syzbot


memory leak in gsmld_ioctl

Status: auto-obsoleted due to no activity on 2024/10/28 21:08
Subsystems: serial
[Documentation on labels]
Reported-by: syzbot+6e3e8f30f269f5028e5d@syzkaller.appspotmail.com
First crash: 757d, last: 325d
Discussions (3)
Title Replies (including bot) Last reply
tty: n_gsm: race condition in gsmld_ioctl 4 (4) 2024/04/17 10:19
[syzbot] Monthly serial report (Aug 2023) 0 (1) 2023/08/27 14:06
[syzbot] memory leak in gsmld_ioctl 0 (1) 2022/11/01 05:39
Last patch testing requests (11)
Created Duration User Patch Repo Result
2024/10/28 20:19 48m retest repro upstream OK log
2024/08/19 17:32 2h11m retest repro upstream report log
2024/06/10 20:11 20m retest repro upstream OK log
2024/06/10 16:37 20m retest repro upstream OK log
2024/06/10 16:37 19m retest repro upstream report log
2024/06/10 16:37 33m retest repro upstream OK log
2024/04/01 15:53 18m retest repro upstream report log
2024/04/01 15:53 18m retest repro upstream report log
2024/04/01 15:53 13m retest repro upstream report log
2024/04/01 15:53 12m retest repro upstream report log
2022/11/11 11:22 8m mudongliangabcd@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git -- report log

Sample crash report:
executing program
executing program
executing program
BUG: memory leak
unreferenced object 0xffff88811206f400 (size 1024):
  comm "syz-executor124", pid 5067, jiffies 4294949187 (age 21.200s)
  hex dump (first 32 bytes):
    00 fc 06 12 81 88 ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8155c405>] kmalloc_trace+0x25/0x90 mm/slab_common.c:1076
    [<ffffffff827c0d57>] kmalloc include/linux/slab.h:582 [inline]
    [<ffffffff827c0d57>] kzalloc include/linux/slab.h:703 [inline]
    [<ffffffff827c0d57>] gsm_dlci_alloc+0x27/0x1f0 drivers/tty/n_gsm.c:2618
    [<ffffffff827c74a9>] gsm_activate_mux drivers/tty/n_gsm.c:3100 [inline]
    [<ffffffff827c74a9>] gsm_config drivers/tty/n_gsm.c:3355 [inline]
    [<ffffffff827c74a9>] gsmld_ioctl+0x509/0xb70 drivers/tty/n_gsm.c:3733
    [<ffffffff827ac5e1>] tty_ioctl+0x3f1/0xc50 drivers/tty/tty_io.c:2795
    [<ffffffff81696052>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff81696052>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff81696052>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff81696052>] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:856
    [<ffffffff84ad7bb8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84ad7bb8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88810afe7000 (size 4096):
  comm "syz-executor124", pid 5067, jiffies 4294949187 (age 21.200s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8155cb28>] __do_kmalloc_node mm/slab_common.c:984 [inline]
    [<ffffffff8155cb28>] __kmalloc+0x48/0x150 mm/slab_common.c:998
    [<ffffffff824cfcd9>] kmalloc_array include/linux/slab.h:619 [inline]
    [<ffffffff824cfcd9>] __kfifo_alloc+0x89/0xe0 lib/kfifo.c:43
    [<ffffffff827c0da1>] gsm_dlci_alloc+0x71/0x1f0 drivers/tty/n_gsm.c:2623
    [<ffffffff827c74a9>] gsm_activate_mux drivers/tty/n_gsm.c:3100 [inline]
    [<ffffffff827c74a9>] gsm_config drivers/tty/n_gsm.c:3355 [inline]
    [<ffffffff827c74a9>] gsmld_ioctl+0x509/0xb70 drivers/tty/n_gsm.c:3733
    [<ffffffff827ac5e1>] tty_ioctl+0x3f1/0xc50 drivers/tty/tty_io.c:2795
    [<ffffffff81696052>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff81696052>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff81696052>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff81696052>] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:856
    [<ffffffff84ad7bb8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84ad7bb8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88811206f400 (size 1024):
  comm "syz-executor124", pid 5067, jiffies 4294949187 (age 22.410s)
  hex dump (first 32 bytes):
    00 fc 06 12 81 88 ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8155c405>] kmalloc_trace+0x25/0x90 mm/slab_common.c:1076
    [<ffffffff827c0d57>] kmalloc include/linux/slab.h:582 [inline]
    [<ffffffff827c0d57>] kzalloc include/linux/slab.h:703 [inline]
