linux-kernel - memory leak in register

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <00000000000086c2bf0598bc6bc0@google.com>
Date:   Mon, 02 Dec 2019 10:05:08 -0800
From:   syzbot <syzbot+6e13e65ffbaa33757bcb@...kaller.appspotmail.com>
To:     andy@...yhouse.net, davem@...emloft.net, j.vosburgh@...il.com,
        linux-kernel@...r.kernel.org, netdev@...r.kernel.org,
        syzkaller-bugs@...glegroups.com, vfalico@...il.com
Subject: memory leak in register_netdevice

Hello,

syzbot found the following crash on:

HEAD commit:    a6ed68d6 Merge tag 'drm-next-2019-11-27' of git://anongit...
git tree:       upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=1469ab12e00000
kernel config:  https://syzkaller.appspot.com/x/.config?x=d47416a80b409a86
dashboard link: https://syzkaller.appspot.com/bug?extid=6e13e65ffbaa33757bcb
compiler:       gcc (GCC) 9.0.0 20181231 (experimental)
syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=16cd0b12e00000
C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=16e1e536e00000

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+6e13e65ffbaa33757bcb@...kaller.appspotmail.com

executing program
executing program
executing program
executing program
executing program
BUG: memory leak
unreferenced object 0xffff88811736a900 (size 64):
   comm "syz-executor255", pid 6961, jiffies 4294941312 (age 18.230s)
   hex dump (first 32 bytes):
     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
     10 a9 36 17 81 88 ff ff 10 a9 36 17 81 88 ff ff  ..6.......6.....
   backtrace:
     [<000000000bce4d97>] kmemleak_alloc_recursive  
include/linux/kmemleak.h:43 [inline]
     [<000000000bce4d97>] slab_post_alloc_hook mm/slab.h:586 [inline]
     [<000000000bce4d97>] slab_alloc mm/slab.c:3319 [inline]
     [<000000000bce4d97>] kmem_cache_alloc_trace+0x145/0x2c0 mm/slab.c:3548
     [<000000005351be03>] kmalloc include/linux/slab.h:556 [inline]
     [<000000005351be03>] netdev_name_node_alloc+0x2a/0x70 net/core/dev.c:237
     [<00000000e51ce12a>] netdev_name_node_head_alloc net/core/dev.c:251  
[inline]
     [<00000000e51ce12a>] register_netdevice+0xaf/0x650 net/core/dev.c:9239
     [<000000001e7bad43>] bond_newlink  
drivers/net/bonding/bond_netlink.c:458 [inline]
     [<000000001e7bad43>] bond_newlink+0x41/0x80  
drivers/net/bonding/bond_netlink.c:448
     [<00000000651af2f0>] __rtnl_newlink+0x89a/0xb80  
net/core/rtnetlink.c:3303
     [<00000000360e9df5>] rtnl_newlink+0x4e/0x80 net/core/rtnetlink.c:3361
     [<00000000e011064d>] rtnetlink_rcv_msg+0x178/0x4b0  
net/core/rtnetlink.c:5422
     [<000000007efb805f>] netlink_rcv_skb+0x61/0x170  
net/netlink/af_netlink.c:2477
     [<00000000bbcbc561>] rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:5440
     [<00000000cf032e1c>] netlink_unicast_kernel  
net/netlink/af_netlink.c:1302 [inline]
     [<00000000cf032e1c>] netlink_unicast+0x223/0x310  
net/netlink/af_netlink.c:1328
     [<000000008792feaf>] netlink_sendmsg+0x29f/0x550  
net/netlink/af_netlink.c:1917
     [<00000000a2c65b59>] sock_sendmsg_nosec net/socket.c:638 [inline]
     [<00000000a2c65b59>] sock_sendmsg+0x54/0x70 net/socket.c:658
     [<000000005b5b243c>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2329
     [<000000000b7158e8>] __sys_sendmsg+0x80/0xf0 net/socket.c:2374
     [<00000000e52f982c>] __do_sys_sendmsg net/socket.c:2383 [inline]
     [<00000000e52f982c>] __se_sys_sendmsg net/socket.c:2381 [inline]
     [<00000000e52f982c>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2381
     [<00000000a4e97677>] do_syscall_64+0x73/0x220  
arch/x86/entry/common.c:294

