[ 37.780851][ T38] audit: type=1400 audit(1713660532.291:80): avc: denied { write } for pid=5100 comm="sh" path="pipe:[3569]" dev="pipefs" ino=3569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 37.791008][ T38] audit: type=1400 audit(1713660532.291:81): avc: denied { rlimitinh } for pid=5100 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.799524][ T38] audit: type=1400 audit(1713660532.291:82): avc: denied { siginh } for pid=5100 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.046760][ T38] audit: type=1400 audit(1713660532.581:83): avc: denied { write } for pid=5104 comm="sftp-server" path="pipe:[4693]" dev="pipefs" ino=4693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.614791][ T38] audit: type=1400 audit(1713660533.151:84): avc: denied { read } for pid=4666 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.624717][ T38] audit: type=1400 audit(1713660533.151:85): avc: denied { append } for pid=4666 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.634744][ T38] audit: type=1400 audit(1713660533.151:86): avc: denied { open } for pid=4666 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.645072][ T38] audit: type=1400 audit(1713660533.151:87): avc: denied { getattr } for pid=4666 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:22075' (ED25519) to the list of known hosts. [ 43.334109][ T38] audit: type=1400 audit(1713660537.871:88): avc: denied { execute } for pid=5180 comm="sh" name="syz-executor1776508477" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 executing program [ 43.342152][ T38] audit: type=1400 audit(1713660537.871:89): avc: denied { execute_no_trans } for pid=5180 comm="sh" path="/syz-executor1776508477" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 43.350156][ T38] audit: type=1400 audit(1713660537.881:90): avc: denied { execmem } for pid=5180 comm="syz-executor177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.356395][ T5182] dccp_xmit_packet: Payload too large (65475) for featneg. [ 43.357196][ T38] audit: type=1400 audit(1713660537.881:91): avc: denied { create } for pid=5182 comm="syz-executor177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 43.367335][ T38] audit: type=1400 audit(1713660537.881:92): avc: denied { bind } for pid=5182 comm="syz-executor177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 executing program [ 43.376177][ T38] audit: type=1400 audit(1713660537.881:93): avc: denied { name_bind } for pid=5182 comm="syz-executor177" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 43.381782][ T5183] dccp_xmit_packet: Payload too large (65475) for featneg. [ 43.385320][ T38] audit: type=1400 audit(1713660537.881:94): avc: denied { node_bind } for pid=5182 comm="syz-executor177" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 executing program [ 43.396934][ T38] audit: type=1400 audit(1713660537.881:95): avc: denied { listen } for pid=5182 comm="syz-executor177" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 43.399832][ T5184] dccp_xmit_packet: Payload too large (65475) for featneg. [ 43.405768][ T38] audit: type=1400 audit(1713660537.881:96): avc: denied { setopt } for pid=5182 comm="syz-executor177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 executing program [ 43.416654][ T38] audit: type=1400 audit(1713660537.881:97): avc: denied { connect } for pid=5182 comm="syz-executor177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 43.420971][ T5185] dccp_xmit_packet: Payload too large (65475) for featneg. executing program [ 43.442812][ T5186] dccp_xmit_packet: Payload too large (65475) for featneg. [ 43.455334][ T5186] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 43.459175][ T5186] CPU: 0 PID: 5186 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 43.464592][ T5186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 43.468444][ T5186] Call Trace: [ 43.469639][ T5186] [ 43.470745][ T5186] dump_stack_lvl+0x16c/0x1f0 [ 43.472402][ T5186] ccid3_update_send_interval+0x18e/0x1c0 [ 43.474362][ T5186] ccid3_hc_tx_packet_sent+0x134/0x190 [ 43.476423][ T5186] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 43.478469][ T5186] dccp_xmit_packet+0x27b/0x710 [ 43.480171][ T5186] dccp_write_xmit+0x16f/0x1d0 [ 43.481882][ T5186] dccp_sendmsg+0x9ae/0xd10 [ 43.483462][ T5186] ? __might_fault+0x13b/0x190 [ 43.485415][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 43.487310][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 43.489058][ T5186] inet_sendmsg+0x119/0x140 [ 43.490643][ T5186] ____sys_sendmsg+0xa09/0xc90 [ 43.492309][ T5186] ? copy_msghdr_from_user+0x10b/0x160 [ 43.494202][ T5186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 43.496044][ T5186] ? __release_sock+0x2ae/0x400 [ 43.497729][ T5186] ? rcu_is_watching+0x12/0xc0 [ 43.499388][ T5186] ? kfree+0x241/0x390 [ 43.500813][ T5186] ? __local_bh_enable_ip+0xa4/0x120 [ 43.502622][ T5186] ? lockdep_hardirqs_on+0x7c/0x110 [ 43.504460][ T5186] ___sys_sendmsg+0x135/0x1e0 [ 43.506147][ T5186] ? __pfx____sys_sendmsg+0x10/0x10 [ 43.507959][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 43.509780][ T5186] ? inet_sendmsg+0xc0/0x140 [ 43.511469][ T5186] ? __fget_light+0x176/0x210 [ 43.513150][ T5186] __sys_sendmsg+0x117/0x1f0 [ 43.514740][ T5186] ? __pfx___sys_sendmsg+0x10/0x10 [ 43.516546][ T5186] do_syscall_64+0xcf/0x260 [ 43.518127][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.520192][ T5186] RIP: 0033:0x7f4cc96a9bb9 [ 43.521727][ T5186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.528451][ T5186] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.531358][ T5186] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00007f4cc96a9bb9 [ 43.534234][ T5186] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 43.537045][ T5186] RBP: 000000000000a916 R08: 0000000000000006 R09: 0000000000000006 [ 43.539770][ T5186] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 43.542509][ T5186] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 43.545402][ T5186] [ 43.547402][ T5186] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 43.551470][ T5186] CPU: 2 PID: 5186 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 43.555009][ T5186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 43.558582][ T5186] Call Trace: [ 43.559759][ T5186] [ 43.560778][ T5186] dump_stack_lvl+0x16c/0x1f0 [ 43.562613][ T5186] ccid3_update_send_interval+0x18e/0x1c0 [ 43.564652][ T5186] ccid3_hc_tx_packet_sent+0x134/0x190 [ 43.566855][ T5186] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 43.568917][ T5186] dccp_xmit_packet+0x27b/0x710 [ 43.570689][ T5186] dccp_write_xmit+0x16f/0x1d0 [ 43.572396][ T5186] dccp_sendmsg+0x9ae/0xd10 [ 43.573959][ T5186] ? __might_fault+0x13b/0x190 [ 43.575729][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 43.577426][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 43.579265][ T5186] inet_sendmsg+0x119/0x140 [ 43.580844][ T5186] ____sys_sendmsg+0xa09/0xc90 [ 43.582506][ T5186] ? copy_msghdr_from_user+0x10b/0x160 [ 43.584565][ T5186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 43.586740][ T5186] ? hlock_class+0x4e/0x130 [ 43.588492][ T5186] ? hlock_class+0x4e/0x130 [ 43.590270][ T5186] ? __lock_acquire+0x14f4/0x3b30 [ 43.592189][ T5186] ___sys_sendmsg+0x135/0x1e0 [ 43.594094][ T5186] ? __pfx____sys_sendmsg+0x10/0x10 [ 43.596139][ T5186] ? __pfx___lock_acquire+0x10/0x10 [ 43.597920][ T5186] ? find_held_lock+0x2d/0x110 [ 43.599678][ T5186] ? __fget_light+0x176/0x210 [ 43.601461][ T5186] __sys_sendmsg+0x117/0x1f0 [ 43.603329][ T5186] ? __pfx___sys_sendmsg+0x10/0x10 [ 43.605102][ T5186] ? xfd_validate_state+0x5d/0x180 [ 43.606842][ T5186] do_syscall_64+0xcf/0x260 [ 43.608429][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.610464][ T5186] RIP: 0033:0x7f4cc96a9bb9 [ 43.612009][ T5186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.619487][ T5186] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.622533][ T5186] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007f4cc96a9bb9 [ 43.625266][ T5186] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 43.628080][ T5186] RBP: 000000000000a916 R08: 0000000000000006 R09: 0000000000000006 [ 43.631124][ T5186] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 43.634119][ T5186] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 43.637511][ T5186] [ 43.639419][ T5186] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 43.643941][ T5186] CPU: 2 PID: 5186 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 43.648365][ T5186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 43.652472][ T5186] Call Trace: [ 43.653826][ T5186] [ 43.654882][ T5186] dump_stack_lvl+0x16c/0x1f0 [ 43.656797][ T5186] ccid3_update_send_interval+0x18e/0x1c0 [ 43.659233][ T5186] ccid3_hc_tx_packet_sent+0x134/0x190 [ 43.661565][ T5186] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 43.664035][ T5186] dccp_xmit_packet+0x27b/0x710 [ 43.665706][ T5186] dccp_write_xmit+0x16f/0x1d0 [ 43.667346][ T5186] dccp_sendmsg+0x9ae/0xd10 [ 43.668929][ T5186] ? __might_fault+0x13b/0x190 [ 43.670584][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 43.672498][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 43.674378][ T5186] inet_sendmsg+0x119/0x140 [ 43.676384][ T5186] ____sys_sendmsg+0xa09/0xc90 [ 43.678452][ T5186] ? copy_msghdr_from_user+0x10b/0x160 [ 43.680724][ T5186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 43.682727][ T5186] ? hlock_class+0x4e/0x130 [ 43.684454][ T5186] ? hlock_class+0x4e/0x130 [ 43.686023][ T5186] ? __lock_acquire+0x14f4/0x3b30 [ 43.687774][ T5186] ___sys_sendmsg+0x135/0x1e0 [ 43.689400][ T5186] ? __pfx____sys_sendmsg+0x10/0x10 [ 43.691185][ T5186] ? __pfx___lock_acquire+0x10/0x10 [ 43.693042][ T5186] ? find_held_lock+0x2d/0x110 [ 43.694696][ T5186] ? __fget_light+0x176/0x210 [ 43.696369][ T5186] __sys_sendmsg+0x117/0x1f0 [ 43.698002][ T5186] ? __pfx___sys_sendmsg+0x10/0x10 [ 43.699773][ T5186] ? xfd_validate_state+0x5d/0x180 [ 43.701522][ T5186] do_syscall_64+0xcf/0x260 [ 43.703104][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.705195][ T5186] RIP: 0033:0x7f4cc96a9bb9 [ 43.706872][ T5186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.714528][ T5186] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.718108][ T5186] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f4cc96a9bb9 [ 43.721531][ T5186] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 43.724699][ T5186] RBP: 000000000000a916 R08: 0000000000000006 R09: 0000000000000006 [ 43.727664][ T5186] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 43.730887][ T5186] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 43.733703][ T5186] [ 43.735077][ T5186] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 43.738839][ T5186] CPU: 2 PID: 5186 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 43.742365][ T5186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 43.745853][ T5186] Call Trace: [ 43.747041][ T5186] [ 43.748166][ T5186] dump_stack_lvl+0x16c/0x1f0 [ 43.749924][ T5186] ccid3_update_send_interval+0x18e/0x1c0 [ 43.751900][ T5186] ccid3_hc_tx_packet_sent+0x134/0x190 [ 43.753696][ T5186] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 43.755813][ T5186] dccp_xmit_packet+0x27b/0x710 [ 43.757595][ T5186] dccp_write_xmit+0x16f/0x1d0 [ 43.759352][ T5186] dccp_sendmsg+0x9ae/0xd10 [ 43.760952][ T5186] ? __might_fault+0x13b/0x190 [ 43.762629][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 43.764375][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 43.766127][ T5186] inet_sendmsg+0x119/0x140 [ 43.767745][ T5186] ____sys_sendmsg+0xa09/0xc90 [ 43.769384][ T5186] ? copy_msghdr_from_user+0x10b/0x160 [ 43.771256][ T5186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 43.773263][ T5186] ? hlock_class+0x4e/0x130 [ 43.774922][ T5186] ? hlock_class+0x4e/0x130 [ 43.776598][ T5186] ? __lock_acquire+0x14f4/0x3b30 [ 43.778349][ T5186] ___sys_sendmsg+0x135/0x1e0 [ 43.779992][ T5186] ? __pfx____sys_sendmsg+0x10/0x10 [ 43.781777][ T5186] ? __pfx___lock_acquire+0x10/0x10 [ 43.783570][ T5186] ? find_held_lock+0x2d/0x110 [ 43.785216][ T5186] ? __fget_light+0x176/0x210 [ 43.786829][ T5186] __sys_sendmsg+0x117/0x1f0 [ 43.788422][ T5186] ? __pfx___sys_sendmsg+0x10/0x10 [ 43.790185][ T5186] do_syscall_64+0xcf/0x260 [ 43.791780][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.793832][ T5186] RIP: 0033:0x7f4cc96a9bb9 [ 43.795382][ T5186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.802033][ T5186] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.804915][ T5186] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f4cc96a9bb9 [ 43.807673][ T5186] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 43.810257][ T5186] RBP: 000000000000a916 R08: 0000000000000006 R09: 0000000000000006 [ 43.812970][ T5186] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 43.815675][ T5186] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 43.818476][ T5186] [ 43.819998][ T5186] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 43.823835][ T5186] CPU: 2 PID: 5186 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 43.827333][ T5186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 43.830767][ T5186] Call Trace: [ 43.831905][ T5186] [ 43.832843][ T5186] dump_stack_lvl+0x16c/0x1f0 [ 43.834302][ T5186] ccid3_update_send_interval+0x18e/0x1c0 [ 43.836087][ T5186] ccid3_hc_tx_packet_sent+0x134/0x190 [ 43.837953][ T5186] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 43.839983][ T5186] dccp_xmit_packet+0x27b/0x710 [ 43.841682][ T5186] dccp_write_xmit+0x16f/0x1d0 [ 43.843371][ T5186] dccp_sendmsg+0x9ae/0xd10 [ 43.844992][ T5186] ? __might_fault+0x13b/0x190 [ 43.846685][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 43.848442][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 43.850168][ T5186] inet_sendmsg+0x119/0x140 [ 43.851804][ T5186] ____sys_sendmsg+0xa09/0xc90 [ 43.853621][ T5186] ? copy_msghdr_from_user+0x10b/0x160 [ 43.855554][ T5186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 43.857385][ T5186] ? hlock_class+0x4e/0x130 [ 43.858972][ T5186] ? rcu_is_watching+0x12/0xc0 [ 43.860631][ T5186] ? kfree+0x241/0x390 [ 43.862042][ T5186] ? __lock_acquire+0x14f4/0x3b30 [ 43.863796][ T5186] ___sys_sendmsg+0x135/0x1e0 [ 43.865461][ T5186] ? __pfx____sys_sendmsg+0x10/0x10 [ 43.867248][ T5186] ? __pfx___lock_acquire+0x10/0x10 [ 43.869038][ T5186] ? find_held_lock+0x2d/0x110 [ 43.870690][ T5186] ? __fget_light+0x176/0x210 [ 43.872308][ T5186] __sys_sendmsg+0x117/0x1f0 [ 43.873903][ T5186] ? __pfx___sys_sendmsg+0x10/0x10 [ 43.875666][ T5186] do_syscall_64+0xcf/0x260 [ 43.877261][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.879309][ T5186] RIP: 0033:0x7f4cc96a9bb9 [ 43.880869][ T5186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.887415][ T5186] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.890250][ T5186] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f4cc96a9bb9 [ 43.892957][ T5186] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 43.895730][ T5186] RBP: 000000000000a916 R08: 0000000000000006 R09: 0000000000000006 [ 43.898418][ T5186] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 43.901152][ T5186] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 43.903927][ T5186] [ 43.905557][ T5186] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 43.909309][ T5186] CPU: 2 PID: 5186 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 43.912896][ T5186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 43.916423][ T5186] Call Trace: [ 43.917599][ T5186] [ 43.918639][ T5186] dump_stack_lvl+0x16c/0x1f0 [ 43.920298][ T5186] ccid3_update_send_interval+0x18e/0x1c0 [ 43.922285][ T5186] ccid3_hc_tx_packet_sent+0x134/0x190 [ 43.924186][ T5186] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 43.926281][ T5186] dccp_xmit_packet+0x27b/0x710 [ 43.927985][ T5186] dccp_write_xmit+0x16f/0x1d0 [ 43.929660][ T5186] dccp_sendmsg+0x9ae/0xd10 [ 43.931378][ T5186] ? __might_fault+0x13b/0x190 [ 43.933060][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 43.934840][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 43.936639][ T5186] inet_sendmsg+0x119/0x140 [ 43.938245][ T5186] ____sys_sendmsg+0xa09/0xc90 [ 43.939939][ T5186] ? copy_msghdr_from_user+0x10b/0x160 [ 43.941854][ T5186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 43.943724][ T5186] ? hlock_class+0x4e/0x130 [ 43.945304][ T5186] ? hlock_class+0x4e/0x130 [ 43.946869][ T5186] ? __lock_acquire+0x14f4/0x3b30 [ 43.948614][ T5186] ___sys_sendmsg+0x135/0x1e0 [ 43.950280][ T5186] ? __pfx____sys_sendmsg+0x10/0x10 [ 43.952095][ T5186] ? __pfx___lock_acquire+0x10/0x10 [ 43.953869][ T5186] ? find_held_lock+0x2d/0x110 [ 43.955505][ T5186] ? __fget_light+0x176/0x210 [ 43.957137][ T5186] __sys_sendmsg+0x117/0x1f0 [ 43.958738][ T5186] ? __pfx___sys_sendmsg+0x10/0x10 [ 43.960547][ T5186] do_syscall_64+0xcf/0x260 [ 43.962120][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.964396][ T5186] RIP: 0033:0x7f4cc96a9bb9 [ 43.965988][ T5186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.973439][ T5186] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.976669][ T5186] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4cc96a9bb9 [ 43.980155][ T5186] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 43.983112][ T5186] RBP: 000000000000a916 R08: 0000000000000006 R09: 0000000000000006 [ 43.985830][ T5186] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 43.988516][ T5186] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 43.991224][ T5186] [ 43.992731][ T5186] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 43.996531][ T5186] CPU: 2 PID: 5186 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 44.000071][ T5186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 44.003734][ T5186] Call Trace: [ 44.004913][ T5186] [ 44.006043][ T5186] dump_stack_lvl+0x16c/0x1f0 [ 44.007704][ T5186] ccid3_update_send_interval+0x18e/0x1c0 [ 44.009677][ T5186] ccid3_hc_tx_packet_sent+0x134/0x190 [ 44.011591][ T5186] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 44.013726][ T5186] dccp_xmit_packet+0x27b/0x710 [ 44.015440][ T5186] dccp_write_xmit+0x16f/0x1d0 [ 44.017126][ T5186] dccp_sendmsg+0x9ae/0xd10 [ 44.018686][ T5186] ? __might_fault+0x13b/0x190 [ 44.020338][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.022197][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.023987][ T5186] inet_sendmsg+0x119/0x140 [ 44.025564][ T5186] ____sys_sendmsg+0xa09/0xc90 [ 44.027231][ T5186] ? copy_msghdr_from_user+0x10b/0x160 [ 44.029125][ T5186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 44.030987][ T5186] ? hlock_class+0x4e/0x130 [ 44.032631][ T5186] ? hlock_class+0x4e/0x130 [ 44.034261][ T5186] ? __lock_acquire+0x14f4/0x3b30 [ 44.036016][ T5186] ___sys_sendmsg+0x135/0x1e0 [ 44.037640][ T5186] ? __pfx____sys_sendmsg+0x10/0x10 [ 44.039407][ T5186] ? __pfx___lock_acquire+0x10/0x10 [ 44.041220][ T5186] ? find_held_lock+0x2d/0x110 [ 44.043000][ T5186] ? __fget_light+0x176/0x210 [ 44.045080][ T5186] __sys_sendmsg+0x117/0x1f0 [ 44.046683][ T5186] ? __pfx___sys_sendmsg+0x10/0x10 [ 44.048419][ T5186] do_syscall_64+0xcf/0x260 [ 44.049973][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.051996][ T5186] RIP: 0033:0x7f4cc96a9bb9 [ 44.053593][ T5186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 44.060219][ T5186] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.063173][ T5186] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f4cc96a9bb9 [ 44.065914][ T5186] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 44.068601][ T5186] RBP: 000000000000a916 R08: 0000000000000006 R09: 0000000000000006 [ 44.071284][ T5186] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 44.074031][ T5186] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 44.076741][ T5186] [ 44.078438][ T5186] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 44.082643][ T5186] CPU: 2 PID: 5186 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 44.087267][ T5186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 44.090715][ T5186] Call Trace: [ 44.091888][ T5186] [ 44.093115][ T5186] dump_stack_lvl+0x16c/0x1f0 [ 44.095241][ T5186] ccid3_update_send_interval+0x18e/0x1c0 [ 44.097777][ T5186] ccid3_hc_tx_packet_sent+0x134/0x190 [ 44.100206][ T5186] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 44.102885][ T5186] dccp_xmit_packet+0x27b/0x710 [ 44.105046][ T5186] dccp_write_xmit+0x16f/0x1d0 [ 44.107154][ T5186] dccp_sendmsg+0x9ae/0xd10 [ 44.109195][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.111025][ T5186] ? ____sys_sendmsg+0x1de/0xc90 [ 44.112827][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.114600][ T5186] inet_sendmsg+0x119/0x140 [ 44.116233][ T5186] ____sys_sendmsg+0xa09/0xc90 [ 44.117928][ T5186] ? copy_msghdr_from_user+0x10b/0x160 [ 44.119853][ T5186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 44.121766][ T5186] ? hlock_class+0x4e/0x130 [ 44.123665][ T5186] ? hlock_class+0x4e/0x130 [ 44.125336][ T5186] ? __lock_acquire+0x14f4/0x3b30 [ 44.127109][ T5186] ___sys_sendmsg+0x135/0x1e0 [ 44.128773][ T5186] ? __pfx____sys_sendmsg+0x10/0x10 [ 44.130590][ T5186] ? __pfx___lock_acquire+0x10/0x10 [ 44.132431][ T5186] ? find_held_lock+0x2d/0x110 [ 44.134225][ T5186] ? __fget_light+0x176/0x210 [ 44.135898][ T5186] __sys_sendmsg+0x117/0x1f0 [ 44.137530][ T5186] ? __pfx___sys_sendmsg+0x10/0x10 [ 44.139313][ T5186] do_syscall_64+0xcf/0x260 [ 44.140905][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.143159][ T5186] RIP: 0033:0x7f4cc96a9bb9 [ 44.144898][ T5186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 44.151431][ T5186] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.154730][ T5186] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f4cc96a9bb9 [ 44.158061][ T5186] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 44.161420][ T5186] RBP: 000000000000a916 R08: 0000000000000006 R09: 0000000000000006 [ 44.164576][ T5186] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 44.167309][ T5186] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 44.170063][ T5186] [ 44.171496][ T5186] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 44.175689][ T5186] CPU: 2 PID: 5186 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 44.179260][ T5186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 44.182840][ T5186] Call Trace: [ 44.184393][ T5186] [ 44.185758][ T5186] dump_stack_lvl+0x16c/0x1f0 [ 44.187702][ T5186] ccid3_update_send_interval+0x18e/0x1c0 [ 44.189661][ T5186] ccid3_hc_tx_packet_sent+0x134/0x190 [ 44.191548][ T5186] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 44.193778][ T5186] dccp_xmit_packet+0x27b/0x710 [ 44.195615][ T5186] dccp_write_xmit+0x16f/0x1d0 [ 44.197343][ T5186] dccp_sendmsg+0x9ae/0xd10 [ 44.198946][ T5186] ? __might_fault+0x13b/0x190 [ 44.200654][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.202427][ T5186] ? ____sys_sendmsg+0x1de/0xc90 [ 44.204270][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.205975][ T5186] inet_sendmsg+0x119/0x140 [ 44.207585][ T5186] ____sys_sendmsg+0xa09/0xc90 [ 44.209214][ T5186] ? copy_msghdr_from_user+0x10b/0x160 [ 44.211052][ T5186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 44.212902][ T5186] ? hlock_class+0x4e/0x130 [ 44.214442][ T5186] ? hlock_class+0x4e/0x130 [ 44.215975][ T5186] ? __lock_acquire+0x14f4/0x3b30 [ 44.217692][ T5186] ___sys_sendmsg+0x135/0x1e0 [ 44.219325][ T5186] ? __pfx____sys_sendmsg+0x10/0x10 [ 44.221362][ T5186] ? __pfx___lock_acquire+0x10/0x10 [ 44.223562][ T5186] ? find_held_lock+0x2d/0x110 [ 44.225607][ T5186] ? __fget_light+0x176/0x210 [ 44.227595][ T5186] __sys_sendmsg+0x117/0x1f0 [ 44.229562][ T5186] ? __pfx___sys_sendmsg+0x10/0x10 [ 44.231733][ T5186] do_syscall_64+0xcf/0x260 [ 44.233698][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.236225][ T5186] RIP: 0033:0x7f4cc96a9bb9 [ 44.238118][ T5186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 44.246279][ T5186] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.249820][ T5186] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4cc96a9bb9 [ 44.252631][ T5186] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 44.255376][ T5186] RBP: 000000000000a916 R08: 0000000000000006 R09: 0000000000000006 [ 44.258140][ T5186] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 44.260892][ T5186] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 44.263685][ T5186] [ 44.265027][ T5186] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 44.268828][ T5186] CPU: 2 PID: 5186 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 44.272339][ T5186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 44.275971][ T5186] Call Trace: [ 44.277486][ T5186] [ 44.278755][ T5186] dump_stack_lvl+0x16c/0x1f0 [ 44.280602][ T5186] ccid3_update_send_interval+0x18e/0x1c0 [ 44.282632][ T5186] ccid3_hc_tx_packet_sent+0x134/0x190 [ 44.284506][ T5186] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 44.286558][ T5186] dccp_xmit_packet+0x27b/0x710 [ 44.288228][ T5186] dccp_write_xmit+0x16f/0x1d0 [ 44.289852][ T5186] dccp_sendmsg+0x9ae/0xd10 [ 44.291557][ T5186] ? __might_fault+0x13b/0x190 [ 44.293274][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.295023][ T5186] ? ____sys_sendmsg+0x1de/0xc90 [ 44.296779][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.298523][ T5186] inet_sendmsg+0x119/0x140 [ 44.300102][ T5186] ____sys_sendmsg+0xa09/0xc90 [ 44.301808][ T5186] ? copy_msghdr_from_user+0x10b/0x160 [ 44.303874][ T5186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 44.305740][ T5186] ? hlock_class+0x4e/0x130 [ 44.307340][ T5186] ? hlock_class+0x4e/0x130 [ 44.308999][ T5186] ? __lock_acquire+0x14f4/0x3b30 [ 44.310803][ T5186] ___sys_sendmsg+0x135/0x1e0 [ 44.312496][ T5186] ? __pfx____sys_sendmsg+0x10/0x10 [ 44.314332][ T5186] ? __pfx___lock_acquire+0x10/0x10 [ 44.316208][ T5186] ? find_held_lock+0x2d/0x110 [ 44.317914][ T5186] ? __fget_light+0x176/0x210 [ 44.319597][ T5186] __sys_sendmsg+0x117/0x1f0 [ 44.321240][ T5186] ? __pfx___sys_sendmsg+0x10/0x10 [ 44.323044][ T5186] do_syscall_64+0xcf/0x260 [ 44.324639][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.326686][ T5186] RIP: 0033:0x7f4cc96a9bb9 [ 44.328268][ T5186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 44.334886][ T5186] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.337784][ T5186] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4cc96a9bb9 [ 44.340543][ T5186] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 44.343316][ T5186] RBP: 000000000000a916 R08: 0000000000000006 R09: 0000000000000006 [ 44.346084][ T5186] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 44.348867][ T5186] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 44.351629][ T5186] [ 44.352975][ T5186] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 44.356799][ T5186] CPU: 2 PID: 5186 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 44.360363][ T5186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 44.363840][ T5186] Call Trace: [ 44.365006][ T5186] [ 44.366044][ T5186] dump_stack_lvl+0x16c/0x1f0 [ 44.367710][ T5186] ccid3_update_send_interval+0x18e/0x1c0 [ 44.369686][ T5186] ccid3_hc_tx_packet_sent+0x134/0x190 [ 44.371594][ T5186] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 44.373687][ T5186] dccp_xmit_packet+0x27b/0x710 [ 44.375400][ T5186] dccp_write_xmit+0x16f/0x1d0 [ 44.377085][ T5186] dccp_sendmsg+0x9ae/0xd10 [ 44.378673][ T5186] ? __might_fault+0x13b/0x190 [ 44.380354][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.382100][ T5186] ? ____sys_sendmsg+0x1de/0xc90 [ 44.383851][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.385617][ T5186] inet_sendmsg+0x119/0x140 [ 44.387214][ T5186] ____sys_sendmsg+0xa09/0xc90 [ 44.388901][ T5186] ? copy_msghdr_from_user+0x10b/0x160 [ 44.390806][ T5186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 44.392643][ T5186] ? hlock_class+0x4e/0x130 [ 44.394241][ T5186] ? rcu_is_watching+0x12/0xc0 [ 44.395937][ T5186] ? kfree+0x241/0x390 [ 44.397363][ T5186] ? __lock_acquire+0x14f4/0x3b30 [ 44.399104][ T5186] ___sys_sendmsg+0x135/0x1e0 [ 44.400750][ T5186] ? __pfx____sys_sendmsg+0x10/0x10 [ 44.402545][ T5186] ? __pfx___lock_acquire+0x10/0x10 [ 44.404310][ T5186] ? find_held_lock+0x2d/0x110 [ 44.405959][ T5186] ? __fget_light+0x176/0x210 [ 44.407628][ T5186] __sys_sendmsg+0x117/0x1f0 [ 44.409215][ T5186] ? __pfx___sys_sendmsg+0x10/0x10 [ 44.410967][ T5186] do_syscall_64+0xcf/0x260 [ 44.412543][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.414710][ T5186] RIP: 0033:0x7f4cc96a9bb9 [ 44.416257][ T5186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 44.422744][ T5186] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.425995][ T5186] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4cc96a9bb9 [ 44.428679][ T5186] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 44.431461][ T5186] RBP: 000000000000a916 R08: 0000000000000006 R09: 0000000000000006 [ 44.434337][ T5186] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 44.437499][ T5186] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 44.440687][ T5186] [ 44.442518][ T5186] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 44.446538][ T5186] CPU: 2 PID: 5186 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 44.450125][ T5186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 44.453633][ T5186] Call Trace: [ 44.454800][ T5186] [ 44.455843][ T5186] dump_stack_lvl+0x16c/0x1f0 [ 44.457492][ T5186] ccid3_update_send_interval+0x18e/0x1c0 [ 44.459443][ T5186] ccid3_hc_tx_packet_sent+0x134/0x190 [ 44.461338][ T5186] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 44.463422][ T5186] dccp_xmit_packet+0x27b/0x710 [ 44.465110][ T5186] dccp_write_xmit+0x16f/0x1d0 [ 44.466770][ T5186] dccp_sendmsg+0x9ae/0xd10 [ 44.468360][ T5186] ? __might_fault+0x13b/0x190 [ 44.470014][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.471749][ T5186] ? ____sys_sendmsg+0x1de/0xc90 [ 44.473513][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.475250][ T5186] inet_sendmsg+0x119/0x140 [ 44.476857][ T5186] ____sys_sendmsg+0xa09/0xc90 [ 44.478510][ T5186] ? copy_msghdr_from_user+0x10b/0x160 [ 44.480389][ T5186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 44.482214][ T5186] ? hlock_class+0x4e/0x130 [ 44.484009][ T5186] ? hlock_class+0x4e/0x130 [ 44.485973][ T5186] ? __lock_acquire+0x14f4/0x3b30 [ 44.487735][ T5186] ___sys_sendmsg+0x135/0x1e0 [ 44.489331][ T5186] ? __pfx____sys_sendmsg+0x10/0x10 [ 44.491102][ T5186] ? __pfx___lock_acquire+0x10/0x10 [ 44.492890][ T5186] ? find_held_lock+0x2d/0x110 [ 44.494530][ T5186] ? __fget_light+0x176/0x210 [ 44.496199][ T5186] __sys_sendmsg+0x117/0x1f0 [ 44.497827][ T5186] ? __pfx___sys_sendmsg+0x10/0x10 [ 44.499627][ T5186] do_syscall_64+0xcf/0x260 [ 44.501214][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.503287][ T5186] RIP: 0033:0x7f4cc96a9bb9 [ 44.504847][ T5186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 44.511447][ T5186] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.514344][ T5186] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4cc96a9bb9 [ 