bisecting cause commit starting from 3eb514866f20c5eb74637279774b6d73b855480a building syzkaller on 0d10349cf0b4a9f98490378709bd9a83bd0042d6 testing commit 3eb514866f20c5eb74637279774b6d73b855480a with gcc (GCC) 8.1.0 run #0: crashed: memory leak in llc_ui_sendmsg run #1: crashed: memory leak in llc_ui_sendmsg run #2: crashed: memory leak in llc_ui_sendmsg run #3: crashed: memory leak in llc_ui_sendmsg run #4: crashed: memory leak in llc_ui_create run #5: crashed: memory leak in llc_ui_sendmsg run #6: crashed: memory leak in llc_ui_create run #7: crashed: memory leak in llc_ui_create run #8: crashed: memory leak in llc_ui_sendmsg run #9: crashed: memory leak in llc_ui_create testing release v5.2 testing commit 0ecfebd2b52404ae0c54a878c872bb93363ada36 with gcc (GCC) 8.1.0 run #0: crashed: memory leak in llc_ui_create run #1: crashed: memory leak in llc_ui_create run #2: crashed: memory leak in llc_ui_create run #3: crashed: memory leak in llc_ui_create run #4: crashed: memory leak in llc_ui_sendmsg run #5: crashed: memory leak in llc_ui_sendmsg run #6: crashed: memory leak in llc_ui_create run #7: crashed: memory leak in llc_ui_sendmsg run #8: crashed: memory leak in llc_ui_sendmsg run #9: crashed: memory leak in llc_ui_create testing release v5.1 testing commit e93c9c99a629c61837d5a7fc2120cd2b6c70dbdd with gcc (GCC) 8.1.0 run #0: crashed: memory leak in llc_ui_sendmsg run #1: crashed: memory leak in llc_ui_create run #2: crashed: memory leak in llc_ui_create run #3: crashed: memory leak in llc_ui_sendmsg run #4: crashed: memory leak in llc_ui_create run #5: crashed: memory leak in llc_ui_sendmsg run #6: crashed: memory leak in llc_ui_sendmsg run #7: crashed: memory leak in llc_ui_sendmsg run #8: crashed: memory leak in llc_ui_create run #9: crashed: memory leak in batadv_tvlv_handler_register testing release v5.0 testing commit 1c163f4c7b3f621efff9b28a47abb36f7378d783 with gcc (GCC) 8.1.0 run #0: crashed: memory leak in llc_ui_sendmsg run #1: crashed: memory leak in llc_ui_create run #2: crashed: memory leak in llc_ui_create run #3: crashed: memory leak in llc_ui_sendmsg run #4: crashed: memory leak in llc_ui_sendmsg run #5: crashed: memory leak in llc_ui_sendmsg run #6: crashed: memory leak in llc_ui_sendmsg run #7: crashed: memory leak in llc_ui_create run #8: crashed: memory leak in llc_ui_sendmsg run #9: crashed: memory leak in llc_ui_create testing release v4.20 testing commit 8fe28cb58bcb235034b64cbbb7550a8a43fd88be with gcc (GCC) 8.1.0 run #0: crashed: memory leak in llc_ui_sendmsg run #1: crashed: memory leak in llc_ui_sendmsg run #2: crashed: memory leak in llc_ui_sendmsg run #3: crashed: memory leak in __neigh_create run #4: crashed: memory leak in llc_ui_sendmsg run #5: crashed: memory leak in llc_ui_create run #6: crashed: memory leak in llc_ui_sendmsg run #7: crashed: memory leak in __neigh_create run #8: crashed: memory leak in llc_ui_sendmsg run #9: crashed: memory leak in batadv_tvlv_handler_register testing release v4.19 testing commit 84df9525b0c27f3ebc2ebb1864fa62a97fdedb7d with gcc (GCC) 8.1.0 run #0: crashed: memory leak in llc_ui_create run #1: crashed: memory leak in llc_ui_sendmsg run #2: crashed: memory leak in __neigh_create run #3: crashed: memory leak in llc_ui_sendmsg run #4: crashed: memory leak in __neigh_create run #5: crashed: memory leak in llc_ui_sendmsg run #6: crashed: memory leak in llc_ui_create run #7: crashed: memory leak in llc_ui_create run #8: crashed: memory leak in __neigh_create run #9: crashed: memory leak in llc_ui_sendmsg testing release v4.18 testing