memory leak in rawv6

memory leak in rawv6_sendmsg
Status: upstream: reported C repro on 2019/06/06 04:42
Reported-by: syzbot+0210b383c62bb2a35e32@syzkaller.appspotmail.com
First crash: 857d, last: 827d
Patch testing requests:
Created	Duration	User	Patch	Repo	Result
2021/07/19 04:35	15m	phind.uet@gmail.com		upstream	OK
Sample crash report:
executing program
executing program
executing program
executing program
executing program
BUG: memory leak
unreferenced object 0xffff88812adb0b00 (size 224):
  comm "syz-executor670", pid 7039, jiffies 4294952716 (age 16.400s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000d8354771>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000d8354771>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<00000000d8354771>] slab_alloc_node mm/slab.c:3269 [inline]
    [<00000000d8354771>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
    [<000000006ac7d909>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
    [<000000003d32903c>] alloc_skb include/linux/skbuff.h:1054 [inline]
    [<000000003d32903c>] alloc_skb_with_frags+0x5f/0x250 net/core/skbuff.c:5328
    [<00000000fd05ea4d>] sock_alloc_send_pskb+0x269/0x2a0 net/core/sock.c:2222
    [<00000000e38a3650>] sock_alloc_send_skb+0x32/0x40 net/core/sock.c:2239
    [<00000000d728f82e>] rawv6_send_hdrinc net/ipv6/raw.c:640 [inline]
    [<00000000d728f82e>] rawv6_sendmsg+0xa40/0x12e0 net/ipv6/raw.c:942
    [<00000000d3e340c3>] inet_sendmsg+0x64/0x120 net/ipv4/af_inet.c:798
    [<000000001856ffdf>] sock_sendmsg_nosec net/socket.c:646 [inline]
    [<000000001856ffdf>] sock_sendmsg+0x54/0x70 net/socket.c:665
    [<00000000e2c64c19>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2286
    [<00000000eb9482ed>] __sys_sendmsg+0x80/0xf0 net/socket.c:2324
    [<00000000da1cea8b>] __do_sys_sendmsg net/socket.c:2333 [inline]
    [<00000000da1cea8b>] __se_sys_sendmsg net/socket.c:2331 [inline]
    [<00000000da1cea8b>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2331
    [<000000005e1ae1b5>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:301
    [<00000000077c111f>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888119c77a00 (size 512):
  comm "syz-executor670", pid 7039, jiffies 4294952716 (age 16.400s)
  hex dump (first 32 bytes):
    70 0f 00 00 00 00 00 00 69 63 65 73 2f 76 69 72  p.......ices/vir
    f4 00 11 00 00 2b 2c 25 e9 94 ef d1 84 98 d6 62  .....+,%.......b
  backtrace:
    [<000000009b5a8014>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000009b5a8014>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<000000009b5a8014>] slab_alloc_node mm/slab.c:3269 [inline]
    [<000000009b5a8014>] kmem_cache_alloc_node_trace+0x15b/0x2a0 mm/slab.c:3597
    [<0000000009a74757>] __do_kmalloc_node mm/slab.c:3619 [inline]
    [<0000000009a74757>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3634
    [<00000000ed7989c9>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:138
    [<00000000effcdfb1>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
    [<000000003d32903c>] alloc_skb include/linux/skbuff.h:1054 [inline]
    [<000000003d32903c>] alloc_skb_with_frags+0x5f/0x250 net/core/skbuff.c:5328
    [<00000000fd05ea4d>] sock_alloc_send_pskb+0x269/0x2a0 net/core/sock.c:2222
    [<00000000e38a3650>] sock_alloc_send_skb+0x32/0x40 net/core/sock.c:2239
    [<00000000d728f82e>] rawv6_send_hdrinc net/ipv6/raw.c:640 [inline]
    [<00000000d728f82e>] rawv6_sendmsg+0xa40/0x12e0 net/ipv6/raw.c:942
    [<00000000d3e340c3>] inet_sendmsg+0x64/0x120 net/ipv4/af_inet.c:798
    [<000000001856ffdf>] sock_sendmsg_nosec net/socket.c:646 [inline]
    [<000000001856ffdf>] sock_sendmsg+0x54/0x70 net/socket.c:665
    [<00000000e2c64c19>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2286
    [<00000000eb9482ed>] __sys_sendmsg+0x80/0xf0 net/socket.c:2324
    [<00000000da1cea8b>] __do_sys_sendmsg net/socket.c:2333 [inline]