BUG: memory leak
unreferenced object 0xffff888115549040 (size 64):
   comm "syz-executor255", pid 6968, jiffies 4294941312 (age 18.230s)
   hex dump (first 32 bytes):
     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
     50 90 54 15 81 88 ff ff 50 90 54 15 81 88 ff ff  P.T.....P.T.....
   backtrace:
     [<000000000bce4d97>] kmemleak_alloc_recursive  
include/linux/kmemleak.h:43 [inline]
     [<000000000bce4d97>] slab_post_alloc_hook mm/slab.h:586 [inline]
     [<000000000bce4d97>] slab_alloc mm/slab.c:3319 [inline]
     [<000000000bce4d97>] kmem_cache_alloc_trace+0x145/0x2c0 mm/slab.c:3548
     [<000000005351be03>] kmalloc include/linux/slab.h:556 [inline]
     [<000000005351be03>] netdev_name_node_alloc+0x2a/0x70 net/core/dev.c:237
     [<00000000e51ce12a>] netdev_name_node_head_alloc net/core/dev.c:251  
[inline]
     [<00000000e51ce12a>] register_netdevice+0xaf/0x650 net/core/dev.c:9239
     [<000000001e7bad43>] bond_newlink  
drivers/net/bonding/bond_netlink.c:458 [inline]
     [<000000001e7bad43>] bond_newlink+0x41/0x80  
drivers/net/bonding/bond_netlink.c:448
     [<00000000651af2f0>] __rtnl_newlink+0x89a/0xb80  
net/core/rtnetlink.c:3303
     [<00000000360e9df5>] rtnl_newlink+0x4e/0x80 net/core/rtnetlink.c:3361
     [<00000000e011064d>] rtnetlink_rcv_msg+0x178/0x4b0  
net/core/rtnetlink.c:5422
     [<000000007efb805f>] netlink_rcv_skb+0x61/0x170  
net/netlink/af_netlink.c:2477
     [<00000000bbcbc561>] rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:5440
     [<00000000cf032e1c>] netlink_unicast_kernel  
net/netlink/af_netlink.c:1302 [inline]
     [<00000000cf032e1c>] netlink_unicast+0x223/0x310  
net/netlink/af_netlink.c:1328
     [<000000008792feaf>] netlink_sendmsg+0x29f/0x550  
net/netlink/af_netlink.c:1917
     [<00000000a2c65b59>] sock_sendmsg_nosec net/socket.c:638 [inline]
     [<00000000a2c65b59>] sock_sendmsg+0x54/0x70 net/socket.c:658
     [<000000005b5b243c>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2329
     [<000000000b7158e8>] __sys_sendmsg+0x80/0xf0 net/socket.c:2374
     [<00000000e52f982c>] __do_sys_sendmsg net/socket.c:2383 [inline]
     [<00000000e52f982c>] __se_sys_sendmsg net/socket.c:2381 [inline]
     [<00000000e52f982c>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2381
     [<00000000a4e97677>] do_syscall_64+0x73/0x220  
arch/x86/entry/common.c:294

