syzbot

 sign-in | mailing list | source | docs
🐞 Open [985] ≡ Subsystems 🐞 Fixed [5216] 🐞 Invalid [12474] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

memory leak in tipc_buf_acquire

Status: fixed on 2019/07/10 21:40
Subsystems: tipc
[Documentation on labels]
Reported-by: syzbot+78fbe679c8ca8d264a8d@syzkaller.appspotmail.com
Fix commit: 5cf02612b33f tipc: purge deferredq list for each grp member in tipc_group_delete
First crash: 1792d, last: 1768d
▶ ▼ Discussions (6)
Title Replies (including bot) Last reply
[PATCH v2 0/3] Fix three issues found by syzbot 9 (9) 2020/02/20 15:44
[PATCH 0/3] Fix three issues found by syzbot 5 (5) 2019/08/09 18:49
[PATCH 4.19 00/61] 4.19.54-stable review 66 (66) 2019/06/22 08:20
[PATCH 5.1 00/98] 5.1.13-stable review 106 (106) 2019/06/22 05:43
[PATCH net] tipc: purge deferredq list for each grp member in tipc_group_delete 3 (3) 2019/06/17 03:42
memory leak in tipc_buf_acquire 3 (4) 2019/06/16 07:02

Sample crash report:
executing program
executing program
executing program
executing program
executing program
BUG: memory leak
unreferenced object 0xffff88810f4f6e00 (size 512):
  comm "softirq", pid 0, jiffies 4294942350 (age 18.920s)
  hex dump (first 32 bytes):
    b8 80 36 1f 81 88 ff ff b8 80 36 1f 81 88 ff ff  ..6.......6.....
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<000000006ab801f1>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000006ab801f1>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<000000006ab801f1>] slab_alloc_node mm/slab.c:3269 [inline]
    [<000000006ab801f1>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
    [<000000004728bf70>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
    [<00000000acf790f1>] alloc_skb_fclone include/linux/skbuff.h:1103 [inline]
    [<00000000acf790f1>] tipc_buf_acquire+0x2f/0x80 net/tipc/msg.c:66
    [<00000000546f90b4>] tipc_msg_create+0x37/0xe0 net/tipc/msg.c:98
    [<000000002cc8f8a2>] tipc_group_create_event+0xb3/0x1b0 net/tipc/group.c:679
    [<00000000c307aff1>] tipc_group_proto_rcv+0x569/0x640 net/tipc/group.c:781
    [<000000000db0b42c>] tipc_sk_proto_rcv net/tipc/socket.c:1996 [inline]
    [<000000000db0b42c>] tipc_sk_filter_rcv+0x9ac/0xf20 net/tipc/socket.c:2163
    [<0000000056129fbb>] tipc_sk_enqueue net/tipc/socket.c:2255 [inline]
    [<0000000056129fbb>] tipc_sk_rcv+0x494/0x8a0 net/tipc/socket.c:2306
    [<000000005b1ed21a>] tipc_node_xmit+0x196/0x1f0 net/tipc/node.c:1442
    [<000000003b46f8ae>] tipc_node_xmit_skb net/tipc/node.c:1491 [inline]
    [<000000003b46f8ae>] tipc_node_distr_xmit+0x7d/0x120 net/tipc/node.c:1506
    [<000000001845322e>] tipc_group_delete+0xe6/0x130 net/tipc/group.c:224
    [<0000000009221955>] tipc_sk_leave+0x57/0xb0 net/tipc/socket.c:2925
    [<00000000b2d8de12>] tipc_release+0x7b/0x5e0 net/tipc/socket.c:584
    [<0000000071fc8426>] __sock_release+0x4b/0xe0 net/socket.c:601
    [<00000000f9b64134>] sock_close+0x1b/0x30 net/socket.c:1273
    [<00000000ecf1a471>] __fput+0xed/0x300 fs/file_table.c:280

BUG: memory leak
unreferenced object 0xffff888121689400 (size 1024):
  comm "softirq", pid 0, jiffies 4294942350 (age 18.920s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000663816a9>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000663816a9>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<00000000663816a9>] slab_alloc_node mm/slab.c:3269 [inline]
    [<00000000663816a9>] kmem_cache_alloc_node_trace+0x15b/0x2a0 mm/slab.c:3597
    [<000000006fed3e16>] __do_kmalloc_node mm/slab.c:3619 [inline]
    [<000000006fed3e16>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3634
    [<00000000267c7acb>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:138
    [<000000006ff13732>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
    [<00000000acf790f1>] alloc_skb_fclone include/linux/skbuff.h:1103 [inline]
    [<00000000acf790f1>] tipc_buf_acquire+0x2f/0x80 net/tipc/msg.c:66
    [<00000000546f90b4>] tipc_msg_create+0x37/0xe0 net/tipc/msg.c:98
    [<000000002cc8f8a2>] tipc_group_create_event+0xb3/0x1b0 net/tipc/group.c:679
    [<00000000c307aff1>] tipc_group_proto_rcv+0x569/0x640 net/tipc/group.c:781
    [<000000000db0b42c>] tipc_sk_proto_rcv net/tipc/socket.c:1996 [inline]
    [<000000000db0b42c>] tipc_sk_filter_rcv+0x9ac/0xf20 net/tipc/socket.c:2163
    [<0000000056129fbb>] tipc_sk_enqueue net/tipc/socket.c:2255 [inline]
    [<0000000056129fbb>] tipc_sk_rcv+0x494/0x8a0 net/tipc/socket.c:2306
    [<000000005b1ed21a>] tipc_node_xmit+0x196/0x1f0 net/tipc/node.c:1442
    [<000000003b46f8ae>] tipc_node_xmit_skb net/tipc/node.c:1491 [inline]
    [<000000003b46f8ae>] tipc_node_distr_xmit+0x7d/0x120 net/tipc/node.c:1506
    [<000000001845322e>] tipc_group_delete+0xe6/0x130 net/tipc/group.c:224
    [<0000000009221955>] tipc_sk_leave+0x57/0xb0 net/tipc/socket.c:2925
    [<00000000b2d8de12>] tipc_release+0x7b/0x5e0 net/tipc/socket.c:584
    [<0000000071fc8426>] __sock_release+0x4b/0xe0 net/socket.c:601

