From: syzbot <syzbot+470d1a4a7b7a7c225881@syzkaller•appspotmail.com>
To: davem@davemloft•net, linux-hams@vger•kernel.org,
linux-kernel@vger•kernel.org, netdev@vger•kernel.org,
ralf@linux-mips•org, syzkaller-bugs@googlegroups•com
Subject: Re: memory leak in nr_loopback_queue
Date: Thu, 15 Aug 2019 14:53:04 -0700 [thread overview]
Message-ID: <000000000000faf6c205902ee533@google.com> (raw)
In-Reply-To: <000000000000a7f012058a0c7a65@google.com>
syzbot has found a reproducer for the following crash on:
HEAD commit: 41de5963 Merge tag 'Wimplicit-fallthrough-5.3-rc5' of git:..
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=12408f1c600000
kernel config: https://syzkaller.appspot.com/x/.config?x=6c5e70dcab57c6af
dashboard link: https://syzkaller.appspot.com/bug?extid=470d1a4a7b7a7c225881
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=164de5ee600000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1114f222600000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+470d1a4a7b7a7c225881@syzkaller•appspotmail.com
executing program
executing program
executing program
executing program
executing program
BUG: memory leak
unreferenced object 0xffff888116c16b00 (size 224):
comm "syz-executor241", pid 7513, jiffies 4295078074 (age 50.960s)
hex dump (first 32 bytes):
d0 38 61 0c 81 88 ff ff d0 38 61 0c 81 88 ff ff .8a......8a.....
00 00 00 00 00 00 00 00 00 98 95 0b 81 88 ff ff ................
backtrace:
[<00000000e2ee4d2c>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<00000000e2ee4d2c>] slab_post_alloc_hook mm/slab.h:522 [inline]
[<00000000e2ee4d2c>] slab_alloc_node mm/slab.c:3262 [inline]
[<00000000e2ee4d2c>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
[<0000000082f0e53e>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
[<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
[<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0
net/netrom/nr_loopback.c:34
[<00000000e8738211>] nr_route_frame+0x2d1/0x340
net/netrom/nr_route.c:772
[<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0
net/netrom/nr_out.c:209
[<00000000aa3080e2>] nr_write_internal+0x133/0x2e0
net/netrom/nr_subr.c:205
[<00000000d4e53049>] nr_establish_data_link+0x2d/0x60
net/netrom/nr_out.c:227
[<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
[<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
[<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
[<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
[<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
[<0000000068560e8c>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:296
[<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff88810de28200 (size 512):
comm "syz-executor241", pid 7513, jiffies 4295078074 (age 50.960s)
hex dump (first 32 bytes):
bb bb bb 00 00 00 60 bb bb bb 01 00 00 61 10 01 ......`......a..
9c 00 00 01 04 bb bb bb 00 00 00 60 bb bb bb 00 ...........`....
backtrace:
[<000000006183266a>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000006183266a>] slab_post_alloc_hook mm/slab.h:522 [inline]
[<000000006183266a>] slab_alloc_node mm/slab.c:3262 [inline]
[<000000006183266a>] kmem_cache_alloc_node_trace+0x161/0x2f0
mm/slab.c:3592
[<00000000425795e2>] __do_kmalloc_node mm/slab.c:3614 [inline]
[<00000000425795e2>] __kmalloc_node_track_caller+0x38/0x50
mm/slab.c:3629
[<00000000e438b171>] __kmalloc_reserve.isra.0+0x40/0xb0
net/core/skbuff.c:141
[<000000005727e112>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
[<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
[<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0
net/netrom/nr_loopback.c:34
[<00000000e8738211>] nr_route_frame+0x2d1/0x340
net/netrom/nr_route.c:772
[<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0
net/netrom/nr_out.c:209
[<00000000aa3080e2>] nr_write_internal+0x133/0x2e0
net/netrom/nr_subr.c:205
[<00000000d4e53049>] nr_establish_data_link+0x2d/0x60
net/netrom/nr_out.c:227
[<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
[<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
[<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
[<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
[<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
[<0000000068560e8c>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:296
[<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888116c16b00 (size 224):
comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.030s)
hex dump (first 32 bytes):
d0 38 61 0c 81 88 ff ff d0 38 61 0c 81 88 ff ff .8a......8a.....
