Warning: Permanently added '[localhost]:57475' (ED25519) to the list of known hosts. 2025/01/16 01:23:42 ignoring optional flag "sandboxArg"="0" 2025/01/16 01:23:42 ignoring optional flag "type"="qemu" 2025/01/16 01:23:42 parsed 1 programs [ 55.436434][ T40] audit: type=1400 audit(1736990622.922:132): avc: denied { getattr } for pid=6053 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.444139][ T40] audit: type=1400 audit(1736990622.922:133): avc: denied { read } for pid=6053 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.450088][ T40] audit: type=1400 audit(1736990622.922:134): avc: denied { open } for pid=6053 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.514680][ T40] audit: type=1400 audit(1736990623.002:135): avc: denied { unlink } for pid=6059 comm="syz-executor" name="swap-file" dev="sda1" ino=1931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 56.079611][ T6059] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2025/01/16 01:23:43 executed programs: 0 [ 56.129327][ T5304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.131639][ T5304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.134111][ T5304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.136618][ T5304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.138961][ T5304] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.141162][ T5304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.145824][ T40] audit: type=1400 audit(1736990623.632:136): avc: denied { mounton } for pid=6065 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.190451][ T6065] chnl_net:caif_netlink_parms(): no params data found [ 56.236887][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.238991][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.241035][ T6065] bridge_slave_0: entered allmulticast mode [ 56.243127][ T6065] bridge_slave_0: entered promiscuous mode [ 56.246066][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.248104][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.250141][ T6065] bridge_slave_1: entered allmulticast mode [ 56.252508][ T6065] bridge_slave_1: entered promiscuous mode [ 56.268392][ T6065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.273676][ T6065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.289810][ T6065] team0: Port device team_slave_0 added [ 56.293049][ T6065] team0: Port device team_slave_1 added [ 56.315274][ T6065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.318053][ T6065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.327648][ T6065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.332364][ T6065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.336311][ T6065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.346330][ T6065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.378380][ T6065] hsr_slave_0: entered promiscuous mode [ 56.381008][ T6065] hsr_slave_1: entered promiscuous mode [ 56.713034][ T6065] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.717081][ T6065] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.720190][ T6065] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.723132][ T6065] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.730102][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.732215][ T6065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.734419][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.737005][ T6065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.757991][ T6065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.762826][ T214] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.765250][ T214] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.769777][ T6065] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.773278][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.775456][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.780639][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.783388][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.851195][ T6065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.869083][ T6065] veth0_vlan: entered promiscuous mode [ 56.873819][ T6065] veth1_vlan: entered promiscuous mode [ 56.886300][ T6065] veth0_macvtap: entered promiscuous mode [ 56.890061][ T6065] veth1_macvtap: entered promiscuous mode [ 56.897764][ T6065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.903356][ T6065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.907820][ T6065] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.911106][ T6065] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.914433][ T6065] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.917673][ T6065] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.942100][ T214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.946565][ T214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.961095][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.963466][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.981538][ T40] audit: type=1400 audit(1736990624.462:137): avc: denied { create } for pid=6126 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.981876][ T6127] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 56.988467][ T40] audit: type=1400 audit(1736990624.462:138): avc: denied { bind } for pid=6126 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.998712][ T40] audit: type=1400 audit(1736990624.482:139): avc: denied { create } for pid=6126 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 57.004402][ T40] audit: type=1400 audit(1736990624.482:140): avc: denied { bind } for pid=6126 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 57.005944][ T6127] dccp_xmit_packet: Payload too large (65475) for featneg. [ 57.010157][ T40] audit: type=1400 audit(1736990624.482:141): avc: denied { name_bind } for pid=6126 comm="syz-executor.0" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 57.041307][ T6135] dccp_xmit_packet: Payload too large (65475) for featneg. [ 57.055511][ T6138] dccp_xmit_packet: Payload too large (65475) for featneg. [ 57.071649][ T6141] dccp_xmit_packet: Payload too large (65475) for featneg. [ 57.093675][ T6145] dccp_xmit_packet: Payload too large (65475) for featneg. [ 57.141137][ T6153] dccp_xmit_packet: Payload too large (65475) for featneg. [ 57.160157][ T6156] dccp_xmit_packet: Payload too large (65475) for featneg. [ 57.163217][ C2] ccid3_first_li: No RTT estimate available, using fallback RTT [ 57.165762][ C2] ccid3_first_li: X_recv==0 [ 57.167251][ C2] BUG: stored value of X_recv is zero at net/dccp/ccids/ccid3.c:691/ccid3_first_li() [ 57.169970][ C2] CPU: 2 UID: 0 PID: 6156 Comm: syz-executor.0 Not tainted 6.13.0-rc7-syzkaller-g619f0b6fad52 #0 [ 57.174671][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.177879][ C2] Call Trace: [ 57.178916][ C2] [ 57.179758][ C2] dump_stack_lvl+0x16c/0x1f0 [ 57.181160][ C2] ccid3_first_li+0x2fc/0x500 [ 57.182607][ C2] tfrc_lh_interval_add+0x614/0x8d0 [ 57.184209][ C2] ? __pfx_ccid3_first_li+0x10/0x10 [ 57.185727][ C2] ? __pfx_ccid3_first_li+0x10/0x10 [ 57.187423][ C2] tfrc_rx_handle_loss+0xe0c/0x20b0 [ 57.188944][ C2] ccid3_hc_rx_packet_recv+0x372/0xf50 [ 57.190526][ C2] ? __pfx_ccid3_hc_rx_packet_recv+0x10/0x10 [ 57.192375][ C2] dccp_deliver_input_to_ccids+0xe3/0x270 [ 57.194335][ C2] dccp_rcv_established+0x10a/0x160 [ 57.195839][ C2] dccp_v4_do_rcv+0x171/0x1b0 [ 57.197345][ C2] ? __pfx_dccp_v4_do_rcv+0x10/0x10 [ 57.198904][ C2] __sk_receive_skb+0x7aa/0x890 [ 57.200312][ C2] dccp_v4_rcv+0x1153/0x1d30 [ 57.201726][ C2] ? __pfx_dccp_v4_rcv+0x10/0x10 [ 57.203268][ C2] ip_protocol_deliver_rcu+0x441/0x4c0 [ 57.204911][ C2] ip_local_deliver_finish+0x316/0x570 [ 57.206504][ C2] ip_local_deliver+0x18e/0x1f0 [ 57.208074][ C2] ? __pfx_ip_local_deliver+0x10/0x10 [ 57.209772][ C2] ip_rcv+0x2c3/0x5d0 [ 57.210943][ C2] ? __pfx_ip_rcv+0x10/0x10 [ 57.212421][ C2] __netif_receive_skb_one_core+0x199/0x1e0 [ 57.214316][ C2] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 57.216248][ C2] ? rcu_is_watching+0x12/0xc0 [ 57.217928][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.219470][ C2] ? process_backlog+0x3f1/0x15f0 [ 57.221079][ C2] ? process_backlog+0x3f1/0x15f0 [ 57.222811][ C2] __netif_receive_skb+0x1d/0x160 [ 57.224292][ C2] process_backlog+0x443/0x15f0 [ 57.225860][ C2] __napi_poll.constprop.0+0xb7/0x550 [ 57.227441][ C2] net_rx_action+0xa94/0x1010 [ 57.228836][ C2] ? __pfx_net_rx_action+0x10/0x10 [ 57.230509][ C2] ? rcu_is_watching+0x12/0xc0 [ 57.232102][ C2] ? kvm_sched_clock_read+0x11/0x20 [ 57.233637][ C2] ? sched_clock+0x38/0x60 [ 57.235064][ C2] ? sched_clock_cpu+0x6d/0x4d0 [ 57.236511][ C2] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 57.238250][ C2] ? rcu_is_watching+0x12/0xc0 [ 57.239621][ C2] handle_softirqs+0x213/0x8f0 [ 57.241190][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 57.242910][ C2] ? __dev_queue_xmit+0x89b/0x43e0 [ 57.244440][ C2] do_softirq+0xb2/0xf0 [ 57.245858][ C2] [ 57.246706][ C2] [ 57.247832][ C2] __local_bh_enable_ip+0x100/0x120 [ 57.249424][ C2] ? __dev_queue_xmit+0x89b/0x43e0 [ 57.251102][ C2] __dev_queue_xmit+0x8b0/0x43e0 [ 57.252637][ C2] ? ipt_do_table+0xd4c/0x1aa0 [ 57.254270][ C2] ? __local_bh_enable_ip+0xa4/0x120 [ 57.255777][ C2] ? ipt_do_table+0xd7c/0x1aa0 [ 57.257348][ C2] ? __pfx___dev_queue_xmit+0x10/0x10 [ 57.258891][ C2] ? selinux_ip_postroute+0x73b/0xde0 [ 57.260629][ C2] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 57.262432][ C2] ? kasan_save_stack+0x42/0x60 [ 57.263852][ C2] ? rcu_is_watching+0x12/0xc0 [ 57.265215][ C2] ? lock_release+0x4e2/0x6f0 [ 57.266616][ C2] ? __ip_finish_output+0x49e/0x950 [ 57.268241][ C2] ? __pfx_lock_release+0x10/0x10 [ 57.269816][ C2] ? trace_lock_acquire+0x14e/0x1f0 [ 57.271297][ C2] ? rcu_is_watching+0x12/0xc0 [ 57.272683][ C2] ? __ip_finish_output+0x49e/0x950 [ 57.274259][ C2] ? rcu_is_watching+0x12/0xc0 [ 57.275625][ C2] ip_finish_output2+0xc6c/0x2150 [ 57.277229][ C2] ? __pfx_ip_finish_output2+0x10/0x10 [ 57.278796][ C2] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 57.280316][ C2] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 57.281809][ C2] ? __pfx_nf_hook+0x10/0x10 [ 57.283126][ C2] __ip_finish_output+0x49e/0x950 [ 57.284606][ C2] ip_finish_output+0x35/0x380 [ 57.285981][ C2] ip_output+0x13b/0x2a0 [ 57.287200][ C2] ? __pfx_ip_output+0x10/0x10 [ 57.288588][ C2] ip_local_out+0x33e/0x4a0 [ 57.289903][ C2] __ip_queue_xmit+0x777/0x1970 [ 57.291349][ C2] ? dccp_v4_send_check+0x282/0x520 [ 57.292859][ C2] dccp_transmit_skb+0xd59/0x1660 [ 57.294510][ C2] dccp_send_sync+0x1c2/0x270 [ 57.295905][ C2] __dccp_rcv_established.constprop.0+0x191/0x420 [ 57.297728][ C2] dccp_rcv_established+0x115/0x160 [ 57.299202][ C2] dccp_v4_do_rcv+0x171/0x1b0 [ 57.300538][ C2] ? __pfx_dccp_v4_do_rcv+0x10/0x10 [ 57.302048][ C2] __release_sock+0x35f/0x400 [ 57.303393][ C2] ? release_sock+0x21/0x220 [ 57.304813][ C2] release_sock+0x5a/0x220 [ 57.306161][ C2] dccp_sendmsg+0x418/0xd10 [ 57.307553][ C2] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 57.309568][ C2] ? import_ubuf+0x1b6/0x220 [ 57.310948][ C2] ? __pfx_dccp_sendmsg+0x10/0x10 [ 57.312414][ C2] ? __pfx_dccp_sendmsg+0x10/0x10 [ 57.313965][ C2] inet_sendmsg+0x119/0x140 [ 57.315517][ C2] ____sys_sendmsg+0x98c/0xc90 [ 57.316884][ C2] ? copy_msghdr_from_user+0x10b/0x160 [ 57.318455][ C2] ? __pfx_____sys_sendmsg+0x10/0x10 [ 57.320050][ C2] ? __pfx_lock_release+0x10/0x10 [ 57.321571][ C2] ? lock_acquire+0x2f/0xb0 [ 57.322877][ C2] ? schedule+0x1fd/0x350 [ 57.324220][ C2] ___sys_sendmsg+0x135/0x1e0 [ 57.325626][ C2] ? __pfx____sys_sendmsg+0x10/0x10 [ 57.327106][ C2] ? __futex_wait+0x324/0x3c0 [ 57.328453][ C2] ? trace_lock_acquire+0x14e/0x1f0 [ 57.329987][ C2] __sys_sendmmsg+0x201/0x420 [ 57.331332][ C2] ? __pfx___sys_sendmmsg+0x10/0x10 [ 57.332822][ C2] ? trace_lock_acquire+0x14e/0x1f0 [ 57.334441][ C2] ? __pfx_mem_cgroup_handle_over_high+0x10/0x10 [ 57.336267][ C2] ? rcu_is_watching+0x12/0xc0 [ 57.337670][ C2] __x64_sys_sendmmsg+0x9c/0x100 [ 57.339082][ C2] do_syscall_64+0xcd/0x250 [ 57.340529][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.342319][ C2] RIP: 0033:0x7f73c007cd29 [ 57.343678][ C2] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 57.349332][ C2] RSP: 002b:00007f73bf3fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 57.351943][ C2] RAX: ffffffffffffffda RBX: 00007f73c01abf80 RCX: 00007f73c007cd29 [ 57.354275][ C2] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 57.356671][ C2] RBP: 00007f73c00c947a R08: 0000000000000000 R09: 0000000000000000 [ 57.359146][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.361459][ C2] R13: 000000000000000b R14: 00007f73c01abf80 R15: 00007fffed764658 [ 57.363757][ C2] [ 57.381969][ T6179] dccp_xmit_packet: Payload too large (65475) for featneg. [ 57.402414][ C1] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:414/tfrc_rx_hist_sample_rtt() [ 57.407030][ C1] CPU: 1 UID: 0 PID: 6182 Comm: syz-executor.0 Not tainted 6.13.0-rc7-syzkaller-g619f0b6fad52 #0 [ 57.410246][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.414261][ C1] Call Trace: [ 57.415513][ C1] [ 57.416573][ C1] dump_stack_lvl+0x16c/0x1f0 [ 57.418086][ C1] tfrc_rx_hist_sample_rtt+0x3e1/0x4a0 [ 57.419650][ C1] ccid3_hc_rx_packet_recv+0x443/0xf50 [ 57.421183][ C1] ? __pfx_ccid3_hc_rx_packet_recv+0x10/0x10 [ 57.422912][ C1] dccp_deliver_input_to_ccids+0xe3/0x270 [ 57.424545][ C1] dccp_rcv_established+0x10a/0x160 [ 57.426068][ C1] dccp_v4_do_rcv+0x171/0x1b0 [ 57.427439][ C1] ? __pfx_dccp_v4_do_rcv+0x10/0x10 [ 57.429084][ C1] __sk_receive_skb+0x7aa/0x890 [ 57.430591][ C1] dccp_v4_rcv+0x1153/0x1d30 [ 57.431951][ C1] ? __pfx_dccp_v4_rcv+0x10/0x10 [ 57.433370][ C1] ip_protocol_deliver_rcu+0x441/0x4c0 [ 57.434955][ C1] ip_local_deliver_finish+0x316/0x570 [ 57.436515][ C1] ip_local_deliver+0x18e/0x1f0 [ 57.437982][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 57.439500][ C1] ip_rcv+0x2c3/0x5d0 [ 57.440636][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 57.441965][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 57.443656][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 57.445488][ C1] ? rcu_is_watching+0x12/0xc0 [ 57.447010][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.448542][ C1] ? process_backlog+0x3f1/0x15f0 [ 57.450015][ C1] ? process_backlog+0x3f1/0x15f0 [ 57.451451][ C1] __netif_receive_skb+0x1d/0x160 [ 57.452933][ C1] process_backlog+0x443/0x15f0 [ 57.454380][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 57.455913][ C1] net_rx_action+0xa94/0x1010 [ 57.457305][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 57.458801][ C1] ? rcu_is_watching+0x12/0xc0 [ 57.460167][ C1] ? net_tx_action+0x7e6/0xd00 [ 57.461575][ C1] ? rcu_is_watching+0x12/0xc0 [ 57.462943][ C1] handle_softirqs+0x213/0x8f0 [ 57.464352][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 57.465887][ C1] __irq_exit_rcu+0x109/0x170 [ 57.467264][ C1] irq_exit_rcu+0x9/0x30 [ 57.468499][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 57.470124][ C1] [ 57.470979][ C1] [ 57.471884][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 57.473626][ C1] RIP: 0010:unwind_next_frame+0x22d/0x20c0 [ 57.475410][ C1] Code: 24 18 8d 50 01 8b 0c 8d fc 69 ab 91 48 b8 00 00 00 00 00 fc ff df 48 8d 3c 95 fc 69 ab 91 49 89 f8 49 c1 e8 03 45 0f b6 04 00 <48> 89 f8 83 e0 07 83 c0 03 44 38 c0 7c 2e 45 84 c0 74 29 48 89 54 [ 57.481793][ C1] RSP: 0018:ffffc90003fcf1e8 EFLAGS: 00000a07 [ 57.483842][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 000000000018cbec [ 57.486251][ C1] RDX: 0000000000080056 RSI: 00000000000a6001 RDI: ffffffff91cb6b54 [ 57.488538][ C1] RBP: ffffc90003fcf2a0 R08: 0000000000000000 R09: ffffffff918062d0 [ 57.490780][ C1] R10: ffffc90003fcf258 R11: 0000000000080055 R12: ffffc90003fcf2a8 [ 57.493030][ C1] R13: ffffc90003fcf258 R14: ffffc90003fcf28d R15: ffffffff890055f0 [ 57.495277][ C1] ? __sys_sendmmsg+0x200/0x420 [ 57.496736][ C1] ? unwind_next_frame+0xb1/0x20c0 [ 57.498637][ C1] ? __sys_sendmmsg+0x201/0x420 [ 57.500594][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 57.502490][ C1] arch_stack_walk+0x95/0x100 [ 57.503852][ C1] ? __sys_sendmmsg+0x201/0x420 [ 57.505347][ C1] stack_trace_save+0x95/0xd0 [ 57.506747][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 57.508313][ C1] ? rcu_is_watching+0x12/0xc0 [ 57.509699][ C1] ? lock_release+0x4e2/0x6f0 [ 57.511050][ C1] ? __pfx_lock_release+0x10/0x10 [ 57.512486][ C1] ? get_partial_node.part.0+0x1a1/0x360 [ 57.514212][ C1] kasan_save_stack+0x33/0x60 [ 57.515554][ C1] ? kasan_save_stack+0x33/0x60 [ 57.517000][ C1] ? kasan_save_track+0x14/0x30 [ 57.518579][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 57.520077][ C1] ? kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 57.521842][ C1] ? __alloc_skb+0x2b1/0x380 [ 57.523179][ C1] ? alloc_skb_with_frags+0xe4/0x850 [ 57.524881][ C1] ? sock_alloc_send_pskb+0x7f1/0x980 [ 57.526433][ C1] ? dccp_sendmsg+0x2fb/0xd10 [ 57.527967][ C1] ? inet_sendmsg+0x119/0x140 [ 57.529398][ C1] ? ____sys_sendmsg+0x98c/0xc90 [ 57.530853][ C1] ? ___sys_sendmsg+0x135/0x1e0 [ 57.532450][ C1] ? __sys_sendmmsg+0x201/0x420 [ 57.534020][ C1] kasan_save_track+0x14/0x30 [ 57.535378][ C1] __kasan_slab_alloc+0x89/0x90 [ 57.536872][ C1] kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 57.538601][ C1] ? do_syscall_64+0xcd/0x250 [ 57.539970][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.541946][ C1] ? __alloc_skb+0x2b1/0x380 [ 57.543300][ C1] __alloc_skb+0x2b1/0x380 [ 57.544581][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 57.546110][ C1] ? rcu_is_watching+0x12/0xc0 [ 57.547691][ C1] alloc_skb_with_frags+0xe4/0x850 [ 57.549632][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 57.551562][ C1] ? avc_has_perm_noaudit+0x61/0x3a0 [ 57.553548][ C1] sock_alloc_send_pskb+0x7f1/0x980 [ 57.555481][ C1] ? avc_has_perm_noaudit+0x143/0x3a0 [ 57.557524][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 57.559630][ C1] ? __pfx_lock_release+0x10/0x10 [ 57.561518][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.563500][ C1] ? lock_acquire+0x2f/0xb0 [ 57.565282][ C1] ? release_sock+0x21/0x220 [ 57.567024][ C1] ? rcu_is_watching+0x12/0xc0 [ 57.568804][ C1] ? trace_irq_enable.constprop.0+0xea/0x140 [ 57.571066][ C1] dccp_sendmsg+0x2fb/0xd10 [ 57.572786][ C1] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 57.575297][ C1] ? __pfx_dccp_sendmsg+0x10/0x10 [ 57.577175][ C1] ? __pfx_dccp_sendmsg+0x10/0x10 [ 57.579040][ C1] inet_sendmsg+0x119/0x140 [ 57.580751][ C1] ____sys_sendmsg+0x98c/0xc90 [ 57.582533][ C1] ? copy_msghdr_from_user+0x10b/0x160 [ 57.584560][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 57.586512][ C1] ? kfree+0x274/0x4b0 [ 57.588047][ C1] ? __pfx_lock_release+0x10/0x10 [ 57.589911][ C1] ___sys_sendmsg+0x135/0x1e0 [ 57.591656][ C1] ? __up_read+0x1fb/0x760 [ 57.593336][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 57.595257][ C1] ? handle_mm_fault+0x497/0xaa0 [ 57.597091][ C1] ? rcu_is_watching+0x12/0xc0 [ 57.598881][ C1] ? __pfx___might_resched+0x10/0x10 [ 57.600849][ C1] ? __might_fault+0xe3/0x190 [ 57.602616][ C1] __sys_sendmmsg+0x201/0x420 [ 57.604366][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 57.606326][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 57.608285][ C1] ? xfd_validate_state+0x5d/0x180 [ 57.610215][ C1] ? rcu_is_watching+0x12/0xc0 [ 57.612011][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 57.613854][ C1] do_syscall_64+0xcd/0x250 [ 57.615597][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.617798][ C1] RIP: 0033:0x7f73c007cd29 [ 57.619527][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 57.626666][ C1] RSP: 002b:00007f73bf3fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 57.629839][ C1] RAX: ffffffffffffffda RBX: 00007f73c01abf80 RCX: 00007f73c007cd29 [ 57.632773][ C1] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 57.635692][ C1] RBP: 00007f73c00c947a R08: 0000000000000000 R09: 0000000000000000 [ 57.638651][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.641529][ C1] R13: 000000000000000b R14: 00007f73c01abf80 R15: 00007fffed764658 [ 57.644507][ C1] [ 57.949188][ C3] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:414/tfrc_rx_hist_sample_rtt() [ 57.953602][ C3] CPU: 3 UID: 0 PID: 6227 Comm: syz-executor.0 Not tainted 6.13.0-rc7-syzkaller-g619f0b6fad52 #0 [ 57.956840][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.960023][ C3] Call Trace: [ 57.960983][ C3] [ 57.961848][ C3] dump_stack_lvl+0x16c/0x1f0 [ 57.963208][ C3] tfrc_rx_hist_sample_rtt+0x3e1/0x4a0 [ 57.964878][ C3] ccid3_hc_rx_packet_recv+0x443/0xf50 [ 57.966462][ C3] ? __pfx_ccid3_hc_rx_packet_recv+0x10/0x10 [ 57.968182][ C3] dccp_deliver_input_to_ccids+0xe3/0x270 [ 57.969821][ C3] dccp_rcv_established+0x10a/0x160 [ 57.971313][ C3] dccp_v4_do_rcv+0x171/0x1b0 [ 57.972695][ C3] ? __pfx_dccp_v4_do_rcv+0x10/0x10 [ 57.974235][ C3] __sk_receive_skb+0x7aa/0x890 [ 57.975626][ C3] dccp_v4_rcv+0x1153/0x1d30 [ 57.976924][ C3] ? __pfx_dccp_v4_rcv+0x10/0x10 [ 57.978313][ C3] ip_protocol_deliver_rcu+0x441/0x4c0 [ 57.979813][ C3] ip_local_deliver_finish+0x316/0x570 [ 57.981288][ C3] ip_local_deliver+0x18e/0x1f0 [ 57.982627][ C3] ? __pfx_ip_local_deliver+0x10/0x10 [ 57.984066][ C3] ip_rcv+0x2c3/0x5d0 [ 57.985215][ C3] ? __pfx_ip_rcv+0x10/0x10 [ 57.986536][ C3] __netif_receive_skb_one_core+0x199/0x1e0 [ 57.988238][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 57.990070][ C3] ? rcu_is_watching+0x12/0xc0 [ 57.991457][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.993001][ C3] ? process_backlog+0x3f1/0x15f0 [ 57.994452][ C3] ? process_backlog+0x3f1/0x15f0 [ 57.995898][ C3] __netif_receive_skb+0x1d/0x160 [ 57.997327][ C3] process_backlog+0x443/0x15f0 [ 57.998732][ C3] __napi_poll.constprop.0+0xb7/0x550 [ 58.000266][ C3] net_rx_action+0xa94/0x1010 [ 58.001638][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 58.003095][ C3] ? rcu_is_watching+0x12/0xc0 [ 58.004532][ C3] ? net_tx_action+0x7e6/0xd00 [ 58.005915][ C3] ? rcu_is_watching+0x12/0xc0 [ 58.007278][ C3] handle_softirqs+0x213/0x8f0 [ 58.008664][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 58.010217][ C3] __irq_exit_rcu+0x109/0x170 [ 58.011558][ C3] irq_exit_rcu+0x9/0x30 [ 58.012738][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 58.014324][ C3] [ 58.015160][ C3] [ 58.015998][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 58.017682][ C3] RIP: 0010:__local_bh_enable_ip+0xac/0x120 [ 58.019342][ C3] Code: 1d 01 6e a7 7e 65 8b 05 fa 6d a7 7e a9 00 ff ff 00 74 4d bf 01 00 00 00 e8 21 c4 0b 00 e8 dc 59 45 00 fb 65 8b 05 dc 6d a7 7e <85> c0 74 52 5b 5d c3 cc cc cc cc 65 8b 05 4e 1d a6 7e 85 c0 75 9e [ 58.025189][ C3] RSP: 0018:ffffc90003def8c0 EFLAGS: 00000246 [ 58.027379][ C3] RAX: 0000000080000000 RBX: 00000000fffffe00 RCX: 1ffffffff20bef96 [ 58.030154][ C3] RDX: 0000000000000000 RSI: ffffffff8bd1eea0 RDI: ffffffff815c6b24 [ 58.032422][ C3] RBP: ffffffff8a6385bd R08: 0000000000000000 R09: 0000000000000000 [ 58.035066][ C3] R10: ffffffff905f4997 R11: 00000000000a4001 R12: ffff888026f6d25c [ 58.037310][ C3] R13: 00000000000004ac R14: 0000000000000000 R15: ffffc90003defd48 [ 58.039644][ C3] ? dccp_sendmsg+0x2dd/0xd10 [ 58.040995][ C3] ? __local_bh_enable_ip+0xa4/0x120 [ 58.042547][ C3] dccp_sendmsg+0x2dd/0xd10 [ 58.043903][ C3] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 58.045834][ C3] ? __pfx_dccp_sendmsg+0x10/0x10 [ 58.047285][ C3] ? __pfx_dccp_sendmsg+0x10/0x10 [ 58.048741][ C3] inet_sendmsg+0x119/0x140 [ 58.050237][ C3] ____sys_sendmsg+0x98c/0xc90 [ 58.051610][ C3] ? copy_msghdr_from_user+0x10b/0x160 [ 58.053163][ C3] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.054783][ C3] ? kfree+0x274/0x4b0 [ 58.055962][ C3] ? __pfx_lock_release+0x10/0x10 [ 58.057401][ C3] ___sys_sendmsg+0x135/0x1e0 [ 58.058889][ C3] ? __up_read+0x1fb/0x760 [ 58.060284][ C3] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.061858][ C3] ? handle_mm_fault+0x497/0xaa0 [ 58.063290][ C3] ? rcu_is_watching+0x12/0xc0 [ 58.064707][ C3] ? __pfx___might_resched+0x10/0x10 [ 58.066232][ C3] ? __might_fault+0xe3/0x190 [ 58.067588][ C3] __sys_sendmmsg+0x201/0x420 [ 58.068950][ C3] ? __pfx___sys_sendmmsg+0x10/0x10 [ 58.070470][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 58.071961][ C3] ? __pfx_mem_cgroup_handle_over_high+0x10/0x10 [ 58.073771][ C3] ? rcu_is_watching+0x12/0xc0 [ 58.075150][ C3] __x64_sys_sendmmsg+0x9c/0x100 [ 58.076563][ C3] do_syscall_64+0xcd/0x250 [ 58.077872][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.079597][ C3] RIP: 0033:0x7f73c007cd29 [ 58.080872][ C3] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 58.086428][ C3] RSP: 002b:00007f73bf3fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 58.088819][ C3] RAX: ffffffffffffffda RBX: 00007f73c01abf80 RCX: 00007f73c007cd29 [ 58.091176][ C3] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 58.093471][ C3] RBP: 00007f73c00c947a R08: 0000000000000000 R09: 0000000000000000 [ 58.095763][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.098030][ C3] R13: 000000000000000b R14: 00007f73c01abf80 R15: 00007fffed764658 [ 58.100327][ C3] [ 58.184070][ T5949] Bluetooth: hci0: command tx timeout [ 58.284698][ C1] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:414/tfrc_rx_hist_sample_rtt() [ 58.288933][ C1] CPU: 1 UID: 0 PID: 29 Comm: ksoftirqd/1 Not tainted 6.13.0-rc7-syzkaller-g619f0b6fad52 #0 [ 58.292195][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.295315][ C1] Call Trace: [ 58.296280][ C1] [ 58.297318][ C1] dump_stack_lvl+0x16c/0x1f0 [ 58.299120][ C1] tfrc_rx_hist_sample_rtt+0x3e1/0x4a0 [ 58.301196][ C1] ccid3_hc_rx_packet_recv+0x443/0xf50 [ 58.302858][ C1] ? __pfx_ccid3_hc_rx_packet_recv+0x10/0x10 [ 58.304569][ C1] dccp_deliver_input_to_ccids+0xe3/0x270 [ 58.306207][ C1] dccp_rcv_established+0x10a/0x160 [ 58.308116][ C1] dccp_v4_do_rcv+0x171/0x1b0 [ 58.309539][ C1] ? __pfx_dccp_v4_do_rcv+0x10/0x10 [ 58.311037][ C1] __sk_receive_skb+0x7aa/0x890 [ 58.312439][ C1] dccp_v4_rcv+0x1153/0x1d30 [ 58.314060][ C1] ? __pfx_dccp_v4_rcv+0x10/0x10 [ 58.315535][ C1] ip_protocol_deliver_rcu+0x441/0x4c0 [ 58.317086][ C1] ip_local_deliver_finish+0x316/0x570 [ 58.318721][ C1] ip_local_deliver+0x18e/0x1f0 [ 58.320285][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 58.321858][ C1] ip_rcv+0x2c3/0x5d0 [ 58.323006][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 58.324478][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 58.326282][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 58.328120][ C1] ? rcu_is_watching+0x12/0xc0 [ 58.329574][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 58.331215][ C1] ? process_backlog+0x3f1/0x15f0 [ 58.332665][ C1] ? process_backlog+0x3f1/0x15f0 [ 58.334114][ C1] __netif_receive_skb+0x1d/0x160 [ 58.335745][ C1] process_backlog+0x443/0x15f0 [ 58.337146][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 58.338694][ C1] net_rx_action+0xa94/0x1010 [ 58.340304][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 58.341986][ C1] ? __switch_to+0x749/0x1190 [ 58.343339][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 58.344822][ C1] ? sched_clock+0x38/0x60 [ 58.346391][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 58.348253][ C1] ? rcu_is_watching+0x12/0xc0 [ 58.350074][ C1] handle_softirqs+0x213/0x8f0 [ 58.351770][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 58.353281][ C1] ? rcu_is_watching+0x12/0xc0 [ 58.354660][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 58.356121][ C1] ? smpboot_thread_fn+0x59d/0xa30 [ 58.357588][ C1] run_ksoftirqd+0x3a/0x60 [ 58.358866][ C1] smpboot_thread_fn+0x661/0xa30 [ 58.360292][ C1] ? __kthread_parkme+0x148/0x220 [ 58.361770][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 58.363324][ C1] kthread+0x2c1/0x3a0 [ 58.364498][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 58.365988][ C1] ? __pfx_kthread+0x10/0x10 [ 58.367318][ C1] ret_from_fork+0x45/0x80 [ 58.368633][ C1] ? __pfx_kthread+0x10/0x10 [ 58.369978][ C1] ret_from_fork_asm+0x1a/0x30 [ 58.371596][ C1] [ 58.430797][ C1] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:414/tfrc_rx_hist_sample_rtt() [ 58.436214][ C1] CPU: 1 UID: 0 PID: 6257 Comm: syz-executor.0 Not tainted 6.13.0-rc7-syzkaller-g619f0b6fad52 #0 [ 58.440325][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.444499][ C1] Call Trace: [ 58.445873][ C1] [ 58.447008][ C1] dump_stack_lvl+0x16c/0x1f0 [ 58.448954][ C1] tfrc_rx_hist_sample_rtt+0x3e1/0x4a0 [ 58.451160][ C1] ccid3_hc_rx_packet_recv+0x443/0xf50 [ 58.453353][ C1] ? __pfx_ccid3_hc_rx_packet_recv+0x10/0x10 [ 58.455521][ C1] dccp_deliver_input_to_ccids+0xe3/0x270 [ 58.457188][ C1] dccp_rcv_established+0x10a/0x160 [ 58.458693][ C1] dccp_v4_do_rcv+0x171/0x1b0 [ 58.460047][ C1] ? __pfx_dccp_v4_do_rcv+0x10/0x10 [ 58.462030][ C1] __sk_receive_skb+0x7aa/0x890 [ 58.463883][ C1] dccp_v4_rcv+0x1153/0x1d30 [ 58.465712][ C1] ? __pfx_dccp_v4_rcv+0x10/0x10 [ 58.467562][ C1] ip_protocol_deliver_rcu+0x441/0x4c0 [ 58.469655][ C1] ip_local_deliver_finish+0x316/0x570 [ 58.471856][ C1] ip_local_deliver+0x18e/0x1f0 [ 58.473779][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 58.475690][ C1] ip_rcv+0x2c3/0x5d0 [ 58.477212][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 58.479036][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 58.481384][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 58.483872][ C1] ? rcu_is_watching+0x12/0xc0 [ 58.485771][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 58.487920][ C1] ? process_backlog+0x3f1/0x15f0 [ 58.489983][ C1] ? process_backlog+0x3f1/0x15f0 [ 58.492017][ C1] __netif_receive_skb+0x1d/0x160 [ 58.493899][ C1] process_backlog+0x443/0x15f0 [ 58.495660][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 58.497862][ C1] net_rx_action+0xa94/0x1010 [ 58.499786][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 58.501656][ C1] ? rcu_is_watching+0x12/0xc0 [ 58.503045][ C1] ? net_tx_action+0x7e6/0xd00 [ 58.504569][ C1] ? rcu_is_watching+0x12/0xc0 [ 58.506521][ C1] handle_softirqs+0x213/0x8f0 [ 58.508263][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 58.510233][ C1] __irq_exit_rcu+0x109/0x170 [ 58.512000][ C1] irq_exit_rcu+0x9/0x30 [ 58.513448][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 58.515505][ C1] [ 58.516601][ C1] [ 58.517709][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 58.519987][ C1] RIP: 0010:dccp_qpolicy_drop+0x39/0x40 [ 58.522215][ C1] Code: 36 f7 48 85 db 74 23 e8 05 29 36 f7 48 8d b5 b0 02 00 