memory leak in sctp_send_reset_streams

Status: fixed on 2019/10/04 12:05
Subsystems: sctp
[Documentation on labels]
Reported-by: syzbot+6ad9c3bd0a218a2ab41d@syzkaller.appspotmail.com
Fix commit: 6d5afe20397b sctp: fix memleak in sctp_send_reset_streams
First crash: 2622d, last: 2545d
▶ ▼ Discussions (5)
Title Replies (including bot) Last reply
Re: [PATCH] net: sctp: fix memory leak in sctp_send_reset_streams 4 (4) 2019/07/25 02:19
Reminder: 10 open syzbot bugs in "net/sctp" subsystem 1 (1) 2019/07/24 02:27
Reminder: 14 open syzbot bugs in "net/sctp" subsystem 1 (1) 2019/06/25 05:49
Re: memory leak in sctp_send_reset_streams 1 (1) 2019/06/01 15:47
memory leak in sctp_send_reset_streams 1 (2) 2019/05/31 21:19

Sample crash report:
executing program
executing program
executing program
executing program
BUG: memory leak
unreferenced object 0xffff888123bd2a60 (size 32):
  comm "syz-executor192", pid 7073, jiffies 4294944127 (age 20.070s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<000000001e0a2078>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000001e0a2078>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<000000001e0a2078>] slab_alloc mm/slab.c:3319 [inline]
    [<000000001e0a2078>] __do_kmalloc mm/slab.c:3653 [inline]
    [<000000001e0a2078>] __kmalloc+0x169/0x300 mm/slab.c:3664
    [<000000003c4808e1>] kmalloc_array include/linux/slab.h:676 [inline]
    [<000000003c4808e1>] kcalloc include/linux/slab.h:687 [inline]
    [<000000003c4808e1>] sctp_send_reset_streams+0x1ab/0x5a0 net/sctp/stream.c:309
    [<0000000006a77f21>] sctp_setsockopt_reset_streams net/sctp/socket.c:4311 [inline]
    [<0000000006a77f21>] sctp_setsockopt net/sctp/socket.c:4762 [inline]
    [<0000000006a77f21>] sctp_setsockopt+0xc2e/0x2bd0 net/sctp/socket.c:4605
    [<00000000444e9e25>] sock_common_setsockopt+0x38/0x50 net/core/sock.c:3130
    [<000000007ef8096b>] __sys_setsockopt+0x10f/0x220 net/socket.c:2084
    [<000000002850cc8d>] __do_sys_setsockopt net/socket.c:2100 [inline]
    [<000000002850cc8d>] __se_sys_setsockopt net/socket.c:2097 [inline]
    [<000000002850cc8d>] __x64_sys_setsockopt+0x26/0x30 net/socket.c:2097
    [<00000000b3f50d18>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000003a6736d1>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff8881102df8e0 (size 32):
  comm "syz-executor192", pid 7074, jiffies 4294944719 (age 14.150s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<000000001e0a2078>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000001e0a2078>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<000000001e0a2078>] slab_alloc mm/slab.c:3319 [inline]
    [<000000001e0a2078>] __do_kmalloc mm/slab.c:3653 [inline]
    [<000000001e0a2078>] __kmalloc+0x169/0x300 mm/slab.c:3664
    [<000000003c4808e1>] kmalloc_array include/linux/slab.h:676 [inline]
    [<000000003c4808e1>] kcalloc include/linux/slab.h:687 [inline]
    [<000000003c4808e1>] sctp_send_reset_streams+0x1ab/0x5a0 net/sctp/stream.c:309
    [<0000000006a77f21>] sctp_setsockopt_reset_streams net/sctp/socket.c:4311 [inline]
    [<0000000006a77f21>] sctp_setsockopt net/sctp/socket.c:4762 [inline]
    [<0000000006a77f21>] sctp_setsockopt+0xc2e/0x2bd0 net/sctp/socket.c:4605
    [<00000000444e9e25>] sock_common_setsockopt+0x38/0x50 net/core/sock.c:3130
    [<000000007ef8096b>] __sys_setsockopt+0x10f/0x220 net/socket.c:2084
    [<000000002850cc8d>] __do_sys_setsockopt net/socket.c:2100 [inline]
    [<000000002850cc8d>] __se_sys_setsockopt net/socket.c:2097 [inline]
    [<000000002850cc8d>] __x64_sys_setsockopt+0x26/0x30 net/socket.c:2097
    [<00000000b3f50d18>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<000000003a6736d1>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/08/16 10:52 upstream a69e90512d9d 8fd428a1 .config console log report syz C ci-upstream-gce-leak
2019/08/04 00:39 upstream dcb8cfbd8fe9 6affd8e8 .config console log report syz C ci-upstream-gce-leak
2019/07/29 06:22 upstream a9815a4fa2fd c85e1c5b .config console log report syz C ci-upstream-gce-leak
2019/07/25 05:44 upstream bed38c3e2dca 32329ceb .config console log report syz C ci-upstream-gce-leak
2019/07/22 04:47 upstream c6dd78fcb8ee 1656845f .config console log report syz C ci-upstream-gce-leak
2019/07/20 15:32 upstream abdfd52a295f 1656845f .config console log report syz C ci-upstream-gce-leak
2019/05/31 19:33 upstream 036e34310931 142ce681 .config console log report syz C ci-upstream-gce-leak
* Struck through repros no longer work on HEAD.