[....] Starting enhanced syslogd: rsyslogd[ 13.153093] audit: type=1400 audit(1516269031.011:5): avc: denied { syslog } for pid=3500 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.434740] audit: type=1400 audit(1516269036.293:6): avc: denied { map } for pid=3639 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.248' (ECDSA) to the list of known hosts. executing program [ 24.676758] audit: type=1400 audit(1516269042.535:7): avc: denied { map } for pid=3653 comm="syzkaller714991" path="/root/syzkaller714991474" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 24.704284] audit: type=1400 audit(1516269042.563:8): avc: denied { name_bind } for pid=3654 comm="syzkaller714991" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 executing program [ 24.726856] audit: type=1400 audit(1516269042.563:9): avc: denied { node_bind } for pid=3654 comm="syzkaller714991" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 24.728762] dccp_close: ABORT with 24 bytes unread executing program executing program [ 24.755215] audit: type=1400 audit(1516269042.564:10): avc: denied { name_connect } for pid=3654 comm="syzkaller714991" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 24.770562] dccp_close: ABORT with 24 bytes unread [ 24.796256] dccp_close: ABORT with 24 bytes unread executing program [ 24.819300] dccp_close: ABORT with 24 bytes unread executing program [ 24.842278] dccp_close: ABORT with 24 bytes unread executing program [ 24.864627] dccp_close: ABORT with 24 bytes unread executing program [ 24.886923] dccp_close: ABORT with 24 bytes unread executing program [ 24.911077] dccp_close: ABORT with 24 bytes unread executing program [ 24.934665] dccp_close: ABORT with 24 bytes unread executing program executing program [ 24.958209] dccp_close: ABORT with 24 bytes unread executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 29.732817] net_ratelimit: 265 callbacks suppressed [ 29.732837] dccp_close: ABORT with 24 bytes unread [ 29.761941] dccp_close: ABORT with 24 bytes unread executing program [ 29.786129] dccp_close: ABORT with 24 bytes unread executing program [ 29.810544] dccp_close: ABORT with 24 bytes unread executing program [ 29.835493] dccp_close: ABORT with 24 bytes unread executing program [ 29.859165] dccp_close: ABORT with 24 bytes unread executing program [ 29.883424] dccp_close: ABORT with 24 bytes unread executing program [ 29.906181] dccp_close: ABORT with 24 bytes unread executing program [ 29.930442] dccp_close: ABORT with 24 bytes unread executing program executing program [ 29.953651] dccp_close: ABORT with 24 bytes unread executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 31.700852] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:425/tfrc_rx_hist_sample_rtt() [ 31.714106] CPU: 1 PID: 5162 Comm: syzkaller714991 Not tainted 4.15.0-rc8+ #195 [ 31.721543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.730888] Call Trace: [ 31.733443] [ 31.735572] dump_stack+0x194/0x257 [ 31.739174] ? arch_local_irq_restore+0x53/0x53 [ 31.743824] ? tfrc_rx_handle_loss+0xb38/0x24d0 [ 31.748465] ? __lock_is_held+0xb6/0x140 [ 31.752506] tfrc_rx_hist_sample_rtt+0x407/0x4d0 [ 31.757238] ccid3_hc_rx_packet_recv+0x696/0xeb3 [ 31.761965] ? dccp_parse_options+0x3d8/0x1030 [ 31.766523] ? ccid3_hc_tx_packet_recv+0xd20/0xd20 [ 31.771426] dccp_deliver_input_to_ccids+0xd9/0x250 [ 31.776417] dccp_rcv_established+0x88/0xb0 [ 31.780718] dccp_v4_do_rcv+0x135/0x160 [ 31.784675] __sk_receive_skb+0x33e/0xc10 [ 31.788797] ? sk_free+0x40/0x40 [ 31.792141] ? inet_lhash2_lookup+0x4b0/0x4b0 [ 31.796608] ? skb_send_sock+0x50/0x50 [ 