Warning: Permanently added '10.128.10.42' (ECDSA) to the list of known hosts. 2023/05/06 16:54:39 ignoring optional flag "sandboxArg"="0" 2023/05/06 16:54:40 parsed 1 programs 2023/05/06 16:54:40 executed programs: 0 [ 69.040690][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.049653][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.058222][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.066080][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.073369][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.157570][ T5346] chnl_net:caif_netlink_parms(): no params data found [ 69.195338][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.202677][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.210150][ T5346] bridge_slave_0: entered allmulticast mode [ 69.216932][ T5346] bridge_slave_0: entered promiscuous mode [ 69.224614][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.232068][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.239774][ T5346] bridge_slave_1: entered allmulticast mode [ 69.246921][ T5346] bridge_slave_1: entered promiscuous mode [ 69.265976][ T5346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.277654][ T5346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.300085][ T5346] team0: Port device team_slave_0 added [ 69.308484][ T5346] team0: Port device team_slave_1 added [ 69.325886][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.332837][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.359195][ T5346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.371491][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.379216][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.405884][ T5346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.434691][ T5346] hsr_slave_0: entered promiscuous mode [ 69.442021][ T5346] hsr_slave_1: entered promiscuous mode [ 70.180388][ T5346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.191803][ T5346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.203561][ T5346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.214251][ T5346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.288792][ T5346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.306998][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.317125][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.330342][ T5346] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.342495][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.352904][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.363014][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.370198][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.391198][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.401522][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.410925][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.420902][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.428198][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.438266][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.447243][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.466028][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.477835][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.486819][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.498003][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.506798][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.515934][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.529724][ T5346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.544851][ T5346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.558427][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.567445][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.577697][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.700831][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.710014][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.725019][ T5346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.744915][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.756320][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.779280][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.790003][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.802016][ T5346] veth0_vlan: entered promiscuous mode [ 70.810314][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.820086][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.831536][ T5346] veth1_vlan: entered promiscuous mode [ 70.852880][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.863930][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.872904][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.882951][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.894108][ T5346] veth0_macvtap: entered promiscuous mode [ 70.909077][ T5346] veth1_macvtap: entered promiscuous mode [ 70.927278][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.934798][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.943829][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.953565][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.963517][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.975645][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.994979][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.004318][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.014173][ T5346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.024921][ T5346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.035236][ T5346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.046054][ T5346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.106016][ T962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.114129][ T962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.122990][ T4994] Bluetooth: hci0: command 0x0409 tx timeout [ 71.134308][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.135042][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.147482][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.164219][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.233952][ T5439] dccp_xmit_packet: Payload too large (65475) for featneg. [ 71.290551][ T5442] dccp_xmit_packet: Payload too large (65475) for featneg. [ 71.308554][ T5442] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 71.322631][ T5442] CPU: 1 PID: 5442 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 71.330938][ T5442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 71.341455][ T5442] Call Trace: [ 71.344837][ T5442] [ 71.347869][ T5442] dump_stack_lvl+0x8e/0xb0 [ 71.352382][ T5442] ccid3_hc_tx_packet_sent+0xde/0x140 [ 71.357865][ T5442] dccp_xmit_packet+0x28a/0x680 [ 71.362743][ T5442] dccp_write_xmit+0x112/0x190 [ 71.367524][ T5442] dccp_sendmsg+0x78a/0xa30 [ 71.372124][ T5442] ? find_held_lock+0x2d/0x110 [ 71.376909][ T5442] ? dccp_done+0xd0/0xd0 [ 71.381163][ T5442] ? __might_fault+0xc4/0x170 [ 71.385944][ T5442] ? inet_send_prepare+0x3e0/0x3e0 [ 71.391096][ T5442] sock_sendmsg+0xc0/0x150 [ 71.395658][ T5442] ____sys_sendmsg+0x5ff/0x8f0 [ 71.400709][ T5442] ? kernel_sendmsg+0x30/0x30 [ 71.405485][ T5442] ? __copy_msghdr+0x440/0x440 [ 71.410268][ T5442] ? try_to_wake_up+0xdda/0x1c40 [ 71.415218][ T5442] ___sys_sendmsg+0xdb/0x160 [ 71.419998][ T5442] ? do_recvmmsg+0x560/0x560 [ 71.424611][ T5442] ? __fget_files+0x1a7/0x3c0 [ 71.429299][ T5442] ? lock_downgrade+0x690/0x690 [ 71.434250][ T5442] ? do_raw_spin_unlock+0x175/0x230 [ 71.439486][ T5442] ? futex_wake+0x2fe/0x3f0 [ 71.444253][ T5442] ? __fget_files+0x1bf/0x3c0 [ 71.448945][ T5442] ? __fget_light+0xb9/0x210 [ 71.453635][ T5442] __sys_sendmsg+0xc7/0x160 [ 71.458263][ T5442] ? __sys_sendmsg_sock+0x20/0x20 [ 71.463581][ T5442] ? syscall_enter_from_user_mode+0x26/0x80 [ 71.469581][ T5442] ? lockdep_hardirqs_on+0x7d/0x100 [ 71.474798][ T5442] do_syscall_64+0x39/0xb0 [ 71.479235][ T5442] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.485232][ T5442] RIP: 0033:0x7ffa74c8c0f9 [ 71.489654][ T5442] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 71.509649][ T5442] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.518068][ T5442] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 71.526052][ T5442] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 71.534044][ T5442] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 71.542197][ T5442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.550186][ T5442] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 71.558183][ T5442] [ 71.573305][ T5442] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 71.585697][ T5442] CPU: 1 PID: 5442 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 71.593966][ T5442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 71.604216][ T5442] Call Trace: [ 71.607597][ T5442] [ 71.610539][ T5442] dump_stack_lvl+0x8e/0xb0 [ 71.615230][ T5442] ccid3_hc_tx_packet_sent+0xde/0x140 [ 71.620636][ T5442] dccp_xmit_packet+0x28a/0x680 [ 71.625512][ T5442] dccp_write_xmit+0x112/0x190 [ 71.630354][ T5442] dccp_sendmsg+0x78a/0xa30 [ 71.634968][ T5442] ? find_held_lock+0x2d/0x110 [ 71.640028][ T5442] ? dccp_done+0xd0/0xd0 [ 71.644324][ T5442] ? __might_fault+0xc4/0x170 [ 71.649073][ T5442] ? inet_send_prepare+0x3e0/0x3e0 [ 71.654224][ T5442] sock_sendmsg+0xc0/0x150 [ 71.659018][ T5442] ____sys_sendmsg+0x5ff/0x8f0 [ 71.663815][ T5442] ? kernel_sendmsg+0x30/0x30 [ 71.668603][ T5442] ? __copy_msghdr+0x440/0x440 [ 71.673456][ T5442] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 71.679630][ T5442] ? __lock_acquire+0x1916/0x5df0 [ 71.684717][ T5442] ___sys_sendmsg+0xdb/0x160 [ 71.689326][ T5442] ? do_recvmmsg+0x560/0x560 [ 71.693932][ T5442] ? __fget_files+0x1a7/0x3c0 [ 71.698623][ T5442] ? lock_downgrade+0x690/0x690 [ 71.703492][ T5442] ? task_mm_cid_work+0x6b5/0x920 [ 71.708542][ T5442] ? lock_downgrade+0x690/0x690 [ 71.714329][ T5442] ? futex_wake+0x2fe/0x3f0 [ 71.718853][ T5442] ? __fget_files+0x1bf/0x3c0 [ 71.724026][ T5442] ? __fget_light+0xb9/0x210 [ 71.729018][ T5442] __sys_sendmsg+0xc7/0x160 [ 71.733805][ T5442] ? __sys_sendmsg_sock+0x20/0x20 [ 71.738912][ T5442] ? syscall_enter_from_user_mode+0x26/0x80 [ 71.744819][ T5442] ? lockdep_hardirqs_on+0x7d/0x100 [ 71.750131][ T5442] do_syscall_64+0x39/0xb0 [ 71.754562][ T5442] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.760471][ T5442] RIP: 0033:0x7ffa74c8c0f9 [ 71.764917][ T5442] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 71.784714][ T5442] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.793149][ T5442] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 71.801316][ T5442] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 71.809387][ T5442] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 71.817543][ T5442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.825541][ T5442] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 71.833803][ T5442] [ 71.852172][ T5442] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 71.867429][ T5442] CPU: 1 PID: 5442 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 71.875712][ T5442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 71.885866][ T5442] Call Trace: [ 71.889152][ T5442] [ 71.892092][ T5442] dump_stack_lvl+0x8e/0xb0 [ 71.896785][ T5442] ccid3_hc_tx_packet_sent+0xde/0x140 [ 71.902211][ T5442] dccp_xmit_packet+0x28a/0x680 [ 71.907252][ T5442] dccp_write_xmit+0x112/0x190 [ 71.912442][ T5442] dccp_sendmsg+0x78a/0xa30 [ 71.916962][ T5442] ? find_held_lock+0x2d/0x110 [ 71.921738][ T5442] ? dccp_done+0xd0/0xd0 [ 71.925990][ T5442] ? __might_fault+0xc4/0x170 [ 71.930786][ T5442] ? inet_send_prepare+0x3e0/0x3e0 [ 71.936032][ T5442] sock_sendmsg+0xc0/0x150 [ 71.940445][ T5442] ____sys_sendmsg+0x5ff/0x8f0 [ 71.945202][ T5442] ? kernel_sendmsg+0x30/0x30 [ 71.949881][ T5442] ? __copy_msghdr+0x440/0x440 [ 71.954853][ T5442] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 71.960936][ T5442] ? __lock_acquire+0x1916/0x5df0 [ 71.966158][ T5442] ___sys_sendmsg+0xdb/0x160 [ 71.970973][ T5442] ? do_recvmmsg+0x560/0x560 [ 71.975613][ T5442] ? __fget_files+0x1a7/0x3c0 [ 71.980316][ T5442] ? lock_downgrade+0x690/0x690 [ 71.985347][ T5442] ? task_mm_cid_work+0x6b5/0x920 [ 71.990465][ T5442] ? lock_downgrade+0x690/0x690 [ 71.995503][ T5442] ? futex_wake+0x2fe/0x3f0 [ 72.000002][ T5442] ? __fget_files+0x1bf/0x3c0 [ 72.004764][ T5442] ? __fget_light+0xb9/0x210 [ 72.010071][ T5442] __sys_sendmsg+0xc7/0x160 [ 72.014832][ T5442] ? __sys_sendmsg_sock+0x20/0x20 [ 72.019861][ T5442] ? syscall_enter_from_user_mode+0x26/0x80 [ 72.025918][ T5442] ? lockdep_hardirqs_on+0x7d/0x100 [ 72.031286][ T5442] do_syscall_64+0x39/0xb0 [ 72.035785][ T5442] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.041686][ T5442] RIP: 0033:0x7ffa74c8c0f9 [ 72.046113][ T5442] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.065991][ T5442] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.074430][ T5442] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 72.082411][ T5442] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 72.090470][ T5442] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 72.098587][ T5442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.106611][ T5442] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 72.114611][ T5442] [ 72.184276][ T5476] dccp_xmit_packet: Payload too large (65475) for featneg. [ 72.247827][ T5481] dccp_xmit_packet: Payload too large (65475) for featneg. [ 72.283255][ T5481] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 72.295187][ T5481] CPU: 1 PID: 5481 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 72.303611][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 72.313934][ T5481] Call Trace: [ 72.317212][ T5481] [ 72.320137][ T5481] dump_stack_lvl+0x8e/0xb0 [ 72.324668][ T5481] ccid3_hc_tx_packet_sent+0xde/0x140 [ 72.330043][ T5481] dccp_xmit_packet+0x28a/0x680 [ 72.334981][ T5481] dccp_write_xmit+0x112/0x190 [ 72.339732][ T5481] dccp_sendmsg+0x78a/0xa30 [ 72.344324][ T5481] ? find_held_lock+0x2d/0x110 [ 72.349066][ T5481] ? dccp_done+0xd0/0xd0 [ 72.353375][ T5481] ? __might_fault+0xc4/0x170 [ 72.358124][ T5481] ? inet_send_prepare+0x3e0/0x3e0 [ 72.363236][ T5481] sock_sendmsg+0xc0/0x150 [ 72.367721][ T5481] ____sys_sendmsg+0x5ff/0x8f0 [ 72.372821][ T5481] ? kernel_sendmsg+0x30/0x30 [ 72.377490][ T5481] ? __copy_msghdr+0x440/0x440 [ 72.382242][ T5481] ? try_to_wake_up+0xdda/0x1c40 [ 72.387183][ T5481] ___sys_sendmsg+0xdb/0x160 [ 72.391765][ T5481] ? do_recvmmsg+0x560/0x560 [ 72.396506][ T5481] ? __fget_files+0x1a7/0x3c0 [ 72.401161][ T5481] ? lock_downgrade+0x690/0x690 [ 72.406160][ T5481] ? do_raw_spin_unlock+0x175/0x230 [ 72.411553][ T5481] ? futex_wake+0x2fe/0x3f0 [ 72.416556][ T5481] ? __fget_files+0x1bf/0x3c0 [ 72.421229][ T5481] ? __fget_light+0xb9/0x210 [ 72.425796][ T5481] __sys_sendmsg+0xc7/0x160 [ 72.430294][ T5481] ? __sys_sendmsg_sock+0x20/0x20 [ 72.435316][ T5481] ? syscall_enter_from_user_mode+0x26/0x80 [ 72.441361][ T5481] ? lockdep_hardirqs_on+0x7d/0x100 [ 72.446796][ T5481] do_syscall_64+0x39/0xb0 [ 72.451216][ T5481] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.457121][ T5481] RIP: 0033:0x7ffa74c8c0f9 [ 72.461634][ T5481] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.481226][ T5481] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.490323][ T5481] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 72.498475][ T5481] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 72.506424][ T5481] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 72.514373][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.522418][ T5481] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 72.530640][ T5481] [ 72.546218][ T5481] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 72.559132][ T5481] CPU: 0 PID: 5481 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 72.568194][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 72.578285][ T5481] Call Trace: [ 72.581610][ T5481] [ 72.584561][ T5481] dump_stack_lvl+0x8e/0xb0 [ 72.589079][ T5481] ccid3_hc_tx_packet_sent+0xde/0x140 [ 72.594665][ T5481] dccp_xmit_packet+0x28a/0x680 [ 72.599677][ T5481] dccp_write_xmit+0x112/0x190 [ 72.604688][ T5481] dccp_sendmsg+0x78a/0xa30 [ 72.609216][ T5481] ? find_held_lock+0x2d/0x110 [ 72.614004][ T5481] ? dccp_done+0xd0/0xd0 [ 72.618299][ T5481] ? __might_fault+0xc4/0x170 [ 72.623001][ T5481] ? inet_send_prepare+0x3e0/0x3e0 [ 72.628132][ T5481] sock_sendmsg+0xc0/0x150 [ 72.632575][ T5481] ____sys_sendmsg+0x5ff/0x8f0 [ 72.637448][ T5481] ? kernel_sendmsg+0x30/0x30 [ 72.642590][ T5481] ? __copy_msghdr+0x440/0x440 [ 72.647375][ T5481] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 72.653407][ T5481] ? __lock_acquire+0x1916/0x5df0 [ 72.658545][ T5481] ___sys_sendmsg+0xdb/0x160 [ 72.663155][ T5481] ? do_recvmmsg+0x560/0x560 [ 72.667770][ T5481] ? __fget_files+0x1a7/0x3c0 [ 72.672555][ T5481] ? lock_downgrade+0x690/0x690 [ 72.677509][ T5481] ? task_mm_cid_work+0x3aa/0x920 [ 72.682569][ T5481] ? lock_downgrade+0x690/0x690 [ 72.687731][ T5481] ? futex_wake+0x2fe/0x3f0 [ 72.692806][ T5481] ? __fget_files+0x1bf/0x3c0 [ 72.697684][ T5481] ? __fget_light+0xb9/0x210 [ 72.702651][ T5481] __sys_sendmsg+0xc7/0x160 [ 72.707184][ T5481] ? __sys_sendmsg_sock+0x20/0x20 [ 72.712280][ T5481] ? syscall_enter_from_user_mode+0x26/0x80 [ 72.718238][ T5481] ? lockdep_hardirqs_on+0x7d/0x100 [ 72.723848][ T5481] do_syscall_64+0x39/0xb0 [ 72.728543][ T5481] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.734452][ T5481] RIP: 0033:0x7ffa74c8c0f9 [ 72.739283][ T5481] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.759430][ T5481] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.767940][ T5481] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 72.776097][ T5481] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 72.784099][ T5481] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 72.792426][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.800580][ T5481] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 72.808840][ T5481] [ 72.817162][ T5481] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 72.829392][ T5481] CPU: 0 PID: 5481 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 72.837854][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 72.848929][ T5481] Call Trace: [ 72.852234][ T5481] [ 72.855190][ T5481] dump_stack_lvl+0x8e/0xb0 [ 72.859764][ T5481] ccid3_hc_tx_packet_sent+0xde/0x140 [ 72.865333][ T5481] dccp_xmit_packet+0x28a/0x680 [ 72.870347][ T5481] dccp_write_xmit+0x112/0x190 [ 72.875139][ T5481] dccp_sendmsg+0x78a/0xa30 [ 72.879841][ T5481] ? find_held_lock+0x2d/0x110 [ 72.885224][ T5481] ? dccp_done+0xd0/0xd0 [ 72.889695][ T5481] ? __might_fault+0xc4/0x170 [ 72.894624][ T5481] ? inet_send_prepare+0x3e0/0x3e0 [ 72.900067][ T5481] sock_sendmsg+0xc0/0x150 [ 72.904692][ T5481] ____sys_sendmsg+0x5ff/0x8f0 [ 72.909608][ T5481] ? kernel_sendmsg+0x30/0x30 [ 72.914299][ T5481] ? __copy_msghdr+0x440/0x440 [ 72.919087][ T5481] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 72.925185][ T5481] ? __lock_acquire+0x1916/0x5df0 [ 72.930229][ T5481] ___sys_sendmsg+0xdb/0x160 [ 72.935098][ T5481] ? do_recvmmsg+0x560/0x560 [ 72.939733][ T5481] ? __fget_files+0x1a7/0x3c0 [ 72.944485][ T5481] ? lock_downgrade+0x690/0x690 [ 72.949347][ T5481] ? task_mm_cid_work+0x3aa/0x920 [ 72.954573][ T5481] ? lock_downgrade+0x690/0x690 [ 72.959425][ T5481] ? futex_wake+0x2fe/0x3f0 [ 72.963929][ T5481] ? __fget_files+0x1bf/0x3c0 [ 72.968615][ T5481] ? __fget_light+0xb9/0x210 [ 72.973185][ T5481] __sys_sendmsg+0xc7/0x160 [ 72.977667][ T5481] ? __sys_sendmsg_sock+0x20/0x20 [ 72.982697][ T5481] ? syscall_enter_from_user_mode+0x26/0x80 [ 72.988656][ T5481] ? lockdep_hardirqs_on+0x7d/0x100 [ 72.994284][ T5481] do_syscall_64+0x39/0xb0 [ 72.998776][ T5481] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 73.004670][ T5481] RIP: 0033:0x7ffa74c8c0f9 [ 73.009097][ T5481] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.028783][ T5481] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.037306][ T5481] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 73.045540][ T5481] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 73.053599][ T5481] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 73.061638][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.069856][ T5481] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 73.077818][ T5481] [ 73.118431][ T5504] dccp_xmit_packet: Payload too large (65475) for featneg. [ 73.167605][ T5508] dccp_xmit_packet: Payload too large (65475) for featneg. [ 73.195841][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 73.219384][ T5512] dccp_xmit_packet: Payload too large (65475) for featneg. [ 73.264478][ T5517] dccp_xmit_packet: Payload too large (65475) for featneg. [ 73.329366][ T5521] dccp_xmit_packet: Payload too large (65475) for featneg. [ 73.371267][ T5524] dccp_xmit_packet: Payload too large (65475) for featneg. [ 73.427334][ T5527] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 73.439191][ T5527] CPU: 0 PID: 5527 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 73.447454][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 73.457529][ T5527] Call Trace: [ 73.460834][ T5527] [ 73.463777][ T5527] dump_stack_lvl+0x8e/0xb0 [ 73.468551][ T5527] ccid3_hc_tx_packet_sent+0xde/0x140 [ 73.473952][ T5527] dccp_xmit_packet+0x28a/0x680 [ 73.478825][ T5527] dccp_write_xmit+0x112/0x190 [ 73.483885][ T5527] dccp_sendmsg+0x78a/0xa30 [ 73.488873][ T5527] ? find_held_lock+0x2d/0x110 [ 73.493894][ T5527] ? dccp_done+0xd0/0xd0 [ 73.498239][ T5527] ? __might_fault+0xc4/0x170 [ 73.503033][ T5527] ? inet_send_prepare+0x3e0/0x3e0 [ 73.508593][ T5527] sock_sendmsg+0xc0/0x150 [ 73.513148][ T5527] ____sys_sendmsg+0x5ff/0x8f0 [ 73.518096][ T5527] ? kernel_sendmsg+0x30/0x30 [ 73.522798][ T5527] ? __copy_msghdr+0x440/0x440 [ 73.528475][ T5527] ? try_to_wake_up+0xdda/0x1c40 [ 73.533706][ T5527] ___sys_sendmsg+0xdb/0x160 [ 73.538491][ T5527] ? do_recvmmsg+0x560/0x560 [ 73.543113][ T5527] ? __fget_files+0x1a7/0x3c0 [ 73.548179][ T5527] ? lock_downgrade+0x690/0x690 [ 73.553053][ T5527] ? do_raw_spin_unlock+0x175/0x230 [ 73.558448][ T5527] ? futex_wake+0x2fe/0x3f0 [ 73.563759][ T5527] ? __fget_files+0x1bf/0x3c0 [ 73.568550][ T5527] ? __fget_light+0xb9/0x210 [ 73.573244][ T5527] __sys_sendmsg+0xc7/0x160 [ 73.577854][ T5527] ? __sys_sendmsg_sock+0x20/0x20 [ 73.583607][ T5527] ? syscall_enter_from_user_mode+0x26/0x80 [ 73.590049][ T5527] ? lockdep_hardirqs_on+0x7d/0x100 [ 73.595268][ T5527] do_syscall_64+0x39/0xb0 [ 73.599703][ T5527] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 73.605780][ T5527] RIP: 0033:0x7ffa74c8c0f9 [ 73.610298][ T5527] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.630128][ T5527] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.639001][ T5527] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 73.646998][ T5527] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 73.655084][ T5527] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 73.663167][ T5527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.671433][ T5527] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 73.679526][ T5527] [ 73.687649][ T5527] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 73.700528][ T5527] CPU: 1 PID: 5527 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 73.708792][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 73.718949][ T5527] Call Trace: [ 73.722326][ T5527] [ 73.725272][ T5527] dump_stack_lvl+0x8e/0xb0 [ 73.729834][ T5527] ccid3_hc_tx_packet_sent+0xde/0x140 [ 73.735493][ T5527] dccp_xmit_packet+0x28a/0x680 [ 73.740379][ T5527] dccp_write_xmit+0x112/0x190 [ 73.745346][ T5527] dccp_sendmsg+0x78a/0xa30 [ 73.749909][ T5527] ? find_held_lock+0x2d/0x110 [ 73.755139][ T5527] ? dccp_done+0xd0/0xd0 [ 73.759395][ T5527] ? __might_fault+0xc4/0x170 [ 73.764127][ T5527] ? inet_send_prepare+0x3e0/0x3e0 [ 73.769280][ T5527] sock_sendmsg+0xc0/0x150 [ 73.773838][ T5527] ____sys_sendmsg+0x5ff/0x8f0 [ 73.778718][ T5527] ? kernel_sendmsg+0x30/0x30 [ 73.783930][ T5527] ? __copy_msghdr+0x440/0x440 [ 73.788746][ T5527] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 73.795265][ T5527] ? __lock_acquire+0x1916/0x5df0 [ 73.800404][ T5527] ___sys_sendmsg+0xdb/0x160 [ 73.805478][ T5527] ? do_recvmmsg+0x560/0x560 [ 73.810365][ T5527] ? __fget_files+0x1a7/0x3c0 [ 73.815322][ T5527] ? lock_downgrade+0x690/0x690 [ 73.820194][ T5527] ? task_mm_cid_work+0x6b5/0x920 [ 73.826023][ T5527] ? lock_downgrade+0x690/0x690 [ 73.831454][ T5527] ? futex_wake+0x2fe/0x3f0 [ 73.835986][ T5527] ? __fget_files+0x1bf/0x3c0 [ 73.840860][ T5527] ? __fget_light+0xb9/0x210 [ 73.845561][ T5527] __sys_sendmsg+0xc7/0x160 [ 73.850264][ T5527] ? __sys_sendmsg_sock+0x20/0x20 [ 73.855322][ T5527] ? syscall_enter_from_user_mode+0x26/0x80 [ 73.861317][ T5527] ? lockdep_hardirqs_on+0x7d/0x100 [ 73.866656][ T5527] do_syscall_64+0x39/0xb0 [ 73.871095][ T5527] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 73.877096][ T5527] RIP: 0033:0x7ffa74c8c0f9 [ 73.881640][ T5527] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.901817][ T5527] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.910251][ T5527] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 73.918245][ T5527] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 73.926327][ T5527] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 73.934589][ T5527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.942747][ T5527] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 73.950753][ T5527] [ 73.966255][ T5527] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 73.978709][ T5527] CPU: 1 PID: 5527 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 73.987426][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 73.998883][ T5527] Call Trace: [ 74.002265][ T5527] [ 74.005225][ T5527] dump_stack_lvl+0x8e/0xb0 [ 74.009975][ T5527] ccid3_hc_tx_packet_sent+0xde/0x140 [ 74.015385][ T5527] dccp_xmit_packet+0x28a/0x680 [ 74.020354][ T5527] dccp_write_xmit+0x112/0x190 [ 74.025140][ T5527] dccp_sendmsg+0x78a/0xa30 [ 74.029658][ T5527] ? find_held_lock+0x2d/0x110 [ 74.034540][ T5527] ? dccp_done+0xd0/0xd0 [ 74.038904][ T5527] ? __might_fault+0xc4/0x170 [ 74.043644][ T5527] ? inet_send_prepare+0x3e0/0x3e0 [ 74.048765][ T5527] sock_sendmsg+0xc0/0x150 [ 74.053279][ T5527] ____sys_sendmsg+0x5ff/0x8f0 [ 74.058062][ T5527] ? kernel_sendmsg+0x30/0x30 [ 74.062746][ T5527] ? __copy_msghdr+0x440/0x440 [ 74.067529][ T5527] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 74.073522][ T5527] ? __lock_acquire+0x1916/0x5df0 [ 74.078613][ T5527] ___sys_sendmsg+0xdb/0x160 [ 74.083275][ T5527] ? do_recvmmsg+0x560/0x560 [ 74.087953][ T5527] ? __fget_files+0x1a7/0x3c0 [ 74.092717][ T5527] ? lock_downgrade+0x690/0x690 [ 74.097570][ T5527] ? task_mm_cid_work+0x6b5/0x920 [ 74.102575][ T5527] ? lock_downgrade+0x690/0x690 [ 74.107412][ T5527] ? futex_wake+0x2fe/0x3f0 [ 74.111898][ T5527] ? __fget_files+0x1bf/0x3c0 [ 74.116560][ T5527] ? __fget_light+0xb9/0x210 [ 74.121132][ T5527] __sys_sendmsg+0xc7/0x160 [ 74.125714][ T5527] ? __sys_sendmsg_sock+0x20/0x20 [ 74.130823][ T5527] ? syscall_enter_from_user_mode+0x26/0x80 [ 74.136695][ T5527] ? lockdep_hardirqs_on+0x7d/0x100 [ 74.142068][ T5527] do_syscall_64+0x39/0xb0 [ 74.146752][ T5527] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.152822][ T5527] RIP: 0033:0x7ffa74c8c0f9 [ 74.157394][ T5527] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 74.177463][ T5527] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.185962][ T5527] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 74.194007][ T5527] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 74.202045][ T5527] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 74.210540][ T5527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.218518][ T5527] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 74.226606][ T5527] [ 74.234289][ T5527] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 74.253020][ T5527] CPU: 0 PID: 5527 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 74.261301][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 74.271640][ T5527] Call Trace: [ 74.275019][ T5527] [ 74.277961][ T5527] dump_stack_lvl+0x8e/0xb0 [ 74.282483][ T5527] ccid3_hc_tx_packet_sent+0xde/0x140 [ 74.287882][ T5527] dccp_xmit_packet+0x28a/0x680 [ 74.292794][ T5527] dccp_write_xmit+0x112/0x190 [ 74.297578][ T5527] dccp_sendmsg+0x78a/0xa30 [ 74.302302][ T5527] ? find_held_lock+0x2d/0x110 [ 74.307256][ T5527] ? dccp_done+0xd0/0xd0 [ 74.311519][ T5527] ? __might_fault+0xc4/0x170 [ 74.316560][ T5527] ? inet_send_prepare+0x3e0/0x3e0 [ 74.321680][ T5527] sock_sendmsg+0xc0/0x150 [ 74.326106][ T5527] ____sys_sendmsg+0x5ff/0x8f0 [ 74.330882][ T5527] ? kernel_sendmsg+0x30/0x30 [ 74.335620][ T5527] ? __copy_msghdr+0x440/0x440 [ 74.340360][ T5527] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 74.346497][ T5527] ? __lock_acquire+0x1916/0x5df0 [ 74.351516][ T5527] ___sys_sendmsg+0xdb/0x160 [ 74.356177][ T5527] ? do_recvmmsg+0x560/0x560 [ 74.361268][ T5527] ? __fget_files+0x1a7/0x3c0 [ 74.365939][ T5527] ? lock_downgrade+0x690/0x690 [ 74.370991][ T5527] ? task_mm_cid_work+0x3aa/0x920 [ 74.376020][ T5527] ? lock_downgrade+0x690/0x690 [ 74.381055][ T5527] ? futex_wake+0x2fe/0x3f0 [ 74.385563][ T5527] ? __fget_files+0x1bf/0x3c0 [ 74.390430][ T5527] ? __fget_light+0xb9/0x210 [ 74.395052][ T5527] __sys_sendmsg+0xc7/0x160 [ 74.399647][ T5527] ? __sys_sendmsg_sock+0x20/0x20 [ 74.404766][ T5527] ? syscall_enter_from_user_mode+0x26/0x80 [ 74.410638][ T5527] ? lockdep_hardirqs_on+0x7d/0x100 [ 74.416171][ T5527] do_syscall_64+0x39/0xb0 [ 74.420662][ T5527] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.426563][ T5527] RIP: 0033:0x7ffa74c8c0f9 [ 74.430959][ T5527] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 74.450833][ T5527] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.459309][ T5527] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 74.467289][ T5527] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 74.475606][ T5527] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 2023/05/06 16:54:45 executed programs: 11 [ 74.483728][ T5527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.492110][ T5527] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 74.500070][ T5527] [ 74.555971][ T5567] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 74.567936][ T5567] CPU: 1 PID: 5567 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 74.576189][ T5567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 74.586257][ T5567] Call Trace: [ 74.589629][ T5567] [ 74.592757][ T5567] dump_stack_lvl+0x8e/0xb0 [ 74.597272][ T5567] ccid3_hc_tx_packet_sent+0xde/0x140 [ 74.602670][ T5567] dccp_xmit_packet+0x28a/0x680 [ 74.607551][ T5567] dccp_write_xmit+0x112/0x190 [ 74.612343][ T5567] dccp_sendmsg+0x78a/0xa30 [ 74.616872][ T5567] ? find_held_lock+0x2d/0x110 [ 74.621824][ T5567] ? dccp_done+0xd0/0xd0 [ 74.626092][ T5567] ? __might_fault+0xc4/0x170 [ 74.630874][ T5567] ? inet_send_prepare+0x3e0/0x3e0 [ 74.636086][ T5567] sock_sendmsg+0xc0/0x150 [ 74.641565][ T5567] ____sys_sendmsg+0x5ff/0x8f0 [ 74.646357][ T5567] ? kernel_sendmsg+0x30/0x30 [ 74.651133][ T5567] ? __copy_msghdr+0x440/0x440 [ 74.655954][ T5567] ? try_to_wake_up+0xdda/0x1c40 [ 74.660915][ T5567] ___sys_sendmsg+0xdb/0x160 [ 74.665568][ T5567] ? do_recvmmsg+0x560/0x560 [ 74.670206][ T5567] ? __fget_files+0x1a7/0x3c0 [ 74.674892][ T5567] ? lock_downgrade+0x690/0x690 [ 74.680237][ T5567] ? do_raw_spin_unlock+0x175/0x230 [ 74.685608][ T5567] ? futex_wake+0x2fe/0x3f0 [ 74.690684][ T5567] ? __fget_files+0x1bf/0x3c0 [ 74.695518][ T5567] ? __fget_light+0xb9/0x210 [ 74.700387][ T5567] __sys_sendmsg+0xc7/0x160 [ 74.705082][ T5567] ? __sys_sendmsg_sock+0x20/0x20 [ 74.710233][ T5567] ? syscall_enter_from_user_mode+0x26/0x80 [ 74.716347][ T5567] ? lockdep_hardirqs_on+0x7d/0x100 [ 74.721665][ T5567] do_syscall_64+0x39/0xb0 [ 74.726409][ T5567] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.732667][ T5567] RIP: 0033:0x7ffa74c8c0f9 [ 74.737180][ T5567] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 74.756968][ T5567] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.765661][ T5567] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 74.773726][ T5567] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 74.781744][ T5567] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 