syzbot


divide error in __tcp_select_window (2)
Status: internal: reported C repro on 2021/04/08 19:16
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: a7150e382267 Revert "tcp: Reset tcp connections in SYN-SENT state"
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-arm32]
First crash: 114d, last: 113d

Cause bisection: introduced by (bisect log) :
commit 997acaf6b4b59c6a9c259740312a69ea549cc684
Author: Mark Rutland <mark.rutland@arm.com>
Date: Mon Jan 11 15:37:07 2021 +0000

  lockdep: report broken irq restoration

Crash: WARNING in corrupted (log)
Repro: C syz .config
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 divide error in __tcp_select_window 2 1447d 1447d 0/3 closed as invalid on 2019/01/01 20:10
upstream divide error in __tcp_select_window C done 1119 248d 253d 21/22 fixed on 2021/03/10 01:48

Sample crash report:

Crashes (4):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-net-kasan-gce 2021/04/08 19:38 net-next 3cd52c1e32fe 6a81331a .config log report syz C divide error in __tcp_select_window
ci-upstream-net-kasan-gce 2021/04/09 20:47 net-next 4438669eb703 6a81331a .config log report info divide error in __tcp_select_window
ci-upstream-net-kasan-gce 2021/04/08 19:15 net-next 3cd52c1e32fe 6a81331a .config log report info divide error in __tcp_select_window
ci-upstream-linux-next-kasan-gce-root 2021/04/10 01:41 linux-next e99d8a849517 6a81331a .config log report info divide error in __tcp_select_window