memory leak in pppoe_sendmsg

37 views
Skip to first unread message

syzbot

unread,
May 30, 2019, 11:48:07 PM5/30/19
to da...@davemloft.net, linux-...@vger.kernel.org, most...@earthlink.net, net...@vger.kernel.org, syzkall...@googlegroups.com
Hello,

syzbot found the following crash on:

HEAD commit: bec7550c Merge tag 'docs-5.2-fixes2' of git://git.lwn.net/..
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=1280ecbaa00000
kernel config: https://syzkaller.appspot.com/x/.config?x=64479170dcaf0e11
dashboard link: https://syzkaller.appspot.com/bug?extid=6bdfd184eac7709e5cc9
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=17112572a00000

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+6bdfd1...@syzkaller.appspotmail.com

2019/05/30 11:35:26 executed programs: 9
2019/05/30 11:35:32 executed programs: 11
2019/05/30 11:35:38 executed programs: 13
2019/05/30 11:35:44 executed programs: 15
2019/05/30 11:35:50 executed programs: 17
BUG: memory leak
unreferenced object 0xffff888124199500 (size 224):
comm "syz-executor.0", pid 7122, jiffies 4295041954 (age 13.860s)
hex dump (first 32 bytes):
00 96 19 24 81 88 ff ff d0 20 0e 2a 81 88 ff ff ...$..... .*....
00 00 00 00 00 00 00 00 00 20 0e 2a 81 88 ff ff ......... .*....
backtrace:
[<00000000688f689a>] kmemleak_alloc_recursive
include/linux/kmemleak.h:55 [inline]
[<00000000688f689a>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<00000000688f689a>] slab_alloc_node mm/slab.c:3269 [inline]
[<00000000688f689a>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<00000000e781c880>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:198
[<000000004ce3be0b>] alloc_skb include/linux/skbuff.h:1058 [inline]
[<000000004ce3be0b>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2077
[<000000008110994c>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:871
[<00000000c1e51321>] sock_sendmsg_nosec net/socket.c:652 [inline]
[<00000000c1e51321>] sock_sendmsg+0x54/0x70 net/socket.c:671
[<000000008012ebfd>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2292
[<0000000087b8ef6f>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2387
[<000000002b3700b1>] __do_sys_sendmmsg net/socket.c:2416 [inline]
[<000000002b3700b1>] __se_sys_sendmmsg net/socket.c:2413 [inline]
[<000000002b3700b1>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2413
[<0000000028e31f9f>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<000000004279bc05>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888115706600 (size 512):
comm "syz-executor.0", pid 7122, jiffies 4295041954 (age 13.860s)
hex dump (first 32 bytes):
23 32 aa aa aa aa aa 0a aa aa aa aa aa 0a 88 64 #2.............d
11 00 04 00 00 00 70 72 6f 66 69 6c 65 3d 30 20 ......profile=0
backtrace:
[<00000000c07b4ae3>] kmemleak_alloc_recursive
include/linux/kmemleak.h:55 [inline]
[<00000000c07b4ae3>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<00000000c07b4ae3>] slab_alloc_node mm/slab.c:3269 [inline]
[<00000000c07b4ae3>] kmem_cache_alloc_node_trace+0x15b/0x2a0
mm/slab.c:3597
[<00000000e84718bb>] __do_kmalloc_node mm/slab.c:3619 [inline]
[<00000000e84718bb>] __kmalloc_node_track_caller+0x38/0x50
mm/slab.c:3634
[<000000008692fea3>] __kmalloc_reserve.isra.0+0x40/0xb0
net/core/skbuff.c:142
[<00000000da312aad>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:210
[<000000004ce3be0b>] alloc_skb include/linux/skbuff.h:1058 [inline]
[<000000004ce3be0b>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2077
[<000000008110994c>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:871
[<00000000c1e51321>] sock_sendmsg_nosec net/socket.c:652 [inline]
[<00000000c1e51321>] sock_sendmsg+0x54/0x70 net/socket.c:671
