From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id BE91D38758D for ; Wed, 12 Aug 2026 16:54:21 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786553662; cv=none; b=KF2hBg03hLpREjcSD9OaiKfNf23pvdhtW//d9wFIrQWprYsesg/L2LHT+p8KjkxypnazpDOuYtuHJu8PJSGABnDpqFXgnRSqio0IPfRn8jg9wO8Tbyh8pUozy8ZluWDpJ8I536MroK6XjWk83uhIz7cmbXNQZDH9QEVdhuR7cHM= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786553662; c=relaxed/simple; bh=g73VgpNPpqAUvuJgHynTbmjGoNTYA81Z4S/LJYWWIy4=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=Rh5ShkpjHuKJUN+p/TqDYqSYyFrxyIFO62Bb0l655pwoaumKKBzmEF0U1JtbElutOKxIbw8dbQzwLhbigVVvKJ9sq6kkKHEv1QYG1CZg94rHP7Vy+GWKFcXf5cGSMNsowmLUz5wuw8wH8Y7TiCjacec5T4YsRa1oIvoHfTykwKA= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=Zm7Uc+pI; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="Zm7Uc+pI" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 487011F000E9; Wed, 12 Aug 2026 16:54:19 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1786553661; bh=637Opzxfawalyy/FgtNaXvcDWsyCO8CdShVJdQcxNsc=; h=Date:From:To:Cc:Subject:References:In-Reply-To; b=Zm7Uc+pISG1kRUxYmK4Uc9+ippcWNJY1YkzuG5/8j7Fb4kQv5UfysFJ4TEKJSMxF9 ImVdtWB9B4rjedkWprpDdG35XeLq7qvscFPpVAEDYGh40hOhKVVkIG5p0lODlfEPdM xib6kpWySil4HebbGiYRjAr4YDcQW1ZjN1B/d9tH+YYuSZYru7LwxBk9RfIFk7/5lj qwKU+owlbtrqcG2Q4Wa0tGBWJbYyyMhA6P/zm7xO6l9g6K93PEKyYeVVHvcoTc+in0 quj3jLzamXD/f6Fyn42et3l/VglQR7HwfeeTNyWt3RJzLaeu2KHh+FxnzQWlrdHrEa pYmfhFls+NWLg== Date: Wed, 12 Aug 2026 18:54:16 +0200 From: Niklas Cassel To: syzbot Cc: hch@lst.de, justin.tee@broadcom.com, kch@nvidia.com, linux-kernel@vger.kernel.org, linux-nvme@lists.infradead.org, nareshgottumukkala83@gmail.com, paul.ely@broadcom.com, sagi@grimberg.me, syzkaller-bugs@googlegroups.com Subject: Re: [syzbot] [nvme?] WARNING in nvmet_fc_register_targetport Message-ID: References: <6a7bbaa4.a2bb2777.31c27d.000b.GAE@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <6a7bbaa4.a2bb2777.31c27d.000b.GAE@google.com> On Tue, Aug 11, 2026 at 05:13:24PM -0700, syzbot wrote: > ------------[ cut here ]------------ > !PageLargeKmalloc(page) > WARNING: mm/slub.c:6602 at free_large_kmalloc+0xbf/0x100 mm/slub.c:6602, CPU#0: syz.2.261/6867 > Modules linked in: > CPU: 0 UID: 0 PID: 6867 Comm: syz.2.261 Not tainted syzkaller #0 PREEMPT(full) > Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 > RIP: 0010:free_large_kmalloc+0xbf/0x100 mm/slub.c:6602 > Code: 28 90 0f 0b 90 80 3d e8 ab 9c 0e 00 0f 84 c7 6e b7 fe 48 8b 74 24 28 48 89 ef e8 7c 3a 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 24 df 18 8e 5b 5d 41 5c 41 > RSP: 0018:ffffc9000735fa10 EFLAGS: 00010202 > RAX: 00000000000000ff RBX: ffffea00017e83c0 RCX: 000000000000002e > RDX: 0000000000000000 RSI: ffff88805fa0ff20 RDI: ffffea00017e83c0 > RBP: ffff88805fa0ff20 R08: ffff888023ddfc00 R09: 00000000ffffffff > R10: ffffffffffffffff R11: 0000000000000000 R12: 00000000ffffffff > R13: 1ffff92000e6bf5b R14: dead000000000122 R15: ffff888023ddfc90 > FS: 0000000000000000(0000) GS:ffff888096bf4000(0063) knlGS:00000000f5456b40 > CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 > CR2: 0000000000000000 CR3: 0000000025d36000 CR4: 0000000000352ef0 > Call Trace: > > nvmet_fc_alloc_ls_iodlist drivers/nvme/target/fc.c:569 [inline] > nvmet_fc_register_targetport+0x114c/0x1c30 drivers/nvme/target/fc.c:1411 > fcloop_create_target_port+0x156/0x5a0 drivers/nvme/target/fcloop.c:1558 > dev_attr_store+0x58/0x80 drivers/base/core.c:2505 > sysfs_kf_write+0xf2/0x150 fs/sysfs/file.c:145 > kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345 > new_sync_write fs/read_write.c:595 [inline] > vfs_write+0x6ac/0x1050 fs/read_write.c:687 > ksys_write+0x12a/0x250 fs/read_write.c:739 > do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline] > __do_fast_syscall_32+0xe7/0x970 arch/x86/entry/syscall_32.c:307 > do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:332 > entry_SYSENTER_compat_after_hwframe+0x84/0x8e > RIP: 0023:0xf7f96fec > Code: Unable to access opcode bytes at 0xf7f96fc2. > RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 > RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 > RDX: 000000000000002f RSI: 0000000000000000 RDI: 0000000000000000 > RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 > R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 > R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 > > > > --- > This report is generated by a bot. It may contain errors. > See https://goo.gl/tpsmEJ for more information about syzbot. > syzbot engineers can be reached at syzkaller@googlegroups.com. > > syzbot will keep track of this issue. See: > https://goo.gl/tpsmEJ#status for how to communicate with syzbot. > > If the report is already addressed, let syzbot know by replying with: > #syz fix: exact-commit-title > > If you want to overwrite report's subsystems, reply with: > #syz set subsystems: new-subsystem > (See the list of subsystem names on the web dashboard) > > If the report is a duplicate of another one, reply with: > #syz dup: exact-subject-of-another-report > > If you want to undo deduplication, reply with: > #syz undup > Fixed by: https://git.infradead.org/?p=nvme.git;a=commit;h=ba98d6796d12258e837ece065d2ecb59d76ce4ff queued for nvme-7.3. #syz fix: nvmet-fc: fix invalid free in LS IOD error path Kind regards, Niklas