memory leak in new_inode_pseudo

Status: fixed on 2019/07/10 21:40
Subsystems: smc
[Documentation on labels]
Reported-by: syzbot+111cb28d9f583693aefa@syzkaller.appspotmail.com
Fix commit: 355e8d26f719 io_uring: fix memory leak of UNIX domain socket inode
First crash: 2634d, last: 2583d
▶ ▼ Discussions (3)
Title Replies (including bot) Last reply
[PATCH 5.1 000/115] 5.1.12-stable review 132 (132) 2019/06/19 12:16
[PATCH] io_uring: fix memory leak of UNIX domain socket inode 2 (2) 2019/06/13 08:40
memory leak in new_inode_pseudo 0 (1) 2019/05/23 01:28
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream memory leak in new_inode_pseudo (2) 3 syz, C done 154 1567d 2577d 0/29 auto-obsoleted due to no activity on 2022/11/10 16:48

Sample crash report:
executing program
BUG: memory leak
unreferenced object 0xffff88812b774a80 (size 632):
  comm "syz-executor113", pid 7044, jiffies 4294942883 (age 13.550s)
  hex dump (first 32 bytes):
    03 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00  ................
    00 7e 5c 18 81 88 ff ff 00 00 00 00 00 00 00 00  .~\.............
  backtrace:
    [<00000000a53669bf>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000a53669bf>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<00000000a53669bf>] slab_alloc mm/slab.c:3326 [inline]
    [<00000000a53669bf>] kmem_cache_alloc+0x134/0x270 mm/slab.c:3488
    [<00000000bd1fc30c>] sock_alloc_inode+0x1d/0xe0 net/socket.c:246
    [<0000000087d5d409>] alloc_inode+0x2c/0xe0 fs/inode.c:227
    [<00000000acfeff46>] new_inode_pseudo+0x18/0x70 fs/inode.c:916
    [<0000000016667e8d>] sock_alloc+0x1c/0x90 net/socket.c:569
    [<00000000c68e1b26>] __sock_create+0x8f/0x250 net/socket.c:1388
    [<00000000b5d55528>] sock_create_kern+0x3b/0x50 net/socket.c:1493
    [<00000000f3b43b36>] smc_create+0xae/0x160 net/smc/af_smc.c:1984
    [<00000000e1876c60>] __sock_create+0x164/0x250 net/socket.c:1424
    [<000000001976ceda>] sock_create net/socket.c:1475 [inline]
    [<000000001976ceda>] __sys_socket+0x69/0x110 net/socket.c:1517
    [<00000000853ebced>] __do_sys_socket net/socket.c:1526 [inline]
    [<00000000853ebced>] __se_sys_socket net/socket.c:1524 [inline]
    [<00000000853ebced>] __x64_sys_socket+0x1e/0x30 net/socket.c:1524
    [<00000000f8f5176a>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000003782e27f>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff8881185c7e00 (size 64):
  comm "syz-executor113", pid 7044, jiffies 4294942883 (age 13.550s)
  hex dump (first 32 bytes):
    00 00 00 00 20 77 72 69 08 7e 5c 18 81 88 ff ff  .... wri.~\.....
    08 7e 5c 18 81 88 ff ff 00 00 00 00 00 00 00 00  .~\.............
  backtrace:
    [<00000000c6ba1fda>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000c6ba1fda>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<00000000c6ba1fda>] slab_alloc mm/slab.c:3326 [inline]
    [<00000000c6ba1fda>] kmem_cache_alloc_trace+0x13d/0x280 mm/slab.c:3553
    [<000000005a92810c>] kmalloc include/linux/slab.h:547 [inline]
    [<000000005a92810c>] sock_alloc_inode+0x44/0xe0 net/socket.c:249
    [<0000000087d5d409>] alloc_inode+0x2c/0xe0 fs/inode.c:227
    [<00000000acfeff46>] new_inode_pseudo+0x18/0x70 fs/inode.c:916
    [<0000000016667e8d>] sock_alloc+0x1c/0x90 net/socket.c:569
    [<00000000c68e1b26>] __sock_create+0x8f/0x250 net/socket.c:1388
    [<00000000b5d55528>] sock_create_kern+0x3b/0x50 net/socket.c:1493
    [<00000000f3b43b36>] smc_create+0xae/0x160 net/smc/af_smc.c:1984
    [<00000000e1876c60>] __sock_create+0x164/0x250 net/socket.c:1424
    [<000000001976ceda>] sock_create net/socket.c:1475 [inline]
    [<000000001976ceda>] __sys_socket+0x69/0x110 net/socket.c:1517
    [<00000000853ebced>] __do_sys_socket net/socket.c:1526 [inline]
    [<00000000853ebced>] __se_sys_socket net/socket.c:1524 [inline]
    [<00000000853ebced>] __x64_sys_socket+0x1e/0x30 net/socket.c:1524
    [<00000000f8f5176a>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000003782e27f>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88811e37bce8 (size 56):
  comm "syz-executor113", pid 7044, jiffies 4294942883 (age 13.550s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    b0 4a 77 2b 81 88 ff ff 00 bd 37 1e 81 88 ff ff  .Jw+......7.....