[<000000008012ebfd>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2292
[<0000000087b8ef6f>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2387
[<000000002b3700b1>] __do_sys_sendmmsg net/socket.c:2416 [inline]
[<000000002b3700b1>] __se_sys_sendmmsg net/socket.c:2413 [inline]
[<000000002b3700b1>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2413
[<0000000028e31f9f>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<000000004279bc05>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888124199600 (size 224):
comm "syz-executor.0", pid 7122, jiffies 4295041954 (age 13.860s)
hex dump (first 32 bytes):
00 97 19 24 81 88 ff ff 00 95 19 24 81 88 ff ff ...$.......$....
00 00 00 00 00 00 00 00 00 20 0e 2a 81 88 ff ff ......... .*....
backtrace:
[<00000000688f689a>] kmemleak_alloc_recursive
include/linux/kmemleak.h:55 [inline]
[<00000000688f689a>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<00000000688f689a>] slab_alloc_node mm/slab.c:3269 [inline]
[<00000000688f689a>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<00000000e781c880>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:198
[<000000004ce3be0b>] alloc_skb include/linux/skbuff.h:1058 [inline]
[<000000004ce3be0b>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2077
[<000000008110994c>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:871
[<00000000c1e51321>] sock_sendmsg_nosec net/socket.c:652 [inline]
[<00000000c1e51321>] sock_sendmsg+0x54/0x70 net/socket.c:671
[<000000008012ebfd>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2292
[<0000000087b8ef6f>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2387
[<000000002b3700b1>] __do_sys_sendmmsg net/socket.c:2416 [inline]
[<000000002b3700b1>] __se_sys_sendmmsg net/socket.c:2413 [inline]
[<000000002b3700b1>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2413
[<0000000028e31f9f>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<000000004279bc05>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88811a0b2600 (size 512):
comm "syz-executor.0", pid 7122, jiffies 4295041954 (age 13.860s)
hex dump (first 32 bytes):
00 00 aa aa aa aa aa 0a aa aa aa aa aa 0a 88 64 ...............d
11 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<00000000c07b4ae3>] kmemleak_alloc_recursive
include/linux/kmemleak.h:55 [inline]
[<00000000c07b4ae3>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<00000000c07b4ae3>] slab_alloc_node mm/slab.c:3269 [inline]
[<00000000c07b4ae3>] kmem_cache_alloc_node_trace+0x15b/0x2a0
mm/slab.c:3597
[<00000000e84718bb>] __do_kmalloc_node mm/slab.c:3619 [inline]
[<00000000e84718bb>] __kmalloc_node_track_caller+0x38/0x50
mm/slab.c:3634
[<000000008692fea3>] __kmalloc_reserve.isra.0+0x40/0xb0
net/core/skbuff.c:142
[<00000000da312aad>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:210
[<000000004ce3be0b>] alloc_skb include/linux/skbuff.h:1058 [inline]
[<000000004ce3be0b>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2077
[<000000008110994c>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:871
[<00000000c1e51321>] sock_sendmsg_nosec net/socket.c:652 [inline]
[<00000000c1e51321>] sock_sendmsg+0x54/0x70 net/socket.c:671
[<000000008012ebfd>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2292
[<0000000087b8ef6f>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2387
[<000000002b3700b1>] __do_sys_sendmmsg net/socket.c:2416 [inline]
[<000000002b3700b1>] __se_sys_sendmmsg net/socket.c:2413 [inline]
[<000000002b3700b1>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2413
[<0000000028e31f9f>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<000000004279bc05>] entry_SYSCALL_64_after_hwframe+0x44/0xa9



