memory leak in sctp_packet

memory leak in sctp_packet_transmit
Status: upstream: reported C repro on 2020/07/22 20:32
Reported-by: syzbot+8bb053b5d63595ab47db@syzkaller.appspotmail.com
First crash: 180d, last: 2d13h

Patch testing requests:
Created	Duration	User	Patch	Repo	Result
2020/10/16 23:42	8m	anant.thazhemadam@gmail.com		upstream	report log

Sample crash report:

executing program
executing program
executing program
BUG: memory leak
unreferenced object 0xffff88810f6cd500 (size 232):
  comm "syz-executor323", pid 8481, jiffies 4294942887 (age 14.030s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 d0 1b 01 81 88 ff ff 40 a0 27 08 81 88 ff ff  ........@.'.....
  backtrace:
    [<00000000f4886dc4>] __alloc_skb+0x6d/0x280 net/core/skbuff.c:198
    [<0000000050aff726>] alloc_skb include/linux/skbuff.h:1099 [inline]
    [<0000000050aff726>] sctp_packet_transmit+0x117/0xcb0 net/sctp/output.c:565
    [<000000001246ebcb>] sctp_outq_flush_transports net/sctp/outqueue.c:1147 [inline]
    [<000000001246ebcb>] sctp_outq_flush+0x121/0xcc0 net/sctp/outqueue.c:1195
    [<000000006a2e9a6f>] sctp_cmd_interpreter net/sctp/sm_sideeffect.c:1770 [inline]
    [<000000006a2e9a6f>] sctp_side_effects net/sctp/sm_sideeffect.c:1185 [inline]
    [<000000006a2e9a6f>] sctp_do_sm+0x1cd3/0x2370 net/sctp/sm_sideeffect.c:1156
    [<0000000059725376>] sctp_assoc_bh_rcv+0x1e3/0x300 net/sctp/associola.c:1048
    [<000000009550011c>] sctp_inq_push+0x93/0xc0 net/sctp/inqueue.c:80
    [<000000008ce67cb7>] sctp_backlog_rcv+0xa2/0x4b0 net/sctp/input.c:344
    [<00000000b4651756>] sk_backlog_rcv include/net/sock.h:1016 [inline]
    [<00000000b4651756>] __release_sock+0xc1/0x140 net/core/sock.c:2542
    [<000000005f8e38ed>] release_sock+0x32/0xd0 net/core/sock.c:3066
    [<000000004be205f9>] sctp_wait_for_connect+0xd2/0x290 net/sctp/socket.c:9177
    [<000000005fd3b269>] sctp_sendmsg_to_asoc+0xd01/0xd20 net/sctp/socket.c:1867
    [<0000000062938b6d>] sctp_sendmsg+0x992/0x1030 net/sctp/socket.c:2013
    [<0000000052aa3621>] inet_sendmsg+0x45/0x70 net/ipv4/af_inet.c:817
    [<000000002e6e3cc2>] sock_sendmsg_nosec net/socket.c:652 [inline]
    [<000000002e6e3cc2>] sock_sendmsg+0x56/0x80 net/socket.c:672
    [<000000005d063042>] __sys_sendto+0x15c/0x200 net/socket.c:1975
    [<00000000ff0cff95>] __do_sys_sendto net/socket.c:1987 [inline]
    [<00000000ff0cff95>] __se_sys_sendto net/socket.c:1983 [inline]
    [<00000000ff0cff95>] __x64_sys_sendto+0x26/0x30 net/socket.c:1983

BUG: memory leak
unreferenced object 0xffff8881102a8400 (size 1024):
  comm "syz-executor323", pid 8481, jiffies 4294942887 (age 14.030s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000906781ee>] __kmalloc_reserve net/core/skbuff.c:142 [inline]
    [<00000000906781ee>] __alloc_skb+0xab/0x280 net/core/skbuff.c:210
    [<0000000050aff726>] alloc_skb include/linux/skbuff.h:1099 [inline]
    [<0000000050aff726>] sctp_packet_transmit+0x117/0xcb0 net/sctp/output.c:565
    [<000000001246ebcb>] sctp_outq_flush_transports net/sctp/outqueue.c:1147 [inline]
    [<000000001246ebcb>] sctp_outq_flush+0x121/0xcc0 net/sctp/outqueue.c:1195
    [<000000006a2e9a6f>] sctp_cmd_interpreter net/sctp/sm_sideeffect.c:1770 [inline]
    [<000000006a2e9a6f>] sctp_side_effects net/sctp/sm_sideeffect.c:1185 [inline]
    [<000000006a2e9a6f>] sctp_do_sm+0x1cd3/0x2370 net/sctp/sm_sideeffect.c:1156
    [<0000000059725376>] sctp_assoc_bh_rcv+0x1e3/0x300 net/sctp/associola.c:1048
    [<000000009550011c>] sctp_inq_push+0x93/0xc0 net/sctp/inqueue.c:80
    [<000000008ce67cb7>] sctp_backlog_rcv+0xa2/0x4b0 net/sctp/input.c:344
    [<00000000b4651756>] sk_backlog_rcv include/net/sock.h:1016 [inline]
    [<00000000b4651756>] __release_sock+0xc1/0x140 net/core/sock.c:2542
    [<000000005f8e38ed>] release_sock+0x32/0xd0 net/core/sock.c:3066
    [<000000004be205f9>] sctp_wait_for_connect+0xd2/0x290 net/sctp/socket.c:9177
    [<000000005fd3b269>] sctp_sendmsg_to_asoc+0xd01/0xd20 net/sctp/socket.c:1867
    [<0000000062938b6d>] sctp_sendmsg+0x992/0x1030 net/sctp/socket.c:2013
    [<0000000052aa3621>] inet_sendmsg+0x45/0x70 net/ipv4/af_inet.c:817
    [<000000002e6e3cc2>] sock_sendmsg_nosec net/socket.c:652 [inline]
    [<000000002e6e3cc2>] sock_sendmsg+0x56/0x80 net/socket.c:672
    [<000000005d063042>] __sys_sendto+0x15c/0x200 net/socket.c:1975
    [<00000000ff0cff95>] __do_sys_sendto net/socket.c:1987 [inline]
    [<00000000ff0cff95>] __se_sys_sendto net/socket.c:1983 [inline]
    [<00000000ff0cff95>] __x64_sys_sendto+0x26/0x30 net/socket.c:1983

