memory leak in ndisc_ns

Kernel	Title	Rank 🛈	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	memory leak in ndisc_ns_create net	3	syz, C			3	1479d	1522d	0/29	closed as invalid on 2022/11/09 20:31
Created	Duration	User	Patch	Repo	Result
2023/05/16 05:09	15m	retest repro		upstream	no crash log
BUG: memory leak
unreferenced object 0xffff888113af2580 (size 640):
  comm "kworker/0:0", pid 5085, jiffies 4294971295 (age 55.350s)
  hex dump (first 32 bytes):
    00 00 33 33 ff 00 00 1b aa aa aa aa aa 1b 86 dd  ..33............
    60 00 00 00 00 20 3a ff 00 00 00 00 00 00 00 00  `.... :.........
  backtrace:
    [<ffffffff83d82322>] kmalloc_reserve+0xe2/0x140 net/core/skbuff.c:525
    [<ffffffff83d857b5>] __alloc_skb+0xd5/0x230 net/core/skbuff.c:608
    [<ffffffff84242c56>] alloc_skb include/linux/skbuff.h:1277 [inline]
    [<ffffffff84242c56>] ndisc_alloc_skb+0x56/0x100 net/ipv6/ndisc.c:421
    [<ffffffff8424347a>] ndisc_ns_create+0xaa/0x270 net/ipv6/ndisc.c:621
    [<ffffffff84247e41>] ndisc_send_ns+0x51/0xd0 net/ipv6/ndisc.c:663
    [<ffffffff8421d79f>] addrconf_dad_work+0x63f/0x920 net/ipv6/addrconf.c:4176
    [<ffffffff812a853a>] process_one_work+0x2ba/0x650 kernel/workqueue.c:2390
    [<ffffffff812a8ebd>] worker_thread+0x5d/0x5c0 kernel/workqueue.c:2537
    [<ffffffff812b3d19>] kthread+0x129/0x170 kernel/kthread.c:376
    [<ffffffff8100327f>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

BUG: memory leak
unreferenced object 0xffff888113af6800 (size 2048):
  comm "kworker/0:0", pid 5085, jiffies 4294971440 (age 53.900s)
  hex dump (first 32 bytes):
    00 00 33 33 00 00 00 16 0e a7 5f b9 30 2b 86 dd  ..33......_.0+..
    60 00 00 00 00 24 00 01 fe 80 00 00 00 00 00 00  `....$..........
  backtrace:
    [<ffffffff8153429b>] __do_kmalloc_node mm/slab_common.c:966 [inline]
    [<ffffffff8153429b>] __kmalloc_node_track_caller+0x4b/0x120 mm/slab_common.c:987
    [<ffffffff83d822d8>] kmalloc_reserve+0x98/0x140 net/core/skbuff.c:539
    [<ffffffff83d857b5>] __alloc_skb+0xd5/0x230 net/core/skbuff.c:608
    [<ffffffff83d8e4be>] alloc_skb include/linux/skbuff.h:1277 [inline]
    [<ffffffff83d8e4be>] alloc_skb_with_frags+0x6e/0x340 net/core/skbuff.c:6303
    [<ffffffff83d7aff3>] sock_alloc_send_pskb+0x3a3/0x3e0 net/core/sock.c:2734
    [<ffffffff84259711>] sock_alloc_send_skb include/net/sock.h:1860 [inline]
    [<ffffffff84259711>] mld_newpack.isra.0+0x81/0x220 net/ipv6/mcast.c:1748
    [<ffffffff8425997c>] add_grhead+0xcc/0xf0 net/ipv6/mcast.c:1851
    [<ffffffff8425a173>] add_grec+0x7d3/0x840 net/ipv6/mcast.c:1989
    [<ffffffff8425a332>] mld_send_initial_cr.part.0.isra.0+0x52/0x80 net/ipv6/mcast.c:2236
    [<ffffffff8425cbbf>] mld_send_initial_cr net/ipv6/mcast.c:1232 [inline]
    [<ffffffff8425cbbf>] mld_dad_work+0xaf/0x340 net/ipv6/mcast.c:2262
    [<ffffffff812a853a>] process_one_work+0x2ba/0x650 kernel/workqueue.c:2390
    [<ffffffff812a8ebd>] worker_thread+0x5d/0x5c0 kernel/workqueue.c:2537
    [<ffffffff812b3d19>] kthread+0x129/0x170 kernel/kthread.c:376
    [<ffffffff8100327f>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