00 00 00 00 00 00 00 00 00 98 95 0b 81 88 ff ff ................
backtrace:
[<00000000e2ee4d2c>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<00000000e2ee4d2c>] slab_post_alloc_hook mm/slab.h:522 [inline]
[<00000000e2ee4d2c>] slab_alloc_node mm/slab.c:3262 [inline]
[<00000000e2ee4d2c>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
[<0000000082f0e53e>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
[<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
[<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0
net/netrom/nr_loopback.c:34
[<00000000e8738211>] nr_route_frame+0x2d1/0x340
net/netrom/nr_route.c:772
[<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0
net/netrom/nr_out.c:209
[<00000000aa3080e2>] nr_write_internal+0x133/0x2e0
net/netrom/nr_subr.c:205
[<00000000d4e53049>] nr_establish_data_link+0x2d/0x60
net/netrom/nr_out.c:227
[<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
[<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
[<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
[<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
[<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
[<0000000068560e8c>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:296
[<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff88810de28200 (size 512):
comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.030s)
hex dump (first 32 bytes):
bb bb bb 00 00 00 60 bb bb bb 01 00 00 61 10 01 ......`......a..
9c 00 00 01 04 bb bb bb 00 00 00 60 bb bb bb 00 ...........`....
backtrace:
[<000000006183266a>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000006183266a>] slab_post_alloc_hook mm/slab.h:522 [inline]
[<000000006183266a>] slab_alloc_node mm/slab.c:3262 [inline]
[<000000006183266a>] kmem_cache_alloc_node_trace+0x161/0x2f0
mm/slab.c:3592
[<00000000425795e2>] __do_kmalloc_node mm/slab.c:3614 [inline]
[<00000000425795e2>] __kmalloc_node_track_caller+0x38/0x50
mm/slab.c:3629
[<00000000e438b171>] __kmalloc_reserve.isra.0+0x40/0xb0
net/core/skbuff.c:141
[<000000005727e112>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
[<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
[<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0
net/netrom/nr_loopback.c:34
[<00000000e8738211>] nr_route_frame+0x2d1/0x340
net/netrom/nr_route.c:772
[<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0
net/netrom/nr_out.c:209
[<00000000aa3080e2>] nr_write_internal+0x133/0x2e0
net/netrom/nr_subr.c:205
[<00000000d4e53049>] nr_establish_data_link+0x2d/0x60
net/netrom/nr_out.c:227
[<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
[<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
[<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
[<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
[<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
[<0000000068560e8c>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:296
[<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888116c16b00 (size 224):
comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.100s)
hex dump (first 32 bytes):
d0 38 61 0c 81 88 ff ff d0 38 61 0c 81 88 ff ff .8a......8a.....
00 00 00 00 00 00 00 00 00 98 95 0b 81 88 ff ff ................
backtrace:
[<00000000e2ee4d2c>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<00000000e2ee4d2c>] slab_post_alloc_hook mm/slab.h:522 [inline]
[<00000000e2ee4d2c>] slab_alloc_node mm/slab.c:3262 [inline]
[<00000000e2ee4d2c>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
[<0000000082f0e53e>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
[<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
[<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0
net/netrom/nr_loopback.c:34
[<00000000e8738211>] nr_route_frame+0x2d1/0x340
net/netrom/nr_route.c:772
[<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0
net/netrom/nr_out.c:209
[<00000000aa3080e2>] nr_write_internal+0x133/0x2e0
net/netrom/nr_subr.c:205
[<00000000d4e53049>] nr_establish_data_link+0x2d/0x60
net/netrom/nr_out.c:227
[<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
[<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
[<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
[<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
[<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
[<0000000068560e8c>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:296
[<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff88810de28200 (size 512):
comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.100s)
hex dump (first 32 bytes):
bb bb bb 00 00 00 60 bb bb bb 01 00 00 61 10 01 ......`......a..
