syzbot


memory leak in nr_loopback_queue

Status: upstream: reported C repro on 2019/05/29 20:18
Reported-by: syzbot+470d1a4a7b7a7c225881@syzkaller.appspotmail.com
First crash: 1130d, last: 834d
Patch testing requests:
Created Duration User Patch Repo Result
2021/07/15 07:57 16m phind.uet@gmail.com upstream OK

Sample crash report:
executing program
executing program
executing program
executing program
executing program
BUG: memory leak
unreferenced object 0xffff888116c16b00 (size 224):
  comm "syz-executor241", pid 7513, jiffies 4295078074 (age 50.960s)
  hex dump (first 32 bytes):
    d0 38 61 0c 81 88 ff ff d0 38 61 0c 81 88 ff ff  .8a......8a.....
    00 00 00 00 00 00 00 00 00 98 95 0b 81 88 ff ff  ................
  backtrace:
    [<00000000e2ee4d2c>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000e2ee4d2c>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<00000000e2ee4d2c>] slab_alloc_node mm/slab.c:3262 [inline]
    [<00000000e2ee4d2c>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
    [<0000000082f0e53e>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0 net/netrom/nr_loopback.c:34
    [<00000000e8738211>] nr_route_frame+0x2d1/0x340 net/netrom/nr_route.c:772
    [<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0 net/netrom/nr_out.c:209
    [<00000000aa3080e2>] nr_write_internal+0x133/0x2e0 net/netrom/nr_subr.c:205
    [<00000000d4e53049>] nr_establish_data_link+0x2d/0x60 net/netrom/nr_out.c:227
    [<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
    [<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
    [<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
    [<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
    [<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
    [<0000000068560e8c>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810de28200 (size 512):
  comm "syz-executor241", pid 7513, jiffies 4295078074 (age 50.960s)
  hex dump (first 32 bytes):
    bb bb bb 00 00 00 60 bb bb bb 01 00 00 61 10 01  ......`......a..
    9c 00 00 01 04 bb bb bb 00 00 00 60 bb bb bb 00  ...........`....
  backtrace:
    [<000000006183266a>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000006183266a>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<000000006183266a>] slab_alloc_node mm/slab.c:3262 [inline]
    [<000000006183266a>] kmem_cache_alloc_node_trace+0x161/0x2f0 mm/slab.c:3592
    [<00000000425795e2>] __do_kmalloc_node mm/slab.c:3614 [inline]
    [<00000000425795e2>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3629
    [<00000000e438b171>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:141
    [<000000005727e112>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
    [<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0 net/netrom/nr_loopback.c:34
    [<00000000e8738211>] nr_route_frame+0x2d1/0x340 net/netrom/nr_route.c:772
    [<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0 net/netrom/nr_out.c:209
    [<00000000aa3080e2>] nr_write_internal+0x133/0x2e0 net/netrom/nr_subr.c:205
    [<00000000d4e53049>] nr_establish_data_link+0x2d/0x60 net/netrom/nr_out.c:227
    [<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
    [<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
    [<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
    [<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
    [<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
    [<0000000068560e8c>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888116c16b00 (size 224):
  comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.030s)
  hex dump (first 32 bytes):
    d0 38 61 0c 81 88 ff ff d0 38 61 0c 81 88 ff ff  .8a......8a.....
    00 00 00 00 00 00 00 00 00 98 95 0b 81 88 ff ff  ................
  backtrace:
    [<00000000e2ee4d2c>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000e2ee4d2c>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<00000000e2ee4d2c>] slab_alloc_node mm/slab.c:3262 [inline]
    [<00000000e2ee4d2c>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
    [<0000000082f0e53e>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0 net/netrom/nr_loopback.c:34
    [<00000000e8738211>] nr_route_frame+0x2d1/0x340 net/netrom/nr_route.c:772
    [<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0 net/netrom/nr_out.c:209
    [<00000000aa3080e2>] nr_write_internal+0x133/0x2e0 net/netrom/nr_subr.c:205
    [<00000000d4e53049>] nr_establish_data_link+0x2d/0x60 net/netrom/nr_out.c:227
    [<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
    [<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
    [<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
    [<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
    [<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
    [<0000000068560e8c>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810de28200 (size 512):
  comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.030s)
  hex dump (first 32 bytes):
    bb bb bb 00 00 00 60 bb bb bb 01 00 00 61 10 01  ......`......a..
