Guanglei Li
2c0aa08631
RDS: IB: Fix null pointer issue
Scenario:
1. Port down and do fail over
2. Ap do rds_bind syscall
PID: 47039 TASK: ffff89887e2fe640 CPU: 47 COMMAND: "kworker/u:6"
#0 [ffff898e35f159f0] machine_kexec at ffffffff8103abf9
#1 [ffff898e35f15a60] crash_kexec at ffffffff810b96e3
#2 [ffff898e35f15b30] oops_end at ffffffff8150f518
#3 [ffff898e35f15b60] no_context at ffffffff8104854c
#4 [ffff898e35f15ba0] __bad_area_nosemaphore at ffffffff81048675
#5 [ffff898e35f15bf0] bad_area_nosemaphore at ffffffff810487d3
#6 [ffff898e35f15c00] do_page_fault at ffffffff815120b8
#7 [ffff898e35f15d10] page_fault at ffffffff8150ea95
[exception RIP: unknown or invalid address]
RIP: 0000000000000000 RSP: ffff898e35f15dc8 RFLAGS: 00010282
RAX: 00000000fffffffe RBX: ffff889b77f6fc00 RCX:ffffffff81c99d88
RDX: 0000000000000000 RSI: ffff896019ee08e8 RDI:ffff889b77f6fc00
RBP: ffff898e35f15df0 R8: ffff896019ee08c8 R9:0000000000000000
R10: 0000000000000400 R11: 0000000000000000 R12:ffff896019ee08c0
R13: ffff889b77f6fe68 R14: ffffffff81c99d80 R15: ffffffffa022a1e0
ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018
#8 [ffff898e35f15dc8] cma_ndev_work_handler at ffffffffa022a228 [rdma_cm]
#9 [ffff898e35f15df8] process_one_work at ffffffff8108a7c6
#10 [ffff898e35f15e58] worker_thread at ffffffff8108bda0
#11 [ffff898e35f15ee8] kthread at ffffffff81090fe6
PID: 45659 TASK: ffff880d313d2500 CPU: 31 COMMAND: "oracle_45659_ap"
#0 [ffff881024ccfc98] __schedule at ffffffff8150bac4
#1 [ffff881024ccfd40] schedule at ffffffff8150c2cf
#2 [ffff881024ccfd50] __mutex_lock_slowpath at ffffffff8150cee7
#3 [ffff881024ccfdc0] mutex_lock at ffffffff8150cdeb
#4 [ffff881024ccfde0] rdma_destroy_id at ffffffffa022a027 [rdma_cm]
#5 [ffff881024ccfe10] rds_ib_laddr_check at ffffffffa0357857 [rds_rdma]
#6 [ffff881024ccfe50] rds_trans_get_preferred at ffffffffa0324c2a [rds]
#7 [ffff881024ccfe80] rds_bind at ffffffffa031d690 [rds]
#8 [ffff881024ccfeb0] sys_bind at ffffffff8142a670
PID: 45659 PID: 47039
rds_ib_laddr_check
/* create id_priv with a null event_handler */
rdma_create_id
rdma_bind_addr
cma_acquire_dev
/* add id_priv to cma_dev->id_list */
cma_attach_to_dev
cma_ndev_work_handler
/* event_hanlder is null */
id_priv->id.event_handler
Signed-off-by: Guanglei Li <guanglei.li@oracle.com>
Signed-off-by: Honglei Wang <honglei.wang@oracle.com>
Reviewed-by: Junxiao Bi <junxiao.bi@oracle.com>
Reviewed-by: Yanjun Zhu <yanjun.zhu@oracle.com>
Reviewed-by: Leon Romanovsky <leonro@mellanox.com>
Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
Acked-by: Doug Ledford <dledford@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
|
2018-02-06 11:44:32 -05:00 |
| .. |
|
6lowpan
|
|
|
|
9p
|
Merge branch 'misc.poll' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
|
2018-01-30 17:58:07 -08:00 |
|
802
|
|
|
|
8021q
|
net: delete /proc THIS_MODULE references
|
2018-01-16 15:01:33 -05:00 |
|
appletalk
|
net: delete /proc THIS_MODULE references
|
2018-01-16 15:01:33 -05:00 |
|
atm
|
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
|
2018-01-31 14:31:10 -08:00 |
|
ax25
|
net: delete /proc THIS_MODULE references
|
2018-01-16 15:01:33 -05:00 |
|
batman-adv
|
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
|
2018-01-31 14:31:10 -08:00 |
|
bluetooth
|
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
|
2018-01-31 14:31:10 -08:00 |
|
bpf
|
bpf: fix null pointer deref in bpf_prog_test_run_xdp
|
2018-02-01 07:43:56 -08:00 |
|
bridge
|
net: bridge: Fix uninitialized error in br_fdb_sync_static()
|
2018-02-01 09:47:37 -05:00 |
|
caif
|
Currently, hardened usercopy performs dynamic bounds checking on slab
|
2018-02-03 16:25:42 -08:00 |
|
can
|
can: migrate documentation to restructured text
|
2018-01-26 10:46:44 +01:00 |
|
ceph
|
|
|
|
core
|
Currently, hardened usercopy performs dynamic bounds checking on slab
|
2018-02-03 16:25:42 -08:00 |
|
dcb
|
|
|
|
dccp
|
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
|
2018-01-31 14:31:10 -08:00 |
|
decnet
|
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
|
2018-01-31 14:31:10 -08:00 |
|
dns_resolver
|
|
|
|
dsa
|
net: dsa: Support internal phy on 'cpu' port
|
2018-01-23 19:22:38 -05:00 |
|
ethernet
|
|
|
|
hsr
|
|
|
|
ieee802154
|
|
|
|
ife
|
|
|
|
ipv4
|
net: erspan: fix erspan config overwrite
|
2018-02-06 11:32:49 -05:00 |
|
ipv6
|
net: erspan: fix erspan config overwrite
|
2018-02-06 11:32:49 -05:00 |
|
iucv
|
|
|
|
kcm
|
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
|
2018-01-24 23:44:15 -05:00 |
|
key
|
af_key: Fix memory leak in key_notify_policy.