31.800465] ? attach_entity_load_avg+0x7a0/0x7a0 [ 31.805285] ? print_irqtrace_events+0x270/0x270 [ 31.810014] ? __update_load_avg_se.isra.27+0x56a/0x7c0 [ 31.815361] ? dccp_invalid_packet+0x55/0x7d0 [ 31.819834] dccp_v4_rcv+0xf5f/0x1c80 [ 31.823618] ? dccp_v4_err+0x1550/0x1550 [ 31.827652] ? lock_release+0xa40/0xa40 [ 31.831600] ? __lock_is_held+0xb6/0x140 [ 31.835643] ip_local_deliver_finish+0x2f1/0xc50 [ 31.840377] ? iptable_mangle_hook+0xaf/0x4a0 [ 31.844850] ? ip_rcv_finish+0x1e30/0x1e30 [ 31.849064] ? nf_hook_slow+0xd3/0x1a0 [ 31.852928] ip_local_deliver+0x1ce/0x6e0 [ 31.857048] ? ip_call_ra_chain+0x6d0/0x6d0 [ 31.861348] ? __local_bh_enable_ip+0x121/0x230 [ 31.865990] ? check_noncircular+0x20/0x20 [ 31.870218] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 31.875208] ? ip_rcv_finish+0x1e30/0x1e30 [ 31.879418] ? ipt_do_table+0xd75/0x1330 [ 31.883456] ip_rcv_finish+0x953/0x1e30 [ 31.887407] ? inet_del_offload+0x40/0x40 [ 31.891532] ? ip_rcv+0xf22/0x1840 [ 31.895050] ? lock_downgrade+0x980/0x980 [ 31.899176] ? nf_nat_ipv4_in+0x1cd/0x270 [ 31.903293] ? iptable_nat_ipv4_fn+0x40/0x40 [ 31.907684] ? nf_hook_slow+0xd3/0x1a0 [ 31.911547] ip_rcv+0xc5a/0x1840 [ 31.914893] ? ip_local_deliver+0x6e0/0x6e0 [ 31.919670] ? check_noncircular+0x20/0x20 [ 31.923877] ? check_noncircular+0x20/0x20 [ 31.928093] ? inet_del_offload+0x40/0x40 [ 31.932221] ? ip_local_deliver+0x6e0/0x6e0 [ 31.936519] __netif_receive_skb_core+0x1a41/0x3460 [ 31.941519] ? nf_ingress+0x9f0/0x9f0 [ 31.945293] ? lock_downgrade+0x980/0x980 [ 31.949412] ? lock_downgrade+0x980/0x980 [ 31.953541] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 31.958701] ? check_noncircular+0x20/0x20 [ 31.962916] ? _raw_spin_unlock_irqrestore+0xa6/0xba [ 31.967993] ? try_to_wake_up+0xf9/0x1600 [ 31.972121] ? __lock_acquire+0x664/0x3e00 [ 31.976346] ? print_irqtrace_events+0x270/0x270 [ 31.981081] ? swake_up+0x25f/0x430 [ 31.984681] ? check_noncircular+0x20/0x20 [ 31.988886] ? lock_downgrade+0x980/0x980 [ 31.993012] ? lock_release+0xa40/0xa40 [ 31.996962] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 32.001958] ? mark_held_locks+0xaf/0x100 [ 32.006084] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 32.011169] ? find_held_lock+0x35/0x1d0 [ 32.015209] ? lock_acquire+0x1d5/0x580 [ 32.019154] ? process_backlog+0x45f/0x740 [ 32.023357] ? lock_acquire+0x1d5/0x580 [ 32.027302] ? process_backlog+0x1ab/0x740 [ 32.031515] ? lock_release+0xa40/0xa40 [ 32.035461] ? mark_held_locks+0xaf/0x100 [ 32.039591] __netif_receive_skb+0x2c/0x1b0 [ 32.043884] ? __netif_receive_skb+0x2c/0x1b0 [ 32.048363] process_backlog+0x203/0x740 [ 32.052401] ? mark_held_locks+0xaf/0x100 [ 32.056520] ? check_noncircular+0x20/0x20 [ 32.060736] net_rx_action+0x792/0x1910 [ 32.064694] ? napi_complete_done+0x6c0/0x6c0 [ 32.069171] ? rcu_read_lock_sched_held+0x108/0x120 [ 32.074170] ? note_gp_changes+0x650/0x650 [ 32.078389] ? timerqueue_add+0x1e9/0x280 [ 32.082513] ? enqueue_hrtimer+0x171/0x4a0 [ 32.086721] ? __remove_hrtimer+0x190/0x190 [ 32.091029] ? check_noncircular+0x20/0x20 [ 32.095247] ? rebalance_domains+0xcc0/0xcc0 [ 32.099633] ? __lock_is_held+0xb6/0x140 [ 32.103676] ? check_noncircular+0x20/0x20 [ 32.107885] ? print_irqtrace_events+0x270/0x270 [ 32.112615] ? lock_downgrade+0x980/0x980 [ 32.116741] ? __irqentry_text_end+0x1f8d34/0x1f8d34 [ 32.121822] ? do_timer+0x50/0x50 [ 32.125251] ? __lock_is_held+0xb6/0x140 [ 32.129302] __do_softirq+0x2d7/0xb85 [ 32.133077] ? task_prio+0x40/0x40 [ 32.136596] ? __irqentry_text_end+0x1f8d34/0x1f8d34 [ 32.141669] ? irq_exit+0xbb/0x200 [ 32.145181] ? smp_apic_timer_interrupt+0x16b/0x700 [ 32.150169] ? smp_reschedule_interrupt+0xe6/0x670 [ 32.155078] ? smp_call_function_single_interrupt+0x640/0x640 [ 32.160934] ? _raw_spin_lock+0x32/0x40 [ 32.164883] ? _raw_spin_unlock+0x22/0x30 [ 32.169005] ? handle_edge_irq+0x2b4/0x7c0 [ 32.173218] ? task_prio+0x40/0x40 [ 32.176739] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 32.181569] do_softirq_own_stack+0x2a/0x40 [ 32.185864] [ 32.188078] do_softirq.part.19+0x14d/0x190 [ 32.192388] ? ip_finish_output2+0x92f/0x1550 [ 32.196861] __local_bh_enable_ip+0x1ee/0x230 [ 32.201334] ip_finish_output2+0x962/0x1550 [ 32.205634] ? ip_copy_metadata+0xac0/0xac0 [ 32.209929] ? ipt_do_table+0xd0a/0x1330 [ 32.213962] ? trace_hardirqs_on+0xd/0x10 [ 32.218082] ? __local_bh_enable_ip+0x121/0x230 [ 32.222735] ? ipt_do_table+0xd75/0x1330 [ 32.226766] ? trace_hardirqs_on+0xd/0x10 [ 32.230892] ? ipv4_mtu+0x347/0x4c0 [ 32.234495] ? __lock_is_held+0xb6/0x140 [ 32.238537] ip_finish_output+0x864/0xd10 [ 32.242658] ? ip_finish_output+0x864/0xd10 [ 32.246955] ? ip_fragment.constprop.47+0x200/0x200 [ 32.251943] ? iptable_mangle_hook+0xaf/0x4a0 [ 32.256418] ? nf_hook_slow+0xd3/0x1a0 [ 32.260283] ip_output+0x1d2/0x860 [ 32.263797] ? ip_mc_output+0x1350/0x1350 [ 32.267930] ? ip_fragment.constprop.47+0x200/0x200 [ 32.272924] ip_local_out+0x95/0x160 [ 32.276612] ip_queue_xmit+0x8c0/0x18e0 [ 32.280564] ? ip_build_and_send_pkt+0xc30/0xc30 [ 32.285291] ? skb_send_sock+0x50/0x50 [ 32.289148] ? reqsk_fastopen_remove+0x521/0x610 [ 32.293874] ? dccp_insert_option_padding+0xad/0xd0 [ 32.298865] ? dccp_insert_options+0x20f/0xcf0 [ 32.303424] ? dccp_v4_send_check+0x187/0x3c0 [ 32.307895] dccp_transmit_skb+0x9ac/0x10f0 [ 32.312197] dccp_xmit_packet+0x215/0x740 [ 32.316320] ? dccp_send_ack+0x350/0x350 [ 32.320354] ? ccid3_hc_tx_send_packet+0x2e4/0x840 [ 32.325260] dccp_write_xmit+0x17d/0x1d0 [ 32.329300] dccp_sendmsg+0x95f/0xdc0 [ 32.333084] ? compat_dccp_getsockopt+0x70/0x70 [ 32.337728] ? rw_copy_check_uvector+0x1be/0x280 [ 32.342463] ? sock_has_perm+0x2a4/0x420 [ 32.346497] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 32.351832] ? dup_iter+0x192/0x260 [ 32.355435] ? kasan_check_write+0x14/0x20 [ 32.359645] inet_sendmsg+0x11f/0x5e0 [ 32.363416] ? copy_msghdr_from_user+0x3a6/0x590 [ 32.368147] ? inet_create+0xf50/0xf50 [ 32.372010] ? selinux_socket_sendmsg+0x36/0x40 [ 32.376657] ? security_socket_sendmsg+0x89/0xb0 [ 32.381385] ? inet_create+0xf50/0xf50 [ 32.385245] sock_sendmsg+0xca/0x110 [ 32.388933] ___sys_sendmsg+0x767/0x8b0 [ 32.392893] ? copy_msghdr_from_user+0x590/0x590 [ 32.397632] ? __do_page_fault+0x5f7/0xc90 [ 32.401838] ? lock_downgrade+0x980/0x980 [ 32.405962] ? __fget_light+0x297/0x380 [ 32.409911] ? fget_raw+0x20/0x20 [ 32.413340] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 32.417891] ? vmacache_find+0x5f/0x280 [ 32.421842] ? up_read+0x1a/0x40 [ 32.425182] ? __do_page_fault+0x3d6/0xc90 [ 32.429395] ? __fdget+0x18/0x20 [ 32.432739] __sys_sendmsg+0xe5/0x210 [ 32.436509] ? __sys_sendmsg+0xe5/0x210 [ 32.440456] ? SyS_shutdown+0x290/0x290 [ 32.444402] ? __do_page_fault+0xc90/0xc90 [ 32.448616] ? SyS_futex+0x269/0x390 [ 32.452298] ? fput+0xd2/0x140 [ 32.455474] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 32.460467] SyS_sendmsg+0x2d/0x50 [ 32.463981] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 32.468710] RIP: 0033:0x446469 [ 32.471874] RSP: 002b:00007f1670003da8 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 32.479557] RAX: ffffffffffffffda RBX: 00000000006dbc3c RCX: 0000000000446469 [ 32.486802] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 