    9c 00 00 01 04 bb bb bb 00 00 00 60 bb bb bb 00  ...........`....
  backtrace:
    [<000000006183266a>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000006183266a>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<000000006183266a>] slab_alloc_node mm/slab.c:3262 [inline]
    [<000000006183266a>] kmem_cache_alloc_node_trace+0x161/0x2f0 mm/slab.c:3592
    [<00000000425795e2>] __do_kmalloc_node mm/slab.c:3614 [inline]
    [<00000000425795e2>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3629
    [<00000000e438b171>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:141
    [<000000005727e112>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
    [<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0 net/netrom/nr_loopback.c:34
    [<00000000e8738211>] nr_route_frame+0x2d1/0x340 net/netrom/nr_route.c:772
    [<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0 net/netrom/nr_out.c:209
    [<00000000aa3080e2>] nr_write_internal+0x133/0x2e0 net/netrom/nr_subr.c:205
    [<00000000d4e53049>] nr_establish_data_link+0x2d/0x60 net/netrom/nr_out.c:227
    [<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
    [<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
    [<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
    [<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
    [<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
    [<0000000068560e8c>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888116c16b00 (size 224):
  comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.100s)
  hex dump (first 32 bytes):
    d0 38 61 0c 81 88 ff ff d0 38 61 0c 81 88 ff ff  .8a......8a.....
    00 00 00 00 00 00 00 00 00 98 95 0b 81 88 ff ff  ................
  backtrace:
    [<00000000e2ee4d2c>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000e2ee4d2c>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<00000000e2ee4d2c>] slab_alloc_node mm/slab.c:3262 [inline]
    [<00000000e2ee4d2c>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
    [<0000000082f0e53e>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0 net/netrom/nr_loopback.c:34
    [<00000000e8738211>] nr_route_frame+0x2d1/0x340 net/netrom/nr_route.c:772
    [<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0 net/netrom/nr_out.c:209
    [<00000000aa3080e2>] nr_write_internal+0x133/0x2e0 net/netrom/nr_subr.c:205
    [<00000000d4e53049>] nr_establish_data_link+0x2d/0x60 net/netrom/nr_out.c:227
    [<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
    [<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
    [<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
    [<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
    [<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
    [<0000000068560e8c>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810de28200 (size 512):
  comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.100s)
  hex dump (first 32 bytes):
    bb bb bb 00 00 00 60 bb bb bb 01 00 00 61 10 01  ......`......a..
    9c 00 00 01 04 bb bb bb 00 00 00 60 bb bb bb 00  ...........`....
  backtrace:
    [<000000006183266a>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000006183266a>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<000000006183266a>] slab_alloc_node mm/slab.c:3262 [inline]
    [<000000006183266a>] kmem_cache_alloc_node_trace+0x161/0x2f0 mm/slab.c:3592
    [<00000000425795e2>] __do_kmalloc_node mm/slab.c:3614 [inline]
    [<00000000425795e2>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3629
    [<00000000e438b171>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:141
    [<000000005727e112>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
    [<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0 net/netrom/nr_loopback.c:34
    [<00000000e8738211>] nr_route_frame+0x2d1/0x340 net/netrom/nr_route.c:772
    [<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0 net/netrom/nr_out.c:209
    [<00000000aa3080e2>] nr_write_internal+0x133/0x2e0 net/netrom/nr_subr.c:205
    [<00000000d4e53049>] nr_establish_data_link+0x2d/0x60 net/netrom/nr_out.c:227
    [<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
    [<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
    [<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
    [<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
    [<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
    [<0000000068560e8c>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888116c16b00 (size 224):
  comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.160s)
  hex dump (first 32 bytes):
    d0 38 61 0c 81 88 ff ff d0 38 61 0c 81 88 ff ff  .8a......8a.....