commit 94710cac0ef4ee177a63b5227664b38c95bbf703 with gcc (GCC) 8.1.0 all runs: crashed: memory leak in corrupted testing release v4.17 testing commit 29dcea88779c856c7dc92040a0c01233263101d4 with gcc (GCC) 8.1.0 all runs: crashed: memory leak in corrupted testing release v4.16 testing commit 0adb32858b0bddf4ada5f364a84ed60b196dbcda with gcc (GCC) 8.1.0 run #0: crashed: memory leak in llc_ui_create run #1: crashed: memory leak in llc_ui_sendmsg run #2: crashed: memory leak in __neigh_create run #3: crashed: memory leak in __neigh_create run #4: crashed: memory leak in llc_ui_sendmsg run #5: crashed: memory leak in __neigh_create run #6: crashed: memory leak in llc_ui_sendmsg run #7: crashed: memory leak in llc_ui_sendmsg run #8: crashed: memory leak in __neigh_create run #9: crashed: memory leak in __neigh_create testing release v4.15 testing commit d8a5b80568a9cb66810e75b182018e9edb68e8ff with gcc (GCC) 8.1.0 run #0: crashed: memory leak in llc_ui_create run #1: crashed: memory leak in llc_ui_create run #2: crashed: memory leak in llc_ui_sendmsg run #3: crashed: memory leak in llc_ui_sendmsg run #4: crashed: memory leak in __neigh_create run #5: crashed: memory leak in llc_ui_sendmsg run #6: crashed: memory leak in __neigh_create run #7: crashed: memory leak in llc_ui_sendmsg run #8: crashed: memory leak in __neigh_create run #9: crashed: memory leak in llc_ui_sendmsg testing release v4.14 testing commit bebc6082da0a9f5d47a1ea2edc099bf671058bd4 with gcc (GCC) 8.1.0 run #0: crashed: memory leak in llc_ui_create run #1: crashed: memory leak in llc_ui_sendmsg run #2: crashed: memory leak in llc_ui_sendmsg run #3: crashed: memory leak in llc_ui_sendmsg run #4: crashed: memory leak in llc_ui_create run #5: crashed: memory leak in llc_ui_sendmsg run #6: crashed: memory leak in llc_ui_sendmsg run #7: crashed: memory leak in llc_ui_sendmsg run #8: crashed: memory leak in llc_ui_sendmsg run #9: crashed: memory leak in llc_ui_sendmsg testing release v4.13 testing commit 569dbb88e80deb68974ef6fdd6a13edb9d686261 with gcc (GCC) 8.1.0 run #0: basic kernel testing failed: WARNING: kernel stack regs has bad 'bp' value run #1: basic kernel testing failed: WARNING: kernel stack regs has bad 'bp' value run #2: basic kernel testing failed: WARNING: kernel stack regs has bad 'bp' value run #3: basic kernel testing failed: WARNING: kernel stack regs has bad 'bp' value run #4: crashed: memory leak in llc_ui_sendmsg run #5: crashed: WARNING: kernel stack regs has bad 'bp' value run #6: crashed: memory leak in llc_ui_create run #7: crashed: memory leak in llc_ui_sendmsg run #8: crashed: memory leak in llc_ui_create run #9: crashed: memory leak in llc_ui_create testing release v4.12 testing commit 6f7da290413ba713f0cdd9ff1a2a9bb129ef4f6c with gcc (GCC) 8.1.0 run #0: basic kernel testing failed: WARNING: kernel stack regs has bad 'bp' value run #1: basic kernel testing failed: WARNING: kernel stack regs has bad 'bp' value run #2: basic kernel testing failed: WARNING: kernel stack regs has bad 'bp' value run #3: crashed: WARNING: kernel stack regs has bad 'bp' value run #4: crashed: memory leak in llc_ui_create run #5: basic kernel testing failed: WARNING: kernel stack regs has bad 'bp' value run #6: crashed: WARNING: kernel stack regs has bad 'bp' value run #7: crashed: WARNING: kernel stack regs has bad 'bp' value run #8: crashed: memory leak in llc_ui_create run #9: crashed: memory leak in copy_process testing release v4.11 testing commit a351e9b9fc24e982ec2f0e76379a49826036da12 with gcc (GCC) 7.3.0 run #0: crashed: memory