BUG: memory leak
unreferenced object 0xffff88811736a900 (size 64):
   comm "syz-executor255", pid 6961, jiffies 4294941312 (age 19.240s)
   hex dump (first 32 bytes):
     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
     10 a9 36 17 81 88 ff ff 10 a9 36 17 81 88 ff ff  ..6.......6.....
   backtrace:
     [<000000000bce4d97>] kmemleak_alloc_recursive  
include/linux/kmemleak.h:43 [inline]
     [<000000000bce4d97>] slab_post_alloc_hook mm/slab.h:586 [inline]
     [<000000000bce4d97>] slab_alloc mm/slab.c:3319 [inline]
     [<000000000bce4d97>] kmem_cache_alloc_trace+0x145/0x2c0 mm/slab.c:3548
     [<000000005351be03>] kmalloc include/linux/slab.h:556 [inline]
     [<000000005351be03>] netdev_name_node_alloc+0x2a/0x70 net/core/dev.c:237
     [<00000000e51ce12a>] netdev_name_node_head_alloc net/core/dev.c:251  
[inline]
     [<00000000e51ce12a>] register_netdevice+0xaf/0x650 net/core/dev.c:9239
     [<000000001e7bad43>] bond_newlink  
drivers/net/bonding/bond_netlink.c:458 [inline]
     [<000000001e7bad43>] bond_newlink+0x41/0x80  
drivers/net/bonding/bond_netlink.c:448
     [<00000000651af2f0>] __rtnl_newlink+0x89a/0xb80  
net/core/rtnetlink.c:3303
     [<00000000360e9df5>] rtnl_newlink+0x4e/0x80 net/core/rtnetlink.c:3361
     [<00000000e011064d>] rtnetlink_rcv_msg+0x178/0x4b0  
net/core/rtnetlink.c:5422
     [<000000007efb805f>] netlink_rcv_skb+0x61/0x170  
net/netlink/af_netlink.c:2477
     [<00000000bbcbc561>] rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:5440
     [<00000000cf032e1c>] netlink_unicast_kernel  
net/netlink/af_netlink.c:1302 [inline]
     [<00000000cf032e1c>] netlink_unicast+0x223/0x310  
net/netlink/af_netlink.c:1328
     [<000000008792feaf>] netlink_sendmsg+0x29f/0x550  
net/netlink/af_netlink.c:1917
     [<00000000a2c65b59>] sock_sendmsg_nosec net/socket.c:638 [inline]
     [<00000000a2c65b59>] sock_sendmsg+0x54/0x70 net/socket.c:658
     [<000000005b5b243c>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2329
     [<000000000b7158e8>] __sys_sendmsg+0x80/0xf0 net/socket.c:2374
     [<00000000e52f982c>] __do_sys_sendmsg net/socket.c:2383 [inline]
     [<00000000e52f982c>] __se_sys_sendmsg net/socket.c:2381 [inline]
     [<00000000e52f982c>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2381
     [<00000000a4e97677>] do_syscall_64+0x73/0x220  
arch/x86/entry/common.c:294

BUG: memory leak
unreferenced object 0xffff888115549040 (size 64):
   comm "syz-executor255", pid 6968, jiffies 4294941312 (age 19.240s)
   hex dump (first 32 bytes):
     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
     50 90 54 15 81 88 ff ff 50 90 54 15 81 88 ff ff  P.T.....P.T.....
   backtrace:
     [<000000000bce4d97>] kmemleak_alloc_recursive  
include/linux/kmemleak.h:43 [inline]
     [<000000000bce4d97>] slab_post_alloc_hook mm/slab.h:586 [inline]
     [<000000000bce4d97>] slab_alloc mm/slab.c:3319 [inline]
     [<000000000bce4d97>] kmem_cache_alloc_trace+0x145/0x2c0 mm/slab.c:3548
     [<000000005351be03>] kmalloc include/linux/slab.h:556 [inline]
     [<000000005351be03>] netdev_name_node_alloc+0x2a/0x70 net/core/dev.c:237
     [<00000000e51ce12a>] netdev_name_node_head_alloc net/core/dev.c:251  
[inline]
     [<00000000e51ce12a>] register_netdevice+0xaf/0x650 net/core/dev.c:9239
     [<000000001e7bad43>] bond_newlink  
drivers/net/bonding/bond_netlink.c:458 [inline]
     [<000000001e7bad43>] bond_newlink+0x41/0x80  
drivers/net/bonding/bond_netlink.c:448
     [<00000000651af2f0>] __rtnl_newlink+0x89a/0xb80  
net/core/rtnetlink.c:3303
     [<00000000360e9df5>] rtnl_newlink+0x4e/0x80 net/core/rtnetlink.c:3361
     [<00000000e011064d>] rtnetlink_rcv_msg+0x178/0x4b0  
net/core/rtnetlink.c:5422
     [<000000007efb805f>] netlink_rcv_skb+0x61/0x170  
net/netlink/af_netlink.c:2477
     [<00000000bbcbc561>] rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:5440
     [<00000000cf032e1c>] netlink_unicast_kernel  
net/netlink/af_netlink.c:1302 [inline]
     [<00000000cf032e1c>] netlink_unicast+0x223/0x310  
net/netlink/af_netlink.c:1328
     [<000000008792feaf>] netlink_sendmsg+0x29f/0x550  
net/netlink/af_netlink.c:1917
     [<00000000a2c65b59>] sock_sendmsg_nosec net/socket.c:638 [inline]
     [<00000000a2c65b59>] sock_sendmsg+0x54/0x70 net/socket.c:658
     [<000000005b5b243c>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2329
     [<000000000b7158e8>] __sys_sendmsg+0x80/0xf0 net/socket.c:2374
     [<00000000e52f982c>] __do_sys_sendmsg net/socket.c:2383 [inline]
     [<00000000e52f982c>] __se_sys_sendmsg net/socket.c:2381 [inline]
     [<00000000e52f982c>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2381
     [<00000000a4e97677>] do_syscall_64+0x73/0x220  
arch/x86/entry/common.c:294

