On Sun, 2018-04-01 at 23:01 -0700, syzbot wrote: > So far this crash happened 5 times on net-next, upstream. > C reproducer: https://syzkaller.appspot.com/x/repro.c?id=6614377067184128 > Huh, fun. Looks like you're basically creating a new HWSIM radio with an insanely long name (4k!) and nothing stops you, until we try to generate an rfkill instance which sends a uevent and only has a 2k buffer for the environment variables, where we put the name ... But yeah, we should probably limit the phy name to something sane, I'll pick 128 and send a patch. johannes
