memory leak in genl_rcv_msg

Status: fixed on 2020/07/17 17:58
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+21f04f481f449c8db840@syzkaller.appspotmail.com
Fix commit: c36f05559104 genetlink: fix memory leaks in genl_family_rcv_msg_dumpit()
First crash: 2444d, last: 2251d
▶ ▼ Discussions (5)
Title Replies (including bot) Last reply
[PATCH 5.6 000/161] 5.6.19-rc1 review 164 (164) 2020/06/16 17:11
[PATCH 5.7 000/163] 5.7.3-rc1 review 164 (164) 2020/06/16 15:35
[Patch net v2] genetlink: fix memory leaks in genl_family_rcv_msg_dumpit() 4 (4) 2020/06/11 04:14
[Patch net] genetlink: fix memory leaks in genl_family_rcv_msg_dumpit() 2 (2) 2020/06/03 04:29
memory leak in genl_rcv_msg 0 (1) 2019/12/05 09:55

Sample crash report:
executing program
executing program
BUG: memory leak
unreferenced object 0xffff88811cbf3dc0 (size 32):
  comm "syz-executor827", pid 6453, jiffies 4294943955 (age 13.770s)
  hex dump (first 32 bytes):
    c0 f9 64 84 ff ff ff ff 20 34 b5 83 ff ff ff ff  ..d..... 4......
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<000000005c0e8499>] kmalloc include/linux/slab.h:555 [inline]
    [<000000005c0e8499>] genl_dumpit_info_alloc net/netlink/genetlink.c:463 [inline]
    [<000000005c0e8499>] genl_family_rcv_msg_dumpit net/netlink/genetlink.c:598 [inline]
    [<000000005c0e8499>] genl_family_rcv_msg net/netlink/genetlink.c:715 [inline]
    [<000000005c0e8499>] genl_rcv_msg+0x360/0x520 net/netlink/genetlink.c:735
    [<00000000f9d56dc0>] netlink_rcv_skb+0x5a/0x180 net/netlink/af_netlink.c:2469
    [<00000000c6632466>] genl_rcv+0x24/0x40 net/netlink/genetlink.c:746
    [<00000000fc5e5f95>] netlink_unicast_kernel net/netlink/af_netlink.c:1303 [inline]
    [<00000000fc5e5f95>] netlink_unicast+0x20a/0x2f0 net/netlink/af_netlink.c:1329
    [<00000000ff4ef2b8>] netlink_sendmsg+0x2b5/0x560 net/netlink/af_netlink.c:1918
    [<00000000eadb5c7d>] sock_sendmsg_nosec net/socket.c:652 [inline]
    [<00000000eadb5c7d>] sock_sendmsg+0x4c/0x60 net/socket.c:672
    [<00000000010752bd>] ____sys_sendmsg+0x2c4/0x2f0 net/socket.c:2352
    [<00000000273ecbd6>] ___sys_sendmsg+0x8a/0xd0 net/socket.c:2406
    [<00000000641c2d55>] __sys_sendmsg+0x77/0xe0 net/socket.c:2439
    [<00000000ef88898f>] do_syscall_64+0x6e/0x220 arch/x86/entry/common.c:295
    [<000000006b007676>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