44.517107][ T5186] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 44.519782][ T5186] RBP: 000000000000a916 R08: 0000000000000006 R09: 0000000000000006 [ 44.522481][ T5186] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 44.525164][ T5186] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 44.527892][ T5186] [ 44.529344][ T5186] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 44.533145][ T5186] CPU: 2 PID: 5186 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 44.536677][ T5186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 44.540108][ T5186] Call Trace: [ 44.541253][ T5186] [ 44.542295][ T5186] dump_stack_lvl+0x16c/0x1f0 [ 44.543927][ T5186] ccid3_update_send_interval+0x18e/0x1c0 [ 44.545881][ T5186] ccid3_hc_tx_packet_sent+0x134/0x190 [ 44.547777][ T5186] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 44.549861][ T5186] dccp_xmit_packet+0x27b/0x710 [ 44.551573][ T5186] dccp_write_xmit+0x16f/0x1d0 [ 44.553252][ T5186] dccp_sendmsg+0x9ae/0xd10 [ 44.554834][ T5186] ? __might_fault+0x13b/0x190 [ 44.556525][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.558277][ T5186] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.560042][ T5186] inet_sendmsg+0x119/0x140 [ 44.561638][ T5186] ____sys_sendmsg+0xa09/0xc90 [ 44.563323][ T5186] ? copy_msghdr_from_user+0x10b/0x160 [ 44.565249][ T5186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 44.567106][ T5186] ? hlock_class+0x4e/0x130 [ 44.568714][ T5186] ? __lock_acquire+0x14f4/0x3b30 [ 44.570485][ T5186] ___sys_sendmsg+0x135/0x1e0 [ 44.572140][ T5186] ? __pfx____sys_sendmsg+0x10/0x10 [ 44.573900][ T5186] ? __pfx___lock_acquire+0x10/0x10 [ 44.575732][ T5186] ? find_held_lock+0x2d/0x110 [ 44.577420][ T5186] ? __fget_light+0x176/0x210 [ 44.579057][ T5186] __sys_sendmsg+0x117/0x1f0 [ 44.580685][ T5186] ? __pfx___sys_sendmsg+0x10/0x10 [ 44.582473][ T5186] do_syscall_64+0xcf/0x260 [ 44.584070][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.586128][ T5186] RIP: 0033:0x7f4cc96a9bb9 [ 44.587696][ T5186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 44.594308][ T5186] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.597191][ T5186] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f4cc96a9bb9 [ 44.599928][ T5186] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 44.602635][ T5186] RBP: 000000000000a916 R08: 0000000000000006 R09: 0000000000000006 [ 44.605362][ T5186] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 44.608094][ T5186] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 44.610795][ T5186] executing program [ 44.620308][ T5195] dccp_xmit_packet: Payload too large (65475) for featneg. executing program [ 44.637934][ T5196] dccp_xmit_packet: Payload too large (65475) for featneg. executing program [ 44.655192][ T5197] dccp_xmit_packet: Payload too large (65475) for featneg. executing program [ 44.673582][ T5198] dccp_xmit_packet: Payload too large (65475) for featneg. [ 44.681653][ T5198] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 44.685780][ T5198] CPU: 2 PID: 5198 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 44.689317][ T5198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 44.692774][ T5198] Call Trace: [ 44.693923][ T5198] [ 44.694953][ T5198] dump_stack_lvl+0x16c/0x1f0 [ 44.696596][ T5198] ccid3_update_send_interval+0x18e/0x1c0 [ 44.698555][ T5198] ccid3_hc_tx_packet_sent+0x134/0x190 [ 44.700430][ T5198] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 44.702504][ T5198] dccp_xmit_packet+0x27b/0x710 [ 44.704219][ T5198] dccp_write_xmit+0x16f/0x1d0 [ 44.705882][ T5198] dccp_sendmsg+0x9ae/0xd10 [ 44.707451][ T5198] ? __might_fault+0x13b/0x190 [ 44.709120][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.710948][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.712954][ T5198] inet_sendmsg+0x119/0x140 [ 44.714659][ T5198] ____sys_sendmsg+0xa09/0xc90 [ 44.716371][ T5198] ? copy_msghdr_from_user+0x10b/0x160 [ 44.718274][ T5198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 44.720126][ T5198] ? __release_sock+0x2ae/0x400 [ 44.721830][ T5198] ? rcu_is_watching+0x12/0xc0 [ 44.723516][ T5198] ? kfree+0x241/0x390 [ 44.724959][ T5198] ? __local_bh_enable_ip+0xa4/0x120 [ 44.726800][ T5198] ? lockdep_hardirqs_on+0x7c/0x110 [ 44.728627][ T5198] ___sys_sendmsg+0x135/0x1e0 [ 44.730275][ T5198] ? __pfx____sys_sendmsg+0x10/0x10 [ 44.732274][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.734191][ T5198] ? inet_sendmsg+0xc0/0x140 [ 44.735856][ T5198] ? __fget_light+0x176/0x210 [ 44.737612][ T5198] __sys_sendmsg+0x117/0x1f0 [ 44.739433][ T5198] ? __pfx___sys_sendmsg+0x10/0x10 [ 44.741382][ T5198] do_syscall_64+0xcf/0x260 [ 44.743061][ T5198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.745312][ T5198] RIP: 0033:0x7f4cc96a9bb9 [ 44.746977][ T5198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 44.753895][ T5198] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.756781][ T5198] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007f4cc96a9bb9 [ 44.759502][ T5198] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 44.762224][ T5198] RBP: 000000000000ade6 R08: 0000000000000006 R09: 0000000000000006 [ 44.764950][ T5198] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 44.767788][ T5198] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 44.770602][ T5198] [ 44.772357][ T5198] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 44.776687][ T5198] CPU: 2 PID: 5198 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 44.780304][ T5198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 44.783959][ T5198] Call Trace: [ 44.785196][ T5198] [ 44.786463][ T5198] dump_stack_lvl+0x16c/0x1f0 [ 44.788165][ T5198] ccid3_update_send_interval+0x18e/0x1c0 [ 44.790168][ T5198] ccid3_hc_tx_packet_sent+0x134/0x190 [ 44.792092][ T5198] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 44.794201][ T5198] dccp_xmit_packet+0x27b/0x710 [ 44.795908][ T5198] dccp_write_xmit+0x16f/0x1d0 [ 44.797636][ T5198] dccp_sendmsg+0x9ae/0xd10 [ 44.799385][ T5198] ? __might_fault+0x13b/0x190 [ 44.801150][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.802990][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.804994][ T5198] inet_sendmsg+0x119/0x140 [ 44.806635][ T5198] ____sys_sendmsg+0xa09/0xc90 [ 44.808707][ T5198] ? copy_msghdr_from_user+0x10b/0x160 [ 44.811046][ T5198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 44.813100][ T5198] ? hlock_class+0x4e/0x130 [ 44.814744][ T5198] ? hlock_class+0x4e/0x130 [ 44.816538][ T5198] ? __lock_acquire+0x14f4/0x3b30 [ 44.818439][ T5198] ___sys_sendmsg+0x135/0x1e0 [ 44.820200][ T5198] ? __pfx____sys_sendmsg+0x10/0x10 [ 44.822367][ T5198] ? __pfx___lock_acquire+0x10/0x10 [ 44.824349][ T5198] ? find_held_lock+0x2d/0x110 [ 44.826313][ T5198] ? __fget_light+0x176/0x210 [ 44.828025][ T5198] __sys_sendmsg+0x117/0x1f0 [ 44.829653][ T5198] ? __pfx___sys_sendmsg+0x10/0x10 [ 44.831510][ T5198] do_syscall_64+0xcf/0x260 [ 44.833478][ T5198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.836039][ T5198] RIP: 0033:0x7f4cc96a9bb9 [ 44.837944][ T5198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 44.844578][ T5198] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.847476][ T5198] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f4cc96a9bb9 [ 44.850235][ T5198] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 44.852991][ T5198] RBP: 000000000000ade6 R08: 0000000000000006 R09: 0000000000000006 [ 44.855754][ T5198] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 44.858467][ T5198] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 44.861210][ T5198] [ 44.862784][ T5198] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 44.866544][ T5198] CPU: 2 PID: 5198 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 44.870079][ T5198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 44.873531][ T5198] Call Trace: [ 44.874689][ T5198] [ 44.875860][ T5198] dump_stack_lvl+0x16c/0x1f0 [ 44.877688][ T5198] ccid3_update_send_interval+0x18e/0x1c0 [ 44.879779][ T5198] ccid3_hc_tx_packet_sent+0x134/0x190 [ 44.881971][ T5198] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 44.884240][ T5198] dccp_xmit_packet+0x27b/0x710 [ 44.886252][ T5198] dccp_write_xmit+0x16f/0x1d0 [ 44.888014][ T5198] dccp_sendmsg+0x9ae/0xd10 [ 44.889663][ T5198] ? __might_fault+0x13b/0x190 [ 44.891467][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.893336][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.895211][ T5198] inet_sendmsg+0x119/0x140 [ 44.896853][ T5198] ____sys_sendmsg+0xa09/0xc90 [ 44.898563][ T5198] ? copy_msghdr_from_user+0x10b/0x160 [ 44.900561][ T5198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 44.902444][ T5198] ? hlock_class+0x4e/0x130 [ 44.904011][ T5198] ? rcu_is_watching+0x12/0xc0 [ 44.905700][ T5198] ? kfree+0x241/0x390 [ 44.907135][ T5198] ? __lock_acquire+0x14f4/0x3b30 [ 44.908912][ T5198] ___sys_sendmsg+0x135/0x1e0 [ 44.910569][ T5198] ? __pfx____sys_sendmsg+0x10/0x10 [ 44.912398][ T5198] ? __pfx___lock_acquire+0x10/0x10 [ 44.914227][ T5198] ? find_held_lock+0x2d/0x110 [ 44.915879][ T5198] ? __fget_light+0x176/0x210 [ 44.917501][ T5198] __sys_sendmsg+0x117/0x1f0 [ 44.919133][ T5198] ? __pfx___sys_sendmsg+0x10/0x10 [ 44.920993][ T5198] do_syscall_64+0xcf/0x260 [ 44.922812][ T5198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.924940][ T5198] RIP: 0033:0x7f4cc96a9bb9 [ 44.926530][ T5198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 44.933663][ T5198] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.936815][ T5198] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f4cc96a9bb9 [ 44.939954][ T5198] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 44.943093][ T5198] RBP: 000000000000ade6 R08: 0000000000000006 R09: 0000000000000006 [ 44.946090][ T5198] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 44.948829][ T5198] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 44.951598][ T5198] [ 44.953085][ T5198] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 44.956904][ T5198] CPU: 2 PID: 5198 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 44.960470][ T5198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 44.964015][ T5198] Call Trace: [ 44.965200][ T5198] [ 44.966243][ T5198] dump_stack_lvl+0x16c/0x1f0 [ 44.967919][ T5198] ccid3_update_send_interval+0x18e/0x1c0 [ 44.969909][ T5198] ccid3_hc_tx_packet_sent+0x134/0x190 [ 44.971822][ T5198] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 44.973919][ T5198] dccp_xmit_packet+0x27b/0x710 [ 44.975621][ T5198] dccp_write_xmit+0x16f/0x1d0 [ 44.977301][ T5198] dccp_sendmsg+0x9ae/0xd10 [ 44.978877][ T5198] ? __might_fault+0x13b/0x190 [ 44.980564][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.982314][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 44.984065][ T5198] inet_sendmsg+0x119/0x140 [ 44.985650][ T5198] ____sys_sendmsg+0xa09/0xc90 [ 44.987598][ T5198] ? copy_msghdr_from_user+0x10b/0x160 [ 44.989768][ T5198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 44.991620][ T5198] ? hlock_class+0x4e/0x130 [ 44.993194][ T5198] ? hlock_class+0x4e/0x130 [ 44.994765][ T5198] ? __lock_acquire+0x14f4/0x3b30 [ 44.996522][ T5198] ___sys_sendmsg+0x135/0x1e0 [ 44.998159][ T5198] ? __pfx____sys_sendmsg+0x10/0x10 [ 44.999971][ T5198] ? __pfx___lock_acquire+0x10/0x10 [ 45.001785][ T5198] ? find_held_lock+0x2d/0x110 [ 45.003428][ T5198] ? __fget_light+0x176/0x210 [ 45.005060][ T5198] __sys_sendmsg+0x117/0x1f0 [ 45.006694][ T5198] ? __pfx___sys_sendmsg+0x10/0x10 [ 45.008731][ T5198] do_syscall_64+0xcf/0x260 [ 45.010326][ T5198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.012647][ T5198] RIP: 0033:0x7f4cc96a9bb9 [ 45.014362][ T5198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 45.022112][ T5198] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.025691][ T5198] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f4cc96a9bb9 [ 45.029061][ T5198] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 45.032460][ T5198] RBP: 000000000000ade6 R08: 0000000000000006 R09: 0000000000000006 [ 45.035890][ T5198] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 45.039298][ T5198] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 45.042717][ T5198] [ 45.044418][ T5198] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 45.049096][ T5198] CPU: 2 PID: 5198 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 45.053332][ T5198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 45.056879][ T5198] Call Trace: [ 45.058265][ T5198] [ 45.059388][ T5198] dump_stack_lvl+0x16c/0x1f0 [ 45.061441][ T5198] ccid3_update_send_interval+0x18e/0x1c0 [ 45.063772][ T5198] ccid3_hc_tx_packet_sent+0x134/0x190 [ 45.065817][ T5198] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 45.067912][ T5198] dccp_xmit_packet+0x27b/0x710 [ 45.069619][ T5198] dccp_write_xmit+0x16f/0x1d0 [ 45.071225][ T5198] dccp_sendmsg+0x9ae/0xd10 [ 45.073005][ T5198] ? __might_fault+0x13b/0x190 [ 45.074718][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.076485][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.078228][ T5198] inet_sendmsg+0x119/0x140 [ 45.079824][ T5198] ____sys_sendmsg+0xa09/0xc90 [ 45.081739][ T5198] ? copy_msghdr_from_user+0x10b/0x160 [ 45.083840][ T5198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 45.085722][ T5198] ? hlock_class+0x4e/0x130 [ 45.087638][ T5198] ? rcu_is_watching+0x12/0xc0 [ 45.089660][ T5198] ? kfree+0x241/0x390 [ 45.091243][ T5198] ? __lock_acquire+0x14f4/0x3b30 [ 45.093333][ T5198] ___sys_sendmsg+0x135/0x1e0 [ 45.095384][ T5198] ? __pfx____sys_sendmsg+0x10/0x10 [ 45.097641][ T5198] ? __pfx___lock_acquire+0x10/0x10 [ 45.099882][ T5198] ? find_held_lock+0x2d/0x110 [ 45.101943][ T5198] ? __fget_light+0x176/0x210 [ 45.103985][ T5198] __sys_sendmsg+0x117/0x1f0 [ 45.105986][ T5198] ? __pfx___sys_sendmsg+0x10/0x10 [ 45.108186][ T5198] do_syscall_64+0xcf/0x260 [ 45.110138][ T5198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.112211][ T5198] RIP: 0033:0x7f4cc96a9bb9 [ 45.113782][ T5198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 45.121038][ T5198] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.124628][ T5198] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4cc96a9bb9 [ 45.127982][ T5198] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 45.130754][ T5198] RBP: 000000000000ade6 R08: 0000000000000006 R09: 0000000000000006 [ 45.133398][ T5198] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 45.135816][ T5198] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 45.138523][ T5198] [ 45.140042][ T5198] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 45.144137][ T5198] CPU: 2 PID: 5198 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 45.147869][ T5198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 45.151661][ T5198] Call Trace: [ 45.152914][ T5198] [ 45.154067][ T5198] dump_stack_lvl+0x16c/0x1f0 [ 45.156085][ T5198] ccid3_update_send_interval+0x18e/0x1c0 [ 45.158556][ T5198] ccid3_hc_tx_packet_sent+0x134/0x190 [ 45.160915][ T5198] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 45.163498][ T5198] dccp_xmit_packet+0x27b/0x710 [ 45.165638][ T5198] dccp_write_xmit+0x16f/0x1d0 [ 45.167704][ T5198] dccp_sendmsg+0x9ae/0xd10 [ 45.169583][ T5198] ? __might_fault+0x13b/0x190 [ 45.171415][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.173259][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.175255][ T5198] inet_sendmsg+0x119/0x140 [ 45.177073][ T5198] ____sys_sendmsg+0xa09/0xc90 [ 45.178739][ T5198] ? copy_msghdr_from_user+0x10b/0x160 [ 45.180917][ T5198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 45.182970][ T5198] ? hlock_class+0x4e/0x130 [ 45.184537][ T5198] ? hlock_class+0x4e/0x130 [ 45.186103][ T5198] ? __lock_acquire+0x14f4/0x3b30 [ 45.187851][ T5198] ___sys_sendmsg+0x135/0x1e0 [ 45.189491][ T5198] ? __pfx____sys_sendmsg+0x10/0x10 [ 45.191249][ T5198] ? __pfx___lock_acquire+0x10/0x10 [ 45.193032][ T5198] ? find_held_lock+0x2d/0x110 [ 45.194675][ T5198] ? __fget_light+0x176/0x210 [ 45.196295][ T5198] __sys_sendmsg+0x117/0x1f0 [ 45.197901][ T5198] ? __pfx___sys_sendmsg+0x10/0x10 [ 45.199596][ T5198] do_syscall_64+0xcf/0x260 [ 45.201253][ T5198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.203321][ T5198] RIP: 0033:0x7f4cc96a9bb9 [ 45.205172][ T5198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 45.212894][ T5198] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.216515][ T5198] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f4cc96a9bb9 [ 45.219843][ T5198] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 45.222544][ T5198] RBP: 000000000000ade6 R08: 0000000000000006 R09: 0000000000000006 [ 45.225239][ T5198] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 45.227964][ T5198] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 45.230671][ T5198] [ 45.232210][ T5198] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 45.236290][ T5198] CPU: 2 PID: 5198 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 45.240181][ T5198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 45.244278][ T5198] Call Trace: [ 45.245731][ T5198] [ 45.246988][ T5198] dump_stack_lvl+0x16c/0x1f0 [ 45.248822][ T5198] ccid3_update_send_interval+0x18e/0x1c0 [ 45.251250][ T5198] ccid3_hc_tx_packet_sent+0x134/0x190 [ 45.253596][ T5198] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 45.256184][ T5198] dccp_xmit_packet+0x27b/0x710 [ 45.258312][ T5198] dccp_write_xmit+0x16f/0x1d0 [ 45.260400][ T5198] dccp_sendmsg+0x9ae/0xd10 [ 45.262339][ T5198] ? __might_fault+0x13b/0x190 [ 45.264426][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.266175][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.267947][ T5198] inet_sendmsg+0x119/0x140 [ 45.269550][ T5198] ____sys_sendmsg+0xa09/0xc90 [ 45.271235][ T5198] ? copy_msghdr_from_user+0x10b/0x160 [ 45.273171][ T5198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 45.275028][ T5198] ? hlock_class+0x4e/0x130 [ 45.276656][ T5198] ? hlock_class+0x4e/0x130 [ 45.278261][ T5198] ? __lock_acquire+0x14f4/0x3b30 [ 45.280074][ T5198] ___sys_sendmsg+0x135/0x1e0 [ 45.281828][ T5198] ? __pfx____sys_sendmsg+0x10/0x10 [ 45.283760][ T5198] ? __pfx___lock_acquire+0x10/0x10 [ 45.285614][ T5198] ? find_held_lock+0x2d/0x110 [ 45.287322][ T5198] ? __fget_light+0x176/0x210 [ 45.289218][ T5198] __sys_sendmsg+0x117/0x1f0 [ 45.291072][ T5198] ? __pfx___sys_sendmsg+0x10/0x10 [ 45.292917][ T5198] do_syscall_64+0xcf/0x260 [ 45.294876][ T5198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.297449][ T5198] RIP: 0033:0x7f4cc96a9bb9 [ 45.299375][ T5198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 45.305983][ T5198] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.308853][ T5198] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f4cc96a9bb9 [ 45.311589][ T5198] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 45.314305][ T5198] RBP: 000000000000ade6 R08: 0000000000000006 R09: 0000000000000006 [ 45.317416][ T5198] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 45.320142][ T5198] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 45.322891][ T5198] [ 45.324350][ T5198] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 45.328210][ T5198] CPU: 2 PID: 5198 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 45.332040][ T5198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 45.335545][ T5198] Call Trace: [ 45.336745][ T5198] [ 45.337794][ T5198] dump_stack_lvl+0x16c/0x1f0 [ 45.339563][ T5198] ccid3_update_send_interval+0x18e/0x1c0 [ 45.341885][ T5198] ccid3_hc_tx_packet_sent+0x134/0x190 [ 45.344227][ T5198] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 45.346788][ T5198] dccp_xmit_packet+0x27b/0x710 [ 45.348948][ T5198] dccp_write_xmit+0x16f/0x1d0 [ 45.351000][ T5198] dccp_sendmsg+0x9ae/0xd10 [ 45.352876][ T5198] ? __might_fault+0x13b/0x190 [ 45.354919][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.357096][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.359249][ T5198] inet_sendmsg+0x119/0x140 [ 45.361205][ T5198] ____sys_sendmsg+0xa09/0xc90 [ 45.363274][ T5198] ? copy_msghdr_from_user+0x10b/0x160 [ 45.365611][ T5198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 45.367888][ T5198] ? hlock_class+0x4e/0x130 [ 45.369856][ T5198] ? rcu_is_watching+0x12/0xc0 [ 45.371939][ T5198] ? kfree+0x241/0x390 [ 45.373697][ T5198] ? __lock_acquire+0x14f4/0x3b30 [ 45.375876][ T5198] ___sys_sendmsg+0x135/0x1e0 [ 45.377937][ T5198] ? __pfx____sys_sendmsg+0x10/0x10 [ 45.380189][ T5198] ? __pfx___lock_acquire+0x10/0x10 [ 45.382421][ T5198] ? find_held_lock+0x2d/0x110 [ 45.384497][ T5198] ? __fget_light+0x176/0x210 [ 45.386355][ T5198] __sys_sendmsg+0x117/0x1f0 [ 45.388354][ T5198] ? __pfx___sys_sendmsg+0x10/0x10 [ 45.390580][ T5198] do_syscall_64+0xcf/0x260 [ 45.392540][ T5198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.395091][ T5198] RIP: 0033:0x7f4cc96a9bb9 [ 45.397061][ T5198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 45.404851][ T5198] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.408414][ T5198] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4cc96a9bb9 [ 45.411756][ T5198] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 45.415041][ T5198] RBP: 000000000000ade6 R08: 0000000000000006 R09: 0000000000000006 [ 45.418405][ T5198] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 45.421676][ T5198] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 45.425073][ T5198] [ 45.426846][ T5198] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 45.430913][ T5198] CPU: 2 PID: 5198 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 45.434687][ T5198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 45.438126][ T5198] Call Trace: [ 45.439307][ T5198] [ 45.440574][ T5198] dump_stack_lvl+0x16c/0x1f0 [ 45.442616][ T5198] ccid3_update_send_interval+0x18e/0x1c0 [ 45.444796][ T5198] ccid3_hc_tx_packet_sent+0x134/0x190 [ 45.446678][ T5198] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 45.448790][ T5198] dccp_xmit_packet+0x27b/0x710 [ 45.450484][ T5198] dccp_write_xmit+0x16f/0x1d0 [ 45.452193][ T5198] dccp_sendmsg+0x9ae/0xd10 [ 45.453788][ T5198] ? __might_fault+0x13b/0x190 [ 45.455556][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.457731][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.459655][ T5198] inet_sendmsg+0x119/0x140 [ 45.461584][ T5198] ____sys_sendmsg+0xa09/0xc90 [ 45.463646][ T5198] ? copy_msghdr_from_user+0x10b/0x160 [ 45.465930][ T5198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 45.468200][ T5198] ? hlock_class+0x4e/0x130 [ 45.470128][ T5198] ? hlock_class+0x4e/0x130 [ 45.472081][ T5198] ? __lock_acquire+0x14f4/0x3b30 [ 45.474217][ T5198] ___sys_sendmsg+0x135/0x1e0 [ 45.476261][ T5198] ? __pfx____sys_sendmsg+0x10/0x10 [ 45.478463][ T5198] ? __pfx___lock_acquire+0x10/0x10 [ 45.480523][ T5198] ? find_held_lock+0x2d/0x110 [ 45.482309][ T5198] ? __fget_light+0x176/0x210 [ 45.484104][ T5198] __sys_sendmsg+0x117/0x1f0 [ 45.486121][ T5198] ? __pfx___sys_sendmsg+0x10/0x10 [ 45.488157][ T5198] do_syscall_64+0xcf/0x260 [ 45.489851][ T5198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.492365][ T5198] RIP: 0033:0x7f4cc96a9bb9 [ 45.494308][ T5198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 45.501170][ T5198] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.504051][ T5198] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4cc96a9bb9 [ 45.506782][ T5198] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 45.509536][ T5198] RBP: 000000000000ade6 R08: 0000000000000006 R09: 0000000000000006 [ 45.512267][ T5198] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 45.514999][ T5198] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 45.517743][ T5198] [ 45.520032][ T5198] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 45.524757][ T5198] CPU: 1 PID: 5198 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 45.529481][ T5198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 45.534086][ T5198] Call Trace: [ 45.535620][ T5198] [ 45.536971][ T5198] dump_stack_lvl+0x16c/0x1f0 [ 45.539144][ T5198] ccid3_update_send_interval+0x18e/0x1c0 [ 45.541802][ T5198] ccid3_hc_tx_packet_sent+0x134/0x190 [ 45.544288][ T5198] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 45.547026][ T5198] dccp_xmit_packet+0x27b/0x710 [ 45.549294][ T5198] dccp_write_xmit+0x16f/0x1d0 [ 45.551470][ T5198] dccp_sendmsg+0x9ae/0xd10 [ 45.553458][ T5198] ? __might_fault+0x13b/0x190 [ 45.555581][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.557852][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.560144][ T5198] inet_sendmsg+0x119/0x140 [ 45.562188][ T5198] ____sys_sendmsg+0xa09/0xc90 [ 45.564349][ T5198] ? copy_msghdr_from_user+0x10b/0x160 [ 45.566855][ T5198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 45.569249][ T5198] ? hlock_class+0x4e/0x130 [ 45.571308][ T5198] ? hlock_class+0x4e/0x130 [ 45.573415][ T5198] ? __lock_acquire+0x14f4/0x3b30 [ 45.575693][ T5198] ___sys_sendmsg+0x135/0x1e0 [ 45.577862][ T5198] ? __pfx____sys_sendmsg+0x10/0x10 [ 45.580126][ T5198] ? __pfx___lock_acquire+0x10/0x10 [ 45.582512][ T5198] ? find_held_lock+0x2d/0x110 [ 45.584704][ T5198] ? __fget_light+0x176/0x210 [ 45.586847][ T5198] __sys_sendmsg+0x117/0x1f0 [ 45.588984][ T5198] ? __pfx___sys_sendmsg+0x10/0x10 [ 45.591321][ T5198] ? xfd_validate_state+0x5d/0x180 [ 45.593689][ T5198] do_syscall_64+0xcf/0x260 [ 45.595802][ T5198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.598529][ T5198] RIP: 0033:0x7f4cc96a9bb9 [ 45.600580][ T5198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 45.608166][ T5198] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.611089][ T5198] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4cc96a9bb9 [ 45.613937][ T5198] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 45.616789][ T5198] RBP: 000000000000ade6 R08: 0000000000000006 R09: 0000000000000006 [ 45.619543][ T5198] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 45.622301][ T5198] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 45.625180][ T5198] [ 45.626794][ T5198] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 45.630642][ T5198] CPU: 1 PID: 5198 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 45.634706][ T5198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 45.638490][ T5198] Call Trace: [ 45.639695][ T5198] [ 45.640739][ T5198] dump_stack_lvl+0x16c/0x1f0 [ 45.642390][ T5198] ccid3_update_send_interval+0x18e/0x1c0 [ 45.644390][ T5198] ccid3_hc_tx_packet_sent+0x134/0x190 [ 45.646297][ T5198] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 45.648396][ T5198] dccp_xmit_packet+0x27b/0x710 [ 45.650078][ T5198] dccp_write_xmit+0x16f/0x1d0 [ 45.651764][ T5198] dccp_sendmsg+0x9ae/0xd10 [ 45.653333][ T5198] ? __might_fault+0x13b/0x190 [ 45.655058][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.656843][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.658600][ T5198] inet_sendmsg+0x119/0x140 [ 45.660165][ T5198] ____sys_sendmsg+0xa09/0xc90 [ 45.661827][ T5198] ? copy_msghdr_from_user+0x10b/0x160 [ 45.663717][ T5198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 45.665539][ T5198] ? hlock_class+0x4e/0x130 [ 45.667116][ T5198] ? hlock_class+0x4e/0x130 [ 45.668713][ T5198] ? __lock_acquire+0x14f4/0x3b30 [ 45.670483][ T5198] ___sys_sendmsg+0x135/0x1e0 [ 45.672122][ T5198] ? __pfx____sys_sendmsg+0x10/0x10 [ 45.673922][ T5198] ? __pfx___lock_acquire+0x10/0x10 [ 45.675753][ T5198] ? find_held_lock+0x2d/0x110 [ 45.677446][ T5198] ? __fget_light+0x176/0x210 [ 45.679090][ T5198] __sys_sendmsg+0x117/0x1f0 [ 45.680718][ T5198] ? __pfx___sys_sendmsg+0x10/0x10 [ 45.682483][ T5198] ? xfd_validate_state+0x5d/0x180 [ 45.684246][ T5198] do_syscall_64+0xcf/0x260 [ 45.685807][ T5198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.687850][ T5198] RIP: 0033:0x7f4cc96a9bb9 [ 45.689379][ T5198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 45.695924][ T5198] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.698786][ T5198] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4cc96a9bb9 [ 45.701494][ T5198] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 45.704169][ T5198] RBP: 000000000000ade6 R08: 0000000000000006 R09: 0000000000000006 [ 45.706879][ T5198] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 45.709576][ T5198] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 45.712276][ T5198] [ 45.713929][ T5198] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 45.717909][ T5198] CPU: 1 PID: 5198 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 45.721444][ T5198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 45.724935][ T5198] Call Trace: [ 45.726365][ T5198] [ 45.727673][ T5198] dump_stack_lvl+0x16c/0x1f0 [ 45.729738][ T5198] ccid3_update_send_interval+0x18e/0x1c0 [ 45.732200][ T5198] ccid3_hc_tx_packet_sent+0x134/0x190 [ 45.733941][ T5198] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 45.735813][ T5198] dccp_xmit_packet+0x27b/0x710 [ 45.737521][ T5198] dccp_write_xmit+0x16f/0x1d0 [ 45.739188][ T5198] dccp_sendmsg+0x9ae/0xd10 [ 45.740779][ T5198] ? __might_fault+0x13b/0x190 [ 45.742459][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.744235][ T5198] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.746105][ T5198] inet_sendmsg+0x119/0x140 [ 45.747717][ T5198] ____sys_sendmsg+0xa09/0xc90 [ 45.749400][ T5198] ? copy_msghdr_from_user+0x10b/0x160 [ 45.751296][ T5198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 45.753220][ T5198] ? hlock_class+0x4e/0x130 [ 45.754822][ T5198] ? __lock_acquire+0x14f4/0x3b30 [ 45.756614][ T5198] ___sys_sendmsg+0x135/0x1e0 [ 45.758251][ T5198] ? __pfx____sys_sendmsg+0x10/0x10 [ 45.760066][ T5198] ? __pfx___lock_acquire+0x10/0x10 [ 45.761887][ T5198] ? find_held_lock+0x2d/0x110 [ 45.763567][ T5198] ? __fget_light+0x176/0x210 [ 45.765186][ T5198] __sys_sendmsg+0x117/0x1f0 [ 45.766768][ T5198] ? __pfx___sys_sendmsg+0x10/0x10 [ 45.768545][ T5198] do_syscall_64+0xcf/0x260 [ 45.770095][ T5198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.772122][ T5198] RIP: 0033:0x7f4cc96a9bb9 [ 45.773672][ T5198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 45.780178][ T5198] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.782992][ T5198] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f4cc96a9bb9 [ 45.785681][ T5198] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 45.788365][ T5198] RBP: 000000000000ade6 R08: 0000000000000006 R09: 0000000000000006 [ 45.791047][ T5198] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 45.793736][ T5198] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 45.796436][ T5198] executing program [ 45.806945][ T5200] dccp_xmit_packet: Payload too large (65475) for featneg. [ 45.820598][ T5200] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 45.824552][ T5200] CPU: 0 PID: 5200 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 45.828140][ T5200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 45.831621][ T5200] Call Trace: [ 45.832813][ T5200] [ 45.833843][ T5200] dump_stack_lvl+0x16c/0x1f0 [ 45.835473][ T5200] ccid3_update_send_interval+0x18e/0x1c0 [ 