memory leak in run_add_entry

Status: auto-obsoleted due to no activity on 2024/01/04 09:50
Subsystems: ntfs3
[Documentation on labels]
Reported-by: syzbot+edcb33c666a478ec67a9@syzkaller.appspotmail.com
First crash: 1052d, last: 1035d
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [ntfs3?] memory leak in run_add_entry 0 (1) 2023/09/12 10:30
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream memory leak in run_add_entry (2) prio:high ntfs3 3 C 1 114d 128d 29/29 fixed on 2026/05/21 07:50
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2023/10/11 15:00 20m retest repro upstream OK log
2023/10/11 15:00 20m retest repro upstream OK log
2023/10/11 15:00 16m retest repro upstream OK log
2023/10/10 12:11 25m retest repro upstream OK log
2023/10/10 12:11 18m retest repro upstream OK log
2023/10/10 12:11 23m retest repro upstream OK log
2023/10/10 12:11 23m retest repro upstream OK log
2023/10/10 12:11 22m retest repro upstream OK log
2023/10/06 06:11 22m almaz.alexandrovich@paragon-software.com https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master OK log
2023/09/28 13:44 18m almaz.alexandrovich@paragon-software.com https://github.com/Paragon-Software-Group/linux-ntfs3.git master OK log

Sample crash report:
BUG: memory leak
unreferenced object 0xffff88810bfe1780 (size 64):
  comm "syz-executor224", pid 5019, jiffies 4294942482 (age 13.000s)
  hex dump (first 32 bytes):
    00 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8157473e>] __do_kmalloc_node mm/slab_common.c:1022 [inline]
    [<ffffffff8157473e>] __kmalloc_node+0x4e/0x150 mm/slab_common.c:1030
    [<ffffffff81563d69>] kmalloc_node include/linux/slab.h:619 [inline]
    [<ffffffff81563d69>] kvmalloc_node+0x99/0x170 mm/util.c:607
    [<ffffffff81bff9f9>] kvmalloc include/linux/slab.h:737 [inline]
    [<ffffffff81bff9f9>] run_add_entry+0x559/0x720 fs/ntfs3/run.c:389
    [<ffffffff81c00eec>] run_unpack+0x53c/0x620 fs/ntfs3/run.c:1021
    [<ffffffff81c01047>] run_unpack_ex+0x77/0x320 fs/ntfs3/run.c:1060
    [<ffffffff81bf0a83>] ntfs_read_mft fs/ntfs3/inode.c:400 [inline]
    [<ffffffff81bf0a83>] ntfs_iget5+0x633/0x1a90 fs/ntfs3/inode.c:532
    [<ffffffff81bd2f96>] ntfs_loadlog_and_replay+0x86/0x280 fs/ntfs3/fsntfs.c:297
    [<ffffffff81c04377>] ntfs_fill_super+0x1057/0x22f0 fs/ntfs3/super.c:1222
    [<ffffffff81691e81>] get_tree_bdev+0x1b1/0x280 fs/super.c:1577
    [<ffffffff8168f18a>] vfs_get_tree+0x2a/0x130 fs/super.c:1750
    [<ffffffff816d461f>] do_new_mount fs/namespace.c:3335 [inline]
    [<ffffffff816d461f>] path_mount+0xc8f/0x10d0 fs/namespace.c:3662
    [<ffffffff816d5211>] do_mount fs/namespace.c:3675 [inline]
    [<ffffffff816d5211>] __do_sys_mount fs/namespace.c:3884 [inline]
    [<ffffffff816d5211>] __se_sys_mount fs/namespace.c:3861 [inline]
    [<ffffffff816d5211>] __x64_sys_mount+0x1a1/0x1f0 fs/namespace.c:3861
    [<ffffffff84b32fc8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84b32fc8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff8881082bee40 (size 8):
  comm "syz-executor224", pid 5019, jiffies 4294942482 (age 13.000s)
  hex dump (first 8 bytes):
    00 00 00 00 00 00 00 00                          ........
