Received: by 2002:a05:6358:701b:b0:131:369:b2a3 with SMTP id 27csp78024rwo;
        Fri, 21 Jul 2023 08:46:29 -0700 (PDT)
X-Google-Smtp-Source: APBJJlFCfeMxya6FRjyhkn90CDiY9ymiZQlypb5FTJAAmAjTyyWQ4PheHtj6D9vlfXwc0p+M3E7e
X-Received: by 2002:a17:90b:4d8f:b0:25e:d303:b710 with SMTP id oj15-20020a17090b4d8f00b0025ed303b710mr1468990pjb.35.1689954389404;
        Fri, 21 Jul 2023 08:46:29 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1689954389; cv=none;
        d=google.com; s=arc-20160816;
        b=FTYylFAjaBjr6nGyeThtV9RY8GSekPIQQ5Lsx7Lk+vQ2LRns+r7aatAz990GV/jaCX
         NJ7Jk4WFb4CRQwe5vRGoxl6y8KWT7Cjc6JcfAvfie4fxe2whqZh9pgBvbAigtyk2vFqo
         VMpTytONxyO1Z2bPn82xEIUypQA0ggU/PlnT+LClk+P/8htSRU4eCunSReTm4hAlGW6T
         vNqRMDnxTcVb06/h0m1VuVXzRNoy3Y8RG9EmDi6FBMLol4mjJqvK2C2UpbosKRC43VUs
         zs9GokSUwqJp0hwewqz+xCEZTNFlc56f4gI4+a7n/qA9a68HLw0tk7ES5paH/EDgAyYr
         lVHQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=list-id:precedence:content-transfer-encoding:mime-version
         :message-id:date:subject:cc:to:from:dkim-signature:dkim-filter;
        bh=XTwyWVZFfamFmp6s8GAMDD3q7CDQ92gXY7bdsxBiQgM=;
        fh=LUP5IHEZW906N0fgnoUAkV2MmcNkOZdFBb3CBZ3NTmk=;
        b=QNdLNEmKivxo4g17Go7yCKIweFxYg6mp7KfHrUutvbYzQX5lnqgctN4HDjMJTl470r
         ASoGpfHQyib1lmfmeH5ruz6xNsfPH5RDyYgCtUedD5wXfe3Mvzcv3Hg5MrVMjBRv0yU3
         tWJDWa6DQlEEDqkuffkKEhwdf/v4/4+omkMIesty06vLLArd+tfwbeXofvzc/b9y+ysB
         slyZl3iNUl9O3JiGM/fy/OTd4+qz9tuOEW9j45R17nIs8ZakzUiVy4M7RKqubyXY2j2P
         od5gUcMc3ol1BXQWrMy3QQxyGB/eEcTpAPON/TiW7OnwO0FncHpwKX5RXt/xh8NJewWj
         X9vA==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@ispras.ru header.s=default header.b=PLyJJ0OY;
       spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=ispras.ru
Return-Path: <linux-kernel-owner@vger.kernel.org>
Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20])
        by mx.google.com with ESMTP id k190-20020a6384c7000000b0055b3d494058si3237998pgd.23.2023.07.21.08.46.13;
        Fri, 21 Jul 2023 08:46:29 -0700 (PDT)
Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@ispras.ru header.s=default header.b=PLyJJ0OY;
       spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=ispras.ru
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
        id S231716AbjGUPNz (ORCPT <rfc822;andreas.gruenbacher@gmail.com>
        + 99 others); Fri, 21 Jul 2023 11:13:55 -0400
Received: from lindbergh.monkeyblade.net ([23.128.96.19]:49350 "EHLO
        lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org
        with ESMTP id S231693AbjGUPNv (ORCPT
        <rfc822;linux-kernel@vger.kernel.org>);
        Fri, 21 Jul 2023 11:13:51 -0400
Received: from mail.ispras.ru (mail.ispras.ru [83.149.199.84])
        by lindbergh.monkeyblade.net (Postfix) with ESMTPS id EE5A530E3;
        Fri, 21 Jul 2023 08:13:43 -0700 (PDT)
Received: from tp-owlcat.intra.ispras.ru (unknown [10.10.165.6])
        by mail.ispras.ru (Postfix) with ESMTPSA id 48BD440B27AC;
        Fri, 21 Jul 2023 15:05:56 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.ispras.ru 48BD440B27AC
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ispras.ru;
        s=default; t=1689951956;
        bh=XTwyWVZFfamFmp6s8GAMDD3q7CDQ92gXY7bdsxBiQgM=;
        h=From:To:Cc:Subject:Date:From;
        b=PLyJJ0OYyZKy8MvMZvxtAZQIuGtOWU6a3m58PwuMkGqtDcQtYLfrI34fNN4pqgP4X
         WqQdOKEBzerD3zpShixEKvc0xcFqmga7zPBogZy94XzlgHDoAJcvuKxhlj3ivoryvx
         dWHNOzmCmsYq54vPJ0wkJjqEgWf79FciN8oQ++y4=
From:   Anton Gusev <aagusev@ispras.ru>
To:     stable@vger.kernel.org,
        Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Cc:     Anton Gusev <aagusev@ispras.ru>,
        Doug Ledford <dledford@redhat.com>,
        Jason Gunthorpe <jgg@ziepe.ca>,
        Leon Romanovsky <leon@kernel.org>,
        Sasha Levin <sashal@kernel.org>,
        Mark Zhang <markzhang@nvidia.com>,
        =?UTF-8?q?H=C3=A5kon=20Bugge?= <haakon.bugge@oracle.com>,
        Michael Guralnik <michaelgur@nvidia.com>,
        Roland Dreier <rolandd@cisco.com>,
        Sean Hefty <sean.hefty@intel.com>, linux-rdma@vger.kernel.org,
        linux-kernel@vger.kernel.org, lvc-project@linuxtesting.org
Subject: [PATCH 5.10 0/1] RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
Date:   Fri, 21 Jul 2023 18:05:32 +0300
Message-ID: <20230721150535.191318-1-aagusev@ispras.ru>
X-Mailer: git-send-email 2.41.0
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_BLOCKED,
        SPF_HELO_NONE,SPF_PASS,T_SCC_BODY_TEXT_LINE,URIBL_BLOCKED
        autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

Syzkaller reports use-after-free at addr_handler in 5.10 stable
releases. The problem was fixed in upstream and backported into
5.14, but wasn't applied to 5.10 and lower versions due to a small
merge conflict.

This patch is a modified version that can be cleanly applied to 5.10 and
5.4 stable branches.

Found by Linux Verification Center (linuxtesting.org) with Syzkaller.