memory leak in __register_sysctl_table (2)

Status: closed as invalid on 2023/02/13 10:50
Subsystems: fs
[Documentation on labels]
First crash: 1311d, last: 1311d
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream memory leak in __register_sysctl_table (3) fs 3 syz 1 1026d 1166d 0/29 closed as invalid on 2024/01/03 13:25
upstream memory leak in __register_sysctl_table fs 3 syz, C 1 1522d 1518d 0/29 auto-obsoleted due to no activity on 2022/11/10 23:47

Sample crash report:
BUG: memory leak
unreferenced object 0xffff88810b2d4200 (size 512):
  comm "syz-executor.0", pid 5091, jiffies 4294975058 (age 13.260s)
  hex dump (first 32 bytes):
    00 dc 8f 0a 81 88 ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 ea ff ff ff ff ff ff ff  ................
  backtrace:
    [<ffffffff814f9f46>] __do_kmalloc_node mm/slab_common.c:967 [inline]
    [<ffffffff814f9f46>] __kmalloc+0x46/0x120 mm/slab_common.c:981
    [<ffffffff81710e2b>] kmalloc include/linux/slab.h:584 [inline]
    [<ffffffff81710e2b>] kzalloc include/linux/slab.h:720 [inline]
    [<ffffffff81710e2b>] __register_sysctl_table+0x7b/0x7f0 fs/proc/proc_sysctl.c:1337
    [<ffffffff83cd075c>] netfilter_log_sysctl_init net/netfilter/nf_log.c:490 [inline]
    [<ffffffff83cd075c>] nf_log_net_init+0xbc/0x1e0 net/netfilter/nf_log.c:539
    [<ffffffff83b24915>] ops_init+0x55/0x1e0 net/core/net_namespace.c:135
    [<ffffffff83b24cd2>] setup_net+0x232/0x450 net/core/net_namespace.c:333
    [<ffffffff83b26330>] copy_net_ns+0x1a0/0x3e0 net/core/net_namespace.c:483
    [<ffffffff812a21a9>] create_new_namespaces+0x199/0x4f0 kernel/nsproxy.c:110
    [<ffffffff812a2b4b>] unshare_nsproxy_namespaces+0x9b/0x120 kernel/nsproxy.c:228
    [<ffffffff81262e0e>] ksys_unshare+0x2fe/0x600 kernel/fork.c:3202
    [<ffffffff81263122>] __do_sys_unshare kernel/fork.c:3273 [inline]
    [<ffffffff81263122>] __se_sys_unshare kernel/fork.c:3271 [inline]
    [<ffffffff81263122>] __x64_sys_unshare+0x12/0x20 kernel/fork.c:3271
    [<ffffffff848f0745>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f0745>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88810a44e6c0 (size 192):
  comm "syz-executor.0", pid 5091, jiffies 4294975058 (age 13.260s)
  hex dump (first 32 bytes):
    c0 7c 2c 0b 81 88 ff ff 00 00 00 00 00 00 00 00  .|,.............
    00 00 00 00 00 00 00 00 ea ff ff ff ff ff ff ff  ................
  backtrace:
    [<ffffffff814f9f46>] __do_kmalloc_node mm/slab_common.c:967 [inline]
    [<ffffffff814f9f46>] __kmalloc+0x46/0x120 mm/slab_common.c:981
    [<ffffffff81710e2b>] kmalloc include/linux/slab.h:584 [inline]
    [<ffffffff81710e2b>] kzalloc include/linux/slab.h:720 [inline]
    [<ffffffff81710e2b>] __register_sysctl_table+0x7b/0x7f0 fs/proc/proc_sysctl.c:1337
    [<ffffffff83b2b089>] sysctl_core_net_init+0xa9/0x140 net/core/sysctl_net_core.c:653
    [<ffffffff83b24915>] ops_init+0x55/0x1e0 net/core/net_namespace.c:135
    [<ffffffff83b24cd2>] setup_net+0x232/0x450 net/core/net_namespace.c:333
    [<ffffffff83b26330>] copy_net_ns+0x1a0/0x3e0 net/core/net_namespace.c:483
    [<ffffffff812a21a9>] create_new_namespaces+0x199/0x4f0 kernel/nsproxy.c:110
    [<ffffffff812a2b4b>] unshare_nsproxy_namespaces+0x9b/0x120 kernel/nsproxy.c:228
    [<ffffffff81262e0e>] ksys_unshare+0x2fe/0x600 kernel/fork.c:3202
    [<ffffffff81263122>] __do_sys_unshare kernel/fork.c:3273 [inline]
    [<ffffffff81263122>] __se_sys_unshare kernel/fork.c:3271 [inline]
    [<ffffffff81263122>] __x64_sys_unshare+0x12/0x20 kernel/fork.c:3271
    [<ffffffff848f0745>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f0745>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88810ad0c800 (size 2048):
  comm "syz-executor.0", pid 5091, jiffies 4294975058 (age 13.260s)
  hex dump (first 32 bytes):
    08 20 d4 09 81 88 ff ff 00 00 00 00 00 00 00 00  . ..............