  backtrace:
    [<ffffffff8157488b>] __do_kmalloc_node mm/slab_common.c:1022 [inline]
    [<ffffffff8157488b>] __kmalloc+0x4b/0x150 mm/slab_common.c:1036
    [<ffffffff81bcba5c>] kmalloc_array include/linux/slab.h:636 [inline]
    [<ffffffff81bcba5c>] kcalloc include/linux/slab.h:667 [inline]
    [<ffffffff81bcba5c>] wnd_init+0xdc/0x140 fs/ntfs3/bitmap.c:662
    [<ffffffff81c0448d>] ntfs_fill_super+0x116d/0x22f0 fs/ntfs3/super.c:1257
    [<ffffffff81691e81>] get_tree_bdev+0x1b1/0x280 fs/super.c:1577
    [<ffffffff8168f18a>] vfs_get_tree+0x2a/0x130 fs/super.c:1750
    [<ffffffff816d461f>] do_new_mount fs/namespace.c:3335 [inline]
    [<ffffffff816d461f>] path_mount+0xc8f/0x10d0 fs/namespace.c:3662
    [<ffffffff816d5211>] do_mount fs/namespace.c:3675 [inline]
    [<ffffffff816d5211>] __do_sys_mount fs/namespace.c:3884 [inline]
    [<ffffffff816d5211>] __se_sys_mount fs/namespace.c:3861 [inline]
    [<ffffffff816d5211>] __x64_sys_mount+0x1a1/0x1f0 fs/namespace.c:3861
    [<ffffffff84b32fc8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84b32fc8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88810bfe1580 (size 64):
  comm "syz-executor224", pid 5019, jiffies 4294942482 (age 13.000s)
  hex dump (first 32 bytes):
    00 00 00 00 01 00 00 00 06 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8157473e>] __do_kmalloc_node mm/slab_common.c:1022 [inline]
    [<ffffffff8157473e>] __kmalloc_node+0x4e/0x150 mm/slab_common.c:1030
    [<ffffffff81563d69>] kmalloc_node include/linux/slab.h:619 [inline]
    [<ffffffff81563d69>] kvmalloc_node+0x99/0x170 mm/util.c:607
    [<ffffffff81bff9f9>] kvmalloc include/linux/slab.h:737 [inline]
    [<ffffffff81bff9f9>] run_add_entry+0x559/0x720 fs/ntfs3/run.c:389
    [<ffffffff81c00eec>] run_unpack+0x53c/0x620 fs/ntfs3/run.c:1021
    [<ffffffff81c01047>] run_unpack_ex+0x77/0x320 fs/ntfs3/run.c:1060
    [<ffffffff81bf0a83>] ntfs_read_mft fs/ntfs3/inode.c:400 [inline]
    [<ffffffff81bf0a83>] ntfs_iget5+0x633/0x1a90 fs/ntfs3/inode.c:532
    [<ffffffff81c0450d>] ntfs_fill_super+0x11ed/0x22f0 fs/ntfs3/super.c:1272
    [<ffffffff81691e81>] get_tree_bdev+0x1b1/0x280 fs/super.c:1577
    [<ffffffff8168f18a>] vfs_get_tree+0x2a/0x130 fs/super.c:1750
    [<ffffffff816d461f>] do_new_mount fs/namespace.c:3335 [inline]
    [<ffffffff816d461f>] path_mount+0xc8f/0x10d0 fs/namespace.c:3662
    [<ffffffff816d5211>] do_mount fs/namespace.c:3675 [inline]
    [<ffffffff816d5211>] __do_sys_mount fs/namespace.c:3884 [inline]
    [<ffffffff816d5211>] __se_sys_mount fs/namespace.c:3861 [inline]
    [<ffffffff816d5211>] __x64_sys_mount+0x1a1/0x1f0 fs/namespace.c:3861
    [<ffffffff84b32fc8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84b32fc8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff8881082be8c8 (size 8):
  comm "syz-executor224", pid 5019, jiffies 4294942482 (age 13.000s)
  hex dump (first 8 bytes):
    fd 03 00 00 00 00 00 00                          ........
  backtrace:
    [<ffffffff8157488b>] __do_kmalloc_node mm/slab_common.c:1022 [inline]
    [<ffffffff8157488b>] __kmalloc+0x4b/0x150 mm/slab_common.c:1036
    [<ffffffff81bcba5c>] kmalloc_array include/linux/slab.h:636 [inline]
    [<ffffffff81bcba5c>] kcalloc include/linux/slab.h:667 [inline]
    [<ffffffff81bcba5c>] wnd_init+0xdc/0x140 fs/ntfs3/bitmap.c:662
    [<ffffffff81c045b9>] ntfs_fill_super+0x1299/0x22f0 fs/ntfs3/super.c:1294
    [<ffffffff81691e81>] get_tree_bdev+0x1b1/0x280 fs/super.c:1577
    [<ffffffff8168f18a>] vfs_get_tree+0x2a/0x130 fs/super.c:1750
    [<ffffffff816d461f>] do_new_mount fs/namespace.c:3335 [inline]
    [<ffffffff816d461f>] path_mount+0xc8f/0x10d0 fs/namespace.c:3662
    [<ffffffff816d5211>] do_mount fs/namespace.c:3675 [inline]
    [<ffffffff816d5211>] __do_sys_mount fs/namespace.c:3884 [inline]
    [<ffffffff816d5211>] __se_sys_mount fs/namespace.c:3861 [inline]
    [<ffffffff816d5211>] __x64_sys_mount+0x1a1/0x1f0 fs/namespace.c:3861
    [<ffffffff84b32fc8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84b32fc8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/09/24 01:48 upstream 3aba70aed91f 0b6a67ac .config console log report syz C [mounted in repro] ci-upstream-gce-leak memory leak in run_add_entry
2023/09/16 09:47 upstream e42bebf6db29 0b6a67ac .config console log report syz C [mounted in repro] ci-upstream-gce-leak memory leak in run_add_entry
2023/09/12 10:37 upstream 0bb80ecc33a8 59da8366 .config console log report syz C [mounted in repro] ci-upstream-gce-leak memory leak in run_add_entry
2023/09/08 10:40 upstream 4a0fc73da97e 72324844 .config console log report syz C [mounted in repro] ci-upstream-gce-leak memory leak in run_add_entry
2023/09/08 10:20 upstream 4a0fc73da97e 72324844 .config console log report syz C [mounted in repro] ci-upstream-gce-leak memory leak in run_add_entry
2023/09/26 09:50 upstream 6465e260f487 0b6a67ac .config console log report syz [mounted in repro] ci-upstream-gce-leak memory leak in run_add_entry
2023/09/26 04:11 upstream 6465e260f487 0b6a67ac .config console log report syz [mounted in repro] ci-upstream-gce-leak memory leak in run_add_entry
2023/09/25 19:24 upstream 6465e260f487 0b6a67ac .config console log report syz [mounted in repro] ci-upstream-gce-leak memory leak in run_add_entry
* Struck through repros no longer work on HEAD.