Re: MM Test my fix double free

From: syzbot

Date: Mon Jul 06 2026 - 07:36:17 EST


> #syz test

This crash does not have a reproducer. I cannot test it.

>
> diff --git a/drivers/net/ieee802154/mac802154_hwsim.c
> b/drivers/net/ieee802154/mac802154_hwsim.c
> index 6daa0f198b9f..466791939d57 100644
> --- a/drivers/net/ieee802154/mac802154_hwsim.c
> +++ b/drivers/net/ieee802154/mac802154_hwsim.c
> @@ -113,7 +113,8 @@ static int hwsim_update_pib(struct ieee802154_hw
> *hw, u8 page, u8 channel,
> pib->filt_level = filt_level;
>
> rcu_assign_pointer(phy->pib, pib);
> - kfree_rcu(pib_old, rcu);
> + if (pid_old)
> + kfree_rcu(pib_old, rcu);
> return 0;
> }