./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1423079496 <...> Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. execve("./syz-executor1423079496", ["./syz-executor1423079496"], 0x7ffe584a88d0 /* 10 vars */) = 0 brk(NULL) = 0x555556914000 brk(0x555556914d00) = 0x555556914d00 arch_prctl(ARCH_SET_FS, 0x555556914380) = 0 set_tid_address(0x555556914650) = 5016 set_robust_list(0x555556914660, 24) = 0 rseq(0x555556914ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1423079496", 4096) = 28 getrandom("\x50\x8c\x50\xf3\xb3\xd5\x87\xb4", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556914d00 brk(0x555556935d00) = 0x555556935d00 brk(0x555556936000) = 0x555556936000 mprotect(0x7ff622106000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5017 attached , child_tidptr=0x555556914650) = 5017 [pid 5017] set_robust_list(0x555556914660, 24) = 0 [pid 5017] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5017] setpgid(0, 0) = 0 [pid 5017] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5017] write(3, "1000", 4) = 4 [pid 5017] close(3) = 0 [pid 5017] socket(AF_INET6, SOCK_DCCP, IPPROTO_IP) = 3 [pid 5017] bind(3, {sa_family=AF_INET6, sin6_port=htons(20000), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::", &sin6_addr), sin6_scope_id=0}, 28) = 0 [pid 5017] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5017] listen(3, 6) = 0 [pid 5017] setsockopt(4, SOL_DCCP, DCCP_SOCKOPT_CCID, "\x03", 1) = 0 [pid 5017] connect(4, {sa_family=AF_INET, sin_port=htons(20000), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 [pid 5017] sendto(4, "\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65475, 0, NULL, 0) = 65475 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5017] exit_group(0) = ? [pid 5017] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5017, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556914650) = 5018 ./strace-static-x86_64: Process 5018 attached [pid 5018] set_robust_list(0x555556914660, 24) = 0 [pid 5018] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5018] setpgid(0, 0) = 0 [ 68.565169][ T5017] dccp_xmit_packet: Payload too large (65475) for featneg. [pid 5018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5018] write(3, "1000", 4) = 4 [pid 5018] close(3) = 0 [pid 5018] socket(AF_INET6, SOCK_DCCP, IPPROTO_IP) = 3 [pid 5018] bind(3, {sa_family=AF_INET6, sin6_port=htons(20000), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::", &sin6_addr), sin6_scope_id=0}, 28) = 0 [pid 5018] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5018] listen(3, 6) = 0 [pid 5018] setsockopt(4, SOL_DCCP, DCCP_SOCKOPT_CCID, "\x03", 1) = 0 [pid 5018] connect(4, {sa_family=AF_INET, sin_port=htons(20000), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 [pid 5018] sendto(4, "\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65475, 0, NULL, 0) = 65475 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 68.643466][ T5018] dccp_xmit_packet: Payload too large (65475) for featneg. [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 68.691920][ T5018] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 68.704080][ T5018] CPU: 0 PID: 5018 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 68.714538][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 68.724631][ T5018] Call Trace: [ 68.727938][ T5018] [ 68.730879][ T5018] dump_stack_lvl+0x1e7/0x2d0 [ 68.735597][ T5018] ? nf_tcp_handle_invalid+0x650/0x650 [ 68.741071][ T5018] ? panic+0x770/0x770 [ 68.745170][ T5018] ? dccp_transmit_skb+0xdcb/0x1420 [ 68.750451][ T5018] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 68.755937][ T5018] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 68.761596][ T5018] dccp_xmit_packet+0x35a/0x530 [ 68.766464][ T5018] ? dccp_write_xmit+0x129/0x220 [ 68.771422][ T5018] dccp_write_xmit+0x135/0x220 [ 68.776208][ T5018] dccp_sendmsg+0x666/0x9e0 [ 68.780734][ T5018] ? dccp_getsockopt+0x1910/0x1910 [ 68.785867][ T5018] ? finish_task_switch+0x134/0x650 [ 68.791087][ T5018] ? inet_sendmsg+0x85/0x310 [ 68.795689][ T5018] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 68.800980][ T5018] ? security_socket_sendmsg+0x81/0xa0 [ 68.806454][ T5018] ? inet_send_prepare+0x250/0x250 [ 68.811590][ T5018] ____sys_sendmsg+0x592/0x890 [ 68.816387][ T5018] ? __sys_sendmsg_sock+0x30/0x30 [ 68.821448][ T5018] __sys_sendmsg+0x2b0/0x3a0 [ 68.826070][ T5018] ? ____sys_sendmsg+0x890/0x890 [ 68.831035][ T5018] ? print_irqtrace_events+0x220/0x220 [ 68.836514][ T5018] ? ptrace_stop+0x75a/0x970 [ 68.841135][ T5018] ? _raw_spin_unlock_irq+0x2e/0x50 [ 68.846356][ T5018] ? ptrace_notify+0x278/0x380 [ 68.851142][ T5018] ? syscall_enter_from_user_mode+0x32/0x230 [ 68.857140][ T5018] ? syscall_enter_from_user_mode+0x8c/0x230 [ 68.863162][ T5018] do_syscall_64+0x41/0xc0 [ 68.867607][ T5018] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 68.873524][ T5018] RIP: 0033:0x7ff622093b79 [ 68.877953][ T5018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 68.897569][ T5018] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.905997][ T5018] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007ff622093b79 [ 68.913993][ T5018] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 68.921984][ T5018] RBP: 0000000000010ba2 R08: 0000000000000006 R09: 0000000000000006 [ 68.929975][ T5018] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 68.937960][ T5018] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 68.945956][ T5018] [ 68.954222][ T5018] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 68.965634][ T5018] CPU: 0 PID: 5018 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 68.976077][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 68.986156][ T5018] Call Trace: [ 68.989457][ T5018] [ 68.992431][ T5018] dump_stack_lvl+0x1e7/0x2d0 [ 68.997142][ T5018] ? nf_tcp_handle_invalid+0x650/0x650 [ 69.002624][ T5018] ? panic+0x770/0x770 [ 69.006729][ T5018] ? dccp_transmit_skb+0xdcb/0x1420 [ 69.011953][ T5018] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 69.017425][ T5018] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 69.023077][ T5018] dccp_xmit_packet+0x35a/0x530 [ 69.027938][ T5018] ? dccp_write_xmit+0x129/0x220 [ 69.032892][ T5018] dccp_write_xmit+0x135/0x220 [ 69.037672][ T5018] dccp_sendmsg+0x666/0x9e0 [ 69.042220][ T5018] ? dccp_getsockopt+0x1910/0x1910 [ 69.047346][ T5018] ? finish_task_switch+0x134/0x650 [ 69.052577][ T5018] ? inet_sendmsg+0x85/0x310 [ 69.057205][ T5018] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 69.062504][ T5018] ? security_socket_sendmsg+0x81/0xa0 [ 69.067977][ T5018] ? inet_send_prepare+0x250/0x250 [ 69.073101][ T5018] ____sys_sendmsg+0x592/0x890 [ 69.077887][ T5018] ? __sys_sendmsg_sock+0x30/0x30 [ 69.082932][ T5018] __sys_sendmsg+0x2b0/0x3a0 [ 69.087536][ T5018] ? ____sys_sendmsg+0x890/0x890 [ 69.092522][ T5018] ? print_irqtrace_events+0x220/0x220 [ 69.098010][ T5018] ? ptrace_stop+0x75a/0x970 [ 69.102624][ T5018] ? _raw_spin_unlock_irq+0x2e/0x50 [ 69.107837][ T5018] ? ptrace_notify+0x278/0x380 [ 69.112620][ T5018] ? syscall_enter_from_user_mode+0x32/0x230 [ 69.118647][ T5018] ? syscall_enter_from_user_mode+0x8c/0x230 [ 69.124643][ T5018] do_syscall_64+0x41/0xc0 [ 69.129072][ T5018] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 69.134991][ T5018] RIP: 0033:0x7ff622093b79 [ 69.139415][ T5018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 69.159032][ T5018] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.167457][ T5018] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007ff622093b79 [ 69.175437][ T5018] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 69.183414][ T5018] RBP: 0000000000010ba2 R08: 0000000000000006 R09: 0000000000000006 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 69.191393][ T5018] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 69.199372][ T5018] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 69.207367][ T5018] [ 69.215340][ T5018] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 69.226573][ T5018] CPU: 0 PID: 5018 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 69.236989][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 69.247052][ T5018] Call Trace: [ 69.250435][ T5018] [ 69.253392][ T5018] dump_stack_lvl+0x1e7/0x2d0 [ 69.258117][ T5018] ? nf_tcp_handle_invalid+0x650/0x650 [ 69.263603][ T5018] ? panic+0x770/0x770 [ 69.267686][ T5018] ? dccp_transmit_skb+0xdcb/0x1420 [ 69.272901][ T5018] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 69.278402][ T5018] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 69.284066][ T5018] dccp_xmit_packet+0x35a/0x530 [ 69.288939][ T5018] ? dccp_write_xmit+0x129/0x220 [ 69.293904][ T5018] dccp_write_xmit+0x135/0x220 [ 69.298704][ T5018] dccp_sendmsg+0x666/0x9e0 [ 69.303226][ T5018] ? dccp_getsockopt+0x1910/0x1910 [ 69.308358][ T5018] ? finish_task_switch+0x134/0x650 [ 69.313677][ T5018] ? inet_sendmsg+0x85/0x310 [ 69.318304][ T5018] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 69.323606][ T5018] ? security_socket_sendmsg+0x81/0xa0 [ 69.329086][ T5018] ? inet_send_prepare+0x250/0x250 [ 69.334210][ T5018] ____sys_sendmsg+0x592/0x890 [ 69.338996][ T5018] ? __sys_sendmsg_sock+0x30/0x30 [ 69.344041][ T5018] __sys_sendmsg+0x2b0/0x3a0 [ 69.348640][ T5018] ? ____sys_sendmsg+0x890/0x890 [ 69.353593][ T5018] ? print_irqtrace_events+0x220/0x220 [ 69.359084][ T5018] ? ptrace_stop+0x75a/0x970 [ 69.363730][ T5018] ? _raw_spin_unlock_irq+0x2e/0x50 [ 69.368949][ T5018] ? ptrace_notify+0x278/0x380 [ 69.373739][ T5018] ? syscall_enter_from_user_mode+0x32/0x230 [ 69.379740][ T5018] ? syscall_enter_from_user_mode+0x8c/0x230 [ 69.385742][ T5018] do_syscall_64+0x41/0xc0 [ 69.390185][ T5018] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 69.396095][ T5018] RIP: 0033:0x7ff622093b79 [ 69.400520][ T5018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 69.420140][ T5018] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.429267][ T5018] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007ff622093b79 [ 69.437273][ T5018] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 69.445267][ T5018] RBP: 0000000000010ba2 R08: 0000000000000006 R09: 0000000000000006 [ 69.453263][ T5018] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 69.461271][ T5018] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 69.469297][ T5018] [ 69.476216][ T5018] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 69.487740][ T5018] CPU: 1 PID: 5018 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 69.498161][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 69.508222][ T5018] Call Trace: [ 69.511501][ T5018] [ 69.514433][ T5018] dump_stack_lvl+0x1e7/0x2d0 [ 69.519121][ T5018] ? nf_tcp_handle_invalid+0x650/0x650 [ 69.524584][ T5018] ? panic+0x770/0x770 [ 69.528672][ T5018] ? dccp_transmit_skb+0xdcb/0x1420 [ 69.533886][ T5018] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 69.539356][ T5018] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 69.545008][ T5018] dccp_xmit_packet+0x35a/0x530 [ 69.549882][ T5018] ? dccp_write_xmit+0x129/0x220 [ 69.554838][ T5018] dccp_write_xmit+0x135/0x220 [ 69.559665][ T5018] dccp_sendmsg+0x666/0x9e0 [ 69.564202][ T5018] ? dccp_getsockopt+0x1910/0x1910 [ 69.569361][ T5018] ? finish_task_switch+0x134/0x650 [ 69.574585][ T5018] ? inet_sendmsg+0x85/0x310 [ 69.579193][ T5018] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 69.584515][ T5018] ? security_socket_sendmsg+0x81/0xa0 [ 69.590034][ T5018] ? inet_send_prepare+0x250/0x250 [ 69.595187][ T5018] ____sys_sendmsg+0x592/0x890 [ 69.600010][ T5018] ? __sys_sendmsg_sock+0x30/0x30 [ 69.605081][ T5018] __sys_sendmsg+0x2b0/0x3a0 [ 69.609691][ T5018] ? ____sys_sendmsg+0x890/0x890 [ 69.614638][ T5018] ? print_irqtrace_events+0x220/0x220 [ 69.620106][ T5018] ? ptrace_stop+0x75a/0x970 [ 69.624708][ T5018] ? _raw_spin_unlock_irq+0x2e/0x50 [ 69.629917][ T5018] ? ptrace_notify+0x278/0x380 [ 69.634696][ T5018] ? syscall_enter_from_user_mode+0x32/0x230 [ 69.640706][ T5018] ? syscall_enter_from_user_mode+0x8c/0x230 [ 69.646714][ T5018] do_syscall_64+0x41/0xc0 [ 69.651148][ T5018] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 69.657056][ T5018] RIP: 0033:0x7ff622093b79 [ 69.661474][ T5018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 69.681097][ T5018] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 