    00 00 00 00 00 00 00 00 00 98 95 0b 81 88 ff ff  ................
  backtrace:
    [<00000000e2ee4d2c>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000e2ee4d2c>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<00000000e2ee4d2c>] slab_alloc_node mm/slab.c:3262 [inline]
    [<00000000e2ee4d2c>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
    [<0000000082f0e53e>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0 net/netrom/nr_loopback.c:34
    [<00000000e8738211>] nr_route_frame+0x2d1/0x340 net/netrom/nr_route.c:772
    [<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0 net/netrom/nr_out.c:209
    [<00000000aa3080e2>] nr_write_internal+0x133/0x2e0 net/netrom/nr_subr.c:205
    [<00000000d4e53049>] nr_establish_data_link+0x2d/0x60 net/netrom/nr_out.c:227
    [<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
    [<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
    [<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
    [<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
    [<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
    [<0000000068560e8c>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810de28200 (size 512):
  comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.160s)
  hex dump (first 32 bytes):
    bb bb bb 00 00 00 60 bb bb bb 01 00 00 61 10 01  ......`......a..
    9c 00 00 01 04 bb bb bb 00 00 00 60 bb bb bb 00  ...........`....
  backtrace:
    [<000000006183266a>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000006183266a>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<000000006183266a>] slab_alloc_node mm/slab.c:3262 [inline]
    [<000000006183266a>] kmem_cache_alloc_node_trace+0x161/0x2f0 mm/slab.c:3592
    [<00000000425795e2>] __do_kmalloc_node mm/slab.c:3614 [inline]
    [<00000000425795e2>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3629
    [<00000000e438b171>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:141
    [<000000005727e112>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
    [<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0 net/netrom/nr_loopback.c:34
    [<00000000e8738211>] nr_route_frame+0x2d1/0x340 net/netrom/nr_route.c:772
    [<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0 net/netrom/nr_out.c:209
    [<00000000aa3080e2>] nr_write_internal+0x133/0x2e0 net/netrom/nr_subr.c:205
    [<00000000d4e53049>] nr_establish_data_link+0x2d/0x60 net/netrom/nr_out.c:227
    [<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
    [<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
    [<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
    [<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
    [<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
    [<0000000068560e8c>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888116c16b00 (size 224):
  comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.240s)
  hex dump (first 32 bytes):
    d0 38 61 0c 81 88 ff ff d0 38 61 0c 81 88 ff ff  .8a......8a.....
    00 00 00 00 00 00 00 00 00 98 95 0b 81 88 ff ff  ................
  backtrace:
    [<00000000e2ee4d2c>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000e2ee4d2c>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<00000000e2ee4d2c>] slab_alloc_node mm/slab.c:3262 [inline]
    [<00000000e2ee4d2c>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
    [<0000000082f0e53e>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0 net/netrom/nr_loopback.c:34
    [<00000000e8738211>] nr_route_frame+0x2d1/0x340 net/netrom/nr_route.c:772
    [<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0 net/netrom/nr_out.c:209
    [<00000000aa3080e2>] nr_write_internal+0x133/0x2e0 net/netrom/nr_subr.c:205
    [<00000000d4e53049>] nr_establish_data_link+0x2d/0x60 net/netrom/nr_out.c:227
    [<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
    [<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
    [<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
    [<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
    [<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
    [<0000000068560e8c>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810de28200 (size 512):
  comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.240s)
  hex dump (first 32 bytes):
    bb bb bb 00 00 00 60 bb bb bb 01 00 00 61 10 01  ......`......a..
    9c 00 00 01 04 bb bb bb 00 00 00 60 bb bb bb 00  ...........`....
