[v6.1] unregister_netdevice: waiting for DEV to become free

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: 42616e0f09fb Linux 6.1.15
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=139d38b8c80000
kernel config: https://syzkaller.appspot.com/x/.config?x=690b9ff41783cd73
dashboard link: https://syzkaller.appspot.com/bug?extid=567a05e571d86deb603d
compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/db869f2ed2bd/disk-42616e0f.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/37951bbe5829/vmlinux-42616e0f.xz
kernel image: https://storage.googleapis.com/syzbot-assets/23aa1a75ce0f/bzImage-42616e0f.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+567a05...@syzkaller.appspotmail.com

unregister_netdevice: waiting for veth0_to_team to become free. Usage count = 2


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: d9b4a0c83a2d Linux 5.15.98
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=17e40088c80000
kernel config: https://syzkaller.appspot.com/x/.config?x=2f8d9515b973b23b
dashboard link: https://syzkaller.appspot.com/bug?extid=d3736679164e26746ec2

compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:

disk image: https://storage.googleapis.com/syzbot-assets/037cabbd3313/disk-d9b4a0c8.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/9967e551eb34/vmlinux-d9b4a0c8.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a050c7a4fd99/bzImage-d9b4a0c8.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:

Reported-by: syzbot+d37366...@syzkaller.appspotmail.com

unregister_netdevice: waiting for bond_slave_0 to become free. Usage count = 2

[syzbot]

syzbot has found a reproducer for the following issue on:

HEAD commit: 0ab06468cbd1 Linux 5.15.114
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=12c8717d280000
kernel config: https://syzkaller.appspot.com/x/.config?x=9a2696a271d0eba

dashboard link: https://syzkaller.appspot.com/bug?extid=d3736679164e26746ec2
compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2

userspace arch: arm64
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=14ea541d280000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14200245280000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/8ff3613d3f6b/disk-0ab06468.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/eebe2d8c6813/vmlinux-0ab06468.xz
kernel image: https://storage.googleapis.com/syzbot-assets/f30284c26197/Image-0ab06468.gz.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+d37366...@syzkaller.appspotmail.com

unregister_netdevice: waiting for syz_tun to become free. Usage count = 2


---
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.

[syzbot]

syzbot has found a reproducer for the following issue on:

HEAD commit: d2869ace6eeb Linux 6.1.31
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=1280242d280000
kernel config: https://syzkaller.appspot.com/x/.config?x=11263f470b7a4c92

dashboard link: https://syzkaller.appspot.com/bug?extid=567a05e571d86deb603d
compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2

userspace arch: arm64
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=10e8ad7d280000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=12e27dd1280000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/b17a7cd87498/disk-d2869ace.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/cc8291ae723a/vmlinux-d2869ace.xz
kernel image: https://storage.googleapis.com/syzbot-assets/04943541fc25/Image-d2869ace.gz.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+567a05...@syzkaller.appspotmail.com

unregister_netdevice: waiting for syz_tun to become free. Usage count = 2
leaked reference.
__netdev_tracker_alloc include/linux/netdevice.h:4005 [inline]
netdev_tracker_alloc include/linux/netdevice.h:4017 [inline]
fib6_nh_init+0x664/0x1c84 net/ipv6/route.c:3621
ip6_route_info_create+0x7ac/0xf14 net/ipv6/route.c:3799
ip6_route_add+0x38/0x168 net/ipv6/route.c:3843
addrconf_add_mroute net/ipv6/addrconf.c:2489 [inline]
addrconf_add_dev+0x2b8/0x458 net/ipv6/addrconf.c:2507
addrconf_dev_config net/ipv6/addrconf.c:3382 [inline]
addrconf_init_auto_addrs+0x708/0xc9c net/ipv6/addrconf.c:3469
addrconf_notify+0x7d0/0xc94 net/ipv6/addrconf.c:3642
notifier_call_chain kernel/notifier.c:87 [inline]
raw_notifier_call_chain+0xd4/0x164 kernel/notifier.c:455
__dev_notify_flags+0x2ac/0x534
dev_change_flags+0xc8/0x154 net/core/dev.c:8624
do_setlink+0xc70/0x3334 net/core/rtnetlink.c:2788
__rtnl_newlink net/core/rtnetlink.c:3547 [inline]
rtnl_newlink+0x13b8/0x1b04 net/core/rtnetlink.c:3594
rtnetlink_rcv_msg+0x72c/0xd94 net/core/rtnetlink.c:6091
netlink_rcv_skb+0x20c/0x3b8 net/netlink/af_netlink.c:2524
rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6109
netlink_unicast_kernel net/netlink/af_netlink.c:1328 [inline]
netlink_unicast+0x660/0x8d4 net/netlink/af_netlink.c:1354
netlink_sendmsg+0x834/0xb18 net/netlink/af_netlink.c:1902