From: Eric Dumazet <eric.duma...@gmail.com>
Date: Mon, 30 Oct 2017 22:47:09 -0700
> From: Eric Dumazet <eduma...@google.com>
>
> In the (unlikely) event fixup_permanent_addr() returns a failure,
> addrconf_permanent_addr() calls ipv6_del_addr() without the
> mandatory call to in6_ifa_hold(), leading to a refcount error,
> spotted by syzkaller :
...
> Fixes: f1705ec197e7 ("net: ipv6: Make address flushing on ifdown optional")
> Signed-off-by: Eric Dumazet <eduma...@google.com>
> Cc: David Ahern <dsah...@gmail.com>
Applied and queued up for -stable.