BUG: memory leak
unreferenced object 0xffff8881294a9200 (size 512):
  comm "softirq", pid 0, jiffies 4294942351 (age 18.910s)
  hex dump (first 32 bytes):
    38 69 f9 21 81 88 ff ff 38 69 f9 21 81 88 ff ff  8i.!....8i.!....
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<000000006ab801f1>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000006ab801f1>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<000000006ab801f1>] slab_alloc_node mm/slab.c:3269 [inline]
    [<000000006ab801f1>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
    [<000000004728bf70>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
    [<00000000acf790f1>] alloc_skb_fclone include/linux/skbuff.h:1103 [inline]
    [<00000000acf790f1>] tipc_buf_acquire+0x2f/0x80 net/tipc/msg.c:66
    [<00000000546f90b4>] tipc_msg_create+0x37/0xe0 net/tipc/msg.c:98
    [<000000002cc8f8a2>] tipc_group_create_event+0xb3/0x1b0 net/tipc/group.c:679
    [<00000000c307aff1>] tipc_group_proto_rcv+0x569/0x640 net/tipc/group.c:781
    [<000000000db0b42c>] tipc_sk_proto_rcv net/tipc/socket.c:1996 [inline]
    [<000000000db0b42c>] tipc_sk_filter_rcv+0x9ac/0xf20 net/tipc/socket.c:2163
    [<0000000056129fbb>] tipc_sk_enqueue net/tipc/socket.c:2255 [inline]
    [<0000000056129fbb>] tipc_sk_rcv+0x494/0x8a0 net/tipc/socket.c:2306
    [<000000005b1ed21a>] tipc_node_xmit+0x196/0x1f0 net/tipc/node.c:1442
    [<000000003b46f8ae>] tipc_node_xmit_skb net/tipc/node.c:1491 [inline]
    [<000000003b46f8ae>] tipc_node_distr_xmit+0x7d/0x120 net/tipc/node.c:1506
    [<000000001845322e>] tipc_group_delete+0xe6/0x130 net/tipc/group.c:224
    [<0000000009221955>] tipc_sk_leave+0x57/0xb0 net/tipc/socket.c:2925
    [<00000000b2d8de12>] tipc_release+0x7b/0x5e0 net/tipc/socket.c:584
    [<0000000071fc8426>] __sock_release+0x4b/0xe0 net/socket.c:601
    [<00000000f9b64134>] sock_close+0x1b/0x30 net/socket.c:1273
    [<00000000ecf1a471>] __fput+0xed/0x300 fs/file_table.c:280

BUG: memory leak
unreferenced object 0xffff88810f4f6e00 (size 512):
  comm "softirq", pid 0, jiffies 4294942350 (age 20.910s)
  hex dump (first 32 bytes):
    b8 80 36 1f 81 88 ff ff b8 80 36 1f 81 88 ff ff  ..6.......6.....
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<000000006ab801f1>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000006ab801f1>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<000000006ab801f1>] slab_alloc_node mm/slab.c:3269 [inline]
    [<000000006ab801f1>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
    [<000000004728bf70>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
    [<00000000acf790f1>] alloc_skb_fclone include/linux/skbuff.h:1103 [inline]
    [<00000000acf790f1>] tipc_buf_acquire+0x2f/0x80 net/tipc/msg.c:66
    [<00000000546f90b4>] tipc_msg_create+0x37/0xe0 net/tipc/msg.c:98
    [<000000002cc8f8a2>] tipc_group_create_event+0xb3/0x1b0 net/tipc/group.c:679
    [<00000000c307aff1>] tipc_group_proto_rcv+0x569/0x640 net/tipc/group.c:781
    [<000000000db0b42c>] tipc_sk_proto_rcv net/tipc/socket.c:1996 [inline]
    [<000000000db0b42c>] tipc_sk_filter_rcv+0x9ac/0xf20 net/tipc/socket.c:2163
    [<0000000056129fbb>] tipc_sk_enqueue net/tipc/socket.c:2255 [inline]
    [<0000000056129fbb>] tipc_sk_rcv+0x494/0x8a0 net/tipc/socket.c:2306
    [<000000005b1ed21a>] tipc_node_xmit+0x196/0x1f0 net/tipc/node.c:1442
    [<000000003b46f8ae>] tipc_node_xmit_skb net/tipc/node.c:1491 [inline]
    [<000000003b46f8ae>] tipc_node_distr_xmit+0x7d/0x120 net/tipc/node.c:1506
    [<000000001845322e>] tipc_group_delete+0xe6/0x130 net/tipc/group.c:224
    [<0000000009221955>] tipc_sk_leave+0x57/0xb0 net/tipc/socket.c:2925
    [<00000000b2d8de12>] tipc_release+0x7b/0x5e0 net/tipc/socket.c:584
    [<0000000071fc8426>] __sock_release+0x4b/0xe0 net/socket.c:601
    [<00000000f9b64134>] sock_close+0x1b/0x30 net/socket.c:1273
    [<00000000ecf1a471>] __fput+0xed/0x300 fs/file_table.c:280

