ? dccp_insert_options+0x1e2/0xb20 [ 51.279095] ip_queue_xmit+0x45/0x70 [ 51.282796] dccp_transmit_skb+0xb76/0x12a0 [ 51.287114] ? skb_unlink+0x117/0x1a0 [ 51.290909] dccp_xmit_packet+0x1a0/0x580 [ 51.295067] dccp_write_xmit+0x128/0x180 [ 51.299136] dccp_sendmsg+0x68f/0xdb0 [ 51.302981] ? aa_sk_perm+0x182/0x740 [ 51.306768] ? dccp_disconnect+0xb00/0xb00 [ 51.310998] ? aa_af_perm+0x240/0x240 [ 51.314870] inet_sendmsg+0xbd/0xe0 [ 51.318501] ? inet_send_prepare+0x3a0/0x3a0 [ 51.322908] sock_sendmsg+0xdf/0x110 [ 51.326615] ____sys_sendmsg+0x687/0xae0 [ 51.330680] ? copy_msghdr_from_user+0x20d/0x3f0 [ 51.335433] ? kernel_sendmsg+0x30/0x30 [ 51.339403] ? __fget_files+0x285/0x410 [ 51.343387] ___sys_sendmsg+0xe4/0x160 [ 51.347278] ? sendmsg_copy_msghdr+0x30/0x30 [ 51.351679] ? rcu_read_lock_held_common+0x170/0x170 [ 51.356779] ? __lock_acquire+0xfac/0x47f0 [ 51.361008] ? __fget_files+0x29f/0x410 [ 51.364996] ? __x64_sys_dup2+0x2e0/0x2e0 [ 51.369156] ? __fget_light+0x1a9/0x230 [ 51.373132] ? __fdget+0xe/0x10 [ 51.376403] __sys_sendmsg+0xd9/0x180 [ 51.380185] ? __sys_sendmsg_sock+0xa0/0xa0 [ 51.384503] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 51.389767] ? __sched_text_start+0x8/0x8 [ 51.394005] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.399374] __x64_sys_sendmsg+0x73/0xb0 [ 51.403425] do_syscall_64+0xd0/0x600 [ 51.407212] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.413528] RIP: 0033:0x452f89 [ 51.416726] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 51.436084] RSP: 002b:00007fcad18d4c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 51.443785] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 51.451052] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 51.458302] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 51.465553] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 51.472816] R13: 00000000ffffffff R14: 00007fcad18d56d4 R15: 0000000000000002 [ 51.480117] CPU: 0 PID: 4882 Comm: syz-executor5 Not tainted 5.6.0-rc1-syzkaller #0 [ 51.487960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.497352] Call Trace: [ 51.499949] [ 51.502105] dump_stack+0x12f/0x187 [ 51.505901] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 51.511109] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 51.515875] ? dccp_parse_options+0x333/0x1000 [ 51.520503] dccp_deliver_input_to_ccids+0xcc/0x220 [ 51.523907] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 51.525637] dccp_rcv_established+0x49/0x70 [ 51.525649] dccp_v4_do_rcv+0xf4/0x160 [ 51.525666] __sk_receive_skb+0x2b6/0x9e0 [ 51.525688] ? sk_free+0x60/0x60 [ 51.525698] ? dccp_invalid_packet+0x3ec/0x750 [ 51.559444] dccp_v4_rcv+0xc22/0x1c0b [ 51.563392] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 51.568147] ip_local_deliver_finish+0x1ee/0x2e0 [ 51.572899] ip_local_deliver+0x306/0x450 [ 51.577035] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 51.581949] ? lock_downgrade+0x900/0x900 [ 51.586096] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 51.591037] ip_rcv_finish+0xb0/0x170 [ 51.594988] ip_rcv+0xcb/0x2f0 [ 51.598259] ? ip_local_deliver+0x450/0x450 [ 51.603198] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 51.608834] ? ip_local_deliver+0x450/0x450 [ 51.613162] __netif_receive_skb_one_core+0x132/0x190 [ 51.618370] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 51.623557] ? lock_acquire+0x194/0x3e0 [ 51.627612] ? process_backlog+0x1a8/0x700 [ 51.631842] __netif_receive_skb+0x1f/0x1b0 [ 51.636154] process_backlog+0x1f1/0x700 [ 51.640215] ? __do_softirq+0x248/0x94c [ 51.644187] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 51.648768] net_rx_action+0x42d/0xde0 [ 51.652651] ? mark_lock+0xc5/0x1200 [ 51.656356] ? napi_busy_loop+0x6e0/0x6e0 [ 51.660487] ? rcu_is_watching+0x31/0x80 [ 51.664539] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 51.669366] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 51.674633] ? __do_softirq+0x1d9/0x94c [ 51.678602] ? ip_finish_output2+0x709/0x22a0 [ 51.683082] ? trace_hardirqs_on+0x28/0x180 [ 51.687394] __do_softirq+0x248/0x94c [ 51.691187] ? ip_finish_output2+0x709/0x22a0 [ 51.695670] do_softirq_own_stack+0x2a/0x40 [ 51.699981] [ 51.702205] do_softirq.part.17+0x11a/0x150 [ 51.706518] __local_bh_enable_ip+0x1ee/0x230 [ 51.711016] ip_finish_output2+0x72d/0x22a0 [ 51.715335] ? ip_frag_next+0xa10/0xa10 [ 51.719492] ? rcu_read_lock_held+0x9c/0xb0 [ 51.723892] ? rcu_read_lock_held_common+0x170/0x170 [ 51.729001] __ip_finish_output+0x401/0xa80 [ 51.733945] ? __ip_finish_output+0x401/0xa80 [ 51.738431] ip_finish_output+0x27/0x170 [ 51.742486] ip_output+0x1c6/0x560 [ 51.746025] ? ip_mc_output+0xd10/0xd10 [ 51.749994] ? __ip_finish_output+0xa80/0xa80 [ 51.754480] ? rcu_read_lock_held_common+0x170/0x170 [ 51.759583] ? rcu_read_lock_held+0x9c/0xb0 [ 51.763906] ip_local_out+0x7e/0x130 [ 51.767608] __ip_queue_xmit+0x700/0x1de0 [ 51.771736] ? __skb_checksum+0x7c0/0x7c0 [ 51.775876] ? skb_send_sock_locked+0x750/0x750 [ 51.780524] ? reqsk_fastopen_remove+0x560/0x560 [ 51.785270] ? dccp_insert_options+0x1e2/0xb20 [ 51.789848] ip_queue_xmit+0x45/0x70 [ 51.793560] dccp_transmit_skb+0xb76/0x12a0 [ 51.797864] ? skb_unlink+0x117/0x1a0 [ 51.801657] dccp_xmit_packet+0x1a0/0x580 [ 51.805795] dccp_write_xmit+0x128/0x180 [ 51.809853] dccp_sendmsg+0x68f/0xdb0 [ 51.813642] ? aa_sk_perm+0x182/0x740 [ 51.817446] ? dccp_disconnect+0xb00/0xb00 [ 51.821676] ? aa_af_perm+0x240/0x240 [ 51.825482] inet_sendmsg+0xbd/0xe0 [ 51.829093] ? inet_send_prepare+0x3a0/0x3a0 [ 51.833484] sock_sendmsg+0xdf/0x110 [ 51.837204] ____sys_sendmsg+0x687/0xae0 [ 51.841249] ? copy_msghdr_from_user+0x20d/0x3f0 [ 51.846037] ? kernel_sendmsg+0x30/0x30 [ 51.850003] ? __fget_files+0x285/0x410 [ 51.853984] ___sys_sendmsg+0xe4/0x160 [ 51.857867] ? sendmsg_copy_msghdr+0x30/0x30 [ 51.862263] ? rcu_read_lock_held_common+0x170/0x170 [ 51.867346] ? __lock_acquire+0xfac/0x47f0 [ 51.871572] ? __fget_files+0x29f/0x410 [ 51.875545] ? __x64_sys_dup2+0x2e0/0x2e0 [ 51.879695] ? __fget_light+0x1a9/0x230 [ 51.883659] ? __fdget+0xe/0x10 [ 51.886936] __sys_sendmsg+0xd9/0x180 [ 51.890718] ? __sys_sendmsg_sock+0xa0/0xa0 [ 51.895036] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 51.900301] ? __sched_text_start+0x8/0x8 [ 51.904454] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.909859] __x64_sys_sendmsg+0x73/0xb0 [ 51.913911] do_syscall_64+0xd0/0x600 [ 51.917705] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.922887] RIP: 0033:0x452f89 [ 51.926067] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 51.945671] RSP: 002b:00007fe724ceac58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 51.953386] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 51.960648] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 2020/02/12 03:15:51 executed programs: 22 [ 51.967939] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 51.975213] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 51.982492] R13: 00000000ffffffff R14: 00007fe724ceb6d4 R15: 0000000000000002 [ 51.989821] CPU: 1 PID: 4885 Comm: syz-executor Not tainted 5.6.0-rc1-syzkaller #0 [ 51.997547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.007042] Call Trace: [ 52.009643] [ 52.011804] dump_stack+0x12f/0x187 [ 52.015459] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 52.020678] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 52.025454] ? dccp_parse_options+0x333/0x1000 [ 52.030060] dccp_deliver_input_to_ccids+0xcc/0x220 [ 52.032018] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 52.035084] dccp_rcv_established+0x49/0x70 [ 52.035096] dccp_v4_do_rcv+0xf4/0x160 [ 52.035112] __sk_receive_skb+0x2b6/0x9e0 [ 52.035131] ? sk_free+0x60/0x60 [ 52.064461] ? dccp_invalid_packet+0x3ec/0x750 [ 52.069053] dccp_v4_rcv+0xc22/0x1c0b [ 52.072887] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 52.077658] ip_local_deliver_finish+0x1ee/0x2e0 [ 52.082677] ip_local_deliver+0x306/0x450 [ 52.086826] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 52.091752] ? lock_downgrade+0x900/0x900 [ 52.095903] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 52.100846] ip_rcv_finish+0xb0/0x170 [ 52.104644] ip_rcv+0xcb/0x2f0 [ 52.107835] ? ip_local_deliver+0x450/0x450 [ 52.112176] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 52.117573] ? ip_local_deliver+0x450/0x450 [ 52.121913] __netif_receive_skb_one_core+0x132/0x190 [ 52.127106] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 52.132303] ? lock_acquire+0x194/0x3e0 [ 52.136279] ? process_backlog+0x1a8/0x700 [ 52.140527] __netif_receive_skb+0x1f/0x1b0 [ 52.144864] process_backlog+0x1f1/0x700 [ 52.148915] ? __do_softirq+0x248/0x94c [ 52.152922] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 52.157705] net_rx_action+0x42d/0xde0 [ 52.161588] ? mark_lock+0xc5/0x1200 [ 52.165320] ? napi_busy_loop+0x6e0/0x6e0 [ 52.169477] ? rcu_is_watching+0x31/0x80 [ 52.173643] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 52.178514] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 52.183796] ? __do_softirq+0x1d9/0x94c [ 52.187766] ? ip_finish_output2+0x709/0x22a0 [ 52.192273] ? trace_hardirqs_on+0x28/0x180 [ 52.196779] __do_softirq+0x248/0x94c [ 52.200704] ? ip_finish_output2+0x709/0x22a0 [ 52.205192] do_softirq_own_stack+0x2a/0x40 [ 52.209508] [ 52.211736] do_softirq.part.17+0x11a/0x150 [ 52.216056] __local_bh_enable_ip+0x1ee/0x230 [ 52.220552] ip_finish_output2+0x72d/0x22a0 [ 52.224997] ? ip_frag_next+0xa10/0xa10 [ 52.228959] ? rcu_read_lock_held+0x9c/0xb0 [ 52.233276] ? rcu_read_lock_held_common+0x170/0x170 [ 52.238653] __ip_finish_output+0x401/0xa80 [ 52.242986] ? __ip_finish_output+0x401/0xa80 [ 52.247489] ip_finish_output+0x27/0x170 [ 52.251544] ip_output+0x1c6/0x560 [ 52.255091] ? ip_mc_output+0xd10/0xd10 [ 52.259060] ? __ip_finish_output+0xa80/0xa80 [ 52.263551] ? rcu_read_lock_held_common+0x170/0x170 [ 52.268659] ? rcu_read_lock_held+0x9c/0xb0 [ 52.273042] ip_local_out+0x7e/0x130 [ 52.276785] __ip_queue_xmit+0x700/0x1de0 [ 52.280929] ? __skb_checksum+0x7c0/0x7c0 [ 52.285187] ? skb_send_sock_locked+0x750/0x750 [ 52.289847] ? reqsk_fastopen_remove+0x560/0x560 [ 52.294593] ? dccp_insert_options+0x1e2/0xb20 [ 52.299880] ip_queue_xmit+0x45/0x70 [ 52.303601] dccp_transmit_skb+0xb76/0x12a0 [ 52.307942] ? skb_unlink+0x117/0x1a0 [ 52.311748] dccp_xmit_packet+0x1a0/0x580 [ 52.315890] dccp_write_xmit+0x128/0x180 [ 52.319958] dccp_sendmsg+0x68f/0xdb0 [ 52.323770] ? aa_sk_perm+0x182/0x740 [ 52.327740] ? dccp_disconnect+0xb00/0xb00 [ 52.331963] ? aa_af_perm+0x240/0x240 [ 52.335912] inet_sendmsg+0xbd/0xe0 [ 52.339548] ? inet_send_prepare+0x3a0/0x3a0 [ 52.343952] sock_sendmsg+0xdf/0x110 [ 52.347740] ____sys_sendmsg+0x687/0xae0 [ 52.351791] ? copy_msghdr_from_user+0x20d/0x3f0 [ 52.356538] ? kernel_sendmsg+0x30/0x30 [ 52.360523] ? __fget_files+0x285/0x410 [ 52.364513] ___sys_sendmsg+0xe4/0x160 [ 52.368401] ? sendmsg_copy_msghdr+0x30/0x30 [ 52.372812] ? rcu_read_lock_held_common+0x170/0x170 [ 52.377911] ? __lock_acquire+0xfac/0x47f0 [ 52.382157] ? __fget_files+0x29f/0x410 [ 52.386161] ? __x64_sys_dup2+0x2e0/0x2e0 [ 52.390411] ? __fget_light+0x1a9/0x230 [ 52.394385] ? __fdget+0xe/0x10 [ 52.397670] __sys_sendmsg+0xd9/0x180 [ 52.401469] ? __sys_sendmsg_sock+0xa0/0xa0 [ 52.405798] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 52.411069] ? __sched_text_start+0x8/0x8 [ 52.415246] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.420616] __x64_sys_sendmsg+0x73/0xb0 [ 52.424670] do_syscall_64+0xd0/0x600 [ 52.428477] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.433670] RIP: 0033:0x452f89 [ 52.436961] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 52.455873] RSP: 002b:00007f455bb32c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 52.463583] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 52.471125] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 52.478388] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 52.485652] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 52.492920] R13: 00000000ffffffff R14: 00007f455bb336d4 R15: 0000000000000002 [ 52.500222] CPU: 0 PID: 4894 Comm: syz-executor3 Not tainted 5.6.0-rc1-syzkaller #0 [ 52.508022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.517484] Call Trace: [ 52.520066] [ 52.522222] dump_stack+0x12f/0x187 [ 52.525867] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 52.532313] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 52.537165] ? dccp_parse_options+0x333/0x1000 [ 52.541762] dccp_deliver_input_to_ccids+0xcc/0x220 [ 52.546791] dccp_rcv_established+0x49/0x70 [ 52.551121] dccp_v4_do_rcv+0xf4/0x160 [ 52.555018] __sk_receive_skb+0x2b6/0x9e0 [ 52.560141] ? sk_free+0x60/0x60 [ 52.563521] ? dccp_invalid_packet+0x3ec/0x750 [ 52.568129] dccp_v4_rcv+0xc22/0x1c0b [ 52.572062] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 52.576892] ip_local_deliver_finish+0x1ee/0x2e0 [ 52.581699] ip_local_deliver+0x306/0x450 [ 52.585870] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 52.590939] ? lock_downgrade+0x900/0x900 [ 52.595097] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 52.600159] ip_rcv_finish+0xb0/0x170 [ 52.603987] ip_rcv+0xcb/0x2f0 [ 52.607321] ? ip_local_deliver+0x450/0x450 [ 52.611657] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 52.617054] ? ip_local_deliver+0x450/0x450 [ 52.621910] __netif_receive_skb_one_core+0x132/0x190 [ 52.621960] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 52.627124] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 52.627139] ? lock_acquire+0x194/0x3e0 [ 52.627146] ? process_backlog+0x1a8/0x700 [ 52.627163] __netif_receive_skb+0x1f/0x1b0 [ 52.627177] process_backlog+0x1f1/0x700 [ 52.627183] ? __do_softirq+0x248/0x94c [ 52.627190] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 52.627214] net_rx_action+0x42d/0xde0 [ 52.627229] ? mark_lock+0xc5/0x1200 [ 52.678356] ? napi_busy_loop+0x6e0/0x6e0 [ 52.682528] ? rcu_is_watching+0x31/0x80 [ 52.686603] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 52.691434] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 52.696709] ? __do_softirq+0x1d9/0x94c [ 52.700669] ? ip_finish_output2+0x709/0x22a0 [ 52.705169] ? trace_hardirqs_on+0x28/0x180 [ 52.709485] __do_softirq+0x248/0x94c [ 52.713286] ? ip_finish_output2+0x709/0x22a0 [ 52.717786] do_softirq_own_stack+0x2a/0x40 [ 52.722103] [ 52.724336] do_softirq.part.17+0x11a/0x150 [ 52.728709] __local_bh_enable_ip+0x1ee/0x230 [ 52.733208] ip_finish_output2+0x72d/0x22a0 [ 52.737543] ? ip_frag_next+0xa10/0xa10 [ 52.741657] ? rcu_read_lock_held+0x9c/0xb0 [ 52.746000] ? rcu_read_lock_held_common+0x170/0x170 [ 52.751105] __ip_finish_output+0x401/0xa80 [ 52.755437] ? __ip_finish_output+0x401/0xa80 [ 52.759926] ip_finish_output+0x27/0x170 [ 52.763987] ip_output+0x1c6/0x560 [ 52.767522] ? ip_mc_output+0xd10/0xd10 [ 52.771505] ? __ip_finish_output+0xa80/0xa80 [ 52.775995] ? rcu_read_lock_held_common+0x170/0x170 [ 52.781094] ? rcu_read_lock_held+0x9c/0xb0 [ 52.785409] ip_local_out+0x7e/0x130 [ 52.789122] __ip_queue_xmit+0x700/0x1de0 [ 52.793267] ? __skb_checksum+0x7c0/0x7c0 [ 52.797409] ? skb_send_sock_locked+0x750/0x750 [ 52.802170] ? reqsk_fastopen_remove+0x560/0x560 [ 52.806922] ? dccp_insert_options+0x1e2/0xb20 [ 52.811505] ip_queue_xmit+0x45/0x70 [ 52.815220] dccp_transmit_skb+0xb76/0x12a0 [ 52.819538] ? skb_unlink+0x117/0x1a0 [ 52.823350] dccp_xmit_packet+0x1a0/0x580 [ 52.827516] dccp_write_xmit+0x128/0x180 [ 52.831588] dccp_sendmsg+0x68f/0xdb0 [ 52.835394] ? aa_sk_perm+0x182/0x740 [ 52.839324] ? dccp_disconnect+0xb00/0xb00 [ 52.843576] ? aa_af_perm+0x240/0x240 [ 52.847401] inet_sendmsg+0xbd/0xe0 [ 52.851035] ? inet_send_prepare+0x3a0/0x3a0 [ 52.855471] sock_sendmsg+0xdf/0x110 [ 52.859194] ____sys_sendmsg+0x687/0xae0 [ 52.863376] ? copy_msghdr_from_user+0x20d/0x3f0 [ 52.868173] ? kernel_sendmsg+0x30/0x30 [ 52.872219] ? __fget_files+0x285/0x410 [ 52.876220] ___sys_sendmsg+0xe4/0x160 [ 52.880106] ? sendmsg_copy_msghdr+0x30/0x30 [ 52.884958] ? rcu_read_lock_held_common+0x170/0x170 [ 52.890082] ? __fget_files+0x29f/0x410 [ 52.894062] ? __x64_sys_dup2+0x2e0/0x2e0 [ 52.898468] ? release_sock+0x122/0x180 [ 52.902472] ? trace_hardirqs_on+0x28/0x180 [ 52.906803] ? release_sock+0x122/0x180 [ 52.911251] ? __fget_light+0x1a9/0x230 [ 52.915235] ? __fdget+0xe/0x10 [ 52.918525] __sys_sendmsg+0xd9/0x180 [ 52.922323] ? __sys_sendmsg_sock+0xa0/0xa0 [ 52.926670] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 52.932066] ? __sys_listen+0x1e8/0x230 [ 52.936183] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.941563] __x64_sys_sendmsg+0x73/0xb0 [ 52.945639] do_syscall_64+0xd0/0x600 [ 52.949558] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.954762] RIP: 0033:0x452f89 [ 52.958127] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 52.977144] RSP: 002b:00007fdb7c106c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 52.984869] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 52.992239] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 52.999588] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 53.006869] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 53.014599] R13: 00000000ffffffff R14: 00007fdb7c1076d4 R15: 0000000000000002 [ 53.021927] CPU: 1 PID: 4910 Comm: syz-executor5 Not tainted 5.6.0-rc1-syzkaller #0 [ 53.030090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.034087] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 53.040927] Call Trace: [ 53.040934] [ 53.040950] dump_stack+0x12f/0x187 [ 53.040971] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 53.040989] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 53.040996] ? dccp_parse_options+0x333/0x1000 [ 53.041082] dccp_deliver_input_to_ccids+0xcc/0x220 [ 53.041104] dccp_rcv_established+0x49/0x70 [ 53.086624] dccp_v4_do_rcv+0xf4/0x160 [ 53.090512] __sk_receive_skb+0x2b6/0x9e0 [ 53.094791] ? sk_free+0x60/0x60 [ 53.098151] ? dccp_invalid_packet+0x3ec/0x750 [ 53.102855] dccp_v4_rcv+0xc22/0x1c0b [ 53.106819] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 53.111614] ip_local_deliver_finish+0x1ee/0x2e0 [ 53.116388] ip_local_deliver+0x306/0x450 [ 53.120539] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 53.125466] ? lock_downgrade+0x900/0x900 [ 53.129712] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 53.134657] ip_rcv_finish+0xb0/0x170 [ 53.138465] ip_rcv+0xcb/0x2f0 [ 53.141664] ? ip_local_deliver+0x450/0x450 [ 