From mboxrd@z Thu Jan  1 00:00:00 1970
Content-Type: multipart/mixed; boundary="===============0045266046410040107=="
MIME-Version: 1.0
From: Florian Westphal <fw at strlen.de>
To: mptcp at lists.01.org
Subject: [MPTCP] Re: WARNING: bad unlock balance in mptcp_shutdown
Date: Sun, 12 Apr 2020 00:43:37 +0200
Message-ID: <20200411224337.GA5795@breakpoint.cc>
In-Reply-To: 000000000000adb83a05a30aaa04@google.com
X-Status: 
X-Keywords:                  
X-UID: 4154

--===============0045266046410040107==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable

> console output: https://syzkaller.appspot.com/x/log.txt?x=3D17a5dbfbe00000
> kernel config:  https://syzkaller.appspot.com/x/.config?x=3Dca75979eeebf0=
6c2
> dashboard link: https://syzkaller.appspot.com/bug?extid=3D6ebb6d4830e8f88=
15623
> compiler:       gcc (GCC) 9.0.0 20181231 (experimental)
> =

> Unfortunately, I don't have any reproducer for this crash yet.
> =

> IMPORTANT: if you fix the bug, please add the following tag to the commit:
> Reported-by: syzbot+6ebb6d4830e8f8815623(a)syzkaller.appspotmail.com
> =

> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> WARNING: bad unlock balance detected!
> 5.6.0-syzkaller #0 Not tainted
> -------------------------------------
> syz-executor.5/2215 is trying to release lock (sk_lock-AF_INET6) at:
> [<ffffffff87c5203b>] mptcp_shutdown+0x38b/0x550 net/mptcp/protocol.c:1889
> but there are no more locks to release!
> =

> other info that might help us debug this:
> 1 lock held by syz-executor.5/2215:
>  #0: ffff88804a22eda0 (slock-AF_INET6){+.-.}-{2:2}, at: spin_lock_bh incl=
ude/linux/spinlock.h:358 [inline]
>  #0: ffff88804a22eda0 (slock-AF_INET6){+.-.}-{2:2}, at: release_sock+0x1b=
/0x1b0 net/core/sock.c:2974

I think this is same issue as the other report, so:

#syz dup: WARNING: bad unlock balance in mptcp_poll
--===============0045266046410040107==--

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <SRS0=xbEg=53=vger.kernel.org=linux-kernel-owner@kernel.org>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	aws-us-west-2-korg-lkml-1.web.codeaurora.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.2 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS,
	MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED,USER_AGENT_SANE_1
	autolearn=no autolearn_force=no version=3.4.0
Received: from mail.kernel.org (mail.kernel.org [198.145.29.99])
	by smtp.lore.kernel.org (Postfix) with ESMTP id 794F5C2BA19
	for <linux-kernel@archiver.kernel.org>; Sat, 11 Apr 2020 22:44:02 +0000 (UTC)
Received: from vger.kernel.org (vger.kernel.org [209.132.180.67])
	by mail.kernel.org (Postfix) with ESMTP id 46E8620769
	for <linux-kernel@archiver.kernel.org>; Sat, 11 Apr 2020 22:44:02 +0000 (UTC)
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
        id S1726825AbgDKWoA (ORCPT
        <rfc822;linux-kernel@archiver.kernel.org>);
        Sat, 11 Apr 2020 18:44:00 -0400
Received: from Chamillionaire.breakpoint.cc ([193.142.43.52]:39340 "EHLO
        Chamillionaire.breakpoint.cc" rhost-flags-OK-OK-OK-OK)
        by vger.kernel.org with ESMTP id S1726108AbgDKWoA (ORCPT
        <rfc822;linux-kernel@vger.kernel.org>);
        Sat, 11 Apr 2020 18:44:00 -0400
Received: from fw by Chamillionaire.breakpoint.cc with local (Exim 4.92)
        (envelope-from <fw@strlen.de>)
        id 1jNOqf-0001Xx-8g; Sun, 12 Apr 2020 00:43:37 +0200
Date:   Sun, 12 Apr 2020 00:43:37 +0200
From:   Florian Westphal <fw@strlen.de>
To:     syzbot <syzbot+6ebb6d4830e8f8815623@syzkaller.appspotmail.com>
Cc:     davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org,
        mathew.j.martineau@linux.intel.com, matthieu.baerts@tessares.net,
        mptcp@lists.01.org, netdev@vger.kernel.org,
        syzkaller-bugs@googlegroups.com
Subject: Re: [MPTCP] WARNING: bad unlock balance in mptcp_shutdown
Message-ID: <20200411224337.GA5795@breakpoint.cc>
References: <000000000000adb83a05a30aaa04@google.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <000000000000adb83a05a30aaa04@google.com>
User-Agent: Mutt/1.10.1 (2018-07-13)
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

> console output: https://syzkaller.appspot.com/x/log.txt?x=17a5dbfbe00000
> kernel config:  https://syzkaller.appspot.com/x/.config?x=ca75979eeebf06c2
> dashboard link: https://syzkaller.appspot.com/bug?extid=6ebb6d4830e8f8815623
> compiler:       gcc (GCC) 9.0.0 20181231 (experimental)
> 
> Unfortunately, I don't have any reproducer for this crash yet.
> 
> IMPORTANT: if you fix the bug, please add the following tag to the commit:
> Reported-by: syzbot+6ebb6d4830e8f8815623@syzkaller.appspotmail.com
> 
> =====================================
> WARNING: bad unlock balance detected!
> 5.6.0-syzkaller #0 Not tainted
> -------------------------------------
> syz-executor.5/2215 is trying to release lock (sk_lock-AF_INET6) at:
> [<ffffffff87c5203b>] mptcp_shutdown+0x38b/0x550 net/mptcp/protocol.c:1889
> but there are no more locks to release!
> 
> other info that might help us debug this:
> 1 lock held by syz-executor.5/2215:
>  #0: ffff88804a22eda0 (slock-AF_INET6){+.-.}-{2:2}, at: spin_lock_bh include/linux/spinlock.h:358 [inline]
>  #0: ffff88804a22eda0 (slock-AF_INET6){+.-.}-{2:2}, at: release_sock+0x1b/0x1b0 net/core/sock.c:2974

I think this is same issue as the other report, so:

#syz dup: WARNING: bad unlock balance in mptcp_poll