Re: Kernel panic on shutdown (qede+bond+bridge) - KASAN: use-after-free in netif_skb_features+0x90a/0x9b0
From: Igor Russkikh <hidden>
Date: 2021-01-11 17:25:06
quoted
I've been trying out the latest CentOS 8 Stream kernel and found that I get kernel panic(https://urldefense.proofpoint.com/v2/url?u=https-3A__bugzilla.redhat.com_ show-5Fbug.cgi-3Fid-3D1913481&d=DwICAg&c=nKjWec2b6R0mOyPaz7xtfQ&r=3kUjVPjr PMvlbd3rzgP63W0eewvCq4D-kzQRqaXHOqU&m=5qgG2X21EmG-uINb8zuD_KKoPReTy65Q4c4K -zzCy2s&s=CQwqKQuIm5UJvVJXF2f2LMTagB7PVxG8-IxPqPHkenc&e= )quoted
when trying to reboot the server. With debug kernel I've got following: [ 531.818434] ================================================================== [ 531.818435] BUG: KASAN: use-after-free in netif_skb_features+0x90a/0x9b0 [ 531.818436] Read of size 8 at addr ffff893c74d54b50 by task systemd- shutdow/1 [ 531.818436] [ 531.818437] CPU: 20 PID: 1 Comm: systemd-shutdow Tainted: G W I --------- - - 4.18.0-259.el8.x86_64+debug #1 [ 531.818438] Hardware name: HPE ProLiant DL380 Gen10/ProLiant DL380 Gen10, BIOS U30 07/16/2020Have you managed to find a fix? If not perhaps try an upstream build? Unlikely someone here will be willing to help with a RHEL kernel, and we can't even access the bug report in bugzilla.
For the record, (thanks Manish Chopra for finding this) here is a fix (I
believe missing in RHEL tree):
commit 2c1644cf6d46a8267d79ed95cb9b563839346562
Author: Feng Sun [off-list ref]
Date: Mon Aug 26 14:46:04 2019 +0800
net: fix skb use after free in netpoll
Thanks
Igor