53.146005] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 53.151402] ? ip_local_deliver+0x450/0x450 [ 53.155767] __netif_receive_skb_one_core+0x132/0x190 [ 53.160956] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 53.166148] ? lock_acquire+0x194/0x3e0 [ 53.170109] ? process_backlog+0x1a8/0x700 [ 53.174337] __netif_receive_skb+0x1f/0x1b0 [ 53.178684] process_backlog+0x1f1/0x700 [ 53.183096] ? __do_softirq+0x248/0x94c [ 53.187086] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 53.191682] net_rx_action+0x42d/0xde0 [ 53.195834] ? mark_lock+0xc5/0x1200 [ 53.199670] ? napi_busy_loop+0x6e0/0x6e0 [ 53.203813] ? rcu_is_watching+0x31/0x80 [ 53.207884] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 53.212717] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 53.217997] ? __do_softirq+0x1d9/0x94c [ 53.221995] ? ip_finish_output2+0x709/0x22a0 [ 53.226590] ? trace_hardirqs_on+0x28/0x180 [ 53.230908] __do_softirq+0x248/0x94c [ 53.234817] ? ip_finish_output2+0x709/0x22a0 [ 53.239304] do_softirq_own_stack+0x2a/0x40 [ 53.243619] [ 53.245851] do_softirq.part.17+0x11a/0x150 [ 53.250176] __local_bh_enable_ip+0x1ee/0x230 [ 53.254788] ip_finish_output2+0x72d/0x22a0 [ 53.259132] ? ip_frag_next+0xa10/0xa10 [ 53.263101] ? rcu_read_lock_held+0x9c/0xb0 [ 53.267412] ? rcu_read_lock_held_common+0x170/0x170 [ 53.272529] __ip_finish_output+0x401/0xa80 [ 53.276851] ? __ip_finish_output+0x401/0xa80 [ 53.281357] ip_finish_output+0x27/0x170 [ 53.285420] ip_output+0x1c6/0x560 [ 53.288967] ? ip_mc_output+0xd10/0xd10 [ 53.292941] ? __ip_finish_output+0xa80/0xa80 [ 53.297421] ? rcu_read_lock_held_common+0x170/0x170 [ 53.302514] ? rcu_read_lock_held+0x9c/0xb0 [ 53.306834] ip_local_out+0x7e/0x130 [ 53.310589] __ip_queue_xmit+0x700/0x1de0 [ 53.314729] ? __skb_checksum+0x7c0/0x7c0 [ 53.318864] ? skb_send_sock_locked+0x750/0x750 [ 53.323544] ? reqsk_fastopen_remove+0x560/0x560 [ 53.328302] ? dccp_insert_options+0x1e2/0xb20 [ 53.332883] ip_queue_xmit+0x45/0x70 [ 53.336589] dccp_transmit_skb+0xb76/0x12a0 [ 53.340899] ? skb_unlink+0x117/0x1a0 [ 53.344697] dccp_xmit_packet+0x1a0/0x580 [ 53.348849] dccp_write_xmit+0x128/0x180 [ 53.353041] dccp_sendmsg+0x68f/0xdb0 [ 53.356842] ? aa_sk_perm+0x182/0x740 [ 53.360646] ? dccp_disconnect+0xb00/0xb00 [ 53.364887] ? aa_af_perm+0x240/0x240 [ 53.368814] inet_sendmsg+0xbd/0xe0 [ 53.372547] ? inet_send_prepare+0x3a0/0x3a0 [ 53.376963] sock_sendmsg+0xdf/0x110 [ 53.380678] ____sys_sendmsg+0x687/0xae0 [ 53.384747] ? copy_msghdr_from_user+0x20d/0x3f0 [ 53.389608] ? kernel_sendmsg+0x30/0x30 [ 53.393590] ? __fget_files+0x285/0x410 [ 53.397582] ___sys_sendmsg+0xe4/0x160 [ 53.401470] ? sendmsg_copy_msghdr+0x30/0x30 [ 53.405877] ? rcu_read_lock_held_common+0x170/0x170 [ 53.410978] ? __lock_acquire+0xfac/0x47f0 [ 53.415222] ? __fget_files+0x29f/0x410 [ 53.419193] ? __x64_sys_dup2+0x2e0/0x2e0 [ 53.423484] ? __fget_light+0x1a9/0x230 [ 53.427459] ? __fdget+0xe/0x10 [ 53.430740] __sys_sendmsg+0xd9/0x180 [ 53.434625] ? __sys_sendmsg_sock+0xa0/0xa0 [ 53.438949] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 53.444220] ? __sched_text_start+0x8/0x8 [ 53.448381] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.453752] __x64_sys_sendmsg+0x73/0xb0 [ 53.457812] do_syscall_64+0xd0/0x600 [ 53.461617] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.466794] RIP: 0033:0x452f89 [ 53.469996] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.488992] RSP: 002b:00007fe724ceac58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 53.496691] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 53.503956] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 53.511230] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 53.518601] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 53.525864] R13: 00000000ffffffff R14: 00007fe724ceb6d4 R15: 0000000000000002 [ 53.533162] CPU: 0 PID: 4914 Comm: syz-executor1 Not tainted 5.6.0-rc1-syzkaller #0 [ 53.540957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.550363] Call Trace: [ 53.552951] [ 53.555098] dump_stack+0x12f/0x187 [ 53.558733] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 53.563935] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 53.568732] ? dccp_parse_options+0x333/0x1000 [ 53.573487] dccp_deliver_input_to_ccids+0xcc/0x220 [ 53.578507] dccp_rcv_established+0x49/0x70 [ 53.582834] dccp_v4_do_rcv+0xf4/0x160 [ 53.587888] __sk_receive_skb+0x2b6/0x9e0 [ 53.592041] ? sk_free+0x60/0x60 [ 53.595416] ? dccp_invalid_packet+0x3ec/0x750 [ 53.600009] dccp_v4_rcv+0xc22/0x1c0b [ 53.603826] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 53.608578] ip_local_deliver_finish+0x1ee/0x2e0 [ 53.613443] ip_local_deliver+0x306/0x450 [ 53.617599] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 53.622527] ? lock_downgrade+0x900/0x900 [ 53.626677] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 53.631624] ip_rcv_finish+0xb0/0x170 [ 53.635952] ip_rcv+0xcb/0x2f0 [ 53.639216] ? ip_local_deliver+0x450/0x450 [ 53.643637] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 53.649011] ? ip_local_deliver+0x450/0x450 [ 53.653331] __netif_receive_skb_one_core+0x132/0x190 [ 53.658631] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 53.663838] ? lock_acquire+0x194/0x3e0 [ 53.667809] ? process_backlog+0x1a8/0x700 [ 53.672149] __netif_receive_skb+0x1f/0x1b0 [ 53.676475] process_backlog+0x1f1/0x700 [ 53.680536] ? __do_softirq+0x248/0x94c [ 53.684514] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 53.689121] net_rx_action+0x42d/0xde0 [ 53.693280] ? mark_lock+0xc5/0x1200 [ 53.697015] ? napi_busy_loop+0x6e0/0x6e0 [ 53.701170] ? rcu_is_watching+0x31/0x80 [ 53.705244] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 53.710091] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 53.715382] ? __do_softirq+0x1d9/0x94c [ 53.719376] ? ip_finish_output2+0x709/0x22a0 [ 53.723870] ? trace_hardirqs_on+0x28/0x180 [ 53.728257] __do_softirq+0x248/0x94c [ 53.732162] ? ip_finish_output2+0x709/0x22a0 [ 53.736663] do_softirq_own_stack+0x2a/0x40 [ 53.740988] [ 53.743234] do_softirq.part.17+0x11a/0x150 [ 53.747557] __local_bh_enable_ip+0x1ee/0x230 [ 53.752062] ip_finish_output2+0x72d/0x22a0 [ 53.756421] ? ip_frag_next+0xa10/0xa10 [ 53.760397] ? rcu_read_lock_held+0x9c/0xb0 [ 53.764717] ? rcu_read_lock_held_common+0x170/0x170 [ 53.769840] __ip_finish_output+0x401/0xa80 [ 53.774162] ? __ip_finish_output+0x401/0xa80 [ 53.778661] ip_finish_output+0x27/0x170 [ 53.782776] ip_output+0x1c6/0x560 [ 53.786316] ? ip_mc_output+0xd10/0xd10 [ 53.790304] ? __ip_finish_output+0xa80/0xa80 [ 53.794801] ? rcu_read_lock_held_common+0x170/0x170 [ 53.799933] ? rcu_read_lock_held+0x9c/0xb0 [ 53.804297] ip_local_out+0x7e/0x130 [ 53.808003] __ip_queue_xmit+0x700/0x1de0 [ 53.812135] ? __skb_checksum+0x7c0/0x7c0 [ 53.816366] ? skb_send_sock_locked+0x750/0x750 [ 53.821047] ? reqsk_fastopen_remove+0x560/0x560 [ 53.825810] ? dccp_insert_options+0x1e2/0xb20 [ 53.830405] ip_queue_xmit+0x45/0x70 [ 53.834114] dccp_transmit_skb+0xb76/0x12a0 [ 53.838421] ? skb_unlink+0x117/0x1a0 [ 53.842233] dccp_xmit_packet+0x1a0/0x580 [ 53.846385] dccp_write_xmit+0x128/0x180 [ 53.850447] dccp_sendmsg+0x68f/0xdb0 [ 53.854253] ? aa_sk_perm+0x182/0x740 [ 53.858072] ? dccp_disconnect+0xb00/0xb00 [ 53.862308] ? aa_af_perm+0x240/0x240 [ 53.866122] inet_sendmsg+0xbd/0xe0 [ 53.870103] ? inet_send_prepare+0x3a0/0x3a0 [ 53.874705] sock_sendmsg+0xdf/0x110 [ 53.878435] ____sys_sendmsg+0x687/0xae0 [ 53.882607] ? copy_msghdr_from_user+0x20d/0x3f0 [ 53.887368] ? kernel_sendmsg+0x30/0x30 [ 53.891443] ? __fget_files+0x285/0x410 [ 53.895425] ___sys_sendmsg+0xe4/0x160 [ 53.899312] ? sendmsg_copy_msghdr+0x30/0x30 [ 53.903732] ? rcu_read_lock_held_common+0x170/0x170 [ 53.908996] ? __fget_files+0x29f/0x410 [ 53.913085] ? __x64_sys_dup2+0x2e0/0x2e0 [ 53.917241] ? __fget_light+0x1a9/0x230 [ 53.921213] ? __fdget+0xe/0x10 [ 53.924514] __sys_sendmsg+0xd9/0x180 [ 53.928304] ? __sys_sendmsg_sock+0xa0/0xa0 [ 53.932750] ? rcu_is_watching+0x31/0x80 [ 53.936813] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 53.941649] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 53.946975] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.952346] __x64_sys_sendmsg+0x73/0xb0 [ 53.956496] do_syscall_64+0xd0/0x600 [ 53.960387] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.965849] RIP: 0033:0x452f89 [ 53.969314] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.988319] RSP: 002b:00007fcad18b3c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 53.996108] RAX: ffffffffffffffda RBX: 000000000071c010 RCX: 0000000000452f89 [ 54.003383] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 54.010646] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 54.018034] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 54.025298] R13: 00000000ffffffff R14: 00007fcad18b46d4 R15: 0000000000000008 [ 54.037813] net_ratelimit: 12 callbacks suppressed [ 54.037817] dccp_close: ABORT with 24 bytes unread [ 54.048152] dccp_close: ABORT with 393 bytes unread [ 54.055096] dccp_close: ABORT with 24 bytes unread [ 54.061144] dccp_close: ABORT with 24 bytes unread [ 54.069579] dccp_close: ABORT with 24 bytes unread [ 54.072625] dccp_close: ABORT with 24 bytes unread [ 