syzbot


memory leak in sk_clone_lock

Status: closed as invalid on 2026/01/09 18:08
Subsystems: mptcp
[Documentation on labels]
First crash: 67d, last: 48d
Last patch testing requests (4)
Created Duration User Patch Repo Result
2026/01/09 16:54 28m kuniyu@google.com upstream OK log
2025/11/26 15:55 13m retest repro upstream report log
2025/11/26 15:55 14m retest repro upstream report log
2025/11/26 15:55 13m retest repro upstream report log

Sample crash report:
BUG: memory leak
unreferenced object 0xffff88810e891080 (size 2088):
  comm "softirq", pid 0, jiffies 4294942696
  hex dump (first 32 bytes):
    ac 14 14 aa ac 14 14 aa 00 00 00 00 96 a8 22 4e  .............."N
    0a 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00  ...@............
  backtrace (crc 342d2963):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4983 [inline]
    slab_alloc_node mm/slub.c:5288 [inline]
    kmem_cache_alloc_noprof+0x397/0x5a0 mm/slub.c:5295
    sk_prot_alloc+0x3e/0x1b0 net/core/sock.c:2233
    sk_clone_lock+0x2f/0x6b0 net/core/sock.c:2467
    mptcp_sk_clone_init+0x30/0x600 net/mptcp/protocol.c:3311
    subflow_syn_recv_sock+0x3d9/0x7c0 net/mptcp/subflow.c:880
    tcp_check_req+0x47d/0xed0 net/ipv4/tcp_minisocks.c:912
    tcp_v4_rcv+0xcce/0x1f50 net/ipv4/tcp_ipv4.c:2297
    ip_protocol_deliver_rcu+0x44/0x260 net/ipv4/ip_input.c:205
    ip_local_deliver_finish+0x115/0x210 net/ipv4/ip_input.c:239
    NF_HOOK include/linux/netfilter.h:318 [inline]
    NF_HOOK include/linux/netfilter.h:312 [inline]
    ip_local_deliver+0x9c/0x160 net/ipv4/ip_input.c:260
    dst_input include/net/dst.h:474 [inline]
    ip_rcv_finish net/ipv4/ip_input.c:453 [inline]
    NF_HOOK include/linux/netfilter.h:318 [inline]
    NF_HOOK include/linux/netfilter.h:312 [inline]
    ip_rcv+0x214/0x240 net/ipv4/ip_input.c:573
    __netif_receive_skb_one_core+0xd0/0x100 net/core/dev.c:6079
    __netif_receive_skb+0x1d/0x80 net/core/dev.c:6192
    process_backlog+0xad/0x1b0 net/core/dev.c:6544
    __napi_poll+0x46/0x3a0 net/core/dev.c:7594
    napi_poll net/core/dev.c:7657 [inline]
    net_rx_action+0x453/0x520 net/core/dev.c:7784

BUG: memory leak
unreferenced object 0xffff8881277669c0 (size 32):
  comm "softirq", pid 0, jiffies 4294942696
  hex dump (first 32 bytes):
    f8 f2 85 00 81 88 ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace (crc e7cc8a40):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4983 [inline]
    slab_alloc_node mm/slub.c:5288 [inline]
    __do_kmalloc_node mm/slub.c:5649 [inline]
    __kmalloc_noprof+0x3e3/0x6b0 mm/slub.c:5662
    kmalloc_noprof include/linux/slab.h:961 [inline]
    kzalloc_noprof include/linux/slab.h:1094 [inline]
    lsm_blob_alloc+0x4d/0x70 security/security.c:690
    lsm_sock_alloc security/security.c:4922 [inline]
    security_sk_alloc+0x30/0x270 security/security.c:4938
    sk_prot_alloc+0x8f/0x1b0 net/core/sock.c:2242
    sk_clone_lock+0x2f/0x6b0 net/core/sock.c:2467
    mptcp_sk_clone_init+0x30/0x600 net/mptcp/protocol.c:3311
    subflow_syn_recv_sock+0x3d9/0x7c0 net/mptcp/subflow.c:880
    tcp_check_req+0x47d/0xed0 net/ipv4/tcp_minisocks.c:912
    tcp_v4_rcv+0xcce/0x1f50 net/ipv4/tcp_ipv4.c:2297
    ip_protocol_deliver_rcu+0x44/0x260 net/ipv4/ip_input.c:205
    ip_local_deliver_finish+0x115/0x210 net/ipv4/ip_input.c:239
    NF_HOOK include/linux/netfilter.h:318 [inline]
    NF_HOOK include/linux/netfilter.h:312 [inline]
    ip_local_deliver+0x9c/0x160 net/ipv4/ip_input.c:260
    dst_input include/net/dst.h:474 [inline]
    ip_rcv_finish net/ipv4/ip_input.c:453 [inline]
    NF_HOOK include/linux/netfilter.h:318 [inline]
    NF_HOOK include/linux/netfilter.h:312 [inline]
    ip_rcv+0x214/0x240 net/ipv4/ip_input.c:573
    __netif_receive_skb_one_core+0xd0/0x100 net/core/dev.c:6079
    __netif_receive_skb+0x1d/0x80 net/core/dev.c:6192
    process_backlog+0xad/0x1b0 net/core/dev.c:6544

connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/11/12 06:58 upstream 24172e0d7990 4e1406b4 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in sk_clone_lock
2025/11/07 19:55 upstream 4a0c9b339199 4e1406b4 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in sk_clone_lock
2025/11/12 08:26 upstream 24172e0d7990 4e1406b4 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in sk_clone_lock
* Struck through repros no longer work on HEAD.