    00 00 00 00 00 00 00 00 ea ff ff ff ff ff ff ff  ................
  backtrace:
    [<ffffffff814f9f46>] __do_kmalloc_node mm/slab_common.c:967 [inline]
    [<ffffffff814f9f46>] __kmalloc+0x46/0x120 mm/slab_common.c:981
    [<ffffffff81710e2b>] kmalloc include/linux/slab.h:584 [inline]
    [<ffffffff81710e2b>] kzalloc include/linux/slab.h:720 [inline]
    [<ffffffff81710e2b>] __register_sysctl_table+0x7b/0x7f0 fs/proc/proc_sysctl.c:1337
    [<ffffffff83ebd550>] __devinet_sysctl_register+0xc0/0x140 net/ipv4/devinet.c:2587
    [<ffffffff83ebe37b>] devinet_init_net+0x11b/0x2f0 net/ipv4/devinet.c:2714
    [<ffffffff83b24915>] ops_init+0x55/0x1e0 net/core/net_namespace.c:135
    [<ffffffff83b24cd2>] setup_net+0x232/0x450 net/core/net_namespace.c:333
    [<ffffffff83b26330>] copy_net_ns+0x1a0/0x3e0 net/core/net_namespace.c:483
    [<ffffffff812a21a9>] create_new_namespaces+0x199/0x4f0 kernel/nsproxy.c:110
    [<ffffffff812a2b4b>] unshare_nsproxy_namespaces+0x9b/0x120 kernel/nsproxy.c:228
    [<ffffffff81262e0e>] ksys_unshare+0x2fe/0x600 kernel/fork.c:3202
    [<ffffffff81263122>] __do_sys_unshare kernel/fork.c:3273 [inline]
    [<ffffffff81263122>] __se_sys_unshare kernel/fork.c:3271 [inline]
    [<ffffffff81263122>] __x64_sys_unshare+0x12/0x20 kernel/fork.c:3271
    [<ffffffff848f0745>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f0745>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88810555b480 (size 64):
  comm "syz-executor.0", pid 5091, jiffies 4294975058 (age 13.260s)
  hex dump (first 32 bytes):
    02 00 00 00 00 00 00 00 20 e3 35 0b 81 88 ff ff  ........ .5.....
    22 01 00 00 00 00 ad de 80 e2 ed 83 ff ff ff ff  "...............
  backtrace:
    [<ffffffff814f9c67>] __do_kmalloc_node mm/slab_common.c:967 [inline]
    [<ffffffff814f9c67>] __kmalloc_node_track_caller+0x47/0x120 mm/slab_common.c:988
    [<ffffffff814e9ea8>] kmemdup+0x28/0x60 mm/util.c:129
    [<ffffffff83b8af0c>] kmemdup include/linux/fortify-string.h:695 [inline]
    [<ffffffff83b8af0c>] fib_notifier_ops_register+0x2c/0x100 net/core/fib_notifier.c:148
    [<ffffffff83ede3f6>] fib4_notifier_init+0x26/0x80 net/ipv4/fib_notifier.c:61
    [<ffffffff83ecc361>] ip_fib_net_init net/ipv4/fib_frontend.c:1532 [inline]
    [<ffffffff83ecc361>] fib_net_init+0x31/0x1b0 net/ipv4/fib_frontend.c:1604
    [<ffffffff83b24915>] ops_init+0x55/0x1e0 net/core/net_namespace.c:135
    [<ffffffff83b24cd2>] setup_net+0x232/0x450 net/core/net_namespace.c:333
    [<ffffffff83b26330>] copy_net_ns+0x1a0/0x3e0 net/core/net_namespace.c:483
    [<ffffffff812a21a9>] create_new_namespaces+0x199/0x4f0 kernel/nsproxy.c:110
    [<ffffffff812a2b4b>] unshare_nsproxy_namespaces+0x9b/0x120 kernel/nsproxy.c:228
    [<ffffffff81262e0e>] ksys_unshare+0x2fe/0x600 kernel/fork.c:3202
    [<ffffffff81263122>] __do_sys_unshare kernel/fork.c:3273 [inline]
    [<ffffffff81263122>] __se_sys_unshare kernel/fork.c:3271 [inline]
    [<ffffffff81263122>] __x64_sys_unshare+0x12/0x20 kernel/fork.c:3271
    [<ffffffff848f0745>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848f0745>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/01/09 00:55 upstream 9b43a525db12 1dac8c7a .config console log report syz ci-upstream-gce-leak memory leak in __register_sysctl_table
* Struck through repros no longer work on HEAD.