69.689523][ T5018] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007ff622093b79 [ 69.697504][ T5018] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 69.705475][ T5018] RBP: 0000000000010ba2 R08: 0000000000000006 R09: 0000000000000006 [ 69.713446][ T5018] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 69.721426][ T5018] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 69.729502][ T5018] [ 69.734137][ T5018] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 69.745796][ T5018] CPU: 1 PID: 5018 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 69.756228][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 69.766295][ T5018] Call Trace: [ 69.769581][ T5018] [ 69.772512][ T5018] dump_stack_lvl+0x1e7/0x2d0 [ 69.777288][ T5018] ? nf_tcp_handle_invalid+0x650/0x650 [ 69.782763][ T5018] ? panic+0x770/0x770 [ 69.786844][ T5018] ? dccp_transmit_skb+0xdcb/0x1420 [ 69.792052][ T5018] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 69.797519][ T5018] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 69.803178][ T5018] dccp_xmit_packet+0x35a/0x530 [ 69.808051][ T5018] ? dccp_write_xmit+0x129/0x220 [ 69.813021][ T5018] dccp_write_xmit+0x135/0x220 [ 69.817914][ T5018] dccp_sendmsg+0x666/0x9e0 [ 69.822697][ T5018] ? dccp_getsockopt+0x1910/0x1910 [ 69.827933][ T5018] ? finish_task_switch+0x134/0x650 [ 69.833466][ T5018] ? inet_sendmsg+0x85/0x310 [ 69.838369][ T5018] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 69.847524][ T5018] ? security_socket_sendmsg+0x81/0xa0 [ 69.853159][ T5018] ? inet_send_prepare+0x250/0x250 [ 69.858391][ T5018] ____sys_sendmsg+0x592/0x890 [ 69.863211][ T5018] ? __sys_sendmsg_sock+0x30/0x30 [ 69.868282][ T5018] __sys_sendmsg+0x2b0/0x3a0 [ 69.872937][ T5018] ? ____sys_sendmsg+0x890/0x890 [ 69.877917][ T5018] ? print_irqtrace_events+0x220/0x220 [ 69.883415][ T5018] ? ptrace_stop+0x75a/0x970 [ 69.888041][ T5018] ? _raw_spin_unlock_irq+0x2e/0x50 [ 69.893257][ T5018] ? ptrace_notify+0x278/0x380 [ 69.898067][ T5018] ? syscall_enter_from_user_mode+0x32/0x230 [ 69.904063][ T5018] ? syscall_enter_from_user_mode+0x8c/0x230 [ 69.910160][ T5018] do_syscall_64+0x41/0xc0 [ 69.914596][ T5018] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 69.920548][ T5018] RIP: 0033:0x7ff622093b79 [ 69.924981][ T5018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 69.944621][ T5018] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.953057][ T5018] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007ff622093b79 [ 69.961560][ T5018] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 69.969538][ T5018] RBP: 0000000000010ba2 R08: 0000000000000006 R09: 0000000000000006 [ 69.977511][ T5018] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 69.985494][ T5018] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 69.993476][ T5018] [ 69.997890][ T5018] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 70.009266][ T5018] CPU: 0 PID: 5018 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 70.019818][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 70.030005][ T5018] Call Trace: [ 70.033328][ T5018] [ 70.036291][ T5018] dump_stack_lvl+0x1e7/0x2d0 [ 70.041026][ T5018] ? nf_tcp_handle_invalid+0x650/0x650 [ 70.046508][ T5018] ? panic+0x770/0x770 [ 70.050612][ T5018] ? dccp_transmit_skb+0xdcb/0x1420 [ 70.055829][ T5018] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 70.061315][ T5018] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 70.067009][ T5018] dccp_xmit_packet+0x35a/0x530 [ 70.071909][ T5018] ? dccp_write_xmit+0x129/0x220 [ 70.076888][ T5018] dccp_write_xmit+0x135/0x220 [ 70.081671][ T5018] dccp_sendmsg+0x666/0x9e0 [ 70.086193][ T5018] ? dccp_getsockopt+0x1910/0x1910 [ 70.091314][ T5018] ? finish_task_switch+0x134/0x650 [ 70.096542][ T5018] ? inet_sendmsg+0x85/0x310 [ 70.101159][ T5018] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 70.106492][ T5018] ? security_socket_sendmsg+0x81/0xa0 [ 70.111976][ T5018] ? inet_send_prepare+0x250/0x250 [ 70.117112][ T5018] ____sys_sendmsg+0x592/0x890 [ 70.121920][ T5018] ? __sys_sendmsg_sock+0x30/0x30 [ 70.126974][ T5018] __sys_sendmsg+0x2b0/0x3a0 [ 70.131575][ T5018] ? ____sys_sendmsg+0x890/0x890 [ 70.136533][ T5018] ? print_irqtrace_events+0x220/0x220 [ 70.144290][ T5018] ? ptrace_stop+0x75a/0x970 [ 70.148932][ T5018] ? _raw_spin_unlock_irq+0x2e/0x50 [ 70.154156][ T5018] ? ptrace_notify+0x278/0x380 [ 70.158963][ T5018] ? syscall_enter_from_user_mode+0x32/0x230 [ 70.164987][ T5018] ? syscall_enter_from_user_mode+0x8c/0x230 [ 70.171010][ T5018] do_syscall_64+0x41/0xc0 [ 70.175447][ T5018] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.181369][ T5018] RIP: 0033:0x7ff622093b79 [ 70.186579][ T5018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.206455][ T5018] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.214894][ T5018] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007ff622093b79 [ 70.222895][ T5018] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 70.230992][ T5018] RBP: 0000000000010ba2 R08: 0000000000000006 R09: 0000000000000006 [ 70.239432][ T5018] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 70.247529][ T5018] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 70.255536][ T5018] [ 70.263787][ T5018] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 70.275146][ T5018] CPU: 0 PID: 5018 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 70.285591][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 70.295676][ T5018] Call Trace: [ 70.298979][ T5018] [ 70.301922][ T5018] dump_stack_lvl+0x1e7/0x2d0 [ 70.306695][ T5018] ? nf_tcp_handle_invalid+0x650/0x650 [ 70.312193][ T5018] ? panic+0x770/0x770 [ 70.316293][ T5018] ? dccp_transmit_skb+0xdcb/0x1420 [ 70.321624][ T5018] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 70.327119][ T5018] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 70.332787][ T5018] dccp_xmit_packet+0x35a/0x530 [ 70.337669][ T5018] ? dccp_write_xmit+0x129/0x220 [ 70.342643][ T5018] dccp_write_xmit+0x135/0x220 [ 70.347447][ T5018] dccp_sendmsg+0x666/0x9e0 [ 70.351982][ T5018] ? dccp_getsockopt+0x1910/0x1910 [ 70.357127][ T5018] ? finish_task_switch+0x134/0x650 [ 70.362426][ T5018] ? inet_sendmsg+0x85/0x310 [ 70.367043][ T5018] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 70.372345][ T5018] ? security_socket_sendmsg+0x81/0xa0 [ 70.377846][ T5018] ? inet_send_prepare+0x250/0x250 [ 70.383106][ T5018] ____sys_sendmsg+0x592/0x890 [ 70.387908][ T5018] ? __sys_sendmsg_sock+0x30/0x30 [ 70.392991][ T5018] __sys_sendmsg+0x2b0/0x3a0 [ 70.397616][ T5018] ? ____sys_sendmsg+0x890/0x890 [ 70.402592][ T5018] ? print_irqtrace_events+0x220/0x220 [ 70.408095][ T5018] ? ptrace_stop+0x75a/0x970 [ 70.412728][ T5018] ? _raw_spin_unlock_irq+0x2e/0x50 [ 70.417959][ T5018] ? ptrace_notify+0x278/0x380 [ 70.423149][ T5018] ? syscall_enter_from_user_mode+0x32/0x230 [ 70.429154][ T5018] ? syscall_enter_from_user_mode+0x8c/0x230 [ 70.435254][ T5018] do_syscall_64+0x41/0xc0 [ 70.439932][ T5018] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.445865][ T5018] RIP: 0033:0x7ff622093b79 [ 70.450288][ T5018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.470185][ T5018] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.478647][ T5018] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007ff622093b79 [ 70.486651][ T5018] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 70.494635][ T5018] RBP: 0000000000010ba2 R08: 0000000000000006 R09: 0000000000000006 [ 70.502623][ T5018] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 70.510687][ T5018] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 70.518869][ T5018] [ 70.525663][ T5018] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 70.536939][ T5018] CPU: 0 PID: 5018 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 70.547403][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 70.557472][ T5018] Call Trace: [ 70.560761][ T5018] [ 70.563698][ T5018] dump_stack_lvl+0x1e7/0x2d0 [ 70.568409][ T5018] ? nf_tcp_handle_invalid+0x650/0x650 [ 70.573943][ T5018] ? panic+0x770/0x770 [ 70.578061][ T5018] ? dccp_transmit_skb+0xdcb/0x1420 [ 70.583308][ T5018] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 70.588818][ T5018] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 70.594570][ T5018] dccp_xmit_packet+0x35a/0x530 [ 70.599476][ T5018] ? dccp_write_xmit+0x129/0x220 [ 70.604623][ T5018] dccp_write_xmit+0x135/0x220 [ 70.609428][ T5018] dccp_sendmsg+0x666/0x9e0 [ 70.613965][ T5018] ? dccp_getsockopt+0x1910/0x1910 [ 70.619117][ T5018] ? finish_task_switch+0x134/0x650 [ 70.624362][ T5018] ? inet_sendmsg+0x85/0x310 [ 70.628981][ T5018] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 70.634288][ T5018] ? security_socket_sendmsg+0x81/0xa0 [ 70.639764][ T5018] ? inet_send_prepare+0x250/0x250 [ 70.644889][ T5018] ____sys_sendmsg+0x592/0x890 [ 70.649666][ T5018] ? __sys_sendmsg_sock+0x30/0x30 [ 70.654708][ T5018] __sys_sendmsg+0x2b0/0x3a0 [ 70.659309][ T5018] ? ____sys_sendmsg+0x890/0x890 [ 70.664260][ T5018] ? print_irqtrace_events+0x220/0x220 [ 70.669736][ T5018] ? ptrace_stop+0x75a/0x970 [ 70.674346][ T5018] ? _raw_spin_unlock_irq+0x2e/0x50 [ 70.679577][ T5018] ? ptrace_notify+0x278/0x380 [ 70.684389][ T5018] ? syscall_enter_from_user_mode+0x32/0x230 [ 70.690404][ T5018] ? syscall_enter_from_user_mode+0x8c/0x230 [ 70.696404][ T5018] do_syscall_64+0x41/0xc0 [ 70.700860][ T5018] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.706791][ T5018] RIP: 0033:0x7ff622093b79 [ 70.711231][ T5018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.730862][ T5018] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.739292][ T5018] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007ff622093b79 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 70.747269][ T5018] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 70.755245][ T5018] RBP: 0000000000010ba2 R08: 0000000000000006 R09: 0000000000000006 [ 70.763221][ T5018] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 70.771200][ T5018] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 70.779193][ T5018] [ 70.787304][ T5018] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 70.798547][ T5018] CPU: 0 PID: 5018 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 70.808964][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 70.819023][ T5018] Call Trace: [ 70.822307][ T5018] [ 70.825253][ T5018] dump_stack_lvl+0x1e7/0x2d0 [ 70.829977][ T5018] ? nf_tcp_handle_invalid+0x650/0x650 [ 70.835464][ T5018] ? panic+0x770/0x770 [ 70.839636][ T5018] ? dccp_transmit_skb+0xdcb/0x1420 [ 70.844855][ T5018] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 70.850333][ T5018] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 70.855978][ T5018] dccp_xmit_packet+0x35a/0x530 [ 70.860843][ T5018] ? dccp_write_xmit+0x129/0x220 [ 70.865802][ T5018] dccp_write_xmit+0x135/0x220 [ 70.870589][ T5018] dccp_sendmsg+0x666/0x9e0 [ 70.875107][ T5018] ? dccp_getsockopt+0x1910/0x1910 [ 70.880229][ T5018] ? finish_task_switch+0x134/0x650 [ 70.885443][ T5018] ? inet_sendmsg+0x85/0x310 [ 70.890045][ T5018] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 70.895343][ T5018] ? security_socket_sendmsg+0x81/0xa0 [ 70.900814][ T5018] ? inet_send_prepare+0x250/0x250 [ 70.905942][ T5018] ____sys_sendmsg+0x592/0x890 [ 70.910726][ T5018] ? __sys_sendmsg_sock+0x30/0x30 [ 70.915780][ T5018] __sys_sendmsg+0x2b0/0x3a0 [ 70.920383][ T5018] ? ____sys_sendmsg+0x890/0x890 [ 70.925426][ T5018] ? print_irqtrace_events+0x220/0x220 [ 70.930922][ T5018] ? ptrace_stop+0x75a/0x970 [ 70.935536][ T5018] ? _raw_spin_unlock_irq+0x2e/0x50 [ 70.940753][ T5018] ? ptrace_notify+0x278/0x380 [ 70.945542][ T5018] ? syscall_enter_from_user_mode+0x32/0x230 [ 70.951539][ T5018] ? syscall_enter_from_user_mode+0x8c/0x230 [ 70.957532][ T5018] do_syscall_64+0x41/0xc0 [ 70.961971][ T5018] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.967884][ T5018] RIP: 0033:0x7ff622093b79 [ 70.972307][ T5018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.992006][ T5018] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 71.000429][ T5018] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff622093b79 [ 71.008437][ T5018] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 71.016424][ T5018] RBP: 