Linux kernel crash report:
BUG: memory leak
unreferenced object 0xffff888113409800 (size 2048):
  comm "syz-executor174", pid 5172, jiffies 4294953958 (age 33.990s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    06 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00  ...@............
  backtrace:
    [<ffffffff814fa1a6>] __do_kmalloc_node mm/slab_common.c:967 [inline]
    [<ffffffff814fa1a6>] __kmalloc+0x46/0x120 mm/slab_common.c:981
    [<ffffffff83b0186d>] kmalloc include/linux/slab.h:584 [inline]
    [<ffffffff83b0186d>] sk_prot_alloc+0xcd/0x1b0 net/core/sock.c:2038
    [<ffffffff83b03912>] sk_alloc+0x32/0x300 net/core/sock.c:2091
    [<ffffffff840ffff0>] nr_create+0x80/0x1c0 net/netrom/af_netrom.c:433
    [<ffffffff83af9f6d>] __sock_create+0x1ad/0x2c0 net/socket.c:1515
    [<ffffffff83afd2ee>] sock_create net/socket.c:1566 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1603 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1588 [inline]
    [<ffffffff83afd2ee>] __sys_socket+0x9e/0x190 net/socket.c:1636
    [<ffffffff83afd3fa>] __do_sys_socket net/socket.c:1649 [inline]
    [<ffffffff83afd3fa>] __se_sys_socket net/socket.c:1647 [inline]
    [<ffffffff83afd3fa>] __x64_sys_socket+0x1a/0x20 net/socket.c:1647
    [<ffffffff848f17c5>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f17c5>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888115959320 (size 32):
  comm "syz-executor174", pid 5172, jiffies 4294953958 (age 33.990s)
  hex dump (first 32 bytes):
    a8 d1 e1 00 81 88 ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff814f9700>] kmalloc_trace+0x20/0x90 mm/slab_common.c:1062
    [<ffffffff8226acce>] kmalloc include/linux/slab.h:580 [inline]
    [<ffffffff8226acce>] kzalloc include/linux/slab.h:720 [inline]
    [<ffffffff8226acce>] apparmor_sk_alloc_security+0x4e/0xc0 security/apparmor/lsm.c:830
    [<ffffffff82230ee1>] security_sk_alloc+0x31/0x70 security/security.c:2361
    [<ffffffff83b0189e>] sk_prot_alloc+0xfe/0x1b0 net/core/sock.c:2041
    [<ffffffff83b03912>] sk_alloc+0x32/0x300 net/core/sock.c:2091
    [<ffffffff840ffff0>] nr_create+0x80/0x1c0 net/netrom/af_netrom.c:433
    [<ffffffff83af9f6d>] __sock_create+0x1ad/0x2c0 net/socket.c:1515
    [<ffffffff83afd2ee>] sock_create net/socket.c:1566 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1603 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1588 [inline]
    [<ffffffff83afd2ee>] __sys_socket+0x9e/0x190 net/socket.c:1636
    [<ffffffff83afd3fa>] __do_sys_socket net/socket.c:1649 [inline]
    [<ffffffff83afd3fa>] __se_sys_socket net/socket.c:1647 [inline]
    [<ffffffff83afd3fa>] __x64_sys_socket+0x1a/0x20 net/socket.c:1647
    [<ffffffff848f17c5>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f17c5>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888113409800 (size 2048):
  comm "syz-executor174", pid 5172, jiffies 4294953958 (age 34.040s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    06 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00  ...@............