45.837467][ T5200] ccid3_hc_tx_packet_sent+0x134/0x190 [ 45.839337][ T5200] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 45.841409][ T5200] dccp_xmit_packet+0x27b/0x710 [ 45.843095][ T5200] dccp_write_xmit+0x16f/0x1d0 [ 45.844813][ T5200] dccp_sendmsg+0x9ae/0xd10 [ 45.846397][ T5200] ? __might_fault+0x13b/0x190 [ 45.848074][ T5200] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.849834][ T5200] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.851619][ T5200] inet_sendmsg+0x119/0x140 [ 45.853213][ T5200] ____sys_sendmsg+0xa09/0xc90 [ 45.854911][ T5200] ? copy_msghdr_from_user+0x10b/0x160 [ 45.856841][ T5200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 45.858806][ T5200] ? __release_sock+0x2ae/0x400 [ 45.860900][ T5200] ? rcu_is_watching+0x12/0xc0 [ 45.863050][ T5200] ? kfree+0x241/0x390 [ 45.864818][ T5200] ? __local_bh_enable_ip+0xa4/0x120 [ 45.867131][ T5200] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.869340][ T5200] ___sys_sendmsg+0x135/0x1e0 [ 45.871373][ T5200] ? __pfx____sys_sendmsg+0x10/0x10 [ 45.873736][ T5200] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.875977][ T5200] ? inet_sendmsg+0xc0/0x140 [ 45.878061][ T5200] ? __fget_light+0x176/0x210 [ 45.880215][ T5200] __sys_sendmsg+0x117/0x1f0 [ 45.882290][ T5200] ? __pfx___sys_sendmsg+0x10/0x10 [ 45.884605][ T5200] do_syscall_64+0xcf/0x260 [ 45.886632][ T5200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.889231][ T5200] RIP: 0033:0x7f4cc96a9bb9 [ 45.891122][ T5200] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 45.899172][ T5200] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.902701][ T5200] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f4cc96a9bb9 [ 45.906036][ T5200] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 45.909332][ T5200] RBP: 000000000000adfa R08: 0000000000000006 R09: 0000000000000006 [ 45.912597][ T5200] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 45.915898][ T5200] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 45.919281][ T5200] [ 45.921100][ T5200] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 45.926006][ T5200] CPU: 0 PID: 5200 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 45.930426][ T5200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 45.934785][ T5200] Call Trace: [ 45.936252][ T5200] [ 45.937549][ T5200] dump_stack_lvl+0x16c/0x1f0 [ 45.939603][ T5200] ccid3_update_send_interval+0x18e/0x1c0 [ 45.942144][ T5200] ccid3_hc_tx_packet_sent+0x134/0x190 [ 45.944583][ T5200] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 45.947234][ T5200] dccp_xmit_packet+0x27b/0x710 [ 45.949402][ T5200] dccp_write_xmit+0x16f/0x1d0 [ 45.951055][ T5200] dccp_sendmsg+0x9ae/0xd10 [ 45.952700][ T5200] ? __might_fault+0x13b/0x190 [ 45.954434][ T5200] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.956211][ T5200] ? __pfx_dccp_sendmsg+0x10/0x10 [ 45.958023][ T5200] inet_sendmsg+0x119/0x140 [ 45.959787][ T5200] ____sys_sendmsg+0xa09/0xc90 [ 45.961447][ T5200] ? copy_msghdr_from_user+0x10b/0x160 [ 45.963306][ T5200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 45.965160][ T5200] ? hlock_class+0x4e/0x130 [ 45.966735][ T5200] ? hlock_class+0x4e/0x130 [ 45.968338][ T5200] ? __lock_acquire+0x14f4/0x3b30 [ 45.970102][ T5200] ___sys_sendmsg+0x135/0x1e0 [ 45.971744][ T5200] ? __pfx____sys_sendmsg+0x10/0x10 [ 45.973538][ T5200] ? __pfx___lock_acquire+0x10/0x10 [ 45.975325][ T5200] ? find_held_lock+0x2d/0x110 [ 45.977002][ T5200] ? __fget_light+0x176/0x210 [ 45.978635][ T5200] __sys_sendmsg+0x117/0x1f0 [ 45.980301][ T5200] ? __pfx___sys_sendmsg+0x10/0x10 [ 45.982117][ T5200] do_syscall_64+0xcf/0x260 [ 45.983628][ T5200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.985681][ T5200] RIP: 0033:0x7f4cc96a9bb9 [ 45.987227][ T5200] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 45.994017][ T5200] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.996926][ T5200] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4cc96a9bb9 [ 45.999677][ T5200] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 46.002383][ T5200] RBP: 000000000000adfa R08: 0000000000000006 R09: 0000000000000006 [ 46.005099][ T5200] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 46.008074][ T5200] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 46.010854][ T5200] [ 46.012238][ T5200] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 46.016045][ T5200] CPU: 0 PID: 5200 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 46.019641][ T5200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 46.023077][ T5200] Call Trace: [ 46.024555][ T5200] [ 46.025863][ T5200] dump_stack_lvl+0x16c/0x1f0 [ 46.027932][ T5200] ccid3_update_send_interval+0x18e/0x1c0 [ 46.030404][ T5200] ccid3_hc_tx_packet_sent+0x134/0x190 [ 46.032811][ T5200] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 46.035442][ T5200] dccp_xmit_packet+0x27b/0x710 [ 46.037678][ T5200] dccp_write_xmit+0x16f/0x1d0 [ 46.039540][ T5200] dccp_sendmsg+0x9ae/0xd10 [ 46.041162][ T5200] ? __might_fault+0x13b/0x190 [ 46.043178][ T5200] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.045133][ T5200] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.046916][ T5200] inet_sendmsg+0x119/0x140 [ 46.048549][ T5200] ____sys_sendmsg+0xa09/0xc90 [ 46.050250][ T5200] ? copy_msghdr_from_user+0x10b/0x160 [ 46.052469][ T5200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 46.054608][ T5200] ? hlock_class+0x4e/0x130 [ 46.056539][ T5200] ? rcu_is_watching+0x12/0xc0 [ 46.058579][ T5200] ? kfree+0x241/0x390 [ 46.060391][ T5200] ? __lock_acquire+0x14f4/0x3b30 [ 46.062269][ T5200] ___sys_sendmsg+0x135/0x1e0 [ 46.063957][ T5200] ? __pfx____sys_sendmsg+0x10/0x10 [ 46.065820][ T5200] ? __pfx___lock_acquire+0x10/0x10 [ 46.067678][ T5200] ? find_held_lock+0x2d/0x110 [ 46.069369][ T5200] ? __fget_light+0x176/0x210 [ 46.071038][ T5200] __sys_sendmsg+0x117/0x1f0 [ 46.072712][ T5200] ? __pfx___sys_sendmsg+0x10/0x10 [ 46.074736][ T5200] do_syscall_64+0xcf/0x260 [ 46.076706][ T5200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.079246][ T5200] RIP: 0033:0x7f4cc96a9bb9 [ 46.080994][ T5200] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 46.088497][ T5200] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.091453][ T5200] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4cc96a9bb9 [ 46.094543][ T5200] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 46.097403][ T5200] RBP: 000000000000adfa R08: 0000000000000006 R09: 0000000000000006 [ 46.100171][ T5200] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 46.102961][ T5200] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 46.106127][ T5200] [ 46.107976][ T5200] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 46.112925][ T5200] CPU: 0 PID: 5200 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 46.117422][ T5200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 46.121843][ T5200] Call Trace: [ 46.123323][ T5200] [ 46.124659][ T5200] dump_stack_lvl+0x16c/0x1f0 [ 46.126490][ T5200] ccid3_update_send_interval+0x18e/0x1c0 [ 46.128498][ T5200] ccid3_hc_tx_packet_sent+0x134/0x190 [ 46.130394][ T5200] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 46.132618][ T5200] dccp_xmit_packet+0x27b/0x710 [ 46.134408][ T5200] dccp_write_xmit+0x16f/0x1d0 [ 46.136138][ T5200] dccp_sendmsg+0x9ae/0xd10 [ 46.137741][ T5200] ? __might_fault+0x13b/0x190 [ 46.139414][ T5200] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.141175][ T5200] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.142907][ T5200] inet_sendmsg+0x119/0x140 [ 46.144515][ T5200] ____sys_sendmsg+0xa09/0xc90 [ 46.146172][ T5200] ? copy_msghdr_from_user+0x10b/0x160 [ 46.148080][ T5200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 46.149960][ T5200] ? hlock_class+0x4e/0x130 [ 46.151585][ T5200] ? hlock_class+0x4e/0x130 [ 46.153187][ T5200] ? __lock_acquire+0x14f4/0x3b30 [ 46.154955][ T5200] ___sys_sendmsg+0x135/0x1e0 [ 46.156634][ T5200] ? __pfx____sys_sendmsg+0x10/0x10 [ 46.158465][ T5200] ? __pfx___lock_acquire+0x10/0x10 [ 46.160289][ T5200] ? find_held_lock+0x2d/0x110 [ 46.161992][ T5200] ? __fget_light+0x176/0x210 [ 46.163766][ T5200] __sys_sendmsg+0x117/0x1f0 [ 46.165399][ T5200] ? __pfx___sys_sendmsg+0x10/0x10 [ 46.167184][ T5200] do_syscall_64+0xcf/0x260 [ 46.168802][ T5200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.170884][ T5200] RIP: 0033:0x7f4cc96a9bb9 [ 46.172459][ T5200] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 46.178839][ T5200] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.181778][ T5200] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4cc96a9bb9 [ 46.184689][ T5200] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 46.187449][ T5200] RBP: 000000000000adfa R08: 0000000000000006 R09: 0000000000000006 [ 46.190213][ T5200] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 46.192968][ T5200] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 46.195789][ T5200] [ 46.197295][ T5200] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 46.201145][ T5200] CPU: 0 PID: 5200 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 46.204833][ T5200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 46.208362][ T5200] Call Trace: [ 46.209643][ T5200] [ 46.210672][ T5200] dump_stack_lvl+0x16c/0x1f0 [ 46.212335][ T5200] ccid3_update_send_interval+0x18e/0x1c0 [ 46.214438][ T5200] ccid3_hc_tx_packet_sent+0x134/0x190 [ 46.216732][ T5200] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 46.218776][ T5200] dccp_xmit_packet+0x27b/0x710 [ 46.220609][ T5200] dccp_write_xmit+0x16f/0x1d0 [ 46.222468][ T5200] dccp_sendmsg+0x9ae/0xd10 [ 46.224203][ T5200] ? __might_fault+0x13b/0x190 [ 46.225900][ T5200] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.227623][ T5200] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.229358][ T5200] inet_sendmsg+0x119/0x140 [ 46.230951][ T5200] ____sys_sendmsg+0xa09/0xc90 [ 46.232732][ T5200] ? copy_msghdr_from_user+0x10b/0x160 [ 46.234613][ T5200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 46.236797][ T5200] ? hlock_class+0x4e/0x130 [ 46.238737][ T5200] ? hlock_class+0x4e/0x130 [ 46.240664][ T5200] ? __lock_acquire+0x14f4/0x3b30 [ 46.242814][ T5200] ___sys_sendmsg+0x135/0x1e0 [ 46.244947][ T5200] ? __pfx____sys_sendmsg+0x10/0x10 [ 46.247139][ T5200] ? __pfx___lock_acquire+0x10/0x10 [ 46.249336][ T5200] ? find_held_lock+0x2d/0x110 [ 46.251357][ T5200] ? __fget_light+0x176/0x210 [ 46.253346][ T5200] __sys_sendmsg+0x117/0x1f0 [ 46.255342][ T5200] ? __pfx___sys_sendmsg+0x10/0x10 [ 46.257696][ T5200] do_syscall_64+0xcf/0x260 [ 46.259703][ T5200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.262042][ T5200] RIP: 0033:0x7f4cc96a9bb9 [ 46.263835][ T5200] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 46.271892][ T5200] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.275582][ T5200] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4cc96a9bb9 [ 46.279091][ T5200] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 46.282442][ T5200] RBP: 000000000000adfa R08: 0000000000000006 R09: 0000000000000006 [ 46.285776][ T5200] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 46.288847][ T5200] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 46.291563][ T5200] [ 46.293040][ T5200] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 46.297653][ T5200] CPU: 0 PID: 5200 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 46.301933][ T5200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 46.306174][ T5200] Call Trace: [ 46.307573][ T5200] [ 46.308795][ T5200] dump_stack_lvl+0x16c/0x1f0 [ 46.310753][ T5200] ccid3_update_send_interval+0x18e/0x1c0 [ 46.313095][ T5200] ccid3_hc_tx_packet_sent+0x134/0x190 [ 46.315398][ T5200] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 46.318581][ T5200] dccp_xmit_packet+0x27b/0x710 [ 46.320887][ T5200] dccp_write_xmit+0x16f/0x1d0 [ 46.322940][ T5200] dccp_sendmsg+0x9ae/0xd10 [ 46.324583][ T5200] ? __might_fault+0x13b/0x190 [ 46.326262][ T5200] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.328021][ T5200] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.329767][ T5200] inet_sendmsg+0x119/0x140 [ 46.331329][ T5200] ____sys_sendmsg+0xa09/0xc90 [ 46.333024][ T5200] ? copy_msghdr_from_user+0x10b/0x160 [ 46.334935][ T5200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 46.336808][ T5200] ? hlock_class+0x4e/0x130 [ 46.338405][ T5200] ? hlock_class+0x4e/0x130 [ 46.339991][ T5200] ? __lock_acquire+0x14f4/0x3b30 [ 46.341953][ T5200] ___sys_sendmsg+0x135/0x1e0 [ 46.343700][ T5200] ? __pfx____sys_sendmsg+0x10/0x10 [ 46.345613][ T5200] ? __pfx___lock_acquire+0x10/0x10 [ 46.347727][ T5200] ? find_held_lock+0x2d/0x110 [ 46.349378][ T5200] ? __fget_light+0x176/0x210 [ 46.350999][ T5200] __sys_sendmsg+0x117/0x1f0 [ 46.352632][ T5200] ? __pfx___sys_sendmsg+0x10/0x10 [ 46.354440][ T5200] do_syscall_64+0xcf/0x260 [ 46.356170][ T5200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.358273][ T5200] RIP: 0033:0x7f4cc96a9bb9 [ 46.359835][ T5200] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 46.367858][ T5200] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.371457][ T5200] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f4cc96a9bb9 [ 46.374981][ T5200] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 46.378367][ T5200] RBP: 000000000000adfa R08: 0000000000000006 R09: 0000000000000006 [ 46.381680][ T5200] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 46.384941][ T5200] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 46.388315][ T5200] executing program [ 46.411761][ T5201] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 46.417018][ T5201] CPU: 3 PID: 5201 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 46.421532][ T5201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 46.426164][ T5201] Call Trace: [ 46.427680][ T5201] [ 46.429013][ T5201] dump_stack_lvl+0x16c/0x1f0 [ 46.431111][ T5201] ccid3_update_send_interval+0x18e/0x1c0 [ 46.433665][ T5201] ccid3_hc_tx_packet_sent+0x134/0x190 [ 46.436128][ T5201] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 46.438809][ T5201] dccp_xmit_packet+0x27b/0x710 [ 46.440953][ T5201] dccp_write_xmit+0x16f/0x1d0 [ 46.442872][ T5201] dccp_sendmsg+0x9ae/0xd10 [ 46.444619][ T5201] ? __might_fault+0x13b/0x190 [ 46.446730][ T5201] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.449008][ T5201] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.451267][ T5201] inet_sendmsg+0x119/0x140 [ 46.453271][ T5201] ____sys_sendmsg+0xa09/0xc90 [ 46.455405][ T5201] ? copy_msghdr_from_user+0x10b/0x160 [ 46.457833][ T5201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 46.460195][ T5201] ? __release_sock+0x2ae/0x400 [ 46.462344][ T5201] ? rcu_is_watching+0x12/0xc0 [ 46.464495][ T5201] ? kfree+0x241/0x390 [ 46.466332][ T5201] ? __local_bh_enable_ip+0xa4/0x120 [ 46.468770][ T5201] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.471108][ T5201] ___sys_sendmsg+0x135/0x1e0 [ 46.473214][ T5201] ? __pfx____sys_sendmsg+0x10/0x10 [ 46.475541][ T5201] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.477771][ T5201] ? inet_sendmsg+0xc0/0x140 [ 46.479824][ T5201] ? __fget_light+0x176/0x210 [ 46.481954][ T5201] __sys_sendmsg+0x117/0x1f0 [ 46.484043][ T5201] ? __pfx___sys_sendmsg+0x10/0x10 [ 46.486722][ T5201] do_syscall_64+0xcf/0x260 [ 46.488555][ T5201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.490656][ T5201] RIP: 0033:0x7f4cc96a9bb9 [ 46.492315][ T5201] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 46.501003][ T5201] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.504962][ T5201] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f4cc96a9bb9 [ 46.507709][ T5201] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 46.510412][ T5201] RBP: 000000000000b265 R08: 0000000000000006 R09: 0000000000000006 [ 46.513432][ T5201] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 46.516228][ T5201] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 46.519213][ T5201] [ 46.520817][ T5201] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 46.525741][ T5201] CPU: 3 PID: 5201 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 46.530656][ T5201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 46.535849][ T5201] Call Trace: [ 46.537359][ T5201] [ 46.538692][ T5201] dump_stack_lvl+0x16c/0x1f0 [ 46.540833][ T5201] ccid3_update_send_interval+0x18e/0x1c0 [ 46.544001][ T5201] ccid3_hc_tx_packet_sent+0x134/0x190 [ 46.546727][ T5201] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 46.549884][ T5201] dccp_xmit_packet+0x27b/0x710 [ 46.552335][ T5201] dccp_write_xmit+0x16f/0x1d0 [ 46.554489][ T5201] dccp_sendmsg+0x9ae/0xd10 [ 46.556541][ T5201] ? __might_fault+0x13b/0x190 [ 46.558705][ T5201] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.561145][ T5201] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.563839][ T5201] inet_sendmsg+0x119/0x140 [ 46.566133][ T5201] ____sys_sendmsg+0xa09/0xc90 [ 46.568660][ T5201] ? copy_msghdr_from_user+0x10b/0x160 [ 46.571302][ T5201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 46.573606][ T5201] ? hlock_class+0x4e/0x130 [ 46.575637][ T5201] ? hlock_class+0x4e/0x130 [ 46.577777][ T5201] ? __lock_acquire+0x14f4/0x3b30 [ 46.580337][ T5201] ___sys_sendmsg+0x135/0x1e0 [ 46.582661][ T5201] ? __pfx____sys_sendmsg+0x10/0x10 [ 46.584963][ T5201] ? __pfx___lock_acquire+0x10/0x10 [ 46.587221][ T5201] ? find_held_lock+0x2d/0x110 [ 46.589227][ T5201] ? __fget_light+0x176/0x210 [ 46.591001][ T5201] __sys_sendmsg+0x117/0x1f0 [ 46.592801][ T5201] ? __pfx___sys_sendmsg+0x10/0x10 [ 46.594609][ T5201] do_syscall_64+0xcf/0x260 [ 46.596339][ T5201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.598941][ T5201] RIP: 0033:0x7f4cc96a9bb9 [ 46.600961][ T5201] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 46.608918][ T5201] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.611906][ T5201] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4cc96a9bb9 [ 46.616449][ T5201] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 46.619939][ T5201] RBP: 000000000000b265 R08: 0000000000000006 R09: 0000000000000006 [ 46.623020][ T5201] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 46.626684][ T5201] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 46.630068][ T5201] [ 46.632353][ T5201] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 46.637549][ T5201] CPU: 0 PID: 5201 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 46.641903][ T5201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 46.646874][ T5201] Call Trace: [ 46.648475][ T5201] [ 46.650006][ T5201] dump_stack_lvl+0x16c/0x1f0 [ 46.652662][ T5201] ccid3_update_send_interval+0x18e/0x1c0 [ 46.655409][ T5201] ccid3_hc_tx_packet_sent+0x134/0x190 [ 46.657470][ T5201] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 46.659965][ T5201] dccp_xmit_packet+0x27b/0x710 [ 46.662343][ T5201] dccp_write_xmit+0x16f/0x1d0 [ 46.665143][ T5201] dccp_sendmsg+0x9ae/0xd10 [ 46.666999][ T5201] ? __might_fault+0x13b/0x190 [ 46.669142][ T5201] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.670932][ T5201] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.672811][ T5201] inet_sendmsg+0x119/0x140 [ 46.674877][ T5201] ____sys_sendmsg+0xa09/0xc90 [ 46.676700][ T5201] ? copy_msghdr_from_user+0x10b/0x160 [ 46.678649][ T5201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 46.680672][ T5201] ? hlock_class+0x4e/0x130 [ 46.682466][ T5201] ? hlock_class+0x4e/0x130 [ 46.684177][ T5201] ? __lock_acquire+0x14f4/0x3b30 [ 46.685999][ T5201] ___sys_sendmsg+0x135/0x1e0 [ 46.687642][ T5201] ? __pfx____sys_sendmsg+0x10/0x10 [ 46.689460][ T5201] ? __pfx___lock_acquire+0x10/0x10 [ 46.691268][ T5201] ? find_held_lock+0x2d/0x110 [ 46.693083][ T5201] ? __fget_light+0x176/0x210 [ 46.694710][ T5201] __sys_sendmsg+0x117/0x1f0 [ 46.696346][ T5201] ? __pfx___sys_sendmsg+0x10/0x10 [ 46.698151][ T5201] ? xfd_validate_state+0x5d/0x180 [ 46.700006][ T5201] do_syscall_64+0xcf/0x260 [ 46.701591][ T5201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.703900][ T5201] RIP: 0033:0x7f4cc96a9bb9 [ 46.705703][ T5201] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 46.713431][ T5201] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.716437][ T5201] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4cc96a9bb9 [ 46.719230][ T5201] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 46.721977][ T5201] RBP: 000000000000b265 R08: 0000000000000006 R09: 0000000000000006 [ 46.724864][ T5201] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 46.727617][ T5201] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 46.730360][ T5201] [ 46.731897][ T5201] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 46.735834][ T5201] CPU: 0 PID: 5201 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 46.739478][ T5201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 46.742989][ T5201] Call Trace: [ 46.744203][ T5201] [ 46.745250][ T5201] dump_stack_lvl+0x16c/0x1f0 [ 46.747040][ T5201] ccid3_update_send_interval+0x18e/0x1c0 [ 46.749295][ T5201] ccid3_hc_tx_packet_sent+0x134/0x190 [ 46.751751][ T5201] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 46.754228][ T5201] dccp_xmit_packet+0x27b/0x710 [ 46.756307][ T5201] dccp_write_xmit+0x16f/0x1d0 [ 46.758279][ T5201] dccp_sendmsg+0x9ae/0xd10 [ 46.759857][ T5201] ? __might_fault+0x13b/0x190 [ 46.761636][ T5201] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.763932][ T5201] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.766229][ T5201] inet_sendmsg+0x119/0x140 [ 46.768292][ T5201] ____sys_sendmsg+0xa09/0xc90 [ 46.770490][ T5201] ? copy_msghdr_from_user+0x10b/0x160 [ 46.772971][ T5201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 46.775271][ T5201] ? hlock_class+0x4e/0x130 [ 46.777359][ T5201] ? hlock_class+0x4e/0x130 [ 46.779428][ T5201] ? __lock_acquire+0x14f4/0x3b30 [ 46.781735][ T5201] ___sys_sendmsg+0x135/0x1e0 [ 46.783783][ T5201] ? __pfx____sys_sendmsg+0x10/0x10 [ 46.785869][ T5201] ? __pfx___lock_acquire+0x10/0x10 [ 46.787997][ T5201] ? find_held_lock+0x2d/0x110 [ 46.789957][ T5201] ? __fget_light+0x176/0x210 [ 46.792117][ T5201] __sys_sendmsg+0x117/0x1f0 [ 46.794225][ T5201] ? __pfx___sys_sendmsg+0x10/0x10 [ 46.796567][ T5201] do_syscall_64+0xcf/0x260 [ 46.798648][ T5201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.801356][ T5201] RIP: 0033:0x7f4cc96a9bb9 [ 46.803363][ T5201] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 46.811894][ T5201] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.815604][ T5201] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4cc96a9bb9 [ 46.819162][ T5201] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 46.822724][ T5201] RBP: 000000000000b265 R08: 0000000000000006 R09: 0000000000000006 [ 46.826220][ T5201] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 46.829773][ T5201] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 46.833285][ T5201] [ 46.835084][ T5201] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 46.839064][ T5201] CPU: 0 PID: 5201 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 46.843609][ T5201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 46.848078][ T5201] Call Trace: [ 46.849581][ T5201] [ 46.850934][ T5201] dump_stack_lvl+0x16c/0x1f0 [ 46.852991][ T5201] ccid3_update_send_interval+0x18e/0x1c0 [ 46.854970][ T5201] ccid3_hc_tx_packet_sent+0x134/0x190 [ 46.856891][ T5201] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 46.858935][ T5201] dccp_xmit_packet+0x27b/0x710 [ 46.860627][ T5201] dccp_write_xmit+0x16f/0x1d0 [ 46.862296][ T5201] dccp_sendmsg+0x9ae/0xd10 [ 46.864324][ T5201] ? __might_fault+0x13b/0x190 [ 46.866492][ T5201] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.868772][ T5201] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.871043][ T5201] inet_sendmsg+0x119/0x140 [ 46.873105][ T5201] ____sys_sendmsg+0xa09/0xc90 [ 46.875282][ T5201] ? copy_msghdr_from_user+0x10b/0x160 [ 46.877725][ T5201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 46.880120][ T5201] ? hlock_class+0x4e/0x130 [ 46.882197][ T5201] ? hlock_class+0x4e/0x130 [ 46.884304][ T5201] ? __lock_acquire+0x14f4/0x3b30 [ 46.886571][ T5201] ___sys_sendmsg+0x135/0x1e0 [ 46.888703][ T5201] ? __pfx____sys_sendmsg+0x10/0x10 [ 46.891052][ T5201] ? __pfx___lock_acquire+0x10/0x10 [ 46.893403][ T5201] ? find_held_lock+0x2d/0x110 [ 46.895574][ T5201] ? __fget_light+0x176/0x210 [ 46.897723][ T5201] __sys_sendmsg+0x117/0x1f0 [ 46.899859][ T5201] ? __pfx___sys_sendmsg+0x10/0x10 [ 46.902158][ T5201] do_syscall_64+0xcf/0x260 [ 46.904174][ T5201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.906485][ T5201] RIP: 0033:0x7f4cc96a9bb9 [ 46.908045][ T5201] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 46.914599][ T5201] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.917448][ T5201] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4cc96a9bb9 [ 46.920122][ T5201] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 46.922855][ T5201] RBP: 000000000000b265 R08: 0000000000000006 R09: 0000000000000006 [ 46.925545][ T5201] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 46.928231][ T5201] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 46.930930][ T5201] [ 46.932312][ T5201] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 46.937189][ T5201] CPU: 0 PID: 5201 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 46.941809][ T5201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 46.946295][ T5201] Call Trace: [ 46.947834][ T5201] [ 46.949187][ T5201] dump_stack_lvl+0x16c/0x1f0 [ 46.951349][ T5201] ccid3_update_send_interval+0x18e/0x1c0 [ 46.953865][ T5201] ccid3_hc_tx_packet_sent+0x134/0x190 [ 46.955748][ T5201] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 46.957848][ T5201] dccp_xmit_packet+0x27b/0x710 [ 46.959530][ T5201] dccp_write_xmit+0x16f/0x1d0 [ 46.961185][ T5201] dccp_sendmsg+0x9ae/0xd10 [ 46.962799][ T5201] ? __might_fault+0x13b/0x190 [ 46.964598][ T5201] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.966372][ T5201] ? __pfx_dccp_sendmsg+0x10/0x10 [ 46.968164][ T5201] inet_sendmsg+0x119/0x140 [ 46.969775][ T5201] ____sys_sendmsg+0xa09/0xc90 [ 46.971437][ T5201] ? copy_msghdr_from_user+0x10b/0x160 [ 46.973484][ T5201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 46.975312][ T5201] ? hlock_class+0x4e/0x130 [ 46.976929][ T5201] ? hlock_class+0x4e/0x130 [ 46.978566][ T5201] ? __lock_acquire+0x14f4/0x3b30 [ 46.980352][ T5201] ___sys_sendmsg+0x135/0x1e0 [ 46.982020][ T5201] ? __pfx____sys_sendmsg+0x10/0x10 [ 46.983938][ T5201] ? __pfx___lock_acquire+0x10/0x10 [ 46.985763][ T5201] ? find_held_lock+0x2d/0x110 [ 46.987458][ T5201] ? __fget_light+0x176/0x210 [ 46.989130][ T5201] __sys_sendmsg+0x117/0x1f0 [ 46.990754][ T5201] ? __pfx___sys_sendmsg+0x10/0x10 [ 46.992565][ T5201] do_syscall_64+0xcf/0x260 [ 46.994159][ T5201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.996220][ T5201] RIP: 0033:0x7f4cc96a9bb9 [ 46.997758][ T5201] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 47.004998][ T5201] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.008175][ T5201] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f4cc96a9bb9 [ 47.010936][ T5201] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 47.013735][ T5201] RBP: 000000000000b265 R08: 0000000000000006 R09: 0000000000000006 [ 47.016516][ T5201] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 47.019310][ T5201] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 47.022100][ T5201] executing program executing program [ 47.050688][ T5203] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 47.055917][ T5203] CPU: 2 PID: 5203 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 47.060425][ T5203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 47.064769][ T5203] Call Trace: [ 47.066268][ T5203] [ 47.067609][ T5203] dump_stack_lvl+0x16c/0x1f0 [ 47.069605][ T5203] ccid3_update_send_interval+0x18e/0x1c0 [ 47.071555][ T5203] ccid3_hc_tx_packet_sent+0x134/0x190 [ 47.073934][ T5203] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 47.076680][ T5203] dccp_xmit_packet+0x27b/0x710 [ 47.078911][ T5203] dccp_write_xmit+0x16f/0x1d0 [ 47.080801][ T5203] dccp_sendmsg+0x9ae/0xd10 [ 47.082638][ T5203] ? __might_fault+0x13b/0x190 [ 47.084818][ T5203] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.086951][ T5203] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.088675][ T5203] inet_sendmsg+0x119/0x140 [ 47.090241][ T5203] ____sys_sendmsg+0xa09/0xc90 [ 47.092012][ T5203] ? copy_msghdr_from_user+0x10b/0x160 [ 47.094591][ T5203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 47.096950][ T5203] ? __release_sock+0x2ae/0x400 [ 47.099054][ T5203] ? rcu_is_watching+0x12/0xc0 [ 47.101189][ T5203] ? kfree+0x241/0x390 [ 47.102960][ T5203] ? __lock_acquire+0x14f4/0x3b30 [ 47.105216][ T5203] ___sys_sendmsg+0x135/0x1e0 [ 47.107329][ T5203] ? __pfx____sys_sendmsg+0x10/0x10 [ 47.109664][ T5203] ? __pfx___lock_acquire+0x10/0x10 [ 47.112023][ T5203] ? find_held_lock+0x2d/0x110 [ 47.114137][ T5203] ? __fget_light+0x176/0x210 [ 47.116273][ T5203] __sys_sendmsg+0x117/0x1f0 [ 47.118347][ T5203] ? __pfx___sys_sendmsg+0x10/0x10 [ 47.120591][ T5203] ? xfd_validate_state+0x5d/0x180 [ 47.122852][ T5203] do_syscall_64+0xcf/0x260 [ 47.124918][ T5203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.127534][ T5203] RIP: 0033:0x7f4cc96a9bb9 [ 47.129505][ T5203] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 47.138020][ T5203] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.141749][ T5203] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4cc96a9bb9 [ 47.145313][ T5203] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 47.148853][ T5203] RBP: 000000000000b72f R08: 0000000000000006 R09: 0000000000000006 [ 47.152427][ T5203] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 47.155955][ T5203] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 47.159231][ T5203] [ 47.162368][ T5203] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 47.167127][ T5203] CPU: 3 PID: 5203 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 47.171560][ T5203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 47.175888][ T5203] Call Trace: [ 47.177341][ T5203] [ 47.178626][ T5203] dump_stack_lvl+0x16c/0x1f0 [ 47.180680][ T5203] ccid3_update_send_interval+0x18e/0x1c0 [ 47.183098][ T5203] ccid3_hc_tx_packet_sent+0x134/0x190 [ 47.185468][ T5203] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 47.187939][ T5203] dccp_xmit_packet+0x27b/0x710 [ 47.189968][ T5203] dccp_write_xmit+0x16f/0x1d0 [ 47.192011][ T5203] dccp_sendmsg+0x9ae/0xd10 [ 47.193876][ T5203] ? __might_fault+0x13b/0x190 [ 47.195852][ T5203] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.197994][ T5203] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.200126][ T5203] inet_sendmsg+0x119/0x140 [ 47.202047][ T5203] ____sys_sendmsg+0xa09/0xc90 [ 47.204125][ T5203] ? copy_msghdr_from_user+0x10b/0x160 [ 47.206452][ T5203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 47.208707][ T5203] ? hlock_class+0x4e/0x130 [ 47.210660][ T5203] ? hlock_class+0x4e/0x130 [ 47.212581][ T5203] ? __lock_acquire+0x14f4/0x3b30 [ 47.214590][ T5203] ___sys_sendmsg+0x135/0x1e0 [ 47.216566][ T5203] ? __pfx____sys_sendmsg+0x10/0x10 [ 47.218732][ T5203] ? __pfx___lock_acquire+0x10/0x10 [ 47.220974][ T5203] ? find_held_lock+0x2d/0x110 [ 47.223035][ T5203] ? __fget_light+0x176/0x210 [ 47.225069][ T5203] __sys_sendmsg+0x117/0x1f0 [ 47.227033][ T5203] ? __pfx___sys_sendmsg+0x10/0x10 [ 47.229213][ T5203] ? xfd_validate_state+0x5d/0x180 [ 47.231346][ T5203] do_syscall_64+0xcf/0x260 [ 47.232952][ T5203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.234981][ T5203] RIP: 0033:0x7f4cc96a9bb9 [ 47.236546][ T5203] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 47.243102][ T5203] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.245940][ T5203] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f4cc96a9bb9 [ 47.248657][ T5203] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 47.251399][ T5203] RBP: 000000000000b72f R08: 0000000000000006 R09: 0000000000000006 [ 47.254135][ T5203] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 47.256873][ T5203] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 47.259674][ T5203] [ 47.261083][ T5203] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 47.264981][ T5203] CPU: 3 PID: 5203 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 47.268597][ T5203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 47.272204][ T5203] Call Trace: [ 47.273486][ T5203] [ 47.274540][ T5203] dump_stack_lvl+0x16c/0x1f0 [ 47.276232][ T5203] ccid3_update_send_interval+0x18e/0x1c0 [ 47.278164][ T5203] ccid3_hc_tx_packet_sent+0x134/0x190 [ 47.280045][ T5203] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 47.282104][ T5203] dccp_xmit_packet+0x27b/0x710 [ 47.283738][ T5203] dccp_write_xmit+0x16f/0x1d0 [ 47.285383][ T5203] dccp_sendmsg+0x9ae/0xd10 [ 47.286951][ T5203] ? __might_fault+0x13b/0x190 [ 47.288616][ T5203] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.290386][ T5203] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.292135][ T5203] inet_sendmsg+0x119/0x140 [ 47.293704][ T5203] ____sys_sendmsg+0xa09/0xc90 [ 47.295384][ T5203] ? copy_msghdr_from_user+0x10b/0x160 [ 47.297321][ T5203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 47.299186][ T5203] ? hlock_class+0x4e/0x130 [ 47.300778][ T5203] ? rcu_is_watching+0x12/0xc0 [ 47.302465][ T5203] ? kfree+0x241/0x390 [ 47.303912][ T5203] ? __lock_acquire+0x14f4/0x3b30 [ 47.305665][ T5203] ___sys_sendmsg+0x135/0x1e0 [ 47.307294][ T5203] ? __pfx____sys_sendmsg+0x10/0x10 [ 47.309148][ T5203] ? __pfx___lock_acquire+0x10/0x10 [ 47.310960][ T5203] ? find_held_lock+0x2d/0x110 [ 47.312623][ T5203] ? __fget_light+0x176/0x210 [ 47.314294][ T5203] __sys_sendmsg+0x117/0x1f0 [ 47.315935][ T5203] ? __pfx___sys_sendmsg+0x10/0x10 [ 47.317718][ T5203] ? xfd_validate_state+0x5d/0x180 [ 47.319524][ T5203] do_syscall_64+0xcf/0x260 [ 47.321172][ T5203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.323190][ T5203] RIP: 0033:0x7f4cc96a9bb9 [ 47.324755][ T5203] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 47.331446][ T5203] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.334351][ T5203] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f4cc96a9bb9 [ 47.337088][ T5203] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 47.339841][ T5203] RBP: 000000000000b72f R08: 0000000000000006 R09: 0000000000000006 [ 47.342570][ T5203] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 47.345315][ T5203] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 47.348035][ T5203] [ 47.349394][ T5203] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 47.353319][ T5203] CPU: 3 PID: 5203 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 47.356948][ T5203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 47.360484][ T5203] Call Trace: [ 47.361673][ T5203] [ 47.362741][ T5203] dump_stack_lvl+0x16c/0x1f0 [ 47.364403][ T5203] ccid3_update_send_interval+0x18e/0x1c0 [ 47.366393][ T5203] ccid3_hc_tx_packet_sent+0x134/0x190 [ 47.368319][ T5203] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 47.370361][ T5203] dccp_xmit_packet+0x27b/0x710 [ 47.372056][ T5203] dccp_write_xmit+0x16f/0x1d0 [ 47.373777][ T5203] dccp_sendmsg+0x9ae/0xd10 [ 47.375387][ T5203] ? __might_fault+0x13b/0x190 [ 47.377079][ T5203] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.378838][ T5203] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.380562][ T5203] inet_sendmsg+0x119/0x140 [ 47.382122][ T5203] ____sys_sendmsg+0xa09/0xc90 [ 47.383819][ T5203] ? copy_msghdr_from_user+0x10b/0x160 [ 47.385741][ T5203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 47.387602][ T5203] ? hlock_class+0x4e/0x130 [ 47.389198][ T5203] ? hlock_class+0x4e/0x130 [ 47.390770][ T5203] ? __lock_acquire+0x14f4/0x3b30 [ 47.392512][ T5203] ___sys_sendmsg+0x135/0x1e0 [ 47.394151][ T5203] ? __pfx____sys_sendmsg+0x10/0x10 [ 47.395959][ T5203] ? __pfx___lock_acquire+0x10/0x10 [ 47.397758][ T5203] ? find_held_lock+0x2d/0x110 [ 47.399414][ T5203] ? __fget_light+0x176/0x210 [ 47.401069][ T5203] __sys_sendmsg+0x117/0x1f0 [ 47.402678][ T5203] ? __pfx___sys_sendmsg+0x10/0x10 [ 47.404454][ T5203] do_syscall_64+0xcf/0x260 [ 47.406049][ T5203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.408100][ T5203] RIP: 0033:0x7f4cc96a9bb9 [ 47.409653][ T5203] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 47.416258][ T5203] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.419107][ T5203] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4cc96a9bb9 [ 47.421826][ T5203] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 47.424585][ T5203] RBP: 000000000000b72f R08: 0000000000000006 R09: 0000000000000006 [ 47.427325][ T5203] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 47.430038][ T5203] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 47.432692][ T5203] [ 47.434006][ T5203] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 47.437811][ T5203] CPU: 3 PID: 5203 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 47.441382][ T5203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 47.444880][ T5203] Call Trace: [ 47.446055][ T5203] [ 47.447101][ T5203] dump_stack_lvl+0x16c/0x1f0 [ 47.448844][ T5203] ccid3_update_send_interval+0x18e/0x1c0 [ 47.450837][ T5203] ccid3_hc_tx_packet_sent+0x134/0x190 [ 47.452772][ T5203] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 47.454863][ T5203] dccp_xmit_packet+0x27b/0x710 [ 47.456593][ T5203] dccp_write_xmit+0x16f/0x1d0 [ 47.458299][ T5203] dccp_sendmsg+0x9ae/0xd10 [ 47.459900][ T5203] ? __might_fault+0x13b/0x190 [ 47.461578][ T5203] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.463373][ T5203] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.465225][ T5203] inet_sendmsg+0x119/0x140 [ 47.466808][ T5203] ____sys_sendmsg+0xa09/0xc90 [ 47.468559][ T5203] ? copy_msghdr_from_user+0x10b/0x160 [ 47.470450][ T5203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 47.472301][ T5203] ? hlock_class+0x4e/0x130 [ 47.473891][ T5203] ? rcu_is_watching+0x12/0xc0 [ 47.475551][ T5203] ? kfree+0x241/0x390 [ 47.476982][ T5203] ? __lock_acquire+0x14f4/0x3b30 [ 47.478696][ T5203] ___sys_sendmsg+0x135/0x1e0 [ 47.480334][ T5203] ? __pfx____sys_sendmsg+0x10/0x10 [ 47.482131][ T5203] ? __pfx___lock_acquire+0x10/0x10 [ 47.483960][ T5203] ? find_held_lock+0x2d/0x110 [ 47.485629][ T5203] ? __fget_light+0x176/0x210 [ 47.487256][ T5203] __sys_sendmsg+0x117/0x1f0 [ 47.488845][ T5203] ? __pfx___sys_sendmsg+0x10/0x10 [ 47.490617][ T5203] do_syscall_64+0xcf/0x260 [ 47.492181][ T5203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.494219][ T5203] RIP: 0033:0x7f4cc96a9bb9 [ 47.495757][ T5203] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 47.502290][ T5203] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.505134][ T5203] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4cc96a9bb9 [ 47.507771][ T5203] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 47.510445][ T5203] RBP: 000000000000b72f R08: 0000000000000006 R09: 0000000000000006 [ 47.513143][ T5203] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 47.515840][ T5203] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 47.518531][ T5203] [ 47.519935][ T5203] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 47.523765][ T5203] CPU: 3 PID: 5203 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 47.527356][ T5203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 47.530874][ T5203] Call Trace: [ 47.532076][ T5203] [ 47.533130][ T5203] dump_stack_lvl+0x16c/0x1f0 [ 47.534873][ T5203] ccid3_update_send_interval+0x18e/0x1c0 [ 47.536889][ T5203] ccid3_hc_tx_packet_sent+0x134/0x190 [ 47.538797][ T5203] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 47.540877][ T5203] dccp_xmit_packet+0x27b/0x710 [ 47.542573][ T5203] dccp_write_xmit+0x16f/0x1d0 [ 47.544285][ T5203] dccp_sendmsg+0x9ae/0xd10 [ 47.545897][ T5203] ? __might_fault+0x13b/0x190 [ 47.547602][ T5203] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.549391][ T5203] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.551171][ T5203] inet_sendmsg+0x119/0x140 [ 47.552794][ T5203] ____sys_sendmsg+0xa09/0xc90 [ 47.554501][ T5203] ? copy_msghdr_from_user+0x10b/0x160 [ 47.556403][ T5203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 47.558231][ T5203] ? hlock_class+0x4e/0x130 [ 47.559848][ T5203] ? hlock_class+0x4e/0x130 [ 47.561452][ T5203] ? __lock_acquire+0x14f4/0x3b30 [ 47.563221][ T5203] ___sys_sendmsg+0x135/0x1e0 [ 47.564897][ T5203] ? __pfx____sys_sendmsg+0x10/0x10 [ 47.566716][ T5203] ? __pfx___lock_acquire+0x10/0x10 [ 47.568557][ T5203] ? find_held_lock+0x2d/0x110 [ 47.570244][ T5203] ? __fget_light+0x176/0x210 [ 47.571929][ T5203] __sys_sendmsg+0x117/0x1f0 [ 47.573674][ T5203] ? __pfx___sys_sendmsg+0x10/0x10 [ 47.575571][ T5203] do_syscall_64+0xcf/0x260 [ 47.577188][ T5203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.579288][ T5203] RIP: 0033:0x7f4cc96a9bb9 [ 47.580822][ T5203] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 47.587406][ T5203] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.590278][ T5203] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4cc96a9bb9 [ 47.592996][ T5203] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 47.595703][ T5203] RBP: 000000000000b72f R08: 0000000000000006 R09: 0000000000000006 [ 47.598421][ T5203] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 47.601121][ T5203] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 47.603863][ T5203] [ 47.605189][ T5203] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 47.608925][ T5203] CPU: 3 PID: 5203 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 47.612480][ T5203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 47.615942][ T5203] Call Trace: [ 47.617115][ T5203] [ 47.618143][ T5203] dump_stack_lvl+0x16c/0x1f0 [ 47.619800][ T5203] ccid3_update_send_interval+0x18e/0x1c0 [ 47.621767][ T5203] ccid3_hc_tx_packet_sent+0x134/0x190 [ 47.623701][ T5203] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 47.625801][ T5203] dccp_xmit_packet+0x27b/0x710 [ 47.627525][ T5203] dccp_write_xmit+0x16f/0x1d0 [ 47.629208][ T5203] dccp_sendmsg+0x9ae/0xd10 [ 47.630811][ T5203] ? __might_fault+0x13b/0x190 [ 47.632557][ T5203] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.634376][ T5203] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.636168][ T5203] inet_sendmsg+0x119/0x140 [ 47.637776][ T5203] ____sys_sendmsg+0xa09/0xc90 [ 47.639475][ T5203] ? copy_msghdr_from_user+0x10b/0x160 [ 47.641407][ T5203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 47.643313][ T5203] ? hlock_class+0x4e/0x130 [ 47.644925][ T5203] ? rcu_is_watching+0x12/0xc0 [ 47.646614][ T5203] ? kfree+0x241/0x390 [ 47.648060][ T5203] ? __lock_acquire+0x14f4/0x3b30 [ 47.649835][ T5203] ___sys_sendmsg+0x135/0x1e0 [ 47.651515][ T5203] ? __pfx____sys_sendmsg+0x10/0x10 [ 47.653345][ T5203] ? __pfx___lock_acquire+0x10/0x10 [ 47.655269][ T5203] ? find_held_lock+0x2d/0x110 [ 47.657328][ T5203] ? __fget_light+0x176/0x210 [ 47.659111][ T5203] __sys_sendmsg+0x117/0x1f0 [ 47.660797][ T5203] ? __pfx___sys_sendmsg+0x10/0x10 [ 47.662687][ T5203] do_syscall_64+0xcf/0x260 [ 47.664477][ T5203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.666690][ T5203] RIP: 0033:0x7f4cc96a9bb9 [ 47.668353][ T5203] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 47.676303][ T5203] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.679247][ T5203] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4cc96a9bb9 [ 47.682025][ T5203] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 47.685157][ T5203] RBP: 000000000000b72f R08: 0000000000000006 R09: 0000000000000006 [ 47.688166][ T5203] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 47.691119][ T5203] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 47.694195][ T5203] [ 47.695600][ T5203] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 47.699460][ T5203] CPU: 3 PID: 5203 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 47.703078][ T5203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 47.706579][ T5203] Call Trace: [ 47.707759][ T5203] [ 47.708802][ T5203] dump_stack_lvl+0x16c/0x1f0 [ 47.710461][ T5203] ccid3_update_send_interval+0x18e/0x1c0 [ 47.712462][ T5203] ccid3_hc_tx_packet_sent+0x134/0x190 [ 47.714440][ T5203] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 47.716623][ T5203] dccp_xmit_packet+0x27b/0x710 [ 47.718340][ T5203] dccp_write_xmit+0x16f/0x1d0 [ 47.720042][ T5203] dccp_sendmsg+0x9ae/0xd10 [ 47.721641][ T5203] ? __might_fault+0x13b/0x190 [ 47.723324][ T5203] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.725068][ T5203] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.726836][ T5203] inet_sendmsg+0x119/0x140 [ 47.728439][ T5203] ____sys_sendmsg+0xa09/0xc90 [ 47.730132][ T5203] ? copy_msghdr_from_user+0x10b/0x160 [ 47.732060][ T5203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 47.733920][ T5203] ? hlock_class+0x4e/0x130 [ 47.735540][ T5203] ? hlock_class+0x4e/0x130 [ 47.737160][ T5203] ? __lock_acquire+0x14f4/0x3b30 [ 47.738936][ T5203] ___sys_sendmsg+0x135/0x1e0 [ 47.740615][ T5203] ? __pfx____sys_sendmsg+0x10/0x10 [ 47.742445][ T5203] ? __pfx___lock_acquire+0x10/0x10 [ 47.744286][ T5203] ? find_held_lock+0x2d/0x110 [ 47.745975][ T5203] ? __fget_light+0x176/0x210 [ 47.747648][ T5203] __sys_sendmsg+0x117/0x1f0 [ 47.749279][ T5203] ? __pfx___sys_sendmsg+0x10/0x10 [ 47.751082][ T5203] do_syscall_64+0xcf/0x260 [ 47.752691][ T5203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.754771][ T5203] RIP: 0033:0x7f4cc96a9bb9 [ 47.756354][ T5203] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 47.763061][ T5203] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.766006][ T5203] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f4cc96a9bb9 [ 47.768771][ T5203] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 47.771534][ T5203] RBP: 000000000000b72f R08: 0000000000000006 R09: 0000000000000006 [ 47.774279][ T5203] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 47.777040][ T5203] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 47.779784][ T5203] executing program [ 47.793319][ T5204] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 47.797127][ T5204] CPU: 3 PID: 5204 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 47.800715][ T5204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 47.804243][ T5204] Call Trace: [ 47.805426][ T5204] [ 47.806469][ T5204] dump_stack_lvl+0x16c/0x1f0 [ 47.808139][ T5204] ccid3_update_send_interval+0x18e/0x1c0 [ 47.810110][ T5204] ccid3_hc_tx_packet_sent+0x134/0x190 [ 47.812005][ T5204] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 47.814098][ T5204] dccp_xmit_packet+0x27b/0x710 [ 47.815804][ T5204] dccp_write_xmit+0x16f/0x1d0 [ 47.817512][ T5204] dccp_sendmsg+0x9ae/0xd10 [ 47.819084][ T5204] ? __might_fault+0x13b/0x190 [ 47.820772][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.822524][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.824285][ T5204] inet_sendmsg+0x119/0x140 [ 47.826254][ T5204] ____sys_sendmsg+0xa09/0xc90 [ 47.828214][ T5204] ? copy_msghdr_from_user+0x10b/0x160 [ 47.830471][ T5204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 47.832781][ T5204] ? __release_sock+0x2ae/0x400 [ 47.834635][ T5204] ? rcu_is_watching+0x12/0xc0 [ 47.836727][ T5204] ? kfree+0x241/0x390 [ 47.838552][ T5204] ? __local_bh_enable_ip+0xa4/0x120 [ 47.840810][ T5204] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.842652][ T5204] ___sys_sendmsg+0x135/0x1e0 [ 47.844347][ T5204] ? __pfx____sys_sendmsg+0x10/0x10 [ 47.846224][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.848027][ T5204] ? inet_sendmsg+0xc0/0x140 [ 47.849680][ T5204] ? __fget_light+0x176/0x210 [ 47.851354][ T5204] __sys_sendmsg+0x117/0x1f0 [ 47.853019][ T5204] ? __pfx___sys_sendmsg+0x10/0x10 [ 47.854839][ T5204] do_syscall_64+0xcf/0x260 [ 47.856478][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.858547][ T5204] RIP: 0033:0x7f4cc96a9bb9 [ 47.860103][ T5204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 47.866785][ T5204] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.869675][ T5204] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00007f4cc96a9bb9 [ 47.872434][ T5204] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 47.875223][ T5204] RBP: 000000000000b739 R08: 0000000000000006 R09: 0000000000000006 [ 47.877974][ T5204] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 47.880708][ T5204] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 47.883465][ T5204] [ 47.884907][ T5204] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 47.888692][ T5204] CPU: 3 PID: 5204 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 47.892287][ T5204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 47.895787][ T5204] Call Trace: [ 47.896970][ T5204] [ 47.898007][ T5204] dump_stack_lvl+0x16c/0x1f0 [ 47.899672][ T5204] ccid3_update_send_interval+0x18e/0x1c0 [ 47.901637][ T5204] ccid3_hc_tx_packet_sent+0x134/0x190 [ 47.903473][ T5204] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 47.905554][ T5204] dccp_xmit_packet+0x27b/0x710 [ 47.907245][ T5204] dccp_write_xmit+0x16f/0x1d0 [ 47.908966][ T5204] dccp_sendmsg+0x9ae/0xd10 [ 47.910540][ T5204] ? __might_fault+0x13b/0x190 [ 47.912196][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.913951][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.915714][ T5204] inet_sendmsg+0x119/0x140 [ 47.917310][ T5204] ____sys_sendmsg+0xa09/0xc90 [ 47.918967][ T5204] ? copy_msghdr_from_user+0x10b/0x160 [ 47.920867][ T5204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 47.922692][ T5204] ? hlock_class+0x4e/0x130 [ 47.924324][ T5204] ? hlock_class+0x4e/0x130 [ 47.925917][ T5204] ? __lock_acquire+0x14f4/0x3b30 [ 47.927649][ T5204] ___sys_sendmsg+0x135/0x1e0 [ 47.929268][ T5204] ? __pfx____sys_sendmsg+0x10/0x10 [ 47.931092][ T5204] ? __pfx___lock_acquire+0x10/0x10 [ 47.932941][ T5204] ? find_held_lock+0x2d/0x110 [ 47.934634][ T5204] ? __fget_light+0x176/0x210 [ 47.936314][ T5204] __sys_sendmsg+0x117/0x1f0 [ 47.937952][ T5204] ? __pfx___sys_sendmsg+0x10/0x10 [ 47.939764][ T5204] do_syscall_64+0xcf/0x260 [ 47.941371][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.943455][ T5204] RIP: 0033:0x7f4cc96a9bb9 [ 47.945034][ T5204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 47.951725][ T5204] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.954518][ T5204] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007f4cc96a9bb9 [ 47.957261][ T5204] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 47.959936][ T5204] RBP: 000000000000b739 R08: 0000000000000006 R09: 0000000000000006 [ 47.962632][ T5204] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 47.965352][ T5204] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 47.968060][ T5204] [ 47.969525][ T5204] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 47.973376][ T5204] CPU: 3 PID: 5204 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 47.976934][ T5204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 47.980380][ T5204] Call Trace: [ 47.981559][ T5204] [ 47.982606][ T5204] dump_stack_lvl+0x16c/0x1f0 [ 47.984263][ T5204] ccid3_update_send_interval+0x18e/0x1c0 [ 47.986249][ T5204] ccid3_hc_tx_packet_sent+0x134/0x190 [ 47.988145][ T5204] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 47.990218][ T5204] dccp_xmit_packet+0x27b/0x710 [ 47.991917][ T5204] dccp_write_xmit+0x16f/0x1d0 [ 47.993623][ T5204] dccp_sendmsg+0x9ae/0xd10 [ 47.995195][ T5204] ? __might_fault+0x13b/0x190 [ 47.996876][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 47.998645][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.000393][ T5204] inet_sendmsg+0x119/0x140 [ 48.001966][ T5204] ____sys_sendmsg+0xa09/0xc90 [ 48.003637][ T5204] ? copy_msghdr_from_user+0x10b/0x160 [ 48.005532][ T5204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 48.007348][ T5204] ? hlock_class+0x4e/0x130 [ 48.009002][ T5204] ? rcu_is_watching+0x12/0xc0 [ 48.010669][ T5204] ? kfree+0x241/0x390 [ 48.012093][ T5204] ? __lock_acquire+0x14f4/0x3b30 [ 48.013851][ T5204] ___sys_sendmsg+0x135/0x1e0 [ 48.015540][ T5204] ? __pfx____sys_sendmsg+0x10/0x10 [ 48.017343][ T5204] ? __pfx___lock_acquire+0x10/0x10 [ 48.019172][ T5204] ? find_held_lock+0x2d/0x110 [ 48.020866][ T5204] ? __fget_light+0x176/0x210 [ 48.022534][ T5204] __sys_sendmsg+0x117/0x1f0 [ 48.024174][ T5204] ? __pfx___sys_sendmsg+0x10/0x10 [ 48.025947][ T5204] do_syscall_64+0xcf/0x260 [ 48.027537][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.029630][ T5204] RIP: 0033:0x7f4cc96a9bb9 [ 48.031196][ T5204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 48.037984][ T5204] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.040875][ T5204] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f4cc96a9bb9 [ 48.043619][ T5204] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 48.046345][ T5204] RBP: 000000000000b739 R08: 0000000000000006 R09: 0000000000000006 [ 48.049101][ T5204] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 48.051838][ T5204] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 48.054595][ T5204] [ 48.055943][ T5204] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 48.059849][ T5204] CPU: 3 PID: 5204 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 48.063422][ T5204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 48.066867][ T5204] Call Trace: [ 48.068023][ T5204] [ 48.069047][ T5204] dump_stack_lvl+0x16c/0x1f0 [ 48.070711][ T5204] ccid3_update_send_interval+0x18e/0x1c0 [ 48.072684][ T5204] ccid3_hc_tx_packet_sent+0x134/0x190 [ 48.074568][ T5204] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 48.076716][ T5204] dccp_xmit_packet+0x27b/0x710 [ 48.078414][ T5204] dccp_write_xmit+0x16f/0x1d0 [ 48.080108][ T5204] dccp_sendmsg+0x9ae/0xd10 [ 48.081693][ T5204] ? __might_fault+0x13b/0x190 [ 48.083353][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.085152][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.086930][ T5204] inet_sendmsg+0x119/0x140 [ 48.088516][ T5204] ____sys_sendmsg+0xa09/0xc90 [ 48.090193][ T5204] ? copy_msghdr_from_user+0x10b/0x160 [ 48.092094][ T5204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 48.094142][ T5204] ? hlock_class+0x4e/0x130 [ 48.095806][ T5204] ? hlock_class+0x4e/0x130 [ 48.097402][ T5204] ? __lock_acquire+0x14f4/0x3b30 [ 48.099164][ T5204] ___sys_sendmsg+0x135/0x1e0 [ 48.100814][ T5204] ? __pfx____sys_sendmsg+0x10/0x10 [ 48.102627][ T5204] ? __pfx___lock_acquire+0x10/0x10 [ 48.104604][ T5204] ? find_held_lock+0x2d/0x110 [ 48.106265][ T5204] ? __fget_light+0x176/0x210 [ 48.107908][ T5204] __sys_sendmsg+0x117/0x1f0 [ 48.109540][ T5204] ? __pfx___sys_sendmsg+0x10/0x10 [ 48.111342][ T5204] do_syscall_64+0xcf/0x260 [ 48.112938][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.115356][ T5204] RIP: 0033:0x7f4cc96a9bb9 [ 48.117326][ T5204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 48.124856][ T5204] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.127742][ T5204] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f4cc96a9bb9 [ 48.130589][ T5204] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 48.133507][ T5204] RBP: 000000000000b739 R08: 0000000000000006 R09: 0000000000000006 [ 48.136252][ T5204] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 48.139041][ T5204] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 48.141885][ T5204] [ 48.144250][ T5204] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 48.148077][ T5204] CPU: 1 PID: 5204 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 48.151637][ T5204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 48.155831][ T5204] Call Trace: [ 48.157268][ T5204] [ 48.158296][ T5204] dump_stack_lvl+0x16c/0x1f0 [ 48.159948][ T5204] ccid3_update_send_interval+0x18e/0x1c0 [ 48.161916][ T5204] ccid3_hc_tx_packet_sent+0x134/0x190 [ 48.163872][ T5204] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 48.165939][ T5204] dccp_xmit_packet+0x27b/0x710 [ 48.167648][ T5204] dccp_write_xmit+0x16f/0x1d0 [ 48.169312][ T5204] dccp_sendmsg+0x9ae/0xd10 [ 48.170896][ T5204] ? __might_fault+0x13b/0x190 [ 48.172546][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.174679][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.176690][ T5204] inet_sendmsg+0x119/0x140 [ 48.178259][ T5204] ____sys_sendmsg+0xa09/0xc90 [ 48.179900][ T5204] ? copy_msghdr_from_user+0x10b/0x160 [ 48.181765][ T5204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 48.183822][ T5204] ? hlock_class+0x4e/0x130 [ 48.185408][ T5204] ? hlock_class+0x4e/0x130 [ 48.186987][ T5204] ? __lock_acquire+0x14f4/0x3b30 [ 48.188754][ T5204] ___sys_sendmsg+0x135/0x1e0 [ 48.190402][ T5204] ? __pfx____sys_sendmsg+0x10/0x10 [ 48.192216][ T5204] ? __pfx___lock_acquire+0x10/0x10 [ 48.194339][ T5204] ? find_held_lock+0x2d/0x110 [ 48.196019][ T5204] ? __fget_light+0x176/0x210 [ 48.197679][ T5204] __sys_sendmsg+0x117/0x1f0 [ 48.199287][ T5204] ? __pfx___sys_sendmsg+0x10/0x10 [ 48.201064][ T5204] ? xfd_validate_state+0x5d/0x180 [ 48.202870][ T5204] do_syscall_64+0xcf/0x260 [ 48.204467][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.206503][ T5204] RIP: 0033:0x7f4cc96a9bb9 [ 48.208043][ T5204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 48.214654][ T5204] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.217512][ T5204] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f4cc96a9bb9 [ 48.220236][ T5204] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 48.223006][ T5204] RBP: 000000000000b739 R08: 0000000000000006 R09: 0000000000000006 [ 48.225745][ T5204] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 48.228451][ T5204] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 48.231169][ T5204] [ 48.232582][ T5204] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 48.236529][ T5204] CPU: 0 PID: 5204 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 48.240097][ T5204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 48.243827][ T5204] Call Trace: [ 48.245308][ T5204] [ 48.246631][ T5204] dump_stack_lvl+0x16c/0x1f0 [ 48.248529][ T5204] ccid3_update_send_interval+0x18e/0x1c0 [ 48.250986][ T5204] ccid3_hc_tx_packet_sent+0x134/0x190 [ 48.253270][ T5204] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 48.255830][ T5204] dccp_xmit_packet+0x27b/0x710 [ 48.258015][ T5204] dccp_write_xmit+0x16f/0x1d0 [ 48.260166][ T5204] dccp_sendmsg+0x9ae/0xd10 [ 48.262192][ T5204] ? __might_fault+0x13b/0x190 [ 48.264113][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.266235][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.268438][ T5204] inet_sendmsg+0x119/0x140 [ 48.270436][ T5204] ____sys_sendmsg+0xa09/0xc90 [ 48.272542][ T5204] ? copy_msghdr_from_user+0x10b/0x160 [ 48.274921][ T5204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 48.277252][ T5204] ? hlock_class+0x4e/0x130 [ 48.279247][ T5204] ? hlock_class+0x4e/0x130 [ 48.281242][ T5204] ? __lock_acquire+0x14f4/0x3b30 [ 48.283449][ T5204] ___sys_sendmsg+0x135/0x1e0 [ 48.285526][ T5204] ? __pfx____sys_sendmsg+0x10/0x10 [ 48.287821][ T5204] ? __pfx___lock_acquire+0x10/0x10 [ 48.290097][ T5204] ? find_held_lock+0x2d/0x110 [ 48.292191][ T5204] ? __fget_light+0x176/0x210 [ 48.294243][ T5204] __sys_sendmsg+0x117/0x1f0 [ 48.296384][ T5204] ? __pfx___sys_sendmsg+0x10/0x10 [ 48.298619][ T5204] ? xfd_validate_state+0x5d/0x180 [ 48.300762][ T5204] do_syscall_64+0xcf/0x260 [ 48.302467][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.304538][ T5204] RIP: 0033:0x7f4cc96a9bb9 [ 48.306093][ T5204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 48.312682][ T5204] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.315577][ T5204] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4cc96a9bb9 [ 48.318408][ T5204] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 48.321476][ T5204] RBP: 000000000000b739 R08: 0000000000000006 R09: 0000000000000006 [ 48.324172][ T5204] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 48.327030][ T5204] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 48.329899][ T5204] [ 48.331357][ T5204] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 48.335274][ T5204] CPU: 0 PID: 5204 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 48.338874][ T5204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 48.342402][ T5204] Call Trace: [ 48.343590][ T5204] [ 48.344619][ T5204] dump_stack_lvl+0x16c/0x1f0 [ 48.346275][ T5204] ccid3_update_send_interval+0x18e/0x1c0 [ 48.348260][ T5204] ccid3_hc_tx_packet_sent+0x134/0x190 [ 48.350151][ T5204] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 48.352240][ T5204] dccp_xmit_packet+0x27b/0x710 [ 48.353955][ T5204] dccp_write_xmit+0x16f/0x1d0 [ 48.355648][ T5204] dccp_sendmsg+0x9ae/0xd10 [ 48.357265][ T5204] ? __might_fault+0x13b/0x190 [ 48.358972][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.360775][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.362561][ T5204] inet_sendmsg+0x119/0x140 [ 48.364187][ T5204] ____sys_sendmsg+0xa09/0xc90 [ 48.365866][ T5204] ? copy_msghdr_from_user+0x10b/0x160 [ 48.367770][ T5204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 48.369619][ T5204] ? hlock_class+0x4e/0x130 [ 48.371239][ T5204] ? hlock_class+0x4e/0x130 [ 48.372875][ T5204] ? __lock_acquire+0x14f4/0x3b30 [ 48.374670][ T5204] ___sys_sendmsg+0x135/0x1e0 [ 48.376365][ T5204] ? __pfx____sys_sendmsg+0x10/0x10 [ 48.378184][ T5204] ? __pfx___lock_acquire+0x10/0x10 [ 48.380031][ T5204] ? find_held_lock+0x2d/0x110 [ 48.381716][ T5204] ? __fget_light+0x176/0x210 [ 48.383376][ T5204] __sys_sendmsg+0x117/0x1f0 [ 48.385010][ T5204] ? __pfx___sys_sendmsg+0x10/0x10 [ 48.386824][ T5204] ? xfd_validate_state+0x5d/0x180 [ 48.388663][ T5204] do_syscall_64+0xcf/0x260 [ 48.390270][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.392328][ T5204] RIP: 0033:0x7f4cc96a9bb9 [ 48.393880][ T5204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 48.400561][ T5204] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.403448][ T5204] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f4cc96a9bb9 [ 48.406205][ T5204] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 