Re: [PATCH] team: fix qom_list corruption by using list_del_init_rcu()
From: syzbot
Date: Sat Dec 06 2025 - 21:59:22 EST
> #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
This crash does not have a reproducer. I cannot test it.
>
> Reported-by: syzbot+422806e5f4cce722a71f@xxxxxxxxxxxxxxxxxxxxxxxxx
> Signed-off-by: Dharanitharan R <dharanitharan725@xxxxxxxxx>
> ---
> drivers/net/team/team_core.c | 3 ++-
> 1 file changed, 2 insertions(+), 1 deletion(-)
>
> diff --git a/drivers/net/team/team_core.c b/drivers/net/team/team_core.c
> index 4d5c9ae8f221..d6d724b52dbf 100644
> --- a/drivers/net/team/team_core.c
> +++ b/drivers/net/team/team_core.c
> @@ -823,7 +823,8 @@ static void __team_queue_override_port_del(struct team *team,
> {
> if (!port->queue_id)
> return;
> - list_del_rcu(&port->qom_list);
> + /* Ensure safe repeated deletion */
> + list_del_init_rcu(&port->qom_list);
> }
>
> static bool team_queue_override_port_has_gt_prio_than(struct team_port *port,
> --
> 2.43.0
>