---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this bug, for details see:
https://goo.gl/tpsmEJ#testing-patches

syzbot

unread,
Jun 28, 2019, 2:58:06 PM6/28/19
to da...@davemloft.net, linux-...@vger.kernel.org, most...@earthlink.net, net...@vger.kernel.org, syzkall...@googlegroups.com
syzbot has found a reproducer for the following crash on:

HEAD commit: c84afab0 Merge git://git.kernel.org/pub/scm/linux/kernel/g..
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=164241d9a00000
kernel config: https://syzkaller.appspot.com/x/.config?x=1db8bd6825f9661c
dashboard link: https://syzkaller.appspot.com/bug?extid=6bdfd184eac7709e5cc9
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=126c5f8da00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=17cdd4eba00000

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+6bdfd1...@syzkaller.appspotmail.com

executing program
BUG: memory leak
unreferenced object 0xffff888115942b00 (size 224):
comm "syz-executor057", pid 7184, jiffies 4294955398 (age 32.150s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 08 58 13 81 88 ff ff ..........X.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888113199800 (size 512):
comm "syz-executor057", pid 7184, jiffies 4294955398 (age 32.150s)
hex dump (first 32 bytes):
00 00 aa aa aa aa aa 0a aa aa aa aa aa 0a 88 64 ...............d
11 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<0000000059b95d3a>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000059b95d3a>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000059b95d3a>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000059b95d3a>] kmem_cache_alloc_node_trace+0x15b/0x2a0
mm/slab.c:3597
[<00000000fb30d91c>] __do_kmalloc_node mm/slab.c:3619 [inline]
[<00000000fb30d91c>] __kmalloc_node_track_caller+0x38/0x50
mm/slab.c:3634
[<0000000021df94db>] __kmalloc_reserve.isra.0+0x40/0xb0
net/core/skbuff.c:138
[<000000003bd62b3e>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff8881130b9e00 (size 224):
comm "syz-executor057", pid 7184, jiffies 4294955399 (age 32.140s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 08 58 13 81 88 ff ff ..........X.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff8881131dcf00 (size 224):
comm "syz-executor057", pid 7192, jiffies 4294955408 (age 32.050s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 20 2d 13 81 88 ff ff ......... -.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888115942b00 (size 224):
comm "syz-executor057", pid 7184, jiffies 4294955398 (age 32.220s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 08 58 13 81 88 ff ff ..........X.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888113199800 (size 512):
comm "syz-executor057", pid 7184, jiffies 4294955398 (age 32.220s)
hex dump (first 32 bytes):
00 00 aa aa aa aa aa 0a aa aa aa aa aa 0a 88 64 ...............d
11 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<0000000059b95d3a>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000059b95d3a>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000059b95d3a>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000059b95d3a>] kmem_cache_alloc_node_trace+0x15b/0x2a0
mm/slab.c:3597
[<00000000fb30d91c>] __do_kmalloc_node mm/slab.c:3619 [inline]
[<00000000fb30d91c>] __kmalloc_node_track_caller+0x38/0x50
mm/slab.c:3634
[<0000000021df94db>] __kmalloc_reserve.isra.0+0x40/0xb0
net/core/skbuff.c:138
[<000000003bd62b3e>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff8881130b9e00 (size 224):
comm "syz-executor057", pid 7184, jiffies 4294955399 (age 32.210s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 08 58 13 81 88 ff ff ..........X.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff8881131dcf00 (size 224):
comm "syz-executor057", pid 7192, jiffies 4294955408 (age 32.120s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 20 2d 13 81 88 ff ff ......... -.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888115942b00 (size 224):
comm "syz-executor057", pid 7184, jiffies 4294955398 (age 32.290s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 08 58 13 81 88 ff ff ..........X.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888113199800 (size 512):
comm "syz-executor057", pid 7184, jiffies 4294955398 (age 32.290s)
hex dump (first 32 bytes):
00 00 aa aa aa aa aa 0a aa aa aa aa aa 0a 88 64 ...............d
11 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<0000000059b95d3a>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000059b95d3a>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000059b95d3a>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000059b95d3a>] kmem_cache_alloc_node_trace+0x15b/0x2a0
mm/slab.c:3597