48.408982][ T5204] RBP: 000000000000b739 R08: 0000000000000006 R09: 0000000000000006 [ 48.411726][ T5204] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 48.414643][ T5204] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 48.417403][ T5204] [ 48.418743][ T5204] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 48.422389][ T5204] CPU: 0 PID: 5204 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 48.425975][ T5204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 48.429457][ T5204] Call Trace: [ 48.430629][ T5204] [ 48.431680][ T5204] dump_stack_lvl+0x16c/0x1f0 [ 48.433334][ T5204] ccid3_update_send_interval+0x18e/0x1c0 [ 48.435304][ T5204] ccid3_hc_tx_packet_sent+0x134/0x190 [ 48.437226][ T5204] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 48.439403][ T5204] dccp_xmit_packet+0x27b/0x710 [ 48.441185][ T5204] dccp_write_xmit+0x16f/0x1d0 [ 48.442928][ T5204] dccp_sendmsg+0x9ae/0xd10 [ 48.444638][ T5204] ? __might_fault+0x13b/0x190 [ 48.446750][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.448805][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.450552][ T5204] inet_sendmsg+0x119/0x140 [ 48.452261][ T5204] ____sys_sendmsg+0xa09/0xc90 [ 48.453976][ T5204] ? copy_msghdr_from_user+0x10b/0x160 [ 48.455901][ T5204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 48.457759][ T5204] ? hlock_class+0x4e/0x130 [ 48.459379][ T5204] ? hlock_class+0x4e/0x130 [ 48.460985][ T5204] ? __lock_acquire+0x14f4/0x3b30 [ 48.462765][ T5204] ___sys_sendmsg+0x135/0x1e0 [ 48.464460][ T5204] ? __pfx____sys_sendmsg+0x10/0x10 [ 48.466318][ T5204] ? __pfx___lock_acquire+0x10/0x10 [ 48.468189][ T5204] ? find_held_lock+0x2d/0x110 [ 48.469906][ T5204] ? __fget_light+0x176/0x210 [ 48.471599][ T5204] __sys_sendmsg+0x117/0x1f0 [ 48.473264][ T5204] ? __pfx___sys_sendmsg+0x10/0x10 [ 48.475087][ T5204] do_syscall_64+0xcf/0x260 [ 48.476743][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.478855][ T5204] RIP: 0033:0x7f4cc96a9bb9 [ 48.480432][ T5204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 48.487049][ T5204] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.489893][ T5204] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f4cc96a9bb9 [ 48.492653][ T5204] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 48.495536][ T5204] RBP: 000000000000b739 R08: 0000000000000006 R09: 0000000000000006 [ 48.498299][ T5204] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 48.501043][ T5204] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 48.503779][ T5204] [ 48.505151][ T5204] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 48.509022][ T5204] CPU: 0 PID: 5204 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 48.512581][ T5204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 48.516097][ T5204] Call Trace: [ 48.517249][ T5204] [ 48.518294][ T5204] dump_stack_lvl+0x16c/0x1f0 [ 48.519933][ T5204] ccid3_update_send_interval+0x18e/0x1c0 [ 48.521889][ T5204] ccid3_hc_tx_packet_sent+0x134/0x190 [ 48.523814][ T5204] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 48.525887][ T5204] dccp_xmit_packet+0x27b/0x710 [ 48.527615][ T5204] dccp_write_xmit+0x16f/0x1d0 [ 48.529279][ T5204] dccp_sendmsg+0x9ae/0xd10 [ 48.530863][ T5204] ? __might_fault+0x13b/0x190 [ 48.532562][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.534305][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.536088][ T5204] inet_sendmsg+0x119/0x140 [ 48.537706][ T5204] ____sys_sendmsg+0xa09/0xc90 [ 48.539399][ T5204] ? copy_msghdr_from_user+0x10b/0x160 [ 48.541308][ T5204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 48.543174][ T5204] ? hlock_class+0x4e/0x130 [ 48.544773][ T5204] ? rcu_is_watching+0x12/0xc0 [ 48.546446][ T5204] ? kfree+0x241/0x390 [ 48.547918][ T5204] ? __lock_acquire+0x14f4/0x3b30 [ 48.549705][ T5204] ___sys_sendmsg+0x135/0x1e0 [ 48.551373][ T5204] ? __pfx____sys_sendmsg+0x10/0x10 [ 48.553228][ T5204] ? __pfx___lock_acquire+0x10/0x10 [ 48.555090][ T5204] ? find_held_lock+0x2d/0x110 [ 48.556824][ T5204] ? __fget_light+0x176/0x210 [ 48.558509][ T5204] __sys_sendmsg+0x117/0x1f0 [ 48.560169][ T5204] ? __pfx___sys_sendmsg+0x10/0x10 [ 48.561998][ T5204] do_syscall_64+0xcf/0x260 [ 48.563629][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.565734][ T5204] RIP: 0033:0x7f4cc96a9bb9 [ 48.567308][ T5204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 48.574000][ T5204] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.576842][ T5204] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4cc96a9bb9 [ 48.579586][ T5204] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 48.582356][ T5204] RBP: 000000000000b739 R08: 0000000000000006 R09: 0000000000000006 [ 48.585462][ T5204] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 48.588517][ T5204] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 48.591306][ T5204] [ 48.593084][ T5204] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 48.596954][ T5204] CPU: 1 PID: 5204 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 48.600466][ T5204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 48.603947][ T5204] Call Trace: [ 48.605082][ T5204] [ 48.606092][ T5204] dump_stack_lvl+0x16c/0x1f0 [ 48.607711][ T5204] ccid3_update_send_interval+0x18e/0x1c0 [ 48.609658][ T5204] ccid3_hc_tx_packet_sent+0x134/0x190 [ 48.611514][ T5204] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 48.613768][ T5204] dccp_xmit_packet+0x27b/0x710 [ 48.615958][ T5204] dccp_write_xmit+0x16f/0x1d0 [ 48.618131][ T5204] dccp_sendmsg+0x9ae/0xd10 [ 48.620211][ T5204] ? __might_fault+0x13b/0x190 [ 48.622358][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.624633][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.626922][ T5204] inet_sendmsg+0x119/0x140 [ 48.628933][ T5204] ____sys_sendmsg+0xa09/0xc90 [ 48.631001][ T5204] ? copy_msghdr_from_user+0x10b/0x160 [ 48.633480][ T5204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 48.635405][ T5204] ? hlock_class+0x4e/0x130 [ 48.637045][ T5204] ? hlock_class+0x4e/0x130 [ 48.638649][ T5204] ? __lock_acquire+0x14f4/0x3b30 [ 48.640483][ T5204] ___sys_sendmsg+0x135/0x1e0 [ 48.642129][ T5204] ? __pfx____sys_sendmsg+0x10/0x10 [ 48.644005][ T5204] ? __pfx___lock_acquire+0x10/0x10 [ 48.645815][ T5204] ? find_held_lock+0x2d/0x110 [ 48.647502][ T5204] ? __fget_light+0x176/0x210 [ 48.649146][ T5204] __sys_sendmsg+0x117/0x1f0 [ 48.651024][ T5204] ? __pfx___sys_sendmsg+0x10/0x10 [ 48.652794][ T5204] ? xfd_validate_state+0x5d/0x180 [ 48.654726][ T5204] do_syscall_64+0xcf/0x260 [ 48.656289][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.658282][ T5204] RIP: 0033:0x7f4cc96a9bb9 [ 48.659814][ T5204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 48.666844][ T5204] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.669657][ T5204] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4cc96a9bb9 [ 48.672325][ T5204] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 48.675041][ T5204] RBP: 000000000000b739 R08: 0000000000000006 R09: 0000000000000006 [ 48.677739][ T5204] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 48.680425][ T5204] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 48.683195][ T5204] [ 48.684857][ T5204] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 48.689629][ T5204] CPU: 1 PID: 5204 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 48.693718][ T5204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 48.697168][ T5204] Call Trace: [ 48.698330][ T5204] [ 48.699352][ T5204] dump_stack_lvl+0x16c/0x1f0 [ 48.701003][ T5204] ccid3_update_send_interval+0x18e/0x1c0 [ 48.702955][ T5204] ccid3_hc_tx_packet_sent+0x134/0x190 [ 48.704866][ T5204] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 48.706957][ T5204] dccp_xmit_packet+0x27b/0x710 [ 48.708689][ T5204] dccp_write_xmit+0x16f/0x1d0 [ 48.710379][ T5204] dccp_sendmsg+0x9ae/0xd10 [ 48.711976][ T5204] ? __might_fault+0x13b/0x190 [ 48.713665][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.715363][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.717079][ T5204] inet_sendmsg+0x119/0x140 [ 48.718656][ T5204] ____sys_sendmsg+0xa09/0xc90 [ 48.720314][ T5204] ? copy_msghdr_from_user+0x10b/0x160 [ 48.722155][ T5204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 48.724032][ T5204] ? hlock_class+0x4e/0x130 [ 48.725621][ T5204] ? rcu_is_watching+0x12/0xc0 [ 48.727290][ T5204] ? kfree+0x241/0x390 [ 48.728720][ T5204] ? __lock_acquire+0x14f4/0x3b30 [ 48.730469][ T5204] ___sys_sendmsg+0x135/0x1e0 [ 48.732106][ T5204] ? __pfx____sys_sendmsg+0x10/0x10 [ 48.734223][ T5204] ? __pfx___lock_acquire+0x10/0x10 [ 48.736499][ T5204] ? find_held_lock+0x2d/0x110 [ 48.738373][ T5204] ? __fget_light+0x176/0x210 [ 48.740030][ T5204] __sys_sendmsg+0x117/0x1f0 [ 48.741629][ T5204] ? __pfx___sys_sendmsg+0x10/0x10 [ 48.743927][ T5204] ? xfd_validate_state+0x5d/0x180 [ 48.745834][ T5204] do_syscall_64+0xcf/0x260 [ 48.747609][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.750232][ T5204] RIP: 0033:0x7f4cc96a9bb9 [ 48.752211][ T5204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 48.760660][ T5204] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.764294][ T5204] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4cc96a9bb9 [ 48.767828][ T5204] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 48.771246][ T5204] RBP: 000000000000b739 R08: 0000000000000006 R09: 0000000000000006 [ 48.774699][ T5204] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 48.778095][ T5204] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 48.781463][ T5204] [ 48.783455][ T5204] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 48.788324][ T5204] CPU: 0 PID: 5204 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 48.792797][ T5204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 48.797068][ T5204] Call Trace: [ 48.798544][ T5204] [ 48.799864][ T5204] dump_stack_lvl+0x16c/0x1f0 [ 48.801894][ T5204] ccid3_update_send_interval+0x18e/0x1c0 [ 48.803922][ T5204] ccid3_hc_tx_packet_sent+0x134/0x190 [ 48.805943][ T5204] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 48.808283][ T5204] dccp_xmit_packet+0x27b/0x710 [ 48.810392][ T5204] dccp_write_xmit+0x16f/0x1d0 [ 48.812468][ T5204] dccp_sendmsg+0x9ae/0xd10 [ 48.814465][ T5204] ? __might_fault+0x13b/0x190 [ 48.816569][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.818776][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.820990][ T5204] inet_sendmsg+0x119/0x140 [ 48.823001][ T5204] ____sys_sendmsg+0xa09/0xc90 [ 48.825065][ T5204] ? copy_msghdr_from_user+0x10b/0x160 [ 48.827404][ T5204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 48.829261][ T5204] ? hlock_class+0x4e/0x130 [ 48.830852][ T5204] ? hlock_class+0x4e/0x130 [ 48.832481][ T5204] ? __lock_acquire+0x14f4/0x3b30 [ 48.834252][ T5204] ___sys_sendmsg+0x135/0x1e0 [ 48.835943][ T5204] ? __pfx____sys_sendmsg+0x10/0x10 [ 48.837993][ T5204] ? __pfx___lock_acquire+0x10/0x10 [ 48.840276][ T5204] ? find_held_lock+0x2d/0x110 [ 48.842157][ T5204] ? __fget_light+0x176/0x210 [ 48.844204][ T5204] __sys_sendmsg+0x117/0x1f0 [ 48.846058][ T5204] ? __pfx___sys_sendmsg+0x10/0x10 [ 48.848145][ T5204] ? xfd_validate_state+0x5d/0x180 [ 48.850337][ T5204] do_syscall_64+0xcf/0x260 [ 48.852264][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.854512][ T5204] RIP: 0033:0x7f4cc96a9bb9 [ 48.856350][ T5204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 48.863021][ T5204] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.865909][ T5204] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4cc96a9bb9 [ 48.868675][ T5204] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 48.871418][ T5204] RBP: 000000000000b739 R08: 0000000000000006 R09: 0000000000000006 [ 48.874167][ T5204] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 48.876947][ T5204] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 48.879708][ T5204] [ 48.881206][ T5204] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 48.885161][ T5204] CPU: 0 PID: 5204 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 48.888774][ T5204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 48.892305][ T5204] Call Trace: [ 48.893510][ T5204] [ 48.894785][ T5204] dump_stack_lvl+0x16c/0x1f0 [ 48.896846][ T5204] ccid3_update_send_interval+0x18e/0x1c0 [ 48.899299][ T5204] ccid3_hc_tx_packet_sent+0x134/0x190 [ 48.901660][ T5204] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 48.904252][ T5204] dccp_xmit_packet+0x27b/0x710 [ 48.906378][ T5204] dccp_write_xmit+0x16f/0x1d0 [ 48.908469][ T5204] dccp_sendmsg+0x9ae/0xd10 [ 48.910455][ T5204] ? __might_fault+0x13b/0x190 [ 48.912554][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.914726][ T5204] ? __pfx_dccp_sendmsg+0x10/0x10 [ 48.916849][ T5204] inet_sendmsg+0x119/0x140 [ 48.918764][ T5204] ____sys_sendmsg+0xa09/0xc90 [ 48.920785][ T5204] ? copy_msghdr_from_user+0x10b/0x160 [ 48.923047][ T5204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 48.925252][ T5204] ? hlock_class+0x4e/0x130 [ 48.927155][ T5204] ? __lock_acquire+0x14f4/0x3b30 [ 48.929266][ T5204] ___sys_sendmsg+0x135/0x1e0 [ 48.931189][ T5204] ? __pfx____sys_sendmsg+0x10/0x10 [ 48.933388][ T5204] ? __pfx___lock_acquire+0x10/0x10 [ 48.935421][ T5204] ? find_held_lock+0x2d/0x110 [ 48.937420][ T5204] ? __fget_light+0x176/0x210 [ 48.939171][ T5204] __sys_sendmsg+0x117/0x1f0 [ 48.940831][ T5204] ? __pfx___sys_sendmsg+0x10/0x10 [ 48.942656][ T5204] do_syscall_64+0xcf/0x260 [ 48.944286][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.946441][ T5204] RIP: 0033:0x7f4cc96a9bb9 [ 48.948203][ T5204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 48.955511][ T5204] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.958693][ T5204] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f4cc96a9bb9 [ 48.961822][ T5204] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 48.964807][ T5204] RBP: 000000000000b739 R08: 0000000000000006 R09: 0000000000000006 [ 48.967686][ T5204] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 48.970874][ T5204] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 48.973825][ T5204] executing program [ 48.982787][ T5205] net_ratelimit: 4 callbacks suppressed [ 48.982796][ T5205] dccp_xmit_packet: Payload too large (65475) for featneg. executing program [ 48.999720][ T5206] dccp_xmit_packet: Payload too large (65475) for featneg. [ 49.008671][ T5206] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 49.012783][ T5206] CPU: 0 PID: 5206 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 49.016387][ T5206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 49.019856][ T5206] Call Trace: [ 49.021026][ T5206] [ 49.022062][ T5206] dump_stack_lvl+0x16c/0x1f0 [ 49.023716][ T5206] ccid3_update_send_interval+0x18e/0x1c0 [ 49.025707][ T5206] ccid3_hc_tx_packet_sent+0x134/0x190 [ 49.027607][ T5206] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 49.029695][ T5206] dccp_xmit_packet+0x27b/0x710 [ 49.031408][ T5206] dccp_write_xmit+0x16f/0x1d0 [ 49.033082][ T5206] dccp_sendmsg+0x9ae/0xd10 [ 49.034673][ T5206] ? __might_fault+0x13b/0x190 [ 49.036379][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.038142][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.039910][ T5206] inet_sendmsg+0x119/0x140 [ 49.041499][ T5206] ____sys_sendmsg+0xa09/0xc90 [ 49.043179][ T5206] ? copy_msghdr_from_user+0x10b/0x160 [ 49.045103][ T5206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 49.046944][ T5206] ? __release_sock+0x2ae/0x400 [ 49.048693][ T5206] ? rcu_is_watching+0x12/0xc0 [ 49.050390][ T5206] ? kfree+0x241/0x390 [ 49.051819][ T5206] ? __local_bh_enable_ip+0xa4/0x120 [ 49.053678][ T5206] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.055533][ T5206] ___sys_sendmsg+0x135/0x1e0 [ 49.057222][ T5206] ? __pfx____sys_sendmsg+0x10/0x10 [ 49.059040][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.060829][ T5206] ? inet_sendmsg+0xc0/0x140 [ 49.062475][ T5206] ? __fget_light+0x176/0x210 [ 49.064158][ T5206] __sys_sendmsg+0x117/0x1f0 [ 49.065812][ T5206] ? __pfx___sys_sendmsg+0x10/0x10 [ 49.067622][ T5206] do_syscall_64+0xcf/0x260 [ 49.069213][ T5206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.071292][ T5206] RIP: 0033:0x7f4cc96a9bb9 [ 49.072963][ T5206] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.080062][ T5206] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.083019][ T5206] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f4cc96a9bb9 [ 49.086002][ T5206] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 49.089210][ T5206] RBP: 000000000000becf R08: 0000000000000006 R09: 0000000000000006 [ 49.092182][ T5206] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 49.095112][ T5206] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 49.098048][ T5206] [ 49.099609][ T5206] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 49.104345][ T5206] CPU: 0 PID: 5206 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 49.108139][ T5206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 49.111607][ T5206] Call Trace: [ 49.112892][ T5206] [ 49.113950][ T5206] dump_stack_lvl+0x16c/0x1f0 [ 49.115623][ T5206] ccid3_update_send_interval+0x18e/0x1c0 [ 49.117615][ T5206] ccid3_hc_tx_packet_sent+0x134/0x190 [ 49.119508][ T5206] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 49.121651][ T5206] dccp_xmit_packet+0x27b/0x710 [ 49.123462][ T5206] dccp_write_xmit+0x16f/0x1d0 [ 49.125205][ T5206] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 49.127222][ T5206] dccp_sendmsg+0x9ae/0xd10 [ 49.128806][ T5206] ? __might_fault+0x13b/0x190 [ 49.130449][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.132213][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.134200][ T5206] inet_sendmsg+0x119/0x140 [ 49.136105][ T5206] ____sys_sendmsg+0xa09/0xc90 [ 49.137756][ T5206] ? copy_msghdr_from_user+0x10b/0x160 [ 49.139756][ T5206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 49.141609][ T5206] ? hlock_class+0x4e/0x130 [ 49.143218][ T5206] ? hlock_class+0x4e/0x130 [ 49.144994][ T5206] ? __lock_acquire+0x14f4/0x3b30 [ 49.147078][ T5206] ___sys_sendmsg+0x135/0x1e0 [ 49.148858][ T5206] ? __pfx____sys_sendmsg+0x10/0x10 [ 49.150691][ T5206] ? __pfx___lock_acquire+0x10/0x10 [ 49.152728][ T5206] ? find_held_lock+0x2d/0x110 [ 49.154393][ T5206] ? __fget_light+0x176/0x210 [ 49.156073][ T5206] __sys_sendmsg+0x117/0x1f0 [ 49.157684][ T5206] ? __pfx___sys_sendmsg+0x10/0x10 [ 49.159460][ T5206] do_syscall_64+0xcf/0x260 [ 49.161049][ T5206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.163146][ T5206] RIP: 0033:0x7f4cc96a9bb9 [ 49.164715][ T5206] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.171391][ T5206] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.174255][ T5206] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f4cc96a9bb9 [ 49.177020][ T5206] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 49.179717][ T5206] RBP: 000000000000becf R08: 0000000000000006 R09: 0000000000000006 [ 49.182453][ T5206] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 49.185159][ T5206] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 49.187879][ T5206] [ 49.189190][ T5206] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 49.193093][ T5206] CPU: 0 PID: 5206 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 49.197110][ T5206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 49.201190][ T5206] Call Trace: [ 49.202727][ T5206] [ 49.204138][ T5206] dump_stack_lvl+0x16c/0x1f0 [ 49.206258][ T5206] ccid3_update_send_interval+0x18e/0x1c0 [ 49.208672][ T5206] ccid3_hc_tx_packet_sent+0x134/0x190 [ 49.211022][ T5206] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 49.213235][ T5206] dccp_xmit_packet+0x27b/0x710 [ 49.215118][ T5206] dccp_write_xmit+0x16f/0x1d0 [ 49.217050][ T5206] dccp_sendmsg+0x9ae/0xd10 [ 49.218647][ T5206] ? __might_fault+0x13b/0x190 [ 49.220734][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.222828][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.225001][ T5206] inet_sendmsg+0x119/0x140 [ 49.226941][ T5206] ____sys_sendmsg+0xa09/0xc90 [ 49.228900][ T5206] ? copy_msghdr_from_user+0x10b/0x160 [ 49.230779][ T5206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 49.232935][ T5206] ? hlock_class+0x4e/0x130 [ 49.234916][ T5206] ? rcu_is_watching+0x12/0xc0 [ 49.237033][ T5206] ? kfree+0x241/0x390 [ 49.238811][ T5206] ? __lock_acquire+0x14f4/0x3b30 [ 49.241010][ T5206] ___sys_sendmsg+0x135/0x1e0 [ 49.243026][ T5206] ? __pfx____sys_sendmsg+0x10/0x10 [ 49.245189][ T5206] ? __pfx___lock_acquire+0x10/0x10 [ 49.247032][ T5206] ? find_held_lock+0x2d/0x110 [ 49.248745][ T5206] ? __fget_light+0x176/0x210 [ 49.250415][ T5206] __sys_sendmsg+0x117/0x1f0 [ 49.252073][ T5206] ? __pfx___sys_sendmsg+0x10/0x10 [ 49.253893][ T5206] do_syscall_64+0xcf/0x260 [ 49.255516][ T5206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.257532][ T5206] RIP: 0033:0x7f4cc96a9bb9 [ 49.259408][ T5206] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.266213][ T5206] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.269189][ T5206] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f4cc96a9bb9 [ 49.271931][ T5206] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 49.274699][ T5206] RBP: 000000000000becf R08: 0000000000000006 R09: 0000000000000006 [ 49.277514][ T5206] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 49.280316][ T5206] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 49.283111][ T5206] [ 49.285302][ T5206] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 49.289250][ T5206] CPU: 0 PID: 5206 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 49.292872][ T5206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 49.296417][ T5206] Call Trace: [ 49.297603][ T5206] [ 49.298655][ T5206] dump_stack_lvl+0x16c/0x1f0 [ 49.300330][ T5206] ccid3_update_send_interval+0x18e/0x1c0 [ 49.302337][ T5206] ccid3_hc_tx_packet_sent+0x134/0x190 [ 49.304639][ T5206] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 49.307291][ T5206] dccp_xmit_packet+0x27b/0x710 [ 49.309073][ T5206] dccp_write_xmit+0x16f/0x1d0 [ 49.310816][ T5206] dccp_sendmsg+0x9ae/0xd10 [ 49.312448][ T5206] ? __might_fault+0x13b/0x190 [ 49.314149][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.315944][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.317745][ T5206] inet_sendmsg+0x119/0x140 [ 49.319370][ T5206] ____sys_sendmsg+0xa09/0xc90 [ 49.321085][ T5206] ? copy_msghdr_from_user+0x10b/0x160 [ 49.323016][ T5206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 49.324919][ T5206] ? hlock_class+0x4e/0x130 [ 49.326534][ T5206] ? hlock_class+0x4e/0x130 [ 49.328158][ T5206] ? __lock_acquire+0x14f4/0x3b30 [ 49.329943][ T5206] ___sys_sendmsg+0x135/0x1e0 [ 49.331623][ T5206] ? __pfx____sys_sendmsg+0x10/0x10 [ 49.333461][ T5206] ? __pfx___lock_acquire+0x10/0x10 [ 49.335307][ T5206] ? find_held_lock+0x2d/0x110 [ 49.337036][ T5206] ? __fget_light+0x176/0x210 [ 49.338708][ T5206] __sys_sendmsg+0x117/0x1f0 [ 49.340357][ T5206] ? __pfx___sys_sendmsg+0x10/0x10 [ 49.342201][ T5206] do_syscall_64+0xcf/0x260 [ 49.343879][ T5206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.346353][ T5206] RIP: 0033:0x7f4cc96a9bb9 [ 49.348296][ T5206] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.355794][ T5206] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.358988][ T5206] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4cc96a9bb9 [ 49.362239][ T5206] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 49.365656][ T5206] RBP: 000000000000becf R08: 0000000000000006 R09: 0000000000000006 [ 49.369068][ T5206] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 49.372481][ T5206] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 49.375885][ T5206] [ 49.377649][ T5206] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 49.382452][ T5206] CPU: 0 PID: 5206 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 49.386219][ T5206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 49.390195][ T5206] Call Trace: [ 49.391650][ T5206] [ 49.392795][ T5206] dump_stack_lvl+0x16c/0x1f0 [ 49.394792][ T5206] ccid3_update_send_interval+0x18e/0x1c0 [ 49.397118][ T5206] ccid3_hc_tx_packet_sent+0x134/0x190 [ 49.399415][ T5206] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 49.402049][ T5206] dccp_xmit_packet+0x27b/0x710 [ 49.404194][ T5206] dccp_write_xmit+0x16f/0x1d0 [ 49.406291][ T5206] dccp_sendmsg+0x9ae/0xd10 [ 49.408272][ T5206] ? __might_fault+0x13b/0x190 [ 49.410265][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.412047][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.413815][ T5206] inet_sendmsg+0x119/0x140 [ 49.415430][ T5206] ____sys_sendmsg+0xa09/0xc90 [ 49.417153][ T5206] ? copy_msghdr_from_user+0x10b/0x160 [ 49.419089][ T5206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 49.421188][ T5206] ? hlock_class+0x4e/0x130 [ 49.422810][ T5206] ? hlock_class+0x4e/0x130 [ 49.424629][ T5206] ? __lock_acquire+0x14f4/0x3b30 [ 49.426390][ T5206] ___sys_sendmsg+0x135/0x1e0 [ 49.428069][ T5206] ? __pfx____sys_sendmsg+0x10/0x10 [ 49.429879][ T5206] ? __pfx___lock_acquire+0x10/0x10 [ 49.431740][ T5206] ? find_held_lock+0x2d/0x110 [ 49.433408][ T5206] ? __fget_light+0x176/0x210 [ 49.435147][ T5206] __sys_sendmsg+0x117/0x1f0 [ 49.437186][ T5206] ? __pfx___sys_sendmsg+0x10/0x10 [ 49.439421][ T5206] do_syscall_64+0xcf/0x260 [ 49.441384][ T5206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.443646][ T5206] RIP: 0033:0x7f4cc96a9bb9 [ 49.445205][ T5206] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.452141][ T5206] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.455279][ T5206] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f4cc96a9bb9 [ 49.458235][ T5206] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 49.461271][ T5206] RBP: 000000000000becf R08: 0000000000000006 R09: 0000000000000006 [ 49.464075][ T5206] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 49.466977][ T5206] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 49.470060][ T5206] [ 49.471515][ T5206] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 49.475458][ T5206] CPU: 0 PID: 5206 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 49.479065][ T5206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 49.482171][ T5206] Call Trace: [ 49.483241][ T5206] [ 49.484171][ T5206] dump_stack_lvl+0x16c/0x1f0 [ 49.485635][ T5206] ccid3_update_send_interval+0x18e/0x1c0 [ 49.487378][ T5206] ccid3_hc_tx_packet_sent+0x134/0x190 [ 49.489081][ T5206] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 49.491166][ T5206] dccp_xmit_packet+0x27b/0x710 [ 49.492878][ T5206] dccp_write_xmit+0x16f/0x1d0 [ 49.494614][ T5206] dccp_sendmsg+0x9ae/0xd10 [ 49.496235][ T5206] ? __might_fault+0x13b/0x190 [ 49.498097][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.499974][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.501789][ T5206] inet_sendmsg+0x119/0x140 [ 49.503491][ T5206] ____sys_sendmsg+0xa09/0xc90 [ 49.505172][ T5206] ? copy_msghdr_from_user+0x10b/0x160 [ 49.507083][ T5206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 49.508941][ T5206] ? hlock_class+0x4e/0x130 [ 49.510533][ T5206] ? hlock_class+0x4e/0x130 [ 49.512115][ T5206] ? __lock_acquire+0x14f4/0x3b30 [ 49.513874][ T5206] ___sys_sendmsg+0x135/0x1e0 [ 49.515531][ T5206] ? __pfx____sys_sendmsg+0x10/0x10 [ 49.517383][ T5206] ? __pfx___lock_acquire+0x10/0x10 [ 49.519203][ T5206] ? find_held_lock+0x2d/0x110 [ 49.520906][ T5206] ? __fget_light+0x176/0x210 [ 49.522590][ T5206] __sys_sendmsg+0x117/0x1f0 [ 49.524437][ T5206] ? __pfx___sys_sendmsg+0x10/0x10 [ 49.526272][ T5206] do_syscall_64+0xcf/0x260 [ 49.527923][ T5206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.530003][ T5206] RIP: 0033:0x7f4cc96a9bb9 [ 49.531579][ T5206] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.538738][ T5206] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.541823][ T5206] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f4cc96a9bb9 [ 49.544589][ T5206] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 49.547355][ T5206] RBP: 000000000000becf R08: 0000000000000006 R09: 0000000000000006 [ 49.550359][ T5206] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 49.553117][ T5206] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 49.556473][ T5206] [ 49.558372][ T5206] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 49.563318][ T5206] CPU: 0 PID: 5206 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 49.567887][ T5206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 49.572385][ T5206] Call Trace: [ 49.573913][ T5206] [ 49.575280][ T5206] dump_stack_lvl+0x16c/0x1f0 [ 49.577468][ T5206] ccid3_update_send_interval+0x18e/0x1c0 [ 49.580037][ T5206] ccid3_hc_tx_packet_sent+0x134/0x190 [ 49.582525][ T5206] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 49.585240][ T5206] dccp_xmit_packet+0x27b/0x710 [ 49.587514][ T5206] dccp_write_xmit+0x16f/0x1d0 [ 49.589704][ T5206] dccp_sendmsg+0x9ae/0xd10 [ 49.591789][ T5206] ? __might_fault+0x13b/0x190 [ 49.593987][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.596297][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.598556][ T5206] inet_sendmsg+0x119/0x140 [ 49.600614][ T5206] ____sys_sendmsg+0xa09/0xc90 [ 49.602802][ T5206] ? copy_msghdr_from_user+0x10b/0x160 [ 49.604893][ T5206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 49.606756][ T5206] ? hlock_class+0x4e/0x130 [ 49.608379][ T5206] ? rcu_is_watching+0x12/0xc0 [ 49.610083][ T5206] ? kfree+0x241/0x390 [ 49.611545][ T5206] ? __lock_acquire+0x14f4/0x3b30 [ 49.613322][ T5206] ___sys_sendmsg+0x135/0x1e0 [ 49.614965][ T5206] ? __pfx____sys_sendmsg+0x10/0x10 [ 49.616828][ T5206] ? __pfx___lock_acquire+0x10/0x10 [ 49.618653][ T5206] ? find_held_lock+0x2d/0x110 [ 49.620346][ T5206] ? __fget_light+0x176/0x210 [ 49.622004][ T5206] __sys_sendmsg+0x117/0x1f0 [ 49.623665][ T5206] ? __pfx___sys_sendmsg+0x10/0x10 [ 49.625613][ T5206] do_syscall_64+0xcf/0x260 [ 49.627210][ T5206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.629295][ T5206] RIP: 0033:0x7f4cc96a9bb9 [ 49.630856][ T5206] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.637570][ T5206] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.640479][ T5206] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4cc96a9bb9 [ 49.643166][ T5206] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 49.645969][ T5206] RBP: 000000000000becf R08: 0000000000000006 R09: 0000000000000006 [ 49.648826][ T5206] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 49.651951][ T5206] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 49.654953][ T5206] [ 49.656364][ T5206] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 49.660131][ T5206] CPU: 0 PID: 5206 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 49.663709][ T5206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 49.667186][ T5206] Call Trace: [ 49.668357][ T5206] [ 49.669381][ T5206] dump_stack_lvl+0x16c/0x1f0 [ 49.671036][ T5206] ccid3_update_send_interval+0x18e/0x1c0 [ 49.673223][ T5206] ccid3_hc_tx_packet_sent+0x134/0x190 [ 49.675465][ T5206] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 