BUG: memory leak
unreferenced object 0xffff88811736a900 (size 64):
   comm "syz-executor255", pid 6961, jiffies 4294941312 (age 21.120s)
   hex dump (first 32 bytes):
     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
     10 a9 36 17 81 88 ff ff 10 a9 36 17 81 88 ff ff  ..6.......6.....
   backtrace:
     [<000000000bce4d97>] kmemleak_alloc_recursive  
include/linux/kmemleak.h:43 [inline]
     [<000000000bce4d97>] slab_post_alloc_hook mm/slab.h:586 [inline]
     [<000000000bce4d97>] slab_alloc mm/slab.c:3319 [inline]
     [<000000000bce4d97>] kmem_cache_alloc_trace+0x145/0x2c0 mm/slab.c:3548
     [<000000005351be03>] kmalloc include/linux/slab.h:556 [inline]
     [<000000005351be03>] netdev_name_node_alloc+0x2a/0x70 net/core/dev.c:237
     [<00000000e51ce12a>] netdev_name_node_head_alloc net/core/dev.c:251  
[inline]
     [<00000000e51ce12a>] register_netdevice+0xaf/0x650 net/core/dev.c:9239
     [<000000001e7bad43>] bond_newlink  
drivers/net/bonding/bond_netlink.c:458 [inline]
     [<000000001e7bad43>] bond_newlink+0x41/0x80  
drivers/net/bonding/bond_netlink.c:448
     [<00000000651af2f0>] __rtnl_newlink+0x89a/0xb80  
net/core/rtnetlink.c:3303
     [<00000000360e9df5>] rtnl_newlink+0x4e/0x80 net/core/rtnetlink.c:3361
     [<00000000e011064d>] rtnetlink_rcv_msg+0x178/0x4b0  
net/core/rtnetlink.c:5422
     [<000000007efb805f>] netlink_rcv_skb+0x61/0x170  
net/netlink/af_netlink.c:2477
     [<00000000bbcbc561>] rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:5440
     [<00000000cf032e1c>] netlink_unicast_kernel  
net/netlink/af_netlink.c:1302 [inline]
     [<00000000cf032e1c>] netlink_unicast+0x223/0x310  
net/netlink/af_netlink.c:1328
     [<000000008792feaf>] netlink_sendmsg+0x29f/0x550  
net/netlink/af_netlink.c:1917
     [<00000000a2c65b59>] sock_sendmsg_nosec net/socket.c:638 [inline]
     [<00000000a2c65b59>] sock_sendmsg+0x54/0x70 net/socket.c:658
     [<000000005b5b243c>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2329
     [<000000000b7158e8>] __sys_sendmsg+0x80/0xf0 net/socket.c:2374
     [<00000000e52f982c>] __do_sys_sendmsg net/socket.c:2383 [inline]
     [<00000000e52f982c>] __se_sys_sendmsg net/socket.c:2381 [inline]
     [<00000000e52f982c>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2381
     [<00000000a4e97677>] do_syscall_64+0x73/0x220  
arch/x86/entry/common.c:294