[<00000000fb30d91c>] __do_kmalloc_node mm/slab.c:3619 [inline]
[<00000000fb30d91c>] __kmalloc_node_track_caller+0x38/0x50
mm/slab.c:3634
[<0000000021df94db>] __kmalloc_reserve.isra.0+0x40/0xb0
net/core/skbuff.c:138
[<000000003bd62b3e>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff8881130b9e00 (size 224):
comm "syz-executor057", pid 7184, jiffies 4294955399 (age 32.280s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 08 58 13 81 88 ff ff ..........X.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff8881131dcf00 (size 224):
comm "syz-executor057", pid 7192, jiffies 4294955408 (age 32.190s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 20 2d 13 81 88 ff ff ......... -.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888115942b00 (size 224):
comm "syz-executor057", pid 7184, jiffies 4294955398 (age 32.350s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 08 58 13 81 88 ff ff ..........X.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888113199800 (size 512):
comm "syz-executor057", pid 7184, jiffies 4294955398 (age 32.350s)
hex dump (first 32 bytes):
00 00 aa aa aa aa aa 0a aa aa aa aa aa 0a 88 64 ...............d
11 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<0000000059b95d3a>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000059b95d3a>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000059b95d3a>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000059b95d3a>] kmem_cache_alloc_node_trace+0x15b/0x2a0
mm/slab.c:3597
[<00000000fb30d91c>] __do_kmalloc_node mm/slab.c:3619 [inline]
[<00000000fb30d91c>] __kmalloc_node_track_caller+0x38/0x50
mm/slab.c:3634
[<0000000021df94db>] __kmalloc_reserve.isra.0+0x40/0xb0
net/core/skbuff.c:138
[<000000003bd62b3e>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff8881130b9e00 (size 224):
comm "syz-executor057", pid 7184, jiffies 4294955399 (age 32.340s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 08 58 13 81 88 ff ff ..........X.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff8881131dcf00 (size 224):
comm "syz-executor057", pid 7192, jiffies 4294955408 (age 32.250s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 20 2d 13 81 88 ff ff ......... -.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888115942b00 (size 224):
comm "syz-executor057", pid 7184, jiffies 4294955398 (age 32.420s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 08 58 13 81 88 ff ff ..........X.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888113199800 (size 512):
comm "syz-executor057", pid 7184, jiffies 4294955398 (age 32.420s)
hex dump (first 32 bytes):
00 00 aa aa aa aa aa 0a aa aa aa aa aa 0a 88 64 ...............d
11 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<0000000059b95d3a>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000059b95d3a>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000059b95d3a>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000059b95d3a>] kmem_cache_alloc_node_trace+0x15b/0x2a0
mm/slab.c:3597
[<00000000fb30d91c>] __do_kmalloc_node mm/slab.c:3619 [inline]
[<00000000fb30d91c>] __kmalloc_node_track_caller+0x38/0x50
mm/slab.c:3634
[<0000000021df94db>] __kmalloc_reserve.isra.0+0x40/0xb0
net/core/skbuff.c:138
[<000000003bd62b3e>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff8881130b9e00 (size 224):
comm "syz-executor057", pid 7184, jiffies 4294955399 (age 32.410s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 08 58 13 81 88 ff ff ..........X.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff8881131dcf00 (size 224):
comm "syz-executor057", pid 7192, jiffies 4294955408 (age 32.320s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 20 2d 13 81 88 ff ff ......... -.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888115942b00 (size 224):
comm "syz-executor057", pid 7184, jiffies 4294955398 (age 32.480s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 08 58 13 81 88 ff ff ..........X.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888113199800 (size 512):
comm "syz-executor057", pid 7184, jiffies 4294955398 (age 32.480s)
hex dump (first 32 bytes):
00 00 aa aa aa aa aa 0a aa aa aa aa aa 0a 88 64 ...............d
11 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<0000000059b95d3a>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000059b95d3a>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000059b95d3a>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000059b95d3a>] kmem_cache_alloc_node_trace+0x15b/0x2a0
mm/slab.c:3597
[<00000000fb30d91c>] __do_kmalloc_node mm/slab.c:3619 [inline]
[<00000000fb30d91c>] __kmalloc_node_track_caller+0x38/0x50
mm/slab.c:3634
[<0000000021df94db>] __kmalloc_reserve.isra.0+0x40/0xb0
net/core/skbuff.c:138