49.678194][ T5206] dccp_xmit_packet+0x27b/0x710 [ 49.680352][ T5206] dccp_write_xmit+0x16f/0x1d0 [ 49.682497][ T5206] dccp_sendmsg+0x9ae/0xd10 [ 49.684522][ T5206] ? __might_fault+0x13b/0x190 [ 49.686624][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.688919][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.691160][ T5206] inet_sendmsg+0x119/0x140 [ 49.693192][ T5206] ____sys_sendmsg+0xa09/0xc90 [ 49.695348][ T5206] ? copy_msghdr_from_user+0x10b/0x160 [ 49.697786][ T5206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 49.700150][ T5206] ? hlock_class+0x4e/0x130 [ 49.702175][ T5206] ? hlock_class+0x4e/0x130 [ 49.704084][ T5206] ? __lock_acquire+0x14f4/0x3b30 [ 49.705774][ T5206] ___sys_sendmsg+0x135/0x1e0 [ 49.707404][ T5206] ? __pfx____sys_sendmsg+0x10/0x10 [ 49.709248][ T5206] ? __pfx___lock_acquire+0x10/0x10 [ 49.711075][ T5206] ? find_held_lock+0x2d/0x110 [ 49.712761][ T5206] ? __fget_light+0x176/0x210 [ 49.714407][ T5206] __sys_sendmsg+0x117/0x1f0 [ 49.716025][ T5206] ? __pfx___sys_sendmsg+0x10/0x10 [ 49.717816][ T5206] do_syscall_64+0xcf/0x260 [ 49.719404][ T5206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.721490][ T5206] RIP: 0033:0x7f4cc96a9bb9 [ 49.723050][ T5206] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.729952][ T5206] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.732882][ T5206] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4cc96a9bb9 [ 49.735700][ T5206] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 49.738511][ T5206] RBP: 000000000000becf R08: 0000000000000006 R09: 0000000000000006 [ 49.741972][ T5206] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 49.744987][ T5206] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 49.747799][ T5206] [ 49.749592][ T5206] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 49.754536][ T5206] CPU: 1 PID: 5206 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 49.759030][ T5206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 49.763277][ T5206] Call Trace: [ 49.764703][ T5206] [ 49.765929][ T5206] dump_stack_lvl+0x16c/0x1f0 [ 49.767926][ T5206] ccid3_update_send_interval+0x18e/0x1c0 [ 49.770353][ T5206] ccid3_hc_tx_packet_sent+0x134/0x190 [ 49.772729][ T5206] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 49.775159][ T5206] dccp_xmit_packet+0x27b/0x710 [ 49.777198][ T5206] dccp_write_xmit+0x16f/0x1d0 [ 49.778865][ T5206] dccp_sendmsg+0x9ae/0xd10 [ 49.780572][ T5206] ? __might_fault+0x13b/0x190 [ 49.782360][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.784244][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.786114][ T5206] inet_sendmsg+0x119/0x140 [ 49.787842][ T5206] ____sys_sendmsg+0xa09/0xc90 [ 49.789597][ T5206] ? copy_msghdr_from_user+0x10b/0x160 [ 49.791613][ T5206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 49.794023][ T5206] ? hlock_class+0x4e/0x130 [ 49.796115][ T5206] ? hlock_class+0x4e/0x130 [ 49.797883][ T5206] ? __lock_acquire+0x14f4/0x3b30 [ 49.799768][ T5206] ___sys_sendmsg+0x135/0x1e0 [ 49.801465][ T5206] ? __pfx____sys_sendmsg+0x10/0x10 [ 49.803403][ T5206] ? __pfx___lock_acquire+0x10/0x10 [ 49.805268][ T5206] ? find_held_lock+0x2d/0x110 [ 49.806969][ T5206] ? __fget_light+0x176/0x210 [ 49.808847][ T5206] __sys_sendmsg+0x117/0x1f0 [ 49.810964][ T5206] ? __pfx___sys_sendmsg+0x10/0x10 [ 49.813343][ T5206] ? xfd_validate_state+0x5d/0x180 [ 49.815741][ T5206] do_syscall_64+0xcf/0x260 [ 49.817516][ T5206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.819697][ T5206] RIP: 0033:0x7f4cc96a9bb9 [ 49.821323][ T5206] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.828302][ T5206] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.831830][ T5206] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4cc96a9bb9 [ 49.835304][ T5206] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 49.838338][ T5206] RBP: 000000000000becf R08: 0000000000000006 R09: 0000000000000006 [ 49.841809][ T5206] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 49.844669][ T5206] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 49.847410][ T5206] [ 49.848907][ T5206] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 49.853168][ T5206] CPU: 1 PID: 5206 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 49.857377][ T5206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 49.861300][ T5206] Call Trace: [ 49.862786][ T5206] [ 49.863982][ T5206] dump_stack_lvl+0x16c/0x1f0 [ 49.865657][ T5206] ccid3_update_send_interval+0x18e/0x1c0 [ 49.867648][ T5206] ccid3_hc_tx_packet_sent+0x134/0x190 [ 49.869524][ T5206] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 49.871581][ T5206] dccp_xmit_packet+0x27b/0x710 [ 49.873252][ T5206] dccp_write_xmit+0x16f/0x1d0 [ 49.874882][ T5206] dccp_sendmsg+0x9ae/0xd10 [ 49.876452][ T5206] ? __might_fault+0x13b/0x190 [ 49.878107][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.879838][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.881555][ T5206] inet_sendmsg+0x119/0x140 [ 49.883157][ T5206] ____sys_sendmsg+0xa09/0xc90 [ 49.884838][ T5206] ? copy_msghdr_from_user+0x10b/0x160 [ 49.886756][ T5206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 49.888592][ T5206] ? hlock_class+0x4e/0x130 [ 49.890172][ T5206] ? hlock_class+0x4e/0x130 [ 49.891783][ T5206] ? __lock_acquire+0x14f4/0x3b30 [ 49.893529][ T5206] ___sys_sendmsg+0x135/0x1e0 [ 49.895164][ T5206] ? __pfx____sys_sendmsg+0x10/0x10 [ 49.896976][ T5206] ? __pfx___lock_acquire+0x10/0x10 [ 49.898781][ T5206] ? find_held_lock+0x2d/0x110 [ 49.900467][ T5206] ? __fget_light+0x176/0x210 [ 49.902134][ T5206] __sys_sendmsg+0x117/0x1f0 [ 49.903768][ T5206] ? __pfx___sys_sendmsg+0x10/0x10 [ 49.905558][ T5206] do_syscall_64+0xcf/0x260 [ 49.907152][ T5206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.909223][ T5206] RIP: 0033:0x7f4cc96a9bb9 [ 49.910780][ T5206] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.917318][ T5206] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.920209][ T5206] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4cc96a9bb9 [ 49.922974][ T5206] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 49.925744][ T5206] RBP: 000000000000becf R08: 0000000000000006 R09: 0000000000000006 [ 49.928491][ T5206] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 49.931168][ T5206] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 49.933851][ T5206] [ 49.935243][ T5206] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 49.939033][ T5206] CPU: 1 PID: 5206 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 49.942643][ T5206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 49.946148][ T5206] Call Trace: [ 49.947328][ T5206] [ 49.948382][ T5206] dump_stack_lvl+0x16c/0x1f0 [ 49.950034][ T5206] ccid3_update_send_interval+0x18e/0x1c0 [ 49.952047][ T5206] ccid3_hc_tx_packet_sent+0x134/0x190 [ 49.953959][ T5206] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 49.956079][ T5206] dccp_xmit_packet+0x27b/0x710 [ 49.957796][ T5206] dccp_write_xmit+0x16f/0x1d0 [ 49.959523][ T5206] dccp_sendmsg+0x9ae/0xd10 [ 49.961129][ T5206] ? __might_fault+0x13b/0x190 [ 49.962844][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.964633][ T5206] ? __pfx_dccp_sendmsg+0x10/0x10 [ 49.966413][ T5206] inet_sendmsg+0x119/0x140 [ 49.968030][ T5206] ____sys_sendmsg+0xa09/0xc90 [ 49.969764][ T5206] ? copy_msghdr_from_user+0x10b/0x160 [ 49.971690][ T5206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 49.973634][ T5206] ? hlock_class+0x4e/0x130 [ 49.975248][ T5206] ? rcu_is_watching+0x12/0xc0 [ 49.976967][ T5206] ? kfree+0x241/0x390 [ 49.978423][ T5206] ? __lock_acquire+0x14f4/0x3b30 [ 49.980225][ T5206] ___sys_sendmsg+0x135/0x1e0 [ 49.981891][ T5206] ? __pfx____sys_sendmsg+0x10/0x10 [ 49.983927][ T5206] ? __pfx___lock_acquire+0x10/0x10 [ 49.986199][ T5206] ? find_held_lock+0x2d/0x110 [ 49.988312][ T5206] ? __fget_light+0x176/0x210 [ 49.990367][ T5206] __sys_sendmsg+0x117/0x1f0 [ 49.992390][ T5206] ? __pfx___sys_sendmsg+0x10/0x10 [ 49.994621][ T5206] do_syscall_64+0xcf/0x260 [ 49.996636][ T5206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.999235][ T5206] RIP: 0033:0x7f4cc96a9bb9 [ 50.001136][ T5206] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.009560][ T5206] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.013213][ T5206] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f4cc96a9bb9 [ 50.016657][ T5206] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 50.020089][ T5206] RBP: 000000000000becf R08: 0000000000000006 R09: 0000000000000006 [ 50.023533][ T5206] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 50.026467][ T5206] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 50.029275][ T5206] executing program [ 50.038797][ T5207] dccp_xmit_packet: Payload too large (65475) for featneg. [ 50.052739][ T5207] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 50.057253][ T5207] CPU: 2 PID: 5207 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 50.061402][ T5207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 50.065654][ T5207] Call Trace: [ 50.067190][ T5207] [ 50.068548][ T5207] dump_stack_lvl+0x16c/0x1f0 [ 50.070705][ T5207] ccid3_update_send_interval+0x18e/0x1c0 [ 50.073294][ T5207] ccid3_hc_tx_packet_sent+0x134/0x190 [ 50.075782][ T5207] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 50.078505][ T5207] dccp_xmit_packet+0x27b/0x710 [ 50.080734][ T5207] dccp_write_xmit+0x16f/0x1d0 [ 50.083041][ T5207] dccp_sendmsg+0x9ae/0xd10 [ 50.085172][ T5207] ? __might_fault+0x13b/0x190 [ 50.087304][ T5207] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.089606][ T5207] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.091877][ T5207] inet_sendmsg+0x119/0x140 [ 50.093931][ T5207] ____sys_sendmsg+0xa09/0xc90 [ 50.096120][ T5207] ? copy_msghdr_from_user+0x10b/0x160 [ 50.098558][ T5207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.100912][ T5207] ? __release_sock+0x2ae/0x400 [ 50.103095][ T5207] ? rcu_is_watching+0x12/0xc0 [ 50.105276][ T5207] ? kfree+0x241/0x390 [ 50.107129][ T5207] ? __local_bh_enable_ip+0xa4/0x120 [ 50.109529][ T5207] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.111886][ T5207] ___sys_sendmsg+0x135/0x1e0 [ 50.114015][ T5207] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.116399][ T5207] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.118666][ T5207] ? inet_sendmsg+0xc0/0x140 [ 50.120765][ T5207] ? __fget_light+0x176/0x210 [ 50.122884][ T5207] __sys_sendmsg+0x117/0x1f0 [ 50.124972][ T5207] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.127275][ T5207] do_syscall_64+0xcf/0x260 [ 50.129325][ T5207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.131997][ T5207] RIP: 0033:0x7f4cc96a9bb9 [ 50.133980][ T5207] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.142554][ T5207] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.146268][ T5207] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4cc96a9bb9 [ 50.149829][ T5207] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 50.153373][ T5207] RBP: 000000000000bee0 R08: 0000000000000006 R09: 0000000000000006 [ 50.156928][ T5207] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 50.160415][ T5207] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 50.163952][ T5207] [ 50.166339][ T5207] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 50.171244][ T5207] CPU: 3 PID: 5207 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 50.175894][ T5207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 50.180320][ T5207] Call Trace: [ 50.181803][ T5207] [ 50.183158][ T5207] dump_stack_lvl+0x16c/0x1f0 [ 50.185318][ T5207] ccid3_update_send_interval+0x18e/0x1c0 [ 50.187899][ T5207] ccid3_hc_tx_packet_sent+0x134/0x190 [ 50.190338][ T5207] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 50.193051][ T5207] dccp_xmit_packet+0x27b/0x710 [ 50.195281][ T5207] dccp_write_xmit+0x16f/0x1d0 [ 50.197484][ T5207] dccp_sendmsg+0x9ae/0xd10 [ 50.199557][ T5207] ? __might_fault+0x13b/0x190 [ 50.201722][ T5207] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.203995][ T5207] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.206213][ T5207] inet_sendmsg+0x119/0x140 [ 50.208258][ T5207] ____sys_sendmsg+0xa09/0xc90 [ 50.210438][ T5207] ? copy_msghdr_from_user+0x10b/0x160 [ 50.212899][ T5207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.215283][ T5207] ? hlock_class+0x4e/0x130 [ 50.217339][ T5207] ? hlock_class+0x4e/0x130 [ 50.219172][ T5207] ? __lock_acquire+0x14f4/0x3b30 [ 50.221039][ T5207] ___sys_sendmsg+0x135/0x1e0 [ 50.222723][ T5207] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.224627][ T5207] ? __pfx___lock_acquire+0x10/0x10 [ 50.226440][ T5207] ? find_held_lock+0x2d/0x110 [ 50.228140][ T5207] ? __fget_light+0x176/0x210 [ 50.229762][ T5207] __sys_sendmsg+0x117/0x1f0 [ 50.231368][ T5207] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.233299][ T5207] ? xfd_validate_state+0x5d/0x180 [ 50.235490][ T5207] do_syscall_64+0xcf/0x260 [ 50.237078][ T5207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.239111][ T5207] RIP: 0033:0x7f4cc96a9bb9 [ 50.240676][ T5207] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.247499][ T5207] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.250380][ T5207] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4cc96a9bb9 [ 50.253228][ T5207] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 50.256297][ T5207] RBP: 000000000000bee0 R08: 0000000000000006 R09: 0000000000000006 [ 50.259003][ T5207] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 50.261697][ T5207] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 50.264899][ T5207] [ 50.266455][ T5207] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 50.270242][ T5207] CPU: 3 PID: 5207 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 50.274096][ T5207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 50.277810][ T5207] Call Trace: [ 50.279159][ T5207] [ 50.280371][ T5207] dump_stack_lvl+0x16c/0x1f0 [ 50.282320][ T5207] ccid3_update_send_interval+0x18e/0x1c0 [ 50.284611][ T5207] ccid3_hc_tx_packet_sent+0x134/0x190 [ 50.286794][ T5207] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 50.289189][ T5207] dccp_xmit_packet+0x27b/0x710 [ 50.291187][ T5207] dccp_write_xmit+0x16f/0x1d0 [ 50.293279][ T5207] dccp_sendmsg+0x9ae/0xd10 [ 50.295298][ T5207] ? __might_fault+0x13b/0x190 [ 50.297152][ T5207] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.298896][ T5207] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.301008][ T5207] inet_sendmsg+0x119/0x140 [ 50.302992][ T5207] ____sys_sendmsg+0xa09/0xc90 [ 50.305068][ T5207] ? copy_msghdr_from_user+0x10b/0x160 [ 50.307408][ T5207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.309698][ T5207] ? hlock_class+0x4e/0x130 [ 50.311680][ T5207] ? hlock_class+0x4e/0x130 [ 50.313641][ T5207] ? __lock_acquire+0x14f4/0x3b30 [ 50.315824][ T5207] ___sys_sendmsg+0x135/0x1e0 [ 50.317878][ T5207] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.320121][ T5207] ? __pfx___lock_acquire+0x10/0x10 [ 50.322687][ T5207] ? find_held_lock+0x2d/0x110 [ 50.324758][ T5207] ? __fget_light+0x176/0x210 [ 50.326794][ T5207] __sys_sendmsg+0x117/0x1f0 [ 50.328777][ T5207] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.330898][ T5207] do_syscall_64+0xcf/0x260 [ 50.332819][ T5207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.335345][ T5207] RIP: 0033:0x7f4cc96a9bb9 [ 50.337264][ T5207] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.345398][ T5207] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.348894][ T5207] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f4cc96a9bb9 [ 50.352222][ T5207] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 50.355523][ T5207] RBP: 000000000000bee0 R08: 0000000000000006 R09: 0000000000000006 [ 50.358836][ T5207] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 50.362194][ T5207] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 50.365500][ T5207] executing program [ 50.375417][ T5208] dccp_xmit_packet: Payload too large (65475) for featneg. [ 50.386266][ T5208] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 50.390986][ T5208] CPU: 2 PID: 5208 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 50.394924][ T5208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 50.398434][ T5208] Call Trace: [ 50.399627][ T5208] [ 50.400759][ T5208] dump_stack_lvl+0x16c/0x1f0 [ 50.402398][ T5208] ccid3_update_send_interval+0x18e/0x1c0 [ 50.404368][ T5208] ccid3_hc_tx_packet_sent+0x134/0x190 [ 50.406260][ T5208] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 50.408352][ T5208] dccp_xmit_packet+0x27b/0x710 [ 50.410056][ T5208] dccp_write_xmit+0x16f/0x1d0 [ 50.411741][ T5208] dccp_sendmsg+0x9ae/0xd10 [ 50.413317][ T5208] ? __might_fault+0x13b/0x190 [ 50.414992][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.416784][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.418538][ T5208] inet_sendmsg+0x119/0x140 [ 50.420141][ T5208] ____sys_sendmsg+0xa09/0xc90 [ 50.421819][ T5208] ? copy_msghdr_from_user+0x10b/0x160 [ 50.423716][ T5208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.425565][ T5208] ? __release_sock+0x2ae/0x400 [ 50.427262][ T5208] ? rcu_is_watching+0x12/0xc0 [ 50.428965][ T5208] ? kfree+0x241/0x390 [ 50.430395][ T5208] ? __local_bh_enable_ip+0xa4/0x120 [ 50.432246][ T5208] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.434062][ T5208] ___sys_sendmsg+0x135/0x1e0 [ 50.435707][ T5208] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.437530][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.439284][ T5208] ? inet_sendmsg+0xc0/0x140 [ 50.440910][ T5208] ? __fget_light+0x176/0x210 [ 50.442557][ T5208] __sys_sendmsg+0x117/0x1f0 [ 50.444187][ T5208] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.445969][ T5208] do_syscall_64+0xcf/0x260 [ 50.447563][ T5208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.449625][ T5208] RIP: 0033:0x7f4cc96a9bb9 [ 50.451185][ T5208] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.457878][ T5208] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.460777][ T5208] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f4cc96a9bb9 [ 50.463537][ T5208] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 50.466278][ T5208] RBP: 000000000000c2ed R08: 0000000000000006 R09: 0000000000000006 [ 50.469026][ T5208] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 50.471767][ T5208] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 50.474513][ T5208] [ 50.475869][ T5208] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 50.479707][ T5208] CPU: 2 PID: 5208 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 50.483326][ T5208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 50.487655][ T5208] Call Trace: [ 50.489092][ T5208] [ 50.490363][ T5208] dump_stack_lvl+0x16c/0x1f0 [ 50.492403][ T5208] ccid3_update_send_interval+0x18e/0x1c0 [ 50.494840][ T5208] ccid3_hc_tx_packet_sent+0x134/0x190 [ 50.497198][ T5208] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 50.499784][ T5208] dccp_xmit_packet+0x27b/0x710 [ 50.501893][ T5208] dccp_write_xmit+0x16f/0x1d0 [ 50.503971][ T5208] dccp_sendmsg+0x9ae/0xd10 [ 50.505931][ T5208] ? __might_fault+0x13b/0x190 [ 50.507989][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.510140][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.512300][ T5208] inet_sendmsg+0x119/0x140 [ 50.514088][ T5208] ____sys_sendmsg+0xa09/0xc90 [ 50.515995][ T5208] ? copy_msghdr_from_user+0x10b/0x160 [ 50.518056][ T5208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.520002][ T5208] ? hlock_class+0x4e/0x130 [ 50.521587][ T5208] ? hlock_class+0x4e/0x130 [ 50.523249][ T5208] ? __lock_acquire+0x14f4/0x3b30 [ 50.525046][ T5208] ___sys_sendmsg+0x135/0x1e0 [ 50.526694][ T5208] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.528519][ T5208] ? __pfx___lock_acquire+0x10/0x10 [ 50.530341][ T5208] ? find_held_lock+0x2d/0x110 [ 50.532057][ T5208] ? __fget_light+0x176/0x210 [ 50.533734][ T5208] __sys_sendmsg+0x117/0x1f0 [ 50.535637][ T5208] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.537885][ T5208] do_syscall_64+0xcf/0x260 [ 50.539869][ T5208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.542434][ T5208] RIP: 0033:0x7f4cc96a9bb9 [ 50.544304][ T5208] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.551642][ T5208] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.554565][ T5208] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f4cc96a9bb9 [ 50.557374][ T5208] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 50.560170][ T5208] RBP: 000000000000c2ed R08: 0000000000000006 R09: 0000000000000006 [ 50.562970][ T5208] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 50.565739][ T5208] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 50.568536][ T5208] [ 50.570142][ T5208] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 50.574276][ T5208] CPU: 2 PID: 5208 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 50.577925][ T5208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 50.581493][ T5208] Call Trace: [ 50.582726][ T5208] [ 50.583782][ T5208] dump_stack_lvl+0x16c/0x1f0 [ 50.585444][ T5208] ccid3_update_send_interval+0x18e/0x1c0 [ 50.587441][ T5208] ccid3_hc_tx_packet_sent+0x134/0x190 [ 50.589356][ T5208] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 50.591458][ T5208] dccp_xmit_packet+0x27b/0x710 [ 50.593386][ T5208] dccp_write_xmit+0x16f/0x1d0 [ 50.595141][ T5208] dccp_sendmsg+0x9ae/0xd10 [ 50.596781][ T5208] ? __might_fault+0x13b/0x190 [ 50.598482][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.600265][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.602042][ T5208] inet_sendmsg+0x119/0x140 [ 50.603697][ T5208] ____sys_sendmsg+0xa09/0xc90 [ 50.605358][ T5208] ? copy_msghdr_from_user+0x10b/0x160 [ 50.607237][ T5208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.609099][ T5208] ? hlock_class+0x4e/0x130 [ 50.610695][ T5208] ? rcu_is_watching+0x12/0xc0 [ 50.612401][ T5208] ? kfree+0x241/0x390 [ 50.613831][ T5208] ? __lock_acquire+0x14f4/0x3b30 [ 50.615764][ T5208] ___sys_sendmsg+0x135/0x1e0 [ 50.617455][ T5208] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.619349][ T5208] ? __pfx___lock_acquire+0x10/0x10 [ 50.621296][ T5208] ? find_held_lock+0x2d/0x110 [ 50.622994][ T5208] ? __fget_light+0x176/0x210 [ 50.624727][ T5208] __sys_sendmsg+0x117/0x1f0 [ 50.626427][ T5208] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.628444][ T5208] do_syscall_64+0xcf/0x260 [ 50.630183][ T5208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.632319][ T5208] RIP: 0033:0x7f4cc96a9bb9 [ 50.633967][ T5208] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.640822][ T5208] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.643824][ T5208] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f4cc96a9bb9 [ 50.646588][ T5208] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 50.649360][ T5208] RBP: 000000000000c2ed R08: 0000000000000006 R09: 0000000000000006 [ 50.652152][ T5208] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 50.654984][ T5208] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 50.657799][ T5208] [ 50.659248][ T5208] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 50.664270][ T5208] CPU: 2 PID: 5208 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 50.667899][ T5208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 50.671374][ T5208] Call Trace: [ 50.672613][ T5208] [ 50.673660][ T5208] dump_stack_lvl+0x16c/0x1f0 [ 50.675327][ T5208] ccid3_update_send_interval+0x18e/0x1c0 [ 50.677341][ T5208] ccid3_hc_tx_packet_sent+0x134/0x190 [ 50.679250][ T5208] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 50.681362][ T5208] dccp_xmit_packet+0x27b/0x710 [ 50.683093][ T5208] dccp_write_xmit+0x16f/0x1d0 [ 50.684790][ T5208] dccp_sendmsg+0x9ae/0xd10 [ 50.686391][ T5208] ? __might_fault+0x13b/0x190 [ 50.688101][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.689882][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.691671][ T5208] inet_sendmsg+0x119/0x140 [ 50.693301][ T5208] ____sys_sendmsg+0xa09/0xc90 [ 50.695002][ T5208] ? copy_msghdr_from_user+0x10b/0x160 [ 50.696988][ T5208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.698837][ T5208] ? hlock_class+0x4e/0x130 [ 50.700456][ T5208] ? hlock_class+0x4e/0x130 [ 50.702082][ T5208] ? __lock_acquire+0x14f4/0x3b30 [ 50.703894][ T5208] ___sys_sendmsg+0x135/0x1e0 [ 50.705552][ T5208] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.707379][ T5208] ? __pfx___lock_acquire+0x10/0x10 [ 50.709216][ T5208] ? find_held_lock+0x2d/0x110 [ 50.710898][ T5208] ? __fget_light+0x176/0x210 [ 50.712606][ T5208] __sys_sendmsg+0x117/0x1f0 [ 50.714252][ T5208] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.716077][ T5208] do_syscall_64+0xcf/0x260 [ 50.717682][ T5208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.719767][ T5208] RIP: 0033:0x7f4cc96a9bb9 [ 50.721467][ T5208] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.728396][ T5208] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.731272][ T5208] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4cc96a9bb9 [ 50.734114][ T5208] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 50.736961][ T5208] RBP: 000000000000c2ed R08: 0000000000000006 R09: 0000000000000006 [ 50.739731][ T5208] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 50.742523][ T5208] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 50.745323][ T5208] [ 50.746946][ T5208] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 50.751082][ T5208] CPU: 2 PID: 5208 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 50.755330][ T5208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 50.759874][ T5208] Call Trace: [ 50.761381][ T5208] [ 50.762696][ T5208] dump_stack_lvl+0x16c/0x1f0 [ 50.764833][ T5208] ccid3_update_send_interval+0x18e/0x1c0 [ 50.767451][ T5208] ccid3_hc_tx_packet_sent+0x134/0x190 [ 50.769926][ T5208] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 50.772698][ T5208] dccp_xmit_packet+0x27b/0x710 [ 50.774846][ T5208] dccp_write_xmit+0x16f/0x1d0 [ 50.776876][ T5208] dccp_sendmsg+0x9ae/0xd10 [ 50.778929][ T5208] ? __might_fault+0x13b/0x190 [ 50.781093][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.783262][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.785309][ T5208] inet_sendmsg+0x119/0x140 [ 50.786906][ T5208] ____sys_sendmsg+0xa09/0xc90 [ 50.788612][ T5208] ? copy_msghdr_from_user+0x10b/0x160 [ 50.790514][ T5208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.792551][ T5208] ? hlock_class+0x4e/0x130 [ 50.794448][ T5208] ? rcu_is_watching+0x12/0xc0 [ 50.796587][ T5208] ? kfree+0x241/0x390 [ 50.798462][ T5208] ? __lock_acquire+0x14f4/0x3b30 [ 50.800789][ T5208] ___sys_sendmsg+0x135/0x1e0 [ 50.802934][ T5208] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.805256][ T5208] ? __pfx___lock_acquire+0x10/0x10 [ 50.807683][ T5208] ? find_held_lock+0x2d/0x110 [ 50.809842][ T5208] ? __fget_light+0x176/0x210 [ 50.811659][ T5208] __sys_sendmsg+0x117/0x1f0 [ 50.813516][ T5208] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.815499][ T5208] do_syscall_64+0xcf/0x260 [ 50.817168][ T5208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.819642][ T5208] RIP: 0033:0x7f4cc96a9bb9 [ 50.821635][ T5208] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.829959][ T5208] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.833477][ T5208] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f4cc96a9bb9 [ 50.836608][ T5208] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 50.839343][ T5208] RBP: 000000000000c2ed R08: 0000000000000006 R09: 0000000000000006 [ 50.842216][ T5208] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 50.845692][ T5208] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 50.849212][ T5208] [ 50.851132][ T5208] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 50.856274][ T5208] CPU: 3 PID: 5208 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 50.860956][ T5208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 50.865488][ T5208] Call Trace: [ 50.867026][ T5208] [ 50.868399][ T5208] dump_stack_lvl+0x16c/0x1f0 [ 50.870545][ T5208] ccid3_update_send_interval+0x18e/0x1c0 [ 50.873147][ T5208] ccid3_hc_tx_packet_sent+0x134/0x190 [ 50.875636][ T5208] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 50.878370][ T5208] dccp_xmit_packet+0x27b/0x710 [ 50.880619][ T5208] dccp_write_xmit+0x16f/0x1d0 [ 50.882855][ T5208] dccp_sendmsg+0x9ae/0xd10 [ 50.885010][ T5208] ? __might_fault+0x13b/0x190 [ 50.887189][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.889490][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.891790][ T5208] inet_sendmsg+0x119/0x140 [ 50.893873][ T5208] ____sys_sendmsg+0xa09/0xc90 [ 50.896082][ T5208] ? copy_msghdr_from_user+0x10b/0x160 [ 50.898498][ T5208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.900911][ T5208] ? hlock_class+0x4e/0x130 [ 50.903007][ T5208] ? hlock_class+0x4e/0x130 [ 50.905111][ T5208] ? __lock_acquire+0x14f4/0x3b30 [ 50.907424][ T5208] ___sys_sendmsg+0x135/0x1e0 [ 50.909638][ T5208] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.912040][ T5208] ? __pfx___lock_acquire+0x10/0x10 [ 50.914361][ T5208] ? find_held_lock+0x2d/0x110 [ 50.916591][ T5208] ? __fget_light+0x176/0x210 [ 50.918758][ T5208] __sys_sendmsg+0x117/0x1f0 [ 50.920899][ T5208] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.923251][ T5208] ? xfd_validate_state+0x5d/0x180 [ 50.925596][ T5208] do_syscall_64+0xcf/0x260 [ 50.927669][ T5208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.930127][ T5208] RIP: 0033:0x7f4cc96a9bb9 [ 50.931710][ T5208] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.938944][ T5208] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.942631][ T5208] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f4cc96a9bb9 [ 50.945556][ T5208] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 50.948423][ T5208] RBP: 000000000000c2ed R08: 0000000000000006 R09: 0000000000000006 [ 50.951203][ T5208] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 50.953988][ T5208] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 50.956775][ T5208] [ 50.958149][ T5208] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 50.962156][ T5208] CPU: 3 PID: 5208 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 50.965809][ T5208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 50.969371][ T5208] Call Trace: [ 50.970560][ T5208] [ 50.971624][ T5208] dump_stack_lvl+0x16c/0x1f0 [ 50.973316][ T5208] ccid3_update_send_interval+0x18e/0x1c0 [ 50.975335][ T5208] ccid3_hc_tx_packet_sent+0x134/0x190 [ 50.977287][ T5208] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 50.979404][ T5208] dccp_xmit_packet+0x27b/0x710 [ 50.981147][ T5208] dccp_write_xmit+0x16f/0x1d0 [ 50.982855][ T5208] dccp_sendmsg+0x9ae/0xd10 [ 50.984484][ T5208] ? __might_fault+0x13b/0x190 [ 50.986196][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.988006][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 50.989787][ T5208] inet_sendmsg+0x119/0x140 [ 50.991410][ T5208] ____sys_sendmsg+0xa09/0xc90 [ 50.993127][ T5208] ? copy_msghdr_from_user+0x10b/0x160 [ 50.995069][ T5208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.996969][ T5208] ? hlock_class+0x4e/0x130 [ 50.998583][ T5208] ? hlock_class+0x4e/0x130 [ 51.000215][ T5208] ? __lock_acquire+0x14f4/0x3b30 [ 51.002005][ T5208] ___sys_sendmsg+0x135/0x1e0 [ 51.003703][ T5208] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.005558][ T5208] ? __pfx___lock_acquire+0x10/0x10 [ 51.007428][ T5208] ? find_held_lock+0x2d/0x110 [ 51.009523][ T5208] ? __fget_light+0x176/0x210 [ 51.011585][ T5208] __sys_sendmsg+0x117/0x1f0 [ 51.013601][ T5208] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.015858][ T5208] do_syscall_64+0xcf/0x260 [ 51.017855][ T5208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.020443][ T5208] RIP: 0033:0x7f4cc96a9bb9 [ 51.022347][ T5208] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.030597][ T5208] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.034152][ T5208] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4cc96a9bb9 [ 51.037568][ T5208] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 51.040975][ T5208] RBP: 000000000000c2ed R08: 0000000000000006 R09: 0000000000000006 [ 51.044412][ T5208] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 51.047815][ T5208] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 51.051239][ T5208] [ 51.052921][ T5208] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 51.057649][ T5208] CPU: 3 PID: 5208 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 51.062127][ T5208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 51.066432][ T5208] Call Trace: [ 51.067871][ T5208] [ 51.069138][ T5208] dump_stack_lvl+0x16c/0x1f0 [ 51.071130][ T5208] ccid3_update_send_interval+0x18e/0x1c0 [ 51.073623][ T5208] ccid3_hc_tx_packet_sent+0x134/0x190 [ 51.076061][ T5208] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 51.078340][ T5208] dccp_xmit_packet+0x27b/0x710 [ 51.080434][ T5208] dccp_write_xmit+0x16f/0x1d0 [ 51.082536][ T5208] dccp_sendmsg+0x9ae/0xd10 [ 51.084219][ T5208] ? __might_fault+0x13b/0x190 [ 51.085878][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.087657][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.089418][ T5208] inet_sendmsg+0x119/0x140 [ 51.091020][ T5208] ____sys_sendmsg+0xa09/0xc90 [ 51.092771][ T5208] ? copy_msghdr_from_user+0x10b/0x160 [ 51.094800][ T5208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.096906][ T5208] ? hlock_class+0x4e/0x130 [ 51.098489][ T5208] ? hlock_class+0x4e/0x130 [ 51.100070][ T5208] ? __lock_acquire+0x14f4/0x3b30 [ 51.101803][ T5208] ___sys_sendmsg+0x135/0x1e0 [ 51.103425][ T5208] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.105239][ T5208] ? __pfx___lock_acquire+0x10/0x10 [ 51.107328][ T5208] ? find_held_lock+0x2d/0x110 [ 51.109213][ T5208] ? __fget_light+0x176/0x210 [ 51.111107][ T5208] __sys_sendmsg+0x117/0x1f0 [ 51.112826][ T5208] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.114603][ T5208] do_syscall_64+0xcf/0x260 [ 51.116229][ T5208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.118298][ T5208] RIP: 0033:0x7f4cc96a9bb9 [ 51.119877][ T5208] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.126560][ T5208] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.129466][ T5208] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4cc96a9bb9 [ 51.132210][ T5208] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 51.134946][ T5208] RBP: 000000000000c2ed R08: 0000000000000006 R09: 0000000000000006 [ 51.137691][ T5208] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 51.140444][ T5208] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 51.143187][ T5208] [ 51.144517][ T5208] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 51.148334][ T5208] CPU: 3 PID: 5208 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 51.151938][ T5208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 51.155427][ T5208] Call Trace: [ 51.156622][ T5208] [ 51.157659][ T5208] dump_stack_lvl+0x16c/0x1f0 [ 51.159323][ T5208] ccid3_update_send_interval+0x18e/0x1c0 [ 51.161306][ T5208] ccid3_hc_tx_packet_sent+0x134/0x190 [ 51.163204][ T5208] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 51.165288][ T5208] dccp_xmit_packet+0x27b/0x710 [ 51.166990][ T5208] dccp_write_xmit+0x16f/0x1d0 [ 51.168685][ T5208] dccp_sendmsg+0x9ae/0xd10 [ 51.170277][ T5208] ? __might_fault+0x13b/0x190 [ 51.171952][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.173694][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.175471][ T5208] inet_sendmsg+0x119/0x140 [ 51.177065][ T5208] ____sys_sendmsg+0xa09/0xc90 [ 51.178731][ T5208] ? copy_msghdr_from_user+0x10b/0x160 [ 51.180636][ T5208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.182470][ T5208] ? hlock_class+0x4e/0x130 [ 51.184087][ T5208] ? rcu_is_watching+0x12/0xc0 [ 51.185758][ T5208] ? kfree+0x241/0x390 [ 51.187206][ T5208] ? __lock_acquire+0x14f4/0x3b30 [ 51.188991][ T5208] ___sys_sendmsg+0x135/0x1e0 [ 51.190638][ T5208] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.192441][ T5208] ? __pfx___lock_acquire+0x10/0x10 [ 51.194216][ T5208] ? find_held_lock+0x2d/0x110 [ 51.195909][ T5208] ? __fget_light+0x176/0x210 [ 51.197536][ T5208] __sys_sendmsg+0x117/0x1f0 [ 51.199132][ T5208] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.200907][ T5208] do_syscall_64+0xcf/0x260 [ 51.202472][ T5208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.204515][ T5208] RIP: 0033:0x7f4cc96a9bb9 [ 51.206071][ T5208] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.212720][ T5208] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.215585][ T5208] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4cc96a9bb9 [ 51.218319][ T5208] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 51.221061][ T5208] RBP: 000000000000c2ed R08: 0000000000000006 R09: 0000000000000006 [ 51.223810][ T5208] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 51.226557][ T5208] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 51.229326][ T5208] [ 51.230718][ T5208] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 51.234687][ T5208] CPU: 3 PID: 5208 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 51.238540][ T5208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 51.242060][ T5208] Call Trace: [ 51.243240][ T5208] [ 51.244307][ T5208] dump_stack_lvl+0x16c/0x1f0 [ 51.246109][ T5208] ccid3_update_send_interval+0x18e/0x1c0 [ 51.248339][ T5208] ccid3_hc_tx_packet_sent+0x134/0x190 [ 51.250277][ T5208] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 51.252376][ T5208] dccp_xmit_packet+0x27b/0x710 [ 51.254084][ T5208] dccp_write_xmit+0x16f/0x1d0 [ 51.255768][ T5208] dccp_sendmsg+0x9ae/0xd10 [ 51.257371][ T5208] ? __might_fault+0x13b/0x190 [ 51.259050][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.260815][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.262577][ T5208] inet_sendmsg+0x119/0x140 [ 51.264185][ T5208] ____sys_sendmsg+0xa09/0xc90 [ 51.265870][ T5208] ? copy_msghdr_from_user+0x10b/0x160 [ 51.267783][ T5208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.269707][ T5208] ? hlock_class+0x4e/0x130 [ 51.271324][ T5208] ? hlock_class+0x4e/0x130 [ 51.272939][ T5208] ? __lock_acquire+0x14f4/0x3b30 [ 51.274712][ T5208] ___sys_sendmsg+0x135/0x1e0 [ 51.276383][ T5208] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.278193][ T5208] ? __pfx___lock_acquire+0x10/0x10 [ 51.280016][ T5208] ? find_held_lock+0x2d/0x110 [ 51.281687][ T5208] ? __fget_light+0x176/0x210 [ 51.283339][ T5208] __sys_sendmsg+0x117/0x1f0 [ 51.285006][ T5208] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.286819][ T5208] do_syscall_64+0xcf/0x260 [ 51.288435][ T5208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.290524][ T5208] RIP: 0033:0x7f4cc96a9bb9 [ 51.292106][ T5208] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.298821][ T5208] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.301763][ T5208] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4cc96a9bb9 [ 51.304570][ T5208] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 51.307622][ T5208] RBP: 000000000000c2ed R08: 0000000000000006 R09: 0000000000000006 [ 51.310643][ T5208] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 51.313436][ T5208] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 51.316239][ T5208] [ 51.317648][ T5208] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 51.321519][ T5208] CPU: 3 PID: 5208 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 51.325158][ T5208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 51.328682][ T5208] Call Trace: [ 51.329866][ T5208] [ 51.330914][ T5208] dump_stack_lvl+0x16c/0x1f0 [ 51.332591][ T5208] ccid3_update_send_interval+0x18e/0x1c0 [ 51.334587][ T5208] ccid3_hc_tx_packet_sent+0x134/0x190 [ 51.336536][ T5208] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 51.338634][ T5208] dccp_xmit_packet+0x27b/0x710 [ 51.340369][ T5208] dccp_write_xmit+0x16f/0x1d0 [ 51.342062][ T5208] dccp_sendmsg+0x9ae/0xd10 [ 51.343666][ T5208] ? __might_fault+0x13b/0x190 [ 51.345338][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.347090][ T5208] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.348881][ T5208] inet_sendmsg+0x119/0x140 [ 51.350483][ T5208] ____sys_sendmsg+0xa09/0xc90 [ 51.352180][ T5208] ? copy_msghdr_from_user+0x10b/0x160 [ 51.354089][ T5208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.355925][ T5208] ? hlock_class+0x4e/0x130 [ 51.357534][ T5208] ? rcu_is_watching+0x12/0xc0 [ 51.359226][ T5208] ? kfree+0x241/0x390 [ 51.360676][ T5208] ? __lock_acquire+0x14f4/0x3b30 [ 51.362454][ T5208] ___sys_sendmsg+0x135/0x1e0 [ 51.364135][ T5208] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.365969][ T5208] ? __pfx___lock_acquire+0x10/0x10 [ 51.367815][ T5208] ? find_held_lock+0x2d/0x110 [ 51.369510][ T5208] ? __fget_light+0x176/0x210 [ 51.371283][ T5208] __sys_sendmsg+0x117/0x1f0 [ 51.373138][ T5208] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.375173][ T5208] do_syscall_64+0xcf/0x260 [ 51.377117][ T5208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.379333][ T5208] RIP: 0033:0x7f4cc96a9bb9 [ 51.381107][ T5208] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.387830][ T5208] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.390728][ T5208] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f4cc96a9bb9 [ 51.393494][ T5208] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 51.396282][ T5208] RBP: 000000000000c2ed R08: 0000000000000006 R09: 0000000000000006 [ 51.399050][ T5208] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 51.401820][ T5208] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 51.404607][ T5208] executing program [ 51.413378][ T5209] dccp_xmit_packet: Payload too large (65475) for featneg. executing program [ 51.428571][ T5210] dccp_xmit_packet: Payload too large (65475) for featneg. executing program [ 51.446881][ T5211] dccp_xmit_packet: Payload too large (65475) for featneg. executing program [ 51.465139][ T5212] dccp_xmit_packet: Payload too large (65475) for featneg. executing program [ 51.481239][ T5213] dccp_xmit_packet: Payload too large (65475) for featneg. [ 51.495634][ T5213] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 51.500628][ T5213] CPU: 1 PID: 5213 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 51.505265][ T5213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 51.509799][ T5213] Call Trace: [ 51.511328][ T5213] [ 51.512681][ T5213] dump_stack_lvl+0x16c/0x1f0 [ 51.514818][ T5213] ccid3_update_send_interval+0x18e/0x1c0 [ 51.517444][ T5213] ccid3_hc_tx_packet_sent+0x134/0x190 [ 51.519920][ T5213] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 51.522632][ T5213] dccp_xmit_packet+0x27b/0x710 [ 51.524889][ T5213] dccp_write_xmit+0x16f/0x1d0 [ 51.526822][ T5213] dccp_sendmsg+0x9ae/0xd10 [ 51.528928][ T5213] ? __might_fault+0x13b/0x190 [ 51.531093][ T5213] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.533379][ T5213] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.535691][ T5213] inet_sendmsg+0x119/0x140 [ 51.537785][ T5213] ____sys_sendmsg+0xa09/0xc90 [ 51.539987][ T5213] ? copy_msghdr_from_user+0x10b/0x160 [ 51.542462][ T5213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.544876][ T5213] ? __release_sock+0x2ae/0x400 [ 51.547016][ T5213] ? rcu_is_watching+0x12/0xc0 [ 51.549147][ T5213] ? kfree+0x241/0x390 [ 51.550725][ T5213] ? __local_bh_enable_ip+0xa4/0x120 [ 51.552931][ T5213] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.555366][ T5213] ___sys_sendmsg+0x135/0x1e0 [ 51.557553][ T5213] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.559915][ T5213] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.562191][ T5213] ? inet_sendmsg+0xc0/0x140 [ 51.564338][ T5213] ? __fget_light+0x176/0x210 [ 51.566497][ T5213] __sys_sendmsg+0x117/0x1f0 [ 51.568610][ T5213] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.570975][ T5213] do_syscall_64+0xcf/0x260 [ 51.573088][ T5213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.575840][ T5213] RIP: 0033:0x7f4cc96a9bb9 [ 51.577872][ T5213] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.586473][ T5213] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.590315][ T5213] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f4cc96a9bb9 [ 51.593965][ T5213] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 51.597423][ T5213] RBP: 000000000000c882 R08: 0000000000000006 R09: 0000000000000006 [ 51.600989][ T5213] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 51.604570][ T5213] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 51.608131][ T5213] [ 51.610361][ T5213] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 51.614701][ T5213] CPU: 1 PID: 5213 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 51.618412][ T5213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 51.621956][ T5213] Call Trace: [ 51.623162][ T5213] [ 51.624237][ T5213] dump_stack_lvl+0x16c/0x1f0 [ 51.625942][ T5213] ccid3_update_send_interval+0x18e/0x1c0 [ 51.627971][ T5213] ccid3_hc_tx_packet_sent+0x134/0x190 [ 51.629899][ T5213] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 51.632024][ T5213] dccp_xmit_packet+0x27b/0x710 [ 51.633770][ T5213] dccp_write_xmit+0x16f/0x1d0 [ 51.635485][ T5213] dccp_sendmsg+0x9ae/0xd10 [ 51.637126][ T5213] ? __might_fault+0x13b/0x190 [ 51.638833][ T5213] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.640634][ T5213] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.642425][ T5213] inet_sendmsg+0x119/0x140 [ 51.644055][ T5213] ____sys_sendmsg+0xa09/0xc90 [ 51.645726][ T5213] ? copy_msghdr_from_user+0x10b/0x160 [ 51.647671][ T5213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.649538][ T5213] ? hlock_class+0x4e/0x130 [ 51.651150][ T5213] ? hlock_class+0x4e/0x130 [ 51.652751][ T5213] ? __lock_acquire+0x14f4/0x3b30 [ 51.654550][ T5213] ___sys_sendmsg+0x135/0x1e0 [ 51.656296][ T5213] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.658149][ T5213] ? __pfx___lock_acquire+0x10/0x10 [ 51.660004][ T5213] ? find_held_lock+0x2d/0x110 [ 51.661709][ T5213] ? __fget_light+0x176/0x210 [ 51.663359][ T5213] __sys_sendmsg+0x117/0x1f0 [ 51.665031][ T5213] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.667185][ T5213] do_syscall_64+0xcf/0x260 [ 51.669119][ T5213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.671627][ T5213] RIP: 0033:0x7f4cc96a9bb9 [ 51.673308][ T5213] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.680059][ T5213] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.682979][ T5213] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4cc96a9bb9 [ 51.685914][ T5213] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 51.689647][ T5213] RBP: 000000000000c882 R08: 0000000000000006 R09: 0000000000000006 [ 51.692882][ T5213] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 51.696080][ T5213] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 51.698854][ T5213] [ 51.700436][ T5213] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 51.704421][ T5213] CPU: 1 PID: 5213 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 51.708060][ T5213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 51.711572][ T5213] Call Trace: [ 51.712764][ T5213] [ 51.713808][ T5213] dump_stack_lvl+0x16c/0x1f0 [ 51.715474][ T5213] ccid3_update_send_interval+0x18e/0x1c0 [ 51.717473][ T5213] ccid3_hc_tx_packet_sent+0x134/0x190 [ 51.719376][ T5213] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 51.721470][ T5213] dccp_xmit_packet+0x27b/0x710 [ 51.723173][ T5213] dccp_write_xmit+0x16f/0x1d0 [ 51.724862][ T5213] dccp_sendmsg+0x9ae/0xd10 [ 51.726461][ T5213] ? __might_fault+0x13b/0x190 [ 51.728187][ T5213] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.729953][ T5213] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.731728][ T5213] inet_sendmsg+0x119/0x140 [ 51.733329][ T5213] ____sys_sendmsg+0xa09/0xc90 [ 51.735014][ T5213] ? copy_msghdr_from_user+0x10b/0x160 [ 51.736945][ T5213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.738858][ T5213] ? hlock_class+0x4e/0x130 [ 51.740475][ T5213] ? rcu_is_watching+0x12/0xc0 [ 51.742171][ T5213] ? kfree+0x241/0x390 [ 51.743633][ T5213] ? __lock_acquire+0x14f4/0x3b30 [ 51.745409][ T5213] ___sys_sendmsg+0x135/0x1e0 [ 51.747077][ T5213] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.748947][ T5213] ? __pfx___lock_acquire+0x10/0x10 [ 51.750773][ T5213] ? find_held_lock+0x2d/0x110 [ 51.752463][ T5213] ? __fget_light+0x176/0x210 [ 51.754119][ T5213] __sys_sendmsg+0x117/0x1f0 [ 51.755766][ T5213] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.757569][ T5213] do_syscall_64+0xcf/0x260 [ 51.759162][ T5213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.761237][ T5213] RIP: 0033:0x7f4cc96a9bb9 [ 51.762805][ T5213] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.769522][ T5213] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.772428][ T5213] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4cc96a9bb9 [ 51.775188][ T5213] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 51.777973][ T5213] RBP: 000000000000c882 R08: 0000000000000006 R09: 0000000000000006 [ 51.780733][ T5213] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 51.783495][ T5213] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 51.786217][ T5213] [ 51.787628][ T5213] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 51.791488][ T5213] CPU: 1 PID: 5213 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 51.795022][ T5213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 51.798481][ T5213] Call Trace: [ 51.799651][ T5213] [ 51.800681][ T5213] dump_stack_lvl+0x16c/0x1f0 [ 51.802307][ T5213] ccid3_update_send_interval+0x18e/0x1c0 [ 51.804284][ T5213] ccid3_hc_tx_packet_sent+0x134/0x190 [ 51.806160][ T5213] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 51.808277][ T5213] dccp_xmit_packet+0x27b/0x710 [ 51.810039][ T5213] dccp_write_xmit+0x16f/0x1d0 [ 51.811757][ T5213] dccp_sendmsg+0x9ae/0xd10 [ 51.813378][ T5213] ? __might_fault+0x13b/0x190 [ 51.815088][ T5213] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.816884][ T5213] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.818660][ T5213] inet_sendmsg+0x119/0x140 [ 51.820292][ T5213] ____sys_sendmsg+0xa09/0xc90 [ 51.822001][ T5213] ? copy_msghdr_from_user+0x10b/0x160 [ 51.823932][ T5213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.825811][ T5213] ? hlock_class+0x4e/0x130 [ 51.827431][ T5213] ? hlock_class+0x4e/0x130 [ 51.829092][ T5213] ? __lock_acquire+0x14f4/0x3b30 [ 51.830874][ T5213] ___sys_sendmsg+0x135/0x1e0 [ 51.832563][ T5213] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.834403][ T5213] ? __pfx___lock_acquire+0x10/0x10 [ 51.836271][ T5213] ? find_held_lock+0x2d/0x110 [ 51.838011][ T5213] ? __fget_light+0x176/0x210 [ 51.839716][ T5213] __sys_sendmsg+0x117/0x1f0 [ 51.841359][ T5213] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.843174][ T5213] do_syscall_64+0xcf/0x260 [ 51.844801][ T5213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.846903][ T5213] RIP: 0033:0x7f4cc96a9bb9 [ 51.848528][ T5213] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.855242][ T5213] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.858210][ T5213] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4cc96a9bb9 [ 51.860983][ T5213] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 51.863760][ T5213] RBP: 000000000000c882 R08: 0000000000000006 R09: 0000000000000006 [ 51.866695][ T5213] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 51.869560][ T5213] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 51.872358][ T5213] [ 51.873848][ T5213] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 51.877728][ T5213] CPU: 1 PID: 5213 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 51.881358][ T5213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 51.884907][ T5213] Call Trace: [ 51.886113][ T5213] [ 51.887163][ T5213] dump_stack_lvl+0x16c/0x1f0 [ 51.888870][ T5213] ccid3_update_send_interval+0x18e/0x1c0 [ 51.890866][ T5213] ccid3_hc_tx_packet_sent+0x134/0x190 [ 51.892801][ T5213] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 51.894903][ T5213] dccp_xmit_packet+0x27b/0x710 [ 51.896649][ T5213] dccp_write_xmit+0x16f/0x1d0 [ 51.898380][ T5213] dccp_sendmsg+0x9ae/0xd10 [ 51.900007][ T5213] ? __might_fault+0x13b/0x190 [ 51.901710][ T5213] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.903496][ T5213] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.905269][ T5213] inet_sendmsg+0x119/0x140 [ 51.906882][ T5213] ____sys_sendmsg+0xa09/0xc90 [ 51.908619][ T5213] ? copy_msghdr_from_user+0x10b/0x160 [ 51.910554][ T5213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.912443][ T5213] ? hlock_class+0x4e/0x130 [ 51.914062][ T5213] ? hlock_class+0x4e/0x130 [ 51.915685][ T5213] ? __lock_acquire+0x14f4/0x3b30 [ 51.917480][ T5213] ___sys_sendmsg+0x135/0x1e0 [ 51.919157][ T5213] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.921015][ T5213] ? __pfx___lock_acquire+0x10/0x10 [ 51.922858][ T5213] ? find_held_lock+0x2d/0x110 [ 51.924573][ T5213] ? __fget_light+0x176/0x210 [ 51.926253][ T5213] __sys_sendmsg+0x117/0x1f0 [ 51.927938][ T5213] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.929753][ T5213] ? xfd_validate_state+0x5d/0x180 [ 51.931559][ T5213] do_syscall_64+0xcf/0x260 [ 51.933083][ T5213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.935165][ T5213] RIP: 0033:0x7f4cc96a9bb9 [ 51.936768][ T5213] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.943526][ T5213] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.946450][ T5213] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4cc96a9bb9 [ 51.949274][ T5213] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 51.952057][ T5213] RBP: 000000000000c882 R08: 0000000000000006 R09: 0000000000000006 [ 51.954846][ T5213] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 51.957638][ T5213] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 51.960424][ T5213] [ 51.961830][ T5213] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 51.965782][ T5213] CPU: 1 PID: 5213 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 51.969441][ T5213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 51.972974][ T5213] Call Trace: [ 51.974156][ T5213] [ 51.975207][ T5213] dump_stack_lvl+0x16c/0x1f0 [ 51.976888][ T5213] ccid3_update_send_interval+0x18e/0x1c0 [ 51.978895][ T5213] ccid3_hc_tx_packet_sent+0x134/0x190 [ 51.980822][ T5213] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 51.982938][ T5213] dccp_xmit_packet+0x27b/0x710 [ 51.984687][ T5213] dccp_write_xmit+0x16f/0x1d0 [ 51.986365][ T5213] dccp_sendmsg+0x9ae/0xd10 [ 51.988016][ T5213] ? __might_fault+0x13b/0x190 [ 51.989711][ T5213] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.991487][ T5213] ? __pfx_dccp_sendmsg+0x10/0x10 [ 51.993274][ T5213] inet_sendmsg+0x119/0x140 [ 51.994881][ T5213] ____sys_sendmsg+0xa09/0xc90 [ 51.996587][ T5213] ? copy_msghdr_from_user+0x10b/0x160 [ 51.998503][ T5213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.000386][ T5213] ? hlock_class+0x4e/0x130 [ 52.002013][ T5213] ? hlock_class+0x4e/0x130 [ 52.003639][ T5213] ? __lock_acquire+0x14f4/0x3b30 [ 52.005430][ T5213] ___sys_sendmsg+0x135/0x1e0 [ 52.007105][ T5213] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.008974][ T5213] ? __pfx___lock_acquire+0x10/0x10 [ 52.010791][ T5213] ? find_held_lock+0x2d/0x110 [ 52.012487][ T5213] ? __fget_light+0x176/0x210 [ 52.014160][ T5213] __sys_sendmsg+0x117/0x1f0 [ 52.015809][ T5213] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.017625][ T5213] do_syscall_64+0xcf/0x260 [ 52.019234][ T5213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.021323][ T5213] RIP: 0033:0x7f4cc96a9bb9 [ 52.022895][ T5213] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.029663][ T5213] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.032697][ T5213] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f4cc96a9bb9 [ 52.035470][ T5213] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 52.038256][ T5213] RBP: 000000000000c882 R08: 0000000000000006 R09: 0000000000000006 [ 52.041034][ T5213] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 52.043807][ T5213] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 52.046578][ T5213] executing program [ 52.056468][ T5214] dccp_xmit_packet: Payload too large (65475) for featneg. executing program executing program [ 52.109214][ T5216] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 52.114646][ T5216] CPU: 1 PID: 5216 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 52.119174][ T5216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 52.123432][ T5216] Call Trace: [ 52.124995][ T5216] [ 52.126342][ T5216] dump_stack_lvl+0x16c/0x1f0 [ 52.128364][ T5216] ccid3_update_send_interval+0x18e/0x1c0 [ 52.130613][ T5216] ccid3_hc_tx_packet_sent+0x134/0x190 [ 52.133096][ T5216] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 52.135780][ T5216] dccp_xmit_packet+0x27b/0x710 [ 52.138014][ T5216] dccp_write_xmit+0x16f/0x1d0 [ 52.140219][ T5216] dccp_sendmsg+0x9ae/0xd10 [ 52.142281][ T5216] ? __might_fault+0x13b/0x190 [ 52.144494][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.146768][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.149051][ T5216] inet_sendmsg+0x119/0x140 [ 52.151133][ T5216] ____sys_sendmsg+0xa09/0xc90 [ 52.153297][ T5216] ? copy_msghdr_from_user+0x10b/0x160 [ 52.155786][ T5216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.158101][ T5216] ? __release_sock+0x2ae/0x400 [ 52.160250][ T5216] ? rcu_is_watching+0x12/0xc0 [ 52.162018][ T5216] ? kfree+0x241/0x390 [ 52.163439][ T5216] ? __local_bh_enable_ip+0xa4/0x120 [ 52.165309][ T5216] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.167128][ T5216] ___sys_sendmsg+0x135/0x1e0 [ 52.168793][ T5216] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.170752][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.172535][ T5216] ? inet_sendmsg+0xc0/0x140 [ 52.174166][ T5216] ? __fget_light+0x176/0x210 [ 52.175841][ T5216] __sys_sendmsg+0x117/0x1f0 [ 52.177471][ T5216] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.179287][ T5216] do_syscall_64+0xcf/0x260 [ 52.180895][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.182959][ T5216] RIP: 0033:0x7f4cc96a9bb9 [ 52.184534][ T5216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.192665][ T5216] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.196441][ T5216] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007f4cc96a9bb9 [ 52.200003][ T5216] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 52.203582][ T5216] RBP: 000000000000caea R08: 0000000000000006 R09: 0000000000000006 [ 52.207146][ T5216] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 52.210740][ T5216] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 52.214333][ T5216] [ 52.216290][ T5216] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 52.220489][ T5216] CPU: 1 PID: 5216 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 52.225123][ T5216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 52.229625][ T5216] Call Trace: [ 52.231152][ T5216] [ 52.232563][ T5216] dump_stack_lvl+0x16c/0x1f0 [ 52.234366][ T5216] ccid3_update_send_interval+0x18e/0x1c0 [ 52.236842][ T5216] ccid3_hc_tx_packet_sent+0x134/0x190 [ 52.238981][ T5216] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 52.241390][ T5216] dccp_xmit_packet+0x27b/0x710 [ 52.243129][ T5216] dccp_write_xmit+0x16f/0x1d0 [ 52.245305][ T5216] dccp_sendmsg+0x9ae/0xd10 [ 52.247338][ T5216] ? __might_fault+0x13b/0x190 [ 52.249157][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.250922][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.252702][ T5216] inet_sendmsg+0x119/0x140 [ 52.254651][ T5216] ____sys_sendmsg+0xa09/0xc90 [ 52.256353][ T5216] ? copy_msghdr_from_user+0x10b/0x160 [ 52.258250][ T5216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.260151][ T5216] ? hlock_class+0x4e/0x130 [ 52.261754][ T5216] ? hlock_class+0x4e/0x130 [ 52.263553][ T5216] ? __lock_acquire+0x14f4/0x3b30 [ 52.265855][ T5216] ___sys_sendmsg+0x135/0x1e0 [ 52.268021][ T5216] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.269962][ T5216] ? __pfx___lock_acquire+0x10/0x10 [ 52.271801][ T5216] ? find_held_lock+0x2d/0x110 [ 52.273524][ T5216] ? __fget_light+0x176/0x210 [ 52.275182][ T5216] __sys_sendmsg+0x117/0x1f0 [ 52.276827][ T5216] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.278620][ T5216] do_syscall_64+0xcf/0x260 [ 52.280408][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.282524][ T5216] RIP: 0033:0x7f4cc96a9bb9 [ 52.284124][ T5216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.290844][ T5216] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.294110][ T5216] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f4cc96a9bb9 [ 52.296908][ T5216] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 52.299698][ T5216] RBP: 000000000000caea R08: 0000000000000006 R09: 0000000000000006 [ 52.303040][ T5216] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 52.306100][ T5216] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 52.309364][ T5216] [ 52.311248][ T5216] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 52.316200][ T5216] CPU: 0 PID: 5216 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 52.320896][ T5216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 52.324916][ T5216] Call Trace: [ 52.326148][ T5216] [ 52.327194][ T5216] dump_stack_lvl+0x16c/0x1f0 [ 52.328904][ T5216] ccid3_update_send_interval+0x18e/0x1c0 [ 52.331007][ T5216] ccid3_hc_tx_packet_sent+0x134/0x190 [ 52.332970][ T5216] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 52.335088][ T5216] dccp_xmit_packet+0x27b/0x710 [ 52.337101][ T5216] dccp_write_xmit+0x16f/0x1d0 [ 52.338788][ T5216] dccp_sendmsg+0x9ae/0xd10 [ 52.340404][ T5216] ? __might_fault+0x13b/0x190 [ 52.342089][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.344216][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.346535][ T5216] inet_sendmsg+0x119/0x140 [ 52.348406][ T5216] ____sys_sendmsg+0xa09/0xc90 [ 52.350100][ T5216] ? copy_msghdr_from_user+0x10b/0x160 [ 52.352064][ T5216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.354042][ T5216] ? hlock_class+0x4e/0x130 [ 52.355673][ T5216] ? hlock_class+0x4e/0x130 [ 52.357296][ T5216] ? __lock_acquire+0x14f4/0x3b30 [ 52.359075][ T5216] ___sys_sendmsg+0x135/0x1e0 [ 52.360771][ T5216] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.362628][ T5216] ? __pfx___lock_acquire+0x10/0x10 [ 52.364673][ T5216] ? find_held_lock+0x2d/0x110 [ 52.366726][ T5216] ? __fget_light+0x176/0x210 [ 52.368766][ T5216] __sys_sendmsg+0x117/0x1f0 [ 52.370429][ T5216] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.372265][ T5216] ? xfd_validate_state+0x5d/0x180 [ 52.374566][ T5216] do_syscall_64+0xcf/0x260 [ 52.376682][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.379012][ T5216] RIP: 0033:0x7f4cc96a9bb9 [ 52.380627][ T5216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.387347][ T5216] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.390270][ T5216] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f4cc96a9bb9 [ 52.393143][ T5216] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 52.395896][ T5216] RBP: 000000000000caea R08: 0000000000000006 R09: 0000000000000006 [ 52.398959][ T5216] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 52.401727][ T5216] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 52.404521][ T5216] [ 52.405896][ T5216] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 52.409739][ T5216] CPU: 0 PID: 5216 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 52.413448][ T5216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 52.417681][ T5216] Call Trace: [ 52.418963][ T5216] [ 52.420217][ T5216] dump_stack_lvl+0x16c/0x1f0 [ 52.422089][ T5216] ccid3_update_send_interval+0x18e/0x1c0 [ 52.424227][ T5216] ccid3_hc_tx_packet_sent+0x134/0x190 [ 52.426124][ T5216] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 52.428216][ T5216] dccp_xmit_packet+0x27b/0x710 [ 52.429919][ T5216] dccp_write_xmit+0x16f/0x1d0 [ 52.431606][ T5216] dccp_sendmsg+0x9ae/0xd10 [ 52.433221][ T5216] ? __might_fault+0x13b/0x190 [ 52.434911][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.436722][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.438637][ T5216] inet_sendmsg+0x119/0x140 [ 52.440387][ T5216] ____sys_sendmsg+0xa09/0xc90 [ 52.442074][ T5216] ? copy_msghdr_from_user+0x10b/0x160 [ 52.444008][ T5216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.445852][ T5216] ? hlock_class+0x4e/0x130 [ 52.447463][ T5216] ? hlock_class+0x4e/0x130 [ 52.449053][ T5216] ? __lock_acquire+0x14f4/0x3b30 [ 52.450803][ T5216] ___sys_sendmsg+0x135/0x1e0 [ 52.452471][ T5216] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.454492][ T5216] ? __pfx___lock_acquire+0x10/0x10 [ 52.456353][ T5216] ? find_held_lock+0x2d/0x110 [ 52.458048][ T5216] ? __fget_light+0x176/0x210 [ 52.459746][ T5216] __sys_sendmsg+0x117/0x1f0 [ 52.461360][ T5216] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.463191][ T5216] do_syscall_64+0xcf/0x260 [ 52.464823][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.466902][ T5216] RIP: 0033:0x7f4cc96a9bb9 [ 52.468515][ T5216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.475235][ T5216] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.478199][ T5216] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f4cc96a9bb9 [ 52.481004][ T5216] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 52.483987][ T5216] RBP: 000000000000caea R08: 0000000000000006 R09: 0000000000000006 [ 52.486839][ T5216] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 52.489666][ T5216] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 52.492449][ T5216] [ 52.493941][ T5216] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 52.497897][ T5216] CPU: 0 PID: 5216 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 52.501509][ T5216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 52.505111][ T5216] Call Trace: [ 52.506327][ T5216] [ 52.507374][ T5216] dump_stack_lvl+0x16c/0x1f0 [ 52.509056][ T5216] ccid3_update_send_interval+0x18e/0x1c0 [ 52.511056][ T5216] ccid3_hc_tx_packet_sent+0x134/0x190 [ 52.513026][ T5216] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 52.515143][ T5216] dccp_xmit_packet+0x27b/0x710 [ 52.516877][ T5216] dccp_write_xmit+0x16f/0x1d0 [ 52.518561][ T5216] dccp_sendmsg+0x9ae/0xd10 [ 52.520167][ T5216] ? __might_fault+0x13b/0x190 [ 52.521849][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.523674][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.525453][ T5216] inet_sendmsg+0x119/0x140 [ 52.527068][ T5216] ____sys_sendmsg+0xa09/0xc90 [ 52.528786][ T5216] ? copy_msghdr_from_user+0x10b/0x160 [ 52.530712][ T5216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.532583][ T5216] ? hlock_class+0x4e/0x130 [ 52.534228][ T5216] ? rcu_is_watching+0x12/0xc0 [ 52.535932][ T5216] ? kfree+0x241/0x390 [ 52.537385][ T5216] ? __lock_acquire+0x14f4/0x3b30 [ 52.539160][ T5216] ___sys_sendmsg+0x135/0x1e0 [ 52.540960][ T5216] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.543070][ T5216] ? __pfx___lock_acquire+0x10/0x10 [ 52.544928][ T5216] ? find_held_lock+0x2d/0x110 [ 52.546618][ T5216] ? __fget_light+0x176/0x210 [ 52.548295][ T5216] __sys_sendmsg+0x117/0x1f0 [ 52.549930][ T5216] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.551738][ T5216] do_syscall_64+0xcf/0x260 [ 52.553374][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.555890][ T5216] RIP: 0033:0x7f4cc96a9bb9 [ 52.557673][ T5216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.564474][ T5216] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.567391][ T5216] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4cc96a9bb9 [ 52.570165][ T5216] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 52.573010][ T5216] RBP: 000000000000caea R08: 0000000000000006 R09: 0000000000000006 [ 52.575824][ T5216] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 52.578591][ T5216] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 52.581332][ T5216] [ 52.583022][ T5216] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 52.587742][ T5216] CPU: 0 PID: 5216 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 52.592143][ T5216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 52.596504][ T5216] Call Trace: [ 52.597966][ T5216] [ 52.599248][ T5216] dump_stack_lvl+0x16c/0x1f0 [ 52.601217][ T5216] ccid3_update_send_interval+0x18e/0x1c0 [ 52.603563][ T5216] ccid3_hc_tx_packet_sent+0x134/0x190 [ 52.605814][ T5216] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 52.608307][ T5216] dccp_xmit_packet+0x27b/0x710 [ 52.610305][ T5216] dccp_write_xmit+0x16f/0x1d0 [ 52.612332][ T5216] dccp_sendmsg+0x9ae/0xd10 [ 52.614232][ T5216] ? __might_fault+0x13b/0x190 [ 52.616349][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.618537][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.620727][ T5216] inet_sendmsg+0x119/0x140 [ 52.622710][ T5216] ____sys_sendmsg+0xa09/0xc90 [ 52.624818][ T5216] ? copy_msghdr_from_user+0x10b/0x160 [ 52.627180][ T5216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.629479][ T5216] ? hlock_class+0x4e/0x130 [ 52.631470][ T5216] ? hlock_class+0x4e/0x130 [ 52.633453][ T5216] ? __lock_acquire+0x14f4/0x3b30 [ 52.635718][ T5216] ___sys_sendmsg+0x135/0x1e0 [ 52.637430][ T5216] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.639423][ T5216] ? __pfx___lock_acquire+0x10/0x10 [ 52.641350][ T5216] ? find_held_lock+0x2d/0x110 [ 52.643060][ T5216] ? __fget_light+0x176/0x210 [ 52.644746][ T5216] __sys_sendmsg+0x117/0x1f0 [ 52.646409][ T5216] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.648367][ T5216] do_syscall_64+0xcf/0x260 [ 52.649994][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.652096][ T5216] RIP: 0033:0x7f4cc96a9bb9 [ 52.653692][ T5216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.660584][ T5216] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.663531][ T5216] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f4cc96a9bb9 [ 52.666435][ T5216] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 52.669281][ T5216] RBP: 000000000000caea R08: 0000000000000006 R09: 0000000000000006 [ 52.672068][ T5216] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 52.674847][ T5216] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 52.677732][ T5216] [ 52.679583][ T5216] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 52.684753][ T5216] CPU: 0 PID: 5216 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 52.689435][ T5216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 52.693865][ T5216] Call Trace: [ 52.695118][ T5216] [ 52.696201][ T5216] dump_stack_lvl+0x16c/0x1f0 [ 52.697881][ T5216] ccid3_update_send_interval+0x18e/0x1c0 [ 52.699912][ T5216] ccid3_hc_tx_packet_sent+0x134/0x190 [ 52.701847][ T5216] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 52.703989][ T5216] dccp_xmit_packet+0x27b/0x710 [ 52.705740][ T5216] dccp_write_xmit+0x16f/0x1d0 [ 52.707462][ T5216] dccp_sendmsg+0x9ae/0xd10 [ 52.709071][ T5216] ? __might_fault+0x13b/0x190 [ 52.710763][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.712876][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.714968][ T5216] inet_sendmsg+0x119/0x140 [ 52.716678][ T5216] ____sys_sendmsg+0xa09/0xc90 [ 52.718384][ T5216] ? copy_msghdr_from_user+0x10b/0x160 [ 52.720318][ T5216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.722184][ T5216] ? hlock_class+0x4e/0x130 [ 52.723808][ T5216] ? rcu_is_watching+0x12/0xc0 [ 52.725576][ T5216] ? kfree+0x241/0x390 [ 52.727022][ T5216] ? __lock_acquire+0x14f4/0x3b30 [ 52.728799][ T5216] ___sys_sendmsg+0x135/0x1e0 [ 52.730458][ T5216] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.732311][ T5216] ? __pfx___lock_acquire+0x10/0x10 [ 52.734164][ T5216] ? find_held_lock+0x2d/0x110 [ 52.735884][ T5216] ? __fget_light+0x176/0x210 [ 52.737567][ T5216] __sys_sendmsg+0x117/0x1f0 [ 52.739391][ T5216] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.741361][ T5216] do_syscall_64+0xcf/0x260 [ 52.742977][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.745160][ T5216] RIP: 0033:0x7f4cc96a9bb9 [ 52.746773][ T5216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.753780][ T5216] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.757178][ T5216] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f4cc96a9bb9 [ 52.760197][ T5216] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 52.763055][ T5216] RBP: 000000000000caea R08: 0000000000000006 R09: 0000000000000006 [ 52.766707][ T5216] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 52.770332][ T5216] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 52.774034][ T5216] [ 52.775834][ T5216] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 52.780909][ T5216] CPU: 0 PID: 5216 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 52.785668][ T5216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 52.790370][ T5216] Call Trace: [ 52.791949][ T5216] [ 52.793324][ T5216] dump_stack_lvl+0x16c/0x1f0 [ 52.795544][ T5216] ccid3_update_send_interval+0x18e/0x1c0 [ 52.798205][ T5216] ccid3_hc_tx_packet_sent+0x134/0x190 [ 52.800760][ T5216] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 52.803541][ T5216] dccp_xmit_packet+0x27b/0x710 [ 52.805886][ T5216] dccp_write_xmit+0x16f/0x1d0 [ 52.808137][ T5216] dccp_sendmsg+0x9ae/0xd10 [ 52.810247][ T5216] ? __might_fault+0x13b/0x190 [ 52.812492][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.814835][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.817213][ T5216] inet_sendmsg+0x119/0x140 [ 52.819312][ T5216] ____sys_sendmsg+0xa09/0xc90 [ 52.821572][ T5216] ? copy_msghdr_from_user+0x10b/0x160 [ 52.824135][ T5216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.826606][ T5216] ? hlock_class+0x4e/0x130 [ 52.828564][ T5216] ? hlock_class+0x4e/0x130 [ 52.830201][ T5216] ? __lock_acquire+0x14f4/0x3b30 [ 52.832020][ T5216] ___sys_sendmsg+0x135/0x1e0 [ 52.833703][ T5216] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.835753][ T5216] ? __pfx___lock_acquire+0x10/0x10 [ 52.837893][ T5216] ? find_held_lock+0x2d/0x110 [ 52.839717][ T5216] ? __fget_light+0x176/0x210 [ 52.841406][ T5216] __sys_sendmsg+0x117/0x1f0 [ 52.843067][ T5216] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.844909][ T5216] do_syscall_64+0xcf/0x260 [ 52.846548][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.848835][ T5216] RIP: 0033:0x7f4cc96a9bb9 [ 52.850411][ T5216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.857121][ T5216] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.860118][ T5216] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4cc96a9bb9 [ 52.862921][ T5216] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 52.865728][ T5216] RBP: 000000000000caea R08: 0000000000000006 R09: 0000000000000006 [ 52.868555][ T5216] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 52.871343][ T5216] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 52.874144][ T5216] [ 52.875535][ T5216] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 52.879410][ T5216] CPU: 0 PID: 5216 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 52.883025][ T5216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 52.886535][ T5216] Call Trace: [ 52.887737][ T5216] [ 52.888870][ T5216] dump_stack_lvl+0x16c/0x1f0 [ 52.890528][ T5216] ccid3_update_send_interval+0x18e/0x1c0 [ 52.892534][ T5216] ccid3_hc_tx_packet_sent+0x134/0x190 [ 52.894457][ T5216] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 52.896586][ T5216] dccp_xmit_packet+0x27b/0x710 [ 52.898308][ T5216] dccp_write_xmit+0x16f/0x1d0 [ 52.900012][ T5216] dccp_sendmsg+0x9ae/0xd10 [ 52.901613][ T5216] ? __might_fault+0x13b/0x190 [ 52.903305][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.905097][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.906873][ T5216] inet_sendmsg+0x119/0x140 [ 52.908540][ T5216] ____sys_sendmsg+0xa09/0xc90 [ 52.910227][ T5216] ? copy_msghdr_from_user+0x10b/0x160 [ 52.912149][ T5216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.914091][ T5216] ? hlock_class+0x4e/0x130 [ 52.915895][ T5216] ? hlock_class+0x4e/0x130 [ 52.917675][ T5216] ? __lock_acquire+0x14f4/0x3b30 [ 52.919577][ T5216] ___sys_sendmsg+0x135/0x1e0 [ 52.921258][ T5216] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.923100][ T5216] ? __pfx___lock_acquire+0x10/0x10 [ 52.924950][ T5216] ? find_held_lock+0x2d/0x110 [ 52.926651][ T5216] ? __fget_light+0x176/0x210 [ 52.928368][ T5216] __sys_sendmsg+0x117/0x1f0 [ 52.930000][ T5216] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.931813][ T5216] do_syscall_64+0xcf/0x260 [ 52.933424][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.935521][ T5216] RIP: 0033:0x7f4cc96a9bb9 [ 52.937107][ T5216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.943905][ T5216] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.946799][ T5216] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4cc96a9bb9 [ 52.949591][ T5216] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 52.952377][ T5216] RBP: 000000000000caea R08: 0000000000000006 R09: 0000000000000006 [ 52.955124][ T5216] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 52.957916][ T5216] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 52.960692][ T5216] [ 52.962126][ T5216] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 52.965998][ T5216] CPU: 0 PID: 5216 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 52.969667][ T5216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 52.973212][ T5216] Call Trace: [ 52.974403][ T5216] [ 52.975465][ T5216] dump_stack_lvl+0x16c/0x1f0 [ 52.977136][ T5216] ccid3_update_send_interval+0x18e/0x1c0 [ 52.979130][ T5216] ccid3_hc_tx_packet_sent+0x134/0x190 [ 52.981058][ T5216] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 52.983154][ T5216] dccp_xmit_packet+0x27b/0x710 [ 52.984877][ T5216] dccp_write_xmit+0x16f/0x1d0 [ 52.986568][ T5216] dccp_sendmsg+0x9ae/0xd10 [ 52.988206][ T5216] ? __might_fault+0x13b/0x190 [ 52.989895][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.991676][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 52.993443][ T5216] inet_sendmsg+0x119/0x140 [ 52.995210][ T5216] ____sys_sendmsg+0xa09/0xc90 [ 52.997134][ T5216] ? copy_msghdr_from_user+0x10b/0x160 [ 52.999250][ T5216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.001126][ T5216] ? hlock_class+0x4e/0x130 [ 53.002733][ T5216] ? rcu_is_watching+0x12/0xc0 [ 53.004445][ T5216] ? kfree+0x241/0x390 [ 53.005884][ T5216] ? __lock_acquire+0x14f4/0x3b30 [ 53.007677][ T5216] ___sys_sendmsg+0x135/0x1e0 [ 53.009381][ T5216] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.011205][ T5216] ? __pfx___lock_acquire+0x10/0x10 [ 53.013058][ T5216] ? find_held_lock+0x2d/0x110 [ 53.014729][ T5216] ? __fget_light+0x176/0x210 [ 53.016412][ T5216] __sys_sendmsg+0x117/0x1f0 [ 53.018039][ T5216] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.019866][ T5216] do_syscall_64+0xcf/0x260 [ 53.021468][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.023555][ T5216] RIP: 0033:0x7f4cc96a9bb9 [ 53.025125][ T5216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 53.031871][ T5216] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.034763][ T5216] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4cc96a9bb9 [ 53.037534][ T5216] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 53.040282][ T5216] RBP: 000000000000caea R08: 0000000000000006 R09: 0000000000000006 [ 53.043032][ T5216] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 53.045796][ T5216] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 53.048665][ T5216] [ 53.050088][ T5216] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 53.054008][ T5216] CPU: 0 PID: 5216 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 53.057611][ T5216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 53.061111][ T5216] Call Trace: [ 53.062307][ T5216] [ 53.063353][ T5216] dump_stack_lvl+0x16c/0x1f0 [ 53.065024][ T5216] ccid3_update_send_interval+0x18e/0x1c0 [ 53.067014][ T5216] ccid3_hc_tx_packet_sent+0x134/0x190 [ 53.068962][ T5216] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 53.071057][ T5216] dccp_xmit_packet+0x27b/0x710 [ 53.072793][ T5216] dccp_write_xmit+0x16f/0x1d0 [ 53.074643][ T5216] dccp_sendmsg+0x9ae/0xd10 [ 53.076469][ T5216] ? __might_fault+0x13b/0x190 [ 53.078355][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 53.080148][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 53.082002][ T5216] inet_sendmsg+0x119/0x140 [ 53.083621][ T5216] ____sys_sendmsg+0xa09/0xc90 [ 53.085311][ T5216] ? copy_msghdr_from_user+0x10b/0x160 [ 53.087218][ T5216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.089116][ T5216] ? hlock_class+0x4e/0x130 [ 53.090712][ T5216] ? hlock_class+0x4e/0x130 [ 53.092316][ T5216] ? __lock_acquire+0x14f4/0x3b30 [ 53.094082][ T5216] ___sys_sendmsg+0x135/0x1e0 [ 53.095747][ T5216] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.097587][ T5216] ? __pfx___lock_acquire+0x10/0x10 [ 53.099550][ T5216] ? find_held_lock+0x2d/0x110 [ 53.101230][ T5216] ? __fget_light+0x176/0x210 [ 53.102886][ T5216] __sys_sendmsg+0x117/0x1f0 [ 53.104520][ T5216] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.106318][ T5216] do_syscall_64+0xcf/0x260 [ 53.107953][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.110024][ T5216] RIP: 0033:0x7f4cc96a9bb9 [ 53.111596][ T5216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 53.118303][ T5216] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.121214][ T5216] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4cc96a9bb9 [ 53.123980][ T5216] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 53.126726][ T5216] RBP: 000000000000caea R08: 0000000000000006 R09: 0000000000000006 [ 53.129511][ T5216] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 53.132267][ T5216] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 53.135024][ T5216] [ 53.136560][ T5216] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 53.140420][ T5216] CPU: 0 PID: 5216 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 53.144033][ T5216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 53.147543][ T5216] Call Trace: [ 53.148753][ T5216] [ 53.149795][ T5216] dump_stack_lvl+0x16c/0x1f0 [ 53.151461][ T5216] ccid3_update_send_interval+0x18e/0x1c0 [ 53.153450][ T5216] ccid3_hc_tx_packet_sent+0x134/0x190 [ 53.155600][ T5216] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 53.158003][ T5216] dccp_xmit_packet+0x27b/0x710 [ 53.159871][ T5216] dccp_write_xmit+0x16f/0x1d0 [ 53.161570][ T5216] dccp_sendmsg+0x9ae/0xd10 [ 53.163175][ T5216] ? __might_fault+0x13b/0x190 [ 53.164879][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 53.166656][ T5216] ? __pfx_dccp_sendmsg+0x10/0x10 [ 53.168476][ T5216] inet_sendmsg+0x119/0x140 [ 53.170072][ T5216] ____sys_sendmsg+0xa09/0xc90 [ 53.171780][ T5216] ? copy_msghdr_from_user+0x10b/0x160 [ 53.173688][ T5216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.175564][ T5216] ? hlock_class+0x4e/0x130 [ 53.177185][ T5216] ? __lock_acquire+0x14f4/0x3b30 [ 53.178954][ T5216] ___sys_sendmsg+0x135/0x1e0 [ 53.180641][ T5216] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.182468][ T5216] ? __pfx___lock_acquire+0x10/0x10 [ 53.184309][ T5216] ? find_held_lock+0x2d/0x110 [ 53.185997][ T5216] ? __fget_light+0x176/0x210 [ 53.187676][ T5216] __sys_sendmsg+0x117/0x1f0 [ 53.189368][ T5216] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.191165][ T5216] do_syscall_64+0xcf/0x260 [ 53.192784][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.194867][ T5216] RIP: 0033:0x7f4cc96a9bb9 [ 53.196464][ T5216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 53.203165][ T5216] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.206087][ T5216] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f4cc96a9bb9 [ 53.208997][ T5216] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 53.211764][ T5216] RBP: 000000000000caea R08: 0000000000000006 R09: 0000000000000006 [ 53.214511][ T5216] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 53.217277][ T5216] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 53.220039][ T5216] executing program [ 53.234112][ T5218] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 53.238199][ T5218] CPU: 1 PID: 5218 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 53.242825][ T5218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 53.247341][ T5218] Call Trace: [ 53.248891][ T5218] [ 53.250235][ T5218] dump_stack_lvl+0x16c/0x1f0 [ 53.252391][ T5218] ccid3_update_send_interval+0x18e/0x1c0 [ 53.254984][ T5218] ccid3_hc_tx_packet_sent+0x134/0x190 [ 53.257480][ T5218] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 53.260222][ T5218] dccp_xmit_packet+0x27b/0x710 [ 53.262450][ T5218] dccp_write_xmit+0x16f/0x1d0 [ 53.264428][ T5218] dccp_sendmsg+0x9ae/0xd10 [ 53.266355][ T5218] ? __might_fault+0x13b/0x190 [ 53.268042][ T5218] ? __pfx_dccp_sendmsg+0x10/0x10 [ 53.269799][ T5218] ? __pfx_dccp_sendmsg+0x10/0x10 [ 53.271561][ T5218] inet_sendmsg+0x119/0x140 [ 53.273162][ T5218] ____sys_sendmsg+0xa09/0xc90 [ 53.274856][ T5218] ? copy_msghdr_from_user+0x10b/0x160 [ 53.276804][ T5218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.278646][ T5218] ? __release_sock+0x2ae/0x400 [ 53.280355][ T5218] ? rcu_is_watching+0x12/0xc0 [ 53.282030][ T5218] ? kfree+0x241/0x390 [ 53.283467][ T5218] ? __local_bh_enable_ip+0xa4/0x120 [ 53.285390][ T5218] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.287273][ T5218] ___sys_sendmsg+0x135/0x1e0 [ 53.288946][ T5218] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.290778][ T5218] ? __pfx_dccp_sendmsg+0x10/0x10 [ 53.292553][ T5218] ? inet_sendmsg+0xc0/0x140 [ 53.294182][ T5218] ? __fget_light+0x176/0x210 [ 53.296145][ T5218] __sys_sendmsg+0x117/0x1f0 [ 53.297780][ T5218] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.299586][ T5218] do_syscall_64+0xcf/0x260 [ 53.301181][ T5218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.303256][ T5218] RIP: 0033:0x7f4cc96a9bb9 [ 53.305206][ T5218] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 53.313010][ T5218] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.316006][ T5218] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007f4cc96a9bb9 [ 53.318803][ T5218] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 53.321586][ T5218] RBP: 000000000000cafb R08: 0000000000000006 R09: 0000000000000006 [ 53.324380][ T5218] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 53.327516][ T5218] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 53.330290][ T5218] [ 53.331749][ T5218] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 53.336224][ T5218] CPU: 1 PID: 5218 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 53.339903][ T5218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 53.343455][ T5218] Call Trace: [ 53.344659][ T5218] [ 53.345744][ T5218] dump_stack_lvl+0x16c/0x1f0 [ 53.347414][ T5218] ccid3_update_send_interval+0x18e/0x1c0 [ 53.349449][ T5218] ccid3_hc_tx_packet_sent+0x134/0x190 [ 53.351365][ T5218] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 53.353486][ T5218] dccp_xmit_packet+0x27b/0x710 [ 53.355223][ T5218] dccp_write_xmit+0x16f/0x1d0 [ 53.356949][ T5218] dccp_sendmsg+0x9ae/0xd10 [ 53.358560][ T5218] ? __might_fault+0x13b/0x190 [ 53.360262][ T5218] ? __pfx_dccp_sendmsg+0x10/0x10 [ 53.362043][ T5218] ? __pfx_dccp_sendmsg+0x10/0x10 [ 53.363827][ T5218] inet_sendmsg+0x119/0x140 [ 53.365473][ T5218] ____sys_sendmsg+0xa09/0xc90 [ 53.367178][ T5218] ? copy_msghdr_from_user+0x10b/0x160 [ 53.369108][ T5218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.370972][ T5218] ? hlock_class+0x4e/0x130 [ 53.372590][ T5218] ? hlock_class+0x4e/0x130 [ 53.374203][ T5218] ? __lock_acquire+0x14f4/0x3b30 [ 53.376024][ T5218] ___sys_sendmsg+0x135/0x1e0 [ 53.377687][ T5218] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.379529][ T5218] ? __pfx___lock_acquire+0x10/0x10 [ 53.381357][ T5218] ? find_held_lock+0x2d/0x110 [ 53.383053][ T5218] ? __fget_light+0x176/0x210 [ 53.384737][ T5218] __sys_sendmsg+0x117/0x1f0 [ 53.386411][ T5218] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.388226][ T5218] do_syscall_64+0xcf/0x260 [ 53.389834][ T5218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.391923][ T5218] RIP: 0033:0x7f4cc96a9bb9 [ 53.393485][ T5218] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 53.402097][ T5218] RSP: 002b:00007ffd8588c158 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.405867][ T5218] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f4cc96a9bb9 [ 53.409455][ T5218] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 53.413027][ T5218] RBP: 000000000000cafb R08: 0000000000000006 R09: 0000000000000006 [ 53.416631][ T5218] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd8588c16c [ 53.420045][ T5218] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 53.422812][ T5218] [ 53.424202][ T5218] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 53.428101][ T5218] CPU: 1 PID: 5218 Comm: syz-executor177 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 53.431737][ T5218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 53.435311][ T5218] Call Trace: [ 53.436515][ T5218] [ 53.437568][ T5218] dump_stack_lvl+0x16c/0x1f0 [ 53.439259][ T5218] ccid3_update_send_interval+0x18e/0x1c0 [ 53.441287][ T5218] ccid3_hc_tx_packet_sent+0x134/0x190 [ 53.443212][ T5218] ? __pfx_ccid3_hc_tx_packet_sent+0x10/0x10 [ 53.445362][ T5218] dccp_xmit_packet+0x27b/0x710 [ 53.447082][ T5218] dccp_write_xmit+0x16f/0x1d0 [ 53.448833][ T5218] dccp_sendmsg+0x9ae/0xd10 [ 53.450433][ T5218] ? __might_fault+0x13b/0x190 [ 53.452135][ T5218] ? __pfx_dccp_sendmsg+0x10/0x10 [ 53.453908][ T5218] ? __pfx_dccp_sendmsg+0x10/0x10 [ 53.455929][ T5218] inet_sendmsg+0x119/0x140 [ 53.457640][ T5218] ____sys_sendmsg+0xa09/0xc90 [ 53.459345][ T5218] ? copy_msghdr_from_user+0x10b/0x160 VM DIAGNOSIS: 00:48:58 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000043 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84f9e8f5 RDI=ffffffff94949920 RBP=ffffffff949498e0 RSP=ffffc900032cf428 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000004 R12=0000000000000000 R13=0000000000000043 R14=ffffffff84f9e890 R15=0000000000000000 RIP=ffffffff84f9e91f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558b44c380 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020010000 CR3=000000002dda4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffff0 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8588c160 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cc9728240 00007f4cc971c5d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cc970df24 00007f4cc9721240 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000036105 RBX=0000000000000001 RCX=ffffffff8adb1989 RDX=0000000000000000 RSI=ffffffff8b0cae00 RDI=ffffffff8b6f5720 RBP=ffffed1002f5b488 RSP=ffffc90000177e08 R8 =0000000000000001 R9 =ffffed100d666fdd R10=ffff88806b337eeb R11=0000000000000000 R12=0000000000000001 R13=ffff888017ada440 R14=ffffffff8f9f30d0 R15=0000000000000000 RIP=ffffffff8adb2d7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020e5c000 CR3=000000002dda4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffff0 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8588c160 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cc9728240 00007f4cc971c5d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cc970df24 00007f4cc9721240 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000263fb RBX=0000000000000002 RCX=ffffffff8adb1989 RDX=0000000000000000 RSI=ffffffff8b0cae00 RDI=ffffffff8b6f5720 RBP=ffffed1002f5b910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d686fdd R10=ffff88806b437eeb R11=0000000000000000 R12=0000000000000002 R13=ffff888017adc880 R14=ffffffff8f9f30d0 R15=0000000000000000 RIP=ffffffff8adb2d7f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055558b44cca8 CR3=000000001be46000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000800000 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cc971b73e 00007f4cc96f2000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cc970df24 00007f4cc9721240 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cc9728240 00007f4cc971c5d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cc970df24 00007f4cc9721240 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f723d52455355 0037373438303536 373731726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000026f35 RBX=0000000000000003 RCX=ffffffff8adb1989 RDX=0000000000000000 RSI=ffffffff8b0cae00 RDI=ffffffff8b6f5720 RBP=ffffed1002f5e000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d6a6fdd R10=ffff88806b537eeb R11=0000000000000000 R12=0000000000000003 R13=ffff888017af0000 R14=ffffffff8f9f30d0 R15=0000000000000000 RIP=ffffffff8adb2d7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a1d2452600 CR3=000000002467a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010000000 Opmask01=00000000ffffffff Opmask02=00000000fff88000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfc844140 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000