Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Tetsuo Handa 1809c82aa0 net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts ... Since j1939_session_deactivate_activate_next() in j1939_tp_rxtimer() is called only when the timer is enabled, we need to call j1939_session_deactivate_activate_next() if we cancelled the timer. Otherwise, refcount for j1939_session leaks, which will later appear as | unregister_netdevice: waiting for vcan0 to become free. Usage count = 2. problem. Reported-by: syzbot <syzbot+881d65229ca4f9ae8c84@syzkaller.appspotmail.com> Closes: https://syzkaller.appspot.com/bug?extid=881d65229ca4f9ae8c84 Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Tested-by: Oleksij Rempel <o.rempel@pengutronix.de> Acked-by: Oleksij Rempel <o.rempel@pengutronix.de> Fixes: 9d71dd0c70 ("can: add support of SAE J1939 protocol") Link: https://patch.msgid.link/b1212653-8fa1-44e1-be9d-12f950fb3a07@I-love.SAKURA.ne.jp Cc: stable@vger.kernel.org Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>		History 2026-01-15 09:52:39 +01:00
..
address-claim.c	can: j1939: do not wait 250 ms if the same addr was already claimed	2023-02-07 15:00:22 +01:00
bus.c	can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails	2025-09-10 17:12:05 +02:00
j1939-priv.h	can: j1939: implement NETDEV_UNREGISTER notification handler	2025-09-10 17:12:04 +02:00
Kconfig	can: add support of SAE J1939 protocol	2019-09-04 14:22:33 +02:00
main.c	can: j1939: add missing calls in NETDEV_UNREGISTER notification handler	2025-10-13 21:26:31 +02:00
Makefile	can: add support of SAE J1939 protocol	2019-09-04 14:22:33 +02:00
socket.c	can: j1939: make j1939_sk_bind() fail if device is no longer registered	2025-12-17 10:47:33 +01:00
transport.c	net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts	2026-01-15 09:52:39 +01:00