linux

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-10-18 19:12:56 +00:00

No description

C 96.9%
Assembly 0.9%
Rust 0.6%
Shell 0.6%
Python 0.5%
Other 0.3%

Find a file

Jiayuan Chen 4dba44333a bpf, sockmap: Fix panic when calling skb_linearize commit `5ca2e29f68` upstream. The panic can be reproduced by executing the command: ./bench sockmap -c 2 -p 1 -a --rx-verdict-ingress --rx-strp 100000 Then a kernel panic was captured: ''' [ 657.460555] kernel BUG at net/core/skbuff.c:2178! [ 657.462680] Tainted: [W]=WARN [ 657.463287] Workqueue: events sk_psock_backlog ... [ 657.469610] <TASK> [ 657.469738] ? die+0x36/0x90 [ 657.469916] ? do_trap+0x1d0/0x270 [ 657.470118] ? pskb_expand_head+0x612/0xf40 [ 657.470376] ? pskb_expand_head+0x612/0xf40 [ 657.470620] ? do_error_trap+0xa3/0x170 [ 657.470846] ? pskb_expand_head+0x612/0xf40 [ 657.471092] ? handle_invalid_op+0x2c/0x40 [ 657.471335] ? pskb_expand_head+0x612/0xf40 [ 657.471579] ? exc_invalid_op+0x2d/0x40 [ 657.471805] ? asm_exc_invalid_op+0x1a/0x20 [ 657.472052] ? pskb_expand_head+0xd1/0xf40 [ 657.472292] ? pskb_expand_head+0x612/0xf40 [ 657.472540] ? lock_acquire+0x18f/0x4e0 [ 657.472766] ? find_held_lock+0x2d/0x110 [ 657.472999] ? __pfx_pskb_expand_head+0x10/0x10 [ 657.473263] ? __kmalloc_cache_noprof+0x5b/0x470 [ 657.473537] ? __pfx___lock_release.isra.0+0x10/0x10 [ 657.473826] __pskb_pull_tail+0xfd/0x1d20 [ 657.474062] ? __kasan_slab_alloc+0x4e/0x90 [ 657.474707] sk_psock_skb_ingress_enqueue+0x3bf/0x510 [ 657.475392] ? __kasan_kmalloc+0xaa/0xb0 [ 657.476010] sk_psock_backlog+0x5cf/0xd70 [ 657.476637] process_one_work+0x858/0x1a20 ''' The panic originates from the assertion BUG_ON(skb_shared(skb)) in skb_linearize(). A previous commit(see Fixes tag) introduced skb_get() to avoid race conditions between skb operations in the backlog and skb release in the recvmsg path. However, this caused the panic to always occur when skb_linearize is executed. The "--rx-strp 100000" parameter forces the RX path to use the strparser module which aggregates data until it reaches 100KB before calling sockmap logic. The 100KB payload exceeds MAX_MSG_FRAGS, triggering skb_linearize. To fix this issue, just move skb_get into sk_psock_skb_ingress_enqueue. ''' sk_psock_backlog: sk_psock_handle_skb skb_get(skb) <== we move it into 'sk_psock_skb_ingress_enqueue' sk_psock_skb_ingress____________ ↓ \| \| → sk_psock_skb_ingress_self \| sk_psock_skb_ingress_enqueue sk_psock_verdict_apply_________________↑ skb_linearize ''' Note that for verdict_apply path, the skb_get operation is unnecessary so we add 'take_ref' param to control it's behavior. Fixes: `a454d84ee2` ("bpf, sockmap: Fix skb refcnt race after locking changes") Signed-off-by: Jiayuan Chen <jiayuan.chen@linux.dev> Link: https://lore.kernel.org/r/20250407142234.47591-4-jiayuan.chen@linux.dev Signed-off-by: Alexei Starovoitov <ast@kernel.org> [ adapted skb_linearize() fix to 5.15's sk_psock_skb_ingress_enqueue implementation without the s_data parameter ] Signed-off-by: Sasha Levin <sashal@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		History 2025-08-28 16:24:03 +02:00
arch	x86: Fix X86_FEATURE_VERW_CLEAR definition	2025-07-17 18:30:55 +02:00
block	block: default BLOCK_LEGACY_AUTOLOAD to y	2025-06-27 11:05:34 +01:00
certs	certs/blacklist_hashes.c: fix const confusion in certs blacklist	2022-06-22 14:22:01 +02:00
