From: Martin KaFai Lau <ka...@fb.com> Date: Tue, 5 Jul 2016 12:10:23 -0700
> It was first reported and reproduced by Petr (thanks!) in > https://bugzilla.kernel.org/show_bug.cgi?id=119581 > > free_percpu(rt->rt6i_pcpu) used to always happen in ip6_dst_destroy(). > > However, after fixing a deadlock bug in > commit 9c7370a166b4 ("ipv6: Fix a potential deadlock when creating pcpu rt"), > free_percpu() is not called before setting non_pcpu_rt->rt6i_pcpu to NULL. > > It is worth to note that rt6i_pcpu is protected by table->tb6_lock. > > kmemleak somehow did not report it. We nailed it down by > observing the pcpu entries in /proc/vmallocinfo (first suggested > by Hannes, thanks!). > > Signed-off-by: Martin KaFai Lau <ka...@fb.com> > Fixes: 9c7370a166b4 ("ipv6: Fix a potential deadlock when creating pcpu rt") > Reported-by: Petr Novopashenniy <p...@rusnet.ru> > Tested-by: Petr Novopashenniy <p...@rusnet.ru> > Acked-by: Hannes Frederic Sowa <han...@stressinduktion.org> > Cc: Hannes Frederic Sowa <han...@stressinduktion.org> > Cc: Petr Novopashenniy <p...@rusnet.ru> Applied and queued up for -stable.