74.789816][ T5567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.798326][ T5567] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 74.807021][ T5567] [ 74.817310][ T5567] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 74.829099][ T5567] CPU: 1 PID: 5567 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 74.838024][ T5567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 74.848132][ T5567] Call Trace: [ 74.851442][ T5567] [ 74.854386][ T5567] dump_stack_lvl+0x8e/0xb0 [ 74.859051][ T5567] ccid3_hc_tx_packet_sent+0xde/0x140 [ 74.864883][ T5567] dccp_xmit_packet+0x28a/0x680 [ 74.869793][ T5567] dccp_write_xmit+0x112/0x190 [ 74.874672][ T5567] dccp_sendmsg+0x78a/0xa30 [ 74.879238][ T5567] ? find_held_lock+0x2d/0x110 [ 74.884111][ T5567] ? dccp_done+0xd0/0xd0 [ 74.888374][ T5567] ? __might_fault+0xc4/0x170 [ 74.893154][ T5567] ? inet_send_prepare+0x3e0/0x3e0 [ 74.898280][ T5567] sock_sendmsg+0xc0/0x150 [ 74.902712][ T5567] ____sys_sendmsg+0x5ff/0x8f0 [ 74.907673][ T5567] ? kernel_sendmsg+0x30/0x30 [ 74.912626][ T5567] ? __copy_msghdr+0x440/0x440 [ 74.917411][ T5567] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 74.923390][ T5567] ? __lock_acquire+0x1916/0x5df0 [ 74.928586][ T5567] ___sys_sendmsg+0xdb/0x160 [ 74.933245][ T5567] ? do_recvmmsg+0x560/0x560 [ 74.937820][ T5567] ? __fget_files+0x1a7/0x3c0 [ 74.942518][ T5567] ? lock_downgrade+0x690/0x690 [ 74.947563][ T5567] ? task_mm_cid_work+0x6b5/0x920 [ 74.952601][ T5567] ? lock_downgrade+0x690/0x690 [ 74.957460][ T5567] ? futex_wake+0x2fe/0x3f0 [ 74.961977][ T5567] ? __fget_files+0x1bf/0x3c0 [ 74.966940][ T5567] ? __fget_light+0xb9/0x210 [ 74.971605][ T5567] __sys_sendmsg+0xc7/0x160 [ 74.976192][ T5567] ? __sys_sendmsg_sock+0x20/0x20 [ 74.981204][ T5567] ? syscall_enter_from_user_mode+0x26/0x80 [ 74.987183][ T5567] ? lockdep_hardirqs_on+0x7d/0x100 [ 74.992794][ T5567] do_syscall_64+0x39/0xb0 [ 74.997923][ T5567] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.004077][ T5567] RIP: 0033:0x7ffa74c8c0f9 [ 75.008603][ T5567] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 75.029029][ T5567] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.037445][ T5567] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 75.045421][ T5567] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 75.053637][ T5567] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 75.061582][ T5567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.069701][ T5567] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 75.077773][ T5567] [ 75.089582][ T5567] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 75.110611][ T5567] CPU: 0 PID: 5567 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 75.119076][ T5567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 75.129233][ T5567] Call Trace: [ 75.132536][ T5567] [ 75.135570][ T5567] dump_stack_lvl+0x8e/0xb0 [ 75.140216][ T5567] ccid3_hc_tx_packet_sent+0xde/0x140 [ 75.145703][ T5567] dccp_xmit_packet+0x28a/0x680 [ 75.150784][ T5567] dccp_write_xmit+0x112/0x190 [ 75.155670][ T5567] dccp_sendmsg+0x78a/0xa30 [ 75.160242][ T5567] ? find_held_lock+0x2d/0x110 [ 75.165316][ T5567] ? dccp_done+0xd0/0xd0 [ 75.169665][ T5567] ? __might_fault+0xc4/0x170 [ 75.174456][ T5567] ? inet_send_prepare+0x3e0/0x3e0 [ 75.179765][ T5567] sock_sendmsg+0xc0/0x150 [ 75.184245][ T5567] ____sys_sendmsg+0x5ff/0x8f0 [ 75.189045][ T5567] ? kernel_sendmsg+0x30/0x30 [ 75.194200][ T5567] ? __copy_msghdr+0x440/0x440 [ 75.199095][ T5567] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 75.205187][ T5567] ? __lock_acquire+0x1916/0x5df0 [ 75.210505][ T5567] ___sys_sendmsg+0xdb/0x160 [ 75.215227][ T5567] ? do_recvmmsg+0x560/0x560 [ 75.220199][ T5567] ? __fget_files+0x1a7/0x3c0 [ 75.225064][ T5567] ? lock_downgrade+0x690/0x690 [ 75.229935][ T5567] ? task_mm_cid_work+0x3aa/0x920 [ 75.235065][ T5567] ? lock_downgrade+0x690/0x690 [ 75.239966][ T5567] ? futex_wake+0x2fe/0x3f0 [ 75.244494][ T5567] ? __fget_files+0x1bf/0x3c0 [ 75.249197][ T5567] ? __fget_light+0xb9/0x210 [ 75.253892][ T5567] __sys_sendmsg+0xc7/0x160 [ 75.258515][ T5567] ? __sys_sendmsg_sock+0x20/0x20 [ 75.263565][ T5567] ? syscall_enter_from_user_mode+0x26/0x80 [ 75.269816][ T5567] ? lockdep_hardirqs_on+0x7d/0x100 [ 75.275197][ T5567] do_syscall_64+0x39/0xb0 [ 75.279629][ T5567] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.285622][ T5567] RIP: 0033:0x7ffa74c8c0f9 [ 75.290047][ T5567] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 75.310139][ T5567] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.318651][ T5567] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 75.326807][ T5567] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 75.334963][ T5567] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 75.343526][ T5567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.351685][ T5567] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 75.359778][ T5567] [ 75.363079][ T4994] Bluetooth: hci0: command 0x040f tx timeout [ 75.369862][ T5567] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 75.384821][ T5567] CPU: 1 PID: 5567 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 75.393287][ T5567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 75.403365][ T5567] Call Trace: [ 75.406660][ T5567] [ 75.409596][ T5567] dump_stack_lvl+0x8e/0xb0 [ 75.414198][ T5567] ccid3_hc_tx_packet_sent+0xde/0x140 [ 75.419635][ T5567] dccp_xmit_packet+0x28a/0x680 [ 75.424517][ T5567] dccp_write_xmit+0x112/0x190 [ 75.429305][ T5567] dccp_sendmsg+0x78a/0xa30 [ 75.433835][ T5567] ? find_held_lock+0x2d/0x110 [ 75.438634][ T5567] ? dccp_done+0xd0/0xd0 [ 75.443019][ T5567] ? __might_fault+0xc4/0x170 [ 75.447720][ T5567] ? inet_send_prepare+0x3e0/0x3e0 [ 75.452933][ T5567] sock_sendmsg+0xc0/0x150 [ 75.457391][ T5567] ____sys_sendmsg+0x5ff/0x8f0 [ 75.462173][ T5567] ? kernel_sendmsg+0x30/0x30 [ 75.467222][ T5567] ? __copy_msghdr+0x440/0x440 [ 75.472366][ T5567] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 75.478455][ T5567] ? __lock_acquire+0x1916/0x5df0 [ 75.483705][ T5567] ___sys_sendmsg+0xdb/0x160 [ 75.488400][ T5567] ? do_recvmmsg+0x560/0x560 [ 75.492970][ T5567] ? __fget_files+0x1a7/0x3c0 [ 75.497671][ T5567] ? lock_downgrade+0x690/0x690 [ 75.502524][ T5567] ? task_mm_cid_work+0x3aa/0x920 [ 75.507561][ T5567] ? lock_downgrade+0x690/0x690 [ 75.512491][ T5567] ? futex_wake+0x2fe/0x3f0 [ 75.516991][ T5567] ? __fget_files+0x1bf/0x3c0 [ 75.521671][ T5567] ? __fget_light+0xb9/0x210 [ 75.526243][ T5567] __sys_sendmsg+0xc7/0x160 [ 75.530745][ T5567] ? __sys_sendmsg_sock+0x20/0x20 [ 75.535761][ T5567] ? task_work_run+0x147/0x220 [ 75.540507][ T5567] ? syscall_enter_from_user_mode+0x26/0x80 [ 75.546490][ T5567] ? lockdep_hardirqs_on+0x7d/0x100 [ 75.551701][ T5567] do_syscall_64+0x39/0xb0 [ 75.556147][ T5567] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.562042][ T5567] RIP: 0033:0x7ffa74c8c0f9 [ 75.566453][ T5567] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 75.586607][ T5567] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.595197][ T5567] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 75.603340][ T5567] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 75.611287][ T5567] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 75.619333][ T5567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.627285][ T5567] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 75.635507][ T5567] [ 75.698094][ T5611] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 75.710144][ T5611] CPU: 1 PID: 5611 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 75.718492][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 75.728997][ T5611] Call Trace: [ 75.732520][ T5611] [ 75.735475][ T5611] dump_stack_lvl+0x8e/0xb0 [ 75.740183][ T5611] ccid3_hc_tx_packet_sent+0xde/0x140 [ 75.745757][ T5611] dccp_xmit_packet+0x28a/0x680 [ 75.750722][ T5611] dccp_write_xmit+0x112/0x190 [ 75.755509][ T5611] dccp_sendmsg+0x78a/0xa30 [ 75.760020][ T5611] ? find_held_lock+0x2d/0x110 [ 75.764802][ T5611] ? dccp_done+0xd0/0xd0 [ 75.770182][ T5611] ? __might_fault+0xc4/0x170 [ 75.775041][ T5611] ? inet_send_prepare+0x3e0/0x3e0 [ 75.780196][ T5611] sock_sendmsg+0xc0/0x150 [ 75.784622][ T5611] ____sys_sendmsg+0x5ff/0x8f0 [ 75.789485][ T5611] ? kernel_sendmsg+0x30/0x30 [ 75.794155][ T5611] ? __copy_msghdr+0x440/0x440 [ 75.798906][ T5611] ? try_to_wake_up+0xdda/0x1c40 [ 75.803997][ T5611] ___sys_sendmsg+0xdb/0x160 [ 75.808599][ T5611] ? do_recvmmsg+0x560/0x560 [ 75.813299][ T5611] ? __fget_files+0x1a7/0x3c0 [ 75.818010][ T5611] ? lock_downgrade+0x690/0x690 [ 75.823083][ T5611] ? do_raw_spin_unlock+0x175/0x230 [ 75.828530][ T5611] ? futex_wake+0x2fe/0x3f0 [ 75.833164][ T5611] ? __fget_files+0x1bf/0x3c0 [ 75.837832][ T5611] ? __fget_light+0xb9/0x210 [ 75.842433][ T5611] __sys_sendmsg+0xc7/0x160 [ 75.846976][ T5611] ? __sys_sendmsg_sock+0x20/0x20 [ 75.852247][ T5611] ? syscall_enter_from_user_mode+0x26/0x80 [ 75.858323][ T5611] ? lockdep_hardirqs_on+0x7d/0x100 [ 75.863617][ T5611] do_syscall_64+0x39/0xb0 [ 75.868275][ T5611] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.874238][ T5611] RIP: 0033:0x7ffa74c8c0f9 [ 75.878635][ T5611] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 75.899265][ T5611] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.907831][ T5611] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 75.915786][ T5611] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 75.923846][ T5611] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 75.932164][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.940243][ T5611] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 75.948386][ T5611] [ 75.958615][ T5611] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 75.971097][ T5611] CPU: 1 PID: 5611 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 75.979374][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 75.989433][ T5611] Call Trace: [ 75.992763][ T5611] [ 75.995682][ T5611] dump_stack_lvl+0x8e/0xb0 [ 76.000433][ T5611] ccid3_hc_tx_packet_sent+0xde/0x140 [ 76.006052][ T5611] dccp_xmit_packet+0x28a/0x680 [ 76.010887][ T5611] dccp_write_xmit+0x112/0x190 [ 76.015631][ T5611] dccp_sendmsg+0x78a/0xa30 [ 76.020289][ T5611] ? find_held_lock+0x2d/0x110 [ 76.025038][ T5611] ? dccp_done+0xd0/0xd0 [ 76.029261][ T5611] ? __might_fault+0xc4/0x170 [ 76.033926][ T5611] ? inet_send_prepare+0x3e0/0x3e0 [ 76.039015][ T5611] sock_sendmsg+0xc0/0x150 [ 76.043419][ T5611] ____sys_sendmsg+0x5ff/0x8f0 [ 76.048166][ T5611] ? kernel_sendmsg+0x30/0x30 [ 76.052830][ T5611] ? __copy_msghdr+0x440/0x440 [ 76.057663][ T5611] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 76.063817][ T5611] ? __lock_acquire+0x1916/0x5df0 [ 76.068847][ T5611] ___sys_sendmsg+0xdb/0x160 [ 76.073426][ T5611] ? do_recvmmsg+0x560/0x560 [ 76.077994][ T5611] ? __fget_files+0x1a7/0x3c0 [ 76.082657][ T5611] ? lock_downgrade+0x690/0x690 [ 76.087482][ T5611] ? task_mm_cid_work+0x6b5/0x920 [ 76.092483][ T5611] ? lock_downgrade+0x690/0x690 [ 76.097319][ T5611] ? futex_wake+0x2fe/0x3f0 [ 76.101803][ T5611] ? __fget_files+0x1bf/0x3c0 [ 76.106490][ T5611] ? __fget_light+0xb9/0x210 [ 76.111100][ T5611] __sys_sendmsg+0xc7/0x160 [ 76.115603][ T5611] ? __sys_sendmsg_sock+0x20/0x20 [ 76.120643][ T5611] ? syscall_enter_from_user_mode+0x26/0x80 [ 76.126775][ T5611] ? lockdep_hardirqs_on+0x7d/0x100 [ 76.132047][ T5611] do_syscall_64+0x39/0xb0 [ 76.136460][ T5611] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.142331][ T5611] RIP: 0033:0x7ffa74c8c0f9 [ 76.146811][ T5611] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.166502][ T5611] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.175250][ T5611] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 76.183208][ T5611] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 76.191157][ T5611] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 76.199117][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.207163][ T5611] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 76.215215][ T5611] [ 76.223470][ T5611] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 76.236919][ T5611] CPU: 0 PID: 5611 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 76.245284][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 76.255696][ T5611] Call Trace: [ 76.259258][ T5611] [ 76.262203][ T5611] dump_stack_lvl+0x8e/0xb0 [ 76.266884][ T5611] ccid3_hc_tx_packet_sent+0xde/0x140 [ 76.272356][ T5611] dccp_xmit_packet+0x28a/0x680 [ 76.277315][ T5611] dccp_write_xmit+0x112/0x190 [ 76.282108][ T5611] dccp_sendmsg+0x78a/0xa30 [ 76.286626][ T5611] ? find_held_lock+0x2d/0x110 [ 76.291414][ T5611] ? dccp_done+0xd0/0xd0 [ 76.295775][ T5611] ? __might_fault+0xc4/0x170 [ 76.300581][ T5611] ? inet_send_prepare+0x3e0/0x3e0 [ 76.305765][ T5611] sock_sendmsg+0xc0/0x150 [ 76.310463][ T5611] ____sys_sendmsg+0x5ff/0x8f0 [ 76.316896][ T5611] ? kernel_sendmsg+0x30/0x30 [ 76.321581][ T5611] ? __copy_msghdr+0x440/0x440 [ 76.326448][ T5611] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 76.332546][ T5611] ? __lock_acquire+0x1916/0x5df0 [ 76.337681][ T5611] ___sys_sendmsg+0xdb/0x160 [ 76.342311][ T5611] ? do_recvmmsg+0x560/0x560 [ 76.346932][ T5611] ? __fget_files+0x1a7/0x3c0 [ 76.351624][ T5611] ? lock_downgrade+0x690/0x690 [ 76.356494][ T5611] ? task_mm_cid_work+0x3aa/0x920 [ 76.361620][ T5611] ? lock_downgrade+0x690/0x690 [ 76.366490][ T5611] ? futex_wake+0x2fe/0x3f0 [ 76.371011][ T5611] ? __fget_files+0x1bf/0x3c0 [ 76.375967][ T5611] ? __fget_light+0xb9/0x210 [ 76.380895][ T5611] __sys_sendmsg+0xc7/0x160 [ 76.385414][ T5611] ? __sys_sendmsg_sock+0x20/0x20 [ 76.390462][ T5611] ? syscall_enter_from_user_mode+0x26/0x80 [ 76.396367][ T5611] ? lockdep_hardirqs_on+0x7d/0x100 [ 76.401678][ T5611] do_syscall_64+0x39/0xb0 [ 76.406184][ T5611] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.412179][ T5611] RIP: 0033:0x7ffa74c8c0f9 [ 76.416689][ T5611] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.436396][ T5611] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.444824][ T5611] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 76.452906][ T5611] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 76.461337][ T5611] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 76.469327][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.477486][ T5611] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 76.485583][ T5611] [ 76.492744][ T5611] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 76.509591][ T5611] CPU: 0 PID: 5611 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 76.517872][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 76.528052][ T5611] Call Trace: [ 76.531346][ T5611] [ 76.534298][ T5611] dump_stack_lvl+0x8e/0xb0 [ 76.538829][ T5611] ccid3_hc_tx_packet_sent+0xde/0x140 [ 76.544608][ T5611] dccp_xmit_packet+0x28a/0x680 [ 76.549663][ T5611] dccp_write_xmit+0x112/0x190 [ 76.554536][ T5611] dccp_sendmsg+0x78a/0xa30 [ 76.559150][ T5611] ? find_held_lock+0x2d/0x110 [ 76.563955][ T5611] ? dccp_done+0xd0/0xd0 [ 76.568343][ T5611] ? __might_fault+0xc4/0x170 [ 76.573137][ T5611] ? inet_send_prepare+0x3e0/0x3e0 [ 76.578360][ T5611] sock_sendmsg+0xc0/0x150 [ 76.582801][ T5611] ____sys_sendmsg+0x5ff/0x8f0 [ 76.587590][ T5611] ? kernel_sendmsg+0x30/0x30 [ 76.592284][ T5611] ? __copy_msghdr+0x440/0x440 [ 76.597071][ T5611] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 76.603419][ T5611] ? __lock_acquire+0x1916/0x5df0 [ 76.608556][ T5611] ___sys_sendmsg+0xdb/0x160 [ 76.613167][ T5611] ? do_recvmmsg+0x560/0x560 [ 76.617770][ T5611] ? __fget_files+0x1a7/0x3c0 [ 76.622441][ T5611] ? lock_downgrade+0x690/0x690 [ 76.627278][ T5611] ? task_mm_cid_work+0x3aa/0x920 [ 76.632277][ T5611] ? lock_downgrade+0x690/0x690 [ 76.637208][ T5611] ? futex_wake+0x2fe/0x3f0 [ 76.641718][ T5611] ? __fget_files+0x1bf/0x3c0 [ 76.646382][ T5611] ? __fget_light+0xb9/0x210 [ 76.651481][ T5611] __sys_sendmsg+0xc7/0x160 [ 76.656071][ T5611] ? __sys_sendmsg_sock+0x20/0x20 [ 76.661083][ T5611] ? syscall_enter_from_user_mode+0x26/0x80 [ 76.666953][ T5611] ? lockdep_hardirqs_on+0x7d/0x100 [ 76.672309][ T5611] do_syscall_64+0x39/0xb0 [ 76.676848][ T5611] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.682733][ T5611] RIP: 0033:0x7ffa74c8c0f9 [ 76.687183][ T5611] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.707140][ T5611] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.715726][ T5611] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 76.723721][ T5611] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 76.731800][ T5611] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 76.740208][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.748311][ T5611] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 76.756369][ T5611] [ 76.814902][ T5640] net_ratelimit: 3 callbacks suppressed [ 76.814912][ T5640] dccp_xmit_packet: Payload too large (65475) for featneg. [ 76.837933][ T5640] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 76.851797][ T5640] CPU: 0 PID: 5640 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 76.860069][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 76.870483][ T5640] Call Trace: [ 76.873786][ T5640] [ 76.876811][ T5640] dump_stack_lvl+0x8e/0xb0 [ 76.881407][ T5640] ccid3_hc_tx_packet_sent+0xde/0x140 [ 76.886782][ T5640] dccp_xmit_packet+0x28a/0x680 [ 76.891642][ T5640] dccp_write_xmit+0x112/0x190 [ 76.896504][ T5640] dccp_sendmsg+0x78a/0xa30 [ 76.900998][ T5640] ? find_held_lock+0x2d/0x110 [ 76.905802][ T5640] ? dccp_done+0xd0/0xd0 [ 76.910067][ T5640] ? __might_fault+0xc4/0x170 [ 76.914756][ T5640] ? inet_send_prepare+0x3e0/0x3e0 [ 76.919893][ T5640] sock_sendmsg+0xc0/0x150 [ 76.924365][ T5640] ____sys_sendmsg+0x5ff/0x8f0 [ 76.929129][ T5640] ? kernel_sendmsg+0x30/0x30 [ 76.933978][ T5640] ? __copy_msghdr+0x440/0x440 [ 76.938900][ T5640] ? try_to_wake_up+0xdda/0x1c40 [ 76.944025][ T5640] ___sys_sendmsg+0xdb/0x160 [ 76.948855][ T5640] ? do_recvmmsg+0x560/0x560 [ 76.953510][ T5640] ? __fget_files+0x1a7/0x3c0 [ 76.958205][ T5640] ? lock_downgrade+0x690/0x690 [ 76.963065][ T5640] ? do_raw_spin_unlock+0x175/0x230 [ 76.968503][ T5640] ? futex_wake+0x2fe/0x3f0 [ 76.973105][ T5640] ? __fget_files+0x1bf/0x3c0 [ 76.978961][ T5640] ? __fget_light+0xb9/0x210 [ 76.983645][ T5640] __sys_sendmsg+0xc7/0x160 [ 76.988145][ T5640] ? __sys_sendmsg_sock+0x20/0x20 [ 76.993775][ T5640] ? syscall_enter_from_user_mode+0x26/0x80 [ 76.999751][ T5640] ? lockdep_hardirqs_on+0x7d/0x100 [ 77.005029][ T5640] do_syscall_64+0x39/0xb0 [ 77.009426][ T5640] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.015326][ T5640] RIP: 0033:0x7ffa74c8c0f9 [ 77.019841][ T5640] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.040477][ T5640] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.048952][ T5640] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 77.057173][ T5640] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 77.065384][ T5640] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 77.073571][ T5640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.081717][ T5640] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 77.089690][ T5640] [ 77.095230][ T755] cfg80211: failed to load regulatory.db [ 77.106624][ T5640] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 77.119080][ T5640] CPU: 0 PID: 5640 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 77.127425][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 77.138020][ T5640] Call Trace: [ 77.141317][ T5640] [ 77.144261][ T5640] dump_stack_lvl+0x8e/0xb0 [ 77.148966][ T5640] ccid3_hc_tx_packet_sent+0xde/0x140 [ 77.154530][ T5640] dccp_xmit_packet+0x28a/0x680 [ 77.159560][ T5640] dccp_write_xmit+0x112/0x190 [ 77.164337][ T5640] dccp_sendmsg+0x78a/0xa30 [ 77.168848][ T5640] ? find_held_lock+0x2d/0x110 [ 77.173743][ T5640] ? dccp_done+0xd0/0xd0 [ 77.177987][ T5640] ? __might_fault+0xc4/0x170 [ 77.182777][ T5640] ? inet_send_prepare+0x3e0/0x3e0 [ 77.187908][ T5640] sock_sendmsg+0xc0/0x150 [ 77.192506][ T5640] ____sys_sendmsg+0x5ff/0x8f0 [ 77.197268][ T5640] ? kernel_sendmsg+0x30/0x30 [ 77.201966][ T5640] ? __copy_msghdr+0x440/0x440 [ 77.206881][ T5640] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 77.212887][ T5640] ? __lock_acquire+0x1916/0x5df0 [ 77.217904][ T5640] ___sys_sendmsg+0xdb/0x160 [ 77.222490][ T5640] ? do_recvmmsg+0x560/0x560 [ 77.227517][ T5640] ? __fget_files+0x1a7/0x3c0 [ 77.232356][ T5640] ? lock_downgrade+0x690/0x690 [ 77.237290][ T5640] ? task_mm_cid_work+0x3aa/0x920 [ 77.242744][ T5640] ? lock_downgrade+0x690/0x690 [ 77.247603][ T5640] ? futex_wake+0x2fe/0x3f0 [ 77.252215][ T5640] ? __fget_files+0x1bf/0x3c0 [ 77.256890][ T5640] ? __fget_light+0xb9/0x210 [ 77.261570][ T5640] __sys_sendmsg+0xc7/0x160 [ 77.266334][ T5640] ? __sys_sendmsg_sock+0x20/0x20 [ 77.272158][ T5640] ? syscall_enter_from_user_mode+0x26/0x80 [ 77.278232][ T5640] ? lockdep_hardirqs_on+0x7d/0x100 [ 77.283439][ T5640] do_syscall_64+0x39/0xb0 [ 77.288126][ T5640] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.294097][ T5640] RIP: 0033:0x7ffa74c8c0f9 [ 77.298580][ T5640] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.318180][ T5640] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.326582][ T5640] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 77.334547][ T5640] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 77.342507][ T5640] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 77.350461][ T5640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.358437][ T5640] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 77.366407][ T5640] [ 77.374854][ T5640] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 77.386194][ T5640] CPU: 0 PID: 5640 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 77.394452][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 77.404692][ T5640] Call Trace: [ 77.408263][ T5640] [ 77.411197][ T5640] dump_stack_lvl+0x8e/0xb0 [ 77.415747][ T5640] ccid3_hc_tx_packet_sent+0xde/0x140 [ 77.421205][ T5640] dccp_xmit_packet+0x28a/0x680 [ 77.426055][ T5640] dccp_write_xmit+0x112/0x190 [ 77.431041][ T5640] dccp_sendmsg+0x78a/0xa30 [ 77.435624][ T5640] ? find_held_lock+0x2d/0x110 [ 77.440462][ T5640] ? dccp_done+0xd0/0xd0 [ 77.444716][ T5640] ? __might_fault+0xc4/0x170 [ 77.446541][ T4994] Bluetooth: hci0: command 0x0419 tx timeout [ 77.449547][ T5640] ? inet_send_prepare+0x3e0/0x3e0 [ 77.461233][ T5640] sock_sendmsg+0xc0/0x150 [ 77.465647][ T5640] ____sys_sendmsg+0x5ff/0x8f0 [ 77.470542][ T5640] ? kernel_sendmsg+0x30/0x30 [ 77.475593][ T5640] ? __copy_msghdr+0x440/0x440 [ 77.480421][ T5640] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 77.487317][ T5640] ? __lock_acquire+0x1916/0x5df0 [ 77.492716][ T5640] ___sys_sendmsg+0xdb/0x160 [ 77.497524][ T5640] ? do_recvmmsg+0x560/0x560 [ 77.502164][ T5640] ? __fget_files+0x1a7/0x3c0 [ 77.507035][ T5640] ? lock_downgrade+0x690/0x690 [ 77.512051][ T5640] ? task_mm_cid_work+0x3aa/0x920 [ 77.517052][ T5640] ? lock_downgrade+0x690/0x690 [ 77.521889][ T5640] ? futex_wake+0x2fe/0x3f0 [ 77.526558][ T5640] ? __fget_files+0x1bf/0x3c0 [ 77.531215][ T5640] ? __fget_light+0xb9/0x210 [ 77.535784][ T5640] __sys_sendmsg+0xc7/0x160 [ 77.540352][ T5640] ? __sys_sendmsg_sock+0x20/0x20 [ 77.545367][ T5640] ? syscall_enter_from_user_mode+0x26/0x80 [ 77.551446][ T5640] ? lockdep_hardirqs_on+0x7d/0x100 [ 77.556785][ T5640] do_syscall_64+0x39/0xb0 [ 77.561229][ T5640] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.567333][ T5640] RIP: 0033:0x7ffa74c8c0f9 [ 77.571743][ T5640] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.591718][ T5640] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.600290][ T5640] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 77.608814][ T5640] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 77.616873][ T5640] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 77.624853][ T5640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.632926][ T5640] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 77.641067][ T5640] [ 77.681953][ T5649] dccp_xmit_packet: Payload too large (65475) for featneg. [ 77.724733][ T5652] dccp_xmit_packet: Payload too large (65475) for featneg. [ 77.744005][ T5652] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 77.756830][ T5652] CPU: 1 PID: 5652 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 77.765179][ T5652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 77.775506][ T5652] Call Trace: [ 77.779004][ T5652] [ 77.782123][ T5652] dump_stack_lvl+0x8e/0xb0 [ 77.786645][ T5652] ccid3_hc_tx_packet_sent+0xde/0x140 [ 77.792348][ T5652] dccp_xmit_packet+0x28a/0x680 [ 77.797224][ T5652] dccp_write_xmit+0x112/0x190 [ 77.802243][ T5652] dccp_sendmsg+0x78a/0xa30 [ 77.806865][ T5652] ? find_held_lock+0x2d/0x110 [ 77.811652][ T5652] ? dccp_done+0xd0/0xd0 [ 77.816009][ T5652] ? __might_fault+0xc4/0x170 [ 77.820795][ T5652] ? inet_send_prepare+0x3e0/0x3e0 [ 77.825940][ T5652] sock_sendmsg+0xc0/0x150 [ 77.830461][ T5652] ____sys_sendmsg+0x5ff/0x8f0 [ 77.835505][ T5652] ? kernel_sendmsg+0x30/0x30 [ 77.840451][ T5652] ? __copy_msghdr+0x440/0x440 [ 77.845410][ T5652] ? try_to_wake_up+0xdda/0x1c40 [ 77.850652][ T5652] ___sys_sendmsg+0xdb/0x160 [ 77.855372][ T5652] ? do_recvmmsg+0x560/0x560 [ 77.859993][ T5652] ? __fget_files+0x1a7/0x3c0 [ 77.864859][ T5652] ? lock_downgrade+0x690/0x690 [ 77.869765][ T5652] ? do_raw_spin_unlock+0x175/0x230 [ 77.875595][ T5652] ? futex_wake+0x2fe/0x3f0 [ 77.880476][ T5652] ? __fget_files+0x1bf/0x3c0 [ 77.885184][ T5652] ? __fget_light+0xb9/0x210 [ 77.889889][ T5652] __sys_sendmsg+0xc7/0x160 [ 77.894408][ T5652] ? __sys_sendmsg_sock+0x20/0x20 [ 77.899979][ T5652] ? syscall_enter_from_user_mode+0x26/0x80 [ 77.905898][ T5652] ? lockdep_hardirqs_on+0x7d/0x100 [ 77.911117][ T5652] do_syscall_64+0x39/0xb0 [ 77.915555][ T5652] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.921597][ T5652] RIP: 0033:0x7ffa74c8c0f9 [ 77.926023][ T5652] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.945901][ T5652] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.954410][ T5652] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 77.962828][ T5652] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 77.970971][ T5652] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 77.979083][ T5652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.987075][ T5652] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 77.995161][ T5652] [ 77.999764][ T5652] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 78.014352][ T5652] CPU: 0 PID: 5652 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 78.022722][ T5652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 78.033153][ T5652] Call Trace: [ 78.036452][ T5652] [ 78.039571][ T5652] dump_stack_lvl+0x8e/0xb0 [ 78.044085][ T5652] ccid3_hc_tx_packet_sent+0xde/0x140 [ 78.049476][ T5652] dccp_xmit_packet+0x28a/0x680 [ 78.054401][ T5652] dccp_write_xmit+0x112/0x190 [ 78.059168][ T5652] dccp_sendmsg+0x78a/0xa30 [ 78.063668][ T5652] ? find_held_lock+0x2d/0x110 [ 78.068424][ T5652] ? dccp_done+0xd0/0xd0 [ 78.072755][ T5652] ? __might_fault+0xc4/0x170 [ 78.077542][ T5652] ? inet_send_prepare+0x3e0/0x3e0 [ 78.082676][ T5652] sock_sendmsg+0xc0/0x150 [ 78.087165][ T5652] ____sys_sendmsg+0x5ff/0x8f0 [ 78.091908][ T5652] ? kernel_sendmsg+0x30/0x30 [ 78.096562][ T5652] ? __copy_msghdr+0x440/0x440 [ 78.101307][ T5652] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 78.107269][ T5652] ? __lock_acquire+0x1916/0x5df0 [ 78.112373][ T5652] ___sys_sendmsg+0xdb/0x160 [ 78.117158][ T5652] ? do_recvmmsg+0x560/0x560 [ 78.121857][ T5652] ? __fget_files+0x1a7/0x3c0 [ 78.126607][ T5652] ? lock_downgrade+0x690/0x690 [ 78.131625][ T5652] ? task_mm_cid_work+0x6b5/0x920 [ 78.136904][ T5652] ? lock_downgrade+0x690/0x690 [ 78.141737][ T5652] ? futex_wake+0x2fe/0x3f0 [ 78.146413][ T5652] ? __fget_files+0x1bf/0x3c0 [ 78.151177][ T5652] ? __fget_light+0xb9/0x210 [ 78.155768][ T5652] __sys_sendmsg+0xc7/0x160 [ 78.160441][ T5652] ? __sys_sendmsg_sock+0x20/0x20 [ 78.165465][ T5652] ? syscall_enter_from_user_mode+0x26/0x80 [ 78.171350][ T5652] ? lockdep_hardirqs_on+0x7d/0x100 [ 78.176542][ T5652] do_syscall_64+0x39/0xb0 [ 78.180947][ T5652] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.186826][ T5652] RIP: 0033:0x7ffa74c8c0f9 [ 78.191231][ T5652] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.211436][ T5652] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.219880][ T5652] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 78.227844][ T5652] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 78.235996][ T5652] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 78.244090][ T5652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.252318][ T5652] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 78.260378][ T5652] [ 78.273594][ T5652] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 78.285271][ T5652] CPU: 0 PID: 5652 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 78.293540][ T5652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 78.303957][ T5652] Call Trace: [ 78.307223][ T5652] [ 78.310273][ T5652] dump_stack_lvl+0x8e/0xb0 [ 78.314845][ T5652] ccid3_hc_tx_packet_sent+0xde/0x140 [ 78.320204][ T5652] dccp_xmit_packet+0x28a/0x680 [ 78.325302][ T5652] dccp_write_xmit+0x112/0x190 [ 78.330047][ T5652] dccp_sendmsg+0x78a/0xa30 [ 78.334526][ T5652] ? find_held_lock+0x2d/0x110 [ 78.339271][ T5652] ? dccp_done+0xd0/0xd0 [ 78.343494][ T5652] ? __might_fault+0xc4/0x170 [ 78.348786][ T5652] ? inet_send_prepare+0x3e0/0x3e0 [ 78.354053][ T5652] sock_sendmsg+0xc0/0x150 [ 78.358560][ T5652] ____sys_sendmsg+0x5ff/0x8f0 [ 78.363606][ T5652] ? kernel_sendmsg+0x30/0x30 [ 78.368289][ T5652] ? __copy_msghdr+0x440/0x440 [ 78.373383][ T5652] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 78.379625][ T5652] ? __lock_acquire+0x1916/0x5df0 [ 78.384756][ T5652] ___sys_sendmsg+0xdb/0x160 [ 78.389351][ T5652] ? do_recvmmsg+0x560/0x560 [ 78.393958][ T5652] ? __fget_files+0x1a7/0x3c0 [ 78.398643][ T5652] ? lock_downgrade+0x690/0x690 [ 78.403518][ T5652] ? task_mm_cid_work+0x3aa/0x920 [ 78.408525][ T5652] ? lock_downgrade+0x690/0x690 [ 78.413349][ T5652] ? futex_wake+0x2fe/0x3f0 [ 78.417831][ T5652] ? __fget_files+0x1bf/0x3c0 [ 78.422583][ T5652] ? __fget_light+0xb9/0x210 [ 78.427152][ T5652] __sys_sendmsg+0xc7/0x160 [ 78.431866][ T5652] ? __sys_sendmsg_sock+0x20/0x20 [ 78.437494][ T5652] ? syscall_enter_from_user_mode+0x26/0x80 [ 78.443363][ T5652] ? lockdep_hardirqs_on+0x7d/0x100 [ 78.448541][ T5652] do_syscall_64+0x39/0xb0 [ 78.452934][ T5652] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.458980][ T5652] RIP: 0033:0x7ffa74c8c0f9 [ 78.463773][ T5652] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.483950][ T5652] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.492447][ T5652] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 78.500496][ T5652] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 78.508704][ T5652] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 78.517265][ T5652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.525303][ T5652] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 78.533530][ T5652] [ 78.542509][ T5652] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 78.554327][ T5652] CPU: 0 PID: 5652 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 78.563110][ T5652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 78.573389][ T5652] Call Trace: [ 78.576690][ T5652] [ 78.579759][ T5652] dump_stack_lvl+0x8e/0xb0 [ 78.584285][ T5652] ccid3_hc_tx_packet_sent+0xde/0x140 [ 78.589879][ T5652] dccp_xmit_packet+0x28a/0x680 [ 78.595178][ T5652] dccp_write_xmit+0x112/0x190 [ 78.600075][ T5652] dccp_sendmsg+0x78a/0xa30 [ 78.604647][ T5652] ? find_held_lock+0x2d/0x110 [ 78.609609][ T5652] ? dccp_done+0xd0/0xd0 [ 78.613869][ T5652] ? __might_fault+0xc4/0x170 [ 78.618601][ T5652] ? inet_send_prepare+0x3e0/0x3e0 [ 78.623818][ T5652] sock_sendmsg+0xc0/0x150 [ 78.628255][ T5652] ____sys_sendmsg+0x5ff/0x8f0 [ 78.633509][ T5652] ? kernel_sendmsg+0x30/0x30 [ 78.638196][ T5652] ? __copy_msghdr+0x440/0x440 [ 78.643072][ T5652] ? find_held_lock+0x2d/0x110 [ 78.647853][ T5652] ___sys_sendmsg+0xdb/0x160 [ 78.652460][ T5652] ? do_recvmmsg+0x560/0x560 [ 78.657064][ T5652] ? __fget_files+0x1a7/0x3c0 [ 78.661750][ T5652] ? lock_downgrade+0x690/0x690 [ 78.666622][ T5652] ? kick_process+0x290/0x290 [ 78.671309][ T5652] ? futex_wake+0x2fe/0x3f0 [ 78.675833][ T5652] ? __fget_files+0x1bf/0x3c0 [ 78.680528][ T5652] ? __fget_light+0xb9/0x210 [ 78.685481][ T5652] __sys_sendmsg+0xc7/0x160 [ 78.690000][ T5652] ? __sys_sendmsg_sock+0x20/0x20 [ 78.695050][ T5652] ? syscall_enter_from_user_mode+0x26/0x80 [ 78.701129][ T5652] ? lockdep_hardirqs_on+0x7d/0x100 [ 78.706520][ T5652] do_syscall_64+0x39/0xb0 [ 78.710964][ T5652] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.716958][ T5652] RIP: 0033:0x7ffa74c8c0f9 [ 78.721575][ T5652] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.741469][ T5652] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.750088][ T5652] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 78.758159][ T5652] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 78.766265][ T5652] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 78.774534][ T5652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.782787][ T5652] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 78.790962][ T5652] [ 78.820943][ T5685] dccp_xmit_packet: Payload too large (65475) for featneg. [ 78.869386][ T5689] dccp_xmit_packet: Payload too large (65475) for featneg. [ 78.924097][ T5694] dccp_xmit_packet: Payload too large (65475) for featneg. [ 78.942249][ T5694] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 78.956880][ T5694] CPU: 0 PID: 5694 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 78.965456][ T5694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 78.975521][ T5694] Call Trace: [ 78.978808][ T5694] [ 78.981859][ T5694] dump_stack_lvl+0x8e/0xb0 [ 78.986450][ T5694] ccid3_hc_tx_packet_sent+0xde/0x140 [ 78.991948][ T5694] dccp_xmit_packet+0x28a/0x680 [ 78.997143][ T5694] dccp_write_xmit+0x112/0x190 [ 79.002039][ T5694] dccp_sendmsg+0x78a/0xa30 [ 79.006572][ T5694] ? find_held_lock+0x2d/0x110 [ 79.011357][ T5694] ? dccp_done+0xd0/0xd0 [ 79.015617][ T5694] ? __might_fault+0xc4/0x170 [ 79.020314][ T5694] ? inet_send_prepare+0x3e0/0x3e0 [ 79.025438][ T5694] sock_sendmsg+0xc0/0x150 [ 79.029868][ T5694] ____sys_sendmsg+0x5ff/0x8f0 [ 79.034647][ T5694] ? kernel_sendmsg+0x30/0x30 [ 79.039329][ T5694] ? __copy_msghdr+0x440/0x440 [ 79.044203][ T5694] ? try_to_wake_up+0xdda/0x1c40 [ 79.049213][ T5694] ___sys_sendmsg+0xdb/0x160 [ 79.053895][ T5694] ? do_recvmmsg+0x560/0x560 [ 79.058540][ T5694] ? __fget_files+0x1a7/0x3c0 [ 79.063210][ T5694] ? lock_downgrade+0x690/0x690 [ 79.068049][ T5694] ? do_raw_spin_unlock+0x175/0x230 [ 79.073578][ T5694] ? futex_wake+0x2fe/0x3f0 [ 79.078158][ T5694] ? __fget_files+0x1bf/0x3c0 [ 79.082823][ T5694] ? __fget_light+0xb9/0x210 [ 79.087481][ T5694] __sys_sendmsg+0xc7/0x160 [ 79.092058][ T5694] ? __sys_sendmsg_sock+0x20/0x20 [ 79.097087][ T5694] ? syscall_enter_from_user_mode+0x26/0x80 [ 79.103051][ T5694] ? lockdep_hardirqs_on+0x7d/0x100 [ 79.108423][ T5694] do_syscall_64+0x39/0xb0 [ 79.112829][ T5694] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.118876][ T5694] RIP: 0033:0x7ffa74c8c0f9 [ 79.123272][ T5694] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 79.143478][ T5694] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.151971][ T5694] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 79.160011][ T5694] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 79.167976][ T5694] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 79.175925][ T5694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.183873][ T5694] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 79.191920][ T5694] [ 79.205845][ T5694] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 79.219257][ T5694] CPU: 1 PID: 5694 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 79.227877][ T5694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 79.238014][ T5694] Call Trace: [ 79.241290][ T5694] [ 79.244214][ T5694] dump_stack_lvl+0x8e/0xb0 [ 79.248900][ T5694] ccid3_hc_tx_packet_sent+0xde/0x140 [ 79.254365][ T5694] dccp_xmit_packet+0x28a/0x680 [ 79.259282][ T5694] dccp_write_xmit+0x112/0x190 [ 79.264027][ T5694] dccp_sendmsg+0x78a/0xa30 [ 79.268688][ T5694] ? find_held_lock+0x2d/0x110 [ 79.273520][ T5694] ? dccp_done+0xd0/0xd0 [ 79.277743][ T5694] ? __might_fault+0xc4/0x170 [ 79.282408][ T5694] ? inet_send_prepare+0x3e0/0x3e0 [ 79.287795][ T5694] sock_sendmsg+0xc0/0x150 [ 79.292286][ T5694] ____sys_sendmsg+0x5ff/0x8f0 [ 79.297112][ T5694] ? kernel_sendmsg+0x30/0x30 [ 79.301759][ T5694] ? __copy_msghdr+0x440/0x440 [ 79.306498][ T5694] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 79.312449][ T5694] ? __lock_acquire+0x1916/0x5df0 [ 79.317452][ T5694] ___sys_sendmsg+0xdb/0x160 [ 79.322018][ T5694] ? do_recvmmsg+0x560/0x560 [ 79.326603][ T5694] ? __fget_files+0x1a7/0x3c0 [ 79.331283][ T5694] ? lock_downgrade+0x690/0x690 [ 79.336143][ T5694] ? task_mm_cid_work+0x6b5/0x920 [ 79.341159][ T5694] ? lock_downgrade+0x690/0x690 [ 79.346080][ T5694] ? futex_wake+0x2fe/0x3f0 [ 79.351019][ T5694] ? __fget_files+0x1bf/0x3c0 [ 79.355676][ T5694] ? __fget_light+0xb9/0x210 [ 79.360256][ T5694] __sys_sendmsg+0xc7/0x160 [ 79.364742][ T5694] ? __sys_sendmsg_sock+0x20/0x20 [ 79.369776][ T5694] ? syscall_enter_from_user_mode+0x26/0x80 [ 79.375739][ T5694] ? lockdep_hardirqs_on+0x7d/0x100 [ 79.380914][ T5694] do_syscall_64+0x39/0xb0 [ 79.385308][ T5694] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.391697][ T5694] RIP: 0033:0x7ffa74c8c0f9 [ 79.396093][ T5694] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 79.416021][ T5694] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.424409][ T5694] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 79.432395][ T5694] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 79.440340][ T5694] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 79.448287][ T5694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.458330][ T5694] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 79.466310][ T5694] [ 79.483141][ T5694] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 79.495619][ T5694] CPU: 1 PID: 5694 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 79.503879][ T5694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 79.513943][ T5694] Call Trace: [ 79.517277][ T5694] [ 79.520246][ T5694] dump_stack_lvl+0x8e/0xb0 [ 79.524756][ T5694] ccid3_hc_tx_packet_sent+0xde/0x140 [ 79.530240][ T5694] dccp_xmit_packet+0x28a/0x680 [ 79.535116][ T5694] dccp_write_xmit+0x112/0x190 [ 79.539989][ T5694] dccp_sendmsg+0x78a/0xa30 [ 79.544602][ T5694] ? find_held_lock+0x2d/0x110 [ 79.549465][ T5694] ? dccp_done+0xd0/0xd0 [ 79.553896][ T5694] ? __might_fault+0xc4/0x170 [ 79.558700][ T5694] ? inet_send_prepare+0x3e0/0x3e0 [ 79.564147][ T5694] sock_sendmsg+0xc0/0x150 [ 79.568676][ T5694] ____sys_sendmsg+0x5ff/0x8f0 [ 79.573457][ T5694] ? kernel_sendmsg+0x30/0x30 [ 79.578153][ T5694] ? __copy_msghdr+0x440/0x440 [ 79.582958][ T5694] ? find_held_lock+0x2d/0x110 [ 79.587737][ T5694] ___sys_sendmsg+0xdb/0x160 [ 79.592697][ T5694] ? do_recvmmsg+0x560/0x560 [ 79.597344][ T5694] ? __fget_files+0x1a7/0x3c0 [ 79.602123][ T5694] ? lock_downgrade+0x690/0x690 [ 79.607083][ T5694] ? sched_mm_cid_remote_clear+0x433/0x4d0 [ 79.612902][ T5694] ? kick_process+0x290/0x290 [ 79.617723][ T5694] ? futex_wake+0x2fe/0x3f0 [ 79.622249][ T5694] ? __fget_files+0x1bf/0x3c0 [ 79.626951][ T5694] ? __fget_light+0xb9/0x210 [ 79.631568][ T5694] __sys_sendmsg+0xc7/0x160 [ 79.636088][ T5694] ? __sys_sendmsg_sock+0x20/0x20 [ 79.641224][ T5694] ? syscall_enter_from_user_mode+0x26/0x80 [ 79.647310][ T5694] ? lockdep_hardirqs_on+0x7d/0x100 [ 79.652531][ T5694] do_syscall_64+0x39/0xb0 [ 79.657034][ T5694] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.663032][ T5694] RIP: 0033:0x7ffa74c8c0f9 [ 79.667457][ T5694] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 79.688030][ T5694] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.696641][ T5694] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 79.704975][ T5694] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 79.712961][ T5694] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 79.721004][ T5694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.729093][ T5694] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 79.737070][ T5694] [ 79.742590][ T5694] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 79.769665][ T5694] CPU: 0 PID: 5694 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 79.778195][ T5694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 79.788594][ T5694] Call Trace: [ 79.791861][ T5694] [ 79.794874][ T5694] dump_stack_lvl+0x8e/0xb0 [ 79.799721][ T5694] ccid3_hc_tx_packet_sent+0xde/0x140 [ 79.805194][ T5694] dccp_xmit_packet+0x28a/0x680 [ 79.810059][ T5694] dccp_write_xmit+0x112/0x190 [ 79.814846][ T5694] dccp_sendmsg+0x78a/0xa30 [ 79.819480][ T5694] ? find_held_lock+0x2d/0x110 [ 79.824243][ T5694] ? dccp_done+0xd0/0xd0 [ 79.829022][ T5694] ? __might_fault+0xc4/0x170 [ 79.833815][ T5694] ? inet_send_prepare+0x3e0/0x3e0 [ 79.838942][ T5694] sock_sendmsg+0xc0/0x150 [ 79.843496][ T5694] ____sys_sendmsg+0x5ff/0x8f0 [ 79.848514][ T5694] ? kernel_sendmsg+0x30/0x30 [ 79.853551][ T5694] ? __copy_msghdr+0x440/0x440 [ 79.858435][ T5694] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 79.865379][ T5694] ? __lock_acquire+0x1916/0x5df0 [ 79.870632][ T5694] ___sys_sendmsg+0xdb/0x160 [ 79.875244][ T5694] ? do_recvmmsg+0x560/0x560 [ 79.879932][ T5694] ? __fget_files+0x1a7/0x3c0 [ 79.885146][ T5694] ? lock_downgrade+0x690/0x690 [ 79.890134][ T5694] ? task_mm_cid_work+0x3aa/0x920 [ 79.895298][ T5694] ? lock_downgrade+0x690/0x690 [ 79.900517][ T5694] ? futex_wake+0x2fe/0x3f0 [ 79.905042][ T5694] ? __fget_files+0x1bf/0x3c0 [ 79.909729][ T5694] ? __fget_light+0xb9/0x210 [ 79.914812][ T5694] __sys_sendmsg+0xc7/0x160 [ 79.919406][ T5694] ? __sys_sendmsg_sock+0x20/0x20 [ 79.924542][ T5694] ? syscall_enter_from_user_mode+0x26/0x80 [ 79.930487][ T5694] ? lockdep_hardirqs_on+0x7d/0x100 [ 79.935803][ T5694] do_syscall_64+0x39/0xb0 [ 79.940410][ T5694] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.946382][ T5694] RIP: 0033:0x7ffa74c8c0f9 [ 79.950964][ T5694] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 79.970565][ T5694] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 2023/05/06 16:54:51 executed programs: 19 [ 79.978969][ T5694] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 79.987113][ T5694] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 79.995339][ T5694] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 80.004114][ T5694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.012089][ T5694] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 80.020071][ T5694] [ 80.068540][ T5716] dccp_xmit_packet: Payload too large (65475) for featneg. [ 80.087851][ T5716] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 