BUG: memory leak
unreferenced object 0xffff888121689400 (size 1024):
  comm "softirq", pid 0, jiffies 4294942350 (age 20.910s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000663816a9>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000663816a9>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<00000000663816a9>] slab_alloc_node mm/slab.c:3269 [inline]
    [<00000000663816a9>] kmem_cache_alloc_node_trace+0x15b/0x2a0 mm/slab.c:3597
    [<000000006fed3e16>] __do_kmalloc_node mm/slab.c:3619 [inline]
    [<000000006fed3e16>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3634
    [<00000000267c7acb>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:138
    [<000000006ff13732>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
    [<00000000acf790f1>] alloc_skb_fclone include/linux/skbuff.h:1103 [inline]
    [<00000000acf790f1>] tipc_buf_acquire+0x2f/0x80 net/tipc/msg.c:66
    [<00000000546f90b4>] tipc_msg_create+0x37/0xe0 net/tipc/msg.c:98
    [<000000002cc8f8a2>] tipc_group_create_event+0xb3/0x1b0 net/tipc/group.c:679
    [<00000000c307aff1>] tipc_group_proto_rcv+0x569/0x640 net/tipc/group.c:781
    [<000000000db0b42c>] tipc_sk_proto_rcv net/tipc/socket.c:1996 [inline]
    [<000000000db0b42c>] tipc_sk_filter_rcv+0x9ac/0xf20 net/tipc/socket.c:2163
    [<0000000056129fbb>] tipc_sk_enqueue net/tipc/socket.c:2255 [inline]
    [<0000000056129fbb>] tipc_sk_rcv+0x494/0x8a0 net/tipc/socket.c:2306
    [<000000005b1ed21a>] tipc_node_xmit+0x196/0x1f0 net/tipc/node.c:1442
    [<000000003b46f8ae>] tipc_node_xmit_skb net/tipc/node.c:1491 [inline]
    [<000000003b46f8ae>] tipc_node_distr_xmit+0x7d/0x120 net/tipc/node.c:1506
    [<000000001845322e>] tipc_group_delete+0xe6/0x130 net/tipc/group.c:224
    [<0000000009221955>] tipc_sk_leave+0x57/0xb0 net/tipc/socket.c:2925
    [<00000000b2d8de12>] tipc_release+0x7b/0x5e0 net/tipc/socket.c:584
    [<0000000071fc8426>] __sock_release+0x4b/0xe0 net/socket.c:601

BUG: memory leak
unreferenced object 0xffff8881294a9200 (size 512):
  comm "softirq", pid 0, jiffies 4294942351 (age 20.900s)
  hex dump (first 32 bytes):
    38 69 f9 21 81 88 ff ff 38 69 f9 21 81 88 ff ff  8i.!....8i.!....
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<000000006ab801f1>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000006ab801f1>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<000000006ab801f1>] slab_alloc_node mm/slab.c:3269 [inline]
    [<000000006ab801f1>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
    [<000000004728bf70>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
    [<00000000acf790f1>] alloc_skb_fclone include/linux/skbuff.h:1103 [inline]
    [<00000000acf790f1>] tipc_buf_acquire+0x2f/0x80 net/tipc/msg.c:66
    [<00000000546f90b4>] tipc_msg_create+0x37/0xe0 net/tipc/msg.c:98
    [<000000002cc8f8a2>] tipc_group_create_event+0xb3/0x1b0 net/tipc/group.c:679
    [<00000000c307aff1>] tipc_group_proto_rcv+0x569/0x640 net/tipc/group.c:781
    [<000000000db0b42c>] tipc_sk_proto_rcv net/tipc/socket.c:1996 [inline]
    [<000000000db0b42c>] tipc_sk_filter_rcv+0x9ac/0xf20 net/tipc/socket.c:2163
    [<0000000056129fbb>] tipc_sk_enqueue net/tipc/socket.c:2255 [inline]
    [<0000000056129fbb>] tipc_sk_rcv+0x494/0x8a0 net/tipc/socket.c:2306
    [<000000005b1ed21a>] tipc_node_xmit+0x196/0x1f0 net/tipc/node.c:1442
    [<000000003b46f8ae>] tipc_node_xmit_skb net/tipc/node.c:1491 [inline]
    [<000000003b46f8ae>] tipc_node_distr_xmit+0x7d/0x120 net/tipc/node.c:1506
    [<000000001845322e>] tipc_group_delete+0xe6/0x130 net/tipc/group.c:224
    [<0000000009221955>] tipc_sk_leave+0x57/0xb0 net/tipc/socket.c:2925
    [<00000000b2d8de12>] tipc_release+0x7b/0x5e0 net/tipc/socket.c:584
    [<0000000071fc8426>] __sock_release+0x4b/0xe0 net/socket.c:601
    [<00000000f9b64134>] sock_close+0x1b/0x30 net/socket.c:1273
    [<00000000ecf1a471>] __fput+0xed/0x300 fs/file_table.c:280

