syzbot


WARNING in tcp_disconnect

Status: fixed on 2023/02/24 13:50
Subsystems: net
[Documentation on labels]
Fix commit: 72e560cb8c6f tcp: cdg: allow tcp_cdg_release() to be called multiple times
First crash: 559d, last: 555d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in tcp_disconnect (2) net 1 91d 87d 0/26 upstream: reported on 2024/01/30 14:38

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3700 at mm/slub.c:3572 compound_order include/linux/mm.h:684 [inline]
WARNING: CPU: 1 PID: 3700 at mm/slub.c:3572 folio_order include/linux/mm.h:700 [inline]
WARNING: CPU: 1 PID: 3700 at mm/slub.c:3572 free_large_kmalloc+0x46/0x1a0 mm/slub.c:3570
Modules linked in:
CPU: 1 PID: 3700 Comm: kworker/1:5 Not tainted 6.0.0-syzkaller-09589-g55be6084c8e0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
Workqueue: events mptcp_worker
RIP: 0010:free_large_kmalloc+0x46/0x1a0 mm/slub.c:3572
Code: 48 8b 07 48 83 f8 ff 0f 84 26 01 00 00 49 89 f6 49 f7 07 00 00 01 00 74 11 0f 1f 44 00 00 4c 89 f8 4c 39 f8 0f 84 45 01 00 00 <0f> 0b 31 db 80 3d 67 42 36 0c 00 0f 84 c0 00 00 00 48 8b 74 24 30
RSP: 0018:ffffc900044e7a28 EFLAGS: 00010246
RAX: 00fff00000000000 RBX: ffff88801dfb1380 RCX: ffffea0000000000
RDX: 0000000000000000 RSI: ffff88801dfb1380 RDI: ffffea000077ec40
RBP: ffffffff8e288510 R08: ffffffff813ccd27 R09: ffffed100f1df4d5
R10: ffffed100f1df4d5 R11: 1ffff1100f1df4d4 R12: 00000000c86dd3be
R13: ffff888078efa640 R14: ffff88801dfb1380 R15: ffffea000077ec40
FS:  0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555556c62848 CR3: 0000000027e94000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 kfree+0x182/0x210 mm/slub.c:4563
 tcp_disconnect+0x9ee/0x1a10 net/ipv4/tcp.c:3145
 __mptcp_close_ssk+0x31a/0x6a0 net/mptcp/protocol.c:2327
 mptcp_do_fastclose net/mptcp/protocol.c:2592 [inline]
 mptcp_worker+0x67b/0xfe0 net/mptcp/protocol.c:2627
 process_one_work+0x81c/0xd10 kernel/workqueue.c:2289
 worker_thread+0xb14/0x1330 kernel/workqueue.c:2436
 kthread+0x266/0x300 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/10/19 23:31 upstream 55be6084c8e0 b31320fc .config console log report info [disk image] [vmlinux] ci-upstream-kasan-gce-smack-root WARNING in tcp_disconnect
2022/10/15 16:37 upstream 55be6084c8e0 67cb024c .config console log report info [disk image] [vmlinux] ci-upstream-kasan-gce-smack-root WARNING in tcp_disconnect
* Struck through repros no longer work on HEAD.