  backtrace:
    [<00000000a53669bf>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000a53669bf>] slab_post_alloc_hook mm/slab.h:439 [inline]
    [<00000000a53669bf>] slab_alloc mm/slab.c:3326 [inline]
    [<00000000a53669bf>] kmem_cache_alloc+0x134/0x270 mm/slab.c:3488
    [<00000000dbab01d8>] kmem_cache_zalloc include/linux/slab.h:732 [inline]
    [<00000000dbab01d8>] lsm_inode_alloc security/security.c:522 [inline]
    [<00000000dbab01d8>] security_inode_alloc+0x33/0xb0 security/security.c:875
    [<00000000d4eb37cd>] inode_init_always+0x108/0x200 fs/inode.c:169
    [<00000000f22986f0>] alloc_inode+0x49/0xe0 fs/inode.c:234
    [<00000000acfeff46>] new_inode_pseudo+0x18/0x70 fs/inode.c:916
    [<0000000016667e8d>] sock_alloc+0x1c/0x90 net/socket.c:569
    [<00000000c68e1b26>] __sock_create+0x8f/0x250 net/socket.c:1388
    [<00000000b5d55528>] sock_create_kern+0x3b/0x50 net/socket.c:1493
    [<00000000f3b43b36>] smc_create+0xae/0x160 net/smc/af_smc.c:1984
    [<00000000e1876c60>] __sock_create+0x164/0x250 net/socket.c:1424
    [<000000001976ceda>] sock_create net/socket.c:1475 [inline]
    [<000000001976ceda>] __sys_socket+0x69/0x110 net/socket.c:1517
    [<00000000853ebced>] __do_sys_socket net/socket.c:1526 [inline]
    [<00000000853ebced>] __se_sys_socket net/socket.c:1524 [inline]
    [<00000000853ebced>] __x64_sys_socket+0x1e/0x30 net/socket.c:1524
    [<00000000f8f5176a>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000003782e27f>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

Crashes (136):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/07/10 08:16 upstream e9a83bd23220 f62e1e85 .config console log report syz C ci-upstream-gce-leak
2019/07/10 02:56 upstream 5ad18b2e60b7 f62e1e85 .config console log report syz C ci-upstream-gce-leak
2019/07/09 14:53 upstream 5ad18b2e60b7 f62e1e85 .config console log report syz C ci-upstream-gce-leak
2019/07/09 04:52 upstream 223cea6a4f05 f62e1e85 .config console log report syz C ci-upstream-gce-leak
2019/07/08 14:06 upstream 0ecfebd2b524 f62e1e85 .config console log report syz C ci-upstream-gce-leak
2019/07/07 20:28 upstream 46713c3d2f8d f62e1e85 .config console log report syz C ci-upstream-gce-leak
2019/07/04 22:11 upstream c212ddaee2fd 429efa16 .config console log report syz C ci-upstream-gce-leak
2019/07/03 15:27 upstream eca94432934f 55565fa0 .config console log report syz C ci-upstream-gce-leak
2019/07/03 08:45 upstream 6fbc7275c7a9 55565fa0 .config console log report syz C ci-upstream-gce-leak
2019/07/02 20:24 upstream 6fbc7275c7a9 55565fa0 .config console log report syz C ci-upstream-gce-leak
2019/07/01 06:48 upstream 6fbc7275c7a9 699d6448 .config console log report syz C ci-upstream-gce-leak
2019/07/01 05:47 upstream 6fbc7275c7a9 699d6448 .config console log report syz C ci-upstream-gce-leak
2019/07/01 00:29 upstream 6fbc7275c7a9 699d6448 .config console log report syz C ci-upstream-gce-leak
2019/06/30 23:56 upstream 6fbc7275c7a9 699d6448 .config console log report syz C ci-upstream-gce-leak
2019/06/30 15:21 upstream 6fbc7275c7a9 7509bf36 .config console log report syz C ci-upstream-gce-leak
2019/06/30 08:02 upstream 728254541ebc 7509bf36 .config console log report syz C ci-upstream-gce-leak
