bisecting fixing commit since 21ad423fe5210f5aa50bd43f9ae99b655090a227
building syzkaller on 0b33604d8e2793b82ec89abecf82d92b82e3d410
testing commit 21ad423fe5210f5aa50bd43f9ae99b655090a227
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 19a813af028cffae02b76fb693ecd3d72641c9d503033922c6ec65c9c74844de
run #0: crashed: unregister_netdevice: waiting for DEV to become free
run #1: crashed: unregister_netdevice: waiting for DEV to become free
run #2: crashed: BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
run #3: crashed: BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
run #4: crashed: BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
run #5: crashed: BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
run #6: crashed: BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
run #7: crashed: unregister_netdevice: waiting for DEV to become free
run #8: crashed: BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
run #9: crashed: BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
run #10: crashed: unregister_netdevice: waiting for DEV to become free
run #11: crashed: BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
run #12: crashed: BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
run #13: crashed: BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
run #14: crashed: unregister_netdevice: waiting for DEV to become free
run #15: crashed: unregister_netdevice: waiting for DEV to become free
run #16: crashed: unregister_netdevice: waiting for DEV to become free
run #17: crashed: unregister_netdevice: waiting for DEV to become free
run #18: crashed: unregister_netdevice: waiting for DEV to become free
run #19: crashed: unregister_netdevice: waiting for DEV to become free
testing current HEAD af48f51cb5934738a3ee97e951d7dededf029488
testing commit af48f51cb5934738a3ee97e951d7dededf029488
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 1060646f8670f57a28c4b9e61734c7acb5a9bf6f1de6ba2b05081a4ba075c9cc
run #0: crashed: unregister_netdevice: waiting for DEV to become free
run #1: crashed: BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
run #2: crashed: unregister_netdevice: waiting for DEV to become free
run #3: crashed: BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
run #4: crashed: BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
run #5: crashed: BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
run #6: crashed: BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
run #7: crashed: unregister_netdevice: waiting for DEV to become free
run #8: crashed: BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
run #9: crashed: BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
revisions tested: 2, total time: 25m0.255458301s (build: 17m33.909205151s, test: 6m49.428050696s)
the crash still happens on HEAD
commit msg: Linux 4.14.271
crash: BUG: "hc->tx_t_ipi == NUM" holds (exception!) at net/dccp/ccids/ccid3.c:LINE/ccid3_update_send_interval()
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8300 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8302 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8302 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8304 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8304 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8305 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8305 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8306 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8306 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8308 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8308 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8310 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8310 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8311 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8311 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8312 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8312 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8313 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8313 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8315 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000000000000001a RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8315 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8316 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8316 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8317 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8317 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8319 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000000000000001d RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8319 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8320 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8320 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8322 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8324 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000000000000001b RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8324 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8325 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8325 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8326 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8326 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8326 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 0 PID: 8328 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000000000000001b RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8328 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8329 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8329 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_s net/dccp/ccids/ccid3.c:178 [inline]
 ccid3_hc_tx_packet_sent+0xe5/0x110 net/dccp/ccids/ccid3.c:361
 ccid_hc_tx_packet_sent net/dccp/ccid.h:178 [inline]
 dccp_xmit_packet+0x226/0x620 net/dccp/output.c:289
 dccp_write_xmit+0x125/0x180 net/dccp/output.c:363
 dccp_sendmsg+0x577/0xc60 net/dccp/proto.c:811
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x282/0x920 net/socket.c:2062
 __sys_sendmmsg+0x126/0x300 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0xd/0x20 net/socket.c:2178
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5313e3cee9
RDX: 0000000000000001 RSI: 0000000020000fc0 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc77d83dc8
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
BUG: "hc->tx_t_ipi == 0" holds (exception!) at net/dccp/ccids/ccid3.c:101/ccid3_update_send_interval()
CPU: 1 PID: 8330 Comm: syz-executor594 Not tainted 4.14.271-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 ccid3_update_send_interval net/dccp/ccids/ccid3.c:101 [inline]
 ccid3_update_send_interval.cold.13+0x7a/0x86 net/dccp/ccids/ccid3.c:97
 ccid3_hc_tx_update_x+0x353/0x630 net/dccp/ccids/ccid3.c:161
 ccid3_hc_tx_packet_recv+0x3d4/0xb50 net/dccp/ccids/ccid3.c:425
 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline]
 dccp_deliver_input_to_ccids+0x19f/0x210 net/dccp/input.c:186
 dccp_rcv_established net/dccp/input.c:378 [inline]
 dccp_rcv_established+0x49/0x70 net/dccp/input.c:368
 dccp_v4_do_rcv+0xfa/0x160 net/dccp/ipv4.c:656
 sk_backlog_rcv include/net/sock.h:923 [inline]
 __release_sock+0x10e/0x2f0 net/core/sock.c:2287
 release_sock+0x4f/0x180 net/core/sock.c:2825
 dccp_sendmsg+0x4c1/0xc60 net/dccp/proto.c:813
 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 SYSC_sendto net/socket.c:1763 [inline]
 SyS_sendto+0x1e4/0x2c0 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5313e3cee9
RSP: 002b:00007ffc77d83c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f5313e3cee9
RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc77d83c3c