From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-io1-f79.google.com (mail-io1-f79.google.com [209.85.166.79]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 8989C31B818 for ; Wed, 26 Nov 2025 11:53:43 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.166.79 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1764158025; cv=none; b=u6M7R+GnxaomVOU6Bfl0jIyUlqAmynzLLded9WrCBndLpM0SbNhbDEangA1bl9dUeEyEqYVQEPrl+r45PUCEIvYrXDT9VJ93xviPXW5F/PPwAdy1JgxENerqcwFoCvvzLMMEYwOJ8+uy+rQmJ66DzWoA1EbqJtDso+1Y/8rt2iI= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1764158025; c=relaxed/simple; bh=d28rnoKn378QyQRzalAhyn3oWwe1MmJbM0HS6LTxd5M=; h=MIME-Version:Date:In-Reply-To:Message-ID:Subject:From:To: Content-Type; b=mlJO67SwCIDrOI6TR7yKxTaxBcgYpuqGGvwM1v+DBEg8oi7rxnfSkuqhpZZt3kf91CtOOYAMUuAjANJtLI9ndDX9Le9ddRX9fwK4ede+t7088thDWYdLSsnSWXehZWTnw6wtC9J6nEUxRrprtBywk2SRitjqY+Jn+r6REI1Z+k0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; arc=none smtp.client-ip=209.85.166.79 Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com Received: by mail-io1-f79.google.com with SMTP id ca18e2360f4ac-9490559deffso457647939f.3 for ; Wed, 26 Nov 2025 03:53:43 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1764158022; x=1764762822; h=to:from:subject:message-id:in-reply-to:date:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=NV/CpenaVv4bD4j2OUPwec1/0skBrou1Rf1glsnblPA=; b=XQYJuxKRaNN0RZAAnG387r3jLicdQOcXZni5rOBE992E43pDpt8e0dSzNDgsz2y0Du V3gdib9F9HEg96YBEtumq1p/6PXBIljB9tGGzhSN+9eswFSzjWCDg7uyQohXA1Mz3IOy e//j2h/EAgqwt8YsG1YqEDlbjR7pEkijTSG9yOfE8575x0J5hG8A6oEa0xetELWSVGcN 3N+pUL/I8fXsVYfiD1nTbN6T/oK7SXyKiyYHyXOg9VoL7Ue9k/VxBmMuFJpgXikT0rPW Rn/SDcjwkbq0Gtxa67snbTcGapkudlbnc83ZEhqcCmRyDXo7SrL8NktkzWDeZpecXL9M UL6Q== X-Gm-Message-State: AOJu0Yzfnj0XPGId3nQTXzE7noBEVYcpYnPuIYegYLdBcsSu2NektwEj 5a2qjEvKpIo8sVLvbLzLi52mLJchJSZ5GcCzPLEgKzxgypi1XKijfsZrZRJVqGqsZTlU+7RWoRL zWynhczkrdJytZs58VRGQcD+MpAaJtWDw6oqOXhPdcAEkdxGiangrnXrO7rwpTw== X-Google-Smtp-Source: AGHT+IFBH/eP2yRfWouP8AfI8m9jwalSTUwYaYUnXUEoGnE6aPFspZRaUmMtox7/bO3pRMhanRDHOVPTuoY4n0AOMVgIVIq3oHL5 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Received: by 2002:a05:6e02:3184:b0:435:a05c:e9a0 with SMTP id e9e14a558f8ab-435b986a9aamr150302245ab.14.1764158022438; Wed, 26 Nov 2025 03:53:42 -0800 (PST) Date: Wed, 26 Nov 2025 03:53:42 -0800 In-Reply-To: <69260882.a70a0220.d98e3.00b4.GAE@google.com> X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <6926ea46.a70a0220.d98e3.00d3.GAE@google.com> Subject: Forwarded: Re: [syzbot] [net?] divide error in __tcp_select_window (4) From: syzbot To: linux-kernel@vger.kernel.org Content-Type: text/plain; charset="UTF-8" For archival purposes, forwarding an incoming command email to linux-kernel@vger.kernel.org. *** Subject: Re: [syzbot] [net?] divide error in __tcp_select_window (4) Author: matttbe@kernel.org On 26/11/2025 12:51, syzbot wrote: >> Hello, >> >> (+cc Paolo) >> >> On 26/11/2025 12:28, Matthieu Baerts wrote: >>> Hello, >>> >>> (Without other ML's to test a different fix) >>> >>> On 25/11/2025 20:50, syzbot wrote: >>>> Hello, >>>> >>>> syzbot found the following issue on: >>>> >>>> HEAD commit: e2c20036a887 Merge branch 'devlink-net-mlx5-implement-swp_.. >>>> git tree: net-next >>>> console output: https://syzkaller.appspot.com/x/log.txt?x=1164c484580000 >>>> kernel config: https://syzkaller.appspot.com/x/.config?x=a881ccda32df4e75 >>>> dashboard link: https://syzkaller.appspot.com/bug?extid=3a92d359bc2ec6255a33 >>>> compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 >>>> syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13f8fa12580000 >>>> C reproducer: https://syzkaller.appspot.com/x/repro.c?x=113a5a12580000 >>>> >>>> Downloadable assets: >>>> disk image: https://storage.googleapis.com/syzbot-assets/07279e689a07/disk-e2c20036.raw.xz >>>> vmlinux: https://storage.googleapis.com/syzbot-assets/b13e2e59c1ed/vmlinux-e2c20036.xz >>>> kernel image: https://storage.googleapis.com/syzbot-assets/f6f519394597/bzImage-e2c20036.xz >>>> >>>> The issue was bisected to: >>>> >>>> commit ae155060247be8dcae3802a95bd1bdf93ab3215d >>>> Author: Paolo Abeni >>>> Date: Tue Nov 18 07:20:24 2025 +0000 >>>> >>>> mptcp: fix duplicate reset on fastclose >>>> >>>> bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=11f698b4580000 >>>> final oops: https://syzkaller.appspot.com/x/report.txt?x=13f698b4580000 >>>> console output: https://syzkaller.appspot.com/x/log.txt?x=15f698b4580000 >>>> >>>> IMPORTANT: if you fix the issue, please add the following tag to the commit: >>>> Reported-by: syzbot+3a92d359bc2ec6255a33@syzkaller.appspotmail.com >>>> Fixes: ae155060247b ("mptcp: fix duplicate reset on fastclose") >>> >>> I *think* this issue might have been fixed by another patch that has >>> been sent recently, see "mptcp: clear scheduled subflows on retransmit": >>> >>> >>> #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/matttbe/net-next.git b4/net-mptcp-clear-sched-rtx >> >> >> Mmh, sorry for the noise, I just noticed the reproducers were apparently >> only working on top of net-next, and my branch was on top of 'net'. >> Sending the patch with net-next as base then. >> >> #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git > > "Cheers," does not look like a valid git branch or commit. Picky :) Sorry, new attempt including the branch name (and the patch): #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git main Cheers, Matt -- Sponsored by the NGI0 Core fund.