openat(r4, &(0x7f0000000180)='./file1\x00', 0x6281, 0x24) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f00000000c0)=0xff) BUG: memory leak unreferenced object 0xffff88804b802000 (size 4096): comm "syz-executor.6", pid 6341, jiffies 4295396333 (age 774.488s) hex dump (first 32 bytes): 00 c0 a0 1c 80 88 ff ff 22 01 00 00 00 00 ad de ........"....... 01 00 00 00 aa aa aa aa aa 00 00 aa aa aa aa aa ................ backtrace: [<00000000b08b9228>] kmalloc include/linux/slab.h:552 [inline] [<00000000b08b9228>] kzalloc include/linux/slab.h:664 [inline] [<00000000b08b9228>] hci_conn_add+0x53/0x1260 net/bluetooth/hci_conn.c:525 [<0000000047459eb6>] hci_connect_sco+0x34e/0x870 net/bluetooth/hci_conn.c:1283 [<00000000abeacbb3>] sco_connect net/bluetooth/sco.c:254 [inline] [<00000000abeacbb3>] sco_sock_connect+0x309/0xa50 net/bluetooth/sco.c:594 [<00000000db7aa5ca>] __sys_connect_file+0x157/0x1a0 net/socket.c:1841 [<00000000e9ccb22d>] __sys_connect+0x161/0x190 net/socket.c:1858 [<000000002bbd1406>] __do_sys_connect net/socket.c:1868 [inline] [<000000002bbd1406>] __se_sys_connect net/socket.c:1865 [inline] [<000000002bbd1406>] __x64_sys_connect+0x6f/0xb0 net/socket.c:1865 [<00000000a357b081>] do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 [<0000000065f3b0ec>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff888045b58b40 (size 224): comm "syz-executor.0", pid 8529, jiffies 4295944442 (age 226.399s) hex dump (first 32 bytes): 68 09 b5 17 80 88 ff ff 68 09 b5 17 80 88 ff ff h.......h....... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<000000005776d331>] __alloc_skb+0x6d/0x620 net/core/skbuff.c:198 [<000000007202e47f>] alloc_skb include/linux/skbuff.h:1094 [inline] [<000000007202e47f>] bt_skb_alloc include/net/bluetooth/bluetooth.h:389 [inline] [<000000007202e47f>] vhci_get_user drivers/bluetooth/hci_vhci.c:167 [inline] [<000000007202e47f>] vhci_write+0xbd/0x450 drivers/bluetooth/hci_vhci.c:287 [<000000003de92336>] call_write_iter include/linux/fs.h:1903 [inline] [<000000003de92336>] new_sync_write+0x42c/0x660 fs/read_write.c:518 [<000000002a948e22>] vfs_write+0x743/0xa20 fs/read_write.c:605 [<00000000a2e5cdae>] ksys_write+0x12d/0x250 fs/read_write.c:658 [<00000000a357b081>] do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 [<0000000065f3b0ec>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff88801e7b8c00 (size 512): comm "syz-executor.0", pid 8529, jiffies 4295944442 (age 226.399s) hex dump (first 32 bytes): 00 8a b5 45 80 88 ff ff 02 00 00 04 00 00 00 01 ...E............ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000b787b468>] __kmalloc_reserve net/core/skbuff.c:142 [inline] [<00000000b787b468>] __alloc_skb+0xb1/0x620 net/core/skbuff.c:210 [<000000007202e47f>] alloc_skb include/linux/skbuff.h:1094 [inline] [<000000007202e47f>] bt_skb_alloc include/net/bluetooth/bluetooth.h:389 [inline] [<000000007202e47f>] vhci_get_user drivers/bluetooth/hci_vhci.c:167 [inline] [<000000007202e47f>] vhci_write+0xbd/0x450 drivers/bluetooth/hci_vhci.c:287 [<000000003de92336>] call_write_iter include/linux/fs.h:1903 [inline] [<000000003de92336>] new_sync_write+0x42c/0x660 fs/read_write.c:518 [<000000002a948e22>] vfs_write+0x743/0xa20 fs/read_write.c:605 [<00000000a2e5cdae>] ksys_write+0x12d/0x250 fs/read_write.c:658 [<00000000a357b081>] do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 [<0000000065f3b0ec>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff888017b50800 (size 1024): comm "kworker/u5:8", pid 310, jiffies 4295944442 (age 226.399s) hex dump (first 32 bytes): 00 20 80 4b 80 88 ff ff 00 ca d3 45 80 88 ff ff . .K.......E.... fd 03 00 00 00 00 00 00 00 06 00 00 00 00 00 00 ................ backtrace: [<000000006e5715f7>] kmalloc include/linux/slab.h:552 [inline] [<000000006e5715f7>] kzalloc include/linux/slab.h:664 [inline] [<000000006e5715f7>] l2cap_conn_add.part.0+0x64/0xdf0 net/bluetooth/l2cap_core.c:7707 [<000000005fef0821>] l2cap_conn_add net/bluetooth/l2cap_core.c:7700 [inline] [<000000005fef0821>] l2cap_recv_acldata+0x578/0x8e0 net/bluetooth/l2cap_core.c:8288 [<0000000011b17f28>] hci_acldata_packet net/bluetooth/hci_core.c:4759 [inline] [<0000000011b17f28>] hci_rx_work+0x4b7/0xb80 net/bluetooth/hci_core.c:4950 [<000000002a89198c>] process_one_work+0x9a9/0x1590 kernel/workqueue.c:2279 [<0000000078d2f18c>] worker_thread+0x61d/0x1310 kernel/workqueue.c:2425 [<00000000f78a79fd>] kthread+0x38f/0x470 kernel/kthread.c:313 [<00000000fa359614>] ret_from_fork+0x22/0x30 arch/x86/entry/entry_64.S:296 BUG: leak checking failed