From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from out203-205-221-221.mail.qq.com (out203-205-221-221.mail.qq.com [203.205.221.221]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 30DC02D877D for ; Mon, 25 May 2026 03:36:00 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=203.205.221.221 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1779680164; cv=none; b=iYxKRDhXdQV4kxQ4lPThRVgt/IWDdTdsXwjQASo8p+x11viYFv4oVY/wLcCM65ACgrhHqzXjb0gFwyc73LlLq51wVXbHo7MymVlzQC3OhpL5Gc/Plrnt2byCluvNZvPaPq13xd2SmMo/cqcuNZ++oAQcuGAYwWavB2OA51ZgfuY= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1779680164; c=relaxed/simple; bh=2XmRcryrR3XPpxe6KKCvTM/dY733U0hPt+5Kg1BR9cY=; h=Message-ID:From:To:Cc:Subject:Date:In-Reply-To:References: MIME-Version; b=nCQlt23/UfEQJhoPebfnNKmwtdRhaGYfgR4CMIjGu9jE3dgn2ZSHSMpp7UWZINA0NkvhY2vIKHAqmSUzAjfJR6usparl6FBPIYso4tMdenoIfqytY9MjwQtnbw3IbmVOd187ouyWNXha2dm1SKbUWsuqW0eZ1+X6I8TcVsw4kOo= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com; spf=pass smtp.mailfrom=qq.com; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b=Avbuf/MK; arc=none smtp.client-ip=203.205.221.221 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=qq.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b="Avbuf/MK" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qq.com; s=s201512; t=1779680152; bh=L5dfq5NZp2bc7230IiYlOM9Ue5x0e3+JSz5lYFR7Jw8=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=Avbuf/MKw1OYANPbyolPSfzfaQzNo6lSZRqhcC48YuZJHf1sZFkAL4QxM+hUrXea1 wNIdlQEUg3vKiCXWKpb3aaOHZzIqWaV0KJcd+eKF7eeFVzIDueE5tKEzs7om93Zc7b nKij3qX2s0tUZCx089dN0BLy+1IBkXJEZCiajoZk= Received: from lxu-ped-host.. ([111.198.231.89]) by newxmesmtplogicsvrszc50-0.qq.com (NewEsmtp) with SMTP id 8F202675; Mon, 25 May 2026 11:35:50 +0800 X-QQ-mid: xmsmtpt1779680150t4blqxhxh Message-ID: X-QQ-XMAILINFO: OeJ9zRfntlNPP+mzII6p14sG5AYXw3bsWnNIdA4BvIZaAzYXmDKfVS7ivQ4YbG XIC3eDVyzeCziStuIq8T5sb6ctJeMh16bMkzVXktwXOJTQfMRDwhUjWOl5vJKHERMel0XQwSzIEH g7avrTShhdRYP0HzSK4SBN5hsqA2GdY1YxZJ216dFxtc3NPoEC4ri/7T3kby77rfUIkB/JpKYyYM F3m51JeUQruc8vjzbieYGmjABsVzywobWX1YV/ScQHIn9zxAYrGMv4mde9PWuLnWmyhWgNVTl5pU S00EZu4gZ+K5BG9eQ3GHi6U2HwFXOMingmgyr/7TfuUtw1GOYJCIxud0sm65d8ePfrapI9RkoRjE +FfWqD30geC9dJxbCyFn8ieBFM/ZuuqgNx8ytyoWAIl3Uz7eUk0Epx7U9sLMR131sQ1rgTNtlyBy K/HS0J5JQLiFbrSi6UjmZOc7aaI5iehV68WGZhfrKRkK5dyeLYbl+upjmiLx6PNQFSrTP70xsO/5 /PUskt78i2tKgssAi1OiWfSMirLLBKiTXCgJ9zmiVg7qPQ4PJFf/rd+ALQ/J27gkTH3N/9WYnEoL Y22vZl+OZhjltAzSKusLesr1Df2f2vftkzxXmYLurzySkKNaGSV/Mj1/HBe+Iv3zDEEfkEGbhlOA 3kVc1H4atG/3hMGtK017kwegyczeLYA/7wt8unDdoPpYc+vdvFCgqlLgDVzH89qWcx8EFTTeZgo3 +11Z9pLeZK0YhBE4NCls/7d+a+MjOs3lB9AXzGMKvpIz22D2YWFSe3Ioa3MCPcogIRGCzRaIYXgi FyfK9iqMDLVsyvbERbn4qED2uBroMRszByo7ekdiPopC6ZX3B0DpjWVbU8jmWoFi57lNd2fRyidx OXpV6aHhmZR3LTOS4dhRQtr/KdEovQZ6QWWQbWDhtVcKaO7LqwiJSr7vJo7YtVz5rqSRpQa6xRi0 SAJrupMPxoSZSS2EzjXEDiVCuf7osWSAfM8h+GE4FC7IdrWKUQ1QKXDSMWQ0Pw X-QQ-XMRINFO: NS+P29fieYNwqS3WCnRCOn9D1NpZuCnCRA== From: Edward Adam Davis To: syzbot+8ed98cbd0161632bce95@syzkaller.appspotmail.com Cc: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: Re: [syzbot] [can?] general protection fault in can_rx_unregister (2) Date: Mon, 25 May 2026 11:35:50 +0800 X-OQ-MSGID: <20260525033550.126249-2-eadavis@qq.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <6a124882.050a0220.30ba69.0009.GAE@google.com> References: <6a124882.050a0220.30ba69.0009.GAE@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit #syz test diff --git a/net/can/af_can.c b/net/can/af_can.c index 7bc86b176b4d..c9a79e087ed3 100644 --- a/net/can/af_can.c +++ b/net/can/af_can.c @@ -528,6 +528,8 @@ void can_rx_unregister(struct net *net, struct net_device *dev, canid_t can_id, spin_lock_bh(&net->can.rcvlists_lock); dev_rcv_lists = can_dev_rcv_lists_find(net, dev); + if (!dev_rcv_lists) + goto out; rcv_list = can_rcv_list_find(&can_id, &mask, dev_rcv_lists); /* Search the receiver list for the item to delete. This should