00 48 89 df e8 06 7f 9e fe ba 02 00 00 00 48 89 de 31 ff e8 27 d9 a0 fe <5b> 5d e9 e0 28 36 f7 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 58.529824][ C1] RSP: 0018:ffffc900039bf880 EFLAGS: 00000293 [ 58.532247][ C1] RAX: 0000000000000000 RBX: ffff888012261180 RCX: 1ffffffff20bef96 [ 58.535366][ C1] RDX: ffff8880275b4880 RSI: ffffffff8a63fbb9 RDI: ffffffff81fce62a [ 58.538503][ C1] RBP: ffff88802b287380 R08: 0000000000000000 R09: 0000000000000000 [ 58.541662][ C1] R10: ffffffff905f4997 R11: 00000000000a4001 R12: ffff888012261180 [ 58.544835][ C1] R13: dffffc0000000000 R14: ffffed1005650f97 R15: ffff88802b287cb8 [ 58.548015][ C1] ? dccp_qpolicy_drop+0x39/0x40 [ 58.550011][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 58.552140][ C1] dccp_write_xmit+0x184/0x1d0 [ 58.553994][ C1] dccp_sendmsg+0x9b7/0xd10 [ 58.555840][ C1] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 58.558352][ C1] ? __pfx_dccp_sendmsg+0x10/0x10 [ 58.560100][ C1] ? __pfx_dccp_sendmsg+0x10/0x10 [ 58.561670][ C1] inet_sendmsg+0x119/0x140 [ 58.563020][ C1] ____sys_sendmsg+0x98c/0xc90 [ 58.564304][ C1] ? copy_msghdr_from_user+0x10b/0x160 [ 58.566066][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.568231][ C1] ? kfree+0x274/0x4b0 [ 58.569902][ C1] ? __pfx_lock_release+0x10/0x10 [ 58.571951][ C1] ___sys_sendmsg+0x135/0x1e0 [ 58.573774][ C1] ? __up_read+0x1fb/0x760 [ 58.575451][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.577372][ C1] ? handle_mm_fault+0x497/0xaa0 [ 58.579356][ C1] ? rcu_is_watching+0x12/0xc0 [ 58.581267][ C1] ? __pfx___might_resched+0x10/0x10 [ 58.583385][ C1] ? __might_fault+0xe3/0x190 [ 58.585229][ C1] __sys_sendmmsg+0x201/0x420 [ 58.587092][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 58.589174][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 58.591374][ C1] ? xfd_validate_state+0x5d/0x180 [ 58.593455][ C1] ? rcu_is_watching+0x12/0xc0 [ 58.595417][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 58.597421][ C1] do_syscall_64+0xcd/0x250 [ 58.599271][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.601659][ C1] RIP: 0033:0x7f73c007cd29 [ 58.603557][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 58.609423][ C1] RSP: 002b:00007f73bf3fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 58.612028][ C1] RAX: ffffffffffffffda RBX: 00007f73c01abf80 RCX: 00007f73c007cd29 [ 58.614753][ C1] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 58.617885][ C1] RBP: 00007f73c00c947a R08: 0000000000000000 R09: 0000000000000000 [ 58.620984][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.624148][ C1] R13: 000000000000000b R14: 00007f73c01abf80 R15: 00007fffed764658 [ 58.627447][ C1] [ 58.816673][ C1] Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1538/dccp_feat_activate_values() [ 58.833434][ C0] Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1538/dccp_feat_activate_values() [ 59.146588][ C3] Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1538/dccp_feat_activate_values() [ 59.164068][ C0] Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1538/dccp_feat_activate_values() [ 59.453965][ C0] BUG: stored value of X_recv is zero at net/dccp/ccids/ccid3.c:691/ccid3_first_li() [ 59.457868][ C0] CPU: 0 UID: 0 PID: 6355 Comm: syz-executor.0 Not tainted 6.13.0-rc7-syzkaller-g619f0b6fad52 #0 [ 59.461954][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.466147][ C0] Call Trace: [ 59.467458][ C0] [ 59.468611][ C0] dump_stack_lvl+0x16c/0x1f0 [ 59.470475][ C0] ccid3_first_li+0x2fc/0x500 [ 59.472362][ C0] tfrc_lh_interval_add+0x614/0x8d0 [ 59.474411][ C0] ? __pfx_ccid3_first_li+0x10/0x10 [ 59.476438][ C0] ? __pfx_ccid3_first_li+0x10/0x10 [ 59.478471][ C0] tfrc_rx_handle_loss+0xe0c/0x20b0 [ 59.480523][ C0] ccid3_hc_rx_packet_recv+0x372/0xf50 [ 59.482697][ C0] ? __pfx_ccid3_hc_rx_packet_recv+0x10/0x10 [ 59.485061][ C0] dccp_deliver_input_to_ccids+0xe3/0x270 [ 59.487307][ C0] dccp_rcv_established+0x10a/0x160 [ 59.489385][ C0] dccp_v4_do_rcv+0x171/0x1b0 [ 59.491235][ C0] ? __pfx_dccp_v4_do_rcv+0x10/0x10 [ 59.493285][ C0] __sk_receive_skb+0x7aa/0x890 [ 59.495216][ C0] dccp_v4_rcv+0x1153/0x1d30 [ 59.497035][ C0] ? __pfx_dccp_v4_rcv+0x10/0x10 [ 59.498987][ C0] ip_protocol_deliver_rcu+0x441/0x4c0 [ 59.501102][ C0] ip_local_deliver_finish+0x316/0x570 [ 59.503271][ C0] ip_local_deliver+0x18e/0x1f0 [ 59.505180][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 59.507317][ C0] ip_rcv+0x2c3/0x5d0 [ 59.508914][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 59.510711][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 59.513061][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 59.515561][ C0] ? rcu_is_watching+0x12/0xc0 [ 59.517450][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 59.519563][ C0] ? process_backlog+0x3f1/0x15f0 [ 59.521576][ C0] ? process_backlog+0x3f1/0x15f0 [ 59.523580][ C0] __netif_receive_skb+0x1d/0x160 [ 59.525559][ C0] process_backlog+0x443/0x15f0 [ 59.527488][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 59.529632][ C0] net_rx_action+0xa94/0x1010 [ 59.531513][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 59.533567][ C0] ? rcu_is_watching+0x12/0xc0 [ 59.535450][ C0] ? net_tx_action+0x7e6/0xd00 [ 59.537330][ C0] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 59.539462][ C0] ? rcu_is_watching+0x12/0xc0 [ 59.541345][ C0] handle_softirqs+0x213/0x8f0 [ 59.543292][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 59.545395][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 59.547514][ C0] ? dccp_sendmsg+0x2dd/0xd10 [ 59.549400][ C0] do_softirq+0xb2/0xf0 [ 59.551064][ C0] [ 59.552234][ C0] [ 59.553404][ C0] __local_bh_enable_ip+0x100/0x120 [ 59.555464][ C0] dccp_sendmsg+0x2dd/0xd10 [ 59.557252][ C0] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 59.559887][ C0] ? __pfx_dccp_sendmsg+0x10/0x10 [ 59.561848][ C0] ? __pfx_dccp_sendmsg+0x10/0x10 [ 59.563819][ C0] inet_sendmsg+0x119/0x140 [ 59.565546][ C0] ____sys_sendmsg+0x98c/0xc90 [ 59.567397][ C0] ? copy_msghdr_from_user+0x10b/0x160 [ 59.569536][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 59.571609][ C0] ? kfree+0x274/0x4b0 [ 59.573168][ C0] ? __pfx_lock_release+0x10/0x10 [ 59.575152][ C0] ___sys_sendmsg+0x135/0x1e0 [ 59.577044][ C0] ? __up_read+0x1fb/0x760 [ 59.578833][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.580825][ C0] ? handle_mm_fault+0x497/0xaa0 [ 59.582730][ C0] ? rcu_is_watching+0x12/0xc0 [ 59.584539][ C0] ? __pfx___might_resched+0x10/0x10 [ 59.586590][ C0] ? __might_fault+0xe3/0x190 [ 59.588400][ C0] __sys_sendmmsg+0x201/0x420 [ 59.590274][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 59.592314][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 59.594436][ C0] ? xfd_validate_state+0x5d/0x180 [ 59.596437][ C0] ? rcu_is_watching+0x12/0xc0 [ 59.598376][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 59.600340][ C0] do_syscall_64+0xcd/0x250 [ 59.602193][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.604575][ C0] RIP: 0033:0x7f73c007cd29 [ 59.606364][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 59.613892][ C0] RSP: 002b:00007f73bf3fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 59.617190][ C0] RAX: ffffffffffffffda RBX: 00007f73c01abf80 RCX: 00007f73c007cd29 [ 59.620254][ C0] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 59.623359][ C0] RBP: 00007f73c00c947a R08: 0000000000000000 R09: 0000000000000000 [ 59.626415][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.629454][ C0] R13: 000000000000000b R14: 00007f73c01abf80 R15: 00007fffed764658 [ 59.632535][ C0] [ 60.264301][ T5949] Bluetooth: hci0: command tx timeout 2025/01/16 01:23:48 executed programs: 178 [ 61.168871][ C0] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:414/tfrc_rx_hist_sample_rtt() [ 61.173747][ C0] CPU: 0 UID: 0 PID: 6535 Comm: syz-executor.0 Not tainted 6.13.0-rc7-syzkaller-g619f0b6fad52 #0 [ 61.177188][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.180348][ C0] Call Trace: [ 61.181567][ C0] [ 61.182406][ C0] dump_stack_lvl+0x16c/0x1f0 [ 61.183769][ C0] tfrc_rx_hist_sample_rtt+0x3e1/0x4a0 [ 61.185369][ C0] ccid3_hc_rx_packet_recv+0x443/0xf50 [ 61.187086][ C0] ? __pfx_ccid3_hc_rx_packet_recv+0x10/0x10 [ 61.188900][ C0] dccp_deliver_input_to_ccids+0xe3/0x270 [ 61.190888][ C0] dccp_rcv_established+0x10a/0x160 [ 61.192844][ C0] dccp_v4_do_rcv+0x171/0x1b0 [ 61.194796][ C0] ? __pfx_dccp_v4_do_rcv+0x10/0x10 [ 61.196895][ C0] __sk_receive_skb+0x7aa/0x890 [ 61.198401][ C0] dccp_v4_rcv+0x1153/0x1d30 [ 61.199738][ C0] ? __pfx_dccp_v4_rcv+0x10/0x10 [ 61.201349][ C0] ip_protocol_deliver_rcu+0x441/0x4c0 [ 61.202942][ C0] ip_local_deliver_finish+0x316/0x570 [ 61.204505][ C0] ip_local_deliver+0x18e/0x1f0 [ 61.205910][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 61.207442][ C0] ip_rcv+0x2c3/0x5d0 [ 61.208601][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 61.209907][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 61.211913][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 61.214492][ C0] ? rcu_is_watching+0x12/0xc0 [ 61.216441][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 61.218136][ C0] ? process_backlog+0x3f1/0x15f0 [ 61.219622][ C0] ? process_backlog+0x3f1/0x15f0 [ 61.221225][ C0] __netif_receive_skb+0x1d/0x160 [ 61.223184][ C0] process_backlog+0x443/0x15f0 [ 61.224579][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 61.226129][ C0] net_rx_action+0xa94/0x1010 [ 61.227476][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 61.228985][ C0] ? rcu_is_watching+0x12/0xc0 [ 61.230375][ C0] ? net_tx_action+0x7e6/0xd00 [ 61.232165][ C0] ? rcu_is_watching+0x12/0xc0 [ 61.234111][ C0] handle_softirqs+0x213/0x8f0 [ 61.235808][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 61.237310][ C0] __irq_exit_rcu+0x109/0x170 [ 61.238664][ C0] irq_exit_rcu+0x9/0x30 [ 61.239876][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 61.241683][ C0] [ 61.242689][ C0] [ 61.243728][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 61.246010][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 [ 61.248278][ C0] Code: 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff [ 61.255446][ C0] RSP: 0018:ffffc90003c1f848 