    [<00000000da1cea8b>] __se_sys_sendmsg net/socket.c:2331 [inline]
    [<00000000da1cea8b>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2331
    [<000000005e1ae1b5>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:301
    [<00000000077c111f>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88812adb0b00 (size 224):
  comm "syz-executor670", pid 7039, jiffies 4294952716 (age 17.290s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000d8354771>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000d8354771>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<00000000d8354771>] slab_alloc_node mm/slab.c:3269 [inline]
    [<00000000d8354771>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
    [<000000006ac7d909>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
    [<000000003d32903c>] alloc_skb include/linux/skbuff.h:1054 [inline]
    [<000000003d32903c>] alloc_skb_with_frags+0x5f/0x250 net/core/skbuff.c:5328
    [<00000000fd05ea4d>] sock_alloc_send_pskb+0x269/0x2a0 net/core/sock.c:2222
    [<00000000e38a3650>] sock_alloc_send_skb+0x32/0x40 net/core/sock.c:2239
    [<00000000d728f82e>] rawv6_send_hdrinc net/ipv6/raw.c:640 [inline]
    [<00000000d728f82e>] rawv6_sendmsg+0xa40/0x12e0 net/ipv6/raw.c:942
    [<00000000d3e340c3>] inet_sendmsg+0x64/0x120 net/ipv4/af_inet.c:798
    [<000000001856ffdf>] sock_sendmsg_nosec net/socket.c:646 [inline]
    [<000000001856ffdf>] sock_sendmsg+0x54/0x70 net/socket.c:665
    [<00000000e2c64c19>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2286
    [<00000000eb9482ed>] __sys_sendmsg+0x80/0xf0 net/socket.c:2324
    [<00000000da1cea8b>] __do_sys_sendmsg net/socket.c:2333 [inline]
    [<00000000da1cea8b>] __se_sys_sendmsg net/socket.c:2331 [inline]
    [<00000000da1cea8b>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2331
    [<000000005e1ae1b5>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:301
    [<00000000077c111f>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888119c77a00 (size 512):
  comm "syz-executor670", pid 7039, jiffies 4294952716 (age 17.290s)
  hex dump (first 32 bytes):
    70 0f 00 00 00 00 00 00 69 63 65 73 2f 76 69 72  p.......ices/vir
    f4 00 11 00 00 2b 2c 25 e9 94 ef d1 84 98 d6 62  .....+,%.......b
  backtrace:
    [<000000009b5a8014>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000009b5a8014>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<000000009b5a8014>] slab_alloc_node mm/slab.c:3269 [inline]
    [<000000009b5a8014>] kmem_cache_alloc_node_trace+0x15b/0x2a0 mm/slab.c:3597
    [<0000000009a74757>] __do_kmalloc_node mm/slab.c:3619 [inline]
    [<0000000009a74757>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3634
    [<00000000ed7989c9>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:138
    [<00000000effcdfb1>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
    [<000000003d32903c>] alloc_skb include/linux/skbuff.h:1054 [inline]
    [<000000003d32903c>] alloc_skb_with_frags+0x5f/0x250 net/core/skbuff.c:5328
    [<00000000fd05ea4d>] sock_alloc_send_pskb+0x269/0x2a0 net/core/sock.c:2222
    [<00000000e38a3650>] sock_alloc_send_skb+0x32/0x40 net/core/sock.c:2239
    [<00000000d728f82e>] rawv6_send_hdrinc net/ipv6/raw.c:640 [inline]
    [<00000000d728f82e>] rawv6_sendmsg+0xa40/0x12e0 net/ipv6/raw.c:942
    [<00000000d3e340c3>] inet_sendmsg+0x64/0x120 net/ipv4/af_inet.c:798
    [<000000001856ffdf>] sock_sendmsg_nosec net/socket.c:646 [inline]
    [<000000001856ffdf>] sock_sendmsg+0x54/0x70 net/socket.c:665
    [<00000000e2c64c19>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2286
    [<00000000eb9482ed>] __sys_sendmsg+0x80/0xf0 net/socket.c:2324
    [<00000000da1cea8b>] __do_sys_sendmsg net/socket.c:2333 [inline]
    [<00000000da1cea8b>] __se_sys_sendmsg net/socket.c:2331 [inline]
    [<00000000da1cea8b>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2331
    [<000000005e1ae1b5>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:301
