From: Yanjun Zhu <yanjun.zhu@linux.dev>
To: syzbot <syzbot+833061116fa28df97f3b@syzkaller.appspotmail.com>,
haris.iqbal@ionos.com, jgg@nvidia.com, jgg@ziepe.ca,
leon@kernel.org, linux-kernel@vger.kernel.org,
linux-rdma@vger.kernel.org, rpearsonhpe@gmail.com,
syzkaller-bugs@googlegroups.com, yanjun.zhu@linux.dev,
zyjzyj2000@gmail.com
Subject: Re: [syzbot] INFO: trying to register non-static key in rxe_cleanup_task
Date: Thu, 4 Aug 2022 22:22:25 +0800 [thread overview]
Message-ID: <91d5cfd0-e8cd-ea25-e6e5-75f2f0150f98@linux.dev> (raw)
In-Reply-To: <000000000000f0980c05e5565f2d@google.com>
在 2022/8/3 21:40, syzbot 写道:
> syzbot has found a reproducer for the following issue on:
>
> HEAD commit: cb71b93c2dc3 Add linux-next specific files for 20220628
The commit fd5382c5805c ("RDMA/rxe: Fix error unwind in
rxe_create_qp()") is to fix this problem. And it is merged in linux-next
at "Jul 31 02:36:21 2022". And the HEAD commit is 2022-06-28. So this
tag next-20220628 does not include the commit.
In the tag next-20220803, this commit is included.
Zhu Yanjun
> git tree: linux-next
> console output: https://syzkaller.appspot.com/x/log.txt?x=152d1832080000
> kernel config: https://syzkaller.appspot.com/x/.config?x=badbc1adb2d582eb
> dashboard link: https://syzkaller.appspot.com/bug?extid=833061116fa28df97f3b
> compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
> syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13bdcf3c080000
>
> IMPORTANT: if you fix the issue, please add the following tag to the commit:
> Reported-by: syzbot+833061116fa28df97f3b@syzkaller.appspotmail.com
>
> infiniband syz2: set active
> infiniband syz2: added gre0
> INFO: trying to register non-static key.
> The code is fine but needs lockdep annotation, or maybe
> you didn't initialize this object before use?
> turning off the locking correctness validator.
> CPU: 0 PID: 3736 Comm: syz-executor.1 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0
> Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
> Call Trace:
> <TASK>
> __dump_stack lib/dump_stack.c:88 [inline]
> dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
> assign_lock_key kernel/locking/lockdep.c:979 [inline]
> register_lock_class+0xf30/0x1130 kernel/locking/lockdep.c:1292
> __lock_acquire+0x10a/0x5660 kernel/locking/lockdep.c:4932
> lock_acquire kernel/locking/lockdep.c:5665 [inline]
> lock_acquire+0x1ab/0x570 kernel/locking/lockdep.c:5630
> __raw_spin_lock_bh include/linux/spinlock_api_smp.h:126 [inline]
> _raw_spin_lock_bh+0x2f/0x40 kernel/locking/spinlock.c:178
> spin_lock_bh include/linux/spinlock.h:365 [inline]
> rxe_cleanup_task+0x6f/0xc0 drivers/infiniband/sw/rxe/rxe_task.c:117
> rxe_qp_do_cleanup+0x88/0x8b0 drivers/infiniband/sw/rxe/rxe_qp.c:781
> execute_in_process_context+0x37/0x150 kernel/workqueue.c:3359
> rxe_elem_release drivers/infiniband/sw/rxe/rxe_pool.c:206 [inline]
> kref_put include/linux/kref.h:65 [inline]
> __rxe_put+0x107/0x1f0 drivers/infiniband/sw/rxe/rxe_pool.c:221
> rxe_create_qp+0x2a5/0x320 drivers/infiniband/sw/rxe/rxe_verbs.c:435
> create_qp+0x5ac/0x960 drivers/infiniband/core/verbs.c:1233
> ib_create_qp_kernel+0x9d/0x310 drivers/infiniband/core/verbs.c:1344
> ib_create_qp include/rdma/ib_verbs.h:3732 [inline]
> create_mad_qp+0x177/0x2d0 drivers/infiniband/core/mad.c:2910
> ib_mad_port_open drivers/infiniband/core/mad.c:2991 [inline]