EFLAGS: 00000293 [ 61.257185][ C0] RAX: 0000000000000000 RBX: ffff888029b82b40 RCX: ffffffff8904d642 [ 61.259437][ C0] RDX: ffff88802ca74880 RSI: 0000000000000002 RDI: 0000000000000001 [ 61.261766][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000003 [ 61.264035][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 61.266286][ C0] R13: 0000000000000000 R14: ffff888029b82c24 R15: ffff888042cd3338 [ 61.268545][ C0] ? sk_skb_reason_drop+0x162/0x1a0 [ 61.270037][ C0] sk_skb_reason_drop+0xac/0x1a0 [ 61.271755][ C0] dccp_qpolicy_drop+0x39/0x40 [ 61.273702][ C0] dccp_write_xmit+0x184/0x1d0 [ 61.275620][ C0] dccp_sendmsg+0x9b7/0xd10 [ 61.277309][ C0] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 61.279239][ C0] ? __pfx_dccp_sendmsg+0x10/0x10 [ 61.280680][ C0] ? __pfx_dccp_sendmsg+0x10/0x10 [ 61.282178][ C0] inet_sendmsg+0x119/0x140 [ 61.283480][ C0] ____sys_sendmsg+0x98c/0xc90 [ 61.285259][ C0] ? copy_msghdr_from_user+0x10b/0x160 [ 61.287394][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 61.289546][ C0] ? kfree+0x274/0x4b0 [ 61.291191][ C0] ? __pfx_lock_release+0x10/0x10 [ 61.293253][ C0] ___sys_sendmsg+0x135/0x1e0 [ 61.295150][ C0] ? __up_read+0x1fb/0x760 [ 61.296930][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 61.298988][ C0] ? handle_mm_fault+0x497/0xaa0 [ 61.300641][ C0] ? rcu_is_watching+0x12/0xc0 [ 61.302521][ C0] ? __pfx___might_resched+0x10/0x10 [ 61.304618][ C0] ? __might_fault+0xe3/0x190 [ 61.306525][ C0] __sys_sendmmsg+0x201/0x420 [ 61.308472][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 61.310548][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 61.312638][ C0] ? xfd_validate_state+0x5d/0x180 [ 61.314687][ C0] ? rcu_is_watching+0x12/0xc0 [ 61.316624][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 61.318367][ C0] do_syscall_64+0xcd/0x250 [ 61.319983][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.322368][ C0] RIP: 0033:0x7f73c007cd29 [ 61.324080][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 61.330954][ C0] RSP: 002b:00007f73bf3fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 61.334141][ C0] RAX: ffffffffffffffda RBX: 00007f73c01abf80 RCX: 00007f73c007cd29 [ 61.337172][ C0] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 61.340262][ C0] RBP: 00007f73c00c947a R08: 0000000000000000 R09: 0000000000000000 [ 61.343265][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.345628][ C0] R13: 000000000000000b R14: 00007f73c01abf80 R15: 00007fffed764658 [ 61.347875][ C0] [ 61.703529][ C1] Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1538/dccp_feat_activate_values() [ 61.793652][ C3] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:414/tfrc_rx_hist_sample_rtt() [ 61.798443][ C3] CPU: 3 UID: 0 PID: 6591 Comm: syz-executor.0 Not tainted 6.13.0-rc7-syzkaller-g619f0b6fad52 #0 [ 61.801965][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.805639][ C3] Call Trace: [ 61.806779][ C3] [ 61.807766][ C3] dump_stack_lvl+0x16c/0x1f0 [ 61.809398][ C3] tfrc_rx_hist_sample_rtt+0x3e1/0x4a0 [ 61.811276][ C3] ccid3_hc_rx_packet_recv+0x443/0xf50 [ 61.813134][ C3] ? __pfx_ccid3_hc_rx_packet_recv+0x10/0x10 [ 61.815190][ C3] dccp_deliver_input_to_ccids+0xe3/0x270 [ 61.817125][ C3] dccp_rcv_established+0x10a/0x160 [ 61.818917][ C3] dccp_v4_do_rcv+0x171/0x1b0 [ 61.820538][ C3] ? __pfx_dccp_v4_do_rcv+0x10/0x10 [ 61.822328][ C3] __sk_receive_skb+0x7aa/0x890 [ 61.824001][ C3] dccp_v4_rcv+0x1153/0x1d30 [ 61.825607][ C3] ? __pfx_dccp_v4_rcv+0x10/0x10 [ 61.827316][ C3] ip_protocol_deliver_rcu+0x441/0x4c0 [ 61.829193][ C3] ip_local_deliver_finish+0x316/0x570 [ 61.831064][ C3] ip_local_deliver+0x18e/0x1f0 [ 61.832723][ C3] ? __pfx_ip_local_deliver+0x10/0x10 [ 61.834575][ C3] ip_rcv+0x2c3/0x5d0 [ 61.835952][ C3] ? __pfx_ip_rcv+0x10/0x10 [ 61.837523][ C3] __netif_receive_skb_one_core+0x199/0x1e0 [ 61.839528][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 61.841722][ C3] ? rcu_is_watching+0x12/0xc0 [ 61.843352][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 61.845168][ C3] ? process_backlog+0x3f1/0x15f0 [ 61.846884][ C3] ? process_backlog+0x3f1/0x15f0 [ 61.848604][ C3] __netif_receive_skb+0x1d/0x160 [ 61.850328][ C3] process_backlog+0x443/0x15f0 [ 61.852021][ C3] __napi_poll.constprop.0+0xb7/0x550 [ 61.853852][ C3] net_rx_action+0xa94/0x1010 [ 61.855464][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 61.857199][ C3] ? rcu_is_watching+0x12/0xc0 [ 61.858831][ C3] ? net_tx_action+0x7e6/0xd00 [ 61.860457][ C3] ? rcu_is_watching+0x12/0xc0 [ 61.862099][ C3] handle_softirqs+0x213/0x8f0 [ 61.863730][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 61.865543][ C3] __irq_exit_rcu+0x109/0x170 [ 61.867150][ C3] irq_exit_rcu+0x9/0x30 [ 61.868615][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 61.870486][ C3] [ 61.871443][ C3] [ 61.872326][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 61.874135][ C3] RIP: 0010:____sys_sendmsg+0x19/0xc90 [ 61.875763][ C3] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 49 89 cd 41 54 49 bc 00 00 00 00 00 fc ff df 55 48 89 fd <53> 48 89 f3 4c 8d 7b 48 48 81 ec c0 00 00 00 4c 8d 74 24 20 89 14 [ 61.881534][ C3] RSP: 0018:ffffc90003bffad0 EFLAGS: 00000293 [ 61.883301][ C3] RAX: 0000000000000000 RBX: 1ffff9200077ff64 RCX: ffffc90003bffdd8 [ 61.885653][ C3] RDX: 0000000000040000 RSI: ffffc90003bffd48 RDI: ffff88803622ec00 [ 61.888003][ C3] RBP: ffff88803622ec00 R08: 0000000000000080 R09: 0000000000000000 [ 61.890304][ C3] R10: 0000000000000000 R11: 00000000000a4001 R12: dffffc0000000000 [ 61.892693][ C3] R13: ffffc90003bffdd8 R14: 0000000000040000 R15: dffffc0000000000 [ 61.895028][ C3] ___sys_sendmsg+0x135/0x1e0 [ 61.896415][ C3] ? __up_read+0x1fb/0x760 [ 61.897745][ C3] ? __pfx____sys_sendmsg+0x10/0x10 [ 61.899314][ C3] ? handle_mm_fault+0x497/0xaa0 [ 61.900774][ C3] ? rcu_is_watching+0x12/0xc0 [ 61.902379][ C3] ? __pfx___might_resched+0x10/0x10 [ 61.904026][ C3] ? __might_fault+0xe3/0x190 [ 61.905399][ C3] __sys_sendmmsg+0x201/0x420 [ 61.907181][ C3] ? __pfx___sys_sendmmsg+0x10/0x10 [ 61.908958][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 61.910748][ C3] ? __pfx_mem_cgroup_handle_over_high+0x10/0x10 [ 61.912935][ C3] ? rcu_is_watching+0x12/0xc0 [ 61.914592][ C3] __x64_sys_sendmmsg+0x9c/0x100 [ 61.916273][ C3] do_syscall_64+0xcd/0x250 [ 61.917879][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.919771][ C3] RIP: 0033:0x7f73c007cd29 [ 61.921106][ C3] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 61.926614][ C3] RSP: 002b:00007f73bf3fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 61.928995][ C3] RAX: ffffffffffffffda RBX: 00007f73c01abf80 RCX: 00007f73c007cd29 [ 61.931312][ C3] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 61.933610][ C3] RBP: 00007f73c00c947a R08: 0000000000000000 R09: 0000000000000000 [ 61.935931][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.938187][ C3] R13: 000000000000000b R14: 00007f73c01abf80 R15: 00007fffed764658 [ 61.940456][ C3] [ 62.021957][ T6601] net_ratelimit: 194 callbacks suppressed [ 62.021967][ T6601] dccp_xmit_packet: Payload too large (65475) for featneg. [ 62.040047][ T6603] dccp_xmit_packet: Payload too large (65475) for featneg. [ 62.058469][ T6605] dccp_xmit_packet: Payload too large (65475) for featneg. [ 62.075987][ T6607] dccp_xmit_packet: Payload too large (65475) for featneg. [ 62.090020][ T6609] dccp_xmit_packet: Payload too large (65475) for featneg. [ 62.095269][ C3] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:414/tfrc_rx_hist_sample_rtt() [ 62.099233][ C3] CPU: 3 UID: 0 PID: 6609 Comm: syz-executor.0 Not tainted 6.13.0-rc7-syzkaller-g619f0b6fad52 #0 [ 62.102234][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.105355][ C3] Call Trace: [ 62.106328][ C3] [ 62.107159][ C3] dump_stack_lvl+0x16c/0x1f0 [ 62.108536][ C3] tfrc_rx_hist_sample_rtt+0x3e1/0x4a0 [ 62.110124][ C3] ccid3_hc_rx_packet_recv+0x443/0xf50 [ 62.111709][ C3] ? __pfx_ccid3_hc_rx_packet_recv+0x10/0x10 [ 62.113435][ C3] dccp_deliver_input_to_ccids+0xe3/0x270 [ 62.115317][ C3] dccp_rcv_established+0x10a/0x160 [ 62.116823][ C3] dccp_v4_do_rcv+0x171/0x1b0 [ 62.118241][ C3] ? __pfx_dccp_v4_do_rcv+0x10/0x10 [ 62.119745][ C3] __sk_receive_skb+0x7aa/0x890 [ 62.121149][ C3] dccp_v4_rcv+0x1153/0x1d30 [ 62.122538][ C3] ? __pfx_dccp_v4_rcv+0x10/0x10 [ 62.124197][ C3] ip_protocol_deliver_rcu+0x441/0x4c0 [ 62.126490][ C3] ip_local_deliver_finish+0x316/0x570 [ 62.128625][ C3] ip_local_deliver+0x18e/0x1f0 [ 62.130062][ C3] ? __pfx_ip_local_deliver+0x10/0x10 [ 62.131649][ C3] ip_rcv+0x2c3/0x5d0 [ 62.132816][ C3] ? __pfx_ip_rcv+0x10/0x10 [ 62.134288][ C3] __netif_receive_skb_one_core+0x199/0x1e0 [ 62.135999][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 62.137858][ C3] ? rcu_is_watching+0x12/0xc0 [ 62.139252][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 62.140802][ C3] ? process_backlog+0x3f1/0x15f0 [ 62.142329][ C3] ? process_backlog+0x3f1/0x15f0 [ 62.143823][ C3] __netif_receive_skb+0x1d/0x160 [ 62.145282][ C3] process_backlog+0x443/0x15f0 [ 62.146713][ C3] __napi_poll.constprop.0+0xb7/0x550 [ 62.148287][ C3] net_rx_action+0xa94/0x1010 [ 62.149729][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 62.151223][ C3] ? rcu_is_watching+0x12/0xc0 [ 62.152649][ C3] ? net_tx_action+0x7e6/0xd00 [ 62.154259][ C3] ? rcu_is_watching+0x12/0xc0 [ 62.155860][ C3] handle_softirqs+0x213/0x8f0 [ 62.157269][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 62.158817][ C3] __irq_exit_rcu+0x109/0x170 [ 62.160198][ C3] irq_exit_rcu+0x9/0x30 [ 62.161440][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 62.163120][ C3] [ 62.164034][ C3] [ 62.164901][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 62.166662][ C3] RIP: 0010:stack_depot_save_flags+0x135/0x9c0 [ 62.168449][ C3] Code: 29 df 31 f8 c1 cf 08 29 f8 89 c3 41 89 d9 44 23 0d 60 75 e0 15 49 c1 e1 04 4c 03 0d 5d 75 e0 15 65 ff 05 56 2a 34 7b 49 8b 09 <4c> 39 c9 75 11 e9 91 00 00 00 48 8b 09 49 39 c9 0f 84 d8 01 00 00 [ 62.174048][ C3] RSP: 0018:ffffc90003bff498 EFLAGS: 00000282 [ 62.175787][ C3] RAX: 0000000091defd53 RBX: 0000000091defd53 RCX: ffff888030eb1fa0 [ 62.178063][ C3] RDX: 0000000094021783 RSI: 00000000121c3bb8 