32.494045] RBP: 00000000006dbc38 R08: 0000000000000000 R09: 0000000000000000 executing program executing program executing program [ 32.501292] R10: 0000000000000000 R11: 0000000000000293 R12: f8e4cbe49e572d45 [ 32.508534] R13: 54c1b85d98aba1df R14: a6eaa24dbeb18c29 R15: 000000000000000c executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 34.733434] net_ratelimit: 208 callbacks suppressed [ 34.733437] dccp_close: ABORT with 24 bytes unread [ 34.762384] dccp_close: ABORT with 24 bytes unread executing program [ 34.786201] dccp_close: ABORT with 24 bytes unread executing program [ 34.810092] dccp_close: ABORT with 24 bytes unread executing program [ 34.834339] dccp_close: ABORT with 24 bytes unread executing program [ 34.858107] dccp_close: ABORT with 24 bytes unread executing program [ 34.882494] dccp_close: ABORT with 24 bytes unread executing program [ 34.906764] dccp_close: ABORT with 24 bytes unread executing program [ 34.930710] dccp_close: ABORT with 24 bytes unread executing program executing program [ 34.954644] dccp_close: ABORT with 24 bytes unread executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 37.263494] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:425/tfrc_rx_hist_sample_rtt() [ 37.276713] CPU: 1 PID: 6164 Comm: syzkaller714991 Not tainted 4.15.0-rc8+ #195 [ 37.284143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.293484] Call Trace: [ 37.296044] [ 37.298171] dump_stack+0x194/0x257 [ 37.301774] ? arch_local_irq_restore+0x53/0x53 [ 37.306413] ? tfrc_rx_handle_loss+0xb38/0x24d0 [ 37.311055] ? __lock_is_held+0xb6/0x140 [ 37.315092] tfrc_rx_hist_sample_rtt+0x407/0x4d0 [ 37.319824] ccid3_hc_rx_packet_recv+0x696/0xeb3 [ 37.324551] ? dccp_parse_options+0x3d8/0x1030 [ 37.329108] ? ccid3_hc_tx_packet_recv+0xd20/0xd20 [ 37.334011] dccp_deliver_input_to_ccids+0xd9/0x250 [ 37.339012] dccp_rcv_established+0x88/0xb0 [ 37.343312] dccp_v4_do_rcv+0x135/0x160 [ 37.347262] __sk_receive_skb+0x33e/0xc10 [ 37.351385] ? sk_free+0x40/0x40 [ 37.354739] ? inet_lhash2_lookup+0x4b0/0x4b0 [ 37.359202] ? skb_send_sock+0x50/0x50 [ 37.363063] ? print_irqtrace_events+0x270/0x270 [ 37.367788] ? __update_load_avg_se.isra.27+0x56a/0x7c0 [ 37.373125] ? dccp_invalid_packet+0x55/0x7d0 [ 37.377595] dccp_v4_rcv+0xf5f/0x1c80 [ 37.381394] ? dccp_v4_err+0x1550/0x1550 [ 37.385433] ? lock_release+0xa40/0xa40 [ 37.389387] ? __lock_is_held+0xb6/0x140 [ 37.393429] ip_local_deliver_finish+0x2f1/0xc50 [ 37.398158] ? iptable_mangle_hook+0xaf/0x4a0 [ 37.402629] ? ip_rcv_finish+0x1e30/0x1e30 [ 37.406838] ? nf_hook_slow+0xd3/0x1a0 [ 37.410705] ip_local_deliver+0x1ce/0x6e0 [ 37.414824] ? ip_call_ra_chain+0x6d0/0x6d0 [ 37.419120] ? __local_bh_enable_ip+0x121/0x230 [ 37.423770] ? check_noncircular+0x20/0x20 [ 37.427982] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 37.432972] ? ip_rcv_finish+0x1e30/0x1e30 [ 37.437180] ? ipt_do_table+0xd75/0x1330 [ 37.441215] ip_rcv_finish+0x953/0x1e30 [ 37.445169] ? inet_del_offload+0x40/0x40 [ 37.449294] ? ip_rcv+0xf22/0x1840 [ 37.452806] ? lock_downgrade+0x980/0x980 [ 37.456930] ? nf_nat_ipv4_in+0x1cd/0x270 [ 37.461050] ? iptable_nat_ipv4_fn+0x40/0x40 [ 37.465436] ? nf_hook_slow+0xd3/0x1a0 [ 37.469301] ip_rcv+0xc5a/0x1840 [ 37.472643] ? ip_local_deliver+0x6e0/0x6e0 [ 37.476937] ? check_noncircular+0x20/0x20 [ 37.481145] ? check_noncircular+0x20/0x20 [ 37.485373] ? inet_del_offload+0x40/0x40 [ 37.489501] ? ip_local_deliver+0x6e0/0x6e0 [ 37.493799] __netif_receive_skb_core+0x1a41/0x3460 [ 37.498797] ? nf_ingress+0x9f0/0x9f0 [ 37.502572] ? lock_downgrade+0x980/0x980 [ 37.506688] ? lock_downgrade+0x980/0x980 [ 