|
2018-01-10 09:45:11 +01:00 |
|
l2tp
|
l2tp: remove switch block in l2tp_nl_cmd_session_create()
|
2018-01-19 15:10:23 -05:00 |
|
l3mdev
|
|
|
|
lapb
|
|
|
|
llc
|
net: delete /proc THIS_MODULE references
|
2018-01-16 15:01:33 -05:00 |
|
mac80211
|
debugfs_sta: Remove unneeded semicolons
|
2018-01-22 14:03:28 +01:00 |
|
mac802154
|
|
|
|
mpls
|
net: use rtnl_register_module where needed
|
2017-12-04 11:32:39 -05:00 |
|
ncsi
|
net/ncsi: Don't take any action on HNCDSC AEN
|
2017-12-18 14:50:11 -05:00 |
|
netfilter
|
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf
|
2018-02-01 14:41:46 -05:00 |
|
netlabel
|
|
|
|
netlink
|
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
|
2018-01-19 22:59:33 -05:00 |
|
netrom
|
net: delete /proc THIS_MODULE references
|
2018-01-16 15:01:33 -05:00 |
|
nfc
|
|
|
|
nsh
|
|
|
|
openvswitch
|
openvswitch: Remove padding from packet before L3+ conntrack processing
|
2018-02-01 09:46:22 -05:00 |
|
packet
|
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
|
2018-01-31 14:31:10 -08:00 |
|
phonet
|
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
|
2018-01-31 14:31:10 -08:00 |
|
psample
|
|
|
|
qrtr
|
net: use rtnl_register_module where needed
|
2017-12-04 11:32:39 -05:00 |
|
rds
|
RDS: IB: Fix null pointer issue
|
2018-02-06 11:44:32 -05:00 |
|
rfkill
|
|
|
|
rose
|
net: delete /proc THIS_MODULE references
|
2018-01-16 15:01:33 -05:00 |
|
rxrpc
|
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
|
2018-01-31 14:31:10 -08:00 |
|
sched
|
cls_u32: fix use after free in u32_destroy_key()
|
2018-02-06 11:25:54 -05:00 |
|
sctp
|
sctp: fix dst refcnt leak in sctp_v4_get_dst
|
2018-02-05 21:21:51 -05:00 |
|
smc
|
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
|
2018-01-31 14:31:10 -08:00 |
|
strparser
|
strparser: Call sock_owned_by_user_nocheck
|
2017-12-28 14:28:22 -05:00 |
|
sunrpc
|
NFS client updates for Linux 4.16
|
2018-01-30 19:03:48 -08:00 |
|
switchdev
|
|
|
|
tipc
|
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
|
2018-01-31 14:31:10 -08:00 |
|
tls
|
tls: Add support for encryption using async offload accelerator
|
2018-01-31 10:26:30 -05:00 |
|
unix
|
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
|
2018-01-31 14:31:10 -08:00 |
|
vmw_vsock
|
Merge branch 'misc.poll' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
|
2018-01-30 17:58:07 -08:00 |
|
wimax
|
|
|
|
wireless
|
Merge branch 'x86-pti-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
|
2018-02-04 11:45:55 -08:00 |
|
x25
|
|
|
|
xfrm
|
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next
|
2018-01-26 10:22:53 -05:00 |
|
compat.c
|
|
|
|
Kconfig
|
Staging/IIO patches for 4.16-rc1
|
2018-02-01 09:51:57 -08:00 |
|
Makefile
|
|
|
|
socket.c
|
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
|
2018-01-31 14:31:10 -08:00 |
|
sysctl_net.c
|
|
|