memory leak in __register_sysctl_table (3)

Status: closed as invalid on 2024/01/03 13:25
Subsystems: fs
[Documentation on labels]
First crash: 1174d, last: 1034d
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream memory leak in __register_sysctl_table fs 3 syz, C 1 1529d 1525d 0/29 auto-obsoleted due to no activity on 2022/11/10 23:47
upstream memory leak in __register_sysctl_table (2) fs 3 syz 1 1319d 1319d 0/29 closed as invalid on 2023/02/13 10:50
▶ ▼ Last patch testing requests (3)
Created Duration User Patch Repo Result
2023/12/19 09:30 20m edumazet@google.com upstream no crash log
2023/10/21 03:41 23m retest repro upstream report log
2023/08/11 21:40 15m retest repro upstream report log

Sample crash report:
BUG: memory leak
unreferenced object 0xffff8881175a8c00 (size 128):
  comm "syz-executor.1", pid 9442, jiffies 4295060453 (age 12.500s)
  hex dump (first 32 bytes):
    00 ce 99 17 81 88 ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 ea ff ff ff ff ff ff ff  ................
  backtrace:
    [<ffffffff8154605a>] __do_kmalloc_node mm/slab_common.c:965 [inline]
    [<ffffffff8154605a>] __kmalloc+0x4a/0x120 mm/slab_common.c:979
    [<ffffffff81765f8f>] kmalloc include/linux/slab.h:563 [inline]
    [<ffffffff81765f8f>] kzalloc include/linux/slab.h:680 [inline]
    [<ffffffff81765f8f>] __register_sysctl_table+0x7f/0xac0 fs/proc/proc_sysctl.c:1376
    [<ffffffff8497ea55>] mpls_dev_sysctl_register+0x95/0x110 net/mpls/af_mpls.c:1421
    [<ffffffff84980e6a>] mpls_add_dev net/mpls/af_mpls.c:1476 [inline]
    [<ffffffff84980e6a>] mpls_dev_notify+0x25a/0x480 net/mpls/af_mpls.c:1616
    [<ffffffff812c0dd9>] notifier_call_chain+0x89/0x180 kernel/notifier.c:93
    [<ffffffff83dfaafc>] call_netdevice_notifiers_info+0x7c/0xe0 net/core/dev.c:1935
    [<ffffffff83e09ba8>] call_netdevice_notifiers_extack net/core/dev.c:1973 [inline]
    [<ffffffff83e09ba8>] call_netdevice_notifiers net/core/dev.c:1987 [inline]
    [<ffffffff83e09ba8>] register_netdevice+0x758/0x9b0 net/core/dev.c:10118
    [<ffffffff83e2262b>] rtnl_newlink_create net/core/rtnetlink.c:3467 [inline]
    [<ffffffff83e2262b>] __rtnl_newlink+0xd1b/0xdb0 net/core/rtnetlink.c:3682
    [<ffffffff83e2270d>] rtnl_newlink+0x4d/0x70 net/core/rtnetlink.c:3695
    [<ffffffff83e1d710>] rtnetlink_rcv_msg+0x220/0x5d0 net/core/rtnetlink.c:6417
    [<ffffffff83f4b741>] netlink_rcv_skb+0x91/0x1e0 net/netlink/af_netlink.c:2546
    [<ffffffff83f4a68b>] netlink_unicast_kernel net/netlink/af_netlink.c:1339 [inline]
    [<ffffffff83f4a68b>] netlink_unicast+0x39b/0x4d0 net/netlink/af_netlink.c:1365
    [<ffffffff83f4ab5a>] netlink_sendmsg+0x39a/0x720 net/netlink/af_netlink.c:1913
    [<ffffffff83db74a8>] sock_sendmsg_nosec net/socket.c:724 [inline]
    [<ffffffff83db74a8>] sock_sendmsg+0x58/0xb0 net/socket.c:747
    [<ffffffff83dbab3c>] __sys_sendto+0x16c/0x220 net/socket.c:2144
    [<ffffffff83dbac1a>] __do_sys_sendto net/socket.c:2156 [inline]
    [<ffffffff83dbac1a>] __se_sys_sendto net/socket.c:2152 [inline]
    [<ffffffff83dbac1a>] __x64_sys_sendto+0x2a/0x30 net/socket.c:2152