Crashes (116):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/06/12 01:58 upstream 7ae77150d94d 58802067 .config console log report syz C ci-upstream-gce-leak
2020/06/10 10:36 upstream 7ae77150d94d 860c4de9 .config console log report syz C ci-upstream-gce-leak
2020/06/10 10:08 upstream 7ae77150d94d 860c4de9 .config console log report syz C ci-upstream-gce-leak
2020/06/06 09:59 upstream 7ae77150d94d e6b89e4e .config console log report syz C ci-upstream-gce-leak
2020/06/05 22:08 upstream 7ae77150d94d f243c88f .config console log report syz C ci-upstream-gce-leak
2020/06/05 13:13 upstream 435faf5c218a 2420d1bc .config console log report syz C ci-upstream-gce-leak
2020/06/01 03:26 upstream bdc48fa11e46 a0331e89 .config console log report syz C ci-upstream-gce-leak
2020/05/31 12:15 upstream ffeb595d8481 a0331e89 .config console log report syz C ci-upstream-gce-leak
2020/05/30 03:05 upstream e2fce151d2b4 3905eaae .config console log report syz C ci-upstream-gce-leak
2020/05/28 07:58 upstream b0c3ba31be3e 142a0957 .config console log report syz C ci-upstream-gce-leak
2020/05/27 05:50 upstream 444fc5cde643 9072c126 .config console log report syz C ci-upstream-gce-leak
2020/05/25 09:14 upstream 9cb1fd0efd19 11284182 .config console log report syz C ci-upstream-gce-leak
2020/05/24 23:45 upstream caffb99b6929 bd28eb9d .config console log report syz C ci-upstream-gce-leak
2020/05/23 14:25 upstream 444565650a5f 9682898d .config console log report syz C ci-upstream-gce-leak
2020/05/20 08:40 upstream 3c9e66568ad4 67fa1f59 .config console log report syz C ci-upstream-gce-leak
2020/05/18 16:58 upstream b9bbe6ed63b2 684d3606 .config console log report syz C ci-upstream-gce-leak
2020/05/16 07:39 upstream 12bf0b632ed0 37bccd4e .config console log report syz C ci-upstream-gce-leak
2020/05/15 15:55 upstream 1ae7efb38854 d7f9fffa .config console log report syz C ci-upstream-gce-leak
2020/05/10 18:30 upstream e99332e7b4cd 8742a2b9 .config console log report syz C ci-upstream-gce-leak
2020/05/10 12:07 upstream 1d3962ae3b3d 8742a2b9 .config console log report syz C ci-upstream-gce-leak
2020/05/10 11:27 upstream 1d3962ae3b3d 8742a2b9 .config console log report syz C ci-upstream-gce-leak
2020/05/10 10:20 upstream 1d3962ae3b3d 8742a2b9 .config console log report syz C ci-upstream-gce-leak
2020/05/05 16:45 upstream 47cf1b422e60 4b76dd25 .config console log report syz C ci-upstream-gce-leak
2020/05/05 05:20 upstream 47cf1b422e60 9941337c .config console log report syz C ci-upstream-gce-leak
2020/05/05 01:28 upstream 0e698dfa2822 9941337c .config console log report syz C ci-upstream-gce-leak
2020/05/02 16:11 upstream 690e2aba7beb 58da4c35 .config console log report syz C ci-upstream-gce-leak
2020/05/01 14:27 upstream c45e8bccecaf a4d01b80 .config console log report syz C ci-upstream-gce-leak
2020/04/30 08:19 upstream 1d2cc5ac6f66 2dd552a5 .config console log report syz C ci-upstream-gce-leak
2020/04/28 22:08 upstream 3f777e19d171 e3ecea2e .config console log report syz C ci-upstream-gce-leak
2020/04/25 13:26 upstream 5ef58e290782 b8bb8e5f .config console log report syz C ci-upstream-gce-leak
2020/04/20 15:13 upstream ae83d0b416db 347a5dc3 .config console log report syz C ci-upstream-gce-leak
2020/04/20 02:58 upstream 0fe5f9ca2235 9f7c6d12 .config console log report syz C ci-upstream-gce-leak
2020/04/19 16:20 upstream 50cc09c18985 6dfd45e1 .config console log report syz C ci-upstream-gce-leak
2020/04/19 05:18 upstream 50cc09c18985 365fba24 .config console log report syz C ci-upstream-gce-leak
2020/04/19 04:45 upstream 50cc09c18985 365fba24 .config console log report syz C ci-upstream-gce-leak
2020/04/11 18:08 upstream 5b8b9d0c6d0e a8c6a3f8 .config console log report syz C ci-upstream-gce-leak
2020/04/10 14:52 upstream c0cc271173b2 a8c6a3f8 .config console log report syz C ci-upstream-gce-leak
2020/04/08 18:49 upstream f5e94d10e4c4 db9bcd4b .config console log report syz C ci-upstream-gce-leak
2020/04/08 02:13 upstream 763dede1b248 db9bcd4b .config console log report syz C ci-upstream-gce-leak
2020/04/07 04:35 upstream 7e63420847ae 99a96044 .config console log report syz C ci-upstream-gce-leak
2020/04/02 06:51 upstream 919dce24701f a34e2c33 .config console log report syz C ci-upstream-gce-leak
2020/04/01 17:12 upstream 1a323ea5356e a34e2c33 .config console log report syz C ci-upstream-gce-leak
2020/03/31 06:59 upstream 673b41e04a03 c8d1cc20 .config console log report syz C ci-upstream-gce-leak
2020/03/31 04:09 upstream 673b41e04a03 c8d1cc20 .config console log report syz C ci-upstream-gce-leak
2019/12/01 08:50 upstream 32ef9553635a a76bf83f .config console log report syz C ci-upstream-gce-leak
2020/04/18 16:28 upstream 90280eaa88ac 365fba24 .config console log report syz ci-upstream-gce-leak
2020/04/03 01:03 upstream 7be97138e727 a34e2c33 .config console log report syz ci-upstream-gce-leak
* Struck through repros no longer work on HEAD.