BUG: memory leak
unreferenced object 0xffff88810f4f6e00 (size 512):
  comm "softirq", pid 0, jiffies 4294942350 (age 21.940s)
  hex dump (first 32 bytes):
    b8 80 36 1f 81 88 ff ff b8 80 36 1f 81 88 ff ff  ..6.......6.....
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<000000006ab801f1>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000006ab801f1>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<000000006ab801f1>] slab_alloc_node mm/slab.c:3269 [inline]
    [<000000006ab801f1>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
    [<000000004728bf70>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
    [<00000000acf790f1>] alloc_skb_fclone include/linux/skbuff.h:1103 [inline]
    [<00000000acf790f1>] tipc_buf_acquire+0x2f/0x80 net/tipc/msg.c:66
    [<00000000546f90b4>] tipc_msg_create+0x37/0xe0 net/tipc/msg.c:98
    [<000000002cc8f8a2>] tipc_group_create_event+0xb3/0x1b0 net/tipc/group.c:679
    [<00000000c307aff1>] tipc_group_proto_rcv+0x569/0x640 net/tipc/group.c:781
    [<000000000db0b42c>] tipc_sk_proto_rcv net/tipc/socket.c:1996 [inline]
    [<000000000db0b42c>] tipc_sk_filter_rcv+0x9ac/0xf20 net/tipc/socket.c:2163
    [<0000000056129fbb>] tipc_sk_enqueue net/tipc/socket.c:2255 [inline]
    [<0000000056129fbb>] tipc_sk_rcv+0x494/0x8a0 net/tipc/socket.c:2306
    [<000000005b1ed21a>] tipc_node_xmit+0x196/0x1f0 net/tipc/node.c:1442
    [<000000003b46f8ae>] tipc_node_xmit_skb net/tipc/node.c:1491 [inline]
    [<000000003b46f8ae>] tipc_node_distr_xmit+0x7d/0x120 net/tipc/node.c:1506
    [<000000001845322e>] tipc_group_delete+0xe6/0x130 net/tipc/group.c:224
    [<0000000009221955>] tipc_sk_leave+0x57/0xb0 net/tipc/socket.c:2925
    [<00000000b2d8de12>] tipc_release+0x7b/0x5e0 net/tipc/socket.c:584
    [<0000000071fc8426>] __sock_release+0x4b/0xe0 net/socket.c:601
    [<00000000f9b64134>] sock_close+0x1b/0x30 net/socket.c:1273
    [<00000000ecf1a471>] __fput+0xed/0x300 fs/file_table.c:280

BUG: memory leak
unreferenced object 0xffff888121689400 (size 1024):
  comm "softirq", pid 0, jiffies 4294942350 (age 21.940s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000663816a9>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000663816a9>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<00000000663816a9>] slab_alloc_node mm/slab.c:3269 [inline]
    [<00000000663816a9>] kmem_cache_alloc_node_trace+0x15b/0x2a0 mm/slab.c:3597
    [<000000006fed3e16>] __do_kmalloc_node mm/slab.c:3619 [inline]
    [<000000006fed3e16>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3634
    [<00000000267c7acb>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:138
    [<000000006ff13732>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
    [<00000000acf790f1>] alloc_skb_fclone include/linux/skbuff.h:1103 [inline]
    [<00000000acf790f1>] tipc_buf_acquire+0x2f/0x80 net/tipc/msg.c:66
    [<00000000546f90b4>] tipc_msg_create+0x37/0xe0 net/tipc/msg.c:98
    [<000000002cc8f8a2>] tipc_group_create_event+0xb3/0x1b0 net/tipc/group.c:679
    [<00000000c307aff1>] tipc_group_proto_rcv+0x569/0x640 net/tipc/group.c:781
    [<000000000db0b42c>] tipc_sk_proto_rcv net/tipc/socket.c:1996 [inline]
    [<000000000db0b42c>] tipc_sk_filter_rcv+0x9ac/0xf20 net/tipc/socket.c:2163
    [<0000000056129fbb>] tipc_sk_enqueue net/tipc/socket.c:2255 [inline]
    [<0000000056129fbb>] tipc_sk_rcv+0x494/0x8a0 net/tipc/socket.c:2306
    [<000000005b1ed21a>] tipc_node_xmit+0x196/0x1f0 net/tipc/node.c:1442
    [<000000003b46f8ae>] tipc_node_xmit_skb net/tipc/node.c:1491 [inline]
    [<000000003b46f8ae>] tipc_node_distr_xmit+0x7d/0x120 net/tipc/node.c:1506
    [<000000001845322e>] tipc_group_delete+0xe6/0x130 net/tipc/group.c:224
    [<0000000009221955>] tipc_sk_leave+0x57/0xb0 net/tipc/socket.c:2925
    [<00000000b2d8de12>] tipc_release+0x7b/0x5e0 net/tipc/socket.c:584
    [<0000000071fc8426>] __sock_release+0x4b/0xe0 net/socket.c:601

