On Mon, 7 Oct 2019 15:43:01 -0700, Eric Dumazet wrote:
> syzbot got a NULL dereference in bond_update_slave_arr() [1],
> happening after a failure to allocate bond->slave_arr
>
> A workqueue (bond_slave_arr_handler) is supposed to retry
> the allocation later, but if the slave is removed before
> the workqueue had a chance to complete, bond->slave_err
> can still be NULL.
>
> [1]
>
> [...]
>
> Fixes: ee6377147409 ("bonding: Simplify the xmit function for modes that use
> xmit_hash")
> Signed-off-by: Eric Dumazet <eduma...@google.com>
> Reported-by: syzbot <syzkal...@googlegroups.com>
> Cc: Mahesh Bandewar <mahe...@google.com>
s/slave_err/slave_arr/
Applied, queued, thank you!
