memory leak in br_multicast_new


Created	Duration	User	Patch	Repo	Result
2023/10/27 13:35	2h48m	edumazet@google.com		upstream	no crash log
2023/10/09 01:05	15m	retest repro		upstream	no crash log

2023/09/24 19:11:56 executed programs: 513 2023/09/24 19:12:04 executed programs: 524 BUG: memory leak unreferenced object 0xffff88811dc0c300 (size 192): comm "softirq", pid 0, jiffies 4294943956 (age 268.040s) hex dump (first 32 bytes): c1 06 bb 1f 81 88 ff ff 40 0a 1d 09 81 88 ff ff ........@....... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<ffffffff81574155>] kmalloc_trace+0x25/0x90 mm/slab_common.c:1114 [<ffffffff844487a6>] kmalloc include/linux/slab.h:599 [inline] [<ffffffff844487a6>] kzalloc include/linux/slab.h:720 [inline] [<ffffffff844487a6>] br_multicast_new_group net/bridge/br_multicast.c:1294 [inline] [<ffffffff844487a6>] br_multicast_new_group+0xa6/0x320 net/bridge/br_multicast.c:1277 [<ffffffff844494f4>] __br_multicast_add_group+0x74/0x270 net/bridge/br_multicast.c:1519 [<ffffffff8444b6b7>] br_multicast_add_group net/bridge/br_multicast.c:1568 [inline] [<ffffffff8444b6b7>] br_ip6_multicast_add_group+0x137/0x180 net/bridge/br_multicast.c:1620 [<ffffffff84451eb3>] br_ip6_multicast_mld2_report net/bridge/br_multicast.c:2973 [inline] [<ffffffff84451eb3>] br_multicast_ipv6_rcv net/bridge/br_multicast.c:3911 [inline] [<ffffffff84451eb3>] br_multicast_rcv+0x703/0x2cf0 net/bridge/br_multicast.c:3969 [<ffffffff844349d2>] br_handle_frame_finish+0x5f2/0xb30 net/bridge/br_input.c:148 [<ffffffff84472668>] br_nf_hook_thresh+0x1b8/0x1f0 net/bridge/br_netfilter_hooks.c:1048 [<ffffffff844748d2>] br_nf_pre_routing_finish_ipv6+0x1d2/0x330 net/bridge/br_netfilter_ipv6.c:148 [<ffffffff84474e34>] NF_HOOK include/linux/netfilter.h:304 [inline] [<ffffffff84474e34>] br_nf_pre_routing_ipv6+0x174/0x210 net/bridge/br_netfilter_ipv6.c:178 [<ffffffff844733be>] br_nf_pre_routing+0x61e/0x8e0 net/bridge/br_netfilter_hooks.c:508 [<ffffffff844352c2>] nf_hook_entry_hookfn include/linux/netfilter.h:144 [inline] [<ffffffff844352c2>] nf_hook_bridge_pre net/bridge/br_input.c:272 [inline] [<ffffffff844352c2>] br_handle_frame+0x3b2/0x6f0 net/bridge/br_input.c:417 [<ffffffff83ede165>] __netif_receive_skb_core.constprop.0+0x375/0x19e0 net/core/dev.c:5417 [<ffffffff83edfb54>] __netif_receive_skb_one_core+0x44/0x90 net/core/dev.c:5521 [<ffffffff83edfbed>] __netif_receive_skb+0x1d/0x90 net/core/dev.c:5637 [<ffffffff83edff4c>] process_backlog+0xbc/0x190 net/core/dev.c:5965 [<ffffffff83ee10de>] __napi_poll+0x3e/0x300 net/core/dev.c:6527 BUG: memory leak unreferenced object 0xffff88811dc13200 (size 256): comm "softirq", pid 0, jiffies 4294943956 (age 268.040s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 10 1a 1b 81 88 ff ff ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<ffffffff81574155>] kmalloc_trace+0x25/0x90 mm/slab_common.c:1114 [<ffffffff84448d44>] kmalloc include/linux/slab.h:599 [inline] [<ffffffff84448d44>] kzalloc include/linux/slab.h:720 [inline] [<ffffffff84448d44>] br_multicast_new_port_group+0x94/0x540 net/bridge/br_multicast.c:1418 [<ffffffff84449643>] __br_multicast_add_group+0x1c3/0x270 net/bridge/br_multicast.c:1537 [<ffffffff8444b6b7>] br_multicast_add_group net/bridge/br_multicast.c:1568 [inline] [<ffffffff8444b6b7>] br_ip6_multicast_add_group+0x137/0x180 net/bridge/br_multicast.c:1620 [<ffffffff84451eb3>] br_ip6_multicast_mld2_report net/bridge/br_multicast.c:2973 [inline] [<ffffffff84451eb3>] br_multicast_ipv6_rcv net/bridge/br_multicast.c:3911 [inline] [<ffffffff84451eb3>] br_multicast_rcv+0x703/0x2cf0 net/bridge/br_multicast.c:3969 [<ffffffff844349d2>] br_handle_frame_finish+0x5f2/0xb30 net/bridge/br_input.c:148 [<ffffffff84472668>] br_nf_hook_thresh+0x1b8/0x1f0 