BUG: memory leak
unreferenced object 0xffff888117519dc0 (size 64):
  comm "syz-executor.1", pid 9442, jiffies 4295060587 (age 11.160s)
  hex dump (first 32 bytes):
    08 8d f9 18 81 88 ff ff 22 01 00 00 00 00 ad de  ........".......
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff81545974>] kmalloc_trace+0x24/0x90 mm/slab_common.c:1057
    [<ffffffff845c5078>] kmalloc include/linux/slab.h:559 [inline]
    [<ffffffff845c5078>] kzalloc include/linux/slab.h:680 [inline]
    [<ffffffff845c5078>] sctp_inetaddr_event+0x128/0x250 net/sctp/protocol.c:793
    [<ffffffff812c0dd9>] notifier_call_chain+0x89/0x180 kernel/notifier.c:93
    [<ffffffff812c1099>] blocking_notifier_call_chain kernel/notifier.c:388 [inline]
    [<ffffffff812c1099>] blocking_notifier_call_chain+0x49/0x70 kernel/notifier.c:376
    [<ffffffff8416a5cf>] __inet_insert_ifa+0x33f/0x440 net/ipv4/devinet.c:555
    [<ffffffff8416c226>] inet_rtm_newaddr+0x2b6/0x360 net/ipv4/devinet.c:961
    [<ffffffff83e1d710>] rtnetlink_rcv_msg+0x220/0x5d0 net/core/rtnetlink.c:6417
    [<ffffffff83f4b741>] netlink_rcv_skb+0x91/0x1e0 net/netlink/af_netlink.c:2546
    [<ffffffff83f4a68b>] netlink_unicast_kernel net/netlink/af_netlink.c:1339 [inline]
    [<ffffffff83f4a68b>] netlink_unicast+0x39b/0x4d0 net/netlink/af_netlink.c:1365
    [<ffffffff83f4ab5a>] netlink_sendmsg+0x39a/0x720 net/netlink/af_netlink.c:1913
    [<ffffffff83db74a8>] sock_sendmsg_nosec net/socket.c:724 [inline]
    [<ffffffff83db74a8>] sock_sendmsg+0x58/0xb0 net/socket.c:747
    [<ffffffff83dbab3c>] __sys_sendto+0x16c/0x220 net/socket.c:2144
    [<ffffffff83dbac1a>] __do_sys_sendto net/socket.c:2156 [inline]
    [<ffffffff83dbac1a>] __se_sys_sendto net/socket.c:2152 [inline]
    [<ffffffff83dbac1a>] __x64_sys_sendto+0x2a/0x30 net/socket.c:2152
    [<ffffffff84a15749>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84a15749>] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888119cba740 (size 64):
  comm "syz-executor.1", pid 9442, jiffies 4295060587 (age 11.160s)
  hex dump (first 32 bytes):
    08 8d f9 18 81 88 ff ff 22 01 00 00 00 00 ad de  ........".......
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff81545974>] kmalloc_trace+0x24/0x90 mm/slab_common.c:1057
    [<ffffffff845c5078>] kmalloc include/linux/slab.h:559 [inline]
    [<ffffffff845c5078>] kzalloc include/linux/slab.h:680 [inline]
    [<ffffffff845c5078>] sctp_inetaddr_event+0x128/0x250 net/sctp/protocol.c:793
    [<ffffffff812c0dd9>] notifier_call_chain+0x89/0x180 kernel/notifier.c:93
    [<ffffffff812c1099>] blocking_notifier_call_chain kernel/notifier.c:388 [inline]
    [<ffffffff812c1099>] blocking_notifier_call_chain+0x49/0x70 kernel/notifier.c:376
    [<ffffffff8416a5cf>] __inet_insert_ifa+0x33f/0x440 net/ipv4/devinet.c:555
    [<ffffffff8416c226>] inet_rtm_newaddr+0x2b6/0x360 net/ipv4/devinet.c:961
    [<ffffffff83e1d710>] rtnetlink_rcv_msg+0x220/0x5d0 net/core/rtnetlink.c:6417
    [<ffffffff83f4b741>] netlink_rcv_skb+0x91/0x1e0 net/netlink/af_netlink.c:2546
    [<ffffffff83f4a68b>] netlink_unicast_kernel net/netlink/af_netlink.c:1339 [inline]
    [<ffffffff83f4a68b>] netlink_unicast+0x39b/0x4d0 net/netlink/af_netlink.c:1365
    [<ffffffff83f4ab5a>] netlink_sendmsg+0x39a/0x720 net/netlink/af_netlink.c:1913
    [<ffffffff83db74a8>] sock_sendmsg_nosec net/socket.c:724 [inline]
    [<ffffffff83db74a8>] sock_sendmsg+0x58/0xb0 net/socket.c:747
    [<ffffffff83dbab3c>] __sys_sendto+0x16c/0x220 net/socket.c:2144
    [<ffffffff83dbac1a>] __do_sys_sendto net/socket.c:2156 [inline]
    [<ffffffff83dbac1a>] __se_sys_sendto net/socket.c:2152 [inline]
    [<ffffffff83dbac1a>] __x64_sys_sendto+0x2a/0x30 net/socket.c:2152
    [<ffffffff84a15749>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84a15749>] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/06/02 21:29 upstream c43a6ff9f93f a4ae4f42 .config console log report syz ci-upstream-gce-leak memory leak in __register_sysctl_table
* Struck through repros no longer work on HEAD.