On Wed, Apr 25, 2018 at 02:57:42PM +0200, Benjamin Beichler wrote:
> commit 8cfd36a0b53aeb4ec21d81eb79706697b84dfc3d upstream.
>
> When destroying a net namespace, all hwsim interfaces, which are not
> created in default namespace are deleted. But the async deletion of the
> interfaces could last longer than the actual destruction of the
> namespace, which results to an use after free bug. Therefore use
> synchronous deletion in this case.
>
> Fixes: 100cb9ff40e0 ("mac80211_hwsim: Allow managing radios from
> non-initial namespaces")
> Reported-by: syzbot+70ce058e01259de7bb1d@xxxxxxxxxxxxxxxxxxxxxxxxx
> Signed-off-by: Benjamin Beichler <benjamin.beichler@xxxxxxxxxxxxxx>
> Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
> ---
> This patch is prepared for linux-4.16.y branch
Many thanks, snuck this one in now :)
greg k-h