BUG: memory leak
unreferenced object 0xffff888114075580 (size 640):
  comm "softirq", pid 0, jiffies 4294971792 (age 50.380s)
  hex dump (first 32 bytes):
    00 00 33 33 00 00 00 02 0e a7 5f b9 30 2b 86 dd  ..33......_.0+..
    60 00 00 00 00 10 3a ff fe 80 00 00 00 00 00 00  `.....:.........
  backtrace:
    [<ffffffff83d82322>] kmalloc_reserve+0xe2/0x140 net/core/skbuff.c:525
    [<ffffffff83d857b5>] __alloc_skb+0xd5/0x230 net/core/skbuff.c:608
    [<ffffffff84242c56>] alloc_skb include/linux/skbuff.h:1277 [inline]
    [<ffffffff84242c56>] ndisc_alloc_skb+0x56/0x100 net/ipv6/ndisc.c:421
    [<ffffffff84248200>] ndisc_send_rs+0x1c0/0x2a0 net/ipv6/ndisc.c:702
    [<ffffffff8421c919>] addrconf_rs_timer+0x159/0x3f0 net/ipv6/addrconf.c:3936
    [<ffffffff8134b793>] call_timer_fn+0x33/0x1f0 kernel/time/timer.c:1700
    [<ffffffff8134ba4f>] expire_timers+0xff/0x1d0 kernel/time/timer.c:1751
    [<ffffffff8134bc4d>] __run_timers kernel/time/timer.c:2022 [inline]
    [<ffffffff8134bc4d>] __run_timers kernel/time/timer.c:1995 [inline]
    [<ffffffff8134bc4d>] run_timer_softirq+0x12d/0x300 kernel/time/timer.c:2035
    [<ffffffff849ce65b>] __do_softirq+0xeb/0x2ee kernel/softirq.c:571

BUG: memory leak
unreferenced object 0xffff888113df25c0 (size 640):
  comm "softirq", pid 0, jiffies 4294972544 (age 42.860s)
  hex dump (first 32 bytes):
    00 00 33 33 00 00 00 02 aa aa aa aa aa 1b 86 dd  ..33............
    60 00 00 00 00 10 3a ff fe 80 00 00 00 00 00 00  `.....:.........
  backtrace:
    [<ffffffff83d82322>] kmalloc_reserve+0xe2/0x140 net/core/skbuff.c:525
    [<ffffffff83d857b5>] __alloc_skb+0xd5/0x230 net/core/skbuff.c:608
    [<ffffffff84242c56>] alloc_skb include/linux/skbuff.h:1277 [inline]
    [<ffffffff84242c56>] ndisc_alloc_skb+0x56/0x100 net/ipv6/ndisc.c:421
    [<ffffffff84248200>] ndisc_send_rs+0x1c0/0x2a0 net/ipv6/ndisc.c:702
    [<ffffffff8421c919>] addrconf_rs_timer+0x159/0x3f0 net/ipv6/addrconf.c:3936
    [<ffffffff8134b793>] call_timer_fn+0x33/0x1f0 kernel/time/timer.c:1700
    [<ffffffff8134ba4f>] expire_timers+0xff/0x1d0 kernel/time/timer.c:1751
    [<ffffffff8134bc4d>] __run_timers kernel/time/timer.c:2022 [inline]
    [<ffffffff8134bc4d>] __run_timers kernel/time/timer.c:1995 [inline]
    [<ffffffff8134bc4d>] run_timer_softirq+0x12d/0x300 kernel/time/timer.c:2035
    [<ffffffff849ce65b>] __do_softirq+0xeb/0x2ee kernel/softirq.c:571