RDI: 00000000961ebd9b [ 62.180326][ C3] RBP: 0000000000000001 R08: 0000000000000000 R09: ffff88816d8fd530 [ 62.182625][ C3] R10: ffffffff905f4997 R11: 00000000000a4001 R12: 0000000000000000 [ 62.184971][ C3] R13: ffffc90003bff4f8 R14: 0000000000000012 R15: 0000000000000012 [ 62.187249][ C3] ? stack_depot_save_flags+0x28/0x9c0 [ 62.188827][ C3] kasan_save_stack+0x42/0x60 [ 62.190190][ C3] ? kasan_save_stack+0x33/0x60 [ 62.191620][ C3] ? kasan_save_track+0x14/0x30 [ 62.193020][ C3] ? kasan_save_free_info+0x3b/0x60 [ 62.194555][ C3] ? __kasan_slab_free+0x51/0x70 [ 62.195981][ C3] ? kfree+0x14f/0x4b0 [ 62.197161][ C3] ? skb_free_head+0x108/0x1d0 [ 62.198551][ C3] ? skb_release_data+0x560/0x730 [ 62.199996][ C3] ? sk_skb_reason_drop+0x129/0x1a0 [ 62.201527][ C3] ? dccp_qpolicy_drop+0x39/0x40 [ 62.202951][ C3] ? dccp_write_xmit+0x184/0x1d0 [ 62.204423][ C3] ? dccp_sendmsg+0x9b7/0xd10 [ 62.205792][ C3] ? inet_sendmsg+0x119/0x140 [ 62.207155][ C3] ? ____sys_sendmsg+0x98c/0xc90 [ 62.208591][ C3] ? ___sys_sendmsg+0x135/0x1e0 [ 62.209984][ C3] ? __sys_sendmmsg+0x201/0x420 [ 62.211393][ C3] ? __x64_sys_sendmmsg+0x9c/0x100 [ 62.212888][ C3] ? do_syscall_64+0xcd/0x250 [ 62.214323][ C3] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.216069][ C3] kasan_save_track+0x14/0x30 [ 62.217423][ C3] kasan_save_free_info+0x3b/0x60 [ 62.218875][ C3] __kasan_slab_free+0x51/0x70 [ 62.220263][ C3] kfree+0x14f/0x4b0 [ 62.221391][ C3] ? skb_free_head+0x108/0x1d0 [ 62.222791][ C3] skb_free_head+0x108/0x1d0 [ 62.224297][ C3] skb_release_data+0x560/0x730 [ 62.225926][ C3] ? __pfx_sock_wfree+0x10/0x10 [ 62.227348][ C3] sk_skb_reason_drop+0x129/0x1a0 [ 62.228816][ C3] dccp_qpolicy_drop+0x39/0x40 [ 62.230226][ C3] dccp_write_xmit+0x184/0x1d0 [ 62.231630][ C3] dccp_sendmsg+0x9b7/0xd10 [ 62.232942][ C3] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 62.234883][ C3] ? __pfx_dccp_sendmsg+0x10/0x10 [ 62.236475][ C3] ? __pfx_dccp_sendmsg+0x10/0x10 [ 62.237969][ C3] inet_sendmsg+0x119/0x140 [ 62.239299][ C3] ____sys_sendmsg+0x98c/0xc90 [ 62.240684][ C3] ? copy_msghdr_from_user+0x10b/0x160 [ 62.242277][ C3] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.243826][ C3] ? kfree+0x274/0x4b0 [ 62.244999][ C3] ? __pfx_lock_release+0x10/0x10 [ 62.246461][ C3] ___sys_sendmsg+0x135/0x1e0 [ 62.247812][ C3] ? __up_read+0x1fb/0x760 [ 62.249108][ C3] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.250592][ C3] ? handle_mm_fault+0x497/0xaa0 [ 62.252038][ C3] ? rcu_is_watching+0x12/0xc0 [ 62.253412][ C3] ? __pfx___might_resched+0x10/0x10 [ 62.255047][ C3] ? __might_fault+0xe3/0x190 [ 62.256411][ C3] __sys_sendmmsg+0x201/0x420 [ 62.257892][ C3] ? __pfx___sys_sendmmsg+0x10/0x10 [ 62.259383][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 62.260879][ C3] ? __pfx_mem_cgroup_handle_over_high+0x10/0x10 [ 62.262708][ C3] ? rcu_is_watching+0x12/0xc0 [ 62.264116][ C3] __x64_sys_sendmmsg+0x9c/0x100 [ 62.265535][ C3] do_syscall_64+0xcd/0x250 [ 62.266841][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.268538][ C3] RIP: 0033:0x7f73c007cd29 [ 62.269818][ C3] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 62.275304][ C3] RSP: 002b:00007f73bf3fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 62.277695][ C3] RAX: ffffffffffffffda RBX: 00007f73c01abf80 RCX: 00007f73c007cd29 [ 62.280041][ C3] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 62.282345][ C3] RBP: 00007f73c00c947a R08: 0000000000000000 R09: 0000000000000000 [ 62.284785][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.287044][ C3] R13: 000000000000000b R14: 00007f73c01abf80 R15: 00007fffed764658 [ 62.289311][ C3] [ 62.301417][ T6611] dccp_xmit_packet: Payload too large (65475) for featneg. [ 62.316009][ T6613] dccp_xmit_packet: Payload too large (65475) for featneg. [ 62.336852][ T6615] dccp_xmit_packet: Payload too large (65475) for featneg. [ 62.344165][ T5949] Bluetooth: hci0: command tx timeout [ 62.355973][ T6617] dccp_xmit_packet: Payload too large (65475) for featneg. [ 62.372334][ T6619] dccp_xmit_packet: Payload too large (65475) for featneg. [ 62.442748][ C3] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:414/tfrc_rx_hist_sample_rtt() [ 62.446689][ C3] CPU: 3 UID: 0 PID: 6627 Comm: syz-executor.0 Not tainted 6.13.0-rc7-syzkaller-g619f0b6fad52 #0 [ 62.449487][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.452402][ C3] Call Trace: [ 62.453305][ C3] [ 62.454273][ C3] dump_stack_lvl+0x16c/0x1f0 [ 62.455802][ C3] tfrc_rx_hist_sample_rtt+0x3e1/0x4a0 [ 62.457571][ C3] ccid3_hc_rx_packet_recv+0x443/0xf50 [ 62.459172][ C3] ? __pfx_ccid3_hc_rx_packet_recv+0x10/0x10 [ 62.460882][ C3] dccp_deliver_input_to_ccids+0xe3/0x270 [ 62.462556][ C3] dccp_rcv_established+0x10a/0x160 [ 62.464153][ C3] dccp_v4_do_rcv+0x171/0x1b0 [ 62.465637][ C3] ? __pfx_dccp_v4_do_rcv+0x10/0x10 [ 62.467151][ C3] __sk_receive_skb+0x7aa/0x890 [ 62.468665][ C3] dccp_v4_rcv+0x1153/0x1d30 [ 62.470145][ C3] ? __pfx_dccp_v4_rcv+0x10/0x10 [ 62.471587][ C3] ip_protocol_deliver_rcu+0x441/0x4c0 [ 62.473153][ C3] ip_local_deliver_finish+0x316/0x570 [ 62.474758][ C3] ip_local_deliver+0x18e/0x1f0 [ 62.476172][ C3] ? __pfx_ip_local_deliver+0x10/0x10 [ 62.477888][ C3] ip_rcv+0x2c3/0x5d0 [ 62.479397][ C3] ? __pfx_ip_rcv+0x10/0x10 [ 62.481091][ C3] __netif_receive_skb_one_core+0x199/0x1e0 [ 62.483311][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 62.485674][ C3] ? rcu_is_watching+0x12/0xc0 [ 62.487467][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 62.489515][ C3] ? process_backlog+0x3f1/0x15f0 [ 62.491379][ C3] ? process_backlog+0x3f1/0x15f0 [ 62.493255][ C3] __netif_receive_skb+0x1d/0x160 [ 62.495194][ C3] process_backlog+0x443/0x15f0 [ 62.497004][ C3] __napi_poll.constprop.0+0xb7/0x550 [ 62.499001][ C3] net_rx_action+0xa94/0x1010 [ 62.500756][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 62.502677][ C3] ? rcu_is_watching+0x12/0xc0 [ 62.504393][ C3] ? net_tx_action+0x7e6/0xd00 [ 62.506194][ C3] ? rcu_is_watching+0x12/0xc0 [ 62.507991][ C3] handle_softirqs+0x213/0x8f0 [ 62.509786][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 62.511735][ C3] __irq_exit_rcu+0x109/0x170 [ 62.513489][ C3] irq_exit_rcu+0x9/0x30 [ 62.515062][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 62.517145][ C3] [ 62.518257][ C3] [ 62.519401][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 62.521690][ C3] RIP: 0010:stack_access_ok+0x1c/0x200 [ 62.523703][ C3] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 41 57 41 56 4c 8d 77 08 41 55 41 54 49 89 d4 4c 89 f2 <55> 48 c1 ea 03 48 89 f5 53 48 89 fb 48 83 ec 08 80 3c 02 00 0f 85 [ 62.531133][ C3] RSP: 0018:ffffc90003bbf1c0 EFLAGS: 00000246 [ 62.533346][ C3] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff90fff5a8 [ 62.535785][ C3] RDX: ffffc90003bbf260 RSI: ffffc90003bbf5b0 RDI: ffffc90003bbf258 [ 62.538084][ C3] RBP: ffffc90003bbf2a0 R08: ffffffff90fff5cc R09: ffffffff90fff5ac [ 62.540351][ C3] R10: ffffc90003bbf258 R11: 000000000000fc9f R12: 0000000000000008 [ 62.542665][ C3] R13: ffffc90003bbf258 R14: ffffc90003bbf260 R15: ffffc90003bbf5b0 [ 62.544997][ C3] unwind_next_frame+0xac7/0x20c0 [ 62.546458][ C3] ? kasan_save_track+0x14/0x30 [ 62.547849][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 62.549652][ C3] arch_stack_walk+0x95/0x100 [ 62.551016][ C3] ? kasan_save_track+0x14/0x30 [ 62.552445][ C3] stack_trace_save+0x95/0xd0 [ 62.554089][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 62.556095][ C3] ? lock_release+0x4e2/0x6f0 [ 62.557913][ C3] ? __pfx_lock_release+0x10/0x10 [ 62.559843][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 62.561874][ C3] ? is_bpf_text_address+0x30/0x1a0 [ 62.563821][ C3] kasan_save_stack+0x33/0x60 [ 62.565192][ C3] ? kasan_save_stack+0x33/0x60 [ 62.566604][ C3] ? kasan_save_track+0x14/0x30 [ 62.568017][ C3] kasan_save_track+0x14/0x30 [ 62.569373][ C3] __kasan_slab_alloc+0x89/0x90 [ 62.570788][ C3] kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 62.572496][ C3] ? do_syscall_64+0xcd/0x250 [ 62.573936][ C3] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.575684][ C3] ? __alloc_skb+0x2b1/0x380 [ 62.577164][ C3] __alloc_skb+0x2b1/0x380 [ 62.578851][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 62.580702][ C3] ? rcu_is_watching+0x12/0xc0 [ 62.582512][ C3] alloc_skb_with_frags+0xe4/0x850 [ 62.584407][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 62.586371][ C3] ? avc_has_perm_noaudit+0x61/0x3a0 [ 62.588346][ C3] sock_alloc_send_pskb+0x7f1/0x980 [ 62.590284][ C3] ? avc_has_perm_noaudit+0x143/0x3a0 [ 62.592277][ C3] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 62.594386][ C3] ? __pfx_lock_release+0x10/0x10 [ 62.596311][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 62.598490][ C3] ? lock_acquire+0x2f/0xb0 [ 62.600273][ C3] ? release_sock+0x21/0x220 [ 62.601943][ C3] ? rcu_is_watching+0x12/0xc0 [ 62.603489][ C3] ? trace_irq_enable.constprop.0+0xea/0x140 [ 62.605242][ C3] dccp_sendmsg+0x2fb/0xd10 [ 62.606571][ C3] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 62.608513][ C3] ? __pfx_dccp_sendmsg+0x10/0x10 [ 62.609963][ C3] ? __pfx_dccp_sendmsg+0x10/0x10 [ 62.611418][ C3] inet_sendmsg+0x119/0x140 [ 62.612800][ C3] ____sys_sendmsg+0x98c/0xc90 [ 62.614227][ C3] ? copy_msghdr_from_user+0x10b/0x160 [ 62.615788][ C3] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.617300][ C3] ? kfree+0x274/0x4b0 [ 62.618486][ C3] ? __pfx_lock_release+0x10/0x10 [ 62.619929][ C3] ___sys_sendmsg+0x135/0x1e0 [ 62.621315][ C3] ? __up_read+0x1fb/0x760 [ 62.622653][ C3] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.624167][ C3] ? handle_mm_fault+0x497/0xaa0 [ 62.625602][ C3] ? rcu_is_watching+0x12/0xc0 [ 62.626987][ C3] ? __pfx___might_resched+0x10/0x10 [ 62.628517][ C3] ? __might_fault+0xe3/0x190 [ 62.629956][ C3] __sys_sendmmsg+0x201/0x420 [ 62.631324][ C3] ? __pfx___sys_sendmmsg+0x10/0x10 [ 62.632836][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 62.634381][ C3] ? __pfx_mem_cgroup_handle_over_high+0x10/0x10 [ 62.636240][ C3] ? __sys_setsockopt+0x1cd/0x230 [ 62.637698][ C3] __x64_sys_sendmmsg+0x9c/0x100 [ 62.639128][ C3] do_syscall_64+0xcd/0x250 [ 