BUG: memory leak
unreferenced object 0xffff888115549040 (size 64):
   comm "syz-executor255", pid 6968, jiffies 4294941312 (age 21.120s)
   hex dump (first 32 bytes):
     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
     50 90 54 15 81 88 ff ff 50 90 54 15 81 88 ff ff  P.T.....P.T.....
   backtrace:
     [<000000000bce4d97>] kmemleak_alloc_recursive  
include/linux/kmemleak.h:43 [inline]
     [<000000000bce4d97>] slab_post_alloc_hook mm/slab.h:586 [inline]
     [<000000000bce4d97>] slab_alloc mm/slab.c:3319 [inline]
     [<000000000bce4d97>] kmem_cache_alloc_trace+0x145/0x2c0 mm/slab.c:3548
     [<000000005351be03>] kmalloc include/linux/slab.h:556 [inline]
     [<000000005351be03>] netdev_name_node_alloc+0x2a/0x70 net/core/dev.c:237
     [<00000000e51ce12a>] netdev_name_node_head_alloc net/core/dev.c:251  
[inline]
     [<00000000e51ce12a>] register_netdevice+0xaf/0x650 net/core/dev.c:9239
     [<000000001e7bad43>] bond_newlink  
drivers/net/bonding/bond_netlink.c:458 [inline]
     [<000000001e7bad43>] bond_newlink+0x41/0x80  
drivers/net/bonding/bond_netlink.c:448
     [<00000000651af2f0>] __rtnl_newlink+0x89a/0xb80  
net/core/rtnetlink.c:3303
     [<00000000360e9df5>] rtnl_newlink+0x4e/0x80 net/core/rtnetlink.c:3361
     [<00000000e011064d>] rtnetlink_rcv_msg+0x178/0x4b0  
net/core/rtnetlink.c:5422
     [<000000007efb805f>] netlink_rcv_skb+0x61/0x170  
net/netlink/af_netlink.c:2477
     [<00000000bbcbc561>] rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:5440
     [<00000000cf032e1c>] netlink_unicast_kernel  
net/netlink/af_netlink.c:1302 [inline]
     [<00000000cf032e1c>] netlink_unicast+0x223/0x310  
net/netlink/af_netlink.c:1328
     [<000000008792feaf>] netlink_sendmsg+0x29f/0x550  
net/netlink/af_netlink.c:1917
     [<00000000a2c65b59>] sock_sendmsg_nosec net/socket.c:638 [inline]
     [<00000000a2c65b59>] sock_sendmsg+0x54/0x70 net/socket.c:658
     [<000000005b5b243c>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2329
     [<000000000b7158e8>] __sys_sendmsg+0x80/0xf0 net/socket.c:2374
     [<00000000e52f982c>] __do_sys_sendmsg net/socket.c:2383 [inline]
     [<00000000e52f982c>] __se_sys_sendmsg net/socket.c:2381 [inline]
     [<00000000e52f982c>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2381
     [<00000000a4e97677>] do_syscall_64+0x73/0x220  
arch/x86/entry/common.c:294