37.510814] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 37.515974] ? check_noncircular+0x20/0x20 [ 37.520203] ? _raw_spin_unlock_irqrestore+0xa6/0xba [ 37.525280] ? try_to_wake_up+0xf9/0x1600 [ 37.529400] ? __lock_acquire+0x664/0x3e00 [ 37.533611] ? print_irqtrace_events+0x270/0x270 [ 37.538345] ? swake_up+0x25f/0x430 [ 37.541943] ? check_noncircular+0x20/0x20 [ 37.546147] ? lock_downgrade+0x980/0x980 [ 37.550267] ? lock_release+0xa40/0xa40 [ 37.554210] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 37.559202] ? mark_held_locks+0xaf/0x100 [ 37.563325] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 37.568405] ? find_held_lock+0x35/0x1d0 [ 37.572451] ? lock_acquire+0x1d5/0x580 [ 37.576399] ? process_backlog+0x45f/0x740 [ 37.580603] ? lock_acquire+0x1d5/0x580 [ 37.584548] ? process_backlog+0x1ab/0x740 [ 37.588759] ? lock_release+0xa40/0xa40 [ 37.592707] ? mark_held_locks+0xaf/0x100 [ 37.596837] __netif_receive_skb+0x2c/0x1b0 [ 37.601131] ? __netif_receive_skb+0x2c/0x1b0 [ 37.605602] process_backlog+0x203/0x740 [ 37.609640] ? mark_held_locks+0xaf/0x100 [ 37.613757] ? check_noncircular+0x20/0x20 [ 37.617973] net_rx_action+0x792/0x1910 [ 37.621930] ? napi_complete_done+0x6c0/0x6c0 [ 37.626406] ? rcu_read_lock_sched_held+0x108/0x120 [ 37.631407] ? note_gp_changes+0x650/0x650 [ 37.635618] ? timerqueue_add+0x1e9/0x280 [ 37.639742] ? enqueue_hrtimer+0x171/0x4a0 [ 37.643954] ? __remove_hrtimer+0x190/0x190 [ 37.648256] ? check_noncircular+0x20/0x20 [ 37.652476] ? rebalance_domains+0xcc0/0xcc0 [ 37.656866] ? __lock_is_held+0xb6/0x140 [ 37.660910] ? check_noncircular+0x20/0x20 [ 37.665120] ? print_irqtrace_events+0x270/0x270 [ 37.669852] ? lock_downgrade+0x980/0x980 [ 37.673974] ? __irqentry_text_end+0x1f8d34/0x1f8d34 [ 37.679050] ? do_timer+0x50/0x50 [ 37.682478] ? tick_nohz_handler+0x130/0x130 [ 37.686870] ? __lock_is_held+0xb6/0x140 [ 37.690923] __do_softirq+0x2d7/0xb85 [ 37.694695] ? task_prio+0x40/0x40 [ 37.698217] ? __irqentry_text_end+0x1f8d34/0x1f8d34 [ 37.703290] ? irq_exit+0xbb/0x200 [ 37.706802] ? smp_apic_timer_interrupt+0x16b/0x700 [ 37.711791] ? smp_reschedule_interrupt+0xe6/0x670 [ 37.716697] ? smp_call_function_single_interrupt+0x640/0x640 [ 37.722555] ? _raw_spin_lock+0x32/0x40 [ 37.726506] ? _raw_spin_unlock+0x22/0x30 [ 37.730626] ? handle_edge_irq+0x2b4/0x7c0 [ 37.734840] ? task_prio+0x40/0x40 [ 37.738362] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 37.743188] do_softirq_own_stack+0x2a/0x40 [ 37.747487] [ 37.749701] do_softirq.part.19+0x14d/0x190 [ 37.754001] ? ip_finish_output2+0x92f/0x1550 [ 37.758476] __local_bh_enable_ip+0x1ee/0x230 [ 37.762945] ip_finish_output2+0x962/0x1550 [ 37.767247] ? ip_copy_metadata+0xac0/0xac0 [ 37.771542] ? ipt_do_table+0xd0a/0x1330 [ 37.775577] ? trace_hardirqs_on+0xd/0x10 [ 37.779705] ? __local_bh_enable_ip+0x121/0x230 [ 37.784351] ? ipt_do_table+0xd75/0x1330 [ 37.788389] ? trace_hardirqs_on+0xd/0x10 [ 37.792513] ? ipv4_mtu+0x347/0x4c0 [ 37.796116] ? __lock_is_held+0xb6/0x140 [ 37.800160] ip_finish_output+0x864/0xd10 [ 37.804278] ? ip_finish_output+0x864/0xd10 [ 37.808582] ? ip_fragment.constprop.47+0x200/0x200 [ 37.813570] ? iptable_mangle_hook+0xaf/0x4a0 [ 37.818051] ? nf_hook_slow+0xd3/0x1a0 [ 37.821923] ip_output+0x1d2/0x860 [ 37.825440] ? ip_mc_output+0x1350/0x1350 [ 37.829568] ? ip_fragment.constprop.47+0x200/0x200 [ 37.834566] ip_local_out+0x95/0x160 [ 37.838259] ip_queue_xmit+0x8c0/0x18e0 [ 37.842211] ? ip_build_and_send_pkt+0xc30/0xc30 [ 37.846937] ? skb_send_sock+0x50/0x50 [ 37.850793] ? reqsk_fastopen_remove+0x521/0x610 [ 37.855519] ? dccp_insert_option_padding+0xad/0xd0 [ 37.860509] ? dccp_insert_options+0x20f/0xcf0 [ 37.865065] ? dccp_v4_send_check+0x187/0x3c0 [ 37.869534] dccp_transmit_skb+0x9ac/0x10f0 [ 37.873835] dccp_xmit_packet+0x215/0x740 [ 37.877957] ? dccp_send_ack+0x350/0x350 [ 37.881989] ? ccid3_hc_tx_send_packet+0x2e4/0x840 [ 37.886901] dccp_write_xmit+0x17d/0x1d0 [ 37.890938] dccp_sendmsg+0x95f/0xdc0 [ 37.894719] ? compat_dccp_getsockopt+0x70/0x70 [ 37.899362] ? rw_copy_check_uvector+0x1be/0x280 [ 37.904099] ? sock_has_perm+0x2a4/0x420 [ 37.908137] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 37.913472] ? dup_iter+0x192/0x260 [ 37.917431] ? kasan_check_write+0x14/0x20 [ 37.921640] inet_sendmsg+0x11f/0x5e0 [ 37.925411] ? copy_msghdr_from_user+0x3a6/0x590 [ 37.930137] ? inet_create+0xf50/0xf50 [ 37.933998] ? selinux_socket_sendmsg+0x36/0x40 [ 37.938645] ? security_socket_sendmsg+0x89/0xb0 [ 37.943370] ? inet_create+0xf50/0xf50 [ 37.947231] sock_sendmsg+0xca/0x110 [ 37.950920] ___sys_sendmsg+0x767/0x8b0 [ 37.954870] ? copy_msghdr_from_user+0x590/0x590 [ 37.959605] ? __do_page_fault+0x5f7/0xc90 [ 37.963813] ? lock_downgrade+0x980/0x980 [ 37.967937] ? __fget_light+0x297/0x380 [ 37.971885] ? fget_raw+0x20/0x20 [ 37.975310] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 37.979859] ? vmacache_find+0x5f/0x280 [ 37.983810] ? up_read+0x1a/0x40 [ 37.987150] ? __do_page_fault+0x3d6/0xc90 [ 37.991362] ? __fdget+0x18/0x20 [ 37.994707] __sys_sendmsg+0xe5/0x210 [ 37.998475] ? __sys_sendmsg+0xe5/0x210 [ 38.002421] ? SyS_shutdown+0x290/0x290 [ 38.006370] ? __do_page_fault+0xc90/0xc90 [ 38.010580] ? SyS_futex+0x269/0x390 [ 38.014263] ? fput+0xd2/0x140 [ 38.017436] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 38.022430] SyS_sendmsg+0x2d/0x50 [ 38.025956] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 38.030687] RIP: 0033:0x446469 [ 38.033846] RSP: 002b:00007f1670003da8 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 38.041523] RAX: ffffffffffffffda RBX: 00000000006dbc3c RCX: 0000000000446469 [ 38.048764] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 38.056004] RBP: 00000000006dbc38 R08: 0000000000000000 R09: 0000000000000000 executing program [ 38.063254] R10: 0000000000000000 R11: 0000000000000293 R12: f8e4cbe49e572d45 [ 38.070499] R13: 54c1b85d98aba1df R14: a6eaa24dbeb18c29 R15: 000000000000000c [ 38.097781] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:425/tfrc_rx_hist_sample_rtt() [ 38.110998] CPU: 0 PID: 6169 Comm: syzkaller714991 Not tainted 4.15.0-rc8+ #195 [ 38.118435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.127780] Call Trace: [ 38.130338] [ 38.132463] dump_stack+0x194/0x257 [ 38.136066] ? arch_local_irq_restore+0x53/0x53 [ 38.140705] ? tfrc_rx_handle_loss+0xb38/0x24d0 [ 38.145353] ? __lock_is_held+0xb6/0x140 [ 38.149397] tfrc_rx_hist_sample_rtt+0x407/0x4d0 [ 38.154130] ccid3_hc_rx_packet_recv+0x696/0xeb3 [ 38.158858] ? dccp_parse_options+0x3d8/0x1030 [ 38.163415] ? ccid3_hc_tx_packet_recv+0xd20/0xd20 [ 38.168316] dccp_deliver_input_to_ccids+0xd9/0x250 [ 38.173306] dccp_rcv_established+0x88/0xb0 [ 38.177599] dccp_v4_do_rcv+0x135/0x160 [ 38.181548] __sk_receive_skb+0x33e/0xc10 [ 38.185671] ? sk_free+0x40/0x40 [ 38.189015] ? inet_lhash2_lookup+0x4b0/0x4b0 [ 38.193494] ? skb_send_sock+0x50/0x50 [ 38.197356] ? attach_entity_load_avg+0x7a0/0x7a0 [ 38.202179] ? print_irqtrace_events+0x270/0x270 [ 38.206905] ? __update_load_avg_se.isra.27+0x56a/0x7c0 [ 38.212244] ? dccp_invalid_packet+0x55/0x7d0 [ 38.216721] dccp_v4_rcv+0xf5f/0x1c80 [ 38.220506] ? dccp_v4_err+0x1550/0x1550 [ 38.224543] ? lock_release+0xa40/0xa40 [ 