Re: KASAN: slab-out-of-bounds Read in rds_cong_queue_updates

2018-03-18 Thread Dmitry Vyukov
On Mon, Mar 19, 2018 at 9:37 AM, Sowmini Varadhan wrote: > On (03/19/18 09:29), Dmitry Vyukov wrote: >> >> This looks the same as: >> >> #syz dup: KASAN: use-after-free Read in rds_cong_queue_updates > > correct, seems like the rds_destroy_pending() fixes did not seal > this race condition. I need

Re: KASAN: slab-out-of-bounds Read in rds_cong_queue_updates

2018-03-18 Thread Sowmini Varadhan
On (03/19/18 09:29), Dmitry Vyukov wrote: > > This looks the same as: > > #syz dup: KASAN: use-after-free Read in rds_cong_queue_updates correct, seems like the rds_destroy_pending() fixes did not seal this race condition. I need to look at this more carefully to see what race I missed.. no easy

Re: KASAN: slab-out-of-bounds Read in rds_cong_queue_updates

2018-03-18 Thread Dmitry Vyukov
On Thu, Feb 22, 2018 at 12:49 PM, syzbot wrote: > Hello, > > syzbot hit the following crash on upstream commit > 79c0ef3e85c015b0921a8fd5dd539d1480e9cd6c (Mon Feb 19 19:58:19 2018 +) > Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net > > So far this crash happened 28 times on > ht