recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/154, 0x9a, 0x22, &(0x7f0000000040)=@caif=@util={0x25, "31d46fadb982e1c42aeac9a1cd821f43"}, 0x80) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) BUG: memory leak unreferenced object 0xffff88801cf3c000 (size 4096): comm "softirq", pid 0, jiffies 4294754714 (age 209.490s) hex dump (first 32 bytes): 00 01 00 00 00 00 ad de 22 01 00 00 00 00 ad de ........"....... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<0000000084469585>] kmalloc include/linux/slab.h:557 [inline] [<0000000084469585>] kzalloc include/linux/slab.h:664 [inline] [<0000000084469585>] sta_info_alloc+0xaa/0x1a70 net/mac80211/sta_info.c:344 [<000000006de63191>] ieee80211_ibss_rx_no_sta+0x359/0x790 net/mac80211/ibss.c:1239 [<00000000ad8575d1>] ieee80211_accept_frame net/mac80211/rx.c:4082 [inline] [<00000000ad8575d1>] ieee80211_prepare_and_rx_handle+0x21b5/0x57e0 net/mac80211/rx.c:4585 [<00000000d10b5a39>] __ieee80211_rx_handle_packet net/mac80211/rx.c:4662 [inline] [<00000000d10b5a39>] ieee80211_rx_list+0xde2/0x2350 net/mac80211/rx.c:4842 [<000000009a68493c>] ieee80211_rx_napi+0xdd/0x380 net/mac80211/rx.c:4863 [<00000000ad865918>] ieee80211_rx include/net/mac80211.h:4502 [inline] [<00000000ad865918>] ieee80211_tasklet_handler+0xd3/0x130 net/mac80211/main.c:235 [<0000000045b3795d>] tasklet_action_common.constprop.0+0x240/0x2f0 kernel/softirq.c:560 [<000000001125f91e>] __do_softirq+0x1b6/0x86a kernel/softirq.c:298 [<00000000fcdb066e>] asm_call_irq_on_stack+0x12/0x20 [<000000004f5fb37e>] __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline] [<000000004f5fb37e>] run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline] [<000000004f5fb37e>] do_softirq_own_stack+0x80/0xa0 arch/x86/kernel/irq_64.c:77 [<00000000601c91af>] invoke_softirq kernel/softirq.c:393 [inline] [<00000000601c91af>] __irq_exit_rcu kernel/softirq.c:423 [inline] [<00000000601c91af>] irq_exit_rcu+0x110/0x1a0 kernel/softirq.c:435 [<00000000af620db0>] sysvec_apic_timer_interrupt+0x43/0xa0 arch/x86/kernel/apic/apic.c:1095 [<00000000cd20a3e8>] asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:635 [<00000000a5c19ee8>] native_restore_fl arch/x86/include/asm/irqflags.h:41 [inline] [<00000000a5c19ee8>] arch_local_irq_restore arch/x86/include/asm/irqflags.h:84 [inline] [<00000000a5c19ee8>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] [<00000000a5c19ee8>] _raw_spin_unlock_irqrestore+0x25/0x40 kernel/locking/spinlock.c:191 [<00000000fe67b8f5>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline] [<00000000fe67b8f5>] slab_post_alloc_hook mm/slab.h:534 [inline] [<00000000fe67b8f5>] slab_alloc_node mm/slub.c:2889 [inline] [<00000000fe67b8f5>] kmem_cache_alloc_node+0x16b/0x360 mm/slub.c:2925 [<0000000062a93d38>] __alloc_skb+0x6d/0x620 net/core/skbuff.c:198 BUG: memory leak unreferenced object 0xffff888041720000 (size 10520): comm "softirq", pid 0, jiffies 4294754714 (age 209.491s) hex dump (first 32 bytes): 48 ce f3 1c 80 88 ff ff 9c c1 fc ff 00 00 00 00 H............... da 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000fb154afa>] kmalloc_order_trace+0x14/0xf0 mm/slab_common.c:851 [<0000000051ac5999>] kmalloc_large include/linux/slab.h:481 [inline] [<0000000051ac5999>] kmalloc include/linux/slab.h:545 [inline] [<0000000051ac5999>] kzalloc include/linux/slab.h:664 [inline] [<0000000051ac5999>] minstrel_ht_alloc_sta+0x100/0x250 net/mac80211/rc80211_minstrel_ht.c:1576 [<00000000dc1167ed>] rate_control_alloc_sta net/mac80211/rate.h:41 [inline] [<00000000dc1167ed>] sta_prepare_rate_control net/mac80211/sta_info.c:328 [inline] [<00000000dc1167ed>] sta_info_alloc+0x108b/0x1a70 net/mac80211/sta_info.c:425 [<000000006de63191>] ieee80211_ibss_rx_no_sta+0x359/0x790 net/mac80211/ibss.c:1239 [<00000000ad8575d1>] ieee80211_accept_frame net/mac80211/rx.c:4082 [inline] [<00000000ad8575d1>] ieee80211_prepare_and_rx_handle+0x21b5/0x57e0 net/mac80211/rx.c:4585 [<00000000d10b5a39>] __ieee80211_rx_handle_packet net/mac80211/rx.c:4662 [inline] [<00000000d10b5a39>] ieee80211_rx_list+0xde2/0x2350 net/mac80211/rx.c:4842 [<000000009a68493c>] ieee80211_rx_napi+0xdd/0x380 