Luigi Leonardi 3a764d9338 vsock/test: Add test for null ptr deref when transport changes ... Add a new test to ensure that when the transport changes a null pointer dereference does not occur. The bug was reported upstream [1] and fixed with commit 2cb7c756f6 ("vsock/virtio: discard packets if the transport changes"). KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] CPU: 2 UID: 0 PID: 463 Comm: kworker/2:3 Not tainted Workqueue: vsock-loopback vsock_loopback_work RIP: 0010:vsock_stream_has_data+0x44/0x70 Call Trace: virtio_transport_do_close+0x68/0x1a0 virtio_transport_recv_pkt+0x1045/0x2ae4 vsock_loopback_work+0x27d/0x3f0 process_one_work+0x846/0x1420 worker_thread+0x5b3/0xf80 kthread+0x35a/0x700 ret_from_fork+0x2d/0x70 ret_from_fork_asm+0x1a/0x30 Note that this test may not fail in a kernel without the fix, but it may hang on the client side if it triggers a kernel oops. This works by creating a socket, trying to connect to a server, and then executing a second connect operation on the same socket but to a different CID (0). This triggers a transport change. If the connect operation is interrupted by a signal, this could cause a null-ptr-deref. Since this bug is non-deterministic, we need to try several times. It is reasonable to assume that the bug will show up within the timeout period. If there is a G2H transport loaded in the system, the bug is not triggered and this test will always pass. This is because `vsock_assign_transport`, when using CID 0, like in this case, sets vsk->transport to `transport_g2h` that is not NULL if a G2H transport is available. [1]https://lore.kernel.org/netdev/Z2LvdTTQR7dBmPb5@v4bel-B760M-AORUS-ELITE-AX/ Suggested-by: Hyunwoo Kim <v4bel@theori.io> Suggested-by: Michal Luczaj <mhal@rbox.co> Signed-off-by: Luigi Leonardi <leonardi@redhat.com> Reviewed-by: Stefano Garzarella <sgarzare@redhat.com> Link: https://patch.msgid.link/20250630-test_vsock-v5-2-2492e141e80b@redhat.com Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2025-07-02 15:05:23 -07:00
..
accounting
arch	tools headers x86 cpufeatures: Sync with the kernel sources	2025-06-17 18:29:42 -03:00
bootconfig	tools/bootconfig: specify LDFLAGS as an argument to CC	2025-05-16 11:22:54 +09:00
bpf	tools/resolve_btfids: Fix build when cross compiling kernel with clang.	2025-06-10 09:09:27 -07:00
build
certs
cgroup
counter
crypto
debugging
firewire
firmware
gpio
hv	tools: hv: Enable debug logs for hv_kvp_daemon	2025-05-23 16:30:55 +00:00
iio
include	tools headers: Synchronize linux/bits.h with the kernel sources	2025-06-17 16:55:24 -03:00
kvm/kvm_stat
laptop
leds
lib	libbpf: Fix possible use-after-free for externs	2025-06-25 12:28:58 -07:00
memory-model
mm
net	tools: ynl: fix mixing ops and notifications on one socket	2025-06-19 08:37:39 -07:00
objtool	Rust changes for v6.16	2025-06-04 21:18:37 -07:00
pcmcia
perf	perf bench futex: Fix prctl include in musl libc	2025-06-17 18:29:42 -03:00
power	cpupower: split unitdir from libdir in Makefile	2025-06-09 10:17:46 -06:00
rcu
sched_ext
scripts
sound
spi
testing	vsock/test: Add test for null ptr deref when transport changes	2025-07-02 15:05:23 -07:00
thermal
time
tracing	tracing tools updates for v6.16:	2025-05-29 20:59:52 -07:00
usb
verification
virtio
wmi
workqueue
writeback
Makefile