38.228494] ? __lock_is_held+0xb6/0x140 [ 38.232541] ip_local_deliver_finish+0x2f1/0xc50 [ 38.237273] ? iptable_mangle_hook+0xaf/0x4a0 [ 38.241742] ? ip_rcv_finish+0x1e30/0x1e30 [ 38.245954] ? nf_hook_slow+0xd3/0x1a0 [ 38.249817] ip_local_deliver+0x1ce/0x6e0 [ 38.253938] ? ip_call_ra_chain+0x6d0/0x6d0 [ 38.258231] ? __local_bh_enable_ip+0x121/0x230 [ 38.262870] ? check_noncircular+0x20/0x20 [ 38.267085] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 38.272074] ? ip_rcv_finish+0x1e30/0x1e30 [ 38.276287] ? ipt_do_table+0xd75/0x1330 [ 38.280322] ip_rcv_finish+0x953/0x1e30 [ 38.284278] ? inet_del_offload+0x40/0x40 [ 38.288403] ? ip_rcv+0xf22/0x1840 [ 38.291913] ? lock_downgrade+0x980/0x980 [ 38.296042] ? nf_nat_ipv4_in+0x1cd/0x270 [ 38.300160] ? iptable_nat_ipv4_fn+0x40/0x40 [ 38.304548] ? nf_hook_slow+0xd3/0x1a0 [ 38.308411] ip_rcv+0xc5a/0x1840 [ 38.311756] ? ip_local_deliver+0x6e0/0x6e0 [ 38.316053] ? check_noncircular+0x20/0x20 [ 38.320261] ? check_noncircular+0x20/0x20 [ 38.324474] ? inet_del_offload+0x40/0x40 [ 38.328604] ? ip_local_deliver+0x6e0/0x6e0 [ 38.332899] __netif_receive_skb_core+0x1a41/0x3460 [ 38.337902] ? nf_ingress+0x9f0/0x9f0 [ 38.341678] ? lock_downgrade+0x980/0x980 [ 38.345799] ? lock_downgrade+0x980/0x980 [ 38.349925] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 38.355084] ? check_noncircular+0x20/0x20 [ 38.359300] ? _raw_spin_unlock_irqrestore+0xa6/0xba [ 38.364376] ? try_to_wake_up+0xf9/0x1600 [ 38.368497] ? __lock_acquire+0x664/0x3e00 [ 38.372716] ? print_irqtrace_events+0x270/0x270 [ 38.377451] ? swake_up+0x25f/0x430 [ 38.381049] ? check_noncircular+0x20/0x20 [ 38.385258] ? lock_downgrade+0x980/0x980 [ 38.389380] ? lock_release+0xa40/0xa40 [ 38.393332] ? mark_held_locks+0xaf/0x100 [ 38.397454] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 38.402532] ? find_held_lock+0x35/0x1d0 [ 38.406570] ? lock_acquire+0x1d5/0x580 [ 38.410514] ? process_backlog+0x45f/0x740 [ 38.414716] ? lock_acquire+0x1d5/0x580 [ 38.418662] ? process_backlog+0x1ab/0x740 [ 38.422873] ? lock_release+0xa40/0xa40 [ 38.426816] ? mark_held_locks+0xaf/0x100 [ 38.430943] __netif_receive_skb+0x2c/0x1b0 [ 38.435235] ? __netif_receive_skb+0x2c/0x1b0 [ 38.439704] process_backlog+0x203/0x740 [ 38.443736] ? mark_held_locks+0xaf/0x100 [ 38.447856] ? check_noncircular+0x20/0x20 [ 38.452072] net_rx_action+0x792/0x1910 [ 38.456041] ? napi_complete_done+0x6c0/0x6c0 [ 38.460518] ? rcu_read_lock_sched_held+0x108/0x120 [ 38.465515] ? note_gp_changes+0x650/0x650 [ 38.469722] ? timerqueue_add+0x1e9/0x280 [ 38.473845] ? enqueue_hrtimer+0x171/0x4a0 [ 38.478051] ? __remove_hrtimer+0x190/0x190 [ 38.482357] ? check_noncircular+0x20/0x20 [ 38.486566] ? print_irqtrace_events+0x270/0x270 [ 38.491299] ? clockevents_program_event+0x163/0x2e0 [ 38.496379] ? lock_downgrade+0x980/0x980 [ 38.500506] ? __lock_is_held+0xb6/0x140 [ 38.504545] ? check_noncircular+0x20/0x20 [ 38.508754] ? print_irqtrace_events+0x270/0x270 [ 38.513491] ? lock_downgrade+0x980/0x980 [ 38.517618] ? __irqentry_text_end+0x1f8d34/0x1f8d34 [ 38.522692] ? do_timer+0x50/0x50 [ 38.526124] ? __lock_is_held+0xb6/0x140 [ 38.530168] __do_softirq+0x2d7/0xb85 [ 38.533939] ? task_prio+0x40/0x40 [ 38.537460] ? __irqentry_text_end+0x1f8d34/0x1f8d34 [ 38.542533] ? irq_exit+0xbb/0x200 [ 38.546045] ? smp_apic_timer_interrupt+0x16b/0x700 [ 38.551032] ? smp_reschedule_interrupt+0xe6/0x670 [ 38.555946] ? smp_call_function_single_interrupt+0x640/0x640 [ 38.561810] ? _raw_spin_lock+0x32/0x40 [ 38.565765] ? task_prio+0x40/0x40 [ 38.569281] ? rcu_eqs_enter_common.constprop.69+0x21a/0x300 [ 