    [<ffffffff827c0d57>] gsm_dlci_alloc+0x27/0x1f0 drivers/tty/n_gsm.c:2618
    [<ffffffff827c74a9>] gsm_activate_mux drivers/tty/n_gsm.c:3100 [inline]
    [<ffffffff827c74a9>] gsm_config drivers/tty/n_gsm.c:3355 [inline]
    [<ffffffff827c74a9>] gsmld_ioctl+0x509/0xb70 drivers/tty/n_gsm.c:3733
    [<ffffffff827ac5e1>] tty_ioctl+0x3f1/0xc50 drivers/tty/tty_io.c:2795
    [<ffffffff81696052>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff81696052>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff81696052>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff81696052>] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:856
    [<ffffffff84ad7bb8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84ad7bb8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88810afe7000 (size 4096):
  comm "syz-executor124", pid 5067, jiffies 4294949187 (age 22.410s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8155cb28>] __do_kmalloc_node mm/slab_common.c:984 [inline]
    [<ffffffff8155cb28>] __kmalloc+0x48/0x150 mm/slab_common.c:998
    [<ffffffff824cfcd9>] kmalloc_array include/linux/slab.h:619 [inline]
    [<ffffffff824cfcd9>] __kfifo_alloc+0x89/0xe0 lib/kfifo.c:43
    [<ffffffff827c0da1>] gsm_dlci_alloc+0x71/0x1f0 drivers/tty/n_gsm.c:2623
    [<ffffffff827c74a9>] gsm_activate_mux drivers/tty/n_gsm.c:3100 [inline]
    [<ffffffff827c74a9>] gsm_config drivers/tty/n_gsm.c:3355 [inline]
    [<ffffffff827c74a9>] gsmld_ioctl+0x509/0xb70 drivers/tty/n_gsm.c:3733
    [<ffffffff827ac5e1>] tty_ioctl+0x3f1/0xc50 drivers/tty/tty_io.c:2795
    [<ffffffff81696052>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff81696052>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff81696052>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff81696052>] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:856
    [<ffffffff84ad7bb8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84ad7bb8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88811206f400 (size 1024):
  comm "syz-executor124", pid 5067, jiffies 4294949187 (age 23.540s)
  hex dump (first 32 bytes):
    00 fc 06 12 81 88 ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8155c405>] kmalloc_trace+0x25/0x90 mm/slab_common.c:1076
    [<ffffffff827c0d57>] kmalloc include/linux/slab.h:582 [inline]
    [<ffffffff827c0d57>] kzalloc include/linux/slab.h:703 [inline]
    [<ffffffff827c0d57>] gsm_dlci_alloc+0x27/0x1f0 drivers/tty/n_gsm.c:2618
    [<ffffffff827c74a9>] gsm_activate_mux drivers/tty/n_gsm.c:3100 [inline]
    [<ffffffff827c74a9>] gsm_config drivers/tty/n_gsm.c:3355 [inline]
    [<ffffffff827c74a9>] gsmld_ioctl+0x509/0xb70 drivers/tty/n_gsm.c:3733
    [<ffffffff827ac5e1>] tty_ioctl+0x3f1/0xc50 drivers/tty/tty_io.c:2795
    [<ffffffff81696052>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff81696052>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff81696052>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff81696052>] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:856
    [<ffffffff84ad7bb8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84ad7bb8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88810afe7000 (size 4096):
  comm "syz-executor124", pid 5067, jiffies 4294949187 (age 23.540s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8155cb28>] __do_kmalloc_node mm/slab_common.c:984 [inline]
    [<ffffffff8155cb28>] __kmalloc+0x48/0x150 mm/slab_common.c:998
    [<ffffffff824cfcd9>] kmalloc_array include/linux/slab.h:619 [inline]
    [<ffffffff824cfcd9>] __kfifo_alloc+0x89/0xe0 lib/kfifo.c:43
    [<ffffffff827c0da1>] gsm_dlci_alloc+0x71/0x1f0 drivers/tty/n_gsm.c:2623
    [<ffffffff827c74a9>] gsm_activate_mux drivers/tty/n_gsm.c:3100 [inline]
    [<ffffffff827c74a9>] gsm_config drivers/tty/n_gsm.c:3355 [inline]
    [<ffffffff827c74a9>] gsmld_ioctl+0x509/0xb70 drivers/tty/n_gsm.c:3733
    [<ffffffff827ac5e1>] tty_ioctl+0x3f1/0xc50 drivers/tty/tty_io.c:2795