crypto	crypto: xts - Only add ecb if it is not already there	2025-06-27 11:05:10 +01:00
Documentation	x86/bugs: Add a Transient Scheduler Attacks mitigation	2025-07-10 15:57:50 +02:00
drivers	platform/x86: think-lmi: Fix kobject cleanup	2025-08-28 16:24:03 +02:00
fs	clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns	2025-08-28 16:24:02 +02:00
include	net/mlx5e: Add support to klm_umr_wqe	2025-08-28 16:24:02 +02:00
init	sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP	2025-05-02 07:44:36 +02:00
io_uring	io_uring: fix possible deadlock in io_register_iowq_max_workers()	2024-11-17 15:06:25 +01:00
ipc	ipc: fix to protect IPCS lookups using RCU	2025-06-27 11:05:26 +01:00
kernel	sched: Change nr_uninterruptible type to unsigned long	2025-08-28 16:24:02 +02:00
lib	lib: bitmap: Introduce node-aware alloc API	2025-08-28 16:24:02 +02:00
LICENSES	LICENSES/dual/CC-BY-4.0: Git rid of "smart quotes"	2021-07-15 06:31:24 -06:00
mm	mm/vmalloc: leave lazy MMU mode on PTE mapping error	2025-08-28 16:24:03 +02:00
net	bpf, sockmap: Fix panic when calling skb_linearize	2025-08-28 16:24:03 +02:00
samples	samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora	2025-06-04 14:37:54 +02:00
scripts	kbuild: Add KBUILD_CPPFLAGS to as-option invocation	2025-06-27 11:05:21 +01:00
security	selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len	2025-06-27 11:05:34 +01:00
sound	ASoC: fsl_sai: Force a software reset when starting in consumer mode	2025-08-28 16:24:03 +02:00
tools	selftests: net: increase inter-packet timeout in udpgro.sh	2025-08-28 16:24:01 +02:00
usr	kbuild: hdrcheck: fix cross build with clang	2025-06-27 11:05:22 +01:00
virt	KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()	2024-10-22 15:40:41 +02:00
.clang-format	clang-format: Update with the latest for_each macro list	2021-05-12 23:32:39 +02:00
.cocciconfig	scripts: add Linux .cocciconfig for coccinelle	2016-07-22 12:13:39 +02:00
.get_maintainer.ignore	Opt out of scripts/get_maintainer.pl	2019-05-16 10:53:40 -07:00
.gitattributes	.gitattributes: use 'dts' diff driver for dts files	2019-12-04 19:44:11 -08:00
.gitignore	Remove *.orig pattern from .gitignore	2024-10-17 15:11:10 +02:00
.mailmap	mailmap: add Andrej Shadura	2021-10-18 20:22:03 -10:00
COPYING	COPYING: state that all contributions really are covered by this file	2020-02-10 13:32:20 -08:00
CREDITS	MAINTAINERS: Move Daniel Drake to credits	2021-09-21 08:34:58 +03:00
Kbuild	kbuild: rename hostprogs-y/always to hostprogs/always-y	2020-02-04 01:53:07 +09:00
Kconfig	kbuild: ensure full rebuild when the compiler is updated	2020-05-12 13:28:33 +09:00
MAINTAINERS	trace: Relocate event helper files	2024-04-10 16:19:24 +02:00
Makefile	Linux 5.15.189	2025-07-17 18:30:55 +02:00
README	Drop all 00-INDEX files from Documentation/	2018-09-09 15:08:58 -06:00

README

Linux kernel
============

There are several guides for kernel developers and users. These guides can
be rendered in a number of formats, like HTML and PDF. Please read
Documentation/admin-guide/README.rst first.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.  The formatted documentation can also be read online at:

    https://www.kernel.org/doc/html/latest/

There are various text files in the Documentation/ subdirectory,
several of them using the Restructured Text markup notation.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.