Re: [PATCH net v6] tipc: serialize udp bearer replicast list updates

[patchwork-bot+netdevbpf]

Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:

On Wed, 15 Jul 2026 19:52:04 -0700 you wrote:
> tipc_udp_rcast_add() and cleanup_bearer() both update ub->rcast.list with
> list_add_rcu() / list_del_rcu(), but nothing serializes them. The add runs
> from the encap receive softirq (via tipc_udp_rcast_disc()) without
> rtnl_lock(), so it can race the cleanup delete and corrupt the list:
> 
>   list_del corruption. prev->next should be ffff8880298d7ab8,
>     but was ffff88802449ad38. (prev=ffff888027e3ec98)
>   kernel BUG at lib/list_debug.c:62!
>   RIP: __list_del_entry_valid_or_report+0x17a/0x200
>   Workqueue: events cleanup_bearer
>   Call Trace:
>    cleanup_bearer (net/tipc/udp_media.c:811)
>    process_one_work (kernel/workqueue.c:3302)
>    worker_thread (kernel/workqueue.c:3466)
> 
> [...]

Here is the summary with links:
  - [net,v6] tipc: serialize udp bearer replicast list updates
    https://git.kernel.org/netdev/net/c/350e592ff4e3

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html