    [<00000000077c111f>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88812adb0b00 (size 224):
  comm "syz-executor670", pid 7039, jiffies 4294952716 (age 18.170s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000d8354771>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000d8354771>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<00000000d8354771>] slab_alloc_node mm/slab.c:3269 [inline]
    [<00000000d8354771>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
    [<000000006ac7d909>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
    [<000000003d32903c>] alloc_skb include/linux/skbuff.h:1054 [inline]
    [<000000003d32903c>] alloc_skb_with_frags+0x5f/0x250 net/core/skbuff.c:5328
    [<00000000fd05ea4d>] sock_alloc_send_pskb+0x269/0x2a0 net/core/sock.c:2222
    [<00000000e38a3650>] sock_alloc_send_skb+0x32/0x40 net/core/sock.c:2239
    [<00000000d728f82e>] rawv6_send_hdrinc net/ipv6/raw.c:640 [inline]
    [<00000000d728f82e>] rawv6_sendmsg+0xa40/0x12e0 net/ipv6/raw.c:942
    [<00000000d3e340c3>] inet_sendmsg+0x64/0x120 net/ipv4/af_inet.c:798
    [<000000001856ffdf>] sock_sendmsg_nosec net/socket.c:646 [inline]
    [<000000001856ffdf>] sock_sendmsg+0x54/0x70 net/socket.c:665
    [<00000000e2c64c19>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2286
    [<00000000eb9482ed>] __sys_sendmsg+0x80/0xf0 net/socket.c:2324
    [<00000000da1cea8b>] __do_sys_sendmsg net/socket.c:2333 [inline]
    [<00000000da1cea8b>] __se_sys_sendmsg net/socket.c:2331 [inline]
    [<00000000da1cea8b>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2331
    [<000000005e1ae1b5>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:301
    [<00000000077c111f>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888119c77a00 (size 512):
  comm "syz-executor670", pid 7039, jiffies 4294952716 (age 18.170s)
  hex dump (first 32 bytes):
    70 0f 00 00 00 00 00 00 69 63 65 73 2f 76 69 72  p.......ices/vir
    f4 00 11 00 00 2b 2c 25 e9 94 ef d1 84 98 d6 62  .....+,%.......b
  backtrace:
    [<000000009b5a8014>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000009b5a8014>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<000000009b5a8014>] slab_alloc_node mm/slab.c:3269 [inline]
    [<000000009b5a8014>] kmem_cache_alloc_node_trace+0x15b/0x2a0 mm/slab.c:3597
    [<0000000009a74757>] __do_kmalloc_node mm/slab.c:3619 [inline]
    [<0000000009a74757>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3634
    [<00000000ed7989c9>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:138
    [<00000000effcdfb1>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
    [<000000003d32903c>] alloc_skb include/linux/skbuff.h:1054 [inline]
    [<000000003d32903c>] alloc_skb_with_frags+0x5f/0x250 net/core/skbuff.c:5328
    [<00000000fd05ea4d>] sock_alloc_send_pskb+0x269/0x2a0 net/core/sock.c:2222
    [<00000000e38a3650>] sock_alloc_send_skb+0x32/0x40 net/core/sock.c:2239
    [<00000000d728f82e>] rawv6_send_hdrinc net/ipv6/raw.c:640 [inline]
    [<00000000d728f82e>] rawv6_sendmsg+0xa40/0x12e0 net/ipv6/raw.c:942
    [<00000000d3e340c3>] inet_sendmsg+0x64/0x120 net/ipv4/af_inet.c:798
    [<000000001856ffdf>] sock_sendmsg_nosec net/socket.c:646 [inline]
    [<000000001856ffdf>] sock_sendmsg+0x54/0x70 net/socket.c:665
    [<00000000e2c64c19>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2286
    [<00000000eb9482ed>] __sys_sendmsg+0x80/0xf0 net/socket.c:2324
    [<00000000da1cea8b>] __do_sys_sendmsg net/socket.c:2333 [inline]
    [<00000000da1cea8b>] __se_sys_sendmsg net/socket.c:2331 [inline]
    [<00000000da1cea8b>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2331
    [<000000005e1ae1b5>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:301
    [<00000000077c111f>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88812adb0b00 (size 224):