54.082919] dccp_close: ABORT with 24 bytes unread [ 54.096361] dccp_close: ABORT with 24 bytes unread [ 54.142981] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 54.156522] CPU: 1 PID: 4933 Comm: syz-executor2 Not tainted 5.6.0-rc1-syzkaller #0 [ 54.164408] dccp_close: ABORT with 24 bytes unread [ 54.165652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.165656] Call Trace: [ 54.165661] [ 54.165674] dump_stack+0x12f/0x187 [ 54.165697] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 54.165715] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 54.165722] ? dccp_parse_options+0x333/0x1000 [ 54.165743] dccp_deliver_input_to_ccids+0xcc/0x220 [ 54.178397] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 54.180391] dccp_rcv_established+0x49/0x70 [ 54.180404] dccp_v4_do_rcv+0xf4/0x160 [ 54.180421] __sk_receive_skb+0x2b6/0x9e0 [ 54.180443] ? sk_free+0x60/0x60 [ 54.180452] ? dccp_invalid_packet+0x3ec/0x750 [ 54.242866] dccp_v4_rcv+0xc22/0x1c0b [ 54.246693] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 54.251475] ip_local_deliver_finish+0x1ee/0x2e0 [ 54.256242] ip_local_deliver+0x306/0x450 [ 54.260399] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 54.265325] ? lock_downgrade+0x900/0x900 [ 54.269467] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 54.274402] ip_rcv_finish+0xb0/0x170 [ 54.278316] ip_rcv+0xcb/0x2f0 [ 54.281532] ? ip_local_deliver+0x450/0x450 [ 54.285862] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 54.291223] ? ip_local_deliver+0x450/0x450 [ 54.295544] __netif_receive_skb_one_core+0x132/0x190 [ 54.300739] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 54.305920] ? lock_acquire+0x194/0x3e0 [ 54.309885] ? process_backlog+0x1a8/0x700 [ 54.314214] __netif_receive_skb+0x1f/0x1b0 [ 54.318545] process_backlog+0x1f1/0x700 [ 54.322596] ? __do_softirq+0x248/0x94c [ 54.326561] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 54.331429] net_rx_action+0x42d/0xde0 [ 54.335321] ? mark_lock+0xc5/0x1200 [ 54.339153] ? napi_busy_loop+0x6e0/0x6e0 [ 54.343297] ? rcu_is_watching+0x31/0x80 [ 54.347364] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 54.352202] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 54.357472] ? __do_softirq+0x1d9/0x94c [ 54.361452] ? ip_finish_output2+0x709/0x22a0 [ 54.365948] ? trace_hardirqs_on+0x28/0x180 [ 54.370269] __do_softirq+0x248/0x94c [ 54.374254] ? ip_finish_output2+0x709/0x22a0 [ 54.378748] do_softirq_own_stack+0x2a/0x40 [ 54.383074] [ 54.385338] do_softirq.part.17+0x11a/0x150 [ 54.389656] __local_bh_enable_ip+0x1ee/0x230 [ 54.394148] ip_finish_output2+0x72d/0x22a0 [ 54.398496] ? ip_frag_next+0xa10/0xa10 [ 54.402471] ? rcu_read_lock_held+0x9c/0xb0 [ 54.406893] ? rcu_read_lock_held_common+0x170/0x170 [ 54.412012] __ip_finish_output+0x401/0xa80 [ 54.416341] ? __ip_finish_output+0x401/0xa80 [ 54.420843] ip_finish_output+0x27/0x170 [ 54.424894] ip_output+0x1c6/0x560 [ 54.428787] ? ip_mc_output+0xd10/0xd10 [ 54.432814] ? __ip_finish_output+0xa80/0xa80 [ 54.437415] ? rcu_read_lock_held_common+0x170/0x170 [ 54.442514] ? rcu_read_lock_held+0x9c/0xb0 [ 54.447029] ip_local_out+0x7e/0x130 [ 54.450754] __ip_queue_xmit+0x700/0x1de0 [ 54.455038] ? __skb_checksum+0x7c0/0x7c0 [ 54.459176] ? skb_send_sock_locked+0x750/0x750 [ 54.463833] ? reqsk_fastopen_remove+0x560/0x560 [ 54.468572] ? dccp_insert_options+0x1e2/0xb20 [ 54.473166] ip_queue_xmit+0x45/0x70 [ 54.476920] dccp_transmit_skb+0xb76/0x12a0 [ 54.481252] ? skb_unlink+0x117/0x1a0 [ 54.485067] dccp_xmit_packet+0x1a0/0x580 [ 54.489216] dccp_write_xmit+0x128/0x180 [ 54.493279] dccp_sendmsg+0x68f/0xdb0 [ 54.497100] ? aa_sk_perm+0x182/0x740 [ 54.500892] ? dccp_disconnect+0xb00/0xb00 [ 54.505123] ? aa_af_perm+0x240/0x240 [ 54.508970] inet_sendmsg+0xbd/0xe0 [ 54.512597] ? inet_send_prepare+0x3a0/0x3a0 [ 54.517006] sock_sendmsg+0xdf/0x110 [ 54.520712] ____sys_sendmsg+0x687/0xae0 [ 54.524771] ? copy_msghdr_from_user+0x20d/0x3f0 [ 54.529519] ? kernel_sendmsg+0x30/0x30 [ 54.533701] ? __fget_files+0x285/0x410 [ 54.537675] ___sys_sendmsg+0xe4/0x160 [ 54.541566] ? sendmsg_copy_msghdr+0x30/0x30 [ 54.545969] ? rcu_read_lock_held_common+0x170/0x170 [ 54.551088] ? __fget_files+0x29f/0x410 [ 54.555063] ? __x64_sys_dup2+0x2e0/0x2e0 [ 54.559205] ? release_sock+0x122/0x180 [ 54.563181] ? trace_hardirqs_on+0x28/0x180 [ 54.567485] ? release_sock+0x122/0x180 [ 54.571477] ? __fget_light+0x1a9/0x230 [ 54.575455] ? __fdget+0xe/0x10 [ 54.578738] __sys_sendmsg+0xd9/0x180 [ 54.582533] ? __sys_sendmsg_sock+0xa0/0xa0 [ 54.586961] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 54.592245] ? __sched_text_start+0x8/0x8 [ 54.596406] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.601773] __x64_sys_sendmsg+0x73/0xb0 [ 54.605838] do_syscall_64+0xd0/0x600 [ 54.609632] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.614818] RIP: 0033:0x452f89 [ 54.618007] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.636900] RSP: 002b:00007fd365104c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 54.644607] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 54.651872] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 54.659134] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 54.666401] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 54.673674] R13: 00000000ffffffff R14: 00007fd3651056d4 R15: 0000000000000002 [ 54.680970] CPU: 0 PID: 4939 Comm: syz-executor3 Not tainted 5.6.0-rc1-syzkaller #0 [ 54.688773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.692801] dccp_close: ABORT with 24 bytes unread [ 54.698146] Call Trace: [ 54.698151] [ 54.698164] dump_stack+0x12f/0x187 [ 54.698188] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 54.698204] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 54.698210] ? dccp_parse_options+0x333/0x1000 [ 54.698232] dccp_deliver_input_to_ccids+0xcc/0x220 [ 54.698246] dccp_rcv_established+0x49/0x70 [ 54.735690] dccp_v4_do_rcv+0xf4/0x160 [ 54.739587] __sk_receive_skb+0x2b6/0x9e0 [ 54.743763] ? sk_free+0x60/0x60 [ 54.747224] ? dccp_invalid_packet+0x3ec/0x750 [ 54.751843] dccp_v4_rcv+0xc22/0x1c0b [ 54.755686] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 54.760465] ip_local_deliver_finish+0x1ee/0x2e0 [ 54.765346] ip_local_deliver+0x306/0x450 [ 54.769599] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 54.774696] ? lock_downgrade+0x900/0x900 [ 54.779062] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 54.784020] ip_rcv_finish+0xb0/0x170 [ 54.787830] ip_rcv+0xcb/0x2f0 [ 54.791205] ? ip_local_deliver+0x450/0x450 [ 54.795554] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 54.800935] ? ip_local_deliver+0x450/0x450 [ 54.805408] __netif_receive_skb_one_core+0x132/0x190 [ 54.810606] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 54.815806] ? lock_acquire+0x194/0x3e0 [ 54.819812] ? process_backlog+0x1a8/0x700 [ 54.824064] __netif_receive_skb+0x1f/0x1b0 [ 54.828406] process_backlog+0x1f1/0x700 [ 54.832469] ? __do_softirq+0x248/0x94c [ 54.836452] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 54.841082] net_rx_action+0x42d/0xde0 [ 54.844986] ? mark_lock+0xc5/0x1200 [ 54.848715] ? napi_busy_loop+0x6e0/0x6e0 [ 54.852881] ? rcu_is_watching+0x31/0x80 [ 54.856960] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 54.861840] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 54.867122] ? __do_softirq+0x1d9/0x94c [ 54.871103] ? ip_finish_output2+0x709/0x22a0 [ 54.875738] ? trace_hardirqs_on+0x28/0x180 [ 54.879536] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 54.880072] __do_softirq+0x248/0x94c [ 54.880097] ? ip_finish_output2+0x709/0x22a0 [ 54.880110] do_softirq_own_stack+0x2a/0x40 [ 54.880116] [ 54.880125] do_softirq.part.17+0x11a/0x150 [ 54.880134] __local_bh_enable_ip+0x1ee/0x230 [ 54.880145] ip_finish_output2+0x72d/0x22a0 [ 54.880173] ? ip_frag_next+0xa10/0xa10 [ 54.880185] ? rcu_read_lock_held+0x9c/0xb0 [ 54.880193] ? rcu_read_lock_held_common+0x170/0x170 [ 54.934735] __ip_finish_output+0x401/0xa80 [ 54.939061] ? __ip_finish_output+0x401/0xa80 [ 54.943575] ip_finish_output+0x27/0x170 [ 54.947627] ip_output+0x1c6/0x560 [ 54.951287] ? ip_mc_output+0xd10/0xd10 [ 54.955252] ? __ip_finish_output+0xa80/0xa80 [ 54.959732] ? rcu_read_lock_held_common+0x170/0x170 [ 54.964827] ? rcu_read_lock_held+0x9c/0xb0 [ 54.969152] ip_local_out+0x7e/0x130 [ 54.972868] __ip_queue_xmit+0x700/0x1de0 [ 54.977008] ? __skb_checksum+0x7c0/0x7c0 [ 54.981171] ? skb_send_sock_locked+0x750/0x750 [ 54.985826] ? reqsk_fastopen_remove+0x560/0x560 [ 54.990577] ? dccp_insert_options+0x1e2/0xb20 [ 54.995161] ip_queue_xmit+0x45/0x70 [ 54.999021] dccp_transmit_skb+0xb76/0x12a0 [ 55.003465] ? skb_unlink+0x117/0x1a0 [ 55.007276] dccp_xmit_packet+0x1a0/0x580 [ 55.011439] dccp_write_xmit+0x128/0x180 [ 55.015508] dccp_sendmsg+0x68f/0xdb0 [ 55.019308] ? aa_sk_perm+0x182/0x740 [ 55.023105] ? dccp_disconnect+0xb00/0xb00 [ 55.027344] ? aa_af_perm+0x240/0x240 [ 55.031309] inet_sendmsg+0xbd/0xe0 [ 55.034932] ? inet_send_prepare+0x3a0/0x3a0 [ 55.039464] sock_sendmsg+0xdf/0x110 [ 55.043173] ____sys_sendmsg+0x687/0xae0 [ 55.047364] ? copy_msghdr_from_user+0x20d/0x3f0 [ 55.052127] ? kernel_sendmsg+0x30/0x30 [ 55.056180] ? __fget_files+0x285/0x410 [ 