From: Cong Wang <xiyou.wangc...@gmail.com> Date: Wed, 8 Feb 2017 10:02:13 -0800
> Dmitry reported a double free in sit_init_net(): ... > This is because when tunnel->dst_cache init fails, we free dev->tstats > once in ipip6_tunnel_init() and twice in sit_init_net(). This looks > redundant but its ndo_uinit() does not seem enough to clean up everything > here. So avoid this by setting dev->tstats to NULL after the first free, > at least for -net. > > Reported-by: Dmitry Vyukov <dvyu...@google.com> > Signed-off-by: Cong Wang <xiyou.wangc...@gmail.com> Good catch, applied and queued up for -stable, thanks!