On Sun, Mar 18, 2018 at 08:36:20PM -0700, David Ahern wrote: > @@ -405,18 +383,9 @@ static void ip6_dst_destroy(struct dst_entry *dst) > rt->rt6i_idev = NULL; > in6_dev_put(idev); > } > - bucket = rcu_dereference_protected(rt->rt6i_exception_bucket, 1); > - if (bucket) { > - rt->rt6i_exception_bucket = NULL; > - kfree(bucket); > - } > - > - m = rt->fib6_metrics; > - if (m != &dst_default_metrics && refcount_dec_and_test(&m->refcnt)) > - kfree(m);
You remove this... > > rt->from = NULL; > - dst_release(&from->dst); > + fib6_info_release(from); Yet fib6_info_release() doesn't take care of it (unlike the IPv4 equivalent), which means you're leaking the metrics. > }