leak in llc_ui_sendmsg run #1: crashed: memory leak in llc_ui_sendmsg run #2: crashed: memory leak in llc_ui_sendmsg run #3: crashed: memory leak in llc_ui_sendmsg run #4: crashed: memory leak in llc_ui_sendmsg run #5: crashed: memory leak in llc_ui_create run #6: crashed: memory leak in llc_ui_create run #7: crashed: memory leak in llc_ui_sendmsg run #8: crashed: memory leak in copy_process run #9: crashed: memory leak in copy_process testing release v4.10 testing commit c470abd4fde40ea6a0846a2beab642a578c0b8cd with gcc (GCC) 5.5.0 run #0: crashed: memory leak in llc_ui_create run #1: crashed: memory leak in llc_ui_create run #2: crashed: memory leak in llc_ui_create run #3: crashed: memory leak in llc_ui_sendmsg run #4: crashed: memory leak in llc_ui_sendmsg run #5: crashed: memory leak in llc_ui_create run #6: crashed: memory leak in llc_ui_create run #7: crashed: memory leak in llc_ui_sendmsg run #8: crashed: memory leak in llc_ui_sendmsg run #9: crashed: memory leak in llc_ui_sendmsg testing release v4.9 testing commit 69973b830859bc6529a7a0468ba0d80ee5117826 with gcc (GCC) 5.5.0 run #0: crashed: memory leak in llc_ui_sendmsg run #1: crashed: memory leak in llc_ui_sendmsg run #2: crashed: memory leak in llc_ui_create run #3: crashed: memory leak in llc_ui_sendmsg run #4: crashed: memory leak in copy_process run #5: crashed: memory leak in llc_ui_create run #6: crashed: memory leak in llc_ui_create run #7: crashed: memory leak in llc_ui_create run #8: crashed: memory leak in copy_process run #9: crashed: memory leak in llc_ui_sendmsg testing release v4.8 testing commit c8d2bc9bc39ebea8437fd974fdbc21847bb897a3 with gcc (GCC) 5.5.0 run #0: crashed: memory leak in llc_ui_sendmsg run #1: crashed: memory leak in llc_ui_sendmsg run #2: crashed: memory leak in llc_ui_create run #3: crashed: memory leak in llc_ui_sendmsg run #4: crashed: memory leak in llc_ui_sendmsg run #5: crashed: memory leak in llc_ui_sendmsg run #6: crashed: memory leak in llc_ui_create run #7: crashed: memory leak in llc_ui_create run #8: crashed: memory leak in llc_ui_create run #9: crashed: memory leak in llc_ui_create testing release v4.7 testing commit 523d939ef98fd712632d93a5a2b588e477a7565e with gcc (GCC) 5.5.0 run #0: crashed: memory leak in llc_ui_create run #1: crashed: memory leak in llc_ui_create run #2: crashed: memory leak in llc_ui_sendmsg run #3: crashed: memory leak in llc_ui_create run #4: crashed: memory leak in llc_ui_sendmsg run #5: crashed: memory leak in llc_ui_sendmsg run #6: crashed: memory leak in llc_ui_create run #7: crashed: memory leak in llc_ui_create run #8: crashed: memory leak in llc_ui_create run #9: crashed: memory leak in llc_ui_sendmsg testing release v4.6 testing commit 2dcd0af568b0cf583645c8a317dd12e344b1c72a with gcc (GCC) 5.5.0 run #0: crashed: memory leak in llc_ui_create run #1: crashed: memory leak in llc_ui_sendmsg run #2: crashed: memory leak in llc_ui_sendmsg run #3: crashed: memory leak in llc_ui_sendmsg run #4: crashed: memory leak in llc_ui_create run #5: crashed: memory leak in llc_ui_create run #6: crashed: memory leak in llc_ui_create run #7: crashed: memory leak in llc_ui_sendmsg run #8: crashed: memory leak in llc_ui_sendmsg run #9: crashed: memory leak in llc_ui_create testing release v4.5 testing commit b562e44f507e863c6792946e4e1b1449fbbac85d with gcc (GCC) 5.5.0 run #0: crashed: memory leak in llc_ui_sendmsg run #1: crashed: memory leak in llc_ui_create run #2: crashed: memory leak in llc_ui_create run #3: crashed: memory leak in llc_ui_create run #4: crashed: memory