On Fri, 2024-05-31 at 13:26 +0000, Eric Dumazet wrote:

This series is inspired by various undisclosed syzbot
reports hinting at corruptions in dst_cache structures.

It seems at least four users of dst_cache are racy against
BH reentrancy.

Last patch is adding a DEBUG_NET check to catch future misuses.
 
Eric Dumazet (5):
  ipv6: ioam: block BH from ioam6_output()
  net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input()
  ipv6: sr: block BH in seg6_output_core() and seg6_input_core()
  ila: block BH in ila_output()
  net: dst_cache: add two DEBUG_NET warnings

 net/core/dst_cache.c      |  2 ++
 net/ipv6/ila/ila_lwt.c    |  7 ++++++-
 net/ipv6/ioam6_iptunnel.c |  8 ++++----
 net/ipv6/rpl_iptunnel.c   | 14 ++++++--------
 net/ipv6/seg6_iptunnel.c  | 14 ++++++--------
 5 files changed, 24 insertions(+), 21 deletions(-)

LGTM, thanks!

Acked-by: Paolo Abeni <pabeni@redhat.com>