  comm "syz-executor670", pid 7039, jiffies 4294952716 (age 19.030s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000d8354771>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000d8354771>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<00000000d8354771>] slab_alloc_node mm/slab.c:3269 [inline]
    [<00000000d8354771>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
    [<000000006ac7d909>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
    [<000000003d32903c>] alloc_skb include/linux/skbuff.h:1054 [inline]
    [<000000003d32903c>] alloc_skb_with_frags+0x5f/0x250 net/core/skbuff.c:5328
    [<00000000fd05ea4d>] sock_alloc_send_pskb+0x269/0x2a0 net/core/sock.c:2222
    [<00000000e38a3650>] sock_alloc_send_skb+0x32/0x40 net/core/sock.c:2239
    [<00000000d728f82e>] rawv6_send_hdrinc net/ipv6/raw.c:640 [inline]
    [<00000000d728f82e>] rawv6_sendmsg+0xa40/0x12e0 net/ipv6/raw.c:942
    [<00000000d3e340c3>] inet_sendmsg+0x64/0x120 net/ipv4/af_inet.c:798
    [<000000001856ffdf>] sock_sendmsg_nosec net/socket.c:646 [inline]
    [<000000001856ffdf>] sock_sendmsg+0x54/0x70 net/socket.c:665
    [<00000000e2c64c19>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2286
    [<00000000eb9482ed>] __sys_sendmsg+0x80/0xf0 net/socket.c:2324
    [<00000000da1cea8b>] __do_sys_sendmsg net/socket.c:2333 [inline]
    [<00000000da1cea8b>] __se_sys_sendmsg net/socket.c:2331 [inline]
    [<00000000da1cea8b>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2331
    [<000000005e1ae1b5>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:301
    [<00000000077c111f>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888119c77a00 (size 512):
  comm "syz-executor670", pid 7039, jiffies 4294952716 (age 19.030s)
  hex dump (first 32 bytes):
    70 0f 00 00 00 00 00 00 69 63 65 73 2f 76 69 72  p.......ices/vir
    f4 00 11 00 00 2b 2c 25 e9 94 ef d1 84 98 d6 62  .....+,%.......b
  backtrace:
    [<000000009b5a8014>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000009b5a8014>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<000000009b5a8014>] slab_alloc_node mm/slab.c:3269 [inline]
    [<000000009b5a8014>] kmem_cache_alloc_node_trace+0x15b/0x2a0 mm/slab.c:3597
    [<0000000009a74757>] __do_kmalloc_node mm/slab.c:3619 [inline]
    [<0000000009a74757>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3634
    [<00000000ed7989c9>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:138
    [<00000000effcdfb1>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
    [<000000003d32903c>] alloc_skb include/linux/skbuff.h:1054 [inline]
    [<000000003d32903c>] alloc_skb_with_frags+0x5f/0x250 net/core/skbuff.c:5328
    [<00000000fd05ea4d>] sock_alloc_send_pskb+0x269/0x2a0 net/core/sock.c:2222
    [<00000000e38a3650>] sock_alloc_send_skb+0x32/0x40 net/core/sock.c:2239
    [<00000000d728f82e>] rawv6_send_hdrinc net/ipv6/raw.c:640 [inline]
    [<00000000d728f82e>] rawv6_sendmsg+0xa40/0x12e0 net/ipv6/raw.c:942
    [<00000000d3e340c3>] inet_sendmsg+0x64/0x120 net/ipv4/af_inet.c:798
    [<000000001856ffdf>] sock_sendmsg_nosec net/socket.c:646 [inline]
    [<000000001856ffdf>] sock_sendmsg+0x54/0x70 net/socket.c:665
    [<00000000e2c64c19>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2286
    [<00000000eb9482ed>] __sys_sendmsg+0x80/0xf0 net/socket.c:2324
    [<00000000da1cea8b>] __do_sys_sendmsg net/socket.c:2333 [inline]
    [<00000000da1cea8b>] __se_sys_sendmsg net/socket.c:2331 [inline]
    [<00000000da1cea8b>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2331
    [<000000005e1ae1b5>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:301
    [<00000000077c111f>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88812adb0b00 (size 224):
  comm "syz-executor670", pid 7039, jiffies 4294952716 (age 20.730s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000d8354771>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000d8354771>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<00000000d8354771>] slab_alloc_node mm/slab.c:3269 [inline]