BUG: memory leak
unreferenced object 0xffff88811736a900 (size 64):
   comm "syz-executor255", pid 6961, jiffies 4294941312 (age 22.100s)
   hex dump (first 32 bytes):
     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
     10 a9 36 17 81 88 ff ff 10 a9 36 17 81 88 ff ff  ..6.......6.....
   backtrace:
     [<000000000bce4d97>] kmemleak_alloc_recursive  
include/linux/kmemleak.h:43 [inline]
     [<000000000bce4d97>] slab_post_alloc_hook mm/slab.h:586 [inline]
     [<000000000bce4d97>] slab_alloc mm/slab.c:3319 [inline]
     [<000000000bce4d97>] kmem_cache_alloc_trace+0x145/0x2c0 mm/slab.c:3548
     [<000000005351be03>] kmalloc include/linux/slab.h:556 [inline]
     [<000000005351be03>] netdev_name_node_alloc+0x2a/0x70 net/core/dev.c:237
     [<00000000e51ce12a>] netdev_name_node_head_alloc net/core/dev.c:251  
[inline]
     [<00000000e51ce12a>] register_netdevice+0xaf/0x650 net/core/dev.c:9239
     [<000000001e7bad43>] bond_newlink  
drivers/net/bonding/bond_netlink.c:458 [inline]
     [<000000001e7bad43>] bond_newlink+0x41/0x80  
drivers/net/bonding/bond_netlink.c:448
     [<00000000651af2f0>] __rtnl_newlink+0x89a/0xb80  
net/core/rtnetlink.c:3303
     [<00000000360e9df5>] rtnl_newlink+0x4e/0x80 net/core/rtnetlink.c:3361
     [<00000000e011064d>] rtnetlink_rcv_msg+0x178/0x4b0  
net/core/rtnetlink.c:5422
     [<000000007efb805f>] netlink_rcv_skb+0x61/0x170  
net/netlink/af_netlink.c:2477
     [<00000000bbcbc561>] rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:5440
     [<00000000cf032e1c>] netlink_unicast_kernel  
net/netlink/af_netlink.c:1302 [inline]
     [<00000000cf032e1c>] netlink_unicast+0x223/0x310  
net/netlink/af_netlink.c:1328
     [<000000008792feaf>] netlink_sendmsg+0x29f/0x550  
net/netlink/af_netlink.c:1917
     [<00000000a2c65b59>] sock_sendmsg_nosec net/socket.c:638 [inline]
     [<00000000a2c65b59>] sock_sendmsg+0x54/0x70 net/socket.c:658
     [<000000005b5b243c>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2329
     [<000000000b7158e8>] __sys_sendmsg+0x80/0xf0 net/socket.c:2374
     [<00000000e52f982c>] __do_sys_sendmsg net/socket.c:2383 [inline]
     [<00000000e52f982c>] __se_sys_sendmsg net/socket.c:2381 [inline]
     [<00000000e52f982c>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2381
     [<00000000a4e97677>] do_syscall_64+0x73/0x220  
arch/x86/entry/common.c:294