  backtrace:
    [<ffffffff814fa1a6>] __do_kmalloc_node mm/slab_common.c:967 [inline]
    [<ffffffff814fa1a6>] __kmalloc+0x46/0x120 mm/slab_common.c:981
    [<ffffffff83b0186d>] kmalloc include/linux/slab.h:584 [inline]
    [<ffffffff83b0186d>] sk_prot_alloc+0xcd/0x1b0 net/core/sock.c:2038
    [<ffffffff83b03912>] sk_alloc+0x32/0x300 net/core/sock.c:2091
    [<ffffffff840ffff0>] nr_create+0x80/0x1c0 net/netrom/af_netrom.c:433
    [<ffffffff83af9f6d>] __sock_create+0x1ad/0x2c0 net/socket.c:1515
    [<ffffffff83afd2ee>] sock_create net/socket.c:1566 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1603 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1588 [inline]
    [<ffffffff83afd2ee>] __sys_socket+0x9e/0x190 net/socket.c:1636
    [<ffffffff83afd3fa>] __do_sys_socket net/socket.c:1649 [inline]
    [<ffffffff83afd3fa>] __se_sys_socket net/socket.c:1647 [inline]
    [<ffffffff83afd3fa>] __x64_sys_socket+0x1a/0x20 net/socket.c:1647
    [<ffffffff848f17c5>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f17c5>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888115959320 (size 32):
  comm "syz-executor174", pid 5172, jiffies 4294953958 (age 34.040s)
  hex dump (first 32 bytes):
    a8 d1 e1 00 81 88 ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff814f9700>] kmalloc_trace+0x20/0x90 mm/slab_common.c:1062
    [<ffffffff8226acce>] kmalloc include/linux/slab.h:580 [inline]
    [<ffffffff8226acce>] kzalloc include/linux/slab.h:720 [inline]
    [<ffffffff8226acce>] apparmor_sk_alloc_security+0x4e/0xc0 security/apparmor/lsm.c:830
    [<ffffffff82230ee1>] security_sk_alloc+0x31/0x70 security/security.c:2361
    [<ffffffff83b0189e>] sk_prot_alloc+0xfe/0x1b0 net/core/sock.c:2041
    [<ffffffff83b03912>] sk_alloc+0x32/0x300 net/core/sock.c:2091
    [<ffffffff840ffff0>] nr_create+0x80/0x1c0 net/netrom/af_netrom.c:433
    [<ffffffff83af9f6d>] __sock_create+0x1ad/0x2c0 net/socket.c:1515
    [<ffffffff83afd2ee>] sock_create net/socket.c:1566 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1603 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1588 [inline]
    [<ffffffff83afd2ee>] __sys_socket+0x9e/0x190 net/socket.c:1636
    [<ffffffff83afd3fa>] __do_sys_socket net/socket.c:1649 [inline]
    [<ffffffff83afd3fa>] __se_sys_socket net/socket.c:1647 [inline]
    [<ffffffff83afd3fa>] __x64_sys_socket+0x1a/0x20 net/socket.c:1647
    [<ffffffff848f17c5>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f17c5>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888113409800 (size 2048):
  comm "syz-executor174", pid 5172, jiffies 4294953958 (age 34.100s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    06 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00  ...@............
  backtrace:
    [<ffffffff814fa1a6>] __do_kmalloc_node mm/slab_common.c:967 [inline]
    [<ffffffff814fa1a6>] __kmalloc+0x46/0x120 mm/slab_common.c:981
    [<ffffffff83b0186d>] kmalloc include/linux/slab.h:584 [inline]
    [<ffffffff83b0186d>] sk_prot_alloc+0xcd/0x1b0 net/core/sock.c:2038
    [<ffffffff83b03912>] sk_alloc+0x32/0x300 net/core/sock.c:2091
    [<ffffffff840ffff0>] nr_create+0x80/0x1c0 net/netrom/af_netrom.c:433
    [<ffffffff83af9f6d>] __sock_create+0x1ad/0x2c0 net/socket.c:1515
    [<ffffffff83afd2ee>] sock_create net/socket.c:1566 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1603 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1588 [inline]
    [<ffffffff83afd2ee>] __sys_socket+0x9e/0x190 net/socket.c:1636
    [<ffffffff83afd3fa>] __do_sys_socket net/socket.c:1649 [inline]
    [<ffffffff83afd3fa>] __se_sys_socket net/socket.c:1647 [inline]
    [<ffffffff83afd3fa>] __x64_sys_socket+0x1a/0x20 net/socket.c:1647
    [<ffffffff848f17c5>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f17c5>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888115959320 (size 32):
  comm "syz-executor174", pid 5172, jiffies 4294953958 (age 34.100s)
  hex dump (first 32 bytes):
    a8 d1 e1 00 81 88 ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff814f9700>] kmalloc_trace+0x20/0x90 mm/slab_common.c:1062
    [<ffffffff8226acce>] kmalloc include/linux/slab.h:580 [inline]
    [<ffffffff8226acce>] kzalloc include/linux/slab.h:720 [inline]
    [<ffffffff8226acce>] apparmor_sk_alloc_security+0x4e/0xc0 security/apparmor/lsm.c:830
    [<ffffffff82230ee1>] security_sk_alloc+0x31/0x70 security/security.c:2361
    [<ffffffff83b0189e>] sk_prot_alloc+0xfe/0x1b0 net/core/sock.c:2041
    [<ffffffff83b03912>] sk_alloc+0x32/0x300 net/core/sock.c:2091
    [<ffffffff840ffff0>] nr_create+0x80/0x1c0 net/netrom/af_netrom.c:433
    [<ffffffff83af9f6d>] __sock_create+0x1ad/0x2c0 net/socket.c:1515
    [<ffffffff83afd2ee>] sock_create net/socket.c:1566 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1603 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1588 [inline]
    [<ffffffff83afd2ee>] __sys_socket+0x9e/0x190 net/socket.c:1636
    [<ffffffff83afd3fa>] __do_sys_socket net/socket.c:1649 [inline]
    [<ffffffff83afd3fa>] __se_sys_socket net/socket.c:1647 [inline]
    [<ffffffff83afd3fa>] __x64_sys_socket+0x1a/0x20 net/socket.c:1647
    [<ffffffff848f17c5>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f17c5>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888113409800 (size 2048):
  comm "syz-executor174", pid 5172, jiffies 4294953958 (age 34.150s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    06 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00  ...@............