    [<00000000d8354771>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
    [<000000006ac7d909>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
    [<000000003d32903c>] alloc_skb include/linux/skbuff.h:1054 [inline]
    [<000000003d32903c>] alloc_skb_with_frags+0x5f/0x250 net/core/skbuff.c:5328
    [<00000000fd05ea4d>] sock_alloc_send_pskb+0x269/0x2a0 net/core/sock.c:2222
    [<00000000e38a3650>] sock_alloc_send_skb+0x32/0x40 net/core/sock.c:2239
    [<00000000d728f82e>] rawv6_send_hdrinc net/ipv6/raw.c:640 [inline]
    [<00000000d728f82e>] rawv6_sendmsg+0xa40/0x12e0 net/ipv6/raw.c:942
    [<00000000d3e340c3>] inet_sendmsg+0x64/0x120 net/ipv4/af_inet.c:798
    [<000000001856ffdf>] sock_sendmsg_nosec net/socket.c:646 [inline]
    [<000000001856ffdf>] sock_sendmsg+0x54/0x70 net/socket.c:665
    [<00000000e2c64c19>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2286
    [<00000000eb9482ed>] __sys_sendmsg+0x80/0xf0 net/socket.c:2324
    [<00000000da1cea8b>] __do_sys_sendmsg net/socket.c:2333 [inline]
    [<00000000da1cea8b>] __se_sys_sendmsg net/socket.c:2331 [inline]
    [<00000000da1cea8b>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2331
    [<000000005e1ae1b5>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:301
    [<00000000077c111f>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888119c77a00 (size 512):
  comm "syz-executor670", pid 7039, jiffies 4294952716 (age 20.730s)
  hex dump (first 32 bytes):
    70 0f 00 00 00 00 00 00 69 63 65 73 2f 76 69 72  p.......ices/vir
    f4 00 11 00 00 2b 2c 25 e9 94 ef d1 84 98 d6 62  .....+,%.......b
  backtrace:
    [<000000009b5a8014>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000009b5a8014>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<000000009b5a8014>] slab_alloc_node mm/slab.c:3269 [inline]
    [<000000009b5a8014>] kmem_cache_alloc_node_trace+0x15b/0x2a0 mm/slab.c:3597
    [<0000000009a74757>] __do_kmalloc_node mm/slab.c:3619 [inline]
    [<0000000009a74757>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3634
    [<00000000ed7989c9>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:138
    [<00000000effcdfb1>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
    [<000000003d32903c>] alloc_skb include/linux/skbuff.h:1054 [inline]
    [<000000003d32903c>] alloc_skb_with_frags+0x5f/0x250 net/core/skbuff.c:5328
    [<00000000fd05ea4d>] sock_alloc_send_pskb+0x269/0x2a0 net/core/sock.c:2222
    [<00000000e38a3650>] sock_alloc_send_skb+0x32/0x40 net/core/sock.c:2239
    [<00000000d728f82e>] rawv6_send_hdrinc net/ipv6/raw.c:640 [inline]
    [<00000000d728f82e>] rawv6_sendmsg+0xa40/0x12e0 net/ipv6/raw.c:942
    [<00000000d3e340c3>] inet_sendmsg+0x64/0x120 net/ipv4/af_inet.c:798
    [<000000001856ffdf>] sock_sendmsg_nosec net/socket.c:646 [inline]
    [<000000001856ffdf>] sock_sendmsg+0x54/0x70 net/socket.c:665
    [<00000000e2c64c19>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2286
    [<00000000eb9482ed>] __sys_sendmsg+0x80/0xf0 net/socket.c:2324
    [<00000000da1cea8b>] __do_sys_sendmsg net/socket.c:2333 [inline]
    [<00000000da1cea8b>] __se_sys_sendmsg net/socket.c:2331 [inline]
    [<00000000da1cea8b>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2331
    [<000000005e1ae1b5>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:301
    [<00000000077c111f>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88812adb0b00 (size 224):
  comm "syz-executor670", pid 7039, jiffies 4294952716 (age 21.630s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000d8354771>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000d8354771>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<00000000d8354771>] slab_alloc_node mm/slab.c:3269 [inline]
    [<00000000d8354771>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
    [<000000006ac7d909>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