0000000000010ba2 R08: 0000000000000006 R09: 0000000000000006 [ 71.024408][ T5018] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 71.032472][ T5018] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 71.040468][ T5018] [ 71.045967][ T5018] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 71.057467][ T5018] CPU: 1 PID: 5018 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 71.067918][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 71.077996][ T5018] Call Trace: [ 71.081379][ T5018] [ 71.084342][ T5018] dump_stack_lvl+0x1e7/0x2d0 [ 71.089225][ T5018] ? nf_tcp_handle_invalid+0x650/0x650 [ 71.094705][ T5018] ? panic+0x770/0x770 [ 71.098817][ T5018] ? dccp_transmit_skb+0xdcb/0x1420 [ 71.104055][ T5018] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 71.109530][ T5018] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 71.115193][ T5018] dccp_xmit_packet+0x35a/0x530 [ 71.120090][ T5018] ? dccp_write_xmit+0x129/0x220 [ 71.125063][ T5018] dccp_write_xmit+0x135/0x220 [ 71.129866][ T5018] dccp_sendmsg+0x666/0x9e0 [ 71.134390][ T5018] ? dccp_getsockopt+0x1910/0x1910 [ 71.139532][ T5018] ? finish_task_switch+0x134/0x650 [ 71.144764][ T5018] ? inet_sendmsg+0x85/0x310 [ 71.149378][ T5018] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 71.154680][ T5018] ? security_socket_sendmsg+0x81/0xa0 [ 71.160159][ T5018] ? inet_send_prepare+0x250/0x250 [ 71.165298][ T5018] ____sys_sendmsg+0x592/0x890 [ 71.170086][ T5018] ? __sys_sendmsg_sock+0x30/0x30 [ 71.175135][ T5018] __sys_sendmsg+0x2b0/0x3a0 [ 71.179734][ T5018] ? ____sys_sendmsg+0x890/0x890 [ 71.184692][ T5018] ? print_irqtrace_events+0x220/0x220 [ 71.190168][ T5018] ? ptrace_stop+0x75a/0x970 [ 71.194780][ T5018] ? _raw_spin_unlock_irq+0x2e/0x50 [ 71.199990][ T5018] ? ptrace_notify+0x278/0x380 [ 71.204781][ T5018] ? syscall_enter_from_user_mode+0x32/0x230 [ 71.210777][ T5018] ? syscall_enter_from_user_mode+0x8c/0x230 [ 71.216777][ T5018] do_syscall_64+0x41/0xc0 [ 71.221204][ T5018] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.227116][ T5018] RIP: 0033:0x7ff622093b79 [ 71.231541][ T5018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 71.251153][ T5018] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.259579][ T5018] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff622093b79 [ 71.267585][ T5018] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 71.275652][ T5018] RBP: 0000000000010ba2 R08: 0000000000000006 R09: 0000000000000006 [ 71.283631][ T5018] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 71.291626][ T5018] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 71.299644][ T5018] [ 71.304530][ T5018] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 71.316180][ T5018] CPU: 1 PID: 5018 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 71.326652][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 71.336716][ T5018] Call Trace: [ 71.340007][ T5018] [ 71.342961][ T5018] dump_stack_lvl+0x1e7/0x2d0 [ 71.347714][ T5018] ? nf_tcp_handle_invalid+0x650/0x650 [ 71.353200][ T5018] ? panic+0x770/0x770 [ 71.357312][ T5018] ? dccp_transmit_skb+0xdcb/0x1420 [ 71.362549][ T5018] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 71.368023][ T5018] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 71.373682][ T5018] dccp_xmit_packet+0x35a/0x530 [ 71.378553][ T5018] ? dccp_write_xmit+0x129/0x220 [ 71.383554][ T5018] dccp_write_xmit+0x135/0x220 [ 71.388347][ T5018] dccp_sendmsg+0x666/0x9e0 [ 71.392906][ T5018] ? dccp_getsockopt+0x1910/0x1910 [ 71.398032][ T5018] ? finish_task_switch+0x134/0x650 [ 71.403259][ T5018] ? inet_sendmsg+0x85/0x310 [ 71.407887][ T5018] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 71.413220][ T5018] ? security_socket_sendmsg+0x81/0xa0 [ 71.418714][ T5018] ? inet_send_prepare+0x250/0x250 [ 71.423839][ T5018] ____sys_sendmsg+0x592/0x890 [ 71.428620][ T5018] ? __sys_sendmsg_sock+0x30/0x30 [ 71.433675][ T5018] __sys_sendmsg+0x2b0/0x3a0 [ 71.438277][ T5018] ? ____sys_sendmsg+0x890/0x890 [ 71.443232][ T5018] ? print_irqtrace_events+0x220/0x220 [ 71.448726][ T5018] ? ptrace_stop+0x75a/0x970 [ 71.453370][ T5018] ? _raw_spin_unlock_irq+0x2e/0x50 [ 71.458602][ T5018] ? ptrace_notify+0x278/0x380 [ 71.463410][ T5018] ? syscall_enter_from_user_mode+0x32/0x230 [ 71.469412][ T5018] ? syscall_enter_from_user_mode+0x8c/0x230 [ 71.475426][ T5018] do_syscall_64+0x41/0xc0 [ 71.479960][ T5018] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.485879][ T5018] RIP: 0033:0x7ff622093b79 [ 71.490478][ T5018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 71.510283][ T5018] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.518902][ T5018] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ff622093b79 [ 71.526889][ T5018] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 71.534955][ T5018] RBP: 0000000000010ba2 R08: 0000000000000006 R09: 0000000000000006 [ 71.542958][ T5018] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [pid 5018] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5018] exit_group(0) = ? [pid 5018] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5018, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556914650) = 5019 ./strace-static-x86_64: Process 5019 attached [pid 5019] set_robust_list(0x555556914660, 24) = 0 [pid 5019] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5019] setpgid(0, 0) = 0 [pid 5019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5019] write(3, "1000", 4) = 4 [pid 5019] close(3) = 0 [pid 5019] socket(AF_INET6, SOCK_DCCP, IPPROTO_IP) = 3 [pid 5019] bind(3, {sa_family=AF_INET6, sin6_port=htons(20000), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::", &sin6_addr), sin6_scope_id=0}, 28) = 0 [pid 5019] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5019] listen(3, 6) = 0 [pid 5019] setsockopt(4, SOL_DCCP, DCCP_SOCKOPT_CCID, "\x03", 1) = 0 [pid 5019] connect(4, {sa_family=AF_INET, sin_port=htons(20000), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 [pid 5019] sendto(4, "\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65475, 0, NULL, 0) = 65475 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 71.550954][ T5018] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 71.559111][ T5018] [ 71.585278][ T5019] dccp_xmit_packet: Payload too large (65475) for featneg. [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 71.622249][ T5019] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 71.634400][ T5019] CPU: 0 PID: 5019 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 71.644863][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 71.655027][ T5019] Call Trace: [ 71.658336][ T5019] [ 71.661295][ T5019] dump_stack_lvl+0x1e7/0x2d0 [ 71.666005][ T5019] ? nf_tcp_handle_invalid+0x650/0x650 [ 71.671474][ T5019] ? panic+0x770/0x770 [ 71.675579][ T5019] ? dccp_transmit_skb+0xdcb/0x1420 [ 71.680816][ T5019] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 71.686395][ T5019] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 71.692160][ T5019] dccp_xmit_packet+0x35a/0x530 [ 71.697040][ T5019] ? dccp_write_xmit+0x129/0x220 [ 71.702016][ T5019] dccp_write_xmit+0x135/0x220 [ 71.706915][ T5019] dccp_sendmsg+0x666/0x9e0 [ 71.711495][ T5019] ? dccp_getsockopt+0x1910/0x1910 [ 71.716653][ T5019] ? finish_task_switch+0x134/0x650 [ 71.721896][ T5019] ? inet_sendmsg+0x85/0x310 [ 71.726764][ T5019] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 71.732085][ T5019] ? security_socket_sendmsg+0x81/0xa0 [ 71.737654][ T5019] ? inet_send_prepare+0x250/0x250 [ 71.742794][ T5019] ____sys_sendmsg+0x592/0x890 [ 71.747573][ T5019] ? __sys_sendmsg_sock+0x30/0x30 [ 71.752633][ T5019] __sys_sendmsg+0x2b0/0x3a0 [ 71.757334][ T5019] ? ____sys_sendmsg+0x890/0x890 [ 71.762299][ T5019] ? print_irqtrace_events+0x220/0x220 [ 71.767774][ T5019] ? ptrace_stop+0x75a/0x970 [ 71.772386][ T5019] ? _raw_spin_unlock_irq+0x2e/0x50 [ 71.777596][ T5019] ? ptrace_notify+0x278/0x380 [ 71.782393][ T5019] ? syscall_enter_from_user_mode+0x32/0x230 [ 71.788403][ T5019] ? syscall_enter_from_user_mode+0x8c/0x230 [ 71.794449][ T5019] do_syscall_64+0x41/0xc0 [ 71.798917][ T5019] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.804861][ T5019] RIP: 0033:0x7ff622093b79 [ 71.809290][ T5019] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 71.828938][ T5019] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.837692][ T5019] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007ff622093b79 [ 71.845876][ T5019] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 71.853867][ T5019] RBP: 0000000000010bec R08: 0000000000000006 R09: 0000000000000006 [ 71.861955][ T5019] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 71.870052][ T5019] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 71.878064][ T5019] [ 71.883332][ T5019] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 71.894657][ T5019] CPU: 0 PID: 5019 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 71.905109][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 71.915186][ T5019] Call Trace: [ 71.918493][ T5019] [ 71.921457][ T5019] dump_stack_lvl+0x1e7/0x2d0 [ 71.926171][ T5019] ? nf_tcp_handle_invalid+0x650/0x650 [ 71.931649][ T5019] ? panic+0x770/0x770 [ 71.935759][ T5019] ? dccp_transmit_skb+0xdcb/0x1420 [ 71.940994][ T5019] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 71.946481][ T5019] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 71.952155][ T5019] dccp_xmit_packet+0x35a/0x530 [ 71.957035][ T5019] ? dccp_write_xmit+0x129/0x220 [ 71.961997][ T5019] dccp_write_xmit+0x135/0x220 [ 71.966792][ T5019] dccp_sendmsg+0x666/0x9e0 [ 71.971330][ T5019] ? dccp_getsockopt+0x1910/0x1910 [ 71.976474][ T5019] ? finish_task_switch+0x134/0x650 [ 71.981703][ T5019] ? inet_sendmsg+0x85/0x310 [ 71.986312][ T5019] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 71.991604][ T5019] ? security_socket_sendmsg+0x81/0xa0 [ 71.997174][ T5019] ? inet_send_prepare+0x250/0x250 [ 72.002325][ T5019] ____sys_sendmsg+0x592/0x890 [ 72.007135][ T5019] ? __sys_sendmsg_sock+0x30/0x30 [ 72.012205][ T5019] __sys_sendmsg+0x2b0/0x3a0 [ 72.016804][ T5019] ? ____sys_sendmsg+0x890/0x890 [ 72.021848][ T5019] ? print_irqtrace_events+0x220/0x220 [ 72.027328][ T5019] ? ptrace_stop+0x75a/0x970 [ 72.031956][ T5019] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.037175][ T5019] ? ptrace_notify+0x278/0x380 [ 72.041975][ T5019] ? syscall_enter_from_user_mode+0x32/0x230 [ 72.047973][ T5019] ? syscall_enter_from_user_mode+0x8c/0x230 [ 72.053968][ T5019] do_syscall_64+0x41/0xc0 [ 72.058421][ T5019] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.064363][ T5019] RIP: 0033:0x7ff622093b79 [ 72.068806][ T5019] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.088438][ T5019] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.096863][ T5019] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007ff622093b79 [ 72.104845][ T5019] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 72.112835][ T5019] RBP: 0000000000010bec R08: 0000000000000006 R09: 0000000000000006 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 72.120832][ T5019] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 72.128816][ T5019] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 72.136906][ T5019] [ 72.141746][ T5019] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 72.152975][ T5019] CPU: 0 PID: 5019 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 72.163480][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 72.173574][ T5019] Call Trace: [ 72.176881][ T5019] [ 72.179816][ T5019] dump_stack_lvl+0x1e7/0x2d0 [ 72.184522][ T5019] ? nf_tcp_handle_invalid+0x650/0x650 [ 72.189998][ T5019] ? panic+0x770/0x770 [ 72.194098][ T5019] ? dccp_transmit_skb+0xdcb/0x1420 [ 72.199320][ T5019] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 72.204804][ T5019] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 72.210459][ T5019] dccp_xmit_packet+0x35a/0x530 [ 72.215342][ T5019] ? dccp_write_xmit+0x129/0x220 [ 72.220316][ T5019] dccp_write_xmit+0x135/0x220 [ 72.225105][ T5019] dccp_sendmsg+0x666/0x9e0 [ 72.229661][ T5019] ? dccp_getsockopt+0x1910/0x1910 [ 72.234804][ T5019] ? finish_task_switch+0x134/0x650 [ 72.240016][ T5019] ? inet_sendmsg+0x85/0x310 [ 72.244617][ T5019] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 72.249908][ T5019] ? security_socket_sendmsg+0x81/0xa0 [ 72.255391][ T5019] ? inet_send_prepare+0x250/0x250 [ 72.260551][ T5019] ____sys_sendmsg+0x592/0x890 [ 72.265342][ T5019] ? __sys_sendmsg_sock+0x30/0x30 [ 72.270493][ T5019] __sys_sendmsg+0x2b0/0x3a0 [ 72.275104][ T5019] ? ____sys_sendmsg+0x890/0x890 [ 72.280081][ T5019] ? print_irqtrace_events+0x220/0x220 [ 72.285550][ T5019] ? ptrace_stop+0x75a/0x970 [ 72.290163][ T5019] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.295387][ T5019] ? ptrace_notify+0x278/0x380 [ 72.300191][ T5019] ? syscall_enter_from_user_mode+0x32/0x230 [ 72.306187][ T5019] ? syscall_enter_from_user_mode+0x8c/0x230 [ 72.312191][ T5019] do_syscall_64+0x41/0xc0 [ 72.316678][ T5019] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.322606][ T5019] RIP: 0033:0x7ff622093b79 [ 72.327061][ T5019] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.346704][ T5019] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.355147][ T5019] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007ff622093b79 [ 72.363169][ T5019] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 72.371177][ T5019] RBP: 0000000000010bec R08: 0000000000000006 R09: 0000000000000006 [ 72.379157][ T5019] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 72.387139][ T5019] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 72.395150][ T5019] [ 72.399858][ T5019] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 72.411165][ T5019] CPU: 0 PID: 5019 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 72.421728][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 72.431884][ T5019] Call Trace: [ 72.435169][ T5019] [ 72.438106][ T5019] dump_stack_lvl+0x1e7/0x2d0 [ 72.442807][ T5019] ? nf_tcp_handle_invalid+0x650/0x650 [ 72.448307][ T5019] ? panic+0x770/0x770 [ 72.452409][ T5019] ? dccp_transmit_skb+0xdcb/0x1420 [ 72.457629][ T5019] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 72.463104][ T5019] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 72.469274][ T5019] dccp_xmit_packet+0x35a/0x530 [ 72.474768][ T5019] ? dccp_write_xmit+0x129/0x220 [ 72.479749][ T5019] dccp_write_xmit+0x135/0x220 [ 72.484534][ T5019] dccp_sendmsg+0x666/0x9e0 [ 72.489076][ T5019] ? dccp_getsockopt+0x1910/0x1910 [ 72.494228][ T5019] ? finish_task_switch+0x134/0x650 [ 72.499456][ T5019] ? inet_sendmsg+0x85/0x310 [ 72.504071][ T5019] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 72.509373][ T5019] ? security_socket_sendmsg+0x81/0xa0 [ 72.514871][ T5019] ? inet_send_prepare+0x250/0x250 [ 72.520014][ T5019] ____sys_sendmsg+0x592/0x890 [ 72.524792][ T5019] ? __sys_sendmsg_sock+0x30/0x30 [ 72.529834][ T5019] __sys_sendmsg+0x2b0/0x3a0 [ 72.534622][ T5019] ? ____sys_sendmsg+0x890/0x890 [ 72.539595][ T5019] ? print_irqtrace_events+0x220/0x220 [ 72.545063][ T5019] ? ptrace_stop+0x75a/0x970 [ 72.549672][ T5019] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.554894][ T5019] ? ptrace_notify+0x278/0x380 [ 72.560348][ T5019] ? syscall_enter_from_user_mode+0x32/0x230 [ 72.566835][ T5019] ? syscall_enter_from_user_mode+0x8c/0x230 [ 72.573336][ T5019] do_syscall_64+0x41/0xc0 [ 72.577777][ T5019] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.583700][ T5019] RIP: 0033:0x7ff622093b79 [ 72.588313][ T5019] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.607955][ T5019] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.616385][ T5019] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007ff622093b79 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 72.624376][ T5019] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 72.632369][ T5019] RBP: 0000000000010bec R08: 0000000000000006 R09: 0000000000000006 [ 72.640346][ T5019] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 72.648326][ T5019] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 72.656327][ T5019] [ 72.664370][ T5019] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 72.675584][ T5019] CPU: 0 PID: 5019 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 72.686007][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 72.696159][ T5019] Call Trace: [ 72.699453][ T5019] [ 72.702417][ T5019] dump_stack_lvl+0x1e7/0x2d0 [ 72.707129][ T5019] ? nf_tcp_handle_invalid+0x650/0x650 [ 72.712608][ T5019] ? panic+0x770/0x770 [ 72.716719][ T5019] ? dccp_transmit_skb+0xdcb/0x1420 [ 72.721974][ T5019] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 72.727534][ T5019] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 72.733182][ T5019] dccp_xmit_packet+0x35a/0x530 [ 72.738056][ T5019] ? dccp_write_xmit+0x129/0x220 [ 72.743024][ T5019] dccp_write_xmit+0x135/0x220 [ 72.747811][ T5019] dccp_sendmsg+0x666/0x9e0 [ 72.752344][ T5019] ? dccp_getsockopt+0x1910/0x1910 [ 72.757485][ T5019] ? finish_task_switch+0x134/0x650 [ 72.762698][ T5019] ? inet_sendmsg+0x85/0x310 [ 72.767302][ T5019] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 72.772695][ T5019] ? security_socket_sendmsg+0x81/0xa0 [ 72.778207][ T5019] ? inet_send_prepare+0x250/0x250 [ 72.783347][ T5019] ____sys_sendmsg+0x592/0x890 [ 72.788128][ T5019] ? __sys_sendmsg_sock+0x30/0x30 [ 72.793264][ T5019] __sys_sendmsg+0x2b0/0x3a0 [ 72.798573][ T5019] ? ____sys_sendmsg+0x890/0x890 [ 72.803750][ T5019] ? print_irqtrace_events+0x220/0x220 [ 72.809597][ T5019] ? ptrace_stop+0x75a/0x970 [ 72.814241][ T5019] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.819659][ T5019] ? ptrace_notify+0x278/0x380 [ 72.824468][ T5019] ? syscall_enter_from_user_mode+0x32/0x230 [ 72.830487][ T5019] ? syscall_enter_from_user_mode+0x8c/0x230 [ 72.836531][ T5019] do_syscall_64+0x41/0xc0 [ 72.840992][ T5019] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.846934][ T5019] RIP: 0033:0x7ff622093b79 [ 72.851384][ T5019] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 72.871098][ T5019] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.879558][ T5019] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007ff622093b79 [ 72.887562][ T5019] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 72.895547][ T5019] RBP: 0000000000010bec R08: 0000000000000006 R09: 0000000000000006 [ 72.903536][ T5019] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 72.911530][ T5019] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 72.919549][ T5019] [ 72.925768][ T5019] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 72.937133][ T5019] CPU: 1 PID: 5019 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 72.947561][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 72.957623][ T5019] Call Trace: [ 72.960927][ T5019] [ 72.963883][ T5019] dump_stack_lvl+0x1e7/0x2d0 [ 72.968598][ T5019] ? nf_tcp_handle_invalid+0x650/0x650 [ 72.974087][ T5019] ? panic+0x770/0x770 [ 72.978207][ T5019] ? dccp_transmit_skb+0xdcb/0x1420 [ 72.983473][ T5019] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 72.988960][ T5019] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 72.994622][ T5019] dccp_xmit_packet+0x35a/0x530 [ 72.999578][ T5019] ? dccp_write_xmit+0x129/0x220 [ 73.004553][ T5019] dccp_write_xmit+0x135/0x220 [ 73.009335][ T5019] dccp_sendmsg+0x666/0x9e0 [ 73.013875][ T5019] ? dccp_getsockopt+0x1910/0x1910 [ 73.019028][ T5019] ? finish_task_switch+0x134/0x650 [ 73.024250][ T5019] ? inet_sendmsg+0x85/0x310 [ 73.028854][ T5019] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 73.034159][ T5019] ? security_socket_sendmsg+0x81/0xa0 [ 73.039656][ T5019] ? inet_send_prepare+0x250/0x250 [ 73.044831][ T5019] ____sys_sendmsg+0x592/0x890 [ 73.049619][ T5019] ? __sys_sendmsg_sock+0x30/0x30 [ 73.054668][ T5019] __sys_sendmsg+0x2b0/0x3a0 [ 73.059271][ T5019] ? ____sys_sendmsg+0x890/0x890 [ 73.064229][ T5019] ? print_irqtrace_events+0x220/0x220 [ 73.069792][ T5019] ? ptrace_stop+0x75a/0x970 [ 73.074407][ T5019] ? _raw_spin_unlock_irq+0x2e/0x50 [ 73.079707][ T5019] ? ptrace_notify+0x278/0x380 [ 73.084498][ T5019] ? syscall_enter_from_user_mode+0x32/0x230 [ 73.090499][ T5019] ? syscall_enter_from_user_mode+0x8c/0x230 [ 73.096503][ T5019] do_syscall_64+0x41/0xc0 [ 73.100930][ T5019] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 73.106845][ T5019] RIP: 0033:0x7ff622093b79 [ 73.111268][ T5019] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.130969][ T5019] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.139399][ T5019] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007ff622093b79 [ 73.147401][ T5019] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 73.155377][ T5019] RBP: 0000000000010bec R08: 0000000000000006 R09: 0000000000000006 [ 73.163358][ T5019] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 73.171337][ T5019] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 73.179328][ T5019] [ 73.183174][ T5019] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 73.194584][ T5019] CPU: 1 PID: 5019 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 73.205038][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 73.215105][ T5019] Call Trace: [ 73.218393][ T5019] [ 73.221329][ T5019] dump_stack_lvl+0x1e7/0x2d0 [ 73.226032][ T5019] ? nf_tcp_handle_invalid+0x650/0x650 [ 73.231519][ T5019] ? panic+0x770/0x770 [ 73.235614][ T5019] ? dccp_transmit_skb+0xdcb/0x1420 [ 73.240833][ T5019] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 73.246309][ T5019] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 73.251972][ T5019] dccp_xmit_packet+0x35a/0x530 [ 73.256835][ T5019] ? dccp_write_xmit+0x129/0x220 [ 73.261800][ T5019] dccp_write_xmit+0x135/0x220 [ 73.266599][ T5019] dccp_sendmsg+0x666/0x9e0 [ 73.271149][ T5019] ? dccp_getsockopt+0x1910/0x1910 [ 73.276277][ T5019] ? finish_task_switch+0x134/0x650 [ 73.281502][ T5019] ? inet_sendmsg+0x85/0x310 [ 73.286134][ T5019] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 73.291444][ T5019] ? security_socket_sendmsg+0x81/0xa0 [ 73.296933][ T5019] ? inet_send_prepare+0x250/0x250 [ 73.302061][ T5019] ____sys_sendmsg+0x592/0x890 [ 73.306844][ T5019] ? __sys_sendmsg_sock+0x30/0x30 [ 73.311893][ T5019] __sys_sendmsg+0x2b0/0x3a0 [ 73.316503][ T5019] ? ____sys_sendmsg+0x890/0x890 [ 73.321460][ T5019] ? print_irqtrace_events+0x220/0x220 [ 73.326937][ T5019] ? ptrace_stop+0x75a/0x970 [ 73.331553][ T5019] ? _raw_spin_unlock_irq+0x2e/0x50 [ 73.336785][ T5019] ? ptrace_notify+0x278/0x380 [ 73.341569][ T5019] ? syscall_enter_from_user_mode+0x32/0x230 [ 73.347569][ T5019] ? syscall_enter_from_user_mode+0x8c/0x230 [ 73.353567][ T5019] do_syscall_64+0x41/0xc0 [ 73.357996][ T5019] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 73.363909][ T5019] RIP: 0033:0x7ff622093b79 [ 73.368335][ T5019] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.387955][ T5019] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.396384][ T5019] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff622093b79 [ 73.404364][ T5019] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 73.412344][ T5019] RBP: 0000000000010bec R08: 0000000000000006 R09: 0000000000000006 [ 73.420324][ T5019] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 73.428302][ T5019] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 73.436311][ T5019] [ 73.440338][ T5019] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 73.451783][ T5019] CPU: 1 PID: 5019 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 73.462232][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 73.472296][ T5019] Call Trace: [ 73.475584][ T5019] [ 73.478524][ T5019] dump_stack_lvl+0x1e7/0x2d0 [ 73.483235][ T5019] ? nf_tcp_handle_invalid+0x650/0x650 [ 73.488734][ T5019] ? panic+0x770/0x770 [ 73.492837][ T5019] ? dccp_transmit_skb+0xdcb/0x1420 [ 73.498069][ T5019] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 73.503570][ T5019] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 73.509262][ T5019] dccp_xmit_packet+0x35a/0x530 [ 73.514236][ T5019] ? dccp_write_xmit+0x129/0x220 [ 73.519204][ T5019] dccp_write_xmit+0x135/0x220 [ 73.524004][ T5019] dccp_sendmsg+0x666/0x9e0 [ 73.528527][ T5019] ? dccp_getsockopt+0x1910/0x1910 [ 73.534784][ T5019] ? finish_task_switch+0x134/0x650 [ 73.540044][ T5019] ? inet_sendmsg+0x85/0x310 [ 73.544643][ T5019] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 73.549934][ T5019] ? security_socket_sendmsg+0x81/0xa0 [ 73.555410][ T5019] ? inet_send_prepare+0x250/0x250 [ 73.560548][ T5019] ____sys_sendmsg+0x592/0x890 [ 73.565355][ T5019] ? __sys_sendmsg_sock+0x30/0x30 [ 73.570498][ T5019] __sys_sendmsg+0x2b0/0x3a0 [ 73.575105][ T5019] ? ____sys_sendmsg+0x890/0x890 [ 73.580091][ T5019] ? print_irqtrace_events+0x220/0x220 [ 73.585567][ T5019] ? ptrace_stop+0x75a/0x970 [ 73.590182][ T5019] ? _raw_spin_unlock_irq+0x2e/0x50 [ 73.595396][ T5019] ? ptrace_notify+0x278/0x380 [ 73.600184][ T5019] ? syscall_enter_from_user_mode+0x32/0x230 [ 73.606181][ T5019] ? syscall_enter_from_user_mode+0x8c/0x230 [ 73.612177][ T5019] do_syscall_64+0x41/0xc0 [ 73.616612][ T5019] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 73.622547][ T5019] RIP: 0033:0x7ff622093b79 [ 73.626986][ T5019] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.646613][ T5019] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.655070][ T5019] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff622093b79 [ 73.663053][ T5019] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 73.671116][ T5019] RBP: 0000000000010bec R08: 0000000000000006 R09: 0000000000000006 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 73.679093][ T5019] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 73.687092][ T5019] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 73.695107][ T5019] [ 73.702464][ T5019] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 73.714039][ T5019] CPU: 1 PID: 5019 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 73.724507][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 73.734592][ T5019] Call Trace: [ 73.737906][ T5019] [ 73.740873][ T5019] dump_stack_lvl+0x1e7/0x2d0 [ 73.745590][ T5019] ? nf_tcp_handle_invalid+0x650/0x650 [ 73.751074][ T5019] ? panic+0x770/0x770 [ 73.755189][ T5019] ? dccp_transmit_skb+0xdcb/0x1420 [ 73.760427][ T5019] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 73.765927][ T5019] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 73.771602][ T5019] dccp_xmit_packet+0x35a/0x530 [ 73.776496][ T5019] ? dccp_write_xmit+0x129/0x220 [ 73.781495][ T5019] dccp_write_xmit+0x135/0x220 [ 73.786298][ T5019] dccp_sendmsg+0x666/0x9e0 [ 73.790871][ T5019] ? dccp_getsockopt+0x1910/0x1910 [ 73.796023][ T5019] ? finish_task_switch+0x1ed/0x650 [ 73.801251][ T5019] ? inet_sendmsg+0x85/0x310 [ 73.805857][ T5019] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 73.811171][ T5019] ? security_socket_sendmsg+0x81/0xa0 [ 73.816670][ T5019] ? inet_send_prepare+0x250/0x250 [ 73.821826][ T5019] ____sys_sendmsg+0x592/0x890 [ 73.826682][ T5019] ? __sys_sendmsg_sock+0x30/0x30 [ 73.831841][ T5019] __sys_sendmsg+0x2b0/0x3a0 [ 73.836474][ T5019] ? ____sys_sendmsg+0x890/0x890 [ 73.841468][ T5019] ? print_irqtrace_events+0x220/0x220 [ 73.846953][ T5019] ? ptrace_stop+0x75a/0x970 [ 73.851690][ T5019] ? _raw_spin_unlock_irq+0x2e/0x50 [ 73.856921][ T5019] ? ptrace_notify+0x278/0x380 [ 73.861725][ T5019] ? syscall_enter_from_user_mode+0x32/0x230 [ 73.867736][ T5019] ? syscall_enter_from_user_mode+0x8c/0x230 [ 73.873765][ T5019] do_syscall_64+0x41/0xc0 [ 73.878198][ T5019] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 73.884134][ T5019] RIP: 0033:0x7ff622093b79 [ 73.888574][ T5019] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.908229][ T5019] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.916659][ T5019] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ff622093b79 [ 73.924659][ T5019] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [pid 5019] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5019] exit_group(0) = ? [pid 5019] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5019, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556914650) = 5020 ./strace-static-x86_64: Process 5020 attached [pid 5020] set_robust_list(0x555556914660, 24) = 0 [pid 5020] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5020] setpgid(0, 0) = 0 [pid 5020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "1000", 4) = 4 [pid 5020] close(3) = 0 [pid 5020] socket(AF_INET6, SOCK_DCCP, IPPROTO_IP) = 3 [pid 5020] bind(3, {sa_family=AF_INET6, sin6_port=htons(20000), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::", &sin6_addr), sin6_scope_id=0}, 28) = 0 [pid 5020] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5020] listen(3, 6) = 0 [pid 5020] setsockopt(4, SOL_DCCP, DCCP_SOCKOPT_CCID, "\x03", 1) = 0 [pid 5020] connect(4, {sa_family=AF_INET, sin_port=htons(20000), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 [ 73.932641][ T5019] RBP: 0000000000010bec R08: 0000000000000006 R09: 0000000000000006 [ 73.940618][ T5019] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 73.948598][ T5019] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 73.956592][ T5019] [pid 5020] sendto(4, "\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65475, 0, NULL, 0) = 65475 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 73.982510][ T5020] dccp_xmit_packet: Payload too large (65475) for featneg. [ 74.021263][ T5020] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 74.032851][ T5020] CPU: 0 PID: 5020 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 74.043284][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 74.053439][ T5020] Call Trace: [ 74.056740][ T5020] [ 74.059705][ T5020] dump_stack_lvl+0x1e7/0x2d0 [ 74.064397][ T5020] ? nf_tcp_handle_invalid+0x650/0x650 [ 74.069923][ T5020] ? panic+0x770/0x770 [ 74.074006][ T5020] ? dccp_transmit_skb+0xdcb/0x1420 [ 74.079246][ T5020] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 74.084828][ T5020] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 74.090512][ T5020] dccp_xmit_packet+0x35a/0x530 [ 74.095397][ T5020] ? dccp_write_xmit+0x129/0x220 [ 74.100370][ T5020] dccp_write_xmit+0x135/0x220 [ 74.105165][ T5020] dccp_sendmsg+0x666/0x9e0 [ 74.109691][ T5020] ? dccp_getsockopt+0x1910/0x1910 [ 74.114815][ T5020] ? finish_task_switch+0x134/0x650 [ 74.120039][ T5020] ? inet_sendmsg+0x85/0x310 [ 74.124650][ T5020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 74.129948][ T5020] ? security_socket_sendmsg+0x81/0xa0 [ 74.135455][ T5020] ? inet_send_prepare+0x250/0x250 [ 74.140585][ T5020] ____sys_sendmsg+0x592/0x890 [ 74.145464][ T5020] ? __sys_sendmsg_sock+0x30/0x30 [ 74.150512][ T5020] __sys_sendmsg+0x2b0/0x3a0 [ 74.155115][ T5020] ? ____sys_sendmsg+0x890/0x890 [ 74.160070][ T5020] ? print_irqtrace_events+0x220/0x220 [ 74.165542][ T5020] ? ptrace_stop+0x75a/0x970 [ 74.170154][ T5020] ? _raw_spin_unlock_irq+0x2e/0x50 [ 74.175369][ T5020] ? ptrace_notify+0x278/0x380 [ 74.180158][ T5020] ? syscall_enter_from_user_mode+0x32/0x230 [ 74.186289][ T5020] ? syscall_enter_from_user_mode+0x8c/0x230 [ 74.192319][ T5020] do_syscall_64+0x41/0xc0 [ 74.196762][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.202679][ T5020] RIP: 0033:0x7ff622093b79 [ 74.207110][ T5020] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 74.226837][ T5020] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.235300][ T5020] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007ff622093b79 [ 74.243319][ T5020] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 74.251387][ T5020] RBP: 0000000000011772 R08: 0000000000000006 R09: 0000000000000006 [ 74.259415][ T5020] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 74.267401][ T5020] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 74.275395][ T5020] [ 74.282091][ T5020] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 74.293330][ T5020] CPU: 0 PID: 5020 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 74.303751][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 74.313817][ T5020] Call Trace: [ 74.317110][ T5020] [ 74.320059][ T5020] dump_stack_lvl+0x1e7/0x2d0 [ 74.324773][ T5020] ? nf_tcp_handle_invalid+0x650/0x650 [ 74.330285][ T5020] ? panic+0x770/0x770 [ 74.334385][ T5020] ? dccp_transmit_skb+0xdcb/0x1420 [ 74.339624][ T5020] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 74.345129][ T5020] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 74.350788][ T5020] dccp_xmit_packet+0x35a/0x530 [ 74.355683][ T5020] ? dccp_write_xmit+0x129/0x220 [ 74.360752][ T5020] dccp_write_xmit+0x135/0x220 [ 74.365547][ T5020] dccp_sendmsg+0x666/0x9e0 [ 74.370104][ T5020] ? dccp_getsockopt+0x1910/0x1910 [ 74.375231][ T5020] ? finish_task_switch+0x134/0x650 [ 74.380444][ T5020] ? inet_sendmsg+0x85/0x310 [ 74.385053][ T5020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 74.390363][ T5020] ? security_socket_sendmsg+0x81/0xa0 [ 74.395843][ T5020] ? inet_send_prepare+0x250/0x250 [ 74.401007][ T5020] ____sys_sendmsg+0x592/0x890 [ 74.405807][ T5020] ? __sys_sendmsg_sock+0x30/0x30 [ 74.410894][ T5020] __sys_sendmsg+0x2b0/0x3a0 [ 74.415516][ T5020] ? ____sys_sendmsg+0x890/0x890 [ 74.420492][ T5020] ? print_irqtrace_events+0x220/0x220 [ 74.425995][ T5020] ? ptrace_stop+0x75a/0x970 [ 74.430612][ T5020] ? _raw_spin_unlock_irq+0x2e/0x50 [ 74.435826][ T5020] ? ptrace_notify+0x278/0x380 [ 74.440617][ T5020] ? syscall_enter_from_user_mode+0x32/0x230 [ 74.446616][ T5020] ? syscall_enter_from_user_mode+0x8c/0x230 [ 74.452617][ T5020] do_syscall_64+0x41/0xc0 [ 74.457071][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.463001][ T5020] RIP: 0033:0x7ff622093b79 [ 74.467433][ T5020] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 74.487057][ T5020] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.495485][ T5020] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007ff622093b79 [ 74.503469][ T5020] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 74.511453][ T5020] RBP: 0000000000011772 R08: 0000000000000006 R09: 0000000000000006 [ 74.519968][ T5020] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 74.527953][ T5020] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 74.535951][ T5020] [ 74.543482][ T5020] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 74.554817][ T5020] CPU: 0 PID: 5020 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 74.565278][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 74.575351][ T5020] Call Trace: [ 74.578640][ T5020] [ 74.581578][ T5020] dump_stack_lvl+0x1e7/0x2d0 [ 74.586276][ T5020] ? nf_tcp_handle_invalid+0x650/0x650 [ 74.591767][ T5020] ? panic+0x770/0x770 [ 74.595894][ T5020] ? dccp_transmit_skb+0xdcb/0x1420 [ 74.601625][ T5020] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 74.607140][ T5020] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 74.612802][ T5020] dccp_xmit_packet+0x35a/0x530 [ 74.617698][ T5020] ? dccp_write_xmit+0x129/0x220 [ 74.622667][ T5020] dccp_write_xmit+0x135/0x220 [ 74.627476][ T5020] dccp_sendmsg+0x666/0x9e0 [ 74.632023][ T5020] ? dccp_getsockopt+0x1910/0x1910 [ 74.637150][ T5020] ? finish_task_switch+0x134/0x650 [ 74.642386][ T5020] ? inet_sendmsg+0x85/0x310 [ 74.647019][ T5020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 74.652430][ T5020] ? security_socket_sendmsg+0x81/0xa0 [ 74.657917][ T5020] ? inet_send_prepare+0x250/0x250 [ 74.663057][ T5020] ____sys_sendmsg+0x592/0x890 [ 74.667940][ T5020] ? __sys_sendmsg_sock+0x30/0x30 [ 74.672992][ T5020] __sys_sendmsg+0x2b0/0x3a0 [ 74.677595][ T5020] ? ____sys_sendmsg+0x890/0x890 [ 74.682550][ T5020] ? print_irqtrace_events+0x220/0x220 [ 74.688035][ T5020] ? ptrace_stop+0x75a/0x970 [ 74.692646][ T5020] ? _raw_spin_unlock_irq+0x2e/0x50 [ 74.697872][ T5020] ? ptrace_notify+0x278/0x380 [ 74.702657][ T5020] ? syscall_enter_from_user_mode+0x32/0x230 [ 74.708655][ T5020] ? syscall_enter_from_user_mode+0x8c/0x230 [ 74.714654][ T5020] do_syscall_64+0x41/0xc0 [ 74.719086][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.725005][ T5020] RIP: 0033:0x7ff622093b79 [ 74.729432][ T5020] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 74.749046][ T5020] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.757471][ T5020] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007ff622093b79 [ 74.765454][ T5020] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 74.773432][ T5020] RBP: 0000000000011772 R08: 0000000000000006 R09: 0000000000000006 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 74.781411][ T5020] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 74.789393][ T5020] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 74.797387][ T5020] [ 74.804256][ T5020] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 74.815536][ T5020] CPU: 0 PID: 5020 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 