BUG: memory leak
unreferenced object 0xffff888115549040 (size 64):
   comm "syz-executor255", pid 6968, jiffies 4294941312 (age 22.100s)
   hex dump (first 32 bytes):
     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
     50 90 54 15 81 88 ff ff 50 90 54 15 81 88 ff ff  P.T.....P.T.....
   backtrace:
     [<000000000bce4d97>] kmemleak_alloc_recursive  
include/linux/kmemleak.h:43 [inline]
     [<000000000bce4d97>] slab_post_alloc_hook mm/slab.h:586 [inline]
     [<000000000bce4d97>] slab_alloc mm/slab.c:3319 [inline]
     [<000000000bce4d97>] kmem_cache_alloc_trace+0x145/0x2c0 mm/slab.c:3548
     [<000000005351be03>] kmalloc include/linux/slab.h:556 [inline]
     [<000000005351be03>] netdev_name_node_alloc+0x2a/0x70 net/core/dev.c:237
     [<00000000e51ce12a>] netdev_name_node_head_alloc net/core/dev.c:251  
[inline]
     [<00000000e51ce12a>] register_netdevice+0xaf/0x650 net/core/dev.c:9239
     [<000000001e7bad43>] bond_newlink  
drivers/net/bonding/bond_netlink.c:458 [inline]
     [<000000001e7bad43>] bond_newlink+0x41/0x80  
drivers/net/bonding/bond_netlink.c:448
     [<00000000651af2f0>] __rtnl_newlink+0x89a/0xb80  
net/core/rtnetlink.c:3303
     [<00000000360e9df5>] rtnl_newlink+0x4e/0x80 net/core/rtnetlink.c:3361
     [<00000000e011064d>] rtnetlink_rcv_msg+0x178/0x4b0  
net/core/rtnetlink.c:5422
     [<000000007efb805f>] netlink_rcv_skb+0x61/0x170  
net/netlink/af_netlink.c:2477
     [<00000000bbcbc561>] rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:5440
     [<00000000cf032e1c>] netlink_unicast_kernel  
net/netlink/af_netlink.c:1302 [inline]
     [<00000000cf032e1c>] netlink_unicast+0x223/0x310  
net/netlink/af_netlink.c:1328
     [<000000008792feaf>] netlink_sendmsg+0x29f/0x550  
net/netlink/af_netlink.c:1917
     [<00000000a2c65b59>] sock_sendmsg_nosec net/socket.c:638 [inline]
     [<00000000a2c65b59>] sock_sendmsg+0x54/0x70 net/socket.c:658
     [<000000005b5b243c>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2329
     [<000000000b7158e8>] __sys_sendmsg+0x80/0xf0 net/socket.c:2374
     [<00000000e52f982c>] __do_sys_sendmsg net/socket.c:2383 [inline]
     [<00000000e52f982c>] __se_sys_sendmsg net/socket.c:2381 [inline]
     [<00000000e52f982c>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2381
     [<00000000a4e97677>] do_syscall_64+0x73/0x220  
arch/x86/entry/common.c:294

BUG: memory leak
unreferenced object 0xffff88811736a900 (size 64):
   comm "syz-executor255", pid 6961, jiffies 4294941312 (age 23.060s)
   hex dump (first 32 bytes):
     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
     10 a9 36 17 81 88 ff ff 10 a9 36 17 81 88 ff ff  ..6.......6.....
   backtrace:
     [<000000000bce4d97>] kmemleak_alloc_recursive  
include/linux/kmemleak.h:43 [inline]
     [<000000000bce4d97>] slab_post_alloc_hook mm/slab.h:586 [inline]
     [<000000000bce4d97>] slab_alloc mm/slab.c:3319 [inline]
     [<000000000bce4d97>] kmem_cache_alloc_trace+0x145/0x2c0 mm/slab.c:3548
     [<000000005351be03>] kmalloc include/linux/slab.h:556 [inline]
     [<000000005351be03>] netdev_name_node_alloc+0x2a/0x70 net/core/dev.c:237
     [<00000000e51ce12a>] netdev_name_node_head_alloc net/core/dev.c:251  
[inline]
     [<00000000e51ce12a>] register_netdevice+0xaf/0x650 net/core/dev.c:9239
     [<000000001e7bad43>] bond_newlink  
drivers/net/bonding/bond_netlink.c:458 [inline]
     [<000000001e7bad43>] bond_newlink+0x41/0x80  
drivers/net/bonding/bond_netlink.c:448
     [<00000000651af2f0>] __rtnl_newlink+0x89a/0xb80  
net/core/rtnetlink.c:3303
     [<00000000360e9df5>] rtnl_newlink+0x4e/0x80 net/core/rtnetlink.c:3361
     [<00000000e011064d>] rtnetlink_rcv_msg+0x178/0x4b0  
net/core/rtnetlink.c:5422
     [<000000007efb805f>] netlink_rcv_skb+0x61/0x170  
net/netlink/af_netlink.c:2477
     [<00000000bbcbc561>] rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:5440
     [<00000000cf032e1c>] netlink_unicast_kernel  
net/netlink/af_netlink.c:1302 [inline]
     [<00000000cf032e1c>] netlink_unicast+0x223/0x310  
net/netlink/af_netlink.c:1328
     [<000000008792feaf>] netlink_sendmsg+0x29f/0x550  
net/netlink/af_netlink.c:1917
     [<00000000a2c65b59>] sock_sendmsg_nosec net/socket.c:638 [inline]
     [<00000000a2c65b59>] sock_sendmsg+0x54/0x70 net/socket.c:658
     [<000000005b5b243c>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2329
     [<000000000b7158e8>] __sys_sendmsg+0x80/0xf0 net/socket.c:2374
     [<00000000e52f982c>] __do_sys_sendmsg net/socket.c:2383 [inline]
     [<00000000e52f982c>] __se_sys_sendmsg net/socket.c:2381 [inline]
     [<00000000e52f982c>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2381
     [<00000000a4e97677>] do_syscall_64+0x73/0x220  
arch/x86/entry/common.c:294