  backtrace:
    [<000000006183266a>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000006183266a>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<000000006183266a>] slab_alloc_node mm/slab.c:3262 [inline]
    [<000000006183266a>] kmem_cache_alloc_node_trace+0x161/0x2f0 mm/slab.c:3592
    [<00000000425795e2>] __do_kmalloc_node mm/slab.c:3614 [inline]
    [<00000000425795e2>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3629
    [<00000000e438b171>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:141
    [<000000005727e112>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
    [<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0 net/netrom/nr_loopback.c:34
    [<00000000e8738211>] nr_route_frame+0x2d1/0x340 net/netrom/nr_route.c:772
    [<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0 net/netrom/nr_out.c:209
    [<00000000aa3080e2>] nr_write_internal+0x133/0x2e0 net/netrom/nr_subr.c:205
    [<00000000d4e53049>] nr_establish_data_link+0x2d/0x60 net/netrom/nr_out.c:227
    [<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
    [<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
    [<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
    [<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
    [<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
    [<0000000068560e8c>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888116c16b00 (size 224):
  comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.300s)
  hex dump (first 32 bytes):
    d0 38 61 0c 81 88 ff ff d0 38 61 0c 81 88 ff ff  .8a......8a.....
    00 00 00 00 00 00 00 00 00 98 95 0b 81 88 ff ff  ................
  backtrace:
    [<00000000e2ee4d2c>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000e2ee4d2c>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<00000000e2ee4d2c>] slab_alloc_node mm/slab.c:3262 [inline]
    [<00000000e2ee4d2c>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
    [<0000000082f0e53e>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0 net/netrom/nr_loopback.c:34
    [<00000000e8738211>] nr_route_frame+0x2d1/0x340 net/netrom/nr_route.c:772
    [<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0 net/netrom/nr_out.c:209
    [<00000000aa3080e2>] nr_write_internal+0x133/0x2e0 net/netrom/nr_subr.c:205
    [<00000000d4e53049>] nr_establish_data_link+0x2d/0x60 net/netrom/nr_out.c:227
    [<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
    [<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
    [<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
    [<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
    [<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
    [<0000000068560e8c>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810de28200 (size 512):
  comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.300s)
  hex dump (first 32 bytes):
    bb bb bb 00 00 00 60 bb bb bb 01 00 00 61 10 01  ......`......a..
    9c 00 00 01 04 bb bb bb 00 00 00 60 bb bb bb 00  ...........`....
  backtrace:
    [<000000006183266a>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000006183266a>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<000000006183266a>] slab_alloc_node mm/slab.c:3262 [inline]
    [<000000006183266a>] kmem_cache_alloc_node_trace+0x161/0x2f0 mm/slab.c:3592
    [<00000000425795e2>] __do_kmalloc_node mm/slab.c:3614 [inline]
    [<00000000425795e2>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3629
    [<00000000e438b171>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:141
    [<000000005727e112>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
    [<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0 net/netrom/nr_loopback.c:34
    [<00000000e8738211>] nr_route_frame+0x2d1/0x340 net/netrom/nr_route.c:772
    [<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0 net/netrom/nr_out.c:209
    [<00000000aa3080e2>] nr_write_internal+0x133/0x2e0 net/netrom/nr_subr.c:205
    [<00000000d4e53049>] nr_establish_data_link+0x2d/0x60 net/netrom/nr_out.c:227
    [<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
    [<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
    [<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
    [<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
    [<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
    [<0000000068560e8c>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888116c16b00 (size 224):
  comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.370s)
  hex dump (first 32 bytes):
    d0 38 61 0c 81 88 ff ff d0 38 61 0c 81 88 ff ff  .8a......8a.....
    00 00 00 00 00 00 00 00 00 98 95 0b 81 88 ff ff  ................
  backtrace:
    [<00000000e2ee4d2c>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000e2ee4d2c>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<00000000e2ee4d2c>] slab_alloc_node mm/slab.c:3262 [inline]
    [<00000000e2ee4d2c>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
    [<0000000082f0e53e>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0 net/netrom/nr_loopback.c:34
    [<00000000e8738211>] nr_route_frame+0x2d1/0x340 net/netrom/nr_route.c:772
    [<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0 net/netrom/nr_out.c:209
    [<00000000aa3080e2>] nr_write_internal+0x133/0x2e0 net/netrom/nr_subr.c:205
    [<00000000d4e53049>] nr_establish_data_link+0x2d/0x60 net/netrom/nr_out.c:227
    [<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
    [<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
    [<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
    [<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
    [<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
    [<0000000068560e8c>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810de28200 (size 512):
  comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.370s)
  hex dump (first 32 bytes):
    bb bb bb 00 00 00 60 bb bb bb 01 00 00 61 10 01  ......`......a..