74.825979][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 74.836050][ T5020] Call Trace: [ 74.839357][ T5020] [ 74.842304][ T5020] dump_stack_lvl+0x1e7/0x2d0 [ 74.847016][ T5020] ? nf_tcp_handle_invalid+0x650/0x650 [ 74.852507][ T5020] ? panic+0x770/0x770 [ 74.856597][ T5020] ? dccp_transmit_skb+0xdcb/0x1420 [ 74.861830][ T5020] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 74.867330][ T5020] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 74.873013][ T5020] dccp_xmit_packet+0x35a/0x530 [ 74.877899][ T5020] ? dccp_write_xmit+0x129/0x220 [ 74.882861][ T5020] dccp_write_xmit+0x135/0x220 [ 74.887660][ T5020] dccp_sendmsg+0x666/0x9e0 [ 74.892183][ T5020] ? dccp_getsockopt+0x1910/0x1910 [ 74.897331][ T5020] ? finish_task_switch+0x134/0x650 [ 74.902562][ T5020] ? inet_sendmsg+0x85/0x310 [ 74.907174][ T5020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 74.912483][ T5020] ? security_socket_sendmsg+0x81/0xa0 [ 74.917957][ T5020] ? inet_send_prepare+0x250/0x250 [ 74.923086][ T5020] ____sys_sendmsg+0x592/0x890 [ 74.927871][ T5020] ? __sys_sendmsg_sock+0x30/0x30 [ 74.932922][ T5020] __sys_sendmsg+0x2b0/0x3a0 [ 74.937526][ T5020] ? ____sys_sendmsg+0x890/0x890 [ 74.942482][ T5020] ? print_irqtrace_events+0x220/0x220 [ 74.947983][ T5020] ? ptrace_stop+0x75a/0x970 [ 74.952597][ T5020] ? _raw_spin_unlock_irq+0x2e/0x50 [ 74.957811][ T5020] ? ptrace_notify+0x278/0x380 [ 74.962596][ T5020] ? syscall_enter_from_user_mode+0x32/0x230 [ 74.968638][ T5020] ? syscall_enter_from_user_mode+0x8c/0x230 [ 74.974636][ T5020] do_syscall_64+0x41/0xc0 [ 74.979072][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.984988][ T5020] RIP: 0033:0x7ff622093b79 [ 74.989413][ T5020] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 75.009048][ T5020] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.017481][ T5020] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007ff622093b79 [ 75.025475][ T5020] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 75.033454][ T5020] RBP: 0000000000011772 R08: 0000000000000006 R09: 0000000000000006 [ 75.041439][ T5020] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 75.049428][ T5020] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 75.057460][ T5020] [ 75.064224][ T5020] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 75.075697][ T5020] CPU: 0 PID: 5020 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 75.086136][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 75.096191][ T5020] Call Trace: [ 75.099475][ T5020] [ 75.102412][ T5020] dump_stack_lvl+0x1e7/0x2d0 [ 75.107096][ T5020] ? nf_tcp_handle_invalid+0x650/0x650 [ 75.112555][ T5020] ? panic+0x770/0x770 [ 75.116632][ T5020] ? dccp_transmit_skb+0xdcb/0x1420 [ 75.121841][ T5020] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 75.127325][ T5020] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 75.132965][ T5020] dccp_xmit_packet+0x35a/0x530 [ 75.137818][ T5020] ? dccp_write_xmit+0x129/0x220 [ 75.142760][ T5020] dccp_write_xmit+0x135/0x220 [ 75.147530][ T5020] dccp_sendmsg+0x666/0x9e0 [ 75.152063][ T5020] ? dccp_getsockopt+0x1910/0x1910 [ 75.157181][ T5020] ? finish_task_switch+0x134/0x650 [ 75.162387][ T5020] ? inet_sendmsg+0x85/0x310 [ 75.166985][ T5020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 75.172269][ T5020] ? security_socket_sendmsg+0x81/0xa0 [ 75.177731][ T5020] ? inet_send_prepare+0x250/0x250 [ 75.182846][ T5020] ____sys_sendmsg+0x592/0x890 [ 75.187621][ T5020] ? __sys_sendmsg_sock+0x30/0x30 [ 75.192657][ T5020] __sys_sendmsg+0x2b0/0x3a0 [ 75.197246][ T5020] ? ____sys_sendmsg+0x890/0x890 [ 75.202207][ T5020] ? print_irqtrace_events+0x220/0x220 [ 75.207675][ T5020] ? ptrace_stop+0x75a/0x970 [ 75.212291][ T5020] ? _raw_spin_unlock_irq+0x2e/0x50 [ 75.217603][ T5020] ? ptrace_notify+0x278/0x380 [ 75.222397][ T5020] ? syscall_enter_from_user_mode+0x32/0x230 [ 75.228435][ T5020] ? syscall_enter_from_user_mode+0x8c/0x230 [ 75.234440][ T5020] do_syscall_64+0x41/0xc0 [ 75.238875][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.244794][ T5020] RIP: 0033:0x7ff622093b79 [ 75.249222][ T5020] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 75.268842][ T5020] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.277280][ T5020] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007ff622093b79 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 75.285265][ T5020] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 75.293246][ T5020] RBP: 0000000000011772 R08: 0000000000000006 R09: 0000000000000006 [ 75.301226][ T5020] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 75.309206][ T5020] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 75.317199][ T5020] [ 75.322565][ T5020] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 75.334060][ T5020] CPU: 1 PID: 5020 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 75.344482][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 75.354556][ T5020] Call Trace: [ 75.357838][ T5020] [ 75.360859][ T5020] dump_stack_lvl+0x1e7/0x2d0 [ 75.365549][ T5020] ? nf_tcp_handle_invalid+0x650/0x650 [ 75.371008][ T5020] ? panic+0x770/0x770 [ 75.375174][ T5020] ? dccp_transmit_skb+0xdcb/0x1420 [ 75.380387][ T5020] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 75.385856][ T5020] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 75.391503][ T5020] dccp_xmit_packet+0x35a/0x530 [ 75.396361][ T5020] ? dccp_write_xmit+0x129/0x220 [ 75.401309][ T5020] dccp_write_xmit+0x135/0x220 [ 75.406078][ T5020] dccp_sendmsg+0x666/0x9e0 [ 75.410598][ T5020] ? dccp_getsockopt+0x1910/0x1910 [ 75.415731][ T5020] ? finish_task_switch+0x134/0x650 [ 75.420959][ T5020] ? inet_sendmsg+0x85/0x310 [ 75.425562][ T5020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 75.430872][ T5020] ? security_socket_sendmsg+0x81/0xa0 [ 75.436361][ T5020] ? inet_send_prepare+0x250/0x250 [ 75.441489][ T5020] ____sys_sendmsg+0x592/0x890 [ 75.446267][ T5020] ? __sys_sendmsg_sock+0x30/0x30 [ 75.451306][ T5020] __sys_sendmsg+0x2b0/0x3a0 [ 75.455907][ T5020] ? ____sys_sendmsg+0x890/0x890 [ 75.460857][ T5020] ? print_irqtrace_events+0x220/0x220 [ 75.466322][ T5020] ? ptrace_stop+0x75a/0x970 [ 75.470925][ T5020] ? _raw_spin_unlock_irq+0x2e/0x50 [ 75.476128][ T5020] ? ptrace_notify+0x278/0x380 [ 75.480919][ T5020] ? syscall_enter_from_user_mode+0x32/0x230 [ 75.486918][ T5020] ? syscall_enter_from_user_mode+0x8c/0x230 [ 75.492906][ T5020] do_syscall_64+0x41/0xc0 [ 75.497331][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.503240][ T5020] RIP: 0033:0x7ff622093b79 [ 75.507655][ T5020] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 75.527375][ T5020] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 75.535794][ T5020] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007ff622093b79 [ 75.543764][ T5020] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 75.551747][ T5020] RBP: 0000000000011772 R08: 0000000000000006 R09: 0000000000000006 [ 75.559719][ T5020] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 75.567747][ T5020] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 75.575752][ T5020] [ 75.581493][ T5020] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 75.592767][ T5020] CPU: 1 PID: 5020 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 75.603220][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 75.613300][ T5020] Call Trace: [ 75.616592][ T5020] [ 75.619650][ T5020] dump_stack_lvl+0x1e7/0x2d0 [ 75.624372][ T5020] ? nf_tcp_handle_invalid+0x650/0x650 [ 75.629885][ T5020] ? panic+0x770/0x770 [ 75.634073][ T5020] ? dccp_transmit_skb+0xdcb/0x1420 [ 75.639301][ T5020] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 75.644779][ T5020] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 75.650433][ T5020] dccp_xmit_packet+0x35a/0x530 [ 75.655300][ T5020] ? dccp_write_xmit+0x129/0x220 [ 75.660280][ T5020] dccp_write_xmit+0x135/0x220 [ 75.665089][ T5020] dccp_sendmsg+0x666/0x9e0 [ 75.669622][ T5020] ? dccp_getsockopt+0x1910/0x1910 [ 75.674766][ T5020] ? finish_task_switch+0x134/0x650 [ 75.680136][ T5020] ? inet_sendmsg+0x85/0x310 [ 75.684861][ T5020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 75.690214][ T5020] ? security_socket_sendmsg+0x81/0xa0 [ 75.695705][ T5020] ? inet_send_prepare+0x250/0x250 [ 75.700841][ T5020] ____sys_sendmsg+0x592/0x890 [ 75.705637][ T5020] ? __sys_sendmsg_sock+0x30/0x30 [ 75.710719][ T5020] __sys_sendmsg+0x2b0/0x3a0 [ 75.715327][ T5020] ? ____sys_sendmsg+0x890/0x890 [ 75.720291][ T5020] ? print_irqtrace_events+0x220/0x220 [ 75.725765][ T5020] ? ptrace_stop+0x75a/0x970 [ 75.730378][ T5020] ? _raw_spin_unlock_irq+0x2e/0x50 [ 75.735596][ T5020] ? ptrace_notify+0x278/0x380 [ 75.740383][ T5020] ? syscall_enter_from_user_mode+0x32/0x230 [ 75.746386][ T5020] ? syscall_enter_from_user_mode+0x8c/0x230 [ 75.752386][ T5020] do_syscall_64+0x41/0xc0 [ 75.756815][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.762729][ T5020] RIP: 0033:0x7ff622093b79 [ 75.767156][ T5020] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 75.786860][ T5020] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.795284][ T5020] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007ff622093b79 [ 75.803359][ T5020] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 75.811345][ T5020] RBP: 0000000000011772 R08: 0000000000000006 R09: 0000000000000006 [ 75.819332][ T5020] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 75.827318][ T5020] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 75.835402][ T5020] [ 75.840130][ T5020] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 75.851480][ T5020] CPU: 1 PID: 5020 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 75.861984][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 75.872077][ T5020] Call Trace: [ 75.875405][ T5020] [ 75.878346][ T5020] dump_stack_lvl+0x1e7/0x2d0 [ 75.883035][ T5020] ? nf_tcp_handle_invalid+0x650/0x650 [ 75.888511][ T5020] ? panic+0x770/0x770 [ 75.892620][ T5020] ? dccp_transmit_skb+0xdcb/0x1420 [ 75.897861][ T5020] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 75.903338][ T5020] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 75.908998][ T5020] dccp_xmit_packet+0x35a/0x530 [ 75.913875][ T5020] ? dccp_write_xmit+0x129/0x220 [ 75.918840][ T5020] dccp_write_xmit+0x135/0x220 [ 75.923644][ T5020] dccp_sendmsg+0x666/0x9e0 [ 75.928173][ T5020] ? dccp_getsockopt+0x1910/0x1910 [ 75.933315][ T5020] ? finish_task_switch+0x134/0x650 [ 75.938544][ T5020] ? inet_sendmsg+0x85/0x310 [ 75.943154][ T5020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 75.948467][ T5020] ? security_socket_sendmsg+0x81/0xa0 [ 75.953940][ T5020] ? inet_send_prepare+0x250/0x250 [ 75.959072][ T5020] ____sys_sendmsg+0x592/0x890 [ 75.963859][ T5020] ? __sys_sendmsg_sock+0x30/0x30 [ 75.968904][ T5020] __sys_sendmsg+0x2b0/0x3a0 [ 75.973504][ T5020] ? ____sys_sendmsg+0x890/0x890 [ 75.978480][ T5020] ? print_irqtrace_events+0x220/0x220 [ 75.983964][ T5020] ? ptrace_stop+0x75a/0x970 [ 75.988587][ T5020] ? _raw_spin_unlock_irq+0x2e/0x50 [ 75.993987][ T5020] ? ptrace_notify+0x278/0x380 [ 75.998785][ T5020] ? syscall_enter_from_user_mode+0x32/0x230 [ 76.004795][ T5020] ? syscall_enter_from_user_mode+0x8c/0x230 [ 76.010796][ T5020] do_syscall_64+0x41/0xc0 [ 76.015226][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.021143][ T5020] RIP: 0033:0x7ff622093b79 [ 76.025567][ T5020] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.045197][ T5020] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.053637][ T5020] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007ff622093b79 [ 76.061647][ T5020] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 76.069650][ T5020] RBP: 0000000000011772 R08: 0000000000000006 R09: 0000000000000006 [ 76.077651][ T5020] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 76.085733][ T5020] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 76.093750][ T5020] [ 76.099326][ T5020] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 76.110540][ T5020] CPU: 1 PID: 5020 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 76.120966][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 76.131132][ T5020] Call Trace: [ 76.134449][ T5020] [ 76.137407][ T5020] dump_stack_lvl+0x1e7/0x2d0 [ 76.142107][ T5020] ? nf_tcp_handle_invalid+0x650/0x650 [ 76.147581][ T5020] ? panic+0x770/0x770 [ 