9c 00 00 01 04 bb bb bb 00 00 00 60 bb bb bb 00 ...........`....
backtrace:
[<000000006183266a>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000006183266a>] slab_post_alloc_hook mm/slab.h:522 [inline]
[<000000006183266a>] slab_alloc_node mm/slab.c:3262 [inline]
[<000000006183266a>] kmem_cache_alloc_node_trace+0x161/0x2f0
mm/slab.c:3592
[<00000000425795e2>] __do_kmalloc_node mm/slab.c:3614 [inline]
[<00000000425795e2>] __kmalloc_node_track_caller+0x38/0x50
mm/slab.c:3629
[<00000000e438b171>] __kmalloc_reserve.isra.0+0x40/0xb0
net/core/skbuff.c:141
[<000000005727e112>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
[<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
[<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0
net/netrom/nr_loopback.c:34
[<00000000e8738211>] nr_route_frame+0x2d1/0x340
net/netrom/nr_route.c:772
[<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0
net/netrom/nr_out.c:209
[<00000000aa3080e2>] nr_write_internal+0x133/0x2e0
net/netrom/nr_subr.c:205
[<00000000d4e53049>] nr_establish_data_link+0x2d/0x60
net/netrom/nr_out.c:227
[<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
[<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
[<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
[<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
[<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
[<0000000068560e8c>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:296
[<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888116c16b00 (size 224):
comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.160s)
hex dump (first 32 bytes):
d0 38 61 0c 81 88 ff ff d0 38 61 0c 81 88 ff ff .8a......8a.....
00 00 00 00 00 00 00 00 00 98 95 0b 81 88 ff ff ................
backtrace:
[<00000000e2ee4d2c>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<00000000e2ee4d2c>] slab_post_alloc_hook mm/slab.h:522 [inline]
[<00000000e2ee4d2c>] slab_alloc_node mm/slab.c:3262 [inline]
[<00000000e2ee4d2c>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
[<0000000082f0e53e>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
[<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
[<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0
net/netrom/nr_loopback.c:34
[<00000000e8738211>] nr_route_frame+0x2d1/0x340
net/netrom/nr_route.c:772
[<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0
net/netrom/nr_out.c:209
[<00000000aa3080e2>] nr_write_internal+0x133/0x2e0
net/netrom/nr_subr.c:205
[<00000000d4e53049>] nr_establish_data_link+0x2d/0x60
net/netrom/nr_out.c:227
[<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
[<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
[<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
[<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
[<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
[<0000000068560e8c>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:296
[<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff88810de28200 (size 512):
comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.160s)
hex dump (first 32 bytes):
bb bb bb 00 00 00 60 bb bb bb 01 00 00 61 10 01 ......`......a..
9c 00 00 01 04 bb bb bb 00 00 00 60 bb bb bb 00 ...........`....
backtrace:
[<000000006183266a>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000006183266a>] slab_post_alloc_hook mm/slab.h:522 [inline]
[<000000006183266a>] slab_alloc_node mm/slab.c:3262 [inline]
[<000000006183266a>] kmem_cache_alloc_node_trace+0x161/0x2f0
mm/slab.c:3592
[<00000000425795e2>] __do_kmalloc_node mm/slab.c:3614 [inline]
[<00000000425795e2>] __kmalloc_node_track_caller+0x38/0x50
mm/slab.c:3629
[<00000000e438b171>] __kmalloc_reserve.isra.0+0x40/0xb0
net/core/skbuff.c:141
[<000000005727e112>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
[<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
[<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0
net/netrom/nr_loopback.c:34
[<00000000e8738211>] nr_route_frame+0x2d1/0x340
net/netrom/nr_route.c:772
[<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0
net/netrom/nr_out.c:209
[<00000000aa3080e2>] nr_write_internal+0x133/0x2e0
net/netrom/nr_subr.c:205
[<00000000d4e53049>] nr_establish_data_link+0x2d/0x60
net/netrom/nr_out.c:227
[<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
[<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
[<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
[<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
[<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
[<0000000068560e8c>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:296
[<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888116c16b00 (size 224):
comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.240s)
hex dump (first 32 bytes):
d0 38 61 0c 81 88 ff ff d0 38 61 0c 81 88 ff ff .8a......8a.....