  backtrace:
    [<ffffffff814fa1a6>] __do_kmalloc_node mm/slab_common.c:967 [inline]
    [<ffffffff814fa1a6>] __kmalloc+0x46/0x120 mm/slab_common.c:981
    [<ffffffff83b0186d>] kmalloc include/linux/slab.h:584 [inline]
    [<ffffffff83b0186d>] sk_prot_alloc+0xcd/0x1b0 net/core/sock.c:2038
    [<ffffffff83b03912>] sk_alloc+0x32/0x300 net/core/sock.c:2091
    [<ffffffff840ffff0>] nr_create+0x80/0x1c0 net/netrom/af_netrom.c:433
    [<ffffffff83af9f6d>] __sock_create+0x1ad/0x2c0 net/socket.c:1515
    [<ffffffff83afd2ee>] sock_create net/socket.c:1566 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1603 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1588 [inline]
    [<ffffffff83afd2ee>] __sys_socket+0x9e/0x190 net/socket.c:1636
    [<ffffffff83afd3fa>] __do_sys_socket net/socket.c:1649 [inline]
    [<ffffffff83afd3fa>] __se_sys_socket net/socket.c:1647 [inline]
    [<ffffffff83afd3fa>] __x64_sys_socket+0x1a/0x20 net/socket.c:1647
    [<ffffffff848f17c5>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f17c5>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888115959320 (size 32):
  comm "syz-executor174", pid 5172, jiffies 4294953958 (age 34.150s)
  hex dump (first 32 bytes):
    a8 d1 e1 00 81 88 ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff814f9700>] kmalloc_trace+0x20/0x90 mm/slab_common.c:1062
    [<ffffffff8226acce>] kmalloc include/linux/slab.h:580 [inline]
    [<ffffffff8226acce>] kzalloc include/linux/slab.h:720 [inline]
    [<ffffffff8226acce>] apparmor_sk_alloc_security+0x4e/0xc0 security/apparmor/lsm.c:830
    [<ffffffff82230ee1>] security_sk_alloc+0x31/0x70 security/security.c:2361
    [<ffffffff83b0189e>] sk_prot_alloc+0xfe/0x1b0 net/core/sock.c:2041
    [<ffffffff83b03912>] sk_alloc+0x32/0x300 net/core/sock.c:2091
    [<ffffffff840ffff0>] nr_create+0x80/0x1c0 net/netrom/af_netrom.c:433
    [<ffffffff83af9f6d>] __sock_create+0x1ad/0x2c0 net/socket.c:1515
    [<ffffffff83afd2ee>] sock_create net/socket.c:1566 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1603 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1588 [inline]
    [<ffffffff83afd2ee>] __sys_socket+0x9e/0x190 net/socket.c:1636
    [<ffffffff83afd3fa>] __do_sys_socket net/socket.c:1649 [inline]
    [<ffffffff83afd3fa>] __se_sys_socket net/socket.c:1647 [inline]
    [<ffffffff83afd3fa>] __x64_sys_socket+0x1a/0x20 net/socket.c:1647
    [<ffffffff848f17c5>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f17c5>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888113409800 (size 2048):
  comm "syz-executor174", pid 5172, jiffies 4294953958 (age 34.200s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    06 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00  ...@............