BUG: memory leak
unreferenced object 0xffff8881294a9200 (size 512):
  comm "softirq", pid 0, jiffies 4294942351 (age 21.930s)
  hex dump (first 32 bytes):
    38 69 f9 21 81 88 ff ff 38 69 f9 21 81 88 ff ff  8i.!....8i.!....
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<000000006ab801f1>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000006ab801f1>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<000000006ab801f1>] slab_alloc_node mm/slab.c:3269 [inline]
    [<000000006ab801f1>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
    [<000000004728bf70>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
    [<00000000acf790f1>] alloc_skb_fclone include/linux/skbuff.h:1103 [inline]
    [<00000000acf790f1>] tipc_buf_acquire+0x2f/0x80 net/tipc/msg.c:66
    [<00000000546f90b4>] tipc_msg_create+0x37/0xe0 net/tipc/msg.c:98
    [<000000002cc8f8a2>] tipc_group_create_event+0xb3/0x1b0 net/tipc/group.c:679
    [<00000000c307aff1>] tipc_group_proto_rcv+0x569/0x640 net/tipc/group.c:781
    [<000000000db0b42c>] tipc_sk_proto_rcv net/tipc/socket.c:1996 [inline]
    [<000000000db0b42c>] tipc_sk_filter_rcv+0x9ac/0xf20 net/tipc/socket.c:2163
    [<0000000056129fbb>] tipc_sk_enqueue net/tipc/socket.c:2255 [inline]
    [<0000000056129fbb>] tipc_sk_rcv+0x494/0x8a0 net/tipc/socket.c:2306
    [<000000005b1ed21a>] tipc_node_xmit+0x196/0x1f0 net/tipc/node.c:1442
    [<000000003b46f8ae>] tipc_node_xmit_skb net/tipc/node.c:1491 [inline]
    [<000000003b46f8ae>] tipc_node_distr_xmit+0x7d/0x120 net/tipc/node.c:1506
    [<000000001845322e>] tipc_group_delete+0xe6/0x130 net/tipc/group.c:224
    [<0000000009221955>] tipc_sk_leave+0x57/0xb0 net/tipc/socket.c:2925
    [<00000000b2d8de12>] tipc_release+0x7b/0x5e0 net/tipc/socket.c:584
    [<0000000071fc8426>] __sock_release+0x4b/0xe0 net/socket.c:601
    [<00000000f9b64134>] sock_close+0x1b/0x30 net/socket.c:1273
    [<00000000ecf1a471>] __fput+0xed/0x300 fs/file_table.c:280

BUG: memory leak
unreferenced object 0xffff88810f4f6e00 (size 512):
  comm "softirq", pid 0, jiffies 4294942350 (age 22.960s)
  hex dump (first 32 bytes):
    b8 80 36 1f 81 88 ff ff b8 80 36 1f 81 88 ff ff  ..6.......6.....
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<000000006ab801f1>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000006ab801f1>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<000000006ab801f1>] slab_alloc_node mm/slab.c:3269 [inline]
    [<000000006ab801f1>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
    [<000000004728bf70>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
    [<00000000acf790f1>] alloc_skb_fclone include/linux/skbuff.h:1103 [inline]
    [<00000000acf790f1>] tipc_buf_acquire+0x2f/0x80 net/tipc/msg.c:66
    [<00000000546f90b4>] tipc_msg_create+0x37/0xe0 net/tipc/msg.c:98
    [<000000002cc8f8a2>] tipc_group_create_event+0xb3/0x1b0 net/tipc/group.c:679
    [<00000000c307aff1>] tipc_group_proto_rcv+0x569/0x640 net/tipc/group.c:781
    [<000000000db0b42c>] tipc_sk_proto_rcv net/tipc/socket.c:1996 [inline]
    [<000000000db0b42c>] tipc_sk_filter_rcv+0x9ac/0xf20 net/tipc/socket.c:2163
    [<0000000056129fbb>] tipc_sk_enqueue net/tipc/socket.c:2255 [inline]
    [<0000000056129fbb>] tipc_sk_rcv+0x494/0x8a0 net/tipc/socket.c:2306
    [<000000005b1ed21a>] tipc_node_xmit+0x196/0x1f0 net/tipc/node.c:1442
    [<000000003b46f8ae>] tipc_node_xmit_skb net/tipc/node.c:1491 [inline]
    [<000000003b46f8ae>] tipc_node_distr_xmit+0x7d/0x120 net/tipc/node.c:1506
    [<000000001845322e>] tipc_group_delete+0xe6/0x130 net/tipc/group.c:224
    [<0000000009221955>] tipc_sk_leave+0x57/0xb0 net/tipc/socket.c:2925
    [<00000000b2d8de12>] tipc_release+0x7b/0x5e0 net/tipc/socket.c:584
    [<0000000071fc8426>] __sock_release+0x4b/0xe0 net/socket.c:601
    [<00000000f9b64134>] sock_close+0x1b/0x30 net/socket.c:1273
    [<00000000ecf1a471>] __fput+0xed/0x300 fs/file_table.c:280

