Re: bpf's usage of sk_user_data

2020-07-07 Thread Martin KaFai Lau
On Tue, Jul 07, 2020 at 10:37:30AM +0100, James Chapman wrote: > I'm investigating a crash found by syzbot which turns out to be caused > by bpf_sk_reuseport_detach assuming ownership of sk_user_data in the > UDP socket destroy path and corrupts metadata of a UDP socket user (l2tp). > > Here's the

bpf's usage of sk_user_data

2020-07-07 Thread James Chapman
I'm investigating a crash found by syzbot which turns out to be caused by bpf_sk_reuseport_detach assuming ownership of sk_user_data in the UDP socket destroy path and corrupts metadata of a UDP socket user (l2tp). Here's the syzbot report: https://syzkaller.appspot.com/bug?extid=9f092552ba9a5efca