55.060168] ___sys_sendmsg+0xe4/0x160 [ 55.064056] ? sendmsg_copy_msghdr+0x30/0x30 [ 55.068454] ? rcu_read_lock_held_common+0x170/0x170 [ 55.073660] ? __lock_acquire+0xfac/0x47f0 [ 55.077901] ? __fget_files+0x29f/0x410 [ 55.081908] ? __x64_sys_dup2+0x2e0/0x2e0 [ 55.086072] ? __fget_light+0x1a9/0x230 [ 55.090039] ? __fdget+0xe/0x10 [ 55.093335] __sys_sendmsg+0xd9/0x180 [ 55.097152] ? __sys_sendmsg_sock+0xa0/0xa0 [ 55.101488] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 55.106767] ? __sched_text_start+0x8/0x8 [ 55.110932] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.116433] __x64_sys_sendmsg+0x73/0xb0 [ 55.120504] do_syscall_64+0xd0/0x600 [ 55.124312] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.129497] RIP: 0033:0x452f89 [ 55.132692] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 55.151598] RSP: 002b:00007fdb7c106c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 55.159308] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 55.167653] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 55.174908] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 55.182169] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 55.189457] R13: 00000000ffffffff R14: 00007fdb7c1076d4 R15: 0000000000000002 [ 55.196754] CPU: 1 PID: 4965 Comm: syz-executor1 Not tainted 5.6.0-rc1-syzkaller #0 [ 55.200863] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 55.205509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.205513] Call Trace: [ 55.205517] [ 55.205532] dump_stack+0x12f/0x187 [ 55.205557] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 55.205574] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 55.205581] ? dccp_parse_options+0x333/0x1000 [ 55.205609] dccp_deliver_input_to_ccids+0xcc/0x220 [ 55.256329] dccp_rcv_established+0x49/0x70 [ 55.260649] dccp_v4_do_rcv+0xf4/0x160 [ 55.264531] __sk_receive_skb+0x2b6/0x9e0 [ 55.268705] ? sk_free+0x60/0x60 [ 55.272073] ? dccp_invalid_packet+0x3ec/0x750 [ 55.276662] dccp_v4_rcv+0xc22/0x1c0b [ 55.280627] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 55.285381] ip_local_deliver_finish+0x1ee/0x2e0 [ 55.290143] ip_local_deliver+0x306/0x450 [ 55.294293] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 55.299222] ? lock_downgrade+0x900/0x900 [ 55.303363] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 55.308303] ip_rcv_finish+0xb0/0x170 [ 55.312189] ip_rcv+0xcb/0x2f0 [ 55.315372] ? ip_local_deliver+0x450/0x450 [ 55.319683] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 55.325045] ? ip_local_deliver+0x450/0x450 [ 55.329364] __netif_receive_skb_one_core+0x132/0x190 [ 55.334548] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 55.339853] ? lock_acquire+0x194/0x3e0 [ 55.343820] ? process_backlog+0x1a8/0x700 [ 55.348141] __netif_receive_skb+0x1f/0x1b0 [ 55.352475] process_backlog+0x1f1/0x700 [ 55.356532] ? __do_softirq+0x248/0x94c [ 55.360498] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 55.365099] net_rx_action+0x42d/0xde0 [ 55.369007] ? mark_lock+0xc5/0x1200 [ 55.372728] ? napi_busy_loop+0x6e0/0x6e0 [ 55.376869] ? rcu_is_watching+0x31/0x80 [ 55.380929] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 55.385894] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 55.391281] ? __do_softirq+0x1d9/0x94c [ 55.395263] ? ip_finish_output2+0x709/0x22a0 [ 55.399761] ? trace_hardirqs_on+0x28/0x180 [ 55.404093] __do_softirq+0x248/0x94c [ 55.407898] ? ip_finish_output2+0x709/0x22a0 [ 55.412390] do_softirq_own_stack+0x2a/0x40 [ 55.416700] [ 55.418931] do_softirq.part.17+0x11a/0x150 [ 55.423254] __local_bh_enable_ip+0x1ee/0x230 [ 55.427971] ip_finish_output2+0x72d/0x22a0 [ 55.432309] ? ip_frag_next+0xa10/0xa10 [ 55.436274] ? rcu_read_lock_held+0x9c/0xb0 [ 55.440600] ? rcu_read_lock_held_common+0x170/0x170 [ 55.445721] __ip_finish_output+0x401/0xa80 [ 55.450027] ? __ip_finish_output+0x401/0xa80 [ 55.454633] ip_finish_output+0x27/0x170 [ 55.458690] ip_output+0x1c6/0x560 [ 55.462246] ? ip_mc_output+0xd10/0xd10 [ 55.466223] ? __ip_finish_output+0xa80/0xa80 [ 55.470712] ? rcu_read_lock_held_common+0x170/0x170 [ 55.475814] ? rcu_read_lock_held+0x9c/0xb0 [ 55.480130] ip_local_out+0x7e/0x130 [ 55.483835] __ip_queue_xmit+0x700/0x1de0 [ 55.487975] ? __skb_checksum+0x7c0/0x7c0 [ 55.492125] ? skb_send_sock_locked+0x750/0x750 [ 55.496784] ? reqsk_fastopen_remove+0x560/0x560 [ 55.501524] ? dccp_insert_options+0x1e2/0xb20 [ 55.506118] ip_queue_xmit+0x45/0x70 [ 55.509826] dccp_transmit_skb+0xb76/0x12a0 [ 55.514134] ? skb_unlink+0x117/0x1a0 [ 55.517931] dccp_xmit_packet+0x1a0/0x580 [ 55.522084] dccp_write_xmit+0x128/0x180 [ 55.526134] dccp_sendmsg+0x68f/0xdb0 [ 55.529932] ? aa_sk_perm+0x182/0x740 [ 55.533720] ? dccp_disconnect+0xb00/0xb00 [ 55.537951] ? aa_af_perm+0x240/0x240 [ 55.541755] inet_sendmsg+0xbd/0xe0 [ 55.545399] ? inet_send_prepare+0x3a0/0x3a0 [ 55.549789] sock_sendmsg+0xdf/0x110 [ 55.553499] ____sys_sendmsg+0x687/0xae0 [ 55.557545] ? copy_msghdr_from_user+0x20d/0x3f0 [ 55.562314] ? kernel_sendmsg+0x30/0x30 [ 55.566302] ? __fget_files+0x285/0x410 [ 55.570301] ___sys_sendmsg+0xe4/0x160 [ 55.574305] ? sendmsg_copy_msghdr+0x30/0x30 [ 55.578713] ? rcu_read_lock_held_common+0x170/0x170 [ 55.583807] ? __lock_acquire+0xfac/0x47f0 [ 55.588047] ? __fget_files+0x29f/0x410 [ 55.592020] ? __x64_sys_dup2+0x2e0/0x2e0 [ 55.596195] ? __fget_light+0x1a9/0x230 [ 55.600161] ? __fdget+0xe/0x10 [ 55.603436] __sys_sendmsg+0xd9/0x180 [ 55.607222] ? __sys_sendmsg_sock+0xa0/0xa0 [ 55.611560] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 55.616822] ? __sched_text_start+0x8/0x8 [ 55.620965] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.626322] __x64_sys_sendmsg+0x73/0xb0 [ 55.630380] do_syscall_64+0xd0/0x600 [ 55.634168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.639339] RIP: 0033:0x452f89 [ 55.642513] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 55.661403] RSP: 002b:00007fcad18d4c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 55.669092] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 55.676361] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 55.683611] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 55.690860] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 55.698108] R13: 00000000ffffffff R14: 00007fcad18d56d4 R15: 0000000000000002 [ 55.705392] CPU: 0 PID: 4966 Comm: syz-executor4 Not tainted 5.6.0-rc1-syzkaller #0 [ 55.713190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.722529] Call Trace: [ 55.725355] [ 55.727493] dump_stack+0x12f/0x187 [ 55.731115] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 55.736557] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 55.741295] ? dccp_parse_options+0x333/0x1000 [ 55.745871] dccp_deliver_input_to_ccids+0xcc/0x220 [ 55.750975] dccp_rcv_established+0x49/0x70 [ 55.755278] dccp_v4_do_rcv+0xf4/0x160 [ 55.759155] __sk_receive_skb+0x2b6/0x9e0 [ 55.763302] ? sk_free+0x60/0x60 [ 55.766650] ? dccp_invalid_packet+0x3ec/0x750 [ 55.771406] dccp_v4_rcv+0xc22/0x1c0b [ 55.775213] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 55.779961] ip_local_deliver_finish+0x1ee/0x2e0 [ 55.784789] ip_local_deliver+0x306/0x450 [ 55.788922] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 55.793831] ? lock_downgrade+0x900/0x900 [ 55.797965] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 55.802891] ip_rcv_finish+0xb0/0x170 [ 55.806680] ip_rcv+0xcb/0x2f0 [ 55.809868] ? ip_local_deliver+0x450/0x450 [ 55.814188] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 55.819555] ? ip_local_deliver+0x450/0x450 [ 55.823886] __netif_receive_skb_one_core+0x132/0x190 [ 55.829326] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 55.834506] ? lock_acquire+0x194/0x3e0 [ 55.838473] ? process_backlog+0x1a8/0x700 [ 55.842711] __netif_receive_skb+0x1f/0x1b0 [ 55.847031] process_backlog+0x1f1/0x700 [ 55.851081] ? __do_softirq+0x248/0x94c [ 55.855053] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 55.859637] net_rx_action+0x42d/0xde0 [ 55.863534] ? mark_lock+0xc5/0x1200 [ 55.867250] ? napi_busy_loop+0x6e0/0x6e0 [ 55.871382] ? rcu_is_watching+0x31/0x80 [ 55.875434] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 55.880261] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 55.885528] ? __do_softirq+0x1d9/0x94c [ 55.889486] ? ip_finish_output2+0x709/0x22a0 [ 55.893966] ? trace_hardirqs_on+0x28/0x180 [ 55.898286] __do_softirq+0x248/0x94c [ 55.902080] ? ip_finish_output2+0x709/0x22a0 [ 55.906560] do_softirq_own_stack+0x2a/0x40 [ 55.910865] [ 55.913097] do_softirq.part.17+0x11a/0x150 [ 55.917424] __local_bh_enable_ip+0x1ee/0x230 [ 55.921902] ip_finish_output2+0x72d/0x22a0 [ 55.926228] ? ip_frag_next+0xa10/0xa10 [ 55.930197] ? rcu_read_lock_held+0x9c/0xb0 [ 55.934511] ? rcu_read_lock_held_common+0x170/0x170 [ 55.939614] __ip_finish_output+0x401/0xa80 [ 55.943922] ? __ip_finish_output+0x401/0xa80 [ 55.948403] ip_finish_output+0x27/0x170 [ 55.952447] ip_output+0x1c6/0x560 [ 55.955982] ? ip_mc_output+0xd10/0xd10 [ 55.959943] ? __ip_finish_output+0xa80/0xa80 [ 55.964434] ? rcu_read_lock_held_common+0x170/0x170 [ 55.969530] ? rcu_read_lock_held+0x9c/0xb0 [ 55.982262] ip_local_out+0x7e/0x130 [ 55.985964] __ip_queue_xmit+0x700/0x1de0 [ 55.990097] ? __skb_checksum+0x7c0/0x7c0 [ 55.994224] ? skb_send_sock_locked+0x750/0x750 [ 55.998870] ? reqsk_fastopen_remove+0x560/0x560 [ 56.003604] ? dccp_insert_options+0x1e2/0xb20 [ 56.008188] ip_queue_xmit+0x45/0x70 [ 56.011904] dccp_transmit_skb+0xb76/0x12a0 [ 56.016207] ? skb_unlink+0x117/0x1a0 [ 56.019999] dccp_xmit_packet+0x1a0/0x580 [ 56.024142] dccp_write_xmit+0x128/0x180 [ 56.028192] dccp_sendmsg+0x68f/0xdb0 [ 56.031976] ? aa_sk_perm+0x182/0x740 [ 56.035765] ? dccp_disconnect+0xb00/0xb00 [ 56.040173] ? aa_af_perm+0x240/0x240 [ 56.043988] inet_sendmsg+0xbd/0xe0 [ 56.047611] ? inet_send_prepare+0x3a0/0x3a0 [ 56.052011] sock_sendmsg+0xdf/0x110 [ 56.055711] ____sys_sendmsg+0x687/0xae0 [ 56.059760] ? copy_msghdr_from_user+0x20d/0x3f0 [ 56.064503] ? kernel_sendmsg+0x30/0x30 [ 56.068469] ? __fget_files+0x285/0x410 [ 56.072437] ___sys_sendmsg+0xe4/0x160 [ 56.076310] ? sendmsg_copy_msghdr+0x30/0x30 [ 56.080706] ? rcu_read_lock_held_common+0x170/0x170 [ 56.085792] ? __lock_acquire+0xfac/0x47f0 [ 56.090019] ? __fget_files+0x29f/0x410 [ 56.093997] ? __x64_sys_dup2+0x2e0/0x2e0 [ 56.098145] ? __fget_light+0x1a9/0x230 [ 56.102107] ? __fdget+0xe/0x10 [ 56.105392] __sys_sendmsg+0xd9/0x180 [ 56.109181] ? __sys_sendmsg_sock+0xa0/0xa0 [ 56.113497] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 56.118755] ? __sched_text_start+0x8/0x8 [ 56.122899] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.128251] __x64_sys_sendmsg+0x73/0xb0 [ 56.132299] do_syscall_64+0xd0/0x600 [ 56.136084] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.141255] RIP: 0033:0x452f89 [ 56.144433] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 56.163318] RSP: 002b:00007f6311082c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 56.171011] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 56.178271] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 56.185521] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 56.192769] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 56.200017] R13: 00000000ffffffff R14: 00007f63110836d4 R15: 0000000000000002 [ 56.268848] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 56.282154] CPU: 0 PID: 4980 Comm: syz-executor Not tainted 5.6.0-rc1-syzkaller #0 [ 56.289863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.300100] Call Trace: [ 56.302688] [ 56.304846] dump_stack+0x12f/0x187 [ 56.308486] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 56.313685] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 56.318439] ? dccp_parse_options+0x333/0x1000 [ 56.323046] dccp_deliver_input_to_ccids+0xcc/0x220 [ 56.328080] dccp_rcv_established+0x49/0x70 [ 56.332417] dccp_v4_do_rcv+0xf4/0x160 [ 56.336313] __sk_receive_skb+0x2b6/0x9e0 [ 56.340479] ? sk_free+0x60/0x60 [ 56.343850] ? dccp_invalid_packet+0x3ec/0x750 [ 56.348453] dccp_v4_rcv+0xc22/0x1c0b [ 56.352286] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 56.357066] ip_local_deliver_finish+0x1ee/0x2e0 [ 56.361840] ip_local_deliver+0x306/0x450 [ 56.365997] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 56.368724] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 56.370929] ? lock_downgrade+0x900/0x900 [ 56.370946] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 56.370974] ip_rcv_finish+0xb0/0x170 [ 56.370988] ip_rcv+0xcb/0x2f0 [ 56.371000] ? ip_local_deliver+0x450/0x450 [ 56.371015] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 56.371031] ? ip_local_deliver+0x450/0x450 [ 56.414117] __netif_receive_skb_one_core+0x132/0x190 [ 56.419293] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 56.424473] ? lock_acquire+0x194/0x3e0 [ 56.428426] ? process_backlog+0x1a8/0x700 [ 56.432660] __netif_receive_skb+0x1f/0x1b0 [ 56.436964] process_backlog+0x1f1/0x700 [ 56.441004] ? __do_softirq+0x248/0x94c [ 56.444961] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 56.449547] net_rx_action+0x42d/0xde0 [ 56.453419] ? mark_lock+0xc5/0x1200 [ 56.457202] ? napi_busy_loop+0x6e0/0x6e0 [ 56.461345] ? rcu_is_watching+0x31/0x80 [ 56.465524] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 56.470367] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 56.475630] ? __do_softirq+0x1d9/0x94c [ 56.479590] ? ip_finish_output2+0x709/0x22a0 [ 56.484073] ? trace_hardirqs_on+0x28/0x180 [ 56.488383] __do_softirq+0x248/0x94c [ 56.492178] ? ip_finish_output2+0x709/0x22a0 [ 56.496659] do_softirq_own_stack+0x2a/0x40 [ 56.500962] [ 56.503182] do_softirq.part.17+0x11a/0x150 [ 56.507516] __local_bh_enable_ip+0x1ee/0x230 [ 56.512006] ip_finish_output2+0x72d/0x22a0 [ 56.516323] ? ip_frag_next+0xa10/0xa10 [ 56.520285] ? rcu_read_lock_held+0x9c/0xb0 [ 56.524788] ? rcu_read_lock_held_common+0x170/0x170 [ 56.529887] __ip_finish_output+0x401/0xa80 [ 56.534197] ? __ip_finish_output+0x401/0xa80 [ 56.538681] ip_finish_output+0x27/0x170 [ 56.542727] ip_output+0x1c6/0x560 [ 56.546257] ? ip_mc_output+0xd10/0xd10 [ 56.550215] ? __ip_finish_output+0xa80/0xa80 [ 56.554690] ? rcu_read_lock_held_common+0x170/0x170 [ 56.559774] ? rcu_read_lock_held+0x9c/0xb0 [ 56.564081] ip_local_out+0x7e/0x130 [ 56.567780] __ip_queue_xmit+0x700/0x1de0 [ 56.571908] ? __skb_checksum+0x7c0/0x7c0 [ 56.576047] ? skb_send_sock_locked+0x750/0x750 [ 56.580694] ? reqsk_fastopen_remove+0x560/0x560 [ 56.585429] ? dccp_insert_options+0x1e2/0xb20 [ 56.590003] ip_queue_xmit+0x45/0x70 [ 56.593701] dccp_transmit_skb+0xb76/0x12a0 [ 56.598960] ? skb_unlink+0x117/0x1a0 [ 56.602751] dccp_xmit_packet+0x1a0/0x580 [ 56.606885] dccp_write_xmit+0x128/0x180 [ 56.610931] dccp_sendmsg+0x68f/0xdb0 [ 56.614717] ? aa_sk_perm+0x182/0x740 [ 56.618502] ? dccp_disconnect+0xb00/0xb00 [ 56.622718] ? aa_af_perm+0x240/0x240 [ 56.626523] inet_sendmsg+0xbd/0xe0 [ 56.630265] ? inet_send_prepare+0x3a0/0x3a0 [ 56.634675] sock_sendmsg+0xdf/0x110 [ 56.638400] ____sys_sendmsg+0x687/0xae0 [ 56.642448] ? copy_msghdr_from_user+0x20d/0x3f0 [ 56.647202] ? kernel_sendmsg+0x30/0x30 [ 56.651279] ? __fget_files+0x285/0x410 [ 56.655249] ___sys_sendmsg+0xe4/0x160 [ 56.659122] ? sendmsg_copy_msghdr+0x30/0x30 [ 56.663540] ? rcu_read_lock_held_common+0x170/0x170 [ 56.668632] ? __lock_acquire+0xfac/0x47f0 [ 56.672867] ? __fget_files+0x29f/0x410 [ 56.676841] ? __x64_sys_dup2+0x2e0/0x2e0 [ 56.680988] ? __fget_light+0x1a9/0x230 [ 56.684961] ? __fdget+0xe/0x10 [ 56.688232] __sys_sendmsg+0xd9/0x180 [ 56.692016] ? __sys_sendmsg_sock+0xa0/0xa0 [ 56.696336] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 56.701602] ? __sched_text_start+0x8/0x8 [ 56.705753] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.711110] __x64_sys_sendmsg+0x73/0xb0 [ 56.715156] do_syscall_64+0xd0/0x600 [ 56.718953] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.724126] RIP: 0033:0x452f89 [ 56.727303] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 56.746195] RSP: 002b:00007f455bb32c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 56.753883] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 56.761135] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 56.768387] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 56.775648] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 56.782901] R13: 00000000ffffffff R14: 00007f455bb336d4 R15: 0000000000000002 [ 56.790227] CPU: 1 PID: 5001 Comm: syz-executor1 Not tainted 5.6.0-rc1-syzkaller #0 [ 56.798035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.807406] Call Trace: [ 56.809994] [ 56.812174] dump_stack+0x12f/0x187 [ 56.815819] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 56.821020] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 56.825775] ? dccp_parse_options+0x333/0x1000 [ 56.830377] dccp_deliver_input_to_ccids+0xcc/0x220 [ 56.832040] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 56.835408] dccp_rcv_established+0x49/0x70 [ 56.835420] dccp_v4_do_rcv+0xf4/0x160 [ 56.835437] __sk_receive_skb+0x2b6/0x9e0 [ 56.835460] ? sk_free+0x60/0x60 [ 56.835471] ? dccp_invalid_packet+0x3ec/0x750 [ 56.835494] dccp_v4_rcv+0xc22/0x1c0b [ 56.872662] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 56.877438] ip_local_deliver_finish+0x1ee/0x2e0 [ 56.882200] ip_local_deliver+0x306/0x450 [ 56.886343] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 56.891262] ? lock_downgrade+0x900/0x900 [ 56.895576] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 56.900505] ip_rcv_finish+0xb0/0x170 [ 56.904305] ip_rcv+0xcb/0x2f0 [ 56.907493] ? ip_local_deliver+0x450/0x450 [ 56.911799] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 56.917175] ? ip_local_deliver+0x450/0x450 [ 56.921501] __netif_receive_skb_one_core+0x132/0x190 [ 56.926717] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 56.931899] ? lock_acquire+0x194/0x3e0 [ 56.935855] ? process_backlog+0x1a8/0x700 [ 56.940088] __netif_receive_skb+0x1f/0x1b0 [ 56.944401] process_backlog+0x1f1/0x700 [ 56.948445] ? __do_softirq+0x248/0x94c [ 56.952402] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 56.956975] net_rx_action+0x42d/0xde0 [ 56.960848] ? mark_lock+0xc5/0x1200 [ 56.964551] ? napi_busy_loop+0x6e0/0x6e0 [ 56.968685] ? rcu_is_watching+0x31/0x80 [ 56.972733] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 56.977556] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 56.982827] ? __do_softirq+0x1d9/0x94c [ 