  backtrace:
    [<ffffffff814fa1a6>] __do_kmalloc_node mm/slab_common.c:967 [inline]
    [<ffffffff814fa1a6>] __kmalloc+0x46/0x120 mm/slab_common.c:981
    [<ffffffff83b0186d>] kmalloc include/linux/slab.h:584 [inline]
    [<ffffffff83b0186d>] sk_prot_alloc+0xcd/0x1b0 net/core/sock.c:2038
    [<ffffffff83b03912>] sk_alloc+0x32/0x300 net/core/sock.c:2091
    [<ffffffff840ffff0>] nr_create+0x80/0x1c0 net/netrom/af_netrom.c:433
    [<ffffffff83af9f6d>] __sock_create+0x1ad/0x2c0 net/socket.c:1515
    [<ffffffff83afd2ee>] sock_create net/socket.c:1566 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1603 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1588 [inline]
    [<ffffffff83afd2ee>] __sys_socket+0x9e/0x190 net/socket.c:1636
    [<ffffffff83afd3fa>] __do_sys_socket net/socket.c:1649 [inline]
    [<ffffffff83afd3fa>] __se_sys_socket net/socket.c:1647 [inline]
    [<ffffffff83afd3fa>] __x64_sys_socket+0x1a/0x20 net/socket.c:1647
    [<ffffffff848f17c5>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f17c5>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888115959320 (size 32):
  comm "syz-executor174", pid 5172, jiffies 4294953958 (age 34.200s)
  hex dump (first 32 bytes):
    a8 d1 e1 00 81 88 ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff814f9700>] kmalloc_trace+0x20/0x90 mm/slab_common.c:1062
    [<ffffffff8226acce>] kmalloc include/linux/slab.h:580 [inline]
    [<ffffffff8226acce>] kzalloc include/linux/slab.h:720 [inline]
    [<ffffffff8226acce>] apparmor_sk_alloc_security+0x4e/0xc0 security/apparmor/lsm.c:830
    [<ffffffff82230ee1>] security_sk_alloc+0x31/0x70 security/security.c:2361
    [<ffffffff83b0189e>] sk_prot_alloc+0xfe/0x1b0 net/core/sock.c:2041
    [<ffffffff83b03912>] sk_alloc+0x32/0x300 net/core/sock.c:2091
    [<ffffffff840ffff0>] nr_create+0x80/0x1c0 net/netrom/af_netrom.c:433
    [<ffffffff83af9f6d>] __sock_create+0x1ad/0x2c0 net/socket.c:1515
    [<ffffffff83afd2ee>] sock_create net/socket.c:1566 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1603 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1588 [inline]
    [<ffffffff83afd2ee>] __sys_socket+0x9e/0x190 net/socket.c:1636
    [<ffffffff83afd3fa>] __do_sys_socket net/socket.c:1649 [inline]
    [<ffffffff83afd3fa>] __se_sys_socket net/socket.c:1647 [inline]
    [<ffffffff83afd3fa>] __x64_sys_socket+0x1a/0x20 net/socket.c:1647
    [<ffffffff848f17c5>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f17c5>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888113409800 (size 2048):
  comm "syz-executor174", pid 5172, jiffies 4294953958 (age 34.260s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    06 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00  ...@............
  backtrace:
    [<ffffffff814fa1a6>] __do_kmalloc_node mm/slab_common.c:967 [inline]
    [<ffffffff814fa1a6>] __kmalloc+0x46/0x120 mm/slab_common.c:981
    [<ffffffff83b0186d>] kmalloc include/linux/slab.h:584 [inline]
    [<ffffffff83b0186d>] sk_prot_alloc+0xcd/0x1b0 net/core/sock.c:2038
    [<ffffffff83b03912>] sk_alloc+0x32/0x300 net/core/sock.c:2091
    [<ffffffff840ffff0>] nr_create+0x80/0x1c0 net/netrom/af_netrom.c:433
    [<ffffffff83af9f6d>] __sock_create+0x1ad/0x2c0 net/socket.c:1515
    [<ffffffff83afd2ee>] sock_create net/socket.c:1566 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1603 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1588 [inline]
    [<ffffffff83afd2ee>] __sys_socket+0x9e/0x190 net/socket.c:1636
    [<ffffffff83afd3fa>] __do_sys_socket net/socket.c:1649 [inline]
    [<ffffffff83afd3fa>] __se_sys_socket net/socket.c:1647 [inline]
    [<ffffffff83afd3fa>] __x64_sys_socket+0x1a/0x20 net/socket.c:1647
    [<ffffffff848f17c5>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f17c5>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888115959320 (size 32):
  comm "syz-executor174", pid 5172, jiffies 4294953958 (age 34.260s)
  hex dump (first 32 bytes):
    a8 d1 e1 00 81 88 ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff814f9700>] kmalloc_trace+0x20/0x90 mm/slab_common.c:1062