38.575062] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.579881] do_softirq_own_stack+0x2a/0x40 [ 38.584173] [ 38.586382] do_softirq.part.19+0x14d/0x190 [ 38.590675] ? ip_finish_output2+0x92f/0x1550 [ 38.595140] __local_bh_enable_ip+0x1ee/0x230 [ 38.599606] ip_finish_output2+0x962/0x1550 [ 38.603905] ? ip_copy_metadata+0xac0/0xac0 [ 38.608199] ? ipt_do_table+0xd0a/0x1330 [ 38.612231] ? trace_hardirqs_on+0xd/0x10 [ 38.616350] ? __local_bh_enable_ip+0x121/0x230 [ 38.620991] ? ipt_do_table+0xd75/0x1330 [ 38.625031] ? trace_hardirqs_on+0xd/0x10 [ 38.629153] ? ipv4_mtu+0x347/0x4c0 [ 38.632756] ? __lock_is_held+0xb6/0x140 [ 38.636799] ip_finish_output+0x864/0xd10 [ 38.640917] ? ip_finish_output+0x864/0xd10 [ 38.645213] ? ip_fragment.constprop.47+0x200/0x200 [ 38.650205] ? iptable_mangle_hook+0xaf/0x4a0 [ 38.654687] ? nf_hook_slow+0xd3/0x1a0 [ 38.658551] ip_output+0x1d2/0x860 [ 38.662063] ? ip_mc_output+0x1350/0x1350 [ 38.666190] ? ip_fragment.constprop.47+0x200/0x200 [ 38.671184] ip_local_out+0x95/0x160 [ 38.674872] ip_queue_xmit+0x8c0/0x18e0 [ 38.678825] ? ip_build_and_send_pkt+0xc30/0xc30 [ 38.683553] ? skb_send_sock+0x50/0x50 [ 38.687408] ? reqsk_fastopen_remove+0x521/0x610 [ 38.692136] ? dccp_insert_option_padding+0xad/0xd0 [ 38.697136] ? dccp_insert_options+0x20f/0xcf0 [ 38.701694] ? dccp_v4_send_check+0x187/0x3c0 [ 38.706165] dccp_transmit_skb+0x9ac/0x10f0 [ 38.710467] dccp_xmit_packet+0x215/0x740 [ 38.714588] ? dccp_send_ack+0x350/0x350 [ 38.718619] ? ccid3_hc_tx_send_packet+0x2e4/0x840 [ 38.723528] dccp_write_xmit+0x17d/0x1d0 [ 38.727568] dccp_sendmsg+0x95f/0xdc0 [ 38.731351] ? compat_dccp_getsockopt+0x70/0x70 [ 38.735994] ? rw_copy_check_uvector+0x1be/0x280 [ 38.740731] ? sock_has_perm+0x2a4/0x420 [ 38.744768] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 38.750110] ? dup_iter+0x192/0x260 [ 38.753711] ? kasan_check_write+0x14/0x20 [ 38.757921] inet_sendmsg+0x11f/0x5e0 [ 38.761692] ? copy_msghdr_from_user+0x3a6/0x590 [ 38.766419] ? inet_create+0xf50/0xf50 [ 38.770279] ? selinux_socket_sendmsg+0x36/0x40 [ 38.774918] ? security_socket_sendmsg+0x89/0xb0 [ 38.779644] ? inet_create+0xf50/0xf50 [ 38.783505] sock_sendmsg+0xca/0x110 [ 38.787192] ___sys_sendmsg+0x767/0x8b0 [ 38.791144] ? copy_msghdr_from_user+0x590/0x590 [ 38.795878] ? __do_page_fault+0x5f7/0xc90 [ 38.800088] ? lock_downgrade+0x980/0x980 [ 38.804215] ? __fget_light+0x297/0x380 [ 38.808160] ? fget_raw+0x20/0x20 [ 38.811588] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 38.816148] ? vmacache_find+0x5f/0x280 [ 38.820100] ? up_read+0x1a/0x40 [ 38.823436] ? __do_page_fault+0x3d6/0xc90 [ 38.827651] ? __fdget+0x18/0x20 [ 38.830994] __sys_sendmsg+0xe5/0x210 [ 38.834769] ? __sys_sendmsg+0xe5/0x210 [ 38.838719] ? SyS_shutdown+0x290/0x290 [ 38.842667] ? __do_page_fault+0xc90/0xc90 [ 38.846879] ? SyS_futex+0x269/0x390 [ 38.850564] ? fput+0xd2/0x140 [ 38.853740] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 38.858731] SyS_sendmsg+0x2d/0x50 [ 38.862248] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 38.866977] RIP: 0033:0x446469 executing program executing program [ 38.870143] RSP: 002b:00007f1670003da8 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 38.877821] RAX: ffffffffffffffda RBX: 00000000006dbc3c RCX: 0000000000446469 [ 38.885062] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 38.892306] RBP: 00000000006dbc38 R08: 0000000000000000 R09: 0000000000000000 [ 38.899557] R10: 0000000000000000 R11: 0000000000000293 R12: f8e4cbe49e572d45 [ 38.906799] R13: 54c1b85d98aba1df R14: a6eaa24dbeb18c29 R15: 000000000000000c executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program