BUG: memory leak
unreferenced object 0xffff888121689400 (size 1024):
  comm "softirq", pid 0, jiffies 4294942350 (age 22.960s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000663816a9>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000663816a9>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<00000000663816a9>] slab_alloc_node mm/slab.c:3269 [inline]
    [<00000000663816a9>] kmem_cache_alloc_node_trace+0x15b/0x2a0 mm/slab.c:3597
    [<000000006fed3e16>] __do_kmalloc_node mm/slab.c:3619 [inline]
    [<000000006fed3e16>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3634
    [<00000000267c7acb>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:138
    [<000000006ff13732>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
    [<00000000acf790f1>] alloc_skb_fclone include/linux/skbuff.h:1103 [inline]
    [<00000000acf790f1>] tipc_buf_acquire+0x2f/0x80 net/tipc/msg.c:66
    [<00000000546f90b4>] tipc_msg_create+0x37/0xe0 net/tipc/msg.c:98
    [<000000002cc8f8a2>] tipc_group_create_event+0xb3/0x1b0 net/tipc/group.c:679
    [<00000000c307aff1>] tipc_group_proto_rcv+0x569/0x640 net/tipc/group.c:781
    [<000000000db0b42c>] tipc_sk_proto_rcv net/tipc/socket.c:1996 [inline]
    [<000000000db0b42c>] tipc_sk_filter_rcv+0x9ac/0xf20 net/tipc/socket.c:2163
    [<0000000056129fbb>] tipc_sk_enqueue net/tipc/socket.c:2255 [inline]
    [<0000000056129fbb>] tipc_sk_rcv+0x494/0x8a0 net/tipc/socket.c:2306
    [<000000005b1ed21a>] tipc_node_xmit+0x196/0x1f0 net/tipc/node.c:1442
    [<000000003b46f8ae>] tipc_node_xmit_skb net/tipc/node.c:1491 [inline]
    [<000000003b46f8ae>] tipc_node_distr_xmit+0x7d/0x120 net/tipc/node.c:1506
    [<000000001845322e>] tipc_group_delete+0xe6/0x130 net/tipc/group.c:224
    [<0000000009221955>] tipc_sk_leave+0x57/0xb0 net/tipc/socket.c:2925
    [<00000000b2d8de12>] tipc_release+0x7b/0x5e0 net/tipc/socket.c:584
    [<0000000071fc8426>] __sock_release+0x4b/0xe0 net/socket.c:601

BUG: memory leak
unreferenced object 0xffff8881294a9200 (size 512):
  comm "softirq", pid 0, jiffies 4294942351 (age 22.950s)
  hex dump (first 32 bytes):
    38 69 f9 21 81 88 ff ff 38 69 f9 21 81 88 ff ff  8i.!....8i.!....
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<000000006ab801f1>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000006ab801f1>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<000000006ab801f1>] slab_alloc_node mm/slab.c:3269 [inline]
    [<000000006ab801f1>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
    [<000000004728bf70>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
    [<00000000acf790f1>] alloc_skb_fclone include/linux/skbuff.h:1103 [inline]
    [<00000000acf790f1>] tipc_buf_acquire+0x2f/0x80 net/tipc/msg.c:66
    [<00000000546f90b4>] tipc_msg_create+0x37/0xe0 net/tipc/msg.c:98
    [<000000002cc8f8a2>] tipc_group_create_event+0xb3/0x1b0 net/tipc/group.c:679
    [<00000000c307aff1>] tipc_group_proto_rcv+0x569/0x640 net/tipc/group.c:781
    [<000000000db0b42c>] tipc_sk_proto_rcv net/tipc/socket.c:1996 [inline]
    [<000000000db0b42c>] tipc_sk_filter_rcv+0x9ac/0xf20 net/tipc/socket.c:2163
    [<0000000056129fbb>] tipc_sk_enqueue net/tipc/socket.c:2255 [inline]
    [<0000000056129fbb>] tipc_sk_rcv+0x494/0x8a0 net/tipc/socket.c:2306
    [<000000005b1ed21a>] tipc_node_xmit+0x196/0x1f0 net/tipc/node.c:1442
    [<000000003b46f8ae>] tipc_node_xmit_skb net/tipc/node.c:1491 [inline]
    [<000000003b46f8ae>] tipc_node_distr_xmit+0x7d/0x120 net/tipc/node.c:1506
    [<000000001845322e>] tipc_group_delete+0xe6/0x130 net/tipc/group.c:224
    [<0000000009221955>] tipc_sk_leave+0x57/0xb0 net/tipc/socket.c:2925
    [<00000000b2d8de12>] tipc_release+0x7b/0x5e0 net/tipc/socket.c:584
    [<0000000071fc8426>] __sock_release+0x4b/0xe0 net/socket.c:601
    [<00000000f9b64134>] sock_close+0x1b/0x30 net/socket.c:1273
    [<00000000ecf1a471>] __fput+0xed/0x300 fs/file_table.c:280