    [<ffffffff8226acce>] kmalloc include/linux/slab.h:580 [inline]
    [<ffffffff8226acce>] kzalloc include/linux/slab.h:720 [inline]
    [<ffffffff8226acce>] apparmor_sk_alloc_security+0x4e/0xc0 security/apparmor/lsm.c:830
    [<ffffffff82230ee1>] security_sk_alloc+0x31/0x70 security/security.c:2361
    [<ffffffff83b0189e>] sk_prot_alloc+0xfe/0x1b0 net/core/sock.c:2041
    [<ffffffff83b03912>] sk_alloc+0x32/0x300 net/core/sock.c:2091
    [<ffffffff840ffff0>] nr_create+0x80/0x1c0 net/netrom/af_netrom.c:433
    [<ffffffff83af9f6d>] __sock_create+0x1ad/0x2c0 net/socket.c:1515
    [<ffffffff83afd2ee>] sock_create net/socket.c:1566 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1603 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1588 [inline]
    [<ffffffff83afd2ee>] __sys_socket+0x9e/0x190 net/socket.c:1636
    [<ffffffff83afd3fa>] __do_sys_socket net/socket.c:1649 [inline]
    [<ffffffff83afd3fa>] __se_sys_socket net/socket.c:1647 [inline]
    [<ffffffff83afd3fa>] __x64_sys_socket+0x1a/0x20 net/socket.c:1647
    [<ffffffff848f17c5>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f17c5>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888113409800 (size 2048):
  comm "syz-executor174", pid 5172, jiffies 4294953958 (age 34.310s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    06 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00  ...@............
  backtrace:
    [<ffffffff814fa1a6>] __do_kmalloc_node mm/slab_common.c:967 [inline]
    [<ffffffff814fa1a6>] __kmalloc+0x46/0x120 mm/slab_common.c:981
    [<ffffffff83b0186d>] kmalloc include/linux/slab.h:584 [inline]
    [<ffffffff83b0186d>] sk_prot_alloc+0xcd/0x1b0 net/core/sock.c:2038
    [<ffffffff83b03912>] sk_alloc+0x32/0x300 net/core/sock.c:2091
    [<ffffffff840ffff0>] nr_create+0x80/0x1c0 net/netrom/af_netrom.c:433
    [<ffffffff83af9f6d>] __sock_create+0x1ad/0x2c0 net/socket.c:1515
    [<ffffffff83afd2ee>] sock_create net/socket.c:1566 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1603 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1588 [inline]
    [<ffffffff83afd2ee>] __sys_socket+0x9e/0x190 net/socket.c:1636
    [<ffffffff83afd3fa>] __do_sys_socket net/socket.c:1649 [inline]
    [<ffffffff83afd3fa>] __se_sys_socket net/socket.c:1647 [inline]
    [<ffffffff83afd3fa>] __x64_sys_socket+0x1a/0x20 net/socket.c:1647
    [<ffffffff848f17c5>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f17c5>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888115959320 (size 32):
  comm "syz-executor174", pid 5172, jiffies 4294953958 (age 34.310s)
  hex dump (first 32 bytes):
    a8 d1 e1 00 81 88 ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff814f9700>] kmalloc_trace+0x20/0x90 mm/slab_common.c:1062
    [<ffffffff8226acce>] kmalloc include/linux/slab.h:580 [inline]
    [<ffffffff8226acce>] kzalloc include/linux/slab.h:720 [inline]
    [<ffffffff8226acce>] apparmor_sk_alloc_security+0x4e/0xc0 security/apparmor/lsm.c:830
    [<ffffffff82230ee1>] security_sk_alloc+0x31/0x70 security/security.c:2361
    [<ffffffff83b0189e>] sk_prot_alloc+0xfe/0x1b0 net/core/sock.c:2041
    [<ffffffff83b03912>] sk_alloc+0x32/0x300 net/core/sock.c:2091
    [<ffffffff840ffff0>] nr_create+0x80/0x1c0 net/netrom/af_netrom.c:433
    [<ffffffff83af9f6d>] __sock_create+0x1ad/0x2c0 net/socket.c:1515
    [<ffffffff83afd2ee>] sock_create net/socket.c:1566 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1603 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1588 [inline]
    [<ffffffff83afd2ee>] __sys_socket+0x9e/0x190 net/socket.c:1636
    [<ffffffff83afd3fa>] __do_sys_socket net/socket.c:1649 [inline]
    [<ffffffff83afd3fa>] __se_sys_socket net/socket.c:1647 [inline]
    [<ffffffff83afd3fa>] __x64_sys_socket+0x1a/0x20 net/socket.c:1647
    [<ffffffff848f17c5>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f17c5>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888113409800 (size 2048):
  comm "syz-executor174", pid 5172, jiffies 4294953958 (age 34.360s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    06 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00  ...@............