    [<ffffffff81696052>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff81696052>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff81696052>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff81696052>] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:856
    [<ffffffff84ad7bb8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84ad7bb8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88811206f400 (size 1024):
  comm "syz-executor124", pid 5067, jiffies 4294949187 (age 24.670s)
  hex dump (first 32 bytes):
    00 fc 06 12 81 88 ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8155c405>] kmalloc_trace+0x25/0x90 mm/slab_common.c:1076
    [<ffffffff827c0d57>] kmalloc include/linux/slab.h:582 [inline]
    [<ffffffff827c0d57>] kzalloc include/linux/slab.h:703 [inline]
    [<ffffffff827c0d57>] gsm_dlci_alloc+0x27/0x1f0 drivers/tty/n_gsm.c:2618
    [<ffffffff827c74a9>] gsm_activate_mux drivers/tty/n_gsm.c:3100 [inline]
    [<ffffffff827c74a9>] gsm_config drivers/tty/n_gsm.c:3355 [inline]
    [<ffffffff827c74a9>] gsmld_ioctl+0x509/0xb70 drivers/tty/n_gsm.c:3733
    [<ffffffff827ac5e1>] tty_ioctl+0x3f1/0xc50 drivers/tty/tty_io.c:2795
    [<ffffffff81696052>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff81696052>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff81696052>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff81696052>] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:856
    [<ffffffff84ad7bb8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84ad7bb8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88810afe7000 (size 4096):
  comm "syz-executor124", pid 5067, jiffies 4294949187 (age 24.670s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8155cb28>] __do_kmalloc_node mm/slab_common.c:984 [inline]
    [<ffffffff8155cb28>] __kmalloc+0x48/0x150 mm/slab_common.c:998
    [<ffffffff824cfcd9>] kmalloc_array include/linux/slab.h:619 [inline]
    [<ffffffff824cfcd9>] __kfifo_alloc+0x89/0xe0 lib/kfifo.c:43
    [<ffffffff827c0da1>] gsm_dlci_alloc+0x71/0x1f0 drivers/tty/n_gsm.c:2623
    [<ffffffff827c74a9>] gsm_activate_mux drivers/tty/n_gsm.c:3100 [inline]
    [<ffffffff827c74a9>] gsm_config drivers/tty/n_gsm.c:3355 [inline]
    [<ffffffff827c74a9>] gsmld_ioctl+0x509/0xb70 drivers/tty/n_gsm.c:3733
    [<ffffffff827ac5e1>] tty_ioctl+0x3f1/0xc50 drivers/tty/tty_io.c:2795
    [<ffffffff81696052>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff81696052>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff81696052>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff81696052>] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:856
    [<ffffffff84ad7bb8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84ad7bb8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88811206f400 (size 1024):
  comm "syz-executor124", pid 5067, jiffies 4294949187 (age 24.700s)
  hex dump (first 32 bytes):
    00 fc 06 12 81 88 ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8155c405>] kmalloc_trace+0x25/0x90 mm/slab_common.c:1076
    [<ffffffff827c0d57>] kmalloc include/linux/slab.h:582 [inline]
    [<ffffffff827c0d57>] kzalloc include/linux/slab.h:703 [inline]
    [<ffffffff827c0d57>] gsm_dlci_alloc+0x27/0x1f0 drivers/tty/n_gsm.c:2618
    [<ffffffff827c74a9>] gsm_activate_mux drivers/tty/n_gsm.c:3100 [inline]
    [<ffffffff827c74a9>] gsm_config drivers/tty/n_gsm.c:3355 [inline]
    [<ffffffff827c74a9>] gsmld_ioctl+0x509/0xb70 drivers/tty/n_gsm.c:3733
    [<ffffffff827ac5e1>] tty_ioctl+0x3f1/0xc50 drivers/tty/tty_io.c:2795
    [<ffffffff81696052>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff81696052>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff81696052>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff81696052>] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:856
    [<ffffffff84ad7bb8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84ad7bb8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88810afe7000 (size 4096):
  comm "syz-executor124", pid 5067, jiffies 4294949187 (age 24.700s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8155cb28>] __do_kmalloc_node mm/slab_common.c:984 [inline]
