Warning: Permanently added '10.128.10.32' (ECDSA) to the list of known hosts. 2023/03/21 15:11:37 ignoring optional flag "sandboxArg"="0" 2023/03/21 15:11:37 parsed 1 programs 2023/03/21 15:11:37 executed programs: 0 [ 119.970718][ T4399] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.979418][ T4399] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.988057][ T4399] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.996781][ T4399] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.004407][ T4399] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 120.012808][ T4399] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.146941][ T5492] chnl_net:caif_netlink_parms(): no params data found [ 120.202078][ T5492] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.209854][ T5492] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.217349][ T5492] bridge_slave_0: entered allmulticast mode [ 120.224997][ T5492] bridge_slave_0: entered promiscuous mode [ 120.233548][ T5492] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.241127][ T5492] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.249440][ T5492] bridge_slave_1: entered allmulticast mode [ 120.256747][ T5492] bridge_slave_1: entered promiscuous mode [ 120.281261][ T5492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.292529][ T5492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.321384][ T5492] team0: Port device team_slave_0 added [ 120.329580][ T5492] team0: Port device team_slave_1 added [ 120.352586][ T5492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.359895][ T5492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.386465][ T5492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.399199][ T5492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.407434][ T5492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.435313][ T5492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.473642][ T5492] hsr_slave_0: entered promiscuous mode [ 120.480179][ T5492] hsr_slave_1: entered promiscuous mode [ 120.960397][ T5492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.977750][ T5492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.988994][ T5492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.999183][ T5492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.020816][ T5492] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.028063][ T5492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.035512][ T5492] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.043145][ T5492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.100989][ T5492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.114527][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.125374][ T896] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.134220][ T896] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.144510][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 121.161731][ T5492] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.172582][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.183257][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.192173][ T896] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.199336][ T896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.219686][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.229941][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.240286][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.247751][ T5115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.257458][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.266853][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.286168][ T5492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.299783][ T5492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.313472][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.324914][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.334514][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.345500][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.354462][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.364762][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.375019][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.385453][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.399236][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.407975][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.537944][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.545427][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.558326][ T5492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.579324][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.589478][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.611534][ T5492] veth0_vlan: entered promiscuous mode [ 121.618822][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.628464][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.644071][ T5492] veth1_vlan: entered promiscuous mode [ 121.652343][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.661140][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.669356][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.694090][ T5492] veth0_macvtap: entered promiscuous mode [ 121.701427][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 121.711947][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.720948][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.732887][ T5492] veth1_macvtap: entered promiscuous mode [ 121.742288][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.751156][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.770626][ T5492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.779517][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.789503][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.802570][ T5492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.813445][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.823188][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.834181][ T5492] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.844228][ T5492] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.853915][ T5492] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.863400][ T5492] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.919215][ T2859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.937362][ T2859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.945253][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.954240][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.966320][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.974474][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.024048][ T5588] dccp_xmit_packet: Payload too large (65475) for featneg. [ 122.038279][ T4399] Bluetooth: hci0: command 0x0409 tx timeout [ 122.083441][ T5593] dccp_xmit_packet: Payload too large (65475) for featneg. [ 122.125895][ T5596] dccp_xmit_packet: Payload too large (65475) for featneg. [ 122.143255][ T5596] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 122.154930][ T5596] CPU: 1 PID: 5596 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 122.163547][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 122.173611][ T5596] Call Trace: [ 122.177085][ T5596] [ 122.180036][ T5596] dump_stack_lvl+0x8e/0xb0 [ 122.184918][ T5596] ccid3_hc_tx_packet_sent+0xde/0x140 [ 122.190481][ T5596] dccp_xmit_packet+0x28a/0x680 [ 122.195514][ T5596] dccp_write_xmit+0x112/0x190 [ 122.200472][ T5596] dccp_sendmsg+0x79e/0xa40 [ 122.205071][ T5596] ? _copy_from_user+0xb8/0xe0 [ 122.209855][ T5596] ? dccp_done+0xd0/0xd0 [ 122.214116][ T5596] ? inet_send_prepare+0x3e0/0x3e0 [ 122.219208][ T5596] sock_sendmsg+0xc0/0x150 [ 122.223693][ T5596] ____sys_sendmsg+0x5ff/0x8f0 [ 122.228565][ T5596] ? kernel_sendmsg+0x30/0x30 [ 122.233239][ T5596] ? __copy_msghdr+0x440/0x440 [ 122.237991][ T5596] ? try_to_wake_up+0xdda/0x1c40 [ 122.242935][ T5596] ___sys_sendmsg+0xdb/0x160 [ 122.247548][ T5596] ? do_recvmmsg+0x560/0x560 [ 122.252403][ T5596] ? __fget_files+0x1a7/0x3c0 [ 122.257059][ T5596] ? lock_downgrade+0x690/0x690 [ 122.262041][ T5596] ? do_raw_spin_unlock+0x175/0x230 [ 122.267332][ T5596] ? futex_wake+0x2fe/0x3f0 [ 122.272603][ T5596] ? __fget_files+0x1bf/0x3c0 [ 122.277299][ T5596] ? __fget_light+0xb9/0x210 [ 122.281893][ T5596] __sys_sendmsg+0xc7/0x160 [ 122.286462][ T5596] ? __sys_sendmsg_sock+0x20/0x20 [ 122.291651][ T5596] ? syscall_enter_from_user_mode+0x26/0xb0 [ 122.297553][ T5596] ? lockdep_hardirqs_on+0x7d/0x100 [ 122.302748][ T5596] do_syscall_64+0x39/0xb0 [ 122.307153][ T5596] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.313200][ T5596] RIP: 0033:0x7fb49308c0f9 [ 122.317592][ T5596] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 122.338577][ T5596] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.347066][ T5596] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 122.355024][ T5596] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 122.362972][ T5596] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 122.370945][ T5596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.378983][ T5596] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 122.386947][ T5596] [ 122.400625][ T5596] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 122.417024][ T5596] CPU: 1 PID: 5596 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 122.425841][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 122.436193][ T5596] Call Trace: [ 122.439481][ T5596] [ 122.442419][ T5596] dump_stack_lvl+0x8e/0xb0 [ 122.446945][ T5596] ccid3_hc_tx_packet_sent+0xde/0x140 [ 122.452466][ T5596] dccp_xmit_packet+0x28a/0x680 [ 122.457330][ T5596] dccp_write_xmit+0x112/0x190 [ 122.462189][ T5596] dccp_sendmsg+0x79e/0xa40 [ 122.466698][ T5596] ? _copy_from_user+0xb8/0xe0 [ 122.473380][ T5596] ? dccp_done+0xd0/0xd0 [ 122.477749][ T5596] ? inet_send_prepare+0x3e0/0x3e0 [ 122.482975][ T5596] sock_sendmsg+0xc0/0x150 [ 122.492784][ T5596] ____sys_sendmsg+0x5ff/0x8f0 [ 122.497920][ T5596] ? kernel_sendmsg+0x30/0x30 [ 122.502966][ T5596] ? __copy_msghdr+0x440/0x440 [ 122.507937][ T5596] ? try_to_wake_up+0xdda/0x1c40 [ 122.512899][ T5596] ___sys_sendmsg+0xdb/0x160 [ 122.517507][ T5596] ? do_recvmmsg+0x560/0x560 [ 122.522203][ T5596] ? __fget_files+0x1a7/0x3c0 [ 122.527346][ T5596] ? lock_downgrade+0x690/0x690 [ 122.532449][ T5596] ? do_raw_spin_unlock+0x175/0x230 [ 122.537732][ T5596] ? futex_wake+0x2fe/0x3f0 [ 122.542251][ T5596] ? __fget_files+0x1bf/0x3c0 [ 122.546922][ T5596] ? __fget_light+0xb9/0x210 [ 122.551844][ T5596] __sys_sendmsg+0xc7/0x160 [ 122.556346][ T5596] ? __sys_sendmsg_sock+0x20/0x20 [ 122.561356][ T5596] ? syscall_enter_from_user_mode+0x26/0xb0 [ 122.567490][ T5596] ? lockdep_hardirqs_on+0x7d/0x100 [ 122.573906][ T5596] do_syscall_64+0x39/0xb0 [ 122.578512][ T5596] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.584570][ T5596] RIP: 0033:0x7fb49308c0f9 [ 122.588975][ T5596] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 122.608661][ T5596] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.621950][ T5596] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 122.629937][ T5596] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 122.637910][ T5596] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 122.646123][ T5596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.654071][ T5596] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 122.662119][ T5596] [ 122.672269][ T5596] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 122.683928][ T5596] CPU: 0 PID: 5596 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 122.692523][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 122.702746][ T5596] Call Trace: [ 122.706101][ T5596] [ 122.709029][ T5596] dump_stack_lvl+0x8e/0xb0 [ 122.713626][ T5596] ccid3_hc_tx_packet_sent+0xde/0x140 [ 122.719086][ T5596] dccp_xmit_packet+0x28a/0x680 [ 122.723969][ T5596] dccp_write_xmit+0x112/0x190 [ 122.728735][ T5596] dccp_sendmsg+0x79e/0xa40 [ 122.733260][ T5596] ? _copy_from_user+0xb8/0xe0 [ 122.738129][ T5596] ? dccp_done+0xd0/0xd0 [ 122.742386][ T5596] ? inet_send_prepare+0x3e0/0x3e0 [ 122.747518][ T5596] sock_sendmsg+0xc0/0x150 [ 122.751944][ T5596] ____sys_sendmsg+0x5ff/0x8f0 [ 122.756724][ T5596] ? kernel_sendmsg+0x30/0x30 [ 122.761494][ T5596] ? __copy_msghdr+0x440/0x440 [ 122.766449][ T5596] ? try_to_wake_up+0xdda/0x1c40 [ 122.771574][ T5596] ___sys_sendmsg+0xdb/0x160 [ 122.776303][ T5596] ? do_recvmmsg+0x560/0x560 [ 122.781347][ T5596] ? __fget_files+0x1a7/0x3c0 [ 122.786202][ T5596] ? lock_downgrade+0x690/0x690 [ 122.791069][ T5596] ? do_raw_spin_unlock+0x175/0x230 [ 122.796266][ T5596] ? futex_wake+0x2fe/0x3f0 [ 122.800950][ T5596] ? __fget_files+0x1bf/0x3c0 [ 122.805654][ T5596] ? __fget_light+0xb9/0x210 [ 122.810304][ T5596] __sys_sendmsg+0xc7/0x160 [ 122.814900][ T5596] ? __sys_sendmsg_sock+0x20/0x20 [ 122.819946][ T5596] ? syscall_enter_from_user_mode+0x26/0xb0 [ 122.825947][ T5596] ? lockdep_hardirqs_on+0x7d/0x100 [ 122.831193][ T5596] do_syscall_64+0x39/0xb0 [ 122.835737][ T5596] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.842800][ T5596] RIP: 0033:0x7fb49308c0f9 [ 122.847574][ T5596] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 122.867724][ T5596] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.876263][ T5596] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 122.884757][ T5596] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 122.892896][ T5596] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 122.900864][ T5596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.908839][ T5596] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 122.916848][ T5596] [ 122.923246][ T5596] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 122.937938][ T5596] CPU: 0 PID: 5596 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 122.946726][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 122.956972][ T5596] Call Trace: [ 122.960816][ T5596] [ 122.963975][ T5596] dump_stack_lvl+0x8e/0xb0 [ 122.968491][ T5596] ccid3_hc_tx_packet_sent+0xde/0x140 [ 122.974223][ T5596] dccp_xmit_packet+0x28a/0x680 [ 122.979430][ T5596] dccp_write_xmit+0x112/0x190 [ 122.984377][ T5596] dccp_sendmsg+0x79e/0xa40 [ 122.988944][ T5596] ? _copy_from_user+0xb8/0xe0 [ 122.993815][ T5596] ? dccp_done+0xd0/0xd0 [ 122.998170][ T5596] ? inet_send_prepare+0x3e0/0x3e0 [ 123.003416][ T5596] sock_sendmsg+0xc0/0x150 [ 123.008192][ T5596] ____sys_sendmsg+0x5ff/0x8f0 [ 123.013319][ T5596] ? kernel_sendmsg+0x30/0x30 [ 123.018001][ T5596] ? __copy_msghdr+0x440/0x440 [ 123.022884][ T5596] ? try_to_wake_up+0xdda/0x1c40 [ 123.028003][ T5596] ___sys_sendmsg+0xdb/0x160 [ 123.032698][ T5596] ? do_recvmmsg+0x560/0x560 [ 123.037303][ T5596] ? __fget_files+0x1a7/0x3c0 [ 123.042017][ T5596] ? lock_downgrade+0x690/0x690 [ 123.047012][ T5596] ? do_raw_spin_unlock+0x175/0x230 [ 123.052254][ T5596] ? futex_wake+0x2fe/0x3f0 [ 123.056779][ T5596] ? __fget_files+0x1bf/0x3c0 [ 123.061512][ T5596] ? __fget_light+0xb9/0x210 [ 123.066287][ T5596] __sys_sendmsg+0xc7/0x160 [ 123.070826][ T5596] ? __sys_sendmsg_sock+0x20/0x20 [ 123.075985][ T5596] ? syscall_enter_from_user_mode+0x26/0xb0 [ 123.082059][ T5596] ? lockdep_hardirqs_on+0x7d/0x100 [ 123.087355][ T5596] do_syscall_64+0x39/0xb0 [ 123.092131][ T5596] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.098031][ T5596] RIP: 0033:0x7fb49308c0f9 [ 123.102451][ T5596] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 123.122319][ T5596] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.131008][ T5596] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 123.139160][ T5596] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 123.147219][ T5596] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 123.155282][ T5596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.163288][ T5596] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 123.171362][ T5596] [ 123.211150][ T5629] dccp_xmit_packet: Payload too large (65475) for featneg. [ 123.227915][ T5629] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 123.239576][ T5629] CPU: 0 PID: 5629 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 123.248253][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 123.258317][ T5629] Call Trace: [ 123.261597][ T5629] [ 123.264532][ T5629] dump_stack_lvl+0x8e/0xb0 [ 123.269129][ T5629] ccid3_hc_tx_packet_sent+0xde/0x140 [ 123.274765][ T5629] dccp_xmit_packet+0x28a/0x680 [ 123.279668][ T5629] dccp_write_xmit+0x112/0x190 [ 123.284630][ T5629] dccp_sendmsg+0x79e/0xa40 [ 123.289222][ T5629] ? _copy_from_user+0xb8/0xe0 [ 123.293970][ T5629] ? dccp_done+0xd0/0xd0 [ 123.298197][ T5629] ? inet_send_prepare+0x3e0/0x3e0 [ 123.303286][ T5629] sock_sendmsg+0xc0/0x150 [ 123.307782][ T5629] ____sys_sendmsg+0x5ff/0x8f0 [ 123.312524][ T5629] ? kernel_sendmsg+0x30/0x30 [ 123.317177][ T5629] ? __copy_msghdr+0x440/0x440 [ 123.321924][ T5629] ? try_to_wake_up+0xdda/0x1c40 [ 123.327174][ T5629] ___sys_sendmsg+0xdb/0x160 [ 123.331776][ T5629] ? do_recvmmsg+0x560/0x560 [ 123.336361][ T5629] ? __fget_files+0x1a7/0x3c0 [ 123.341280][ T5629] ? lock_downgrade+0x690/0x690 [ 123.346133][ T5629] ? do_raw_spin_unlock+0x175/0x230 [ 123.351515][ T5629] ? futex_wake+0x2fe/0x3f0 [ 123.356012][ T5629] ? __fget_files+0x1bf/0x3c0 [ 123.362228][ T5629] ? __fget_light+0xb9/0x210 [ 123.366824][ T5629] __sys_sendmsg+0xc7/0x160 [ 123.371397][ T5629] ? __sys_sendmsg_sock+0x20/0x20 [ 123.376407][ T5629] ? syscall_enter_from_user_mode+0x26/0xb0 [ 123.382384][ T5629] ? lockdep_hardirqs_on+0x7d/0x100 [ 123.387559][ T5629] do_syscall_64+0x39/0xb0 [ 123.391974][ T5629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.398220][ T5629] RIP: 0033:0x7fb49308c0f9 [ 123.402699][ T5629] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 123.422478][ T5629] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.430882][ T5629] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 123.438833][ T5629] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 123.447041][ T5629] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 123.455179][ T5629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.463595][ T5629] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 123.472312][ T5629] [ 123.486887][ T5629] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 123.498536][ T5629] CPU: 1 PID: 5629 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 123.507428][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 123.518699][ T5629] Call Trace: [ 123.521985][ T5629] [ 123.524901][ T5629] dump_stack_lvl+0x8e/0xb0 [ 123.529539][ T5629] ccid3_hc_tx_packet_sent+0xde/0x140 [ 123.534907][ T5629] dccp_xmit_packet+0x28a/0x680 [ 123.539766][ T5629] dccp_write_xmit+0x112/0x190 [ 123.544634][ T5629] dccp_sendmsg+0x79e/0xa40 [ 123.549199][ T5629] ? _copy_from_user+0xb8/0xe0 [ 123.553965][ T5629] ? dccp_done+0xd0/0xd0 [ 123.558196][ T5629] ? inet_send_prepare+0x3e0/0x3e0 [ 123.563317][ T5629] sock_sendmsg+0xc0/0x150 [ 123.567905][ T5629] ____sys_sendmsg+0x5ff/0x8f0 [ 123.572647][ T5629] ? kernel_sendmsg+0x30/0x30 [ 123.577295][ T5629] ? __copy_msghdr+0x440/0x440 [ 123.582301][ T5629] ? try_to_wake_up+0xdda/0x1c40 [ 123.587526][ T5629] ___sys_sendmsg+0xdb/0x160 [ 123.592228][ T5629] ? do_recvmmsg+0x560/0x560 [ 123.597158][ T5629] ? __fget_files+0x1a7/0x3c0 [ 123.601824][ T5629] ? lock_downgrade+0x690/0x690 [ 123.606664][ T5629] ? do_raw_spin_unlock+0x175/0x230 [ 123.611944][ T5629] ? futex_wake+0x2fe/0x3f0 [ 123.616514][ T5629] ? __fget_files+0x1bf/0x3c0 [ 123.621233][ T5629] ? __fget_light+0xb9/0x210 [ 123.625822][ T5629] __sys_sendmsg+0xc7/0x160 [ 123.630307][ T5629] ? __sys_sendmsg_sock+0x20/0x20 [ 123.636271][ T5629] ? syscall_enter_from_user_mode+0x26/0xb0 [ 123.642400][ T5629] ? lockdep_hardirqs_on+0x7d/0x100 [ 123.647576][ T5629] do_syscall_64+0x39/0xb0 [ 123.651974][ T5629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.657848][ T5629] RIP: 0033:0x7fb49308c0f9 [ 123.662434][ T5629] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 123.682814][ T5629] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.691430][ T5629] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 123.699386][ T5629] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 123.707512][ T5629] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 123.715545][ T5629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.723493][ T5629] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 123.732286][ T5629] [ 123.746192][ T5629] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 123.762379][ T5629] CPU: 1 PID: 5629 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 123.771332][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 123.781740][ T5629] Call Trace: [ 123.785019][ T5629] [ 123.787936][ T5629] dump_stack_lvl+0x8e/0xb0 [ 123.792421][ T5629] ccid3_hc_tx_packet_sent+0xde/0x140 [ 123.797785][ T5629] dccp_xmit_packet+0x28a/0x680 [ 123.802708][ T5629] dccp_write_xmit+0x112/0x190 [ 123.807538][ T5629] dccp_sendmsg+0x79e/0xa40 [ 123.812021][ T5629] ? _copy_from_user+0xb8/0xe0 [ 123.816794][ T5629] ? dccp_done+0xd0/0xd0 [ 123.821017][ T5629] ? inet_send_prepare+0x3e0/0x3e0 [ 123.826277][ T5629] sock_sendmsg+0xc0/0x150 [ 123.830843][ T5629] ____sys_sendmsg+0x5ff/0x8f0 [ 123.835670][ T5629] ? kernel_sendmsg+0x30/0x30 [ 123.840334][ T5629] ? __copy_msghdr+0x440/0x440 [ 123.845183][ T5629] ? try_to_wake_up+0xdda/0x1c40 [ 123.850169][ T5629] ___sys_sendmsg+0xdb/0x160 [ 123.855012][ T5629] ? do_recvmmsg+0x560/0x560 [ 123.859754][ T5629] ? __fget_files+0x1a7/0x3c0 [ 123.864429][ T5629] ? lock_downgrade+0x690/0x690 [ 123.869270][ T5629] ? do_raw_spin_unlock+0x175/0x230 [ 123.874463][ T5629] ? futex_wake+0x2fe/0x3f0 [ 123.879126][ T5629] ? __fget_files+0x1bf/0x3c0 [ 123.883781][ T5629] ? __fget_light+0xb9/0x210 [ 123.888455][ T5629] __sys_sendmsg+0xc7/0x160 [ 123.893142][ T5629] ? __sys_sendmsg_sock+0x20/0x20 [ 123.898604][ T5629] ? syscall_enter_from_user_mode+0x26/0xb0 [ 123.905039][ T5629] ? lockdep_hardirqs_on+0x7d/0x100 [ 123.910239][ T5629] do_syscall_64+0x39/0xb0 [ 123.914788][ T5629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.921027][ T5629] RIP: 0033:0x7fb49308c0f9 [ 123.925434][ T5629] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 123.945193][ T5629] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.953668][ T5629] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 123.961644][ T5629] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 123.969782][ T5629] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 123.977747][ T5629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.985889][ T5629] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 123.993847][ T5629] [ 124.003004][ T5629] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 124.017917][ T5629] CPU: 0 PID: 5629 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 124.026532][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 124.036768][ T5629] Call Trace: [ 124.040095][ T5629] [ 124.043120][ T5629] dump_stack_lvl+0x8e/0xb0 [ 124.047848][ T5629] ccid3_hc_tx_packet_sent+0xde/0x140 [ 124.053723][ T5629] dccp_xmit_packet+0x28a/0x680 [ 124.058588][ T5629] dccp_write_xmit+0x112/0x190 [ 124.063354][ T5629] dccp_sendmsg+0x79e/0xa40 [ 124.068041][ T5629] ? _copy_from_user+0xb8/0xe0 [ 124.072812][ T5629] ? dccp_done+0xd0/0xd0 [ 124.077154][ T5629] ? inet_send_prepare+0x3e0/0x3e0 [ 124.082573][ T5629] sock_sendmsg+0xc0/0x150 [ 124.087095][ T5629] ____sys_sendmsg+0x5ff/0x8f0 [ 124.091874][ T5629] ? kernel_sendmsg+0x30/0x30 [ 124.096736][ T5629] ? __copy_msghdr+0x440/0x440 [ 124.101597][ T5629] ? try_to_wake_up+0xdda/0x1c40 [ 124.106353][ T4399] Bluetooth: hci0: command 0x041b tx timeout [ 124.106877][ T5629] ___sys_sendmsg+0xdb/0x160 [ 124.117500][ T5629] ? do_recvmmsg+0x560/0x560 [ 124.122171][ T5629] ? __fget_files+0x1a7/0x3c0 [ 124.126828][ T5629] ? lock_downgrade+0x690/0x690 [ 124.131653][ T5629] ? do_raw_spin_unlock+0x175/0x230 [ 124.137021][ T5629] ? futex_wake+0x2fe/0x3f0 [ 124.141802][ T5629] ? __fget_files+0x1bf/0x3c0 [ 124.146589][ T5629] ? __fget_light+0xb9/0x210 [ 124.151634][ T5629] __sys_sendmsg+0xc7/0x160 [ 124.156164][ T5629] ? __sys_sendmsg_sock+0x20/0x20 [ 124.161211][ T5629] ? syscall_enter_from_user_mode+0x26/0xb0 [ 124.167174][ T5629] ? lockdep_hardirqs_on+0x7d/0x100 [ 124.172382][ T5629] do_syscall_64+0x39/0xb0 [ 124.177014][ T5629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.182885][ T5629] RIP: 0033:0x7fb49308c0f9 [ 124.187278][ T5629] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 124.207663][ T5629] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.216328][ T5629] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 124.224336][ T5629] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 124.232737][ T5629] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 124.240927][ T5629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.249140][ T5629] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 124.257410][ T5629] [ 124.325168][ T5639] dccp_xmit_packet: Payload too large (65475) for featneg. [ 124.343896][ T5639] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 124.357089][ T5639] CPU: 0 PID: 5639 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 124.365701][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 124.375961][ T5639] Call Trace: [ 124.379252][ T5639] [ 124.382188][ T5639] dump_stack_lvl+0x8e/0xb0 [ 124.387042][ T5639] ccid3_hc_tx_packet_sent+0xde/0x140 [ 124.392503][ T5639] dccp_xmit_packet+0x28a/0x680 [ 124.397383][ T5639] dccp_write_xmit+0x112/0x190 [ 124.402242][ T5639] dccp_sendmsg+0x79e/0xa40 [ 124.406924][ T5639] ? _copy_from_user+0xb8/0xe0 [ 124.411766][ T5639] ? dccp_done+0xd0/0xd0 [ 124.416128][ T5639] ? inet_send_prepare+0x3e0/0x3e0 [ 124.421404][ T5639] sock_sendmsg+0xc0/0x150 [ 124.425808][ T5639] ____sys_sendmsg+0x5ff/0x8f0 [ 124.430551][ T5639] ? kernel_sendmsg+0x30/0x30 [ 124.435236][ T5639] ? __copy_msghdr+0x440/0x440 [ 124.440314][ T5639] ___sys_sendmsg+0xdb/0x160 [ 124.445150][ T5639] ? do_recvmmsg+0x560/0x560 [ 124.450435][ T5639] ? __fget_files+0x1a7/0x3c0 [ 124.455185][ T5639] ? lock_downgrade+0x690/0x690 [ 124.460110][ T5639] ? futex_wake+0xed/0x3f0 [ 124.464609][ T5639] ? __fget_files+0x1bf/0x3c0 [ 124.469711][ T5639] ? __fget_light+0xb9/0x210 [ 124.474281][ T5639] __sys_sendmsg+0xc7/0x160 [ 124.478769][ T5639] ? __sys_sendmsg_sock+0x20/0x20 [ 124.483805][ T5639] ? syscall_enter_from_user_mode+0x26/0xb0 [ 124.490022][ T5639] ? lockdep_hardirqs_on+0x7d/0x100 [ 124.495204][ T5639] do_syscall_64+0x39/0xb0 [ 124.499603][ T5639] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.505554][ T5639] RIP: 0033:0x7fb49308c0f9 [ 124.510129][ T5639] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 124.529814][ T5639] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.538229][ T5639] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 124.546298][ T5639] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 124.554339][ T5639] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 124.562297][ T5639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.570337][ T5639] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 124.578751][ T5639] [ 124.586098][ T5639] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 124.598936][ T5639] CPU: 1 PID: 5639 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 124.607825][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 124.618141][ T5639] Call Trace: [ 124.621431][ T5639] [ 124.624361][ T5639] dump_stack_lvl+0x8e/0xb0 [ 124.628876][ T5639] ccid3_hc_tx_packet_sent+0xde/0x140 [ 124.634379][ T5639] dccp_xmit_packet+0x28a/0x680 [ 124.639475][ T5639] dccp_write_xmit+0x112/0x190 [ 124.644743][ T5639] dccp_sendmsg+0x79e/0xa40 [ 124.649313][ T5639] ? _copy_from_user+0xb8/0xe0 [ 124.654057][ T5639] ? dccp_done+0xd0/0xd0 [ 124.658303][ T5639] ? inet_send_prepare+0x3e0/0x3e0 [ 124.663495][ T5639] sock_sendmsg+0xc0/0x150 [ 124.667898][ T5639] ____sys_sendmsg+0x5ff/0x8f0 [ 124.672639][ T5639] ? kernel_sendmsg+0x30/0x30 [ 124.677379][ T5639] ? __copy_msghdr+0x440/0x440 [ 124.682130][ T5639] ___sys_sendmsg+0xdb/0x160 [ 124.686791][ T5639] ? do_recvmmsg+0x560/0x560 [ 124.691549][ T5639] ? __fget_files+0x1a7/0x3c0 [ 124.696231][ T5639] ? lock_downgrade+0x690/0x690 [ 124.701073][ T5639] ? futex_wake+0xed/0x3f0 [ 124.705491][ T5639] ? __fget_files+0x1bf/0x3c0 [ 124.710414][ T5639] ? __fget_light+0xb9/0x210 [ 124.715048][ T5639] __sys_sendmsg+0xc7/0x160 [ 124.719648][ T5639] ? __sys_sendmsg_sock+0x20/0x20 [ 124.724939][ T5639] ? syscall_enter_from_user_mode+0x26/0xb0 [ 124.731015][ T5639] ? lockdep_hardirqs_on+0x7d/0x100 [ 124.736318][ T5639] do_syscall_64+0x39/0xb0 [ 124.740802][ T5639] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.746773][ T5639] RIP: 0033:0x7fb49308c0f9 [ 124.751168][ T5639] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 124.771544][ T5639] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.780207][ T5639] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 124.788245][ T5639] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 124.796996][ T5639] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 124.805083][ T5639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.813032][ T5639] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 124.821120][ T5639] [ 124.830540][ T5639] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 124.842385][ T5639] CPU: 1 PID: 5639 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 124.850980][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 124.861653][ T5639] Call Trace: [ 124.865047][ T5639] [ 124.867980][ T5639] dump_stack_lvl+0x8e/0xb0 [ 124.872515][ T5639] ccid3_hc_tx_packet_sent+0xde/0x140 [ 124.877893][ T5639] dccp_xmit_packet+0x28a/0x680 [ 124.882799][ T5639] dccp_write_xmit+0x112/0x190 [ 124.887656][ T5639] dccp_sendmsg+0x79e/0xa40 [ 124.892169][ T5639] ? _copy_from_user+0xb8/0xe0 [ 124.896946][ T5639] ? dccp_done+0xd0/0xd0 [ 124.901288][ T5639] ? inet_send_prepare+0x3e0/0x3e0 [ 124.906406][ T5639] sock_sendmsg+0xc0/0x150 [ 124.910833][ T5639] ____sys_sendmsg+0x5ff/0x8f0 [ 124.915714][ T5639] ? kernel_sendmsg+0x30/0x30 [ 124.920415][ T5639] ? __copy_msghdr+0x440/0x440 [ 124.925206][ T5639] ___sys_sendmsg+0xdb/0x160 [ 124.930237][ T5639] ? do_recvmmsg+0x560/0x560 [ 124.935027][ T5639] ? __fget_files+0x1a7/0x3c0 [ 124.939806][ T5639] ? lock_downgrade+0x690/0x690 [ 124.944677][ T5639] ? futex_wake+0xed/0x3f0 [ 124.949106][ T5639] ? __fget_files+0x1bf/0x3c0 [ 124.953779][ T5639] ? __fget_light+0xb9/0x210 [ 124.958369][ T5639] __sys_sendmsg+0xc7/0x160 [ 124.962947][ T5639] ? __sys_sendmsg_sock+0x20/0x20 [ 124.968133][ T5639] ? syscall_enter_from_user_mode+0x26/0xb0 [ 124.974002][ T5639] ? lockdep_hardirqs_on+0x7d/0x100 [ 124.979382][ T5639] do_syscall_64+0x39/0xb0 [ 124.984041][ T5639] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.990036][ T5639] RIP: 0033:0x7fb49308c0f9 [ 124.994521][ T5639] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 125.015001][ T5639] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.023440][ T5639] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 125.031578][ T5639] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 125.039597][ T5639] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 125.052693][ T5639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.061103][ T5639] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 125.070084][ T5639] [ 125.075719][ T5639] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 125.089565][ T5639] CPU: 0 PID: 5639 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 125.098430][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 125.108847][ T5639] Call Trace: [ 125.112215][ T5639] [ 125.115229][ T5639] dump_stack_lvl+0x8e/0xb0 [ 125.119838][ T5639] ccid3_hc_tx_packet_sent+0xde/0x140 [ 125.125358][ T5639] dccp_xmit_packet+0x28a/0x680 [ 125.130226][ T5639] dccp_write_xmit+0x112/0x190 [ 125.135090][ T5639] dccp_sendmsg+0x79e/0xa40 [ 125.140043][ T5639] ? _copy_from_user+0xb8/0xe0 [ 125.144902][ T5639] ? dccp_done+0xd0/0xd0 [ 125.149260][ T5639] ? inet_send_prepare+0x3e0/0x3e0 [ 125.154382][ T5639] sock_sendmsg+0xc0/0x150 [ 125.158810][ T5639] ____sys_sendmsg+0x5ff/0x8f0 [ 125.163682][ T5639] ? kernel_sendmsg+0x30/0x30 [ 125.168709][ T5639] ? __copy_msghdr+0x440/0x440 [ 125.173585][ T5639] ___sys_sendmsg+0xdb/0x160 [ 125.178192][ T5639] ? do_recvmmsg+0x560/0x560 [ 125.182808][ T5639] ? __fget_files+0x1a7/0x3c0 [ 125.187667][ T5639] ? lock_downgrade+0x690/0x690 [ 125.192537][ T5639] ? futex_wake+0xed/0x3f0 [ 125.196969][ T5639] ? __fget_files+0x1bf/0x3c0 [ 125.201659][ T5639] ? __fget_light+0xb9/0x210 [ 125.206439][ T5639] __sys_sendmsg+0xc7/0x160 [ 125.210962][ T5639] ? __sys_sendmsg_sock+0x20/0x20 [ 125.216106][ T5639] ? syscall_enter_from_user_mode+0x26/0xb0 [ 125.222024][ T5639] ? lockdep_hardirqs_on+0x7d/0x100 [ 125.227284][ T5639] do_syscall_64+0x39/0xb0 [ 125.231841][ T5639] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.237791][ T5639] RIP: 0033:0x7fb49308c0f9 [ 125.242299][ T5639] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 125.261998][ T5639] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.270499][ T5639] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 2023/03/21 15:11:42 executed programs: 5 [ 125.278571][ T5639] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 125.286548][ T5639] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 125.294523][ T5639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.302507][ T5639] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 125.310583][ T5639] [ 125.342560][ T5663] dccp_xmit_packet: Payload too large (65475) for featneg. [ 125.359804][ T5663] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 125.371758][ T5663] CPU: 0 PID: 5663 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 125.380355][ T5663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 125.390931][ T5663] Call Trace: [ 125.394303][ T5663] [ 125.397240][ T5663] dump_stack_lvl+0x8e/0xb0 [ 125.401857][ T5663] ccid3_hc_tx_packet_sent+0xde/0x140 [ 125.407325][ T5663] dccp_xmit_packet+0x28a/0x680 [ 125.412230][ T5663] dccp_write_xmit+0x112/0x190 [ 125.417147][ T5663] dccp_sendmsg+0x79e/0xa40 [ 125.421761][ T5663] ? _copy_from_user+0xb8/0xe0 [ 125.427148][ T5663] ? dccp_done+0xd0/0xd0 [ 125.431412][ T5663] ? inet_send_prepare+0x3e0/0x3e0 [ 125.436896][ T5663] sock_sendmsg+0xc0/0x150 [ 125.441448][ T5663] ____sys_sendmsg+0x5ff/0x8f0 [ 125.446316][ T5663] ? kernel_sendmsg+0x30/0x30 [ 125.451003][ T5663] ? __copy_msghdr+0x440/0x440 [ 125.455876][ T5663] ? try_to_wake_up+0xdda/0x1c40 [ 125.460944][ T5663] ___sys_sendmsg+0xdb/0x160 [ 125.465552][ T5663] ? do_recvmmsg+0x560/0x560 [ 125.470286][ T5663] ? __fget_files+0x1a7/0x3c0 [ 125.475355][ T5663] ? lock_downgrade+0x690/0x690 [ 125.480311][ T5663] ? do_raw_spin_unlock+0x175/0x230 [ 125.485875][ T5663] ? futex_wake+0x2fe/0x3f0 [ 125.490475][ T5663] ? __fget_files+0x1bf/0x3c0 [ 125.495168][ T5663] ? __fget_light+0xb9/0x210 [ 125.500038][ T5663] __sys_sendmsg+0xc7/0x160 [ 125.504561][ T5663] ? __sys_sendmsg_sock+0x20/0x20 [ 125.509699][ T5663] ? syscall_enter_from_user_mode+0x26/0xb0 [ 125.516005][ T5663] ? lockdep_hardirqs_on+0x7d/0x100 [ 125.521304][ T5663] do_syscall_64+0x39/0xb0 [ 125.525745][ T5663] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.531823][ T5663] RIP: 0033:0x7fb49308c0f9 [ 125.536263][ T5663] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 125.555871][ T5663] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.564631][ T5663] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 125.572868][ T5663] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 125.582579][ T5663] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 125.590638][ T5663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.598962][ T5663] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 125.607267][ T5663] [ 125.611243][ T5663] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 125.622638][ T5663] CPU: 0 PID: 5663 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 125.631219][ T5663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 125.641437][ T5663] Call Trace: [ 125.644887][ T5663] [ 125.647813][ T5663] dump_stack_lvl+0x8e/0xb0 [ 125.652644][ T5663] ccid3_hc_tx_packet_sent+0xde/0x140 [ 125.657993][ T5663] dccp_xmit_packet+0x28a/0x680 [ 125.662993][ T5663] dccp_write_xmit+0x112/0x190 [ 125.667732][ T5663] dccp_sendmsg+0x79e/0xa40 [ 125.672260][ T5663] ? _copy_from_user+0xb8/0xe0 [ 125.677207][ T5663] ? dccp_done+0xd0/0xd0 [ 125.681706][ T5663] ? inet_send_prepare+0x3e0/0x3e0 [ 125.686803][ T5663] sock_sendmsg+0xc0/0x150 [ 125.691256][ T5663] ____sys_sendmsg+0x5ff/0x8f0 [ 125.696169][ T5663] ? kernel_sendmsg+0x30/0x30 [ 125.700908][ T5663] ? __copy_msghdr+0x440/0x440 [ 125.705669][ T5663] ? try_to_wake_up+0xdda/0x1c40 [ 125.710888][ T5663] ___sys_sendmsg+0xdb/0x160 [ 125.715560][ T5663] ? do_recvmmsg+0x560/0x560 [ 125.720131][ T5663] ? __fget_files+0x1a7/0x3c0 [ 125.725057][ T5663] ? lock_downgrade+0x690/0x690 [ 125.729973][ T5663] ? do_raw_spin_unlock+0x175/0x230 [ 125.735514][ T5663] ? futex_wake+0x2fe/0x3f0 [ 125.740398][ T5663] ? __fget_files+0x1bf/0x3c0 [ 125.745174][ T5663] ? __fget_light+0xb9/0x210 [ 125.750097][ T5663] __sys_sendmsg+0xc7/0x160 [ 125.754741][ T5663] ? __sys_sendmsg_sock+0x20/0x20 [ 125.759927][ T5663] ? syscall_enter_from_user_mode+0x26/0xb0 [ 125.765887][ T5663] ? lockdep_hardirqs_on+0x7d/0x100 [ 125.771239][ T5663] do_syscall_64+0x39/0xb0 [ 125.775640][ T5663] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.781551][ T5663] RIP: 0033:0x7fb49308c0f9 [ 125.786123][ T5663] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 125.806255][ T5663] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.814769][ T5663] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 125.822983][ T5663] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 125.831062][ T5663] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 125.839125][ T5663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.847869][ T5663] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 125.856362][ T5663] [ 125.861949][ T5663] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 125.875831][ T5663] CPU: 1 PID: 5663 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 125.884574][ T5663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 125.895071][ T5663] Call Trace: [ 125.898370][ T5663] [ 125.901550][ T5663] dump_stack_lvl+0x8e/0xb0 [ 125.906154][ T5663] ccid3_hc_tx_packet_sent+0xde/0x140 [ 125.911521][ T5663] dccp_xmit_packet+0x28a/0x680 [ 125.916350][ T5663] dccp_write_xmit+0x112/0x190 [ 125.921297][ T5663] dccp_sendmsg+0x79e/0xa40 [ 125.925896][ T5663] ? _copy_from_user+0xb8/0xe0 [ 125.930652][ T5663] ? dccp_done+0xd0/0xd0 [ 125.934965][ T5663] ? inet_send_prepare+0x3e0/0x3e0 [ 125.940072][ T5663] sock_sendmsg+0xc0/0x150 [ 125.944553][ T5663] ____sys_sendmsg+0x5ff/0x8f0 [ 125.949336][ T5663] ? kernel_sendmsg+0x30/0x30 [ 125.954088][ T5663] ? __copy_msghdr+0x440/0x440 [ 125.959019][ T5663] ? try_to_wake_up+0xdda/0x1c40 [ 125.963936][ T5663] ___sys_sendmsg+0xdb/0x160 [ 125.968701][ T5663] ? do_recvmmsg+0x560/0x560 [ 125.973355][ T5663] ? __fget_files+0x1a7/0x3c0 [ 125.978096][ T5663] ? lock_downgrade+0x690/0x690 [ 125.982929][ T5663] ? do_raw_spin_unlock+0x175/0x230 [ 125.988220][ T5663] ? futex_wake+0x2fe/0x3f0 [ 125.992834][ T5663] ? __fget_files+0x1bf/0x3c0 [ 125.997514][ T5663] ? __fget_light+0xb9/0x210 [ 126.002184][ T5663] __sys_sendmsg+0xc7/0x160 [ 126.007041][ T5663] ? __sys_sendmsg_sock+0x20/0x20 [ 126.012535][ T5663] ? syscall_enter_from_user_mode+0x26/0xb0 [ 126.018849][ T5663] ? lockdep_hardirqs_on+0x7d/0x100 [ 126.024033][ T5663] do_syscall_64+0x39/0xb0 [ 126.028438][ T5663] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.034332][ T5663] RIP: 0033:0x7fb49308c0f9 [ 126.038829][ T5663] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 126.058851][ T5663] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.067504][ T5663] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 126.075537][ T5663] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 126.083745][ T5663] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 126.091691][ T5663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.099648][ T5663] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 126.107706][ T5663] [ 126.123589][ T5663] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 126.135414][ T5663] CPU: 1 PID: 5663 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 126.144100][ T5663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 126.154340][ T5663] Call Trace: [ 126.157731][ T5663] [ 126.160739][ T5663] dump_stack_lvl+0x8e/0xb0 [ 126.165256][ T5663] ccid3_hc_tx_packet_sent+0xde/0x140 [ 126.170658][ T5663] dccp_xmit_packet+0x28a/0x680 [ 126.175609][ T5663] dccp_write_xmit+0x112/0x190 [ 126.181250][ T5663] dccp_sendmsg+0x79e/0xa40 [ 126.185934][ T5663] ? _copy_from_user+0xb8/0xe0 [ 126.190801][ T5663] ? dccp_done+0xd0/0xd0 [ 126.195143][ T5663] ? inet_send_prepare+0x3e0/0x3e0 [ 126.200346][ T5663] sock_sendmsg+0xc0/0x150 [ 126.204975][ T5663] ____sys_sendmsg+0x5ff/0x8f0 [ 126.209836][ T5663] ? kernel_sendmsg+0x30/0x30 [ 126.214650][ T5663] ? __copy_msghdr+0x440/0x440 [ 126.219600][ T5663] ? try_to_wake_up+0xdda/0x1c40 [ 126.224815][ T5663] ___sys_sendmsg+0xdb/0x160 [ 126.229419][ T5663] ? do_recvmmsg+0x560/0x560 [ 126.234041][ T5663] ? __fget_files+0x1a7/0x3c0 [ 126.238726][ T5663] ? lock_downgrade+0x690/0x690 [ 126.243692][ T5663] ? do_raw_spin_unlock+0x175/0x230 [ 126.249102][ T5663] ? futex_wake+0x2fe/0x3f0 [ 126.253817][ T5663] ? __fget_files+0x1bf/0x3c0 [ 126.258515][ T5663] ? __fget_light+0xb9/0x210 [ 126.263243][ T5663] __sys_sendmsg+0xc7/0x160 [ 126.267801][ T5663] ? __sys_sendmsg_sock+0x20/0x20 [ 126.272861][ T5663] ? syscall_enter_from_user_mode+0x26/0xb0 [ 126.278764][ T5663] ? lockdep_hardirqs_on+0x7d/0x100 [ 126.283972][ T5663] do_syscall_64+0x39/0xb0 [ 126.288973][ T5663] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.294873][ T5663] RIP: 0033:0x7fb49308c0f9 [ 126.299296][ T5663] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 126.318998][ T5663] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.327593][ T5663] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 126.335853][ T5663] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 126.343831][ T5663] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 126.351803][ T5663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.359884][ T5663] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 126.368050][ T5663] [ 126.371264][ T5102] Bluetooth: hci0: command 0x040f tx timeout [ 126.402924][ T5692] dccp_xmit_packet: Payload too large (65475) for featneg. [ 126.444188][ T5697] dccp_xmit_packet: Payload too large (65475) for featneg. [ 126.487122][ T5699] dccp_xmit_packet: Payload too large (65475) for featneg. [ 126.503716][ T5699] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 126.515811][ T5699] CPU: 1 PID: 5699 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 126.524499][ T5699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 126.534649][ T5699] Call Trace: [ 126.537936][ T5699] [ 126.540869][ T5699] dump_stack_lvl+0x8e/0xb0 [ 126.545378][ T5699] ccid3_hc_tx_packet_sent+0xde/0x140 [ 126.550843][ T5699] dccp_xmit_packet+0x28a/0x680 [ 126.555697][ T5699] dccp_write_xmit+0x112/0x190 [ 126.560654][ T5699] dccp_sendmsg+0x79e/0xa40 [ 126.565163][ T5699] ? _copy_from_user+0xb8/0xe0 [ 126.570291][ T5699] ? dccp_done+0xd0/0xd0 [ 126.574828][ T5699] ? inet_send_prepare+0x3e0/0x3e0 [ 126.580114][ T5699] sock_sendmsg+0xc0/0x150 [ 126.584628][ T5699] ____sys_sendmsg+0x5ff/0x8f0 [ 126.589575][ T5699] ? kernel_sendmsg+0x30/0x30 [ 126.594255][ T5699] ? __copy_msghdr+0x440/0x440 [ 126.599041][ T5699] ? try_to_wake_up+0xdda/0x1c40 [ 126.604076][ T5699] ___sys_sendmsg+0xdb/0x160 [ 126.608773][ T5699] ? do_recvmmsg+0x560/0x560 [ 126.613370][ T5699] ? __fget_files+0x1a7/0x3c0 [ 126.618048][ T5699] ? lock_downgrade+0x690/0x690 [ 126.622914][ T5699] ? do_raw_spin_unlock+0x175/0x230 [ 126.628636][ T5699] ? futex_wake+0x2fe/0x3f0 [ 126.633155][ T5699] ? __fget_files+0x1bf/0x3c0 [ 126.638025][ T5699] ? __fget_light+0xb9/0x210 [ 126.642638][ T5699] __sys_sendmsg+0xc7/0x160 [ 126.647179][ T5699] ? __sys_sendmsg_sock+0x20/0x20 [ 126.652747][ T5699] ? syscall_enter_from_user_mode+0x26/0xb0 [ 126.658754][ T5699] ? lockdep_hardirqs_on+0x7d/0x100 [ 126.664149][ T5699] do_syscall_64+0x39/0xb0 [ 126.668882][ T5699] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.674965][ T5699] RIP: 0033:0x7fb49308c0f9 [ 126.679576][ T5699] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 126.699457][ T5699] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.707898][ T5699] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 126.715891][ T5699] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 126.723880][ T5699] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 126.731858][ T5699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.739836][ T5699] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 126.747835][ T5699] [ 126.757480][ T5699] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 126.776429][ T5699] CPU: 0 PID: 5699 