net/smc: transfer fasync_list in case of fallback
authorUrsula Braun <ubraun@linux.ibm.com>
Fri, 14 Feb 2020 07:58:59 +0000 (08:58 +0100)
committerDavid S. Miller <davem@davemloft.net>
Fri, 14 Feb 2020 15:09:36 +0000 (07:09 -0800)
commit67f562e3e147750a02b2a91d21a163fc44a1d13e
tree61d51fd840a86ccc78795101b5f00a5a92da4272
parentdc221a28d0944f1a28755caa66bf58bfa47e26d1
net/smc: transfer fasync_list in case of fallback

SMC does not work together with FASTOPEN. If sendmsg() is called with
flag MSG_FASTOPEN in SMC_INIT state, the SMC-socket switches to
fallback mode. To handle the previous ioctl FIOASYNC call correctly
in this case, it is necessary to transfer the socket wait queue
fasync_list to the internal TCP socket.

Reported-by: syzbot+4b1fe8105f8044a26162@syzkaller.appspotmail.com
Fixes: ee9dfbef02d18 ("net/smc: handle sockopts forcing fallback")
Signed-off-by: Ursula Braun <ubraun@linux.ibm.com>
Signed-off-by: Karsten Graul <kgraul@linux.ibm.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/smc/af_smc.c