Hello: This patch was applied to netdev/net.git (main) by Jakub Kicinski <kuba@xxxxxxxxxx>: On Fri, 2 Aug 2024 11:07:30 +0300 you wrote: > syzbot hit a use-after-free[1] which is caused because the bridge doesn't > make sure that all previous garbage has been collected when removing a > port. What happens is: > CPU 1 CPU 2 > start gc cycle remove port > acquire gc lock first > wait for lock > call br_multicasg_gc() directly > acquire lock now but free port > the port can be freed > while grp timers still > running > > [...] Here is the summary with links: - [net] net: bridge: mcast: wait for previous gc cycles when removing port https://git.kernel.org/netdev/net/c/92c4ee25208d You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html