    9c 00 00 01 04 bb bb bb 00 00 00 60 bb bb bb 00  ...........`....
  backtrace:
    [<000000006183266a>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000006183266a>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<000000006183266a>] slab_alloc_node mm/slab.c:3262 [inline]
    [<000000006183266a>] kmem_cache_alloc_node_trace+0x161/0x2f0 mm/slab.c:3592
    [<00000000425795e2>] __do_kmalloc_node mm/slab.c:3614 [inline]
    [<00000000425795e2>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3629
    [<00000000e438b171>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:141
    [<000000005727e112>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
    [<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0 net/netrom/nr_loopback.c:34
    [<00000000e8738211>] nr_route_frame+0x2d1/0x340 net/netrom/nr_route.c:772
    [<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0 net/netrom/nr_out.c:209
    [<00000000aa3080e2>] nr_write_internal+0x133/0x2e0 net/netrom/nr_subr.c:205
    [<00000000d4e53049>] nr_establish_data_link+0x2d/0x60 net/netrom/nr_out.c:227
    [<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
    [<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
    [<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
    [<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
    [<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
    [<0000000068560e8c>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888116c16b00 (size 224):
  comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.430s)
  hex dump (first 32 bytes):
    d0 38 61 0c 81 88 ff ff d0 38 61 0c 81 88 ff ff  .8a......8a.....
    00 00 00 00 00 00 00 00 00 98 95 0b 81 88 ff ff  ................
  backtrace:
    [<00000000e2ee4d2c>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000e2ee4d2c>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<00000000e2ee4d2c>] slab_alloc_node mm/slab.c:3262 [inline]
    [<00000000e2ee4d2c>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
    [<0000000082f0e53e>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
    [<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0 net/netrom/nr_loopback.c:34
    [<00000000e8738211>] nr_route_frame+0x2d1/0x340 net/netrom/nr_route.c:772
    [<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0 net/netrom/nr_out.c:209
    [<00000000aa3080e2>] nr_write_internal+0x133/0x2e0 net/netrom/nr_subr.c:205
    [<00000000d4e53049>] nr_establish_data_link+0x2d/0x60 net/netrom/nr_out.c:227
    [<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
    [<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
    [<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
    [<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
    [<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
    [<0000000068560e8c>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88810de28200 (size 512):
  comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.430s)
  hex dump (first 32 bytes):
    bb bb bb 00 00 00 60 bb bb bb 01 00 00 61 10 01  ......`......a..
    9c 00 00 01 04 bb bb bb 00 00 00 60 bb bb bb 00  ...........`....
  backtrace:
    [<000000006183266a>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000006183266a>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<000000006183266a>] slab_alloc_node mm/slab.c:3262 [inline]
    [<000000006183266a>] kmem_cache_alloc_node_trace+0x161/0x2f0 mm/slab.c:3592
    [<00000000425795e2>] __do_kmalloc_node mm/slab.c:3614 [inline]
    [<00000000425795e2>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3629
    [<00000000e438b171>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:141
    [<000000005727e112>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
    [<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
    [<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0 net/netrom/nr_loopback.c:34
    [<00000000e8738211>] nr_route_frame+0x2d1/0x340 net/netrom/nr_route.c:772
    [<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0 net/netrom/nr_out.c:209
    [<00000000aa3080e2>] nr_write_internal+0x133/0x2e0 net/netrom/nr_subr.c:205
    [<00000000d4e53049>] nr_establish_data_link+0x2d/0x60 net/netrom/nr_out.c:227
    [<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
    [<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
    [<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
    [<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
    [<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
    [<0000000068560e8c>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9


Crashes (3):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-gce-leak 2019/08/15 21:52 upstream 41de59634046 0d298d6b .config log report syz C
ci-upstream-gce-leak 2020/03/21 02:34 upstream 6c90b86a745a 2c31c529 .config log report syz
ci-upstream-gce-leak 2019/05/29 18:03 upstream 9fb67d643f6f 5457ef34 .config log report syz