WARNING in cma_exit_net

Status: fixed on 2019/06/14 18:22
Subsystems: rdma
[Documentation on labels]
Reported-by: syzbot+2e3e485d5697ea610460@syzkaller.appspotmail.com
Fix commit: 061ccb52d23c RDMA/cma: Set proper port number as index
First crash: 2682d, last: 2680d
▶ ▼ Duplicate bugs (1)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
KASAN: use-after-free Read in cma_check_port rdma 19 syz, C 33 2679d 2681d 0/29 closed as dup on 2019/04/01 18:32
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
WARNING in cma_exit_net 4 (5) 2019/04/03 05:11

Sample crash report:
WARNING: CPU: 1 PID: 44 at drivers/infiniband/core/cma.c:4674 cma_exit_net+0x327/0x390 drivers/infiniband/core/cma.c:4674
Kernel panic - not syncing: panic_on_warn set ...
CPU: 1 PID: 44 Comm: kworker/u4:2 Not tainted 5.1.0-rc3-next-20190402 #16
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 panic+0x2cb/0x65c kernel/panic.c:214
 __warn.cold+0x20/0x45 kernel/panic.c:571
 report_bug+0x263/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 fixup_bug arch/x86/kernel/traps.c:174 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:272
 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:291
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:973
RIP: 0010:cma_exit_net+0x327/0x390 drivers/infiniband/core/cma.c:4674
Code: 00 48 c7 c7 80 54 ea 87 c6 05 9c 00 4a 04 01 e8 2a 3e 46 fc e9 c8 fd ff ff e8 85 dd 5e fc 0f 0b e9 d7 fe ff ff e8 79 dd 5e fc <0f> 0b e8 72 dd 5e fc 48 8d 65 e8 5b 41 5c 41 5d 5d c3 e8 62 dd 5e
RSP: 0018:ffff8880a98f7bf0 EFLAGS: 00010293
RAX: ffff8880a98aa440 RBX: ffff888091b83a40 RCX: 1ffff11015315596
RDX: 0000000000000000 RSI: ffffffff8511a367 RDI: ffff888091b83b58
RBP: ffff8880a98f7c08 R08: ffff8880a98aa440 R09: 0000000000000004
R10: ffffed1015d25bcf R11: ffff8880ae92de7b R12: 0000000000000001
R13: ffff888091042dc0 R14: ffffffff891e3218 R15: dffffc0000000000
 ops_exit_list.isra.0+0xb0/0x160 net/core/net_namespace.c:153
 cleanup_net+0x3fb/0x960 net/core/net_namespace.c:552
 process_one_work+0x98e/0x1790 kernel/workqueue.c:2270
 worker_thread+0x98/0xe40 kernel/workqueue.c:2416
 kthread+0x357/0x430 kernel/kthread.c:254
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (25):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/04/03 04:21 linux-next 05d08e2995cb dfd3394d .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/03 00:40 linux-next 05d08e2995cb dfd3394d .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/02 19:03 linux-next 05d08e2995cb dfd3394d .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/02 18:02 linux-next 05d08e2995cb dfd3394d .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/02 17:47 linux-next 05d08e2995cb dfd3394d .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/02 17:27 linux-next 05d08e2995cb dfd3394d .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/02 14:32 linux-next 05d08e2995cb dfd3394d .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/02 12:41 linux-next 05d08e2995cb dfd3394d .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/02 12:20 linux-next 05d08e2995cb dfd3394d .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/02 12:18 linux-next 05d08e2995cb dfd3394d .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/02 12:16 linux-next 05d08e2995cb dfd3394d .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/02 12:08 linux-next 05d08e2995cb dfd3394d .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/02 12:08 linux-next 05d08e2995cb dfd3394d .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/02 08:00 linux-next 05d08e2995cb a9ca43d4 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/02 07:46 linux-next 05d08e2995cb a9ca43d4 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/02 07:30 linux-next 05d08e2995cb a9ca43d4 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/02 07:14 linux-next 05d08e2995cb a9ca43d4 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/01 19:02 linux-next e3ecb83ee707 a9ca43d4 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/01 18:55 linux-next e3ecb83ee707 a9ca43d4 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/01 06:30 linux-next e3ecb83ee707 ccf2355a .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/01 06:03 linux-next e3ecb83ee707 ccf2355a .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/01 04:28 linux-next e3ecb83ee707 ccf2355a .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/01 04:22 linux-next e3ecb83ee707 ccf2355a .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/01 03:41 linux-next e3ecb83ee707 ccf2355a .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/01 03:30 linux-next e3ecb83ee707 ccf2355a .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.