BUG: memory leak
unreferenced object 0xffff88810f55e600 (size 232):
  comm "syz-executor323", pid 8482, jiffies 4294943494 (age 7.960s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 d0 1b 01 81 88 ff ff 40 a0 27 08 81 88 ff ff  ........@.'.....
  backtrace:
    [<00000000f4886dc4>] __alloc_skb+0x6d/0x280 net/core/skbuff.c:198
    [<0000000050aff726>] alloc_skb include/linux/skbuff.h:1099 [inline]
    [<0000000050aff726>] sctp_packet_transmit+0x117/0xcb0 net/sctp/output.c:565
    [<000000001246ebcb>] sctp_outq_flush_transports net/sctp/outqueue.c:1147 [inline]
    [<000000001246ebcb>] sctp_outq_flush+0x121/0xcc0 net/sctp/outqueue.c:1195
    [<000000006a2e9a6f>] sctp_cmd_interpreter net/sctp/sm_sideeffect.c:1770 [inline]
    [<000000006a2e9a6f>] sctp_side_effects net/sctp/sm_sideeffect.c:1185 [inline]
    [<000000006a2e9a6f>] sctp_do_sm+0x1cd3/0x2370 net/sctp/sm_sideeffect.c:1156
    [<0000000059725376>] sctp_assoc_bh_rcv+0x1e3/0x300 net/sctp/associola.c:1048
    [<000000009550011c>] sctp_inq_push+0x93/0xc0 net/sctp/inqueue.c:80
    [<000000008ce67cb7>] sctp_backlog_rcv+0xa2/0x4b0 net/sctp/input.c:344
    [<00000000b4651756>] sk_backlog_rcv include/net/sock.h:1016 [inline]
    [<00000000b4651756>] __release_sock+0xc1/0x140 net/core/sock.c:2542
    [<000000005f8e38ed>] release_sock+0x32/0xd0 net/core/sock.c:3066
    [<000000004be205f9>] sctp_wait_for_connect+0xd2/0x290 net/sctp/socket.c:9177
    [<000000005fd3b269>] sctp_sendmsg_to_asoc+0xd01/0xd20 net/sctp/socket.c:1867
    [<0000000062938b6d>] sctp_sendmsg+0x992/0x1030 net/sctp/socket.c:2013
    [<0000000052aa3621>] inet_sendmsg+0x45/0x70 net/ipv4/af_inet.c:817
    [<000000002e6e3cc2>] sock_sendmsg_nosec net/socket.c:652 [inline]
    [<000000002e6e3cc2>] sock_sendmsg+0x56/0x80 net/socket.c:672
    [<000000005d063042>] __sys_sendto+0x15c/0x200 net/socket.c:1975
    [<00000000ff0cff95>] __do_sys_sendto net/socket.c:1987 [inline]
    [<00000000ff0cff95>] __se_sys_sendto net/socket.c:1983 [inline]
    [<00000000ff0cff95>] __x64_sys_sendto+0x26/0x30 net/socket.c:1983

Crashes (2):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Maintainers
ci-upstream-gce-leak	2021/01/16 22:00	upstream	1d94330a	65a7a854	.config	log	report	syz	C		davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, linux-sctp@vger.kernel.org, marcelo.leitner@gmail.com, netdev@vger.kernel.org, nhorman@tuxdriver.com, vyasevich@gmail.com
ci-upstream-gce-leak	2020/07/22 17:57	upstream	4fa640dc	128cd85f	.config	log	report	syz	C		davem@davemloft.net, kuba@kernel.org, linux-kernel@vger.kernel.org, linux-sctp@vger.kernel.org, marcelo.leitner@gmail.com, netdev@vger.kernel.org, nhorman@tuxdriver.com, vyasevich@gmail.com