leak in llc_ui_create run #5: crashed: memory leak in llc_ui_sendmsg run #6: crashed: memory leak in llc_ui_create run #7: crashed: memory leak in llc_ui_create run #8: crashed: memory leak in llc_ui_create run #9: crashed: memory leak in llc_ui_create testing release v4.4 testing commit afd2ff9b7e1b367172f18ba7f693dfb62bdcb2dc with gcc (GCC) 5.5.0 run #0: crashed: memory leak in llc_ui_sendmsg run #1: crashed: memory leak in llc_ui_sendmsg run #2: crashed: memory leak in llc_ui_create run #3: crashed: memory leak in llc_ui_sendmsg run #4: crashed: memory leak in llc_ui_sendmsg run #5: crashed: memory leak in llc_ui_create run #6: crashed: memory leak in llc_ui_sendmsg run #7: crashed: memory leak in llc_ui_sendmsg run #8: crashed: memory leak in llc_ui_sendmsg run #9: crashed: memory leak in llc_ui_create testing release v4.3 testing commit 6a13feb9c82803e2b815eca72fa7a9f5561d7861 with gcc (GCC) 5.5.0 run #0: crashed: memory leak in llc_ui_create run #1: crashed: memory leak in llc_ui_sendmsg run #2: crashed: memory leak in llc_ui_create run #3: crashed: memory leak in llc_ui_create run #4: crashed: memory leak in llc_ui_sendmsg run #5: crashed: memory leak in llc_ui_sendmsg run #6: crashed: memory leak in llc_ui_sendmsg run #7: crashed: memory leak in llc_ui_create run #8: crashed: memory leak in llc_ui_create run #9: crashed: memory leak in llc_ui_create testing release v4.2 testing commit 64291f7db5bd8150a74ad2036f1037e6a0428df2 with gcc (GCC) 5.5.0 run #0: crashed: memory leak in llc_ui_create run #1: crashed: memory leak in llc_ui_create run #2: crashed: memory leak in llc_ui_create run #3: crashed: memory leak in llc_ui_create run #4: crashed: memory leak in llc_ui_sendmsg run #5: crashed: memory leak in llc_ui_sendmsg run #6: crashed: memory leak in llc_ui_sendmsg run #7: crashed: memory leak in llc_ui_create run #8: crashed: memory leak in llc_ui_create run #9: crashed: memory leak in llc_ui_sendmsg testing release v4.1 testing commit b953c0d234bc72e8489d3bf51a276c5c4ec85345 with gcc (GCC) 5.5.0 run #0: crashed: memory leak in llc_ui_create run #1: crashed: memory leak in llc_ui_create run #2: crashed: memory leak in llc_ui_sendmsg run #3: crashed: memory leak in llc_ui_sendmsg run #4: crashed: memory leak in llc_ui_create run #5: crashed: memory leak in llc_ui_create run #6: crashed: memory leak in llc_ui_create run #7: crashed: memory leak in llc_ui_sendmsg run #8: crashed: memory leak in llc_ui_sendmsg run #9: crashed: memory leak in llc_ui_sendmsg revisions tested: 24, total time: 3h50m50.098573366s (build: 1h26m50.666592941s, test: 2h16m26.699991914s) the crash already happened on the oldest tested release crash: memory leak in llc_ui_sendmsg BUG: memory leak unreferenced object 0xffff8800b66f9c00 (size 256): comm "syz-executor.3", pid 5482, jiffies 4294953819 (age 18.080s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 70 95 b3 00 88 ff ff .........p...... backtrace: [] kmemleak_alloc+0x23/0x50 mm/kmemleak.c:900 [] kmemleak_alloc_recursive include/linux/kmemleak.h:46 [inline] [] slab_alloc_node mm/slab.c:3190 [inline] [] kmem_cache_alloc_node+0x2a0/0x600 mm/slab.c:3447 [] __alloc_skb+0x47/0x1d0 net/core/skbuff.c:216 [] alloc_skb include/linux/skbuff.h:782 [inline] [] alloc_skb_with_frags+0x52/0x200 net/core/skbuff.c:4390 [] sock_alloc_send_pskb+0x1ce/0x250 net/core/sock.c:1835 [] sock_alloc_send_skb+0x13/0x20 net/core/sock.c:1852 [] llc_ui_sendmsg+0x119/0x3e0 net/llc/af_llc.c:916 [] sock_sendmsg_nosec net/socket.c:613 [inline] [] sock_sendmsg+0x35/0x40 net/socket.c:623 [] ___sys_sendmsg+0x28b/0x2a0 net/socket.c:1955 [] __sys_sendmsg+0x3d/0x80 net/socket.c:1989 [] SYSC_sendmsg net/socket.c:2000 [inline] [] SyS_sendmsg+0xd/0x20 net/socket.c:1996 [] system_call_fastpath+0x16/0x75 [] 0xffffffffffffffff BUG: memory leak unreferenced object 0xffff8800b9d4a800 (size 2048): comm "syz-executor.0", pid 5633, jiffies 4294954075 (age 15.520s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1a 00 07 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [] kmemleak_alloc+0x23/0x50 mm/kmemleak.c:900 [] kmemleak_alloc_recursive include/linux/kmemleak.h:46 [inline] [] slab_alloc mm/slab.c:3255 [inline] [] __do_kmalloc mm/slab.c:3515 [inline] [] __kmalloc+0x294/0x5f0 mm/slab.c:3525 [] kmalloc include/linux/slab.h:435 [inline] [] sk_prot_alloc+0x9b/0x150 net/core/sock.c:1338 [] sk_alloc+0x27/0x100 net/core/sock.c:1402 [] llc_sk_alloc+0xe/0x170 net/llc/llc_conn.c:936 [] llc_ui_create+0x68/0xf0 net/llc/af_llc.c:171 [] __sock_create+0x11e/0x240 net/socket.c:1172 [] sock_create net/socket.c:1212 [inline] [] SYSC_socket net/socket.c:1242 [inline] [] SyS_socket+0x46/0x90 net/socket.c:1222 [] system_call_fastpath+0x16/0x75 [] 0xffffffffffffffff BUG: memory leak unreferenced object 0xffff8800b6737300 (size 256): comm "syz-executor.0", pid 5633, jiffies 4294954075 (age 15.520s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 a8 d4 b9 00 88 ff ff ................ backtrace: [] kmemleak_alloc+0x23/0x50 mm/kmemleak.c:900 [] kmemleak_alloc_recursive include/linux/kmemleak.h:46 [inline] [] slab_alloc_node mm/slab.c:3190 [inline] [] kmem_cache_alloc_node+0x2a0/0x600 mm/slab.c:3447 [] __alloc_skb+0x47/0x1d0 net/core/skbuff.c:216 [] alloc_skb include/linux/skbuff.h:782 [inline] [] alloc_skb_with_frags+0x52/0x200 net/core/skbuff.c:4390 [] sock_alloc_send_pskb+0x1ce/0x250 net/core/sock.c:1835 [] sock_alloc_send_skb+0x13/0x20 net/core/sock.c:1852 [] llc_ui_sendmsg+0x119/0x3e0 net/llc/af_llc.c:916 [] sock_sendmsg_nosec net/socket.c:613 [inline] [] sock_sendmsg+0x35/0x40 net/socket.c:623 [] ___sys_sendmsg+0x28b/0x2a0 net/socket.c:1955 [] __sys_sendmsg+0x3d/0x80 net/socket.c:1989 [] SYSC_sendmsg net/socket.c:2000 [inline] [] SyS_sendmsg+0xd/0x20 net/socket.c:1996 [] system_call_fastpath+0x16/0x75 [] 0xffffffffffffffff BUG: memory leak unreferenced object 0xffff8800b4c7b800 (size 512): comm "syz-executor.0", pid 5633, jiffies 4294954075 (age 15.520s) hex dump (first 32 bytes): 28 00 00 00 14 00 05 05 00 00 00 00 00 00 00 00 (............... 02 18 00 00 00 c2 bf 81 03 00 02 00 ac 14 14 0f ................ backtrace: [] kmemleak_alloc+0x23/0x50 mm/kmemleak.c:900 [] kmemleak_alloc_recursive include/linux/kmemleak.h:46 [inline] [] slab_alloc_node mm/slab.c:3190 [inline] [] kmem_cache_alloc_node_trace+0x2b8/0x650 mm/slab.c:3465 [] __do_kmalloc_node mm/slab.c:3483 [inline] [] __kmalloc_node_track_caller+0x30/0x40 mm/slab.c:3495 [] __kmalloc_reserve.isra.27+0x2c/0x90 net/core/skbuff.c:135 [] __alloc_skb+0x73/0x1d0 net/core/skbuff.c:228 [] alloc_skb include/linux/skbuff.h:782 [inline] [] alloc_skb_with_frags+0x52/0x200 net/core/skbuff.c:4390 [] sock_alloc_send_pskb+0x1ce/0x250 net/core/sock.c:1835 [] sock_alloc_send_skb+0x13/0x20 net/core/sock.c:1852 [] llc_ui_sendmsg+0x119/0x3e0 net/llc/af_llc.c:916 [] sock_sendmsg_nosec net/socket.c:613 [inline] [] sock_sendmsg+0x35/0x40 net/socket.c:623 [] ___sys_sendmsg+0x28b/0x2a0 net/socket.c:1955 [] __sys_sendmsg+0x3d/0x80 net/socket.c:1989 [] SYSC_sendmsg net/socket.c:2000 [inline] [] SyS_sendmsg+0xd/0x20 net/socket.c:1996 [] system_call_fastpath+0x16/0x75 [] 0xffffffffffffffff