2019/06/30 07:24 upstream 728254541ebc 7509bf36 .config console log report syz C ci-upstream-gce-leak
2019/06/29 16:53 upstream 01305db842e1 7509bf36 .config console log report syz C ci-upstream-gce-leak
2019/06/29 03:56 upstream 556e2f6020bf 7509bf36 .config console log report syz C ci-upstream-gce-leak
2019/06/28 06:33 upstream c84afab02c31 7509bf36 .config console log report syz C ci-upstream-gce-leak
2019/06/27 23:33 upstream 249155c20f9b 7509bf36 .config console log report syz C ci-upstream-gce-leak
2019/06/25 21:18 upstream 249155c20f9b 0a8d1a96 .config console log report syz C ci-upstream-gce-leak
2019/06/25 11:50 upstream 4b972a01a7da 82c13b6b .config console log report syz C ci-upstream-gce-leak
2019/06/19 10:12 upstream bed3c0d84e7e 34bf9440 .config console log report syz C ci-upstream-gce-leak
2019/06/19 02:35 upstream 29f785ff76b6 e3f76baa .config console log report syz C ci-upstream-gce-leak
2019/06/17 05:41 upstream 963172d9c7e8 442206d7 .config console log report syz C ci-upstream-gce-leak
2019/06/17 04:34 upstream 963172d9c7e8 442206d7 .config console log report syz C ci-upstream-gce-leak
2019/06/16 17:10 upstream e01e060fe00d 442206d7 .config console log report syz C ci-upstream-gce-leak
2019/06/16 16:45 upstream e01e060fe00d 442206d7 .config console log report syz C ci-upstream-gce-leak
2019/06/15 14:32 upstream 0011572c8830 442206d7 .config console log report syz C ci-upstream-gce-leak
2019/06/15 06:55 upstream fd6b99fa41dd 442206d7 .config console log report syz C ci-upstream-gce-leak
2019/06/14 06:40 upstream c11fb13a117e 998ccc76 .config console log report syz C ci-upstream-gce-leak
2019/06/14 06:26 upstream c11fb13a117e 998ccc76 .config console log report syz C ci-upstream-gce-leak
2019/06/14 01:05 upstream c11fb13a117e a139f92f .config console log report syz C ci-upstream-gce-leak
2019/06/14 00:04 upstream c11fb13a117e a139f92f .config console log report syz C ci-upstream-gce-leak
2019/06/13 22:55 upstream c11fb13a117e a139f92f .config console log report syz C ci-upstream-gce-leak
2019/06/13 00:27 upstream 35110e38e6c5 794a1ad7 .config console log report syz C ci-upstream-gce-leak
2019/06/12 22:57 upstream 35110e38e6c5 794a1ad7 .config console log report syz C ci-upstream-gce-leak
2019/06/12 21:54 upstream 35110e38e6c5 794a1ad7 .config console log report syz C ci-upstream-gce-leak
2019/06/12 18:26 upstream 35110e38e6c5 794a1ad7 .config console log report syz C ci-upstream-gce-leak
2019/06/12 17:49 upstream 35110e38e6c5 794a1ad7 .config console log report syz C ci-upstream-gce-leak
2019/06/12 14:58 upstream aa7235483a83 794a1ad7 .config console log report syz C ci-upstream-gce-leak
2019/06/12 14:34 upstream aa7235483a83 794a1ad7 .config console log report syz C ci-upstream-gce-leak
2019/06/12 13:41 upstream aa7235483a83 794a1ad7 .config console log report syz C ci-upstream-gce-leak
2019/06/12 09:59 upstream aa7235483a83 ea2f4006 .config console log report syz C ci-upstream-gce-leak
2019/05/21 00:04 upstream f49aa1de9836 8285069f .config console log report syz C ci-upstream-gce-leak
2019/07/05 05:52 upstream c212ddaee2fd 429efa16 .config console log report syz ci-upstream-gce-leak
* Struck through repros no longer work on HEAD.