76.151693][ T5020] ? dccp_transmit_skb+0xdcb/0x1420 [ 76.156945][ T5020] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 76.162438][ T5020] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 76.168106][ T5020] dccp_xmit_packet+0x35a/0x530 [ 76.172988][ T5020] ? dccp_write_xmit+0x129/0x220 [ 76.177946][ T5020] dccp_write_xmit+0x135/0x220 [ 76.182748][ T5020] dccp_sendmsg+0x666/0x9e0 [ 76.187283][ T5020] ? dccp_getsockopt+0x1910/0x1910 [ 76.192420][ T5020] ? finish_task_switch+0x134/0x650 [ 76.197641][ T5020] ? inet_sendmsg+0x85/0x310 [ 76.202264][ T5020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 76.207595][ T5020] ? security_socket_sendmsg+0x81/0xa0 [ 76.213072][ T5020] ? inet_send_prepare+0x250/0x250 [ 76.218212][ T5020] ____sys_sendmsg+0x592/0x890 [ 76.223012][ T5020] ? __sys_sendmsg_sock+0x30/0x30 [ 76.228074][ T5020] __sys_sendmsg+0x2b0/0x3a0 [ 76.232711][ T5020] ? ____sys_sendmsg+0x890/0x890 [ 76.237673][ T5020] ? print_irqtrace_events+0x220/0x220 [ 76.243148][ T5020] ? ptrace_stop+0x75a/0x970 [ 76.247769][ T5020] ? _raw_spin_unlock_irq+0x2e/0x50 [ 76.253014][ T5020] ? ptrace_notify+0x278/0x380 [ 76.257825][ T5020] ? syscall_enter_from_user_mode+0x32/0x230 [ 76.263832][ T5020] ? syscall_enter_from_user_mode+0x8c/0x230 [ 76.269847][ T5020] do_syscall_64+0x41/0xc0 [ 76.274394][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.280355][ T5020] RIP: 0033:0x7ff622093b79 [ 76.284815][ T5020] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.304542][ T5020] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.312971][ T5020] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007ff622093b79 [ 76.320968][ T5020] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 76.328967][ T5020] RBP: 0000000000011772 R08: 0000000000000006 R09: 0000000000000006 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 76.336952][ T5020] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 76.344933][ T5020] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 76.352999][ T5020] [ 76.359007][ T5020] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 76.370476][ T5020] CPU: 0 PID: 5020 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 76.380947][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 76.391036][ T5020] Call Trace: [ 76.394356][ T5020] [ 76.397328][ T5020] dump_stack_lvl+0x1e7/0x2d0 [ 76.402074][ T5020] ? nf_tcp_handle_invalid+0x650/0x650 [ 76.407582][ T5020] ? panic+0x770/0x770 [ 76.411683][ T5020] ? dccp_transmit_skb+0xdcb/0x1420 [ 76.416920][ T5020] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 76.422436][ T5020] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 76.428095][ T5020] dccp_xmit_packet+0x35a/0x530 [ 76.432987][ T5020] ? dccp_write_xmit+0x129/0x220 [ 76.437964][ T5020] dccp_write_xmit+0x135/0x220 [ 76.442761][ T5020] dccp_sendmsg+0x666/0x9e0 [ 76.447302][ T5020] ? dccp_getsockopt+0x1910/0x1910 [ 76.452450][ T5020] ? finish_task_switch+0x134/0x650 [ 76.457664][ T5020] ? inet_sendmsg+0x85/0x310 [ 76.462282][ T5020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 76.467578][ T5020] ? security_socket_sendmsg+0x81/0xa0 [ 76.473063][ T5020] ? inet_send_prepare+0x250/0x250 [ 76.478215][ T5020] ____sys_sendmsg+0x592/0x890 [ 76.483000][ T5020] ? __sys_sendmsg_sock+0x30/0x30 [ 76.488049][ T5020] __sys_sendmsg+0x2b0/0x3a0 [ 76.492649][ T5020] ? ____sys_sendmsg+0x890/0x890 [ 76.497607][ T5020] ? print_irqtrace_events+0x220/0x220 [ 76.503095][ T5020] ? ptrace_stop+0x75a/0x970 [ 76.507727][ T5020] ? _raw_spin_unlock_irq+0x2e/0x50 [ 76.512959][ T5020] ? ptrace_notify+0x278/0x380 [ 76.517760][ T5020] ? syscall_enter_from_user_mode+0x32/0x230 [ 76.523853][ T5020] ? syscall_enter_from_user_mode+0x8c/0x230 [ 76.529854][ T5020] do_syscall_64+0x41/0xc0 [ 76.534284][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.540218][ T5020] RIP: 0033:0x7ff622093b79 [ 76.544642][ T5020] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.564262][ T5020] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.572696][ T5020] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff622093b79 [ 76.580684][ T5020] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 76.588664][ T5020] RBP: 0000000000011772 R08: 0000000000000006 R09: 0000000000000006 [ 76.596645][ T5020] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 76.604629][ T5020] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 76.612629][ T5020] [ 76.628587][ T5020] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 76.645075][ T5020] CPU: 1 PID: 5020 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 76.655545][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 76.665624][ T5020] Call Trace: [ 76.668934][ T5020] [ 76.671884][ T5020] dump_stack_lvl+0x1e7/0x2d0 [ 76.676600][ T5020] ? nf_tcp_handle_invalid+0x650/0x650 [ 76.682093][ T5020] ? panic+0x770/0x770 [ 76.686199][ T5020] ? dccp_transmit_skb+0xdcb/0x1420 [ 76.691438][ T5020] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 76.696939][ T5020] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 76.702620][ T5020] dccp_xmit_packet+0x35a/0x530 [ 76.707508][ T5020] ? dccp_write_xmit+0x129/0x220 [ 76.712478][ T5020] dccp_write_xmit+0x135/0x220 [ 76.717279][ T5020] dccp_sendmsg+0x666/0x9e0 [ 76.721825][ T5020] ? dccp_getsockopt+0x1910/0x1910 [ 76.726974][ T5020] ? finish_task_switch+0x1ed/0x650 [ 76.732214][ T5020] ? inet_sendmsg+0x85/0x310 [ 76.736843][ T5020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 76.742156][ T5020] ? security_socket_sendmsg+0x81/0xa0 [ 76.747685][ T5020] ? inet_send_prepare+0x250/0x250 [ 76.752876][ T5020] ____sys_sendmsg+0x592/0x890 [ 76.757887][ T5020] ? __sys_sendmsg_sock+0x30/0x30 [ 76.762970][ T5020] __sys_sendmsg+0x2b0/0x3a0 [ 76.767599][ T5020] ? ____sys_sendmsg+0x890/0x890 [ 76.772603][ T5020] ? print_irqtrace_events+0x220/0x220 [ 76.778112][ T5020] ? ptrace_stop+0x75a/0x970 [ 76.782761][ T5020] ? _raw_spin_unlock_irq+0x2e/0x50 [ 76.787998][ T5020] ? ptrace_notify+0x278/0x380 [ 76.792931][ T5020] ? syscall_enter_from_user_mode+0x32/0x230 [ 76.799265][ T5020] ? syscall_enter_from_user_mode+0x8c/0x230 [ 76.805391][ T5020] do_syscall_64+0x41/0xc0 [ 76.809857][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.815801][ T5020] RIP: 0033:0x7ff622093b79 [ 76.820254][ T5020] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 76.839906][ T5020] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.848358][ T5020] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff622093b79 [ 76.856365][ T5020] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 76.864368][ T5020] RBP: 0000000000011772 R08: 0000000000000006 R09: 0000000000000006 [ 76.872372][ T5020] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 76.880374][ T5020] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 76.888397][ T5020] [ 76.894393][ T5020] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 76.906081][ T5020] CPU: 1 PID: 5020 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 76.916532][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 76.926613][ T5020] Call Trace: [ 76.929918][ T5020] [ 76.932884][ T5020] dump_stack_lvl+0x1e7/0x2d0 [ 76.937602][ T5020] ? nf_tcp_handle_invalid+0x650/0x650 [ 76.943090][ T5020] ? panic+0x770/0x770 [ 76.947196][ T5020] ? dccp_transmit_skb+0xdcb/0x1420 [ 76.952443][ T5020] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 76.957946][ T5020] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 76.963617][ T5020] dccp_xmit_packet+0x35a/0x530 [ 76.968503][ T5020] ? dccp_write_xmit+0x129/0x220 [ 76.973563][ T5020] dccp_write_xmit+0x135/0x220 [ 76.978376][ T5020] dccp_sendmsg+0x666/0x9e0 [ 76.982920][ T5020] ? dccp_getsockopt+0x1910/0x1910 [ 76.988069][ T5020] ? finish_task_switch+0x134/0x650 [ 76.993391][ T5020] ? inet_sendmsg+0x85/0x310 [ 76.998014][ T5020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 77.003324][ T5020] ? security_socket_sendmsg+0x81/0xa0 [ 77.008819][ T5020] ? inet_send_prepare+0x250/0x250 [ 77.013964][ T5020] ____sys_sendmsg+0x592/0x890 [ 77.018867][ T5020] ? __sys_sendmsg_sock+0x30/0x30 [ 77.023944][ T5020] __sys_sendmsg+0x2b0/0x3a0 [ 77.028567][ T5020] ? ____sys_sendmsg+0x890/0x890 [ 77.033547][ T5020] ? print_irqtrace_events+0x220/0x220 [ 77.039037][ T5020] ? ptrace_stop+0x75a/0x970 [ 77.043670][ T5020] ? _raw_spin_unlock_irq+0x2e/0x50 [ 77.048908][ T5020] ? ptrace_notify+0x278/0x380 [ 77.053717][ T5020] ? syscall_enter_from_user_mode+0x32/0x230 [ 77.059735][ T5020] ? syscall_enter_from_user_mode+0x8c/0x230 [ 77.065753][ T5020] do_syscall_64+0x41/0xc0 [ 77.070199][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.076130][ T5020] RIP: 0033:0x7ff622093b79 [ 77.080579][ T5020] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.100300][ T5020] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.108752][ T5020] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ff622093b79 [ 77.116747][ T5020] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 77.124828][ T5020] RBP: 0000000000011772 R08: 0000000000000006 R09: 0000000000000006 [ 77.132822][ T5020] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5020] exit_group(0) = ? [pid 5020] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5020, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556914650) = 5021 ./strace-static-x86_64: Process 5021 attached [pid 5021] set_robust_list(0x555556914660, 24) = 0 [pid 5021] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5021] setpgid(0, 0) = 0 [pid 5021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5021] write(3, "1000", 4) = 4 [pid 5021] close(3) = 0 [pid 5021] socket(AF_INET6, SOCK_DCCP, IPPROTO_IP) = 3 [pid 5021] bind(3, {sa_family=AF_INET6, sin6_port=htons(20000), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::", &sin6_addr), sin6_scope_id=0}, 28) = 0 [pid 5021] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5021] listen(3, 6) = 0 [pid 5021] setsockopt(4, SOL_DCCP, DCCP_SOCKOPT_CCID, "\x03", 1) = 0 [pid 5021] connect(4, {sa_family=AF_INET, sin_port=htons(20000), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 [ 77.140806][ T5020] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 77.148791][ T5020] [pid 5021] sendto(4, "\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65475, 0, NULL, 0) = 65475 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 77.172999][ T5021] dccp_xmit_packet: Payload too large (65475) for featneg. [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 77.219622][ T5021] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 77.231398][ T5021] CPU: 0 PID: 5021 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 77.241850][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 77.251919][ T5021] Call Trace: [ 77.255213][ T5021] [ 77.258156][ T5021] dump_stack_lvl+0x1e7/0x2d0 [ 77.262856][ T5021] ? nf_tcp_handle_invalid+0x650/0x650 [ 77.268327][ T5021] ? panic+0x770/0x770 [ 77.272413][ T5021] ? dccp_transmit_skb+0xdcb/0x1420 [ 77.277639][ T5021] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 77.283117][ T5021] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 77.288776][ T5021] dccp_xmit_packet+0x35a/0x530 [ 77.293639][ T5021] ? dccp_write_xmit+0x129/0x220 [ 77.298593][ T5021] dccp_write_xmit+0x135/0x220 [ 77.303374][ T5021] dccp_sendmsg+0x666/0x9e0 [ 77.307896][ T5021] ? dccp_getsockopt+0x1910/0x1910 [ 77.313038][ T5021] ? finish_task_switch+0x134/0x650 [ 77.318276][ T5021] ? inet_sendmsg+0x85/0x310 [ 77.322894][ T5021] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 77.328199][ T5021] ? security_socket_sendmsg+0x81/0xa0 [ 77.333688][ T5021] ? inet_send_prepare+0x250/0x250 [ 77.338821][ T5021] ____sys_sendmsg+0x592/0x890 [ 77.343603][ T5021] ? __sys_sendmsg_sock+0x30/0x30 [ 77.348650][ T5021] __sys_sendmsg+0x2b0/0x3a0 [ 77.353253][ T5021] ? ____sys_sendmsg+0x890/0x890 [ 77.358210][ T5021] ? print_irqtrace_events+0x220/0x220 [ 77.363687][ T5021] ? ptrace_stop+0x75a/0x970 [ 77.368302][ T5021] ? _raw_spin_unlock_irq+0x2e/0x50 [ 77.373602][ T5021] ? ptrace_notify+0x278/0x380 [ 77.378390][ T5021] ? syscall_enter_from_user_mode+0x32/0x230 [ 77.384390][ T5021] ? syscall_enter_from_user_mode+0x8c/0x230 [ 77.390386][ T5021] do_syscall_64+0x41/0xc0 [ 77.394815][ T5021] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.400728][ T5021] RIP: 0033:0x7ff622093b79 [ 