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 126.785238][ T5699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 126.795488][ T5699] Call Trace: [ 126.798780][ T5699] [ 126.801731][ T5699] dump_stack_lvl+0x8e/0xb0 [ 126.806246][ T5699] ccid3_hc_tx_packet_sent+0xde/0x140 [ 126.811631][ T5699] dccp_xmit_packet+0x28a/0x680 [ 126.816678][ T5699] dccp_write_xmit+0x112/0x190 [ 126.821430][ T5699] dccp_sendmsg+0x79e/0xa40 [ 126.825927][ T5699] ? _copy_from_user+0xb8/0xe0 [ 126.830691][ T5699] ? dccp_done+0xd0/0xd0 [ 126.834988][ T5699] ? inet_send_prepare+0x3e0/0x3e0 [ 126.840094][ T5699] sock_sendmsg+0xc0/0x150 [ 126.844502][ T5699] ____sys_sendmsg+0x5ff/0x8f0 [ 126.849459][ T5699] ? kernel_sendmsg+0x30/0x30 [ 126.854151][ T5699] ? __copy_msghdr+0x440/0x440 [ 126.858941][ T5699] ? try_to_wake_up+0xdda/0x1c40 [ 126.863952][ T5699] ___sys_sendmsg+0xdb/0x160 [ 126.868643][ T5699] ? do_recvmmsg+0x560/0x560 [ 126.873222][ T5699] ? __fget_files+0x1a7/0x3c0 [ 126.878328][ T5699] ? lock_downgrade+0x690/0x690 [ 126.883333][ T5699] ? do_raw_spin_unlock+0x175/0x230 [ 126.888791][ T5699] ? futex_wake+0x2fe/0x3f0 [ 126.893390][ T5699] ? __fget_files+0x1bf/0x3c0 [ 126.898134][ T5699] ? __fget_light+0xb9/0x210 [ 126.902818][ T5699] __sys_sendmsg+0xc7/0x160 [ 126.907423][ T5699] ? __sys_sendmsg_sock+0x20/0x20 [ 126.912468][ T5699] ? syscall_enter_from_user_mode+0x26/0xb0 [ 126.918405][ T5699] ? lockdep_hardirqs_on+0x7d/0x100 [ 126.924230][ T5699] do_syscall_64+0x39/0xb0 [ 126.928638][ T5699] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.934868][ T5699] RIP: 0033:0x7fb49308c0f9 [ 126.939271][ T5699] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 126.959392][ T5699] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.970420][ T5699] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 126.979445][ T5699] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 126.987507][ T5699] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 126.995708][ T5699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.003707][ T5699] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 127.011971][ T5699] [ 127.025999][ T5699] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 127.038948][ T5699] CPU: 0 PID: 5699 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 127.047563][ T5699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 127.057612][ T5699] Call Trace: [ 127.060923][ T5699] [ 127.063857][ T5699] dump_stack_lvl+0x8e/0xb0 [ 127.068366][ T5699] ccid3_hc_tx_packet_sent+0xde/0x140 [ 127.073950][ T5699] dccp_xmit_packet+0x28a/0x680 [ 127.078826][ T5699] dccp_write_xmit+0x112/0x190 [ 127.083611][ T5699] dccp_sendmsg+0x79e/0xa40 [ 127.088213][ T5699] ? _copy_from_user+0xb8/0xe0 [ 127.092989][ T5699] ? dccp_done+0xd0/0xd0 [ 127.097252][ T5699] ? inet_send_prepare+0x3e0/0x3e0 [ 127.102626][ T5699] sock_sendmsg+0xc0/0x150 [ 127.107390][ T5699] ____sys_sendmsg+0x5ff/0x8f0 [ 127.112179][ T5699] ? kernel_sendmsg+0x30/0x30 [ 127.117025][ T5699] ? __copy_msghdr+0x440/0x440 [ 127.121797][ T5699] ? try_to_wake_up+0xdda/0x1c40 [ 127.126915][ T5699] ___sys_sendmsg+0xdb/0x160 [ 127.131531][ T5699] ? do_recvmmsg+0x560/0x560 [ 127.136457][ T5699] ? __fget_files+0x1a7/0x3c0 [ 127.141214][ T5699] ? lock_downgrade+0x690/0x690 [ 127.146126][ T5699] ? do_raw_spin_unlock+0x175/0x230 [ 127.151489][ T5699] ? futex_wake+0x2fe/0x3f0 [ 127.156254][ T5699] ? __fget_files+0x1bf/0x3c0 [ 127.160917][ T5699] ? __fget_light+0xb9/0x210 [ 127.165744][ T5699] __sys_sendmsg+0xc7/0x160 [ 127.170223][ T5699] ? __sys_sendmsg_sock+0x20/0x20 [ 127.175243][ T5699] ? syscall_enter_from_user_mode+0x26/0xb0 [ 127.181147][ T5699] ? lockdep_hardirqs_on+0x7d/0x100 [ 127.186415][ T5699] do_syscall_64+0x39/0xb0 [ 127.190982][ T5699] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.197292][ T5699] RIP: 0033:0x7fb49308c0f9 [ 127.201701][ T5699] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 127.223380][ T5699] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.231862][ T5699] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 127.239913][ T5699] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 127.248222][ T5699] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 127.256187][ T5699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.264194][ T5699] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 127.272159][ T5699] [ 127.286614][ T5699] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 127.298079][ T5699] CPU: 1 PID: 5699 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 127.306970][ T5699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 127.317192][ T5699] Call Trace: [ 127.320473][ T5699] [ 127.323385][ T5699] dump_stack_lvl+0x8e/0xb0 [ 127.327870][ T5699] ccid3_hc_tx_packet_sent+0xde/0x140 [ 127.333336][ T5699] dccp_xmit_packet+0x28a/0x680 [ 127.338286][ T5699] dccp_write_xmit+0x112/0x190 [ 127.343085][ T5699] dccp_sendmsg+0x79e/0xa40 [ 127.347678][ T5699] ? _copy_from_user+0xb8/0xe0 [ 127.352615][ T5699] ? dccp_done+0xd0/0xd0 [ 127.356857][ T5699] ? inet_send_prepare+0x3e0/0x3e0 [ 127.361964][ T5699] sock_sendmsg+0xc0/0x150 [ 127.366645][ T5699] ____sys_sendmsg+0x5ff/0x8f0 [ 127.372106][ T5699] ? kernel_sendmsg+0x30/0x30 [ 127.376894][ T5699] ? __copy_msghdr+0x440/0x440 [ 127.381847][ T5699] ? try_to_wake_up+0xdda/0x1c40 [ 127.387126][ T5699] ___sys_sendmsg+0xdb/0x160 [ 127.391811][ T5699] ? do_recvmmsg+0x560/0x560 [ 127.396411][ T5699] ? __fget_files+0x1a7/0x3c0 [ 127.401079][ T5699] ? lock_downgrade+0x690/0x690 [ 127.406019][ T5699] ? do_raw_spin_unlock+0x175/0x230 [ 127.411459][ T5699] ? futex_wake+0x2fe/0x3f0 [ 127.416211][ T5699] ? __fget_files+0x1bf/0x3c0 [ 127.421061][ T5699] ? __fget_light+0xb9/0x210 [ 127.425738][ T5699] __sys_sendmsg+0xc7/0x160 [ 127.430308][ T5699] ? __sys_sendmsg_sock+0x20/0x20 [ 127.435404][ T5699] ? syscall_enter_from_user_mode+0x26/0xb0 [ 127.441709][ T5699] ? lockdep_hardirqs_on+0x7d/0x100 [ 127.447333][ T5699] do_syscall_64+0x39/0xb0 [ 127.451761][ T5699] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.457995][ T5699] RIP: 0033:0x7fb49308c0f9 [ 127.462400][ T5699] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 127.482260][ T5699] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.490809][ T5699] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 127.499119][ T5699] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 127.507174][ T5699] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 127.515131][ T5699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.523256][ T5699] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 127.531418][ T5699] [ 127.582138][ T5726] dccp_xmit_packet: Payload too large (65475) for featneg. [ 127.599740][ T5726] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 127.613052][ T5726] CPU: 0 PID: 5726 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 127.621830][ T5726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 127.632303][ T5726] Call Trace: [ 127.635763][ T5726] [ 127.638880][ T5726] dump_stack_lvl+0x8e/0xb0 [ 127.643881][ T5726] ccid3_hc_tx_packet_sent+0xde/0x140 [ 127.649441][ T5726] dccp_xmit_packet+0x28a/0x680 [ 127.654397][ T5726] dccp_write_xmit+0x112/0x190 [ 127.659171][ T5726] dccp_sendmsg+0x79e/0xa40 [ 127.663733][ T5726] ? _copy_from_user+0xb8/0xe0 [ 127.668539][ T5726] ? dccp_done+0xd0/0xd0 [ 127.672794][ T5726] ? inet_send_prepare+0x3e0/0x3e0 [ 127.678172][ T5726] sock_sendmsg+0xc0/0x150 [ 127.682679][ T5726] ____sys_sendmsg+0x5ff/0x8f0 [ 127.687435][ T5726] ? kernel_sendmsg+0x30/0x30 [ 127.692176][ T5726] ? __copy_msghdr+0x440/0x440 [ 127.696932][ T5726] ? try_to_wake_up+0xdda/0x1c40 [ 127.702735][ T5726] ___sys_sendmsg+0xdb/0x160 [ 127.707337][ T5726] ? do_recvmmsg+0x560/0x560 [ 127.711946][ T5726] ? __fget_files+0x1a7/0x3c0 [ 127.716603][ T5726] ? lock_downgrade+0x690/0x690 [ 127.721710][ T5726] ? do_raw_spin_unlock+0x175/0x230 [ 127.726894][ T5726] ? futex_wake+0x2fe/0x3f0 [ 127.731397][ T5726] ? __fget_files+0x1bf/0x3c0 [ 127.736067][ T5726] ? __fget_light+0xb9/0x210 [ 127.741072][ T5726] __sys_sendmsg+0xc7/0x160 [ 127.745644][ T5726] ? __sys_sendmsg_sock+0x20/0x20 [ 127.750756][ T5726] ? syscall_enter_from_user_mode+0x26/0xb0 [ 127.756625][ T5726] ? lockdep_hardirqs_on+0x7d/0x100 [ 127.761803][ T5726] do_syscall_64+0x39/0xb0 [ 127.766228][ T5726] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.772124][ T5726] RIP: 0033:0x7fb49308c0f9 [ 127.776606][ T5726] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 127.796891][ T5726] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.805396][ T5726] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 127.813397][ T5726] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 127.821371][ T5726] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 127.829624][ T5726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.837583][ T5726] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 127.845923][ T5726] [ 127.852159][ T1212] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.858705][ T1212] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.859011][ T5726] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 127.877622][ T5726] CPU: 1 PID: 5726 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 127.886341][ T5726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 127.896655][ T5726] Call Trace: [ 127.900084][ T5726] [ 127.903113][ T5726] dump_stack_lvl+0x8e/0xb0 [ 127.907810][ T5726] ccid3_hc_tx_packet_sent+0xde/0x140 [ 127.913457][ T5726] dccp_xmit_packet+0x28a/0x680 [ 127.918322][ T5726] dccp_write_xmit+0x112/0x190 [ 127.923187][ T5726] dccp_sendmsg+0x79e/0xa40 [ 127.927790][ T5726] ? _copy_from_user+0xb8/0xe0 [ 127.932704][ T5726] ? dccp_done+0xd0/0xd0 [ 127.937050][ T5726] ? inet_send_prepare+0x3e0/0x3e0 [ 127.942344][ T5726] sock_sendmsg+0xc0/0x150 [ 127.946945][ T5726] ____sys_sendmsg+0x5ff/0x8f0 [ 127.951730][ T5726] ? kernel_sendmsg+0x30/0x30 [ 127.956597][ T5726] ? __copy_msghdr+0x440/0x440 [ 127.961773][ T5726] ? try_to_wake_up+0xdda/0x1c40 [ 127.966903][ T5726] ___sys_sendmsg+0xdb/0x160 [ 127.971588][ T5726] ? do_recvmmsg+0x560/0x560 [ 127.976188][ T5726] ? __fget_files+0x1a7/0x3c0 [ 127.980871][ T5726] ? lock_downgrade+0x690/0x690 [ 127.986056][ T5726] ? do_raw_spin_unlock+0x175/0x230 [ 127.991415][ T5726] ? futex_wake+0x2fe/0x3f0 [ 127.995902][ T5726] ? __fget_files+0x1bf/0x3c0 [ 128.000650][ T5726] ? __fget_light+0xb9/0x210 [ 128.005510][ T5726] __sys_sendmsg+0xc7/0x160 [ 128.010099][ T5726] ? __sys_sendmsg_sock+0x20/0x20 [ 128.015135][ T5726] ? syscall_enter_from_user_mode+0x26/0xb0 [ 128.021099][ T5726] ? lockdep_hardirqs_on+0x7d/0x100 [ 128.026290][ T5726] do_syscall_64+0x39/0xb0 [ 128.030693][ T5726] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.036721][ T5726] RIP: 0033:0x7fb49308c0f9 [ 128.041228][ T5726] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 128.061728][ T5726] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.070127][ T5726] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 128.078080][ T5726] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 128.086062][ T5726] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 128.094719][ T5726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.102685][ T5726] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 128.110760][ T5726] [ 128.125004][ T5726] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 128.137639][ T5726] CPU: 0 PID: 5726 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 128.146323][ T5726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 128.157089][ T5726] Call Trace: [ 128.160375][ T5726] [ 128.163578][ T5726] dump_stack_lvl+0x8e/0xb0 [ 128.168204][ T5726] ccid3_hc_tx_packet_sent+0xde/0x140 [ 128.173673][ T5726] dccp_xmit_packet+0x28a/0x680 [ 128.178630][ T5726] dccp_write_xmit+0x112/0x190 [ 128.183412][ T5726] dccp_sendmsg+0x79e/0xa40 [ 128.187984][ T5726] ? _copy_from_user+0xb8/0xe0 [ 128.192779][ T5726] ? dccp_done+0xd0/0xd0 [ 128.197039][ T5726] ? inet_send_prepare+0x3e0/0x3e0 [ 128.202160][ T5726] sock_sendmsg+0xc0/0x150 [ 128.206594][ T5726] ____sys_sendmsg+0x5ff/0x8f0 [ 128.211464][ T5726] ? kernel_sendmsg+0x30/0x30 [ 128.216153][ T5726] ? __copy_msghdr+0x440/0x440 [ 128.221015][ T5726] ? try_to_wake_up+0xdda/0x1c40 [ 128.226045][ T5726] ___sys_sendmsg+0xdb/0x160 [ 128.230818][ T5726] ? do_recvmmsg+0x560/0x560 [ 128.235429][ T5726] ? __fget_files+0x1a7/0x3c0 [ 128.240114][ T5726] ? lock_downgrade+0x690/0x690 [ 128.245061][ T5726] ? do_raw_spin_unlock+0x175/0x230 [ 128.250463][ T5726] ? futex_wake+0x2fe/0x3f0 [ 128.254989][ T5726] ? __fget_files+0x1bf/0x3c0 [ 128.259708][ T5726] ? __fget_light+0xb9/0x210 [ 128.264406][ T5726] __sys_sendmsg+0xc7/0x160 [ 128.269017][ T5726] ? __sys_sendmsg_sock+0x20/0x20 [ 128.274328][ T5726] ? syscall_enter_from_user_mode+0x26/0xb0 [ 128.280236][ T5726] ? lockdep_hardirqs_on+0x7d/0x100 [ 128.285711][ T5726] do_syscall_64+0x39/0xb0 [ 128.290142][ T5726] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.296042][ T5726] RIP: 0033:0x7fb49308c0f9 [ 128.300458][ T5726] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 128.320157][ T5726] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.328617][ T5726] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 128.336855][ T5726] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 128.345376][ T5726] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 128.353527][ T5726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.361587][ T5726] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 128.369883][ T5726] [ 128.382544][ T5726] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 128.394448][ T5726] CPU: 0 PID: 5726 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 128.403033][ T5726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 128.413185][ T5726] Call Trace: [ 128.416466][ T5726] [ 128.419486][ T5726] dump_stack_lvl+0x8e/0xb0 [ 128.424080][ T5726] ccid3_hc_tx_packet_sent+0xde/0x140 [ 128.429470][ T5726] dccp_xmit_packet+0x28a/0x680 [ 128.434363][ T5726] dccp_write_xmit+0x112/0x190 [ 128.439370][ T5726] dccp_sendmsg+0x79e/0xa40 [ 128.444405][ T5726] ? _copy_from_user+0xb8/0xe0 [ 128.449530][ T5726] ? dccp_done+0xd0/0xd0 [ 128.454058][ T5726] ? inet_send_prepare+0x3e0/0x3e0 [ 128.459707][ T5726] sock_sendmsg+0xc0/0x150 [ 128.464144][ T5726] ____sys_sendmsg+0x5ff/0x8f0 [ 128.469005][ T5726] ? kernel_sendmsg+0x30/0x30 [ 128.474294][ T5726] ? __copy_msghdr+0x440/0x440 [ 128.479066][ T5726] ? try_to_wake_up+0xdda/0x1c40 [ 128.484074][ T5726] ___sys_sendmsg+0xdb/0x160 [ 128.488644][ T5726] ? do_recvmmsg+0x560/0x560 [ 128.493487][ T5726] ? __fget_files+0x1a7/0x3c0 [ 128.498165][ T5726] ? lock_downgrade+0x690/0x690 [ 128.503091][ T5726] ? do_raw_spin_unlock+0x175/0x230 [ 128.508356][ T5726] ? futex_wake+0x2fe/0x3f0 [ 128.512935][ T5726] ? __fget_files+0x1bf/0x3c0 [ 128.517589][ T5726] ? __fget_light+0xb9/0x210 [ 128.522333][ T5726] __sys_sendmsg+0xc7/0x160 [ 128.527072][ T5726] ? __sys_sendmsg_sock+0x20/0x20 [ 128.532186][ T5726] ? syscall_enter_from_user_mode+0x26/0xb0 [ 128.538070][ T5726] ? lockdep_hardirqs_on+0x7d/0x100 [ 128.543634][ T5726] do_syscall_64+0x39/0xb0 [ 128.548416][ T5726] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.554292][ T5726] RIP: 0033:0x7fb49308c0f9 [ 128.559218][ T5726] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 128.579081][ T5726] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.587476][ T5726] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 128.595513][ T5726] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 128.603487][ T5726] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 128.611856][ T5726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.619992][ T5726] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 128.627955][ T5726] [ 128.633956][ T5102] Bluetooth: hci0: command 0x0419 tx timeout [ 128.672639][ T5756] dccp_xmit_packet: Payload too large (65475) for featneg. [ 128.689507][ T5756] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 128.701237][ T5756] CPU: 0 PID: 5756 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 128.710527][ T5756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 128.721085][ T5756] Call Trace: [ 128.724456][ T5756] [ 128.727568][ T5756] dump_stack_lvl+0x8e/0xb0 [ 128.732194][ T5756] ccid3_hc_tx_packet_sent+0xde/0x140 [ 128.737586][ T5756] dccp_xmit_packet+0x28a/0x680 [ 128.742459][ T5756] dccp_write_xmit+0x112/0x190 [ 128.747238][ T5756] dccp_sendmsg+0x79e/0xa40 [ 128.751761][ T5756] ? _copy_from_user+0xb8/0xe0 [ 128.756662][ T5756] ? dccp_done+0xd0/0xd0 [ 128.761017][ T5756] ? inet_send_prepare+0x3e0/0x3e0 [ 128.766137][ T5756] sock_sendmsg+0xc0/0x150 [ 128.770717][ T5756] ____sys_sendmsg+0x5ff/0x8f0 [ 128.775684][ T5756] ? kernel_sendmsg+0x30/0x30 [ 128.781770][ T5756] ? __copy_msghdr+0x440/0x440 [ 128.786646][ T5756] ? try_to_wake_up+0xdda/0x1c40 [ 128.791681][ T5756] ___sys_sendmsg+0xdb/0x160 [ 128.796280][ T5756] ? do_recvmmsg+0x560/0x560 [ 128.801113][ T5756] ? __fget_files+0x1a7/0x3c0 [ 128.805912][ T5756] ? lock_downgrade+0x690/0x690 [ 128.810948][ T5756] ? do_raw_spin_unlock+0x175/0x230 [ 128.816239][ T5756] ? futex_wake+0x2fe/0x3f0 [ 128.820786][ T5756] ? __fget_files+0x1bf/0x3c0 [ 128.825476][ T5756] ? __fget_light+0xb9/0x210 [ 128.830169][ T5756] __sys_sendmsg+0xc7/0x160 [ 128.834857][ T5756] ? __sys_sendmsg_sock+0x20/0x20 [ 128.840043][ T5756] ? syscall_enter_from_user_mode+0x26/0xb0 [ 128.846210][ T5756] ? lockdep_hardirqs_on+0x7d/0x100 [ 128.851417][ T5756] do_syscall_64+0x39/0xb0 [ 128.855844][ T5756] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.861920][ T5756] RIP: 0033:0x7fb49308c0f9 [ 128.866437][ T5756] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 128.886690][ T5756] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.895105][ T5756] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 128.903216][ T5756] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 128.911278][ T5756] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 128.919435][ T5756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.927590][ T5756] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 128.935576][ T5756] [ 128.940524][ T5756] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 128.952203][ T5756] CPU: 0 PID: 5756 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 128.961141][ T5756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 128.971718][ T5756] Call Trace: [ 128.975007][ T5756] [ 128.977959][ T5756] dump_stack_lvl+0x8e/0xb0 [ 128.982561][ T5756] ccid3_hc_tx_packet_sent+0xde/0x140 [ 128.987946][ T5756] dccp_xmit_packet+0x28a/0x680 [ 128.992810][ T5756] dccp_write_xmit+0x112/0x190 [ 128.997673][ T5756] dccp_sendmsg+0x79e/0xa40 [ 129.002185][ T5756] ? _copy_from_user+0xb8/0xe0 [ 129.006960][ T5756] ? dccp_done+0xd0/0xd0 [ 129.011661][ T5756] ? inet_send_prepare+0x3e0/0x3e0 [ 129.016820][ T5756] sock_sendmsg+0xc0/0x150 [ 129.021256][ T5756] ____sys_sendmsg+0x5ff/0x8f0 [ 129.026030][ T5756] ? kernel_sendmsg+0x30/0x30 [ 129.031086][ T5756] ? __copy_msghdr+0x440/0x440 [ 129.035866][ T5756] ? try_to_wake_up+0xdda/0x1c40 [ 129.040926][ T5756] ___sys_sendmsg+0xdb/0x160 [ 129.045798][ T5756] ? do_recvmmsg+0x560/0x560 [ 129.050669][ T5756] ? __fget_files+0x1a7/0x3c0 [ 129.055663][ T5756] ? lock_downgrade+0x690/0x690 [ 129.061231][ T5756] ? do_raw_spin_unlock+0x175/0x230 [ 129.066959][ T5756] ? futex_wake+0x2fe/0x3f0 [ 129.071754][ T5756] ? __fget_files+0x1bf/0x3c0 [ 129.076706][ T5756] ? __fget_light+0xb9/0x210 [ 129.081329][ T5756] __sys_sendmsg+0xc7/0x160 [ 129.085935][ T5756] ? __sys_sendmsg_sock+0x20/0x20 [ 129.090981][ T5756] ? syscall_enter_from_user_mode+0x26/0xb0 [ 129.096884][ T5756] ? lockdep_hardirqs_on+0x7d/0x100 [ 129.102101][ T5756] do_syscall_64+0x39/0xb0 [ 129.106611][ T5756] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.112773][ T5756] RIP: 0033:0x7fb49308c0f9 [ 129.117289][ T5756] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 129.138891][ T5756] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.147568][ T5756] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 129.156757][ T5756] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 129.165181][ T5756] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 129.173686][ T5756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.182040][ T5756] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 129.190466][ T5756] [ 129.201652][ T5756] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 129.214332][ T5756] CPU: 0 PID: 5756 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 129.223120][ T5756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 129.234054][ T5756] Call Trace: [ 129.237610][ T5756] [ 129.240647][ T5756] dump_stack_lvl+0x8e/0xb0 [ 129.245248][ T5756] ccid3_hc_tx_packet_sent+0xde/0x140 [ 129.250929][ T5756] dccp_xmit_packet+0x28a/0x680 [ 129.255789][ T5756] dccp_write_xmit+0x112/0x190 [ 129.260655][ T5756] dccp_sendmsg+0x79e/0xa40 [ 129.265618][ T5756] ? _copy_from_user+0xb8/0xe0 [ 129.270605][ T5756] ? dccp_done+0xd0/0xd0 [ 129.275560][ T5756] ? inet_send_prepare+0x3e0/0x3e0 [ 129.280681][ T5756] sock_sendmsg+0xc0/0x150 [ 129.285108][ T5756] ____sys_sendmsg+0x5ff/0x8f0 [ 129.289930][ T5756] ? kernel_sendmsg+0x30/0x30 [ 129.294621][ T5756] ? __copy_msghdr+0x440/0x440 [ 129.299497][ T5756] ? try_to_wake_up+0xdda/0x1c40 [ 129.304531][ T5756] ___sys_sendmsg+0xdb/0x160 [ 129.309132][ T5756] ? do_recvmmsg+0x560/0x560 [ 129.313732][ T5756] ? __fget_files+0x1a7/0x3c0 [ 129.318682][ T5756] ? lock_downgrade+0x690/0x690 [ 129.324332][ T5756] ? do_raw_spin_unlock+0x175/0x230 [ 129.329744][ T5756] ? futex_wake+0x2fe/0x3f0 [ 129.334312][ T5756] ? __fget_files+0x1bf/0x3c0 [ 129.339276][ T5756] ? __fget_light+0xb9/0x210 [ 129.344058][ T5756] __sys_sendmsg+0xc7/0x160 [ 129.348659][ T5756] ? __sys_sendmsg_sock+0x20/0x20 [ 129.353848][ T5756] ? syscall_enter_from_user_mode+0x26/0xb0 [ 129.359763][ T5756] ? lockdep_hardirqs_on+0x7d/0x100 [ 129.365075][ T5756] do_syscall_64+0x39/0xb0 [ 129.369684][ T5756] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.375670][ T5756] RIP: 0033:0x7fb49308c0f9 [ 129.380628][ T5756] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 129.401111][ T5756] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.409623][ T5756] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 129.417602][ T5756] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 129.425823][ T5756] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 129.434871][ T5756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.443025][ T5756] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 129.451102][ T5756] [ 129.456577][ T5756] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 129.468146][ T5756] CPU: 0 PID: 5756 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 129.476995][ T5756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 129.487052][ T5756] Call Trace: [ 129.490596][ T5756] [ 129.493552][ T5756] dump_stack_lvl+0x8e/0xb0 [ 129.498069][ T5756] ccid3_hc_tx_packet_sent+0xde/0x140 [ 129.503456][ T5756] dccp_xmit_packet+0x28a/0x680 [ 129.508327][ T5756] dccp_write_xmit+0x112/0x190 [ 129.513104][ T5756] dccp_sendmsg+0x79e/0xa40 [ 129.517623][ T5756] ? _copy_from_user+0xb8/0xe0 [ 129.522569][ T5756] ? dccp_done+0xd0/0xd0 [ 129.526936][ T5756] ? inet_send_prepare+0x3e0/0x3e0 [ 129.532060][ T5756] sock_sendmsg+0xc0/0x150 [ 129.536844][ T5756] ____sys_sendmsg+0x5ff/0x8f0 [ 129.541831][ T5756] ? kernel_sendmsg+0x30/0x30 [ 129.546546][ T5756] ? __copy_msghdr+0x440/0x440 [ 129.551322][ T5756] ? try_to_wake_up+0xdda/0x1c40 [ 129.556968][ T5756] ___sys_sendmsg+0xdb/0x160 [ 129.561660][ T5756] ? do_recvmmsg+0x560/0x560 [ 129.566263][ T5756] ? __fget_files+0x1a7/0x3c0 [ 129.571033][ T5756] ? lock_downgrade+0x690/0x690 [ 129.576062][ T5756] ? do_raw_spin_unlock+0x175/0x230 [ 129.581273][ T5756] ? futex_wake+0x2fe/0x3f0 [ 129.585912][ T5756] ? __fget_files+0x1bf/0x3c0 [ 129.590687][ T5756] ? __fget_light+0xb9/0x210 [ 129.595297][ T5756] __sys_sendmsg+0xc7/0x160 [ 129.599934][ T5756] ? __sys_sendmsg_sock+0x20/0x20 [ 129.604989][ T5756] ? syscall_enter_from_user_mode+0x26/0xb0 [ 129.611331][ T5756] ? lockdep_hardirqs_on+0x7d/0x100 [ 129.616606][ T5756] do_syscall_64+0x39/0xb0 [ 129.621304][ T5756] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.628454][ T5756] RIP: 0033:0x7fb49308c0f9 [ 129.633218][ T5756] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 129.653085][ T5756] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.661934][ T5756] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 129.670094][ T5756] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 129.680499][ T5756] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 129.689136][ T5756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.697722][ T5756] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 129.706233][ T5756] [ 129.741125][ T5805] dccp_xmit_packet: Payload too large (65475) for featneg. [ 129.784533][ T5810] dccp_xmit_packet: Payload too large (65475) for featneg. [ 129.802412][ T5810] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 129.814611][ T5810] CPU: 0 PID: 5810 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 129.823472][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 129.834684][ T5810] Call Trace: [ 129.837969][ T5810] [ 129.840909][ T5810] dump_stack_lvl+0x8e/0xb0 [ 129.845417][ T5810] ccid3_hc_tx_packet_sent+0xde/0x140 [ 129.850976][ T5810] dccp_xmit_packet+0x28a/0x680 [ 129.856102][ T5810] dccp_write_xmit+0x112/0x190 [ 129.861060][ T5810] dccp_sendmsg+0x79e/0xa40 [ 129.865582][ T5810] ? _copy_from_user+0xb8/0xe0 [ 129.870379][ T5810] ? dccp_done+0xd0/0xd0 [ 129.874812][ T5810] ? inet_send_prepare+0x3e0/0x3e0 [ 129.879950][ T5810] sock_sendmsg+0xc0/0x150 [ 129.884386][ T5810] ____sys_sendmsg+0x5ff/0x8f0 [ 129.889246][ T5810] ? kernel_sendmsg+0x30/0x30 [ 129.893929][ T5810] ? __copy_msghdr+0x440/0x440 [ 129.898705][ T5810] ? try_to_wake_up+0xdda/0x1c40 [ 129.903650][ T5810] ___sys_sendmsg+0xdb/0x160 [ 129.908248][ T5810] ? do_recvmmsg+0x560/0x560 [ 129.912851][ T5810] ? __fget_files+0x1a7/0x3c0 [ 129.917635][ T5810] ? lock_downgrade+0x690/0x690 [ 129.922503][ T5810] ? do_raw_spin_unlock+0x175/0x230 [ 129.927709][ T5810] ? futex_wake+0x2fe/0x3f0 [ 129.932233][ T5810] ? __fget_files+0x1bf/0x3c0 [ 129.937197][ T5810] ? __fget_light+0xb9/0x210 [ 129.941996][ T5810] __sys_sendmsg+0xc7/0x160 [ 129.946628][ T5810] ? __sys_sendmsg_sock+0x20/0x20 [ 129.951948][ T5810] ? syscall_enter_from_user_mode+0x26/0xb0 [ 129.958125][ T5810] ? lockdep_hardirqs_on+0x7d/0x100 [ 129.963339][ T5810] do_syscall_64+0x39/0xb0 [ 129.968258][ T5810] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.975205][ T5810] RIP: 0033:0x7fb49308c0f9 [ 129.979723][ T5810] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 129.999504][ T5810] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.007922][ T5810] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 130.015900][ T5810] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 130.024052][ T5810] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 130.032027][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.040364][ T5810] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 130.048879][ T5810] [ 130.057139][ T5810] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 130.070737][ T5810] CPU: 1 PID: 5810 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 130.079607][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 130.089928][ T5810] Call Trace: [ 130.093213][ T5810] [ 130.096149][ T5810] dump_stack_lvl+0x8e/0xb0 [ 130.100668][ T5810] ccid3_hc_tx_packet_sent+0xde/0x140 [ 130.106160][ T5810] dccp_xmit_packet+0x28a/0x680 [ 130.111117][ T5810] dccp_write_xmit+0x112/0x190 [ 130.115897][ T5810] dccp_sendmsg+0x79e/0xa40 [ 130.120671][ T5810] ? _copy_from_user+0xb8/0xe0 [ 130.125447][ T5810] ? dccp_done+0xd0/0xd0 [ 130.129796][ T5810] ? inet_send_prepare+0x3e0/0x3e0 [ 130.134927][ T5810] sock_sendmsg+0xc0/0x150 [ 130.139368][ T5810] ____sys_sendmsg+0x5ff/0x8f0 [ 130.144239][ T5810] ? kernel_sendmsg+0x30/0x30 [ 130.149880][ T5810] ? __copy_msghdr+0x440/0x440 [ 130.155090][ T5810] ? try_to_wake_up+0xdda/0x1c40 [ 130.160130][ T5810] ___sys_sendmsg+0xdb/0x160 [ 130.164829][ T5810] ? do_recvmmsg+0x560/0x560 [ 130.169563][ T5810] ? __fget_files+0x1a7/0x3c0 [ 130.174428][ T5810] ? lock_downgrade+0x690/0x690 [ 130.179498][ T5810] ? do_raw_spin_unlock+0x175/0x230 [ 130.185056][ T5810] ? futex_wake+0x2fe/0x3f0 [ 130.189588][ T5810] ? __fget_files+0x1bf/0x3c0 [ 130.194302][ T5810] ? __fget_light+0xb9/0x210 [ 130.198992][ T5810] __sys_sendmsg+0xc7/0x160 [ 130.203555][ T5810] ? __sys_sendmsg_sock+0x20/0x20 [ 130.208627][ T5810] ? syscall_enter_from_user_mode+0x26/0xb0 [ 130.214645][ T5810] ? lockdep_hardirqs_on+0x7d/0x100 [ 130.219857][ T5810] do_syscall_64+0x39/0xb0 [ 130.224287][ T5810] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.230301][ T5810] RIP: 0033:0x7fb49308c0f9 [ 130.234816][ T5810] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 130.255128][ T5810] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.264674][ T5810] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 130.275459][ T5810] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 130.283528][ T5810] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 130.291506][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.299643][ T5810] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 130.307987][ T5810] [ 130.312910][ T5810] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 130.326793][ T5810] CPU: 1 PID: 5810 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 130.335592][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 130.346009][ T5810] Call Trace: [ 130.349313][ T5810] [ 130.352344][ T5810] dump_stack_lvl+0x8e/0xb0 [ 130.356950][ T5810] ccid3_hc_tx_packet_sent+0xde/0x140 [ 130.362513][ T5810] dccp_xmit_packet+0x28a/0x680 [ 130.367472][ T5810] dccp_write_xmit+0x112/0x190 [ 130.372467][ T5810] dccp_sendmsg+0x79e/0xa40 [ 130.377504][ T5810] ? _copy_from_user+0xb8/0xe0 [ 130.382375][ T5810] ? dccp_done+0xd0/0xd0 [ 130.386635][ T5810] ? inet_send_prepare+0x3e0/0x3e0 [ 130.391749][ T5810] sock_sendmsg+0xc0/0x150 [ 130.396264][ T5810] ____sys_sendmsg+0x5ff/0x8f0 [ 130.401044][ T5810] ? kernel_sendmsg+0x30/0x30 [ 130.405734][ T5810] ? __copy_msghdr+0x440/0x440 [ 130.410772][ T5810] ? try_to_wake_up+0xdda/0x1c40 [ 130.415724][ T5810] ___sys_sendmsg+0xdb/0x160 [ 130.420415][ T5810] ? do_recvmmsg+0x560/0x560 [ 130.425192][ T5810] ? __fget_files+0x1a7/0x3c0 [ 130.430048][ T5810] ? lock_downgrade+0x690/0x690 [ 130.435163][ T5810] ? do_raw_spin_unlock+0x175/0x230 [ 130.440396][ T5810] ? futex_wake+0x2fe/0x3f0 [ 130.444888][ T5810] ? __fget_files+0x1bf/0x3c0 [ 130.449833][ T5810] ? __fget_light+0xb9/0x210 [ 130.454404][ T5810] __sys_sendmsg+0xc7/0x160 [ 130.458891][ T5810] ? __sys_sendmsg_sock+0x20/0x20 [ 130.464274][ T5810] ? syscall_enter_from_user_mode+0x26/0xb0 [ 130.470345][ T5810] ? lockdep_hardirqs_on+0x7d/0x100 [ 130.475555][ T5810] do_syscall_64+0x39/0xb0 [ 130.479967][ T5810] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.485978][ T5810] RIP: 0033:0x7fb49308c0f9 [ 130.490382][ T5810] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 130.510067][ T5810] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.518641][ T5810] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 130.526853][ T5810] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 130.535016][ T5810] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 130.542987][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.551213][ T5810] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 130.559190][ T5810] [ 130.571488][ T5810] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 130.583172][ T5810] CPU: 1 PID: 5810 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 130.591768][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 130.601805][ T5810] Call Trace: [ 130.605577][ T5810] [ 130.608494][ T5810] dump_stack_lvl+0x8e/0xb0 [ 130.612981][ T5810] ccid3_hc_tx_packet_sent+0xde/0x140 [ 130.618420][ T5810] dccp_xmit_packet+0x28a/0x680 [ 130.623423][ T5810] dccp_write_xmit+0x112/0x190 [ 130.628251][ T5810] dccp_sendmsg+0x79e/0xa40 [ 130.632740][ T5810] ? _copy_from_user+0xb8/0xe0 [ 130.637486][ T5810] ? dccp_done+0xd0/0xd0 [ 130.641712][ T5810] ? inet_send_prepare+0x3e0/0x3e0 [ 130.646800][ T5810] sock_sendmsg+0xc0/0x150 [ 130.651218][ T5810] ____sys_sendmsg+0x5ff/0x8f0 [ 130.656001][ T5810] ? kernel_sendmsg+0x30/0x30 [ 130.660682][ T5810] ? __copy_msghdr+0x440/0x440 [ 130.665888][ T5810] ? try_to_wake_up+0xdda/0x1c40 [ 130.670985][ T5810] ___sys_sendmsg+0xdb/0x160 [ 130.679036][ T5810] ? do_recvmmsg+0x560/0x560 [ 130.683780][ T5810] ? __fget_files+0x1a7/0x3c0 [ 130.688819][ T5810] ? lock_downgrade+0x690/0x690 [ 130.693694][ T5810] ? do_raw_spin_unlock+0x175/0x230 [ 130.698903][ T5810] ? futex_wake+0x2fe/0x3f0 [ 130.703419][ T5810] ? __fget_files+0x1bf/0x3c0 [ 130.708078][ T5810] ? __fget_light+0xb9/0x210 [ 130.712662][ T5810] __sys_sendmsg+0xc7/0x160 [ 130.717324][ T5810] ? __sys_sendmsg_sock+0x20/0x20 [ 130.722859][ T5810] ? syscall_enter_from_user_mode+0x26/0xb0 [ 130.734823][ T5810] ? lockdep_hardirqs_on+0x7d/0x100 [ 130.740029][ T5810] do_syscall_64+0x39/0xb0 [ 130.744465][ T5810] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.750359][ T5810] RIP: 0033:0x7fb49308c0f9 [ 130.755039][ T5810] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 130.777419][ T5810] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 2023/03/21 15:11:48 executed programs: 13 [ 130.786943][ T5810] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 130.794915][ T5810] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 130.803049][ T5810] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 130.811084][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.819120][ T5810] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 130.827103][ T5810] [ 130.867638][ T5844] dccp_xmit_packet: Payload too large (65475) for featneg. [ 130.882475][ T5844] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 130.893766][ T5844] CPU: 0 PID: 5844 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 130.902445][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 130.912804][ T5844] Call Trace: [ 130.916088][ T5844] [ 130.919022][ T5844] dump_stack_lvl+0x8e/0xb0 [ 130.923555][ T5844] ccid3_hc_tx_packet_sent+0xde/0x140 [ 130.929279][ T5844] dccp_xmit_packet+0x28a/0x680 [ 130.934150][ T5844] dccp_write_xmit+0x112/0x190 [ 130.938944][ T5844] dccp_sendmsg+0x79e/0xa40 [ 130.943554][ T5844] ? _copy_from_user+0xb8/0xe0 [ 130.948365][ T5844] ? dccp_done+0xd0/0xd0 [ 130.952956][ T5844] ? inet_send_prepare+0x3e0/0x3e0 [ 130.958065][ T5844] sock_sendmsg+0xc0/0x150 [ 130.962911][ T5844] ____sys_sendmsg+0x5ff/0x8f0 [ 130.967745][ T5844] ? kernel_sendmsg+0x30/0x30 [ 130.972405][ T5844] ? __copy_msghdr+0x440/0x440 [ 130.977160][ T5844] ? try_to_wake_up+0xdda/0x1c40 [ 130.982078][ T5844] ___sys_sendmsg+0xdb/0x160 [ 130.987003][ T5844] ? do_recvmmsg+0x560/0x560 [ 130.991646][ T5844] ? __fget_files+0x1a7/0x3c0 [ 130.996305][ T5844] ? lock_downgrade+0x690/0x690 [ 131.001235][ T5844] ? do_raw_spin_unlock+0x175/0x230 [ 131.006413][ T5844] ? futex_wake+0x2fe/0x3f0 [ 131.010901][ T5844] ? __fget_files+0x1bf/0x3c0 [ 131.015737][ T5844] ? __fget_light+0xb9/0x210 [ 131.020313][ T5844] __sys_sendmsg+0xc7/0x160 [ 131.024898][ T5844] ? __sys_sendmsg_sock+0x20/0x20 [ 131.029995][ T5844] ? syscall_enter_from_user_mode+0x26/0xb0 [ 131.035866][ T5844] ? lockdep_hardirqs_on+0x7d/0x100 [ 131.041485][ T5844] do_syscall_64+0x39/0xb0 [ 131.045908][ T5844] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.052049][ T5844] RIP: 0033:0x7fb49308c0f9 [ 131.056445][ T5844] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 131.076378][ T5844] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.084852][ T5844] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 131.092995][ T5844] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 131.101050][ T5844] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 131.109008][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.116986][ T5844] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 131.125320][ T5844] [ 131.134002][ T5844] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 131.145849][ T5844] CPU: 1 PID: 5844 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 131.154540][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 131.164885][ T5844] Call Trace: [ 131.168175][ T5844] [ 131.171113][ T5844] dump_stack_lvl+0x8e/0xb0 [ 131.175621][ T5844] ccid3_hc_tx_packet_sent+0xde/0x140 [ 131.181009][ T5844] dccp_xmit_packet+0x28a/0x680 [ 131.185879][ T5844] dccp_write_xmit+0x112/0x190 [ 131.190833][ T5844] dccp_sendmsg+0x79e/0xa40 [ 131.195350][ T5844] ? _copy_from_user+0xb8/0xe0 [ 131.200254][ T5844] ? dccp_done+0xd0/0xd0 [ 131.204825][ T5844] ? inet_send_prepare+0x3e0/0x3e0 [ 131.210132][ T5844] sock_sendmsg+0xc0/0x150 [ 131.214733][ T5844] ____sys_sendmsg+0x5ff/0x8f0 [ 131.219512][ T5844] ? kernel_sendmsg+0x30/0x30 [ 131.224298][ T5844] ? __copy_msghdr+0x440/0x440 [ 131.229101][ T5844] ? try_to_wake_up+0xdda/0x1c40 [ 131.234075][ T5844] ___sys_sendmsg+0xdb/0x160 [ 131.238934][ T5844] ? do_recvmmsg+0x560/0x560 [ 131.243537][ T5844] ? __fget_files+0x1a7/0x3c0 [ 131.248274][ T5844] ? lock_downgrade+0x690/0x690 [ 131.253305][ T5844] ? do_raw_spin_unlock+0x175/0x230 [ 131.258909][ T5844] ? futex_wake+0x2fe/0x3f0 [ 131.263525][ T5844] ? __fget_files+0x1bf/0x3c0 [ 131.268482][ T5844] ? __fget_light+0xb9/0x210 [ 131.273182][ T5844] __sys_sendmsg+0xc7/0x160 [ 131.278039][ T5844] ? __sys_sendmsg_sock+0x20/0x20 [ 131.283092][ T5844] ? syscall_enter_from_user_mode+0x26/0xb0 [ 131.288991][ T5844] ? lockdep_hardirqs_on+0x7d/0x100 [ 131.294370][ T5844] do_syscall_64+0x39/0xb0 [ 131.298797][ T5844] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.304709][ T5844] RIP: 0033:0x7fb49308c0f9 [ 131.309134][ T5844] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 131.328926][ T5844] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.337344][ T5844] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 131.345756][ T5844] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 131.353728][ T5844] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 131.361787][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.369764][ T5844] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 131.377964][ T5844] [ 131.386638][ T5844] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 131.398300][ T5844] CPU: 1 PID: 5844 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 131.406899][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 131.417042][ T5844] Call Trace: [ 131.420329][ T5844] [ 131.423307][ T5844] dump_stack_lvl+0x8e/0xb0 [ 131.427855][ T5844] ccid3_hc_tx_packet_sent+0xde/0x140 [ 131.433252][ T5844] dccp_xmit_packet+0x28a/0x680 [ 131.438115][ T5844] dccp_write_xmit+0x112/0x190 [ 131.442899][ T5844] dccp_sendmsg+0x79e/0xa40 [ 131.447412][ T5844] ? _copy_from_user+0xb8/0xe0 [ 131.452280][ T5844] ? dccp_done+0xd0/0xd0 [ 131.456556][ T5844] ? inet_send_prepare+0x3e0/0x3e0 [ 131.461677][ T5844] sock_sendmsg+0xc0/0x150 [ 131.466106][ T5844] ____sys_sendmsg+0x5ff/0x8f0 [ 131.470967][ T5844] ? kernel_sendmsg+0x30/0x30 [ 131.475738][ T5844] ? __copy_msghdr+0x440/0x440 [ 131.480525][ T5844] ? try_to_wake_up+0xdda/0x1c40 [ 131.485483][ T5844] ___sys_sendmsg+0xdb/0x160 [ 131.490085][ T5844] ? do_recvmmsg+0x560/0x560 [ 131.494687][ T5844] ? __fget_files+0x1a7/0x3c0 [ 131.499372][ T5844] ? lock_downgrade+0x690/0x690 [ 131.504253][ T5844] ? do_raw_spin_unlock+0x175/0x230 [ 131.509462][ T5844] ? futex_wake+0x2fe/0x3f0 [ 131.513979][ T5844] ? __fget_files+0x1bf/0x3c0 [ 131.518669][ T5844] ? __fget_light+0xb9/0x210 [ 131.523796][ T5844] __sys_sendmsg+0xc7/0x160 [ 131.528575][ T5844] ? __sys_sendmsg_sock+0x20/0x20 [ 131.533622][ T5844] ? syscall_enter_from_user_mode+0x26/0xb0 [ 131.539543][ T5844] ? lockdep_hardirqs_on+0x7d/0x100 [ 131.544750][ T5844] do_syscall_64+0x39/0xb0 [ 131.549175][ T5844] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.555095][ T5844] RIP: 0033:0x7fb49308c0f9 [ 131.559513][ T5844] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 131.579818][ T5844] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.588668][ T5844] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 131.596648][ T5844] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 131.604712][ T5844] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 131.612697][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.620851][ T5844] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 131.629279][ T5844] [ 131.639104][ T5844] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 131.651157][ T5844] CPU: 1 PID: 5844 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 131.659751][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 131.669807][ T5844] Call Trace: [ 131.673093][ T5844] [ 131.676074][ T5844] dump_stack_lvl+0x8e/0xb0 [ 131.680584][ T5844] ccid3_hc_tx_packet_sent+0xde/0x140 [ 131.685968][ T5844] dccp_xmit_packet+0x28a/0x680 [ 131.690830][ T5844] dccp_write_xmit+0x112/0x190 [ 131.695603][ T5844] dccp_sendmsg+0x79e/0xa40 [ 131.700115][ T5844] ? _copy_from_user+0xb8/0xe0 [ 131.704893][ T5844] ? dccp_done+0xd0/0xd0 [ 131.709156][ T5844] ? inet_send_prepare+0x3e0/0x3e0 [ 131.714369][ T5844] sock_sendmsg+0xc0/0x150 [ 131.718908][ T5844] ____sys_sendmsg+0x5ff/0x8f0 [ 131.723695][ T5844] ? kernel_sendmsg+0x30/0x30 [ 131.728735][ T5844] ? __copy_msghdr+0x440/0x440 [ 131.733514][ T5844] ? try_to_wake_up+0xdda/0x1c40 [ 131.738467][ T5844] ___sys_sendmsg+0xdb/0x160 [ 131.743164][ T5844] ? do_recvmmsg+0x560/0x560 [ 131.747773][ T5844] ? __fget_files+0x1a7/0x3c0 [ 131.752458][ T5844] ? lock_downgrade+0x690/0x690 [ 131.757318][ T5844] ? do_raw_spin_unlock+0x175/0x230 [ 131.762536][ T5844] ? futex_wake+0x2fe/0x3f0 [ 131.767145][ T5844] ? __fget_files+0x1bf/0x3c0 [ 131.771948][ T5844] ? __fget_light+0xb9/0x210 [ 131.776642][ T5844] __sys_sendmsg+0xc7/0x160 [ 131.781330][ T5844] ? __sys_sendmsg_sock+0x20/0x20 [ 131.786377][ T5844] ? syscall_enter_from_user_mode+0x26/0xb0 [ 131.792279][ T5844] ? lockdep_hardirqs_on+0x7d/0x100 [ 131.797570][ T5844] do_syscall_64+0x39/0xb0 [ 131.802005][ T5844] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.808175][ T5844] RIP: 0033:0x7fb49308c0f9 [ 131.812599][ T5844] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 131.832295][ T5844] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.841074][ T5844] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 131.849060][ T5844] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 131.857044][ T5844] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 131.865189][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.873342][ T5844] R13: 00007fffb1db088f R14: 00007fb493e0d300 R15: 0000000000022000 [ 131.881510][ T5844] [ 131.919909][ T5884] dccp_xmit_packet: Payload too large (65475) for featneg. [ 131.935284][ T5884] BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:90/ccid3_update_send_interval() [ 131.948810][ T5884] CPU: 0 PID: 5884 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller #0 [ 131.957735][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 131.968406][ T5884] Call Trace: [ 131.971785][ T5884] [ 131.974897][ T5884] dump_stack_lvl+0x8e/0xb0 [ 131.979838][ T5884] ccid3_hc_tx_packet_sent+0xde/0x140 [ 131.985225][ T5884] dccp_xmit_packet+0x28a/0x680 [ 131.990093][ T5884] dccp_write_xmit+0x112/0x190 [ 131.994886][ T5884] dccp_sendmsg+0x79e/0xa40 [ 131.999546][ T5884] ? _copy_from_user+0xb8/0xe0 [ 132.004391][ T5884] ? dccp_done+0xd0/0xd0 [ 132.008619][ T5884] ? inet_send_prepare+0x3e0/0x3e0 [ 132.013718][ T5884] sock_sendmsg+0xc0/0x150 [ 132.018137][ T5884] ____sys_sendmsg+0x5ff/0x8f0 [ 132.023068][ T5884] ? kernel_sendmsg+0x30/0x30 [ 132.027808][ T5884] ? __copy_msghdr+0x440/0x440 [ 132.032665][ T5884] ? try_to_wake_up+0xdda/0x1c40 [ 132.037583][ T5884] ___sys_sendmsg+0xdb/0x160 [ 132.042264][ T5884] ? do_recvmmsg+0x560/0x560 [ 132.046872][ T5884] ? __fget_files+0x1a7/0x3c0 [ 132.051562][ T5884] ? lock_downgrade+0x690/0x690 [ 132.056749][ T5884] ? do_raw_spin_unlock+0x175/0x230 [ 132.061970][ T5884] ? futex_wake+0x2fe/0x3f0 [ 132.066456][ T5884] ? __fget_files+0x1bf/0x3c0 [ 132.071526][ T5884] ? __fget_light+0xb9/0x210 [ 132.076185][ T5884] __sys_sendmsg+0xc7/0x160 [ 132.080668][ T5884] ? __sys_sendmsg_sock+0x20/0x20 [ 132.085867][ T5884] ? syscall_enter_from_user_mode+0x26/0xb0 [ 132.091843][ T5884] ? lockdep_hardirqs_on+0x7d/0x100 [ 132.097107][ T5884] do_syscall_64+0x39/0xb0 [ 132.101545][ T5884] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.107513][ T5884] RIP: 0033:0x7fb49308c0f9 [ 132.111908][ T5884] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 132.132359][ T5884] RSP: 002b:00007fb493e0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.140865][ T5884] RAX: ffffffffffffffda RBX: 00007fb4931abf80 RCX: 00007fb49308c0f9 [ 132.149016][ T5884] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004 [ 132.157069][ T5884] RBP: 00007fb4930e7ae9 R08: 0000000000000000 R09: 0000000000000000