    [<000000003d32903c>] alloc_skb include/linux/skbuff.h:1054 [inline]
    [<000000003d32903c>] alloc_skb_with_frags+0x5f/0x250 net/core/skbuff.c:5328
    [<00000000fd05ea4d>] sock_alloc_send_pskb+0x269/0x2a0 net/core/sock.c:2222
    [<00000000e38a3650>] sock_alloc_send_skb+0x32/0x40 net/core/sock.c:2239
    [<00000000d728f82e>] rawv6_send_hdrinc net/ipv6/raw.c:640 [inline]
    [<00000000d728f82e>] rawv6_sendmsg+0xa40/0x12e0 net/ipv6/raw.c:942
    [<00000000d3e340c3>] inet_sendmsg+0x64/0x120 net/ipv4/af_inet.c:798
    [<000000001856ffdf>] sock_sendmsg_nosec net/socket.c:646 [inline]
    [<000000001856ffdf>] sock_sendmsg+0x54/0x70 net/socket.c:665
    [<00000000e2c64c19>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2286
    [<00000000eb9482ed>] __sys_sendmsg+0x80/0xf0 net/socket.c:2324
    [<00000000da1cea8b>] __do_sys_sendmsg net/socket.c:2333 [inline]
    [<00000000da1cea8b>] __se_sys_sendmsg net/socket.c:2331 [inline]
    [<00000000da1cea8b>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2331
    [<000000005e1ae1b5>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:301
    [<00000000077c111f>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888119c77a00 (size 512):
  comm "syz-executor670", pid 7039, jiffies 4294952716 (age 21.630s)
  hex dump (first 32 bytes):
    70 0f 00 00 00 00 00 00 69 63 65 73 2f 76 69 72  p.......ices/vir
    f4 00 11 00 00 2b 2c 25 e9 94 ef d1 84 98 d6 62  .....+,%.......b
  backtrace:
    [<000000009b5a8014>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000009b5a8014>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<000000009b5a8014>] slab_alloc_node mm/slab.c:3269 [inline]
    [<000000009b5a8014>] kmem_cache_alloc_node_trace+0x15b/0x2a0 mm/slab.c:3597
    [<0000000009a74757>] __do_kmalloc_node mm/slab.c:3619 [inline]
    [<0000000009a74757>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3634
    [<00000000ed7989c9>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:138
    [<00000000effcdfb1>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
    [<000000003d32903c>] alloc_skb include/linux/skbuff.h:1054 [inline]
    [<000000003d32903c>] alloc_skb_with_frags+0x5f/0x250 net/core/skbuff.c:5328
    [<00000000fd05ea4d>] sock_alloc_send_pskb+0x269/0x2a0 net/core/sock.c:2222
    [<00000000e38a3650>] sock_alloc_send_skb+0x32/0x40 net/core/sock.c:2239
    [<00000000d728f82e>] rawv6_send_hdrinc net/ipv6/raw.c:640 [inline]
    [<00000000d728f82e>] rawv6_sendmsg+0xa40/0x12e0 net/ipv6/raw.c:942
    [<00000000d3e340c3>] inet_sendmsg+0x64/0x120 net/ipv4/af_inet.c:798
    [<000000001856ffdf>] sock_sendmsg_nosec net/socket.c:646 [inline]
    [<000000001856ffdf>] sock_sendmsg+0x54/0x70 net/socket.c:665
    [<00000000e2c64c19>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2286
    [<00000000eb9482ed>] __sys_sendmsg+0x80/0xf0 net/socket.c:2324
    [<00000000da1cea8b>] __do_sys_sendmsg net/socket.c:2333 [inline]
    [<00000000da1cea8b>] __se_sys_sendmsg net/socket.c:2331 [inline]
    [<00000000da1cea8b>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2331
    [<000000005e1ae1b5>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:301
    [<00000000077c111f>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88812adb0b00 (size 224):
  comm "syz-executor670", pid 7039, jiffies 4294952716 (age 21.680s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000d8354771>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000d8354771>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<00000000d8354771>] slab_alloc_node mm/slab.c:3269 [inline]
    [<00000000d8354771>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
    [<000000006ac7d909>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
    [<000000003d32903c>] alloc_skb include/linux/skbuff.h:1054 [inline]
    [<000000003d32903c>] alloc_skb_with_frags+0x5f/0x250 net/core/skbuff.c:5328