BUG: memory leak
unreferenced object 0xffff88810f4f6e00 (size 512):
  comm "softirq", pid 0, jiffies 4294942350 (age 24.950s)
  hex dump (first 32 bytes):
    b8 80 36 1f 81 88 ff ff b8 80 36 1f 81 88 ff ff  ..6.......6.....
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<000000006ab801f1>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000006ab801f1>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<000000006ab801f1>] slab_alloc_node mm/slab.c:3269 [inline]
    [<000000006ab801f1>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
    [<000000004728bf70>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
    [<00000000acf790f1>] alloc_skb_fclone include/linux/skbuff.h:1103 [inline]
    [<00000000acf790f1>] tipc_buf_acquire+0x2f/0x80 net/tipc/msg.c:66
    [<00000000546f90b4>] tipc_msg_create+0x37/0xe0 net/tipc/msg.c:98
    [<000000002cc8f8a2>] tipc_group_create_event+0xb3/0x1b0 net/tipc/group.c:679
    [<00000000c307aff1>] tipc_group_proto_rcv+0x569/0x640 net/tipc/group.c:781
    [<000000000db0b42c>] tipc_sk_proto_rcv net/tipc/socket.c:1996 [inline]
    [<000000000db0b42c>] tipc_sk_filter_rcv+0x9ac/0xf20 net/tipc/socket.c:2163
    [<0000000056129fbb>] tipc_sk_enqueue net/tipc/socket.c:2255 [inline]
    [<0000000056129fbb>] tipc_sk_rcv+0x494/0x8a0 net/tipc/socket.c:2306
    [<000000005b1ed21a>] tipc_node_xmit+0x196/0x1f0 net/tipc/node.c:1442
    [<000000003b46f8ae>] tipc_node_xmit_skb net/tipc/node.c:1491 [inline]
    [<000000003b46f8ae>] tipc_node_distr_xmit+0x7d/0x120 net/tipc/node.c:1506
    [<000000001845322e>] tipc_group_delete+0xe6/0x130 net/tipc/group.c:224
    [<0000000009221955>] tipc_sk_leave+0x57/0xb0 net/tipc/socket.c:2925
    [<00000000b2d8de12>] tipc_release+0x7b/0x5e0 net/tipc/socket.c:584
    [<0000000071fc8426>] __sock_release+0x4b/0xe0 net/socket.c:601
    [<00000000f9b64134>] sock_close+0x1b/0x30 net/socket.c:1273
    [<00000000ecf1a471>] __fput+0xed/0x300 fs/file_table.c:280

BUG: memory leak
unreferenced object 0xffff888121689400 (size 1024):
  comm "softirq", pid 0, jiffies 4294942350 (age 24.950s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000663816a9>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000663816a9>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<00000000663816a9>] slab_alloc_node mm/slab.c:3269 [inline]
    [<00000000663816a9>] kmem_cache_alloc_node_trace+0x15b/0x2a0 mm/slab.c:3597
    [<000000006fed3e16>] __do_kmalloc_node mm/slab.c:3619 [inline]
    [<000000006fed3e16>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3634
    [<00000000267c7acb>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:138
    [<000000006ff13732>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
    [<00000000acf790f1>] alloc_skb_fclone include/linux/skbuff.h:1103 [inline]
    [<00000000acf790f1>] tipc_buf_acquire+0x2f/0x80 net/tipc/msg.c:66
    [<00000000546f90b4>] tipc_msg_create+0x37/0xe0 net/tipc/msg.c:98
    [<000000002cc8f8a2>] tipc_group_create_event+0xb3/0x1b0 net/tipc/group.c:679
    [<00000000c307aff1>] tipc_group_proto_rcv+0x569/0x640 net/tipc/group.c:781
    [<000000000db0b42c>] tipc_sk_proto_rcv net/tipc/socket.c:1996 [inline]
    [<000000000db0b42c>] tipc_sk_filter_rcv+0x9ac/0xf20 net/tipc/socket.c:2163
    [<0000000056129fbb>] tipc_sk_enqueue net/tipc/socket.c:2255 [inline]
    [<0000000056129fbb>] tipc_sk_rcv+0x494/0x8a0 net/tipc/socket.c:2306
    [<000000005b1ed21a>] tipc_node_xmit+0x196/0x1f0 net/tipc/node.c:1442
    [<000000003b46f8ae>] tipc_node_xmit_skb net/tipc/node.c:1491 [inline]
    [<000000003b46f8ae>] tipc_node_distr_xmit+0x7d/0x120 net/tipc/node.c:1506
    [<000000001845322e>] tipc_group_delete+0xe6/0x130 net/tipc/group.c:224
    [<0000000009221955>] tipc_sk_leave+0x57/0xb0 net/tipc/socket.c:2925
    [<00000000b2d8de12>] tipc_release+0x7b/0x5e0 net/tipc/socket.c:584
    [<0000000071fc8426>] __sock_release+0x4b/0xe0 net/socket.c:601