net/mac80211/rx.c:4863 [<00000000ad865918>] ieee80211_rx include/net/mac80211.h:4502 [inline] [<00000000ad865918>] ieee80211_tasklet_handler+0xd3/0x130 net/mac80211/main.c:235 [<0000000045b3795d>] tasklet_action_common.constprop.0+0x240/0x2f0 kernel/softirq.c:560 [<000000001125f91e>] __do_softirq+0x1b6/0x86a kernel/softirq.c:298 [<00000000fcdb066e>] asm_call_irq_on_stack+0x12/0x20 [<000000004f5fb37e>] __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline] [<000000004f5fb37e>] run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline] [<000000004f5fb37e>] do_softirq_own_stack+0x80/0xa0 arch/x86/kernel/irq_64.c:77 [<00000000601c91af>] invoke_softirq kernel/softirq.c:393 [inline] [<00000000601c91af>] __irq_exit_rcu kernel/softirq.c:423 [inline] [<00000000601c91af>] irq_exit_rcu+0x110/0x1a0 kernel/softirq.c:435 [<00000000af620db0>] sysvec_apic_timer_interrupt+0x43/0xa0 arch/x86/kernel/apic/apic.c:1095 [<00000000cd20a3e8>] asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:635 [<00000000a5c19ee8>] native_restore_fl arch/x86/include/asm/irqflags.h:41 [inline] [<00000000a5c19ee8>] arch_local_irq_restore arch/x86/include/asm/irqflags.h:84 [inline] [<00000000a5c19ee8>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] [<00000000a5c19ee8>] _raw_spin_unlock_irqrestore+0x25/0x40 kernel/locking/spinlock.c:191 BUG: memory leak unreferenced object 0xffff88800863e000 (size 1024): comm "softirq", pid 0, jiffies 4294754714 (age 209.491s) hex dump (first 32 bytes): 02 00 00 00 00 01 01 00 0a 26 00 00 da 00 00 00 .........&...... ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000488070d9>] kmalloc_array include/linux/slab.h:592 [inline] [<00000000488070d9>] kcalloc include/linux/slab.h:603 [inline] [<00000000488070d9>] minstrel_ht_alloc_sta+0x12e/0x250 net/mac80211/rc80211_minstrel_ht.c:1580 [<00000000dc1167ed>] rate_control_alloc_sta net/mac80211/rate.h:41 [inline] [<00000000dc1167ed>] sta_prepare_rate_control net/mac80211/sta_info.c:328 [inline] [<00000000dc1167ed>] sta_info_alloc+0x108b/0x1a70 net/mac80211/sta_info.c:425 [<000000006de63191>] ieee80211_ibss_rx_no_sta+0x359/0x790 net/mac80211/ibss.c:1239 [<00000000ad8575d1>] ieee80211_accept_frame net/mac80211/rx.c:4082 [inline] [<00000000ad8575d1>] ieee80211_prepare_and_rx_handle+0x21b5/0x57e0 net/mac80211/rx.c:4585 [<00000000d10b5a39>] __ieee80211_rx_handle_packet net/mac80211/rx.c:4662 [inline] [<00000000d10b5a39>] ieee80211_rx_list+0xde2/0x2350 net/mac80211/rx.c:4842 [<000000009a68493c>] ieee80211_rx_napi+0xdd/0x380 net/mac80211/rx.c:4863 [<00000000ad865918>] ieee80211_rx include/net/mac80211.h:4502 [inline] [<00000000ad865918>] ieee80211_tasklet_handler+0xd3/0x130 net/mac80211/main.c:235 [<0000000045b3795d>] tasklet_action_common.constprop.0+0x240/0x2f0 kernel/softirq.c:560 [<000000001125f91e>] __do_softirq+0x1b6/0x86a kernel/softirq.c:298 [<00000000fcdb066e>] asm_call_irq_on_stack+0x12/0x20 [<000000004f5fb37e>] __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline] [<000000004f5fb37e>] run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline] [<000000004f5fb37e>] do_softirq_own_stack+0x80/0xa0 arch/x86/kernel/irq_64.c:77 [<00000000601c91af>] invoke_softirq kernel/softirq.c:393 [inline] [<00000000601c91af>] __irq_exit_rcu kernel/softirq.c:423 [inline] [<00000000601c91af>] irq_exit_rcu+0x110/0x1a0 kernel/softirq.c:435 [<00000000af620db0>] sysvec_apic_timer_interrupt+0x43/0xa0 arch/x86/kernel/apic/apic.c:1095 [<00000000cd20a3e8>] asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:635 [<00000000a5c19ee8>] native_restore_fl arch/x86/include/asm/irqflags.h:41 [inline] [<00000000a5c19ee8>] arch_local_irq_restore arch/x86/include/asm/irqflags.h:84 [inline] [<00000000a5c19ee8>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] [<00000000a5c19ee8>] _raw_spin_unlock_irqrestore+0x25/0x40 kernel/locking/spinlock.c:191 [<00000000fe67b8f5>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline] [<00000000fe67b8f5>] slab_post_alloc_hook mm/slab.h:534 [inline] [<00000000fe67b8f5>] slab_alloc_node mm/slub.c:2889 [inline] [<00000000fe67b8f5>] kmem_cache_alloc_node+0x16b/0x360 mm/slub.c:2925 BUG: leak checking failed