00 00 00 00 00 00 00 00 00 98 95 0b 81 88 ff ff ................
backtrace:
[<00000000e2ee4d2c>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<00000000e2ee4d2c>] slab_post_alloc_hook mm/slab.h:522 [inline]
[<00000000e2ee4d2c>] slab_alloc_node mm/slab.c:3262 [inline]
[<00000000e2ee4d2c>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
[<0000000082f0e53e>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
[<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
[<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0
net/netrom/nr_loopback.c:34
[<00000000e8738211>] nr_route_frame+0x2d1/0x340
net/netrom/nr_route.c:772
[<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0
net/netrom/nr_out.c:209
[<00000000aa3080e2>] nr_write_internal+0x133/0x2e0
net/netrom/nr_subr.c:205
[<00000000d4e53049>] nr_establish_data_link+0x2d/0x60
net/netrom/nr_out.c:227
[<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
[<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
[<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
[<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
[<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
[<0000000068560e8c>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:296
[<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff88810de28200 (size 512):
comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.240s)
hex dump (first 32 bytes):
bb bb bb 00 00 00 60 bb bb bb 01 00 00 61 10 01 ......`......a..
9c 00 00 01 04 bb bb bb 00 00 00 60 bb bb bb 00 ...........`....
backtrace:
[<000000006183266a>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000006183266a>] slab_post_alloc_hook mm/slab.h:522 [inline]
[<000000006183266a>] slab_alloc_node mm/slab.c:3262 [inline]
[<000000006183266a>] kmem_cache_alloc_node_trace+0x161/0x2f0
mm/slab.c:3592
[<00000000425795e2>] __do_kmalloc_node mm/slab.c:3614 [inline]
[<00000000425795e2>] __kmalloc_node_track_caller+0x38/0x50
mm/slab.c:3629
[<00000000e438b171>] __kmalloc_reserve.isra.0+0x40/0xb0
net/core/skbuff.c:141
[<000000005727e112>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
[<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
[<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0
net/netrom/nr_loopback.c:34
[<00000000e8738211>] nr_route_frame+0x2d1/0x340
net/netrom/nr_route.c:772
[<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0
net/netrom/nr_out.c:209
[<00000000aa3080e2>] nr_write_internal+0x133/0x2e0
net/netrom/nr_subr.c:205
[<00000000d4e53049>] nr_establish_data_link+0x2d/0x60
net/netrom/nr_out.c:227
[<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
[<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
[<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
[<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
[<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
[<0000000068560e8c>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:296
[<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888116c16b00 (size 224):
comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.300s)
hex dump (first 32 bytes):
d0 38 61 0c 81 88 ff ff d0 38 61 0c 81 88 ff ff .8a......8a.....
00 00 00 00 00 00 00 00 00 98 95 0b 81 88 ff ff ................
backtrace:
[<00000000e2ee4d2c>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<00000000e2ee4d2c>] slab_post_alloc_hook mm/slab.h:522 [inline]
[<00000000e2ee4d2c>] slab_alloc_node mm/slab.c:3262 [inline]
[<00000000e2ee4d2c>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
[<0000000082f0e53e>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
[<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
[<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0
net/netrom/nr_loopback.c:34
[<00000000e8738211>] nr_route_frame+0x2d1/0x340
net/netrom/nr_route.c:772
[<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0
net/netrom/nr_out.c:209
[<00000000aa3080e2>] nr_write_internal+0x133/0x2e0
net/netrom/nr_subr.c:205
[<00000000d4e53049>] nr_establish_data_link+0x2d/0x60
net/netrom/nr_out.c:227
[<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
[<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
[<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
[<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
[<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
[<0000000068560e8c>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:296
[<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff88810de28200 (size 512):
comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.300s)
hex dump (first 32 bytes):
bb bb bb 00 00 00 60 bb bb bb 01 00 00 61 10 01 ......`......a..
