From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753236AbdK0UjJ (ORCPT ); Mon, 27 Nov 2017 15:39:09 -0500 Received: from aserp1040.oracle.com ([141.146.126.69]:49169 "EHLO aserp1040.oracle.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752609AbdK0UjH (ORCPT ); Mon, 27 Nov 2017 15:39:07 -0500 Subject: Re: general protection fault in __rds_rdma_map To: linux-rdma@vger.kernel.org, netdev@vger.kernel.org, syzkaller-bugs@googlegroups.com References: <001a113f98d6216a60055efb17da@google.com> Cc: davem@davemloft.net, linux-kernel@vger.kernel.org, rds-devel@oss.oracle.com From: Santosh Shilimkar Organization: Oracle Corporation Message-ID: Date: Mon, 27 Nov 2017 12:39:51 -0800 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: <001a113f98d6216a60055efb17da@google.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Source-IP: userv0022.oracle.com [156.151.31.74] Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 11/27/2017 10:30 AM, syzbot wrote: > Hello, > > syzkaller hit the following crash on > e1d1ea549b57790a3d8cf6300e6ef86118d692a3 > git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/master > compiler: gcc (GCC) 7.1.1 20170620 > .config is attached > Raw console output is attached. > C reproducer is attached > syzkaller reproducer is attached. See > https://urldefense.proofpoint.com/v2/url?u=https-3A__goo.gl_kgGztJ&d=DwIBaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=hWpFvp_cTkkwMMULcvbV65orOO9Gv3OUaY0ATWhQwak&m=0pw38xYdDB2QuLTkc6b0N3240iyzMU13jwFZvLaxDSo&s=0kx55ufXFnBORomS71r4MtXomSqMRKhkHI1tGM3oPic&e= > > for information about syzkaller reproducers > > > kasan: GPF could be caused by NULL-ptr deref or user memory access > general protection fault: 0000 [#1] SMP KASAN > RDS: rds_bind could not find a transport for 224.0.0.2, load rds_tcp or > rds_rdma? Seems like the RDMA operation got triggered on the non RDMA transport lead to non populated rs->rs_transport->get_mr(). Also seems like the tests was running in the namespace and the RDMA transport doesn't yet support it. Thanks for reporting. Will look into fix internally. Regards, Santosh