    [<00000000fd05ea4d>] sock_alloc_send_pskb+0x269/0x2a0 net/core/sock.c:2222
    [<00000000e38a3650>] sock_alloc_send_skb+0x32/0x40 net/core/sock.c:2239
    [<00000000d728f82e>] rawv6_send_hdrinc net/ipv6/raw.c:640 [inline]
    [<00000000d728f82e>] rawv6_sendmsg+0xa40/0x12e0 net/ipv6/raw.c:942
    [<00000000d3e340c3>] inet_sendmsg+0x64/0x120 net/ipv4/af_inet.c:798
    [<000000001856ffdf>] sock_sendmsg_nosec net/socket.c:646 [inline]
    [<000000001856ffdf>] sock_sendmsg+0x54/0x70 net/socket.c:665
    [<00000000e2c64c19>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2286
    [<00000000eb9482ed>] __sys_sendmsg+0x80/0xf0 net/socket.c:2324
    [<00000000da1cea8b>] __do_sys_sendmsg net/socket.c:2333 [inline]
    [<00000000da1cea8b>] __se_sys_sendmsg net/socket.c:2331 [inline]
    [<00000000da1cea8b>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2331
    [<000000005e1ae1b5>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:301
    [<00000000077c111f>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888119c77a00 (size 512):
  comm "syz-executor670", pid 7039, jiffies 4294952716 (age 21.680s)
  hex dump (first 32 bytes):
    70 0f 00 00 00 00 00 00 69 63 65 73 2f 76 69 72  p.......ices/vir
    f4 00 11 00 00 2b 2c 25 e9 94 ef d1 84 98 d6 62  .....+,%.......b
  backtrace:
    [<000000009b5a8014>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000009b5a8014>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<000000009b5a8014>] slab_alloc_node mm/slab.c:3269 [inline]
    [<000000009b5a8014>] kmem_cache_alloc_node_trace+0x15b/0x2a0 mm/slab.c:3597
    [<0000000009a74757>] __do_kmalloc_node mm/slab.c:3619 [inline]
    [<0000000009a74757>] __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3634
    [<00000000ed7989c9>] __kmalloc_reserve.isra.0+0x40/0xb0 net/core/skbuff.c:138
    [<00000000effcdfb1>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
    [<000000003d32903c>] alloc_skb include/linux/skbuff.h:1054 [inline]
    [<000000003d32903c>] alloc_skb_with_frags+0x5f/0x250 net/core/skbuff.c:5328
    [<00000000fd05ea4d>] sock_alloc_send_pskb+0x269/0x2a0 net/core/sock.c:2222
    [<00000000e38a3650>] sock_alloc_send_skb+0x32/0x40 net/core/sock.c:2239
    [<00000000d728f82e>] rawv6_send_hdrinc net/ipv6/raw.c:640 [inline]
    [<00000000d728f82e>] rawv6_sendmsg+0xa40/0x12e0 net/ipv6/raw.c:942
    [<00000000d3e340c3>] inet_sendmsg+0x64/0x120 net/ipv4/af_inet.c:798
    [<000000001856ffdf>] sock_sendmsg_nosec net/socket.c:646 [inline]
    [<000000001856ffdf>] sock_sendmsg+0x54/0x70 net/socket.c:665
    [<00000000e2c64c19>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2286
    [<00000000eb9482ed>] __sys_sendmsg+0x80/0xf0 net/socket.c:2324
    [<00000000da1cea8b>] __do_sys_sendmsg net/socket.c:2333 [inline]
    [<00000000da1cea8b>] __se_sys_sendmsg net/socket.c:2331 [inline]
    [<00000000da1cea8b>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2331
    [<000000005e1ae1b5>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:301
    [<00000000077c111f>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

executing program
Crashes (8):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro
ci-upstream-gce-leak	2019/06/19 15:11	upstream	bed3c0d84e7e	34bf9440	.config	log	report	syz	C
ci-upstream-gce-leak	2019/06/10 09:19	upstream	d1fdb6d8f6a4	0159583c	.config	log	report	syz	C
ci-upstream-gce-leak	2019/06/08 08:33	upstream	79c3ba3206c7	cf9c3a50	.config	log	report	syz	C
ci-upstream-gce-leak	2019/06/04 16:16	upstream	788a024921c4	e41a20c5	.config	log	report	syz	C
ci-upstream-gce-leak	2019/05/30 10:41	upstream	bec7550cca10	d9aaf3c2	.config	log	report	syz	C
ci-upstream-gce-leak	2019/05/27 01:33	upstream	c5b440951a19	85c57315	.config	log	report	syz	C
ci-upstream-gce-leak	2019/05/25 12:35	upstream	c50bbf615f2f	85c57315	.config	log	report	syz	C
ci-upstream-gce-leak	2019/06/23 23:26	upstream	241e39004581	472f0082	.config	log	report	syz