9c 00 00 01 04 bb bb bb 00 00 00 60 bb bb bb 00 ...........`....
backtrace:
[<000000006183266a>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000006183266a>] slab_post_alloc_hook mm/slab.h:522 [inline]
[<000000006183266a>] slab_alloc_node mm/slab.c:3262 [inline]
[<000000006183266a>] kmem_cache_alloc_node_trace+0x161/0x2f0
mm/slab.c:3592
[<00000000425795e2>] __do_kmalloc_node mm/slab.c:3614 [inline]
[<00000000425795e2>] __kmalloc_node_track_caller+0x38/0x50
mm/slab.c:3629
[<00000000e438b171>] __kmalloc_reserve.isra.0+0x40/0xb0
net/core/skbuff.c:141
[<000000005727e112>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
[<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
[<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0
net/netrom/nr_loopback.c:34
[<00000000e8738211>] nr_route_frame+0x2d1/0x340
net/netrom/nr_route.c:772
[<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0
net/netrom/nr_out.c:209
[<00000000aa3080e2>] nr_write_internal+0x133/0x2e0
net/netrom/nr_subr.c:205
[<00000000d4e53049>] nr_establish_data_link+0x2d/0x60
net/netrom/nr_out.c:227
[<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
[<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
[<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
[<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
[<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
[<0000000068560e8c>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:296
[<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888116c16b00 (size 224):
comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.370s)
hex dump (first 32 bytes):
d0 38 61 0c 81 88 ff ff d0 38 61 0c 81 88 ff ff .8a......8a.....
00 00 00 00 00 00 00 00 00 98 95 0b 81 88 ff ff ................
backtrace:
[<00000000e2ee4d2c>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<00000000e2ee4d2c>] slab_post_alloc_hook mm/slab.h:522 [inline]
[<00000000e2ee4d2c>] slab_alloc_node mm/slab.c:3262 [inline]
[<00000000e2ee4d2c>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
[<0000000082f0e53e>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
[<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
[<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0
net/netrom/nr_loopback.c:34
[<00000000e8738211>] nr_route_frame+0x2d1/0x340
net/netrom/nr_route.c:772
[<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0
net/netrom/nr_out.c:209
[<00000000aa3080e2>] nr_write_internal+0x133/0x2e0
net/netrom/nr_subr.c:205
[<00000000d4e53049>] nr_establish_data_link+0x2d/0x60
net/netrom/nr_out.c:227
[<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
[<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
[<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
[<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
[<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
[<0000000068560e8c>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:296
[<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff88810de28200 (size 512):
comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.370s)
hex dump (first 32 bytes):
bb bb bb 00 00 00 60 bb bb bb 01 00 00 61 10 01 ......`......a..
9c 00 00 01 04 bb bb bb 00 00 00 60 bb bb bb 00 ...........`....
backtrace:
[<000000006183266a>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000006183266a>] slab_post_alloc_hook mm/slab.h:522 [inline]
[<000000006183266a>] slab_alloc_node mm/slab.c:3262 [inline]
[<000000006183266a>] kmem_cache_alloc_node_trace+0x161/0x2f0
mm/slab.c:3592
[<00000000425795e2>] __do_kmalloc_node mm/slab.c:3614 [inline]
[<00000000425795e2>] __kmalloc_node_track_caller+0x38/0x50
mm/slab.c:3629
[<00000000e438b171>] __kmalloc_reserve.isra.0+0x40/0xb0
net/core/skbuff.c:141
[<000000005727e112>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
[<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
[<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0
net/netrom/nr_loopback.c:34
[<00000000e8738211>] nr_route_frame+0x2d1/0x340
net/netrom/nr_route.c:772
[<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0
net/netrom/nr_out.c:209
[<00000000aa3080e2>] nr_write_internal+0x133/0x2e0
net/netrom/nr_subr.c:205
[<00000000d4e53049>] nr_establish_data_link+0x2d/0x60
net/netrom/nr_out.c:227
[<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
[<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
[<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
[<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
[<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
[<0000000068560e8c>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:296
[<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888116c16b00 (size 224):
comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.430s)
hex dump (first 32 bytes):
d0 38 61 0c 81 88 ff ff d0 38 61 0c 81 88 ff ff .8a......8a.....
