BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
7 views
Skip to first unread message
syzbot
Jan 22, 2022, 12:14:19 PM1/22/22
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 3f8a27f9e27b Linux 4.19.211
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=15158857b00000
kernel config: https://syzkaller.appspot.com/x/.config?x=9b9277b418617afe
dashboard link: https://syzkaller.appspot.com/bug?extid=f0d5eccd1e7ccd692359
compiler: gcc version 10.2.1 20210110 (Debian 10.2.1-6)
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+f0d5ec...@syzkaller.appspotmail.com
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
EXT4-fs (loop1): error: journal path ./file0 is not a block device
CPU: 0 PID: 11576 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fe5131dc059
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe511b0f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007fe5132ef100 RCX: 00007fe5131dc059
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000092
RBP: 00007fe51323608d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff52f726af R14: 00007fe511b0f300 R15: 0000000000022000
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop2): error: journal path ./file0 is not a block device
EXT4-fs (loop4): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop4): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: get root inode failed
kauditd_printk_skb: 60 callbacks suppressed
audit: type=1804 audit(1642871616.945:3229): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1306/bus" dev="sda1" ino=14313 res=1
audit: type=1804 audit(1642871616.955:3230): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1306/bus" dev="sda1" ino=14313 res=1
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
audit: type=1804 audit(1642871617.145:3231): pid=11698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1307/bus" dev="sda1" ino=14754 res=1
audit: type=1804 audit(1642871617.175:3232): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1307/bus" dev="sda1" ino=14754 res=1
EXT4-fs (loop4): error: journal path ./file0 is not a block device
audit: type=1804 audit(1642871617.175:3233): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1307/bus" dev="sda1" ino=14754 res=1
audit: type=1804 audit(1642871617.175:3234): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1307/bus" dev="sda1" ino=14754 res=1
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
audit: type=1804 audit(1642871617.175:3235): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1307/bus" dev="sda1" ino=14754 res=1
audit: type=1804 audit(1642871617.175:3236): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1307/bus" dev="sda1" ino=14754 res=1
audit: type=1804 audit(1642871617.175:3237): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1307/bus" dev="sda1" ino=14754 res=1
audit: type=1804 audit(1642871617.175:3238): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1307/bus" dev="sda1" ino=14754 res=1
EXT4-fs (loop5): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: get root inode failed
EXT4-fs (loop4): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop4): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop4): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop2): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop4): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop4): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop4): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop4): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: could not find journal device path: error -2
EXT4-fs (loop1): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
kauditd_printk_skb: 34 callbacks suppressed
audit: type=1804 audit(1642871622.855:3273): pid=12153 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1318/bus" dev="sda1" ino=14327 res=1
EXT4-fs (loop4): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
audit: type=1804 audit(1642871623.785:3274): pid=12202 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1319/bus" dev="sda1" ino=13953 res=1
EXT4-fs (loop5): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop2): error: journal path ./file0 is not a block device
EXT4-fs (loop4): error: journal path ./file0 is not a block device
audit: type=1804 audit(1642871623.996:3275): pid=12243 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1320/bus" dev="sda1" ino=13895 res=1
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop4): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
EXT4-fs (loop4): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop4): error: journal path ./file0 is not a block device
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: 3f8a27f9e27b Linux 4.19.211
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=15158857b00000
kernel config: https://syzkaller.appspot.com/x/.config?x=9b9277b418617afe
dashboard link: https://syzkaller.appspot.com/bug?extid=f0d5eccd1e7ccd692359
compiler: gcc version 10.2.1 20210110 (Debian 10.2.1-6)
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+f0d5ec...@syzkaller.appspotmail.com
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
EXT4-fs (loop1): error: journal path ./file0 is not a block device
CPU: 0 PID: 11576 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fe5131dc059
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe511b0f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007fe5132ef100 RCX: 00007fe5131dc059
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000092
RBP: 00007fe51323608d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff52f726af R14: 00007fe511b0f300 R15: 0000000000022000
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop2): error: journal path ./file0 is not a block device
EXT4-fs (loop4): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop4): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: get root inode failed
kauditd_printk_skb: 60 callbacks suppressed
audit: type=1804 audit(1642871616.945:3229): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1306/bus" dev="sda1" ino=14313 res=1
audit: type=1804 audit(1642871616.955:3230): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1306/bus" dev="sda1" ino=14313 res=1
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
audit: type=1804 audit(1642871617.145:3231): pid=11698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1307/bus" dev="sda1" ino=14754 res=1
audit: type=1804 audit(1642871617.175:3232): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1307/bus" dev="sda1" ino=14754 res=1
EXT4-fs (loop4): error: journal path ./file0 is not a block device
audit: type=1804 audit(1642871617.175:3233): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1307/bus" dev="sda1" ino=14754 res=1
audit: type=1804 audit(1642871617.175:3234): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1307/bus" dev="sda1" ino=14754 res=1
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
