Received: by 2002:ac0:a5a7:0:0:0:0:0 with SMTP id m36-v6csp6059741imm; Mon, 23 Jul 2018 10:40:50 -0700 (PDT) X-Google-Smtp-Source: AAOMgpeVoQJDLg224ob97AMVAVEm1GdXsT2fEdn69NayOHyc68Ai1d74E3GpRmYO1m0Lr5N0PA+n X-Received: by 2002:a17:902:8207:: with SMTP id x7-v6mr13550778pln.57.1532367650594; Mon, 23 Jul 2018 10:40:50 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1532367650; cv=none; d=google.com; s=arc-20160816; b=ubZ3JkFSa5o1ZvmGQBpcnvYEM9kRAhH5zdadJkuN5WdH6VxPDivsAUuDMdpkhTgkoY ZGXobjc40favXAsJPZDuva5NwbZd7TBMCnWB5VaGTZbd4o4GN+2mcebpuMMkcuFvYtBY DClUUvr4PXOc7C0i719uAQT8D89Mbwyu4Ez0sgxth5MEfiD7jSokeePcsvTAT9mdAsxt yXG6GlUpBvJ+CxlGjTnwsPWVwi7Av6Juvo9p5uJcXfXUsvL09fTw3jOf8ird/w8uZRFe ptx1/NfK97h43kGL/PiE8F4O1D1xtWykYO24s2E4tWOfxRqPot9KZQhwbWXCdNzmx4Cl Hw7g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding :content-language:in-reply-to:mime-version:user-agent:date :message-id:organization:from:references:to:subject:dkim-signature :arc-authentication-results; bh=ptOcfrI9q1XzseTyNaiyIMcfwpmN+9SgliSimjX/8TM=; b=EwnMPW0rJo7VZM8dgicsbn5BhPX5W5lE+cbp4gkStP/Qed+msBWcJt29ed7AX6M7E9 ysdgMlBVQBv/FSp1eBxyvdQoHsgfaVl5mOBcs7ej2oPb5ZRmxcm/FHEb5EjxyvJ/QnUH z9TqjxlAAkgXsc+98LE3dbXSe7KN+VS4Hi3RBZ8SP74fup8lJM5zpuqrQ/O9le6Nprsb SbifR6Hj8LgndpjyJATIW1hhKHujzOdcBWDqGjQ2daG8BM42Ow8SNdKXXB6QgMB2up4t NY5UiNDLMmHWHbfQhVUqyC/Z7UX6RN9ccZp/y5TiruU8EqCinhZ6MKL+x95TCbyOc1Zh QnNg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@oracle.com header.s=corp-2018-07-02 header.b=YNfy2h0A; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=oracle.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id e21-v6si9548260pgb.131.2018.07.23.10.40.35; Mon, 23 Jul 2018 10:40:50 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@oracle.com header.s=corp-2018-07-02 header.b=YNfy2h0A; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=oracle.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S2388222AbeGWSl1 (ORCPT + 99 others); Mon, 23 Jul 2018 14:41:27 -0400 Received: from userp2130.oracle.com ([156.151.31.86]:60378 "EHLO userp2130.oracle.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S2388086AbeGWSl0 (ORCPT ); Mon, 23 Jul 2018 14:41:26 -0400 Received: from pps.filterd (userp2130.oracle.com [127.0.0.1]) by userp2130.oracle.com (8.16.0.22/8.16.0.22) with SMTP id w6NHYPcW150163; Mon, 23 Jul 2018 17:39:03 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.com; h=subject : to : references : from : message-id : date : mime-version : in-reply-to : content-type : content-transfer-encoding; s=corp-2018-07-02; bh=ptOcfrI9q1XzseTyNaiyIMcfwpmN+9SgliSimjX/8TM=; b=YNfy2h0ATyDRlPsfw9R4owjyNLzydBaRM7frLcL1RVno17TIgjYo6rP0BW5Pwsbhsya9 XcadrT6maK+pTJbNDLLthoKA2xK6ZDc8XKXJQYtIKlM2xxRV4j0cmaYh4Cc/UEXEUuZr klUF2ricw0QqgvP0grmeZMB2pRiq/iz2nXxG7mQdoGzsbCgrgEYi79a7wgX4LkXIdpX1 e17UE1ppKKNdfKt78pv7ohcXp2NXYIRnttTFlWjgAmSD1/J96Y5WFnyV75IkMcC6U2pz IPpoDSYP2D5ptRL2J7qj1mlta+bROpjyC3jUWrb1vrAVfTpG+0p4H975LDRHuBL56TNV 7w== Received: from userv0022.oracle.com (userv0022.oracle.com [156.151.31.74]) by userp2130.oracle.com with ESMTP id 2kbv8swmqe-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Mon, 23 Jul 2018 17:39:03 +0000 Received: from aserv0121.oracle.com (aserv0121.oracle.com [141.146.126.235]) by userv0022.oracle.com (8.14.4/8.14.4) with ESMTP id w6NHd1h1020346 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Mon, 23 Jul 2018 17:39:01 GMT Received: from abhmp0013.oracle.com (abhmp0013.oracle.com [141.146.116.19]) by aserv0121.oracle.com (8.14.4/8.13.8) with ESMTP id w6NHd1BV020536; Mon, 23 Jul 2018 17:39:01 GMT Received: from [10.209.243.127] (/10.209.243.127) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Mon, 23 Jul 2018 10:39:00 -0700 Subject: Re: KASAN: use-after-free Read in rds_cong_queue_updates (2) To: syzbot , davem@davemloft.net, linux-kernel@vger.kernel.org, linux-rdma@vger.kernel.org, netdev@vger.kernel.org, rds-devel@oss.oracle.com, syzkaller-bugs@googlegroups.com References: <000000000000cdb5450571adfe40@google.com> From: Santosh Shilimkar Organization: Oracle Corporation Message-ID: Date: Mon, 23 Jul 2018 10:38:58 -0700 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <000000000000cdb5450571adfe40@google.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Proofpoint-Virus-Version: vendor=nai engine=5900 definitions=8963 signatures=668706 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=603 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1806210000 definitions=main-1807230197 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 7/23/2018 10:30 AM, syzbot wrote: > Hello, > > syzbot found the following crash on: > > HEAD commit:    fcf4793e278e tls: check RCV_SHUTDOWN in tls_wait_data > git tree:       net > console output: https://syzkaller.appspot.com/x/log.txt?x=1738cb2c400000 > kernel config:  https://syzkaller.appspot.com/x/.config?x=c0bdc4175608181c > dashboard link: > https://syzkaller.appspot.com/bug?extid=470ae97a39f16146af45 > compiler:       gcc (GCC) 8.0.1 20180413 (experimental) > > Unfortunately, I don't have any reproducer for this crash yet. > > IMPORTANT: if you fix the bug, please add the following tag to the commit: > Reported-by: syzbot+470ae97a39f16146af45@syzkaller.appspotmail.com > dup: syzbot+4c20b3866171ce8441d2@syzkaller.appspotmail.com