unregister_netdevice: waiting for DEV to become free

Hello,

syzbot found the following crash on:

HEAD commit: 4d552acf Linux 4.19.34
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=135086af200000
kernel config: https://syzkaller.appspot.com/x/.config?x=c95a88291f095edd
dashboard link: https://syzkaller.appspot.com/bug?extid=90a3766590adf905974e
compiler: gcc (GCC) 9.0.0 20181231 (experimental)

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: [email protected]

unregister_netdevice: waiting for lo to become free. Usage count = 1


---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at [email protected].

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

HEAD commit: 58b454eb Linux 4.14.112
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=154e417b200000
kernel config: https://syzkaller.appspot.com/x/.config?x=8b0e7ab7678533ab
dashboard link: https://syzkaller.appspot.com/bug?extid=2bb104d4adafb1ed1a19
Reported-by: [email protected]

protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
net_ratelimit: 12 callbacks suppressed
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
net_ratelimit: 8 callbacks suppressed
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1

syzbot has found a reproducer for the following crash on:

HEAD commit: 7aa823a9 Linux 4.19.51
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=13cd989ea00000
kernel config: https://syzkaller.appspot.com/x/.config?x=57222bc62f28e3a6
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=119492aea00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10615caea00000
kauditd_printk_skb: 5 callbacks suppressed
audit: type=1400 audit(1560668747.647:36): avc: denied { map } for
pid=7987 comm="syz-executor900" path="/root/syz-executor900848979"
dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
IPVS: ftp: loaded support on port[0] = 21
unregister_netdevice: waiting for syz_tun to become free. Usage count = 1

syzbot has found a reproducer for the following crash on:

HEAD commit: bb263a2a Linux 4.14.128
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=164460d6a00000
kernel config: https://syzkaller.appspot.com/x/.config?x=3aa328d51a4a3719
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=14b0e6c9a00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1269970aa00000
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves

syzbot suspects this issue was fixed by commit:

commit 0f7f0b057417a1ff130ee218a1fcdd3356beeef9
Author: Julian Anastasov <[email protected]>
Date: Tue Jun 18 20:07:36 2019 +0000

ipvs: fix tinfo memory leak in start_sync_thread

bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=1417ef50900000
start commit: bb263a2a Linux 4.14.128
git tree: linux-4.14.y
If the result looks correct, please mark the issue as fixed by replying with:

#syz fix: ipvs: fix tinfo memory leak in start_sync_thread

For information about bisection process see: https://goo.gl/tpsmEJ#bisection