We don't stop device before reset owner, this means we could try to
serve any virtqueue kick before reset dev->worker. This will result a
warn since the work was pending at llist during owner resetting. Fix
this by stopping device during owner reset.
Reported-by: syzbot+eb17c6162478cc50632c at syzkaller.appspotmail.com
Fixes: 3a4d5c94e9593 ("vhost_net: a kernel-level virtio server")
Signed-off-by: Jason Wang <jasowang at redhat.com>
---
drivers/vhost/net.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/drivers/vhost/net.c b/drivers/vhost/net.c
index c7bdeb6..5636c7c 100644
--- a/drivers/vhost/net.c
+++ b/drivers/vhost/net.c
@@ -1208,6 +1208,7 @@ static long vhost_net_reset_owner(struct vhost_net *n)
}
vhost_net_stop(n, &tx_sock, &rx_sock);
vhost_net_flush(n);
+ vhost_dev_stop(&n->dev);
vhost_dev_reset_owner(&n->dev, umem);
vhost_net_vq_reset(n);
done:
--
2.7.4
From: Jason Wang <jasowang at redhat.com> Date: Thu, 25 Jan 2018 22:03:52 +0800> We don't stop device before reset owner, this means we could try to > serve any virtqueue kick before reset dev->worker. This will result a > warn since the work was pending at llist during owner resetting. Fix > this by stopping device during owner reset. > > Reported-by: syzbot+eb17c6162478cc50632c at syzkaller.appspotmail.com > Fixes: 3a4d5c94e9593 ("vhost_net: a kernel-level virtio server") > Signed-off-by: Jason Wang <jasowang at redhat.com>Applied and queued up for -stable.
Reasonably Related Threads
- [PATCH] Revert "vhost: fix release path lockdep checks"
- [PATCH RESEND] Revert "vhost: fix release path lockdep checks"
- [PATCH] Revert "vhost: fix release path lockdep checks"
- [PATCH RESEND] Revert "vhost: fix release path lockdep checks"
- [PATCH] vhost: remove unused lock check flag in vhost_dev_cleanup()