62.640441][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.642203][ C3] RIP: 0033:0x7f73c007cd29 [ 62.643518][ C3] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 62.649634][ C3] RSP: 002b:00007f73bf3fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 62.652067][ C3] RAX: ffffffffffffffda RBX: 00007f73c01abf80 RCX: 00007f73c007cd29 [ 62.654392][ C3] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 62.656711][ C3] RBP: 00007f73c00c947a R08: 0000000000000000 R09: 0000000000000000 [ 62.658976][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.661235][ C3] R13: 000000000000000b R14: 00007f73c01abf80 R15: 00007fffed764658 [ 62.663663][ C3] [ 62.853001][ C3] Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1538/dccp_feat_activate_values() [ 63.286187][ C2] Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1538/dccp_feat_activate_values() [ 63.902755][ C2] Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1538/dccp_feat_activate_values() [ 64.423964][ T5949] Bluetooth: hci0: command tx timeout [ 64.487650][ C3] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:414/tfrc_rx_hist_sample_rtt() [ 64.493159][ C3] CPU: 3 UID: 0 PID: 6851 Comm: syz-executor.0 Not tainted 6.13.0-rc7-syzkaller-g619f0b6fad52 #0 [ 64.496966][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.500092][ C3] Call Trace: [ 64.501126][ C3] [ 64.502017][ C3] dump_stack_lvl+0x16c/0x1f0 [ 64.503417][ C3] tfrc_rx_hist_sample_rtt+0x3e1/0x4a0 [ 64.505257][ C3] ccid3_hc_rx_packet_recv+0x443/0xf50 [ 64.506814][ C3] ? __pfx_ccid3_hc_rx_packet_recv+0x10/0x10 [ 64.508595][ C3] dccp_deliver_input_to_ccids+0xe3/0x270 [ 64.510887][ C3] dccp_rcv_established+0x10a/0x160 [ 64.512986][ C3] dccp_v4_do_rcv+0x171/0x1b0 [ 64.514895][ C3] ? __pfx_dccp_v4_do_rcv+0x10/0x10 [ 64.516997][ C3] __sk_receive_skb+0x7aa/0x890 [ 64.518964][ C3] dccp_v4_rcv+0x1153/0x1d30 [ 64.520801][ C3] ? __pfx_dccp_v4_rcv+0x10/0x10 [ 64.522542][ C3] ip_protocol_deliver_rcu+0x441/0x4c0 [ 64.524226][ C3] ip_local_deliver_finish+0x316/0x570 [ 64.525960][ C3] ip_local_deliver+0x18e/0x1f0 [ 64.527361][ C3] ? __pfx_ip_local_deliver+0x10/0x10 [ 64.528906][ C3] ip_rcv+0x2c3/0x5d0 [ 64.530070][ C3] ? __pfx_ip_rcv+0x10/0x10 [ 64.531329][ C3] __netif_receive_skb_one_core+0x199/0x1e0 [ 64.533020][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 64.534916][ C3] ? rcu_is_watching+0x12/0xc0 [ 64.536291][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 64.537868][ C3] ? process_backlog+0x3f1/0x15f0 [ 64.539856][ C3] ? process_backlog+0x3f1/0x15f0 [ 64.541684][ C3] __netif_receive_skb+0x1d/0x160 [ 64.543127][ C3] process_backlog+0x443/0x15f0 [ 64.544756][ C3] __napi_poll.constprop.0+0xb7/0x550 [ 64.546817][ C3] net_rx_action+0xa94/0x1010 [ 64.548644][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 64.550613][ C3] ? rcu_is_watching+0x12/0xc0 [ 64.552140][ C3] ? net_tx_action+0x7e6/0xd00 [ 64.553523][ C3] ? rcu_is_watching+0x12/0xc0 [ 64.554903][ C3] handle_softirqs+0x213/0x8f0 [ 64.556268][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 64.557774][ C3] __irq_exit_rcu+0x109/0x170 [ 64.559119][ C3] irq_exit_rcu+0x9/0x30 [ 64.560328][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 64.561952][ C3] [ 64.562799][ C3] [ 64.563650][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 64.565392][ C3] RIP: 0010:unwind_next_frame+0xe3b/0x20c0 [ 64.567060][ C3] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7c 0c 00 00 48 39 dd 49 8b 45 10 77 24 48 39 d8 76 1f 48 8d 53 08 48 39 d0 <0f> 93 c1 48 39 d5 0f 92 c0 84 c1 74 0b 48 39 5c 24 10 0f 83 28 09 [ 64.572532][ C3] RSP: 0018:ffffc90007d2f1a8 EFLAGS: 00000202 [ 64.574427][ C3] RAX: ffffc90007d30000 RBX: ffffc90007d2f578 RCX: ffffffff90fff5a8 [ 64.576989][ C3] RDX: ffffc90007d2f580 RSI: 0000000000000001 RDI: ffffc90007d2f228 [ 64.579234][ C3] RBP: ffffc90007d28000 R08: ffffc90007d2f24c R09: ffffffff90fff5ac [ 64.581465][ C3] R10: ffffc90007d2f218 R11: 000000000000fc9f R12: ffffc90007d2f268 [ 64.583715][ C3] R13: ffffc90007d2f218 R14: ffffc90007d2f578 R15: ffffc90007d2f570 [ 64.585998][ C3] ? unwind_next_frame+0xadb/0x20c0 [ 64.587512][ C3] ? kasan_save_track+0x14/0x30 [ 64.588906][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 64.591280][ C3] arch_stack_walk+0x95/0x100 [ 64.593083][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 64.594872][ C3] stack_trace_save+0x95/0xd0 [ 64.596273][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 64.597912][ C3] ? stack_trace_save+0x95/0xd0 [ 64.599340][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 64.600899][ C3] ? lock_release+0x4e2/0x6f0 [ 64.602345][ C3] ? stack_depot_save_flags+0x28/0x9c0 [ 64.603950][ C3] kasan_save_stack+0x33/0x60 [ 64.605527][ C3] ? kasan_save_stack+0x33/0x60 [ 64.606972][ C3] ? kasan_save_track+0x14/0x30 [ 64.608457][ C3] kasan_save_track+0x14/0x30 [ 64.609847][ C3] __kasan_kmalloc+0xaa/0xb0 [ 64.611249][ C3] __kmalloc_node_track_caller_noprof+0x222/0x510 [ 64.613775][ C3] ? rcu_watching_snap_stopped_since+0xc1/0x110 [ 64.616244][ C3] ? __alloc_skb+0x164/0x380 [ 64.618131][ C3] kmalloc_reserve+0xef/0x2c0 [ 64.620017][ C3] __alloc_skb+0x164/0x380 [ 64.621395][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 64.622888][ C3] ? rcu_is_watching+0x12/0xc0 [ 64.624616][ C3] alloc_skb_with_frags+0xe4/0x850 [ 64.626513][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 64.628356][ C3] ? avc_has_perm_noaudit+0x61/0x3a0 [ 64.630469][ C3] sock_alloc_send_pskb+0x7f1/0x980 [ 64.632605][ C3] ? avc_has_perm_noaudit+0x143/0x3a0 [ 64.634777][ C3] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 64.637018][ C3] ? __pfx_lock_release+0x10/0x10 [ 64.638721][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 64.640563][ C3] ? lock_acquire+0x2f/0xb0 [ 64.641882][ C3] ? release_sock+0x21/0x220 [ 64.643202][ C3] ? rcu_is_watching+0x12/0xc0 [ 64.644699][ C3] ? trace_irq_enable.constprop.0+0xea/0x140 [ 64.646414][ C3] dccp_sendmsg+0x2fb/0xd10 [ 64.647718][ C3] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 64.650100][ C3] ? __pfx_dccp_sendmsg+0x10/0x10 [ 64.652067][ C3] ? __pfx_dccp_sendmsg+0x10/0x10 [ 64.653847][ C3] inet_sendmsg+0x119/0x140 [ 64.655343][ C3] ____sys_sendmsg+0x98c/0xc90 [ 64.656791][ C3] ? copy_msghdr_from_user+0x10b/0x160 [ 64.658426][ C3] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.659958][ C3] ? kfree+0x274/0x4b0 [ 64.661157][ C3] ? __pfx_lock_release+0x10/0x10 [ 64.663008][ C3] ___sys_sendmsg+0x135/0x1e0 [ 64.664825][ C3] ? __up_read+0x1fb/0x760 [ 64.666528][ C3] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.668568][ C3] ? handle_mm_fault+0x497/0xaa0 [ 64.670570][ C3] ? rcu_is_watching+0x12/0xc0 [ 64.672527][ C3] ? __pfx___might_resched+0x10/0x10 [ 64.674308][ C3] ? __might_fault+0xe3/0x190 [ 64.675716][ C3] __sys_sendmmsg+0x201/0x420 [ 64.677117][ C3] ? __pfx___sys_sendmmsg+0x10/0x10 [ 64.678937][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 64.680457][ C3] ? __pfx_mem_cgroup_handle_over_high+0x10/0x10 [ 64.682618][ C3] ? __sys_setsockopt+0x1cd/0x230 [ 64.684623][ C3] __x64_sys_sendmmsg+0x9c/0x100 [ 64.686634][ C3] do_syscall_64+0xcd/0x250 [ 64.688509][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.690882][ C3] RIP: 0033:0x7f73c007cd29 [ 64.692482][ C3] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 64.700024][ C3] RSP: 002b:00007f73bf3fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 64.702876][ C3] RAX: ffffffffffffffda RBX: 00007f73c01abf80 RCX: 00007f73c007cd29 [ 64.705259][ C3] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 64.707591][ C3] RBP: 00007f73c00c947a R08: 0000000000000000 R09: 0000000000000000 [ 64.709929][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.712247][ C3] R13: 000000000000000b R14: 00007f73c01abf80 R15: 00007fffed764658 [ 64.714743][ C3] [ 66.026809][ C0] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:414/tfrc_rx_hist_sample_rtt() [ 66.030628][ C0] CPU: 0 UID: 0 PID: 6906 Comm: syz-executor.0 Not tainted 6.13.0-rc7-syzkaller-g619f0b6fad52 #0 [ 66.033564][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.037175][ C0] Call Trace: [ 66.038299][ C0] [ 66.039116][ C0] dump_stack_lvl+0x16c/0x1f0 [ 66.040634][ C0] tfrc_rx_hist_sample_rtt+0x3e1/0x4a0 [ 66.042221][ C0] ccid3_hc_rx_packet_recv+0x443/0xf50 [ 66.043877][ C0] ? __pfx_ccid3_hc_rx_packet_recv+0x10/0x10 [ 66.045617][ C0] dccp_deliver_input_to_ccids+0xe3/0x270 [ 66.047206][ C0] dccp_rcv_established+0x10a/0x160 [ 66.048655][ C0] dccp_v4_do_rcv+0x171/0x1b0 [ 66.049975][ C0] ? __pfx_dccp_v4_do_rcv+0x10/0x10 [ 66.051453][ C0] __sk_receive_skb+0x7aa/0x890 [ 66.052825][ C0] dccp_v4_rcv+0x1153/0x1d30 [ 66.054169][ C0] ? __pfx_dccp_v4_rcv+0x10/0x10 [ 66.055555][ C0] ip_protocol_deliver_rcu+0x441/0x4c0 [ 66.057093][ C0] ip_local_deliver_finish+0x316/0x570 [ 66.058660][ C0] ip_local_deliver+0x18e/0x1f0 [ 66.060018][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 66.061558][ C0] ip_rcv+0x2c3/0x5d0 [ 66.062678][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 66.063970][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 66.065609][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 66.067393][ C0] ? rcu_is_watching+0x12/0xc0 [ 66.068785][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 66.070310][ C0] ? process_backlog+0x3f1/0x15f0 [ 66.071747][ C0] ? process_backlog+0x3f1/0x15f0 [ 66.073146][ C0] __netif_receive_skb+0x1d/0x160 [ 66.074607][ C0] process_backlog+0x443/0x15f0 [ 66.075980][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 66.077456][ C0] net_rx_action+0xa94/0x1010 [ 66.078761][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 66.080187][ C0] ? rcu_is_watching+0x12/0xc0 [ 66.081555][ C0] ? net_tx_action+0x7e6/0xd00 [ 66.082902][ C0] ? rcu_is_watching+0x12/0xc0 [ 66.084248][ C0] handle_softirqs+0x213/0x8f0 [ 66.085584][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 66.087064][ C0] __irq_exit_rcu+0x109/0x170 [ 66.088378][ C0] irq_exit_rcu+0x9/0x30 [ 66.089561][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 66.091091][ C0] [ 66.091971][ C0] [ 66.092807][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 66.094538][ C0] RIP: 0010:check_preemption_disabled+0x8/0xe0 [ 66.096261][ C0] Code: d8 74 