56.986794] ? ip_finish_output2+0x709/0x22a0 [ 56.991285] ? trace_hardirqs_on+0x28/0x180 [ 56.995613] __do_softirq+0x248/0x94c [ 56.999413] ? ip_finish_output2+0x709/0x22a0 [ 57.003921] do_softirq_own_stack+0x2a/0x40 [ 57.008233] [ 57.010457] do_softirq.part.17+0x11a/0x150 [ 57.014775] __local_bh_enable_ip+0x1ee/0x230 [ 57.019271] ip_finish_output2+0x72d/0x22a0 [ 57.023617] ? ip_frag_next+0xa10/0xa10 [ 57.027669] ? rcu_read_lock_held+0x9c/0xb0 [ 57.031988] ? rcu_read_lock_held_common+0x170/0x170 [ 57.038050] __ip_finish_output+0x401/0xa80 [ 57.042369] ? __ip_finish_output+0x401/0xa80 [ 57.046879] ip_finish_output+0x27/0x170 [ 57.050935] ip_output+0x1c6/0x560 [ 57.054486] ? ip_mc_output+0xd10/0xd10 [ 57.058461] ? __ip_finish_output+0xa80/0xa80 [ 57.062941] ? rcu_read_lock_held_common+0x170/0x170 [ 57.068048] ? rcu_read_lock_held+0x9c/0xb0 [ 57.072375] ip_local_out+0x7e/0x130 [ 57.076204] __ip_queue_xmit+0x700/0x1de0 [ 57.080348] ? __skb_checksum+0x7c0/0x7c0 [ 57.084496] ? skb_send_sock_locked+0x750/0x750 [ 57.089262] ? reqsk_fastopen_remove+0x560/0x560 [ 57.094017] ? dccp_insert_options+0x1e2/0xb20 [ 57.098617] ip_queue_xmit+0x45/0x70 [ 57.102331] dccp_transmit_skb+0xb76/0x12a0 [ 57.106649] ? skb_unlink+0x117/0x1a0 [ 57.110474] dccp_xmit_packet+0x1a0/0x580 [ 57.114732] dccp_write_xmit+0x128/0x180 [ 57.118798] dccp_sendmsg+0x68f/0xdb0 [ 57.122605] ? aa_sk_perm+0x182/0x740 [ 57.126494] ? dccp_disconnect+0xb00/0xb00 [ 57.130726] ? aa_af_perm+0x240/0x240 [ 57.134640] inet_sendmsg+0xbd/0xe0 [ 57.138372] ? inet_send_prepare+0x3a0/0x3a0 [ 57.142772] sock_sendmsg+0xdf/0x110 [ 57.146496] ____sys_sendmsg+0x687/0xae0 [ 57.150611] ? copy_msghdr_from_user+0x20d/0x3f0 [ 57.155361] ? kernel_sendmsg+0x30/0x30 [ 57.159335] ? __fget_files+0x285/0x410 [ 57.163328] ___sys_sendmsg+0xe4/0x160 [ 57.167297] ? sendmsg_copy_msghdr+0x30/0x30 [ 57.171805] ? rcu_read_lock_held_common+0x170/0x170 [ 57.176894] ? __lock_acquire+0xfac/0x47f0 [ 57.181142] ? __fget_files+0x29f/0x410 [ 57.185133] ? __x64_sys_dup2+0x2e0/0x2e0 [ 57.189292] ? __fget_light+0x1a9/0x230 [ 57.193259] ? __fdget+0xe/0x10 [ 57.196549] __sys_sendmsg+0xd9/0x180 [ 57.200350] ? __sys_sendmsg_sock+0xa0/0xa0 [ 57.204684] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 57.210055] ? __sched_text_start+0x8/0x8 [ 57.214226] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.219601] __x64_sys_sendmsg+0x73/0xb0 [ 57.223663] do_syscall_64+0xd0/0x600 [ 57.227460] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.232667] RIP: 0033:0x452f89 [ 57.235851] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.254746] RSP: 002b:00007fcad18d4c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 57.262537] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 57.269823] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 57.277086] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 57.284347] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 57.291611] R13: 00000000ffffffff R14: 00007fcad18d56d4 R15: 0000000000000002 [ 57.298908] CPU: 0 PID: 5010 Comm: syz-executor2 Not tainted 5.6.0-rc1-syzkaller #0 [ 57.306718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.316081] Call Trace: [ 57.318772] 2020/02/12 03:15:56 executed programs: 57 [ 57.320956] dump_stack+0x12f/0x187 [ 57.324611] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 57.329817] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 57.334580] ? dccp_parse_options+0x333/0x1000 [ 57.339182] dccp_deliver_input_to_ccids+0xcc/0x220 [ 57.344205] dccp_rcv_established+0x49/0x70 [ 57.348550] dccp_v4_do_rcv+0xf4/0x160 [ 57.353894] __sk_receive_skb+0x2b6/0x9e0 [ 57.358073] ? sk_free+0x60/0x60 [ 57.361475] ? dccp_invalid_packet+0x3ec/0x750 [ 57.366087] dccp_v4_rcv+0xc22/0x1c0b [ 57.369927] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 57.374701] ip_local_deliver_finish+0x1ee/0x2e0 [ 57.379490] ip_local_deliver+0x306/0x450 [ 57.383670] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 57.388599] ? lock_downgrade+0x900/0x900 [ 57.392761] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 57.397747] ip_rcv_finish+0xb0/0x170 [ 57.401566] ip_rcv+0xcb/0x2f0 [ 57.404872] ? ip_local_deliver+0x450/0x450 [ 57.409211] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 57.414591] ? ip_local_deliver+0x450/0x450 [ 57.418925] __netif_receive_skb_one_core+0x132/0x190 [ 57.420902] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 57.424118] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 57.424139] ? lock_acquire+0x194/0x3e0 [ 57.424145] ? process_backlog+0x1a8/0x700 [ 57.424162] __netif_receive_skb+0x1f/0x1b0 [ 57.424176] process_backlog+0x1f1/0x700 [ 57.424182] ? __do_softirq+0x248/0x94c [ 57.424191] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 57.424213] net_rx_action+0x42d/0xde0 [ 57.471889] ? mark_lock+0xc5/0x1200 [ 57.475609] ? napi_busy_loop+0x6e0/0x6e0 [ 57.479846] ? rcu_is_watching+0x31/0x80 [ 57.483924] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 57.488940] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 57.494207] ? __do_softirq+0x1d9/0x94c [ 57.498169] ? ip_finish_output2+0x709/0x22a0 [ 57.502669] ? trace_hardirqs_on+0x28/0x180 [ 57.506989] __do_softirq+0x248/0x94c [ 57.510884] ? ip_finish_output2+0x709/0x22a0 [ 57.515378] do_softirq_own_stack+0x2a/0x40 [ 57.519694] [ 57.522027] do_softirq.part.17+0x11a/0x150 [ 57.526347] __local_bh_enable_ip+0x1ee/0x230 [ 57.530846] ip_finish_output2+0x72d/0x22a0 [ 57.535177] ? ip_frag_next+0xa10/0xa10 [ 57.539156] ? rcu_read_lock_held+0x9c/0xb0 [ 57.543493] ? rcu_read_lock_held_common+0x170/0x170 [ 57.548603] __ip_finish_output+0x401/0xa80 [ 57.552920] ? __ip_finish_output+0x401/0xa80 [ 57.557531] ip_finish_output+0x27/0x170 [ 57.561595] ip_output+0x1c6/0x560 [ 57.565148] ? ip_mc_output+0xd10/0xd10 [ 57.569116] ? __ip_finish_output+0xa80/0xa80 [ 57.573608] ? rcu_read_lock_held_common+0x170/0x170 [ 57.578710] ? rcu_read_lock_held+0x9c/0xb0 [ 57.583029] ip_local_out+0x7e/0x130 [ 57.586776] __ip_queue_xmit+0x700/0x1de0 [ 57.590912] ? __skb_checksum+0x7c0/0x7c0 [ 57.595063] ? skb_send_sock_locked+0x750/0x750 [ 57.599734] ? reqsk_fastopen_remove+0x560/0x560 [ 57.604490] ? dccp_insert_options+0x1e2/0xb20 [ 57.609072] ip_queue_xmit+0x45/0x70 [ 57.612790] dccp_transmit_skb+0xb76/0x12a0 [ 57.617131] ? skb_unlink+0x117/0x1a0 [ 57.620942] dccp_xmit_packet+0x1a0/0x580 [ 57.625089] dccp_write_xmit+0x128/0x180 [ 57.629143] dccp_sendmsg+0x68f/0xdb0 [ 57.632951] ? aa_sk_perm+0x182/0x740 [ 57.636872] ? dccp_disconnect+0xb00/0xb00 [ 57.641101] ? aa_af_perm+0x240/0x240 [ 57.648331] inet_sendmsg+0xbd/0xe0 [ 57.652085] ? inet_send_prepare+0x3a0/0x3a0 [ 57.656481] sock_sendmsg+0xdf/0x110 [ 57.660215] ____sys_sendmsg+0x687/0xae0 [ 57.665150] ? copy_msghdr_from_user+0x20d/0x3f0 [ 57.669915] ? kernel_sendmsg+0x30/0x30 [ 57.673896] ? __fget_files+0x285/0x410 [ 57.677979] ___sys_sendmsg+0xe4/0x160 [ 57.681864] ? sendmsg_copy_msghdr+0x30/0x30 [ 57.686276] ? rcu_read_lock_held_common+0x170/0x170 [ 57.691366] ? __lock_acquire+0xfac/0x47f0 [ 57.695616] ? __fget_files+0x29f/0x410 [ 57.699625] ? __x64_sys_dup2+0x2e0/0x2e0 [ 57.703786] ? __fget_light+0x1a9/0x230 [ 57.707762] ? __fdget+0xe/0x10 [ 57.711045] __sys_sendmsg+0xd9/0x180 [ 57.714846] ? __sys_sendmsg_sock+0xa0/0xa0 [ 57.719214] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 57.724486] ? __sched_text_start+0x8/0x8 [ 57.728650] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.734022] __x64_sys_sendmsg+0x73/0xb0 [ 57.738087] do_syscall_64+0xd0/0x600 [ 57.741904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.747089] RIP: 0033:0x452f89 [ 57.750280] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.769437] RSP: 002b:00007fd365104c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 57.777138] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 57.784406] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 57.791868] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 57.799133] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 57.806416] R13: 00000000ffffffff R14: 00007fd3651056d4 R15: 0000000000000002 [ 57.813721] CPU: 1 PID: 5034 Comm: syz-executor1 Not tainted 5.6.0-rc1-syzkaller #0 [ 57.822137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.831620] Call Trace: [ 57.834204] [ 57.836391] dump_stack+0x12f/0x187 [ 57.840172] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 57.845546] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 57.850345] ? dccp_parse_options+0x333/0x1000 [ 57.854448] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 57.855182] dccp_deliver_input_to_ccids+0xcc/0x220 [ 57.855198] dccp_rcv_established+0x49/0x70 [ 57.855209] dccp_v4_do_rcv+0xf4/0x160 [ 57.855225] __sk_receive_skb+0x2b6/0x9e0 [ 57.855243] ? sk_free+0x60/0x60 [ 57.855253] ? dccp_invalid_packet+0x3ec/0x750 [ 57.855279] dccp_v4_rcv+0xc22/0x1c0b [ 57.855316] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 57.902698] ip_local_deliver_finish+0x1ee/0x2e0 [ 57.907458] ip_local_deliver+0x306/0x450 [ 57.911662] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 57.916601] ? lock_downgrade+0x900/0x900 [ 57.920872] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 57.925830] ip_rcv_finish+0xb0/0x170 [ 