> ib_mad_init_device+0xd51/0x13f0 drivers/infiniband/core/mad.c:3082
> add_client_context+0x405/0x5e0 drivers/infiniband/core/device.c:721
> enable_device_and_get+0x1cd/0x3b0 drivers/infiniband/core/device.c:1332
> ib_register_device drivers/infiniband/core/device.c:1420 [inline]
> ib_register_device+0x814/0xaf0 drivers/infiniband/core/device.c:1366
> rxe_register_device+0x2fe/0x3b0 drivers/infiniband/sw/rxe/rxe_verbs.c:1112
> rxe_net_add+0x8c/0xe0 drivers/infiniband/sw/rxe/rxe_net.c:521
> rxe_newlink drivers/infiniband/sw/rxe/rxe.c:195 [inline]
> rxe_newlink+0xa9/0xd0 drivers/infiniband/sw/rxe/rxe.c:176
> nldev_newlink+0x32e/0x5c0 drivers/infiniband/core/nldev.c:1717
> rdma_nl_rcv_msg+0x36d/0x690 drivers/infiniband/core/netlink.c:195
> rdma_nl_rcv_skb drivers/infiniband/core/netlink.c:239 [inline]
> rdma_nl_rcv+0x2ee/0x430 drivers/infiniband/core/netlink.c:259
> netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
> netlink_unicast+0x543/0x7f0 net/netlink/af_netlink.c:1345
> netlink_sendmsg+0x917/0xe10 net/netlink/af_netlink.c:1921
> sock_sendmsg_nosec net/socket.c:714 [inline]
> sock_sendmsg+0xcf/0x120 net/socket.c:734
> ____sys_sendmsg+0x6eb/0x810 net/socket.c:2485
> ___sys_sendmsg+0xf3/0x170 net/socket.c:2539
> __sys_sendmsg net/socket.c:2568 [inline]
> __do_sys_sendmsg net/socket.c:2577 [inline]
> __se_sys_sendmsg net/socket.c:2575 [inline]
> __x64_sys_sendmsg+0x132/0x220 net/socket.c:2575
> do_syscall_x64 arch/x86/entry/common.c:50 [inline]
> do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
> entry_SYSCALL_64_after_hwframe+0x46/0xb0
> RIP: 0033:0x7f5cc9289209
> Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
> RSP: 002b:00007f5cca378168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
> RAX: ffffffffffffffda RBX: 00007f5cc939bf60 RCX: 00007f5cc9289209
> RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
> RBP: 00007f5cc92e3161 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
> R13: 00007ffcbec8964f R14: 00007f5cca378300 R15: 0000000000022000
> </TASK>
> ==================================================================
> BUG: KASAN: null-ptr-deref in instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
> BUG: KASAN: null-ptr-deref in atomic_dec include/linux/atomic/atomic-instrumented.h:257 [inline]
> BUG: KASAN: null-ptr-deref in rxe_qp_do_cleanup+0x235/0x8b0 drivers/infiniband/sw/rxe/rxe_qp.c:807
> Write of size 4 at addr 00000000000001e0 by task syz-executor.1/3736
>
> CPU: 0 PID: 3736 Comm: syz-executor.1 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0
> Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
> Call Trace:
> <TASK>
> __dump_stack lib/dump_stack.c:88 [inline]
> dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
> kasan_report+0xbe/0x1f0 mm/kasan/report.c:495
> check_region_inline mm/kasan/generic.c:183 [inline]
> kasan_check_range+0x13d/0x180 mm/kasan/generic.c:189
> instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
> atomic_dec include/linux/atomic/atomic-instrumented.h:257 [inline]
> rxe_qp_do_cleanup+0x235/0x8b0 drivers/infiniband/sw/rxe/rxe_qp.c:807
> execute_in_process_context+0x37/0x150 kernel/workqueue.c:3359
> rxe_elem_release drivers/infiniband/sw/rxe/rxe_pool.c:206 [inline]
> kref_put include/linux/kref.h:65 [inline]
> __rxe_put+0x107/0x1f0 drivers/infiniband/sw/rxe/rxe_pool.c:221
> rxe_create_qp+0x2a5/0x320 drivers/infiniband/sw/rxe/rxe_verbs.c:435