85 c0 74 04 90 0f 0b 90 e9 53 fc ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 <65> 8b 1d ad b9 d9 74 65 8b 05 a2 b9 d9 74 a9 ff ff ff 7f 74 0f 48 [ 66.101583][ C0] RSP: 0018:ffffc9000c267710 EFLAGS: 00000282 [ 66.103244][ C0] RAX: 0000000000000000 RBX: ffff888042952000 RCX: ffffffff890335d3 [ 66.105497][ C0] RDX: ffff888026610000 RSI: ffffffff8bd1eea0 RDI: ffffffff8bd1eee0 [ 66.107724][ C0] RBP: ffffc9000c2677b0 R08: 0000000000000005 R09: 0000000000000140 [ 66.109953][ C0] R10: 00000000000006c0 R11: 0000000000000000 R12: 000000000003d90c [ 66.112182][ C0] R13: ffff888042952000 R14: ffff8880429526f0 R15: ffff88801227afd0 [ 66.114422][ C0] ? skb_free_head+0xf3/0x1d0 [ 66.115751][ C0] rcu_is_watching+0x12/0xc0 [ 66.117047][ C0] kfree+0x274/0x4b0 [ 66.118155][ C0] ? lock_acquire+0x2f/0xb0 [ 66.119431][ C0] ? dccp_write_space+0x34/0x4b0 [ 66.120814][ C0] skb_free_head+0x108/0x1d0 [ 66.122144][ C0] skb_release_data+0x560/0x730 [ 66.123507][ C0] ? __pfx_sock_wfree+0x10/0x10 [ 66.124909][ C0] sk_skb_reason_drop+0x129/0x1a0 [ 66.126337][ C0] dccp_qpolicy_drop+0x39/0x40 [ 66.127658][ C0] dccp_write_xmit+0x184/0x1d0 [ 66.129021][ C0] dccp_sendmsg+0x9b7/0xd10 [ 66.130296][ C0] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 66.132168][ C0] ? __pfx_dccp_sendmsg+0x10/0x10 [ 66.133621][ C0] ? __pfx_dccp_sendmsg+0x10/0x10 [ 66.135052][ C0] inet_sendmsg+0x119/0x140 [ 66.136319][ C0] ____sys_sendmsg+0x98c/0xc90 [ 66.137651][ C0] ? copy_msghdr_from_user+0x10b/0x160 [ 66.139168][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.140635][ C0] ? kfree+0x274/0x4b0 [ 66.141794][ C0] ? __pfx_lock_release+0x10/0x10 [ 66.143183][ C0] ___sys_sendmsg+0x135/0x1e0 [ 66.144511][ C0] ? __up_read+0x1fb/0x760 [ 66.145754][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.147193][ C0] ? handle_mm_fault+0x497/0xaa0 [ 66.148624][ C0] ? rcu_is_watching+0x12/0xc0 [ 66.150000][ C0] ? __pfx___might_resched+0x10/0x10 [ 66.151485][ C0] ? __might_fault+0xe3/0x190 [ 66.152820][ C0] __sys_sendmmsg+0x201/0x420 [ 66.154259][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 66.155698][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 66.157162][ C0] ? xfd_validate_state+0x5d/0x180 [ 66.158612][ C0] ? rcu_is_watching+0x12/0xc0 [ 66.159979][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 66.161360][ C0] do_syscall_64+0xcd/0x250 [ 66.162650][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.164309][ C0] RIP: 0033:0x7f73c007cd29 [ 66.165594][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 66.171394][ C0] RSP: 002b:00007f73bf3fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 66.173717][ C0] RAX: ffffffffffffffda RBX: 00007f73c01abf80 RCX: 00007f73c007cd29 [ 66.175905][ C0] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 66.178084][ C0] RBP: 00007f73c00c947a R08: 0000000000000000 R09: 0000000000000000 [ 66.180242][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.182436][ C0] R13: 000000000000000b R14: 00007f73c01abf80 R15: 00007fffed764658 [ 66.184649][ C0] 2025/01/16 01:23:53 executed programs: 367 [ 66.664433][ C1] BUG: stored value of X_recv is zero at net/dccp/ccids/ccid3.c:691/ccid3_first_li() [ 66.667182][ C1] CPU: 1 UID: 0 PID: 6964 Comm: syz-executor.0 Not tainted 6.13.0-rc7-syzkaller-g619f0b6fad52 #0 [ 66.670151][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.673213][ C1] Call Trace: [ 66.674324][ C1] [ 66.675349][ C1] dump_stack_lvl+0x16c/0x1f0 [ 66.676696][ C1] ccid3_first_li+0x2fc/0x500 [ 66.678388][ C1] tfrc_lh_interval_add+0x614/0x8d0 [ 66.680444][ C1] ? __pfx_ccid3_first_li+0x10/0x10 [ 66.682401][ C1] ? __pfx_ccid3_first_li+0x10/0x10 [ 66.683963][ C1] tfrc_rx_handle_loss+0xe0c/0x20b0 [ 66.685707][ C1] ccid3_hc_rx_packet_recv+0x372/0xf50 [ 66.687252][ C1] ? __pfx_ccid3_hc_rx_packet_recv+0x10/0x10 [ 66.688964][ C1] dccp_deliver_input_to_ccids+0xe3/0x270 [ 66.690620][ C1] dccp_rcv_established+0x10a/0x160 [ 66.692139][ C1] dccp_v4_do_rcv+0x171/0x1b0 [ 66.693495][ C1] ? __pfx_dccp_v4_do_rcv+0x10/0x10 [ 66.695381][ C1] __sk_receive_skb+0x7aa/0x890 [ 66.697244][ C1] dccp_v4_rcv+0x1153/0x1d30 [ 66.699030][ C1] ? __pfx_dccp_v4_rcv+0x10/0x10 [ 66.700917][ C1] ip_protocol_deliver_rcu+0x441/0x4c0 [ 66.703037][ C1] ip_local_deliver_finish+0x316/0x570 [ 66.705078][ C1] ip_local_deliver+0x18e/0x1f0 [ 66.706594][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 66.708131][ C1] ip_rcv+0x2c3/0x5d0 [ 66.709273][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 66.710575][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 66.712278][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 66.714147][ C1] ? rcu_is_watching+0x12/0xc0 [ 66.715522][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 66.717180][ C1] ? process_backlog+0x3f1/0x15f0 [ 66.718958][ C1] ? process_backlog+0x3f1/0x15f0 [ 66.720684][ C1] __netif_receive_skb+0x1d/0x160 [ 66.722583][ C1] process_backlog+0x443/0x15f0 [ 66.724410][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 66.726406][ C1] net_rx_action+0xa94/0x1010 [ 66.728170][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 66.730063][ C1] ? rcu_is_watching+0x12/0xc0 [ 66.731875][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 66.733814][ C1] ? sched_clock+0x38/0x60 [ 66.735520][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 66.737326][ C1] ? rcu_is_watching+0x12/0xc0 [ 66.739128][ C1] handle_softirqs+0x213/0x8f0 [ 66.740912][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 66.742946][ C1] ? __dev_queue_xmit+0x89b/0x43e0 [ 66.744792][ C1] do_softirq+0xb2/0xf0 [ 66.746177][ C1] [ 66.747295][ C1] [ 66.748324][ C1] __local_bh_enable_ip+0x100/0x120 [ 66.749865][ C1] ? __dev_queue_xmit+0x89b/0x43e0 [ 66.751403][ C1] __dev_queue_xmit+0x8b0/0x43e0 [ 66.753233][ C1] ? ipt_do_table+0xd4c/0x1aa0 [ 66.755147][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 66.756717][ C1] ? ipt_do_table+0xd7c/0x1aa0 [ 66.758180][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 66.759894][ C1] ? selinux_ip_postroute+0x73b/0xde0 [ 66.761555][ C1] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 66.763313][ C1] ? kasan_save_stack+0x42/0x60 [ 66.765216][ C1] ? rcu_is_watching+0x12/0xc0 [ 66.767178][ C1] ? lock_release+0x4e2/0x6f0 [ 66.769096][ C1] ? __ip_finish_output+0x49e/0x950 [ 66.771202][ C1] ? __pfx_lock_release+0x10/0x10 [ 66.773211][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 66.775124][ C1] ? rcu_is_watching+0x12/0xc0 [ 66.776999][ C1] ? __ip_finish_output+0x49e/0x950 [ 66.779019][ C1] ? rcu_is_watching+0x12/0xc0 [ 66.780888][ C1] ip_finish_output2+0xc6c/0x2150 [ 66.782885][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 66.784973][ C1] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 66.786865][ C1] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 66.788891][ C1] ? __pfx_nf_hook+0x10/0x10 [ 66.790702][ C1] __ip_finish_output+0x49e/0x950 [ 66.792668][ C1] ip_finish_output+0x35/0x380 [ 66.794549][ C1] ip_output+0x13b/0x2a0 [ 66.796213][ C1] ? __pfx_ip_output+0x10/0x10 [ 66.798110][ C1] ip_local_out+0x33e/0x4a0 [ 66.799898][ C1] __ip_queue_xmit+0x777/0x1970 [ 66.801853][ C1] ? dccp_v4_send_check+0x282/0x520 [ 66.803875][ C1] dccp_transmit_skb+0xd59/0x1660 [ 66.805852][ C1] dccp_send_sync+0x1c2/0x270 [ 66.807695][ C1] __dccp_rcv_established.constprop.0+0x191/0x420 [ 66.810180][ C1] dccp_rcv_established+0x115/0x160 [ 66.812205][ C1] dccp_v4_do_rcv+0x171/0x1b0 [ 66.813943][ C1] ? __pfx_dccp_v4_do_rcv+0x10/0x10 [ 66.815525][ C1] __release_sock+0x35f/0x400 [ 66.816937][ C1] ? release_sock+0x21/0x220 [ 66.818413][ C1] release_sock+0x5a/0x220 [ 66.820156][ C1] dccp_sendmsg+0x418/0xd10 [ 66.821961][ C1] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 66.824547][ C1] ? __pfx_dccp_sendmsg+0x10/0x10 [ 66.826423][ C1] ? __pfx_dccp_sendmsg+0x10/0x10 [ 66.828157][ C1] inet_sendmsg+0x119/0x140 [ 66.829941][ C1] ____sys_sendmsg+0x98c/0xc90 [ 66.831839][ C1] ? copy_msghdr_from_user+0x10b/0x160 [ 66.833872][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.835899][ C1] ? kfree+0x274/0x4b0 [ 66.837516][ C1] ? __pfx_lock_release+0x10/0x10 [ 66.839497][ C1] ___sys_sendmsg+0x135/0x1e0 [ 66.841347][ C1] ? __up_read+0x1fb/0x760 [ 66.843117][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.845021][ C1] ? handle_mm_fault+0x497/0xaa0 [ 66.846681][ C1] ? rcu_is_watching+0x12/0xc0 [ 66.848071][ C1] ? __pfx___might_resched+0x10/0x10 [ 66.849608][ C1] ? __might_fault+0xe3/0x190 [ 66.850955][ C1] __sys_sendmmsg+0x201/0x420 [ 66.852329][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 66.853820][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 66.855312][ C1] ? __pfx_mem_cgroup_handle_over_high+0x10/0x10 [ 66.857116][ C1] ? __sys_setsockopt+0x1cd/0x230 [ 66.858564][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 66.859991][ C1] do_syscall_64+0xcd/0x250 [ 66.861309][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.863298][ C1] RIP: 0033:0x7f73c007cd29 [ 66.864941][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 66.872596][ C1] RSP: 002b:00007f73bf3fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 66.875925][ C1] RAX: ffffffffffffffda RBX: 00007f73c01abf80 RCX: 00007f73c007cd29 [ 66.879083][ C1] RDX: 000000000000ffc3 RSI: 0000000020001e80 RDI: 0000000000000006 [ 66.881616][ C1] RBP: 00007f73c00c947a R08: 0000000000000000 R09: 0000000000000000 [ 66.884734][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.887880][ C1] R13: 000000000000000b R14: 00007f73c01abf80 R15: 00007fffed764658 [ 66.891052][ C1] [ 66.957128][ C2] Negotiation of local Allow Short Seqnos failed in state CHANGING at net/dccp/feat.c:1538/dccp_feat_activate_values() [ 67.030813][ T6981] net_ratelimit: 172 callbacks suppressed [ 67.030830][ T6981] dccp_xmit_packet: Payload too large (65475) for featneg. [ 67.069825][ T6985] dccp_xmit_packet: Payload too large (65475) for featneg. [ 67.091587][ T6987] dccp_xmit_packet: Payload too large (65475) for featneg. [ 67.121629][ T6991] dccp_xmit_packet: Payload too large (65475) for featneg. [ 67.136325][ T6993] dccp_xmit_packet: Payload too large (65475) for featneg. [ 67.158586][ T6995] dccp_xmit_packet: Payload too large (65475) for featneg.