    [<ffffffff8155cb28>] __kmalloc+0x48/0x150 mm/slab_common.c:998
    [<ffffffff824cfcd9>] kmalloc_array include/linux/slab.h:619 [inline]
    [<ffffffff824cfcd9>] __kfifo_alloc+0x89/0xe0 lib/kfifo.c:43
    [<ffffffff827c0da1>] gsm_dlci_alloc+0x71/0x1f0 drivers/tty/n_gsm.c:2623
    [<ffffffff827c74a9>] gsm_activate_mux drivers/tty/n_gsm.c:3100 [inline]
    [<ffffffff827c74a9>] gsm_config drivers/tty/n_gsm.c:3355 [inline]
    [<ffffffff827c74a9>] gsmld_ioctl+0x509/0xb70 drivers/tty/n_gsm.c:3733
    [<ffffffff827ac5e1>] tty_ioctl+0x3f1/0xc50 drivers/tty/tty_io.c:2795
    [<ffffffff81696052>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff81696052>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff81696052>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff81696052>] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:856
    [<ffffffff84ad7bb8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84ad7bb8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88811206f400 (size 1024):
  comm "syz-executor124", pid 5067, jiffies 4294949187 (age 24.740s)
  hex dump (first 32 bytes):
    00 fc 06 12 81 88 ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8155c405>] kmalloc_trace+0x25/0x90 mm/slab_common.c:1076
    [<ffffffff827c0d57>] kmalloc include/linux/slab.h:582 [inline]
    [<ffffffff827c0d57>] kzalloc include/linux/slab.h:703 [inline]
    [<ffffffff827c0d57>] gsm_dlci_alloc+0x27/0x1f0 drivers/tty/n_gsm.c:2618
    [<ffffffff827c74a9>] gsm_activate_mux drivers/tty/n_gsm.c:3100 [inline]
    [<ffffffff827c74a9>] gsm_config drivers/tty/n_gsm.c:3355 [inline]
    [<ffffffff827c74a9>] gsmld_ioctl+0x509/0xb70 drivers/tty/n_gsm.c:3733
    [<ffffffff827ac5e1>] tty_ioctl+0x3f1/0xc50 drivers/tty/tty_io.c:2795
    [<ffffffff81696052>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff81696052>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff81696052>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff81696052>] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:856
    [<ffffffff84ad7bb8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84ad7bb8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88810afe7000 (size 4096):
  comm "syz-executor124", pid 5067, jiffies 4294949187 (age 24.740s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8155cb28>] __do_kmalloc_node mm/slab_common.c:984 [inline]
    [<ffffffff8155cb28>] __kmalloc+0x48/0x150 mm/slab_common.c:998
    [<ffffffff824cfcd9>] kmalloc_array include/linux/slab.h:619 [inline]
    [<ffffffff824cfcd9>] __kfifo_alloc+0x89/0xe0 lib/kfifo.c:43
    [<ffffffff827c0da1>] gsm_dlci_alloc+0x71/0x1f0 drivers/tty/n_gsm.c:2623
    [<ffffffff827c74a9>] gsm_activate_mux drivers/tty/n_gsm.c:3100 [inline]
    [<ffffffff827c74a9>] gsm_config drivers/tty/n_gsm.c:3355 [inline]
    [<ffffffff827c74a9>] gsmld_ioctl+0x509/0xb70 drivers/tty/n_gsm.c:3733
    [<ffffffff827ac5e1>] tty_ioctl+0x3f1/0xc50 drivers/tty/tty_io.c:2795
    [<ffffffff81696052>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff81696052>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff81696052>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff81696052>] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:856
    [<ffffffff84ad7bb8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84ad7bb8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

executing program
executing program

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/07/23 16:45 upstream c2782531397f 27cbe77f .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in gsmld_ioctl
2022/10/28 05:37 upstream b229b6ca5abb 86777b7f .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in gsmld_ioctl
2023/03/26 02:01 upstream 4bdec23f971b fbf0499a .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in gsmld_ioctl
2022/12/05 20:47 upstream 76dcd734eca2 045cbb84 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in gsmld_ioctl
2024/01/03 09:12 upstream 610a9b8f49fb fb427a07 .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in gsmld_ioctl
* Struck through repros no longer work on HEAD.