[<000000003bd62b3e>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff8881130b9e00 (size 224):
comm "syz-executor057", pid 7184, jiffies 4294955399 (age 32.470s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 08 58 13 81 88 ff ff ..........X.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff8881131dcf00 (size 224):
comm "syz-executor057", pid 7192, jiffies 4294955408 (age 32.380s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 20 2d 13 81 88 ff ff ......... -.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888115942b00 (size 224):
comm "syz-executor057", pid 7184, jiffies 4294955398 (age 32.550s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 08 58 13 81 88 ff ff ..........X.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888113199800 (size 512):
comm "syz-executor057", pid 7184, jiffies 4294955398 (age 32.550s)
hex dump (first 32 bytes):
00 00 aa aa aa aa aa 0a aa aa aa aa aa 0a 88 64 ...............d
11 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<0000000059b95d3a>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000059b95d3a>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000059b95d3a>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000059b95d3a>] kmem_cache_alloc_node_trace+0x15b/0x2a0
mm/slab.c:3597
[<00000000fb30d91c>] __do_kmalloc_node mm/slab.c:3619 [inline]
[<00000000fb30d91c>] __kmalloc_node_track_caller+0x38/0x50
mm/slab.c:3634
[<0000000021df94db>] __kmalloc_reserve.isra.0+0x40/0xb0
net/core/skbuff.c:138
[<000000003bd62b3e>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff8881130b9e00 (size 224):
comm "syz-executor057", pid 7184, jiffies 4294955399 (age 32.540s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 08 58 13 81 88 ff ff ..........X.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff8881131dcf00 (size 224):
comm "syz-executor057", pid 7192, jiffies 4294955408 (age 32.450s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 20 2d 13 81 88 ff ff ......... -.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888115942b00 (size 224):
comm "syz-executor057", pid 7184, jiffies 4294955398 (age 32.610s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 08 58 13 81 88 ff ff ..........X.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888113199800 (size 512):
comm "syz-executor057", pid 7184, jiffies 4294955398 (age 32.610s)
hex dump (first 32 bytes):
00 00 aa aa aa aa aa 0a aa aa aa aa aa 0a 88 64 ...............d
11 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<0000000059b95d3a>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000059b95d3a>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000059b95d3a>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000059b95d3a>] kmem_cache_alloc_node_trace+0x15b/0x2a0
mm/slab.c:3597
[<00000000fb30d91c>] __do_kmalloc_node mm/slab.c:3619 [inline]
[<00000000fb30d91c>] __kmalloc_node_track_caller+0x38/0x50
mm/slab.c:3634
[<0000000021df94db>] __kmalloc_reserve.isra.0+0x40/0xb0
net/core/skbuff.c:138
[<000000003bd62b3e>] __alloc_skb+0xa0/0x210 net/core/skbuff.c:206
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff8881130b9e00 (size 224):
comm "syz-executor057", pid 7184, jiffies 4294955399 (age 32.600s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 08 58 13 81 88 ff ff ..........X.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff8881131dcf00 (size 224):
comm "syz-executor057", pid 7192, jiffies 4294955408 (age 32.510s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 20 2d 13 81 88 ff ff ......... -.....
backtrace:
[<0000000025f85882>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<0000000025f85882>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<0000000025f85882>] slab_alloc_node mm/slab.c:3269 [inline]
[<0000000025f85882>] kmem_cache_alloc_node+0x153/0x2a0 mm/slab.c:3579
[<000000005b601dc8>] __alloc_skb+0x6e/0x210 net/core/skbuff.c:194
[<000000003813d44c>] alloc_skb include/linux/skbuff.h:1054 [inline]
[<000000003813d44c>] sock_wmalloc+0x4f/0x80 net/core/sock.c:2071
[<000000003f8b1014>] pppoe_sendmsg+0xd0/0x250
drivers/net/ppp/pppoe.c:866
[<000000003841750c>] sock_sendmsg_nosec net/socket.c:646 [inline]
[<000000003841750c>] sock_sendmsg+0x54/0x70 net/socket.c:665
[<00000000f75dab14>] ___sys_sendmsg+0x194/0x3c0 net/socket.c:2286
[<000000004ca9b6e5>] __sys_sendmmsg+0xf4/0x270 net/socket.c:2381
[<00000000e008d506>] __do_sys_sendmmsg net/socket.c:2410 [inline]
[<00000000e008d506>] __se_sys_sendmmsg net/socket.c:2407 [inline]
[<00000000e008d506>] __x64_sys_sendmmsg+0x28/0x30 net/socket.c:2407
[<00000000f738b123>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000081d80325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9