BUG: memory leak
unreferenced object 0xffff8881294a9200 (size 512):
  comm "softirq", pid 0, jiffies 4294942351 (age 24.940s)
  hex dump (first 32 bytes):
    38 69 f9 21 81 88 ff ff 38 69 f9 21 81 88 ff ff  8i.!....8i.!....
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<000000006ab801f1>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000006ab801f1>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<000000006ab801f1>] slab_alloc_node mm/slab.c:3269 [inline]
    [<000000006ab801f1>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
    [<000000004728bf70>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
    [<00000000acf790f1>] alloc_skb_fclone include/linux/skbuff.h:1103 [inline]
    [<00000000acf790f1>] tipc_buf_acquire+0x2f/0x80 net/tipc/msg.c:66
    [<00000000546f90b4>] tipc_msg_create+0x37/0xe0 net/tipc/msg.c:98
    [<000000002cc8f8a2>] tipc_group_create_event+0xb3/0x1b0 net/tipc/group.c:679
    [<00000000c307aff1>] tipc_group_proto_rcv+0x569/0x640 net/tipc/group.c:781
    [<000000000db0b42c>] tipc_sk_proto_rcv net/tipc/socket.c:1996 [inline]
    [<000000000db0b42c>] tipc_sk_filter_rcv+0x9ac/0xf20 net/tipc/socket.c:2163
    [<0000000056129fbb>] tipc_sk_enqueue net/tipc/socket.c:2255 [inline]
    [<0000000056129fbb>] tipc_sk_rcv+0x494/0x8a0 net/tipc/socket.c:2306
    [<000000005b1ed21a>] tipc_node_xmit+0x196/0x1f0 net/tipc/node.c:1442
    [<000000003b46f8ae>] tipc_node_xmit_skb net/tipc/node.c:1491 [inline]
    [<000000003b46f8ae>] tipc_node_distr_xmit+0x7d/0x120 net/tipc/node.c:1506
    [<000000001845322e>] tipc_group_delete+0xe6/0x130 net/tipc/group.c:224
    [<0000000009221955>] tipc_sk_leave+0x57/0xb0 net/tipc/socket.c:2925
    [<00000000b2d8de12>] tipc_release+0x7b/0x5e0 net/tipc/socket.c:584
    [<0000000071fc8426>] __sock_release+0x4b/0xe0 net/socket.c:601
    [<00000000f9b64134>] sock_close+0x1b/0x30 net/socket.c:1273
    [<00000000ecf1a471>] __fput+0xed/0x300 fs/file_table.c:280

executing program
executing program
executing program

Crashes (15):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/06/17 06:25 upstream 963172d9c7e8 442206d7 .config console log report syz C ci-upstream-gce-leak
2019/06/16 00:32 upstream e01e060fe00d 442206d7 .config console log report syz C ci-upstream-gce-leak
2019/06/14 01:56 upstream c11fb13a117e a139f92f .config console log report syz C ci-upstream-gce-leak
2019/06/10 22:32 upstream d1fdb6d8f6a4 0159583c .config console log report syz C ci-upstream-gce-leak
2019/06/09 22:35 upstream d1fdb6d8f6a4 0159583c .config console log report syz C ci-upstream-gce-leak
2019/06/07 21:57 upstream 16d72dd4891f ce9107d0 .config console log report syz C ci-upstream-gce-leak
2019/06/04 23:26 upstream 788a024921c4 e41a20c5 .config console log report syz C ci-upstream-gce-leak
2019/06/04 03:19 upstream 788a024921c4 ce07a7ae .config console log report syz C ci-upstream-gce-leak
2019/05/30 17:56 upstream bec7550cca10 d9aaf3c2 .config console log report syz C ci-upstream-gce-leak
2019/05/27 18:29 upstream cd6c84d8f0cd 562efd79 .config console log report syz C ci-upstream-gce-leak
2019/05/27 04:07 upstream c5b440951a19 85c57315 .config console log report syz C ci-upstream-gce-leak
2019/05/26 16:53 upstream 35efb51eee22 85c57315 .config console log report syz C ci-upstream-gce-leak
2019/05/25 12:03 upstream c50bbf615f2f 85c57315 .config console log report syz C ci-upstream-gce-leak
2019/05/24 20:20 upstream c50bbf615f2f 0dadcd9d .config console log report syz C ci-upstream-gce-leak
2019/05/24 12:44 upstream 4dde821e4296 0dadcd9d .config console log report syz C ci-upstream-gce-leak
* Struck through repros no longer work on HEAD.