BUG: memory leak
unreferenced object 0xffff888115549040 (size 64):
   comm "syz-executor255", pid 6968, jiffies 4294941312 (age 23.060s)
   hex dump (first 32 bytes):
     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
     50 90 54 15 81 88 ff ff 50 90 54 15 81 88 ff ff  P.T.....P.T.....
   backtrace:
     [<000000000bce4d97>] kmemleak_alloc_recursive  
include/linux/kmemleak.h:43 [inline]
     [<000000000bce4d97>] slab_post_alloc_hook mm/slab.h:586 [inline]
     [<000000000bce4d97>] slab_alloc mm/slab.c:3319 [inline]
     [<000000000bce4d97>] kmem_cache_alloc_trace+0x145/0x2c0 mm/slab.c:3548
     [<000000005351be03>] kmalloc include/linux/slab.h:556 [inline]
     [<000000005351be03>] netdev_name_node_alloc+0x2a/0x70 net/core/dev.c:237
     [<00000000e51ce12a>] netdev_name_node_head_alloc net/core/dev.c:251  
[inline]
     [<00000000e51ce12a>] register_netdevice+0xaf/0x650 net/core/dev.c:9239
     [<000000001e7bad43>] bond_newlink  
drivers/net/bonding/bond_netlink.c:458 [inline]
     [<000000001e7bad43>] bond_newlink+0x41/0x80  
drivers/net/bonding/bond_netlink.c:448
     [<00000000651af2f0>] __rtnl_newlink+0x89a/0xb80  
net/core/rtnetlink.c:3303
     [<00000000360e9df5>] rtnl_newlink+0x4e/0x80 net/core/rtnetlink.c:3361
     [<00000000e011064d>] rtnetlink_rcv_msg+0x178/0x4b0  
net/core/rtnetlink.c:5422
     [<000000007efb805f>] netlink_rcv_skb+0x61/0x170  
net/netlink/af_netlink.c:2477
     [<00000000bbcbc561>] rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:5440
     [<00000000cf032e1c>] netlink_unicast_kernel  
net/netlink/af_netlink.c:1302 [inline]
     [<00000000cf032e1c>] netlink_unicast+0x223/0x310  
net/netlink/af_netlink.c:1328
     [<000000008792feaf>] netlink_sendmsg+0x29f/0x550  
net/netlink/af_netlink.c:1917
     [<00000000a2c65b59>] sock_sendmsg_nosec net/socket.c:638 [inline]
     [<00000000a2c65b59>] sock_sendmsg+0x54/0x70 net/socket.c:658
     [<000000005b5b243c>] ___sys_sendmsg+0x393/0x3c0 net/socket.c:2329
     [<000000000b7158e8>] __sys_sendmsg+0x80/0xf0 net/socket.c:2374
     [<00000000e52f982c>] __do_sys_sendmsg net/socket.c:2383 [inline]
     [<00000000e52f982c>] __se_sys_sendmsg net/socket.c:2381 [inline]
     [<00000000e52f982c>] __x64_sys_sendmsg+0x23/0x30 net/socket.c:2381
     [<00000000a4e97677>] do_syscall_64+0x73/0x220  
arch/x86/entry/common.c:294

executing program
executing program
executing program


---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@...glegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this bug, for details see:
https://goo.gl/tpsmEJ#testing-patches