  backtrace:
    [<ffffffff814fa1a6>] __do_kmalloc_node mm/slab_common.c:967 [inline]
    [<ffffffff814fa1a6>] __kmalloc+0x46/0x120 mm/slab_common.c:981
    [<ffffffff83b0186d>] kmalloc include/linux/slab.h:584 [inline]
    [<ffffffff83b0186d>] sk_prot_alloc+0xcd/0x1b0 net/core/sock.c:2038
    [<ffffffff83b03912>] sk_alloc+0x32/0x300 net/core/sock.c:2091
    [<ffffffff840ffff0>] nr_create+0x80/0x1c0 net/netrom/af_netrom.c:433
    [<ffffffff83af9f6d>] __sock_create+0x1ad/0x2c0 net/socket.c:1515
    [<ffffffff83afd2ee>] sock_create net/socket.c:1566 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1603 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1588 [inline]
    [<ffffffff83afd2ee>] __sys_socket+0x9e/0x190 net/socket.c:1636
    [<ffffffff83afd3fa>] __do_sys_socket net/socket.c:1649 [inline]
    [<ffffffff83afd3fa>] __se_sys_socket net/socket.c:1647 [inline]
    [<ffffffff83afd3fa>] __x64_sys_socket+0x1a/0x20 net/socket.c:1647
    [<ffffffff848f17c5>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f17c5>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888115959320 (size 32):
  comm "syz-executor174", pid 5172, jiffies 4294953958 (age 34.360s)
  hex dump (first 32 bytes):
    a8 d1 e1 00 81 88 ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff814f9700>] kmalloc_trace+0x20/0x90 mm/slab_common.c:1062
    [<ffffffff8226acce>] kmalloc include/linux/slab.h:580 [inline]
    [<ffffffff8226acce>] kzalloc include/linux/slab.h:720 [inline]
    [<ffffffff8226acce>] apparmor_sk_alloc_security+0x4e/0xc0 security/apparmor/lsm.c:830
    [<ffffffff82230ee1>] security_sk_alloc+0x31/0x70 security/security.c:2361
    [<ffffffff83b0189e>] sk_prot_alloc+0xfe/0x1b0 net/core/sock.c:2041
    [<ffffffff83b03912>] sk_alloc+0x32/0x300 net/core/sock.c:2091
    [<ffffffff840ffff0>] nr_create+0x80/0x1c0 net/netrom/af_netrom.c:433
    [<ffffffff83af9f6d>] __sock_create+0x1ad/0x2c0 net/socket.c:1515
    [<ffffffff83afd2ee>] sock_create net/socket.c:1566 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1603 [inline]
    [<ffffffff83afd2ee>] __sys_socket_create net/socket.c:1588 [inline]
    [<ffffffff83afd2ee>] __sys_socket+0x9e/0x190 net/socket.c:1636
    [<ffffffff83afd3fa>] __do_sys_socket net/socket.c:1649 [inline]
    [<ffffffff83afd3fa>] __se_sys_socket net/socket.c:1647 [inline]
    [<ffffffff83afd3fa>] __x64_sys_socket+0x1a/0x20 net/socket.c:1647
    [<ffffffff848f17c5>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f17c5>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd



Fix patch:
diff --git a/net/netrom/af_netrom.c b/net/netrom/af_netrom.c
index 6f7f4392cffb..5a4cb796150f 100644
--- a/net/netrom/af_netrom.c
+++ b/net/netrom/af_netrom.c
@@ -400,6 +400,11 @@ static int nr_listen(struct socket *sock, int backlog)
 	struct sock *sk = sock->sk;
 
 	lock_sock(sk);
+	if (sock->state != SS_UNCONNECTED) {
+		release_sock(sk);
+		return -EINVAL;
+	}
+
 	if (sk->sk_state != TCP_LISTEN) {
 		memset(&nr_sk(sk)->user_addr, 0, AX25_ADDR_LEN);
 		sk->sk_max_ack_backlog = backlog;