syzbot


memory leak in ndisc_send_rs

Status: fixed on 2023/02/24 13:50
Subsystems: net
[Documentation on labels]
Fix commit: 07d120aa33cc net: tun: call napi_schedule_prep() to ensure we own a napi
First crash: 1197d, last: 1150d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream memory leak in ndisc_send_rs (2) net C 1 645d 645d 0/28 closed as invalid on 2023/04/12 12:24
upstream memory leak in ndisc_send_rs (3) net C 1 540d 540d 0/28 closed as invalid on 2024/03/12 15:57
Last patch testing requests (2)
Created Duration User Patch Repo Result
2022/11/04 12:30 9m retest repro upstream report log
2022/11/04 10:30 9m retest repro upstream report log

Sample crash report:
Warning: Permanently added '10.128.1.163' (ECDSA) to the list of known hosts.
executing program
executing program
executing program
BUG: memory leak
unreferenced object 0xffff888110e6d200 (size 232):
  comm "softirq", pid 0, jiffies 4294944704 (age 20.000s)
  hex dump (first 32 bytes):
    e0 24 fe 05 81 88 ff ff e0 24 fe 05 81 88 ff ff  .$.......$......
    00 c0 6d 0b 81 88 ff ff 00 00 00 00 00 00 00 00  ..m.............
  backtrace:
    [<ffffffff8370d8cf>] __alloc_skb+0x20f/0x280 net/core/skbuff.c:414
    [<ffffffff83ba17e6>] alloc_skb include/linux/skbuff.h:1116 [inline]
    [<ffffffff83ba17e6>] ndisc_alloc_skb+0x56/0xe0 net/ipv6/ndisc.c:420
    [<ffffffff83ba652c>] ndisc_send_rs+0x1bc/0x2a0 net/ipv6/ndisc.c:686
    [<ffffffff83b7c7dd>] addrconf_rs_timer+0x15d/0x3b0 net/ipv6/addrconf.c:3893
    [<ffffffff812e7f18>] call_timer_fn+0x38/0x200 kernel/time/timer.c:1421
    [<ffffffff812e83ee>] expire_timers kernel/time/timer.c:1466 [inline]
    [<ffffffff812e83ee>] __run_timers.part.0+0x30e/0x400 kernel/time/timer.c:1734
    [<ffffffff812e851d>] __run_timers kernel/time/timer.c:1715 [inline]
    [<ffffffff812e851d>] run_timer_softirq+0x3d/0x80 kernel/time/timer.c:1747
    [<ffffffff848000bf>] __do_softirq+0xbf/0x29e kernel/softirq.c:558
    [<ffffffff8123ee1a>] invoke_softirq kernel/softirq.c:432 [inline]
    [<ffffffff8123ee1a>] __irq_exit_rcu kernel/softirq.c:636 [inline]
    [<ffffffff8123ee1a>] irq_exit_rcu+0x8a/0xb0 kernel/softirq.c:648
    [<ffffffff84404642>] sysvec_apic_timer_interrupt+0x72/0x90 arch/x86/kernel/apic/apic.c:1097
    [<ffffffff84600c02>] asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
    [<ffffffff84418a10>] native_safe_halt arch/x86/include/asm/irqflags.h:51 [inline]
    [<ffffffff84418a10>] arch_safe_halt arch/x86/include/asm/irqflags.h:89 [inline]
    [<ffffffff84418a10>] acpi_safe_halt drivers/acpi/processor_idle.c:109 [inline]
    [<ffffffff84418a10>] acpi_idle_do_entry+0xc0/0xd0 drivers/acpi/processor_idle.c:553
    [<ffffffff82480488>] acpi_idle_enter+0x128/0x1f0 drivers/acpi/processor_idle.c:688
    [<ffffffff832fdca9>] cpuidle_enter_state+0xc9/0x650 drivers/cpuidle/cpuidle.c:237
    [<ffffffff832fe289>] cpuidle_enter+0x29/0x40 drivers/cpuidle/cpuidle.c:351
    [<ffffffff812897af>] call_cpuidle kernel/sched/idle.c:158 [inline]
    [<ffffffff812897af>] cpuidle_idle_call kernel/sched/idle.c:239 [inline]
    [<ffffffff812897af>] do_idle+0x1cf/0x250 kernel/sched/idle.c:306


Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/10/15 19:04 upstream ec681c53f8d2 0c5d9412 .config console log report syz C ci-upstream-gce-leak memory leak in ndisc_send_rs
2021/08/29 14:35 upstream 3f5ad13cb012 be2c130d .config console log report syz C ci-upstream-gce-leak memory leak in ndisc_send_rs
* Struck through repros no longer work on HEAD.