IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready batman_adv: batadv0: Interface activated: batadv_slave_1 IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:424/tfrc_rx_hist_sample_rtt() CPU: 0 PID: 9459 Comm: syz-executor.2 Not tainted 4.14.288-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 tfrc_rx_hist_sample_rtt.cold+0x59/0x5e net/dccp/ccids/lib/packet_history.c:424 ccid3_hc_rx_packet_recv+0x4fd/0xde0 net/dccp/ccids/ccid3.c:766 ccid_hc_rx_packet_recv net/dccp/ccid.h:185 [inline] dccp_deliver_input_to_ccids+0xd3/0x240 net/dccp/input.c:180 dccp_rcv_established net/dccp/input.c:378 [inline] dccp_rcv_established+0xdb/0x140 net/dccp/input.c:368 dccp_v4_do_rcv+0x119/0x170 net/dccp/ipv4.c:656 sk_backlog_rcv include/net/sock.h:923 [inline] __release_sock+0x12a/0x350 net/core/sock.c:2284 Bluetooth: hci2 command 0x0419 tx timeout release_sock+0x54/0x1b0 net/core/sock.c:2822 dccp_sendmsg+0x4eb/0x890 net/dccp/proto.c:813 Bluetooth: hci4 command 0x0419 tx timeout inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xb5/0x100 net/socket.c:656 dccp_close: ABORT with 99 bytes unread ___sys_sendmsg+0x326/0x800 net/socket.c:2062 Bluetooth: hci5 command 0x0419 tx timeout __sys_sendmmsg+0x129/0x330 net/socket.c:2152 Bluetooth: hci3 command 0x0419 tx timeout SYSC_sendmmsg net/socket.c:2183 [inline] SyS_sendmmsg+0x2f/0x50 net/socket.c:2178 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f178fbba109 RSP: 002b:00007f178f32f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00007f178fcccf60 RCX: 00007f178fbba109 RDX: 0000000000000002 RSI: 0000000020000580 RDI: 0000000000000004 RBP: 00007f178fc1405d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000804 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe64d9f4ff R14: 00007f178f32f300 R15: 0000000000022000 dccp_close: ABORT with 45 bytes unread Bluetooth: hci0 command 0x0419 tx timeout Bluetooth: hci1 command 0x0419 tx timeout dccp_close: ABORT with 99 bytes unread dccp_close: ABORT with 99 bytes unread