> create_qp+0x5ac/0x960 drivers/infiniband/core/verbs.c:1233
> ib_create_qp_kernel+0x9d/0x310 drivers/infiniband/core/verbs.c:1344
> ib_create_qp include/rdma/ib_verbs.h:3732 [inline]
> create_mad_qp+0x177/0x2d0 drivers/infiniband/core/mad.c:2910
> ib_mad_port_open drivers/infiniband/core/mad.c:2991 [inline]
> ib_mad_init_device+0xd51/0x13f0 drivers/infiniband/core/mad.c:3082
> add_client_context+0x405/0x5e0 drivers/infiniband/core/device.c:721
> enable_device_and_get+0x1cd/0x3b0 drivers/infiniband/core/device.c:1332
> ib_register_device drivers/infiniband/core/device.c:1420 [inline]
> ib_register_device+0x814/0xaf0 drivers/infiniband/core/device.c:1366
> rxe_register_device+0x2fe/0x3b0 drivers/infiniband/sw/rxe/rxe_verbs.c:1112
> rxe_net_add+0x8c/0xe0 drivers/infiniband/sw/rxe/rxe_net.c:521
> rxe_newlink drivers/infiniband/sw/rxe/rxe.c:195 [inline]
> rxe_newlink+0xa9/0xd0 drivers/infiniband/sw/rxe/rxe.c:176
> nldev_newlink+0x32e/0x5c0 drivers/infiniband/core/nldev.c:1717
> rdma_nl_rcv_msg+0x36d/0x690 drivers/infiniband/core/netlink.c:195
> rdma_nl_rcv_skb drivers/infiniband/core/netlink.c:239 [inline]
> rdma_nl_rcv+0x2ee/0x430 drivers/infiniband/core/netlink.c:259
> netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
> netlink_unicast+0x543/0x7f0 net/netlink/af_netlink.c:1345
> netlink_sendmsg+0x917/0xe10 net/netlink/af_netlink.c:1921
> sock_sendmsg_nosec net/socket.c:714 [inline]
> sock_sendmsg+0xcf/0x120 net/socket.c:734
> ____sys_sendmsg+0x6eb/0x810 net/socket.c:2485
> ___sys_sendmsg+0xf3/0x170 net/socket.c:2539
> __sys_sendmsg net/socket.c:2568 [inline]
> __do_sys_sendmsg net/socket.c:2577 [inline]
> __se_sys_sendmsg net/socket.c:2575 [inline]
> __x64_sys_sendmsg+0x132/0x220 net/socket.c:2575
> do_syscall_x64 arch/x86/entry/common.c:50 [inline]
> do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
> entry_SYSCALL_64_after_hwframe+0x46/0xb0
> RIP: 0033:0x7f5cc9289209
> Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
> RSP: 002b:00007f5cca378168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
> RAX: ffffffffffffffda RBX: 00007f5cc939bf60 RCX: 00007f5cc9289209
> RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
> RBP: 00007f5cc92e3161 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
> R13: 00007ffcbec8964f R14: 00007f5cca378300 R15: 0000000000022000
> </TASK>
> ==================================================================
>
next prev parent reply other threads:[~2022-08-04 14:22 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-05-23 13:36 [syzbot] INFO: trying to register non-static key in rxe_cleanup_task syzbot
2022-05-23 22:55 ` Fwd: " Bob Pearson
2022-05-24 3:01 ` Yanjun Zhu
2022-05-24 12:48 ` Jason Gunthorpe
2022-08-03 13:40 ` syzbot
2022-08-04 14:22 ` Yanjun Zhu [this message]
[not found] <20220804105325.1600-1-hdanton@sina.com>
2022-08-04 11:10 ` syzbot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=91d5cfd0-e8cd-ea25-e6e5-75f2f0150f98@linux.dev \
--to=yanjun.zhu@linux.dev \
--cc=haris.iqbal@ionos.com \
--cc=jgg@nvidia.com \
--cc=jgg@ziepe.ca \
--cc=leon@kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-rdma@vger.kernel.org \
--cc=rpearsonhpe@gmail.com \
--cc=syzbot+833061116fa28df97f3b@syzkaller.appspotmail.com \
--cc=syzkaller-bugs@googlegroups.com \
--cc=zyjzyj2000@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.