[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20250629144748.45117-1-contact@arnaud-lcm.com>
Date: Sun, 29 Jun 2025 15:47:48 +0100
From: Arnaud Lecomte <contact@...aud-lcm.com>
To: syzbot+827ae2bfb3a3529333e9@...kaller.appspotmail.com
Cc: agordeev@...ux.ibm.com,
alibuda@...ux.alibaba.com,
davem@...emloft.net,
edumazet@...gle.com,
guwen@...ux.alibaba.com,
horms@...nel.org,
jaka@...ux.ibm.com,
kuba@...nel.org,
linux-kernel@...r.kernel.org,
linux-rdma@...r.kernel.org,
linux-s390@...r.kernel.org,
netdev@...r.kernel.org,
pabeni@...hat.com,
syzkaller-bugs@...glegroups.com,
tonylu@...ux.alibaba.com,
wenjia@...ux.ibm.com
Subject: syztest
#syz test
--- a/net/smc/af_smc.c
+++ b/net/smc/af_smc.c
@@ -126,8 +126,12 @@ static struct sock *smc_tcp_syn_recv_sock(const struct sock *sk,
struct smc_sock *smc;
struct sock *child;
+ lockdep_assert_held_read(&sk->sk_callback_lock);
smc = smc_clcsock_user_data(sk);
+ if (!smc)
+ goto drop;
+
if (READ_ONCE(sk->sk_ack_backlog) + atomic_read(&smc->queued_smc_hs) >
sk->sk_max_ack_backlog)
goto drop;
--
2.43.0
Powered by blists - more mailing lists