80.101870][ T5716] CPU: 1 PID: 5716 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 80.110224][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 80.120483][ T5716] Call Trace: [ 80.124037][ T5716] [ 80.126981][ T5716] dump_stack_lvl+0x8e/0xb0 [ 80.131695][ T5716] ccid3_hc_tx_packet_sent+0xde/0x140 [ 80.137265][ T5716] dccp_xmit_packet+0x28a/0x680 [ 80.142235][ T5716] dccp_write_xmit+0x112/0x190 [ 80.147160][ T5716] dccp_sendmsg+0x78a/0xa30 [ 80.152207][ T5716] ? find_held_lock+0x2d/0x110 [ 80.157075][ T5716] ? dccp_done+0xd0/0xd0 [ 80.161346][ T5716] ? __might_fault+0xc4/0x170 [ 80.166044][ T5716] ? inet_send_prepare+0x3e0/0x3e0 [ 80.171257][ T5716] sock_sendmsg+0xc0/0x150 [ 80.175692][ T5716] ____sys_sendmsg+0x5ff/0x8f0 [ 80.180490][ T5716] ? kernel_sendmsg+0x30/0x30 [ 80.185273][ T5716] ? __copy_msghdr+0x440/0x440 [ 80.190082][ T5716] ? try_to_wake_up+0xdda/0x1c40 [ 80.195062][ T5716] ___sys_sendmsg+0xdb/0x160 [ 80.199682][ T5716] ? do_recvmmsg+0x560/0x560 [ 80.204386][ T5716] ? __fget_files+0x1a7/0x3c0 [ 80.209091][ T5716] ? lock_downgrade+0x690/0x690 [ 80.213964][ T5716] ? do_raw_spin_unlock+0x175/0x230 [ 80.219195][ T5716] ? futex_wake+0x2fe/0x3f0 [ 80.223735][ T5716] ? __fget_files+0x1bf/0x3c0 [ 80.228441][ T5716] ? __fget_light+0xb9/0x210 [ 80.233092][ T5716] __sys_sendmsg+0xc7/0x160 [ 80.237613][ T5716] ? __sys_sendmsg_sock+0x20/0x20 [ 80.242674][ T5716] ? syscall_enter_from_user_mode+0x26/0x80 [ 80.248585][ T5716] ? lockdep_hardirqs_on+0x7d/0x100 [ 80.253893][ T5716] do_syscall_64+0x39/0xb0 [ 80.258330][ T5716] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.264338][ T5716] RIP: 0033:0x7ffa74c8c0f9 [ 80.268877][ T5716] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 80.288929][ T5716] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.297702][ T5716] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 80.305773][ T5716] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 80.313937][ T5716] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 80.322009][ T5716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.330088][ T5716] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 80.338186][ T5716] [ 80.349735][ T5716] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 80.362435][ T5716] CPU: 1 PID: 5716 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 80.370786][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 80.380851][ T5716] Call Trace: [ 80.384174][ T5716] [ 80.387112][ T5716] dump_stack_lvl+0x8e/0xb0 [ 80.391626][ T5716] ccid3_hc_tx_packet_sent+0xde/0x140 [ 80.397017][ T5716] dccp_xmit_packet+0x28a/0x680 [ 80.401889][ T5716] dccp_write_xmit+0x112/0x190 [ 80.406852][ T5716] dccp_sendmsg+0x78a/0xa30 [ 80.411639][ T5716] ? find_held_lock+0x2d/0x110 [ 80.416524][ T5716] ? dccp_done+0xd0/0xd0 [ 80.420879][ T5716] ? __might_fault+0xc4/0x170 [ 80.425584][ T5716] ? inet_send_prepare+0x3e0/0x3e0 [ 80.430739][ T5716] sock_sendmsg+0xc0/0x150 [ 80.435178][ T5716] ____sys_sendmsg+0x5ff/0x8f0 [ 80.440018][ T5716] ? kernel_sendmsg+0x30/0x30 [ 80.444752][ T5716] ? __copy_msghdr+0x440/0x440 [ 80.449720][ T5716] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 80.456422][ T5716] ? __lock_acquire+0x1916/0x5df0 [ 80.461563][ T5716] ___sys_sendmsg+0xdb/0x160 [ 80.466363][ T5716] ? do_recvmmsg+0x560/0x560 [ 80.471058][ T5716] ? __fget_files+0x1a7/0x3c0 [ 80.475814][ T5716] ? lock_downgrade+0x690/0x690 [ 80.480846][ T5716] ? task_mm_cid_work+0x6b5/0x920 [ 80.485893][ T5716] ? lock_downgrade+0x690/0x690 [ 80.490924][ T5716] ? futex_wake+0x2fe/0x3f0 [ 80.495610][ T5716] ? __fget_files+0x1bf/0x3c0 [ 80.500300][ T5716] ? __fget_light+0xb9/0x210 [ 80.505416][ T5716] __sys_sendmsg+0xc7/0x160 [ 80.510072][ T5716] ? __sys_sendmsg_sock+0x20/0x20 [ 80.515107][ T5716] ? syscall_enter_from_user_mode+0x26/0x80 [ 80.521181][ T5716] ? lockdep_hardirqs_on+0x7d/0x100 [ 80.526380][ T5716] do_syscall_64+0x39/0xb0 [ 80.530893][ T5716] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.536776][ T5716] RIP: 0033:0x7ffa74c8c0f9 [ 80.541200][ T5716] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 80.560892][ T5716] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.569304][ T5716] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 80.577468][ T5716] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 80.585715][ T5716] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 80.593865][ T5716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.602020][ T5716] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 80.610385][ T5716] [ 80.616278][ T5716] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 80.633248][ T5716] CPU: 0 PID: 5716 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 80.641601][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 80.651736][ T5716] Call Trace: [ 80.655039][ T5716] [ 80.657954][ T5716] dump_stack_lvl+0x8e/0xb0 [ 80.662464][ T5716] ccid3_hc_tx_packet_sent+0xde/0x140 [ 80.667831][ T5716] dccp_xmit_packet+0x28a/0x680 [ 80.672707][ T5716] dccp_write_xmit+0x112/0x190 [ 80.677549][ T5716] dccp_sendmsg+0x78a/0xa30 [ 80.682212][ T5716] ? find_held_lock+0x2d/0x110 [ 80.686971][ T5716] ? dccp_done+0xd0/0xd0 [ 80.691284][ T5716] ? __might_fault+0xc4/0x170 [ 80.696044][ T5716] ? inet_send_prepare+0x3e0/0x3e0 [ 80.701264][ T5716] sock_sendmsg+0xc0/0x150 [ 80.705694][ T5716] ____sys_sendmsg+0x5ff/0x8f0 [ 80.710635][ T5716] ? kernel_sendmsg+0x30/0x30 [ 80.715411][ T5716] ? __copy_msghdr+0x440/0x440 [ 80.720279][ T5716] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 80.726982][ T5716] ? __lock_acquire+0x1916/0x5df0 [ 80.732087][ T5716] ___sys_sendmsg+0xdb/0x160 [ 80.736679][ T5716] ? do_recvmmsg+0x560/0x560 [ 80.741389][ T5716] ? __fget_files+0x1a7/0x3c0 [ 80.746065][ T5716] ? lock_downgrade+0x690/0x690 [ 80.751010][ T5716] ? task_mm_cid_work+0x3aa/0x920 [ 80.756025][ T5716] ? lock_downgrade+0x690/0x690 [ 80.760970][ T5716] ? futex_wake+0x2fe/0x3f0 [ 80.765530][ T5716] ? __fget_files+0x1bf/0x3c0 [ 80.770393][ T5716] ? __fget_light+0xb9/0x210 [ 80.775256][ T5716] __sys_sendmsg+0xc7/0x160 [ 80.779829][ T5716] ? __sys_sendmsg_sock+0x20/0x20 [ 80.784886][ T5716] ? syscall_enter_from_user_mode+0x26/0x80 [ 80.790966][ T5716] ? lockdep_hardirqs_on+0x7d/0x100 [ 80.796175][ T5716] do_syscall_64+0x39/0xb0 [ 80.800657][ T5716] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.806584][ T5716] RIP: 0033:0x7ffa74c8c0f9 [ 80.811164][ T5716] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 80.831030][ T5716] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.839488][ T5716] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 80.847756][ T5716] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 80.856205][ T5716] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 80.864447][ T5716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.872710][ T5716] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 80.880938][ T5716] [ 80.890249][ T5716] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 80.901916][ T5716] CPU: 0 PID: 5716 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 80.910443][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 80.920616][ T5716] Call Trace: [ 80.924067][ T5716] [ 80.927006][ T5716] dump_stack_lvl+0x8e/0xb0 [ 80.931537][ T5716] ccid3_hc_tx_packet_sent+0xde/0x140 [ 80.937114][ T5716] dccp_xmit_packet+0x28a/0x680 [ 80.942129][ T5716] dccp_write_xmit+0x112/0x190 [ 80.946931][ T5716] dccp_sendmsg+0x78a/0xa30 [ 80.951487][ T5716] ? find_held_lock+0x2d/0x110 [ 80.956341][ T5716] ? dccp_done+0xd0/0xd0 [ 80.960601][ T5716] ? __might_fault+0xc4/0x170 [ 80.965297][ T5716] ? inet_send_prepare+0x3e0/0x3e0 [ 80.970398][ T5716] sock_sendmsg+0xc0/0x150 [ 80.974919][ T5716] ____sys_sendmsg+0x5ff/0x8f0 [ 80.979862][ T5716] ? kernel_sendmsg+0x30/0x30 [ 80.984532][ T5716] ? __copy_msghdr+0x440/0x440 [ 80.989318][ T5716] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 80.995309][ T5716] ? __lock_acquire+0x1916/0x5df0 [ 81.000336][ T5716] ___sys_sendmsg+0xdb/0x160 [ 81.005005][ T5716] ? do_recvmmsg+0x560/0x560 [ 81.009589][ T5716] ? __fget_files+0x1a7/0x3c0 [ 81.014252][ T5716] ? lock_downgrade+0x690/0x690 [ 81.019178][ T5716] ? task_mm_cid_work+0x3aa/0x920 [ 81.024285][ T5716] ? lock_downgrade+0x690/0x690 [ 81.029369][ T5716] ? futex_wake+0x2fe/0x3f0 [ 81.033857][ T5716] ? __fget_files+0x1bf/0x3c0 [ 81.038533][ T5716] ? __fget_light+0xb9/0x210 [ 81.043188][ T5716] __sys_sendmsg+0xc7/0x160 [ 81.047678][ T5716] ? __sys_sendmsg_sock+0x20/0x20 [ 81.052787][ T5716] ? task_work_run+0x147/0x220 [ 81.057539][ T5716] ? syscall_enter_from_user_mode+0x26/0x80 [ 81.063496][ T5716] ? lockdep_hardirqs_on+0x7d/0x100 [ 81.068673][ T5716] do_syscall_64+0x39/0xb0 [ 81.073163][ T5716] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 81.079047][ T5716] RIP: 0033:0x7ffa74c8c0f9 [ 81.083445][ T5716] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 81.103244][ T5716] RSP: 002b:00007ffa759c3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.111836][ T5716] RAX: ffffffffffffffda RBX: 00007ffa74dabf80 RCX: 00007ffa74c8c0f9 [ 81.119818][ T5716] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 81.128029][ T5716] RBP: 00007ffa74ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 81.136236][ T5716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.144298][ T5716] R13: 00007ffe63f6897f R14: 00007ffa759c3300 R15: 0000000000022000 [ 81.152689][ T5716] [ 81.187051][ T5740] dccp_xmit_packet: Payload too large (65475) for featneg. [ 81.199573][ T5740] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 81.211498][ T5740] CPU: 0 PID: 5740 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 81.220013][ T5740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 81.230076][ T5740] Call Trace: [ 81.233428][ T5740] [ 81.236351][ T5740] dump_stack_lvl+0x8e/0xb0 [ 81.240927][ T5740] ccid3_hc_tx_packet_sent+0xde/0x140 [ 81.246325][ T5740] dccp_xmit_packet+0x28a/0x680 [ 81.251693][ T5740] dccp_write_xmit+0x112/0x190 [ 81.256561][ T5740] dccp_sendmsg+0x78a/0xa30 [ 81.261320][ T5740] ? find_held_lock+0x2d/0x110 [ 81.266161][ T5740] ? dccp_done+0xd0/0xd0 [ 81.270526][ T5740] ? __might_fault+0xc4/0x170 [ 81.275301][ T5740] ? inet_send_prepare+0x3e0/0x3e0 [ 81.280734][ T5740] sock_sendmsg+0xc0/0x150 [ 81.285152][ T5740] ____sys_sendmsg+0x5ff/0x8f0 [ 81.289895][ T5740] ? kernel_sendmsg+0x30/0x30 [ 81.294545][ T5740] ? __copy_msghdr+0x440/0x440 [ 81.299448][ T5740] ? try_to_wake_up+0xdda/0x1c40 [ 81.304460][ T5740] ___sys_sendmsg+0xdb/0x160 [ 81.309046][ T5740] ? do_recvmmsg+0x560/0x560 [ 81.313893][ T5740] ? __fget_files+0x1a7/0x3c0 [ 81.318832][ T5740] ? lock_downgrade+0x690/0x690 [ 81.323860][ T5740] ? do_raw_spin_unlock+0x175/0x230 [ 81.329070][ T5740] ? futex_wake+0x2fe/0x3f0