On 17.06.2021 15:06:23, Oleksij Rempel wrote: > Set SOCK_RCU_FREE to let RCU to call sk_destruct() on completion. > Without this patch, we will run in to j1939_can_recv() after priv was > freed by j1939_sk_release()->j1939_sk_sock_destruct() > > Reported-by: Thadeu Lima de Souza Cascardo > Reported-by: syzbot+bdf710cfc41c186fdff3@syzkaller.appspotmail.com > Fixes: 25fe97cb7620 ("can: j1939: move j1939_priv_put() into sk_destruct callback") > Signed-off-by: Oleksij Rempel Applied to linux-can/testing. Thanks, Marc -- Pengutronix e.K. | Marc Kleine-Budde | Embedded Linux | https://www.pengutronix.de | Vertretung West/Dortmund | Phone: +49-231-2826-924 | Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 |