net/bridge/br_netfilter_hooks.c:1048 [<ffffffff844748d2>] br_nf_pre_routing_finish_ipv6+0x1d2/0x330 net/bridge/br_netfilter_ipv6.c:148 [<ffffffff84474e34>] NF_HOOK include/linux/netfilter.h:304 [inline] [<ffffffff84474e34>] br_nf_pre_routing_ipv6+0x174/0x210 net/bridge/br_netfilter_ipv6.c:178 [<ffffffff844733be>] br_nf_pre_routing+0x61e/0x8e0 net/bridge/br_netfilter_hooks.c:508 [<ffffffff844352c2>] nf_hook_entry_hookfn include/linux/netfilter.h:144 [inline] [<ffffffff844352c2>] nf_hook_bridge_pre net/bridge/br_input.c:272 [inline] [<ffffffff844352c2>] br_handle_frame+0x3b2/0x6f0 net/bridge/br_input.c:417 [<ffffffff83ede165>] __netif_receive_skb_core.constprop.0+0x375/0x19e0 net/core/dev.c:5417 [<ffffffff83edfb54>] __netif_receive_skb_one_core+0x44/0x90 net/core/dev.c:5521 [<ffffffff83edfbed>] __netif_receive_skb+0x1d/0x90 net/core/dev.c:5637 [<ffffffff83edff4c>] process_backlog+0xbc/0x190 net/core/dev.c:5965 [<ffffffff83ee10de>] __napi_poll+0x3e/0x300 net/core/dev.c:6527 BUG: memory leak unreferenced object 0xffff88811dc0c600 (size 192): comm "kworker/0:8", pid 5133, jiffies 4294943957 (age 268.030s) hex dump (first 32 bytes): 89 f4 51 0f 81 88 ff ff 40 0a 1d 09 81 88 ff ff ..Q.....@....... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<ffffffff81574155>] kmalloc_trace+0x25/0x90 mm/slab_common.c:1114 [<ffffffff844487a6>] kmalloc include/linux/slab.h:599 [inline] [<ffffffff844487a6>] kzalloc include/linux/slab.h:720 [inline] [<ffffffff844487a6>] br_multicast_new_group net/bridge/br_multicast.c:1294 [inline] [<ffffffff844487a6>] br_multicast_new_group+0xa6/0x320 net/bridge/br_multicast.c:1277 [<ffffffff844494f4>] __br_multicast_add_group+0x74/0x270 net/bridge/br_multicast.c:1519 [<ffffffff8444b6b7>] br_multicast_add_group net/bridge/br_multicast.c:1568 [inline] [<ffffffff8444b6b7>] br_ip6_multicast_add_group+0x137/0x180 net/bridge/br_multicast.c:1620 [<ffffffff84451eb3>] br_ip6_multicast_mld2_report net/bridge/br_multicast.c:2973 [inline] [<ffffffff84451eb3>] br_multicast_ipv6_rcv net/bridge/br_multicast.c:3911 [inline] [<ffffffff84451eb3>] br_multicast_rcv+0x703/0x2cf0 net/bridge/br_multicast.c:3969 [<ffffffff8442af97>] br_dev_xmit+0x287/0x7e0 net/bridge/br_device.c:90 [<ffffffff83edb55f>] __netdev_start_xmit include/linux/netdevice.h:4889 [inline] [<ffffffff83edb55f>] netdev_start_xmit include/linux/netdevice.h:4903 [inline] [<ffffffff83edb55f>] xmit_one net/core/dev.c:3544 [inline] [<ffffffff83edb55f>] dev_hard_start_xmit+0x6f/0x2d0 net/core/dev.c:3560 [<ffffffff83edbd9f>] __dev_queue_xmit+0x41f/0x17a0 net/core/dev.c:4340 [<ffffffff8434709b>] dev_queue_xmit include/linux/netdevice.h:3082 [inline] [<ffffffff8434709b>] neigh_hh_output include/net/neighbour.h:526 [inline] [<ffffffff8434709b>] neigh_output include/net/neighbour.h:540 [inline] [<ffffffff8434709b>] ip6_finish_output2+0x43b/0x980 net/ipv6/ip6_output.c:135 [<ffffffff8434c7b1>] __ip6_finish_output net/ipv6/ip6_output.c:196 [inline] [<ffffffff8434c7b1>] ip6_finish_output+0x291/0x510 net/ipv6/ip6_output.c:207 [<ffffffff8434cad1>] NF_HOOK_COND include/linux/netfilter.h:293 [inline] [<ffffffff8434cad1>] ip6_output+0xa1/0x1c0 net/ipv6/ip6_output.c:228 [<ffffffff8439cb49>] dst_output include/net/dst.h:458 [inline] [<ffffffff8439cb49>] NF_HOOK.constprop.0+0x49/0x110 include/linux/netfilter.h:304 [<ffffffff8439ce33>] mld_sendpack+0x223/0x350 net/ipv6/mcast.c:1818 [<ffffffff843a0200>] mld_send_cr net/ipv6/mcast.c:2119 [inline] [<ffffffff843a0200>] mld_ifc_work+0x2b0/0x6b0 net/ipv6/mcast.c:2651 [<ffffffff812c8d9d>] process_one_work+0x23d/0x530 kernel/workqueue.c:2630 [<ffffffff812c9947>] process_scheduled_works kernel/workqueue.c:2703 [inline] [<ffffffff812c9947>] worker_thread+0x327/0x590 kernel/workqueue.c:2784