77.405176][ T5021] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.424790][ T5021] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.433215][ T5021] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007ff622093b79 [ 77.441202][ T5021] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 77.449186][ T5021] RBP: 00000000000120cc R08: 0000000000000006 R09: 0000000000000006 [ 77.457171][ T5021] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 77.465172][ T5021] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 77.473196][ T5021] [ 77.480703][ T5021] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 77.491950][ T5021] CPU: 0 PID: 5021 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 77.502375][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 77.512449][ T5021] Call Trace: [ 77.515751][ T5021] [ 77.518689][ T5021] dump_stack_lvl+0x1e7/0x2d0 [ 77.523381][ T5021] ? nf_tcp_handle_invalid+0x650/0x650 [ 77.528866][ T5021] ? panic+0x770/0x770 [ 77.532961][ T5021] ? dccp_transmit_skb+0xdcb/0x1420 [ 77.538207][ T5021] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 77.543683][ T5021] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 77.549335][ T5021] dccp_xmit_packet+0x35a/0x530 [ 77.554221][ T5021] ? dccp_write_xmit+0x129/0x220 [ 77.559222][ T5021] dccp_write_xmit+0x135/0x220 [ 77.564005][ T5021] dccp_sendmsg+0x666/0x9e0 [ 77.568540][ T5021] ? dccp_getsockopt+0x1910/0x1910 [ 77.573688][ T5021] ? finish_task_switch+0x134/0x650 [ 77.578917][ T5021] ? inet_sendmsg+0x85/0x310 [ 77.583521][ T5021] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 77.588840][ T5021] ? security_socket_sendmsg+0x81/0xa0 [ 77.594345][ T5021] ? inet_send_prepare+0x250/0x250 [ 77.599479][ T5021] ____sys_sendmsg+0x592/0x890 [ 77.604271][ T5021] ? __sys_sendmsg_sock+0x30/0x30 [ 77.609344][ T5021] __sys_sendmsg+0x2b0/0x3a0 [ 77.613983][ T5021] ? ____sys_sendmsg+0x890/0x890 [ 77.618971][ T5021] ? print_irqtrace_events+0x220/0x220 [ 77.624444][ T5021] ? ptrace_stop+0x75a/0x970 [ 77.629059][ T5021] ? _raw_spin_unlock_irq+0x2e/0x50 [ 77.634297][ T5021] ? ptrace_notify+0x278/0x380 [ 77.639078][ T5021] ? syscall_enter_from_user_mode+0x32/0x230 [ 77.645088][ T5021] ? syscall_enter_from_user_mode+0x8c/0x230 [ 77.651101][ T5021] do_syscall_64+0x41/0xc0 [ 77.655530][ T5021] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.661516][ T5021] RIP: 0033:0x7ff622093b79 [ 77.665954][ T5021] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.685595][ T5021] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.694051][ T5021] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007ff622093b79 [ 77.702034][ T5021] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 77.710025][ T5021] RBP: 00000000000120cc R08: 0000000000000006 R09: 0000000000000006 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 77.718023][ T5021] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 77.726009][ T5021] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 77.734006][ T5021] [ 77.740762][ T5021] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 77.752015][ T5021] CPU: 0 PID: 5021 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 77.762440][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 77.772516][ T5021] Call Trace: [ 77.775828][ T5021] [ 77.778770][ T5021] dump_stack_lvl+0x1e7/0x2d0 [ 77.783463][ T5021] ? nf_tcp_handle_invalid+0x650/0x650 [ 77.788937][ T5021] ? panic+0x770/0x770 [ 77.793071][ T5021] ? dccp_transmit_skb+0xdcb/0x1420 [ 77.798304][ T5021] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 77.803806][ T5021] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 77.809464][ T5021] dccp_xmit_packet+0x35a/0x530 [ 77.814353][ T5021] ? dccp_write_xmit+0x129/0x220 [ 77.819615][ T5021] dccp_write_xmit+0x135/0x220 [ 77.824503][ T5021] dccp_sendmsg+0x666/0x9e0 [ 77.829053][ T5021] ? dccp_getsockopt+0x1910/0x1910 [ 77.834187][ T5021] ? finish_task_switch+0x134/0x650 [ 77.839407][ T5021] ? inet_sendmsg+0x85/0x310 [ 77.844016][ T5021] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 77.849401][ T5021] ? security_socket_sendmsg+0x81/0xa0 [ 77.854881][ T5021] ? inet_send_prepare+0x250/0x250 [ 77.860021][ T5021] ____sys_sendmsg+0x592/0x890 [ 77.864829][ T5021] ? __sys_sendmsg_sock+0x30/0x30 [ 77.869892][ T5021] __sys_sendmsg+0x2b0/0x3a0 [ 77.874524][ T5021] ? ____sys_sendmsg+0x890/0x890 [ 77.879505][ T5021] ? print_irqtrace_events+0x220/0x220 [ 77.885029][ T5021] ? ptrace_stop+0x75a/0x970 [ 77.889663][ T5021] ? _raw_spin_unlock_irq+0x2e/0x50 [ 77.894888][ T5021] ? ptrace_notify+0x278/0x380 [ 77.899674][ T5021] ? syscall_enter_from_user_mode+0x32/0x230 [ 77.905763][ T5021] ? syscall_enter_from_user_mode+0x8c/0x230 [ 77.911793][ T5021] do_syscall_64+0x41/0xc0 [ 77.916268][ T5021] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.922221][ T5021] RIP: 0033:0x7ff622093b79 [ 77.926672][ T5021] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.946302][ T5021] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.954789][ T5021] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007ff622093b79 [ 77.962804][ T5021] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 77.970818][ T5021] RBP: 00000000000120cc R08: 0000000000000006 R09: 0000000000000006 [ 77.978815][ T5021] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 77.986830][ T5021] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 77.994827][ T5021] [ 78.001604][ T5021] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 78.012849][ T5021] CPU: 0 PID: 5021 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 78.023273][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 78.033423][ T5021] Call Trace: [ 78.036727][ T5021] [ 78.039688][ T5021] dump_stack_lvl+0x1e7/0x2d0 [ 78.044403][ T5021] ? nf_tcp_handle_invalid+0x650/0x650 [ 78.049872][ T5021] ? panic+0x770/0x770 [ 78.053965][ T5021] ? dccp_transmit_skb+0xdcb/0x1420 [ 78.059196][ T5021] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 78.064672][ T5021] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 78.070325][ T5021] dccp_xmit_packet+0x35a/0x530 [ 78.075209][ T5021] ? dccp_write_xmit+0x129/0x220 [ 78.080184][ T5021] dccp_write_xmit+0x135/0x220 [ 78.084973][ T5021] dccp_sendmsg+0x666/0x9e0 [ 78.089525][ T5021] ? dccp_getsockopt+0x1910/0x1910 [ 78.094669][ T5021] ? finish_task_switch+0x134/0x650 [ 78.099879][ T5021] ? inet_sendmsg+0x85/0x310 [ 78.104480][ T5021] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 78.109776][ T5021] ? security_socket_sendmsg+0x81/0xa0 [ 78.115260][ T5021] ? inet_send_prepare+0x250/0x250 [ 78.120408][ T5021] ____sys_sendmsg+0x592/0x890 [ 78.125214][ T5021] ? __sys_sendmsg_sock+0x30/0x30 [ 78.130285][ T5021] __sys_sendmsg+0x2b0/0x3a0 [ 78.134901][ T5021] ? ____sys_sendmsg+0x890/0x890 [ 78.139949][ T5021] ? print_irqtrace_events+0x220/0x220 [ 78.145429][ T5021] ? ptrace_stop+0x75a/0x970 [ 78.150044][ T5021] ? _raw_spin_unlock_irq+0x2e/0x50 [ 78.155266][ T5021] ? ptrace_notify+0x278/0x380 [ 78.160067][ T5021] ? syscall_enter_from_user_mode+0x32/0x230 [ 78.166067][ T5021] ? syscall_enter_from_user_mode+0x8c/0x230 [ 78.172064][ T5021] do_syscall_64+0x41/0xc0 [ 78.176505][ T5021] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.182449][ T5021] RIP: 0033:0x7ff622093b79 [ 78.186895][ T5021] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.206526][ T5021] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.215071][ T5021] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007ff622093b79 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 78.223060][ T5021] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 78.231056][ T5021] RBP: 00000000000120cc R08: 0000000000000006 R09: 0000000000000006 [ 78.239041][ T5021] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 78.247057][ T5021] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 78.255073][ T5021] [ 78.261969][ T5021] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 78.273262][ T5021] CPU: 0 PID: 5021 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 78.283713][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 78.293801][ T5021] Call Trace: [ 78.297096][ T5021] [ 78.300042][ T5021] dump_stack_lvl+0x1e7/0x2d0 [ 78.304743][ T5021] ? nf_tcp_handle_invalid+0x650/0x650 [ 78.310236][ T5021] ? panic+0x770/0x770 [ 78.314338][ T5021] ? dccp_transmit_skb+0xdcb/0x1420 [ 78.319578][ T5021] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 78.325097][ T5021] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 78.330876][ T5021] dccp_xmit_packet+0x35a/0x530 [ 78.335767][ T5021] ? dccp_write_xmit+0x129/0x220 [ 78.340757][ T5021] dccp_write_xmit+0x135/0x220 [ 78.345559][ T5021] dccp_sendmsg+0x666/0x9e0 [ 78.350091][ T5021] ? dccp_getsockopt+0x1910/0x1910 [ 78.355232][ T5021] ? finish_task_switch+0x134/0x650 [ 78.360472][ T5021] ? inet_sendmsg+0x85/0x310 [ 78.365090][ T5021] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 78.370490][ T5021] ? security_socket_sendmsg+0x81/0xa0 [ 78.375966][ T5021] ? inet_send_prepare+0x250/0x250 [ 78.381099][ T5021] ____sys_sendmsg+0x592/0x890 [ 78.385883][ T5021] ? __sys_sendmsg_sock+0x30/0x30 [ 78.390931][ T5021] __sys_sendmsg+0x2b0/0x3a0 [ 78.395542][ T5021] ? ____sys_sendmsg+0x890/0x890 [ 78.400506][ T5021] ? print_irqtrace_events+0x220/0x220 [ 78.405984][ T5021] ? ptrace_stop+0x75a/0x970 [ 78.410596][ T5021] ? _raw_spin_unlock_irq+0x2e/0x50 [ 78.415816][ T5021] ? ptrace_notify+0x278/0x380 [ 78.420601][ T5021] ? syscall_enter_from_user_mode+0x32/0x230 [ 78.426629][ T5021] ? syscall_enter_from_user_mode+0x8c/0x230 [ 78.432661][ T5021] do_syscall_64+0x41/0xc0 [ 78.437108][ T5021] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.443026][ T5021] RIP: 0033:0x7ff622093b79 [ 78.447474][ T5021] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 5021] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="s", iov_len=1}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 1 [ 78.467203][ T5021] RSP: 002b:00007ffef75db6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.475667][ T5021] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007ff622093b79 [ 78.483655][ T5021] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 78.491634][ T5021] RBP: 00000000000120cc R08: 0000000000000006 R09: 0000000000000006 [ 78.499617][ T5021] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef75db6dc [ 78.507598][ T5021] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 78.515596][ T5021] [ 78.522365][ T5021] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 78.533623][ T5021] CPU: 0 PID: 5021 Comm: syz-executor142 Not tainted 6.5.0-rc5-syzkaller-00063-g374a7f47bf40 #0 [ 78.544058][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 78.554158][ T5021] Call Trace: [ 78.557461][ T5021] [ 78.560398][ T5021] dump_stack_lvl+0x1e7/0x2d0 [ 78.565119][ T5021] ? nf_tcp_handle_invalid+0x650/0x650 [ 78.570689][ T5021] ? panic+0x770/0x770 [ 78.574868][ T5021] ? dccp_transmit_skb+0xdcb/0x1420 [ 78.580089][ T5021] ccid3_hc_tx_packet_sent+0x27b/0x300 [ 78.585581][ T5021] ? ccid3_hc_tx_send_packet+0x990/0x990 [ 78.591267][ T5021] dccp_xmit_packet+0x35a/0x530 [ 78.596155][ T5021] ? dccp_write_xmit+0x129/0x220 [ 78.601121][ T5021] dccp_write_xmit+0x135/0x220 [ 78.605928][ T5021] dccp_sendmsg+0x666/0x9e0 [ 78.610448][ T5021] ? dccp_getsockopt+0x1910/0x1910 [ 78.615961][ T5021] ? finish_task_switch+0x134/0x650 [ 78.621207][ T5021] ? inet_sendmsg+0x85/0x310 [ 78.625820][ T5021] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 78.631131][ T5021] ? security_socket_sendmsg+0x81/0xa0 [ 78.636619][ T5021] ? inet_send_prepare+0x250/0x250 [ 78.641758][ T5021] ____sys_sendmsg+0x592/0x890 [ 78.646547][ T5021] ? __sys_sendmsg_sock+0x30/0x30 [ 78.651591][ T5021] __sys_sendmsg+0x2b0/0x3a0 [ 78.656193][ T5021] ? ____sys_sendmsg+0x890/0x890 [ 78.661291][ T5021] ? print_irqtrace_events+0x220/0x220 [ 78.666767][ T5021] ? ptrace_stop+0x75a/0x970 [ 78.671380][ T5021] ? _raw_spin_unlock_irq+0x2e/0x50 [ 78.676599][ T5021] ? ptrace_notify+0x278/0x380 [ 78.681412][ T5021] ? syscall_enter_from_user_mode+0x32/0x230 [ 78.687427][ T5021] ? syscall_enter_from_user_mode+0x8c/0x230 [ 78.693464][ T5021] do_syscall_64+0x41/0xc0 [ 78.697920][ T5021] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.703860][ T5021] RIP: 0033:0x7ff622093b79