00 00 00 00 00 00 00 00 00 98 95 0b 81 88 ff ff ................
backtrace:
[<00000000e2ee4d2c>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<00000000e2ee4d2c>] slab_post_alloc_hook mm/slab.h:522 [inline]
[<00000000e2ee4d2c>] slab_alloc_node mm/slab.c:3262 [inline]
[<00000000e2ee4d2c>] kmem_cache_alloc_node+0x163/0x2f0 mm/slab.c:3574
[<0000000082f0e53e>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:197
[<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
[<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0
net/netrom/nr_loopback.c:34
[<00000000e8738211>] nr_route_frame+0x2d1/0x340
net/netrom/nr_route.c:772
[<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0
net/netrom/nr_out.c:209
[<00000000aa3080e2>] nr_write_internal+0x133/0x2e0
net/netrom/nr_subr.c:205
[<00000000d4e53049>] nr_establish_data_link+0x2d/0x60
net/netrom/nr_out.c:227
[<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
[<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
[<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
[<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
[<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
[<0000000068560e8c>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:296
[<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff88810de28200 (size 512):
comm "syz-executor241", pid 7513, jiffies 4295078074 (age 51.430s)
hex dump (first 32 bytes):
bb bb bb 00 00 00 60 bb bb bb 01 00 00 61 10 01 ......`......a..
9c 00 00 01 04 bb bb bb 00 00 00 60 bb bb bb 00 ...........`....
backtrace:
[<000000006183266a>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000006183266a>] slab_post_alloc_hook mm/slab.h:522 [inline]
[<000000006183266a>] slab_alloc_node mm/slab.c:3262 [inline]
[<000000006183266a>] kmem_cache_alloc_node_trace+0x161/0x2f0
mm/slab.c:3592
[<00000000425795e2>] __do_kmalloc_node mm/slab.c:3614 [inline]
[<00000000425795e2>] __kmalloc_node_track_caller+0x38/0x50
mm/slab.c:3629
[<00000000e438b171>] __kmalloc_reserve.isra.0+0x40/0xb0
net/core/skbuff.c:141
[<000000005727e112>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:209
[<00000000b73f5aed>] alloc_skb include/linux/skbuff.h:1055 [inline]
[<00000000b73f5aed>] nr_loopback_queue+0x26/0xc0
net/netrom/nr_loopback.c:34
[<00000000e8738211>] nr_route_frame+0x2d1/0x340
net/netrom/nr_route.c:772
[<00000000f3c3ea99>] nr_transmit_buffer+0x86/0xc0
net/netrom/nr_out.c:209
[<00000000aa3080e2>] nr_write_internal+0x133/0x2e0
net/netrom/nr_subr.c:205
[<00000000d4e53049>] nr_establish_data_link+0x2d/0x60
net/netrom/nr_out.c:227
[<000000008eb58c4a>] nr_connect+0x13b/0x490 net/netrom/af_netrom.c:713
[<00000000d6b40196>] __sys_connect+0x11d/0x170 net/socket.c:1828
[<0000000059057e91>] __do_sys_connect net/socket.c:1839 [inline]
[<0000000059057e91>] __se_sys_connect net/socket.c:1836 [inline]
[<0000000059057e91>] __x64_sys_connect+0x1e/0x30 net/socket.c:1836
[<0000000068560e8c>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:296
[<000000009035e9ed>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
prev parent reply other threads:[~2019-08-15 21:53 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-05-29 20:18 memory leak in nr_loopback_queue syzbot
2019-08-15 21:53 ` syzbot [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=000000000000faf6c205902ee533@google.com \
--to=syzbot+470d1a4a7b7a7c225881@syzkaller$(echo .)appspotmail.com \
--cc=davem@davemloft$(echo .)net \
--cc=linux-hams@vger$(echo .)kernel.org \
--cc=linux-kernel@vger$(echo .)kernel.org \
--cc=netdev@vger$(echo .)kernel.org \
--cc=ralf@linux-mips$(echo .)org \
--cc=syzkaller-bugs@googlegroups$(echo .)com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox