From: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
Date: Wed, 14 Mar 2018 21:10:23 +0100
> nlmsg_multicast() consumes always the skb, thus the original skb must be
> freed only when this function is called with a clone.
>
> Fixes: cb9f7a9a5c96 ("netlink: ensure to loop over all netns in genlmsg_multicast_allns()")
> Reported-by: Ben Hutchings <ben.hutchings@xxxxxxxxxxxxxxx>
> Signed-off-by: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
Yeah these "clone until final send" loops can be tricky to manage.
Good catch, applied and queued up for -stable, thanks.