Re: [syzbot] [mm?] KASAN: invalid-free in rcu_free_sheaf

[syzbot <syzbot+60332fd095f8bb2946ad@syzkaller.appspotmail.com>]

> Hi,
>
> Please test the following patch.
>
> #syz test

This crash does not have a reproducer. I cannot test it.

>
> diff --git a/drivers/net/ieee802154/mac802154_hwsim.c
> b/drivers/net/ieee802154/mac802154_hwsim.c
> index 6daa0f198b9f..99d52a2323ac 100644
> --- a/drivers/net/ieee802154/mac802154_hwsim.c
> +++ b/drivers/net/ieee802154/mac802154_hwsim.c
> @@ -113,7 +113,8 @@ static int hwsim_update_pib(struct ieee802154_hw
> *hw, u8 page, u8 channel,
>         pib->filt_level = filt_level;
>
>         rcu_assign_pointer(phy->pib, pib);
> -       kfree_rcu(pib_old, rcu);
> +       if (pib_old)
> +               kfree_rcu(pib_old, rcu);
>         return 0;
>  }