57.929645] ip_rcv+0xcb/0x2f0 [ 57.932974] ? ip_local_deliver+0x450/0x450 [ 57.937320] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 57.943256] ? ip_local_deliver+0x450/0x450 [ 57.947641] __netif_receive_skb_one_core+0x132/0x190 [ 57.952827] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 57.958354] ? lock_acquire+0x194/0x3e0 [ 57.962325] ? process_backlog+0x1a8/0x700 [ 57.966607] __netif_receive_skb+0x1f/0x1b0 [ 57.971283] process_backlog+0x1f1/0x700 [ 57.975493] ? __do_softirq+0x248/0x94c [ 57.979481] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 57.984094] net_rx_action+0x42d/0xde0 [ 57.988010] ? mark_lock+0xc5/0x1200 [ 57.992073] ? napi_busy_loop+0x6e0/0x6e0 [ 57.996232] ? rcu_is_watching+0x31/0x80 [ 58.000305] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 58.005156] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 58.010431] ? __do_softirq+0x1d9/0x94c [ 58.014407] ? ip_finish_output2+0x709/0x22a0 [ 58.018898] ? trace_hardirqs_on+0x28/0x180 [ 58.023225] __do_softirq+0x248/0x94c [ 58.027175] ? ip_finish_output2+0x709/0x22a0 [ 58.031672] do_softirq_own_stack+0x2a/0x40 [ 58.036005] [ 58.038238] do_softirq.part.17+0x11a/0x150 [ 58.042570] __local_bh_enable_ip+0x1ee/0x230 [ 58.047179] ip_finish_output2+0x72d/0x22a0 [ 58.051515] ? ip_frag_next+0xa10/0xa10 [ 58.055492] ? rcu_read_lock_held+0x9c/0xb0 [ 58.059840] ? rcu_read_lock_held_common+0x170/0x170 [ 58.064951] __ip_finish_output+0x401/0xa80 [ 58.069260] ? __ip_finish_output+0x401/0xa80 [ 58.073761] ip_finish_output+0x27/0x170 [ 58.077840] ip_output+0x1c6/0x560 [ 58.081373] ? ip_mc_output+0xd10/0xd10 [ 58.085351] ? __ip_finish_output+0xa80/0xa80 [ 58.089839] ? rcu_read_lock_held_common+0x170/0x170 [ 58.094951] ? rcu_read_lock_held+0x9c/0xb0 [ 58.099277] ip_local_out+0x7e/0x130 [ 58.102989] __ip_queue_xmit+0x700/0x1de0 [ 58.107513] ? __skb_checksum+0x7c0/0x7c0 [ 58.111777] ? skb_send_sock_locked+0x750/0x750 [ 58.116436] ? reqsk_fastopen_remove+0x560/0x560 [ 58.121208] ? dccp_insert_options+0x1e2/0xb20 [ 58.125794] ip_queue_xmit+0x45/0x70 [ 58.129507] dccp_transmit_skb+0xb76/0x12a0 [ 58.133842] ? skb_unlink+0x117/0x1a0 [ 58.137760] dccp_xmit_packet+0x1a0/0x580 [ 58.142056] dccp_write_xmit+0x128/0x180 [ 58.146145] dccp_sendmsg+0x68f/0xdb0 [ 58.150070] ? aa_sk_perm+0x182/0x740 [ 58.153864] ? dccp_disconnect+0xb00/0xb00 [ 58.158205] ? aa_af_perm+0x240/0x240 [ 58.162117] inet_sendmsg+0xbd/0xe0 [ 58.165759] ? inet_send_prepare+0x3a0/0x3a0 [ 58.170176] sock_sendmsg+0xdf/0x110 [ 58.173914] ____sys_sendmsg+0x687/0xae0 [ 58.178012] ? copy_msghdr_from_user+0x20d/0x3f0 [ 58.183477] ? kernel_sendmsg+0x30/0x30 [ 58.187460] ? __fget_files+0x285/0x410 [ 58.191555] ___sys_sendmsg+0xe4/0x160 [ 58.195445] ? sendmsg_copy_msghdr+0x30/0x30 [ 58.199855] ? rcu_read_lock_held_common+0x170/0x170 [ 58.204971] ? __lock_acquire+0xfac/0x47f0 [ 58.209346] ? __fget_files+0x29f/0x410 [ 58.213343] ? __x64_sys_dup2+0x2e0/0x2e0 [ 58.217636] ? __fget_light+0x1a9/0x230 [ 58.221612] ? __fdget+0xe/0x10 [ 58.224887] __sys_sendmsg+0xd9/0x180 [ 58.228684] ? __sys_sendmsg_sock+0xa0/0xa0 [ 58.233033] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 58.238309] ? __sched_text_start+0x8/0x8 [ 58.242465] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.247963] __x64_sys_sendmsg+0x73/0xb0 [ 58.252044] do_syscall_64+0xd0/0x600 [ 58.255874] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.261063] RIP: 0033:0x452f89 [ 58.264248] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.283150] RSP: 002b:00007fcad18d4c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 58.290859] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 58.298134] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 58.305402] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 58.312756] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 58.320032] R13: 00000000ffffffff R14: 00007fcad18d56d4 R15: 0000000000000002 [ 58.327357] CPU: 0 PID: 5038 Comm: syz-executor Not tainted 5.6.0-rc1-syzkaller #0 [ 58.335141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.344617] Call Trace: [ 58.347221] [ 58.349382] dump_stack+0x12f/0x187 [ 58.353124] tfrc_rx_hist_sample_rtt.cold.3+0x47/0x4c [ 58.358428] ccid3_hc_rx_packet_recv+0x471/0xec0 [ 58.363289] ? dccp_parse_options+0x333/0x1000 [ 58.367927] dccp_deliver_input_to_ccids+0xcc/0x220 [ 58.372962] dccp_rcv_established+0x49/0x70 [ 58.377301] dccp_v4_do_rcv+0xf4/0x160 [ 58.381209] __sk_receive_skb+0x2b6/0x9e0 [ 58.385380] ? sk_free+0x60/0x60 [ 58.388755] ? dccp_invalid_packet+0x3ec/0x750 [ 58.393463] dccp_v4_rcv+0xc22/0x1c0b [ 58.397304] ip_protocol_deliver_rcu+0x50b/0x6b0 [ 58.402195] ip_local_deliver_finish+0x1ee/0x2e0 [ 58.406987] ip_local_deliver+0x306/0x450 [ 58.411269] ? ip_local_deliver_finish+0x2e0/0x2e0 [ 58.416345] ? lock_downgrade+0x900/0x900 [ 58.420529] ? ip_protocol_deliver_rcu+0x6b0/0x6b0 [ 58.425488] ip_rcv_finish+0xb0/0x170 [ 58.429301] ip_rcv+0xcb/0x2f0 [ 58.432508] ? ip_local_deliver+0x450/0x450 [ 58.434084] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 58.436840] ? ip_rcv_finish_core.isra.16+0x1b90/0x1b90 [ 58.436860] ? ip_local_deliver+0x450/0x450 [ 58.436872] __netif_receive_skb_one_core+0x132/0x190 [ 58.436883] ? __netif_receive_skb_core+0x2a00/0x2a00 [ 58.436899] ? lock_acquire+0x194/0x3e0 [ 58.436905] ? process_backlog+0x1a8/0x700 [ 58.436920] __netif_receive_skb+0x1f/0x1b0 [ 58.484238] process_backlog+0x1f1/0x700 [ 58.488303] ? __do_softirq+0x248/0x94c [ 58.492290] ? lockdep_hardirqs_on+0x1a1/0x5d0 [ 58.496895] net_rx_action+0x42d/0xde0 [ 58.500801] ? mark_lock+0xc5/0x1200 [ 58.504538] ? napi_busy_loop+0x6e0/0x6e0 [ 58.508683] ? rcu_is_watching+0x31/0x80 [ 58.512752] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 58.517600] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 58.522892] ? __do_softirq+0x1d9/0x94c [ 58.526865] ? ip_finish_output2+0x709/0x22a0 [ 58.531358] ? trace_hardirqs_on+0x28/0x180 [ 58.535676] __do_softirq+0x248/0x94c [ 58.539526] ? ip_finish_output2+0x709/0x22a0 [ 58.544013] do_softirq_own_stack+0x2a/0x40 [ 58.548332] [ 58.550568] do_softirq.part.17+0x11a/0x150 [ 58.554895] __local_bh_enable_ip+0x1ee/0x230 [ 58.559498] ip_finish_output2+0x72d/0x22a0 [ 58.563846] ? ip_frag_next+0xa10/0xa10 [ 58.567826] ? rcu_read_lock_held+0x9c/0xb0 [ 58.572163] ? rcu_read_lock_held_common+0x170/0x170 [ 58.577295] __ip_finish_output+0x401/0xa80 [ 58.581622] ? __ip_finish_output+0x401/0xa80 [ 58.586267] ip_finish_output+0x27/0x170 [ 58.590366] ip_output+0x1c6/0x560 [ 58.593906] ? ip_mc_output+0xd10/0xd10 [ 58.597880] ? __ip_finish_output+0xa80/0xa80 [ 58.602478] ? rcu_read_lock_held_common+0x170/0x170 [ 58.607600] ? rcu_read_lock_held+0x9c/0xb0 [ 58.611935] ip_local_out+0x7e/0x130 [ 58.615652] __ip_queue_xmit+0x700/0x1de0 [ 58.619802] ? __skb_checksum+0x7c0/0x7c0 [ 58.623936] ? skb_send_sock_locked+0x750/0x750 [ 58.628601] ? reqsk_fastopen_remove+0x560/0x560 [ 58.633372] ? dccp_insert_options+0x1e2/0xb20 [ 58.637952] ip_queue_xmit+0x45/0x70 [ 58.641659] dccp_transmit_skb+0xb76/0x12a0 [ 58.646075] ? skb_unlink+0x117/0x1a0 [ 58.649876] dccp_xmit_packet+0x1a0/0x580 [ 58.654018] dccp_write_xmit+0x128/0x180 [ 58.658193] dccp_sendmsg+0x68f/0xdb0 [ 58.661998] ? aa_sk_perm+0x182/0x740 [ 58.665801] ? dccp_disconnect+0xb00/0xb00 [ 58.670038] ? aa_af_perm+0x240/0x240 [ 58.673863] inet_sendmsg+0xbd/0xe0 [ 58.677492] ? inet_send_prepare+0x3a0/0x3a0 [ 58.681893] sock_sendmsg+0xdf/0x110 [ 58.685623] ____sys_sendmsg+0x687/0xae0 [ 58.689794] ? copy_msghdr_from_user+0x20d/0x3f0 [ 58.694641] ? kernel_sendmsg+0x30/0x30 [ 58.698625] ? __fget_files+0x285/0x410 [ 58.702610] ___sys_sendmsg+0xe4/0x160 [ 58.706495] ? sendmsg_copy_msghdr+0x30/0x30 [ 58.710903] ? rcu_read_lock_held_common+0x170/0x170 [ 58.716001] ? __lock_acquire+0xfac/0x47f0 [ 58.720235] ? __fget_files+0x29f/0x410 [ 58.724224] ? __x64_sys_dup2+0x2e0/0x2e0 [ 58.728382] ? __fget_light+0x1a9/0x230 [ 58.732351] ? __fdget+0xe/0x10 [ 58.735647] __sys_sendmsg+0xd9/0x180 [ 58.739434] ? __sys_sendmsg_sock+0xa0/0xa0 [ 58.743776] ? rcu_read_lock_any_held.part.8+0x50/0x50 [ 58.749040] ? __sched_text_start+0x8/0x8 [ 58.753188] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.758557] __x64_sys_sendmsg+0x73/0xb0 [ 58.762611] do_syscall_64+0xd0/0x600 [ 58.766421] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.771603] RIP: 0033:0x452f89 [ 58.774801] Code: e8 ac b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.793709] RSP: 002b:00007f455bb32c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e [ 58.801415] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452f89 [ 58.808701] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 58.815979] RBP: 000000000000048a R08: 0000000000000000 R09: 0000000000000000 [ 58.823355] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d90 [ 58.830619] R13: 00000000ffffffff R14: 00007f455bb336d4 R15: 0000000000000002 [ 58.837910] CPU: 1 PID: 5054 Comm: syz-executor4 Not tainted 5.6.0-rc1-syzkaller #0 [ 58.845787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.852451] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:412/tfrc_rx_hist_sample_rtt() [ 58.855239] Call Trace: [ 58.855244] [ 58.855257] dump_stack+0x12f/0x187