Anant Thazhemadam

unread,
Oct 16, 2020, 10:18:49 PM10/16/20
to syzkaller-bugs
Hi,

I tried to get syzbot to test this to check if the issue was still occurring.
However, the crash report that was generated (upon request)[1]  seemed to
be entirely different from the one that was initially observed [2] when syzbot
first discovered this issue.

The newly generated crash report seems to match the report for another issue[3] detected
by syzbot.
However, what's surprising is that I had previously tested  this other issue [3] using syzbot,
and syzbot said that everything checked out correctly and was OK.

I'm a little confused about what's going on here, but this isn't supposed to happen right?


Thanks,
Anant

Dmitry Vyukov

unread,
Oct 17, 2020, 10:54:17 AM10/17/20
to Anant Thazhemadam, syzkaller-bugs, syzkaller
Hi Anant,

With so many kernel bugs and hard to reproduce bugs, anything can
happen. You have seen the "Note: testing is done by a robot and is
best-effort only" disclaimer, right? :)

syzbot is doing a very simple thing:
- checks out the asked revision
- runs the existing reproducer
- provides results back to you
That's it. Everything else, including interpretation of results, is up to you.

What happened is definitely possible. I don't know if that's what
happened or not, but the results do not look inconsistent/buggy right
away. Consider:
- the reproducer for the other bug stopped reproducing it on some revision
- the reproducer for this bug can also reproduce that other bug
This would lead exactly to the result we observe here.
And/or it's possible that this or the other bug was fixed, but another
bug with similar manifestation was introduced (or was present before).
And/or it's possible that this or the other reproducer is flaky and
can reproduce both bugs with some probability.
As you can see there are lots of possibilities.

Btw, there was some discussion and some fixes proposed for this bug:
https://groups.google.com/g/syzkaller-bugs/c/oLocIDrP1bg/m/pioehZsYAQAJ
It can make sense to check if that fix was merged and then close this bug.
Closing old fixes bugs helps to reduce this mess to some degree.
Sometimes a bug stops happening but then a new bug with the same
manifestation is introduced, but they are glued into a single bug
entry. And this leads to nothing but confusion.

Anant Thazhemadam

unread,
Oct 24, 2020, 11:11:59 AM10/24/20
to syzkaller-bugs
J
On Saturday, October 17, 2020 at 8:24:17 PM UTC+5:30 Dmitry Vyukov wrote:
On Sat, Oct 17, 2020 at 4:18 AM Anant Thazhemadam
<anant.th...@gmail.com> wrote:
>
> Hi,
>
> I tried to get syzbot to test this to check if the issue was still occurring.
> However, the crash report that was generated (upon request)[1] seemed to
> be entirely different from the one that was initially observed [2] when syzbot
> first discovered this issue.
>
> The newly generated crash report seems to match the report for another issue[3] detected
> by syzbot.
> However, what's surprising is that I had previously tested this other issue [3] using syzbot,
> and syzbot said that everything checked out correctly and was OK.
>
> I'm a little confused about what's going on here, but this isn't supposed to happen right?
>
> [1] https://syzkaller.appspot.com/text?tag=CrashReport&x=17c7ce94500000
> [2] https://syzkaller.appspot.com/text?tag=CrashReport&x=11eeba8ee00000
> [3] https://syzkaller.appspot.com/bug?id=8a76ad89798ec24a9b3c03e3fe07e741725ace5a
>
> Thanks,
> Anant

Hi Anant,

With so many kernel bugs and hard to reproduce bugs, anything can
happen. You have seen the "Note: testing is done by a robot and is
best-effort only" disclaimer, right? :)


 Ah, I see. Now I properly understand what that could mean!
 
syzbot is doing a very simple thing:
- checks out the asked revision
- runs the existing reproducer
- provides results back to you
That's it. Everything else, including interpretation of results, is up to you.

What happened is definitely possible. I don't know if that's what
happened or not, but the results do not look inconsistent/buggy right
away. Consider:
- the reproducer for the other bug stopped reproducing it on some revision
- the reproducer for this bug can also reproduce that other bug
This would lead exactly to the result we observe here.
And/or it's possible that this or the other bug was fixed, but another
bug with similar manifestation was introduced (or was present before).
And/or it's possible that this or the other reproducer is flaky and
can reproduce both bugs with some probability.
As you can see there are lots of possibilities.

I understand.
 

Btw, there was some discussion and some fixes proposed for this bug:
https://groups.google.com/g/syzkaller-bugs/c/oLocIDrP1bg/m/pioehZsYAQAJ
It can make sense to check if that fix was merged and then close this bug.
Closing old fixes bugs helps to reduce this mess to some degree.
Sometimes a bug stops happening but then a new bug with the same
manifestation is introduced, but they are glued into a single bug
entry. And this leads to nothing but confusion.

I tried reproducing the bug locally, and I observed a crash that had a log matching the
crash report of the initially detected bug.
As you said, it could've been one of the possibilities that you mentioned above
that lead to this, but atleast now I know that something like this could happen too.

Thanks,
Anant
Reply all
Reply to author
Forward
0 new messages