audit: type=1804 audit(1642871617.175:3235): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1307/bus" dev="sda1" ino=14754 res=1
audit: type=1804 audit(1642871617.175:3236): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1307/bus" dev="sda1" ino=14754 res=1
audit: type=1804 audit(1642871617.175:3237): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1307/bus" dev="sda1" ino=14754 res=1
audit: type=1804 audit(1642871617.175:3238): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1307/bus" dev="sda1" ino=14754 res=1
EXT4-fs (loop5): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: get root inode failed
EXT4-fs (loop4): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop4): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop4): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop2): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop4): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop4): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop4): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop4): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: could not find journal device path: error -2
EXT4-fs (loop1): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
kauditd_printk_skb: 34 callbacks suppressed
audit: type=1804 audit(1642871622.855:3273): pid=12153 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1318/bus" dev="sda1" ino=14327 res=1
EXT4-fs (loop4): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
audit: type=1804 audit(1642871623.785:3274): pid=12202 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1319/bus" dev="sda1" ino=13953 res=1
EXT4-fs (loop5): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop2): error: journal path ./file0 is not a block device
EXT4-fs (loop4): error: journal path ./file0 is not a block device
audit: type=1804 audit(1642871623.996:3275): pid=12243 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir237242513/syzkaller.RkvVlj/1320/bus" dev="sda1" ino=13895 res=1
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop4): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
EXT4-fs (loop4): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop5): error: journal path ./file0 is not a block device
EXT4-fs (loop1): error: journal path ./file0 is not a block device
EXT4-fs (loop2): error: journal path ./file0 is not a block device
MINIX-fs: deleted inode referenced: 1
MINIX-fs: get root inode failed
EXT4-fs (loop4): error: journal path ./file0 is not a block device
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Jan 22, 2022, 12:46:19 PM1/22/22
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: 3f8a27f9e27b Linux 4.19.211
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=122bfe38700000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14d7860fb00000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+f0d5ec...@syzkaller.appspotmail.com
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8070 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
HEAD commit: 3f8a27f9e27b Linux 4.19.211
git tree: linux-4.19.y
kernel config: https://syzkaller.appspot.com/x/.config?x=9b9277b418617afe
dashboard link: https://syzkaller.appspot.com/bug?extid=f0d5eccd1e7ccd692359
compiler: gcc version 10.2.1 20210110 (Debian 10.2.1-6)
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=140d8ca8700000
dashboard link: https://syzkaller.appspot.com/bug?extid=f0d5eccd1e7ccd692359
compiler: gcc version 10.2.1 20210110 (Debian 10.2.1-6)
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14d7860fb00000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+f0d5ec...@syzkaller.appspotmail.com
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8072 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8074 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8074 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8076 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8076 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8080 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8080 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8082 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8082 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8084 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8086 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8088 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8088 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8090 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8092 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8092 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8096 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8100 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8102 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8102 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8104 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8106 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8108 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8112 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8112 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8114 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8114 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8118 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8118 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8120 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8120 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8122 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8124 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000039
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8124 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5d4a2bdb69
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
ccid3_update_send_interval.cold+0x87/0x93 net/dccp/ccids/ccid3.c:101
ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
ccid3_hc_tx_packet_sent+0x12e/0x160 net/dccp/ccids/ccid3.c:361
ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
dccp_xmit_packet+0x27e/0x760 net/dccp/output.c:289
dccp_write_xmit+0x16d/0x1d0 net/dccp/output.c:363
dccp_sendmsg+0x8de/0xc90 net/dccp/proto.c:816
inet_sendmsg+0x132/0x5a0 net/ipv4/af_inet.c:798
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x3b3/0x8e0 net/socket.c:2227
__sys_sendmmsg+0x195/0x470 net/socket.c:2322
__do_sys_sendmmsg net/socket.c:2351 [inline]
__se_sys_sendmmsg net/socket.c:2348 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2348
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5d4a26f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f5d4a345408 RCX: 00007f5d4a2bdb69
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 00007f5d4a345400 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d4a34540c
R13: 00007f5d4a313074 R14: e7594119f9b8c840 R15: 0000000000000037
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8126 Comm: syz-executor851 Not tainted 4.19.211-syzkaller #0
Reply all
Reply to author
Forward
0 new messages