memory leak in ip_mc_add_src (2)

Status: fixed on 2019/08/05 13:45
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+6ca1abd0db68b5173a4f@syzkaller.appspotmail.com
Fix commit: e5b1c6c6277d igmp: fix memory leak in igmpv3_del_delrec()
First crash: 2596d, last: 2567d
▶ ▼ Discussions (8)
Title Replies (including bot) Last reply
[PATCH 3.16 00/47] 3.16.76-rc1 review 57 (57) 2019/11/02 07:39
[PATCH 4.9 000/223] 4.9.187-stable review 231 (231) 2019/08/28 03:02
[PATCH 4.14 000/293] 4.14.135-stable review 302 (302) 2019/07/31 09:35
[PATCH 5.2 00/66] 5.2.4-stable review 78 (78) 2019/07/29 15:12
[PATCH 5.1 00/62] 5.1.21-stable review 68 (68) 2019/07/29 09:02
[PATCH 4.19 00/50] 4.19.62-stable review 56 (56) 2019/07/29 09:02
[PATCH net] igmp: fix memory leak in igmpv3_del_delrec() 3 (3) 2019/06/29 18:17
memory leak in ip_mc_add_src (2) 0 (1) 2019/06/27 08:17
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream memory leak in ip_mc_add_src net 3 syz, C 14 2608d 2632d 12/29 fixed on 2019/06/18 17:49
upstream memory leak in ip_mc_add_src (3) net 3 syz, C 332 1881d 2555d 0/29 closed as invalid on 2022/10/12 18:48

Sample crash report:
BUG: memory leak
unreferenced object 0xffff888121223140 (size 32):
  comm "syz-executor547", pid 7035, jiffies 4294941983 (age 7.910s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000230081af>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<00000000230081af>] slab_post_alloc_hook mm/slab.h:522 [inline]
    [<00000000230081af>] slab_alloc mm/slab.c:3319 [inline]
    [<00000000230081af>] kmem_cache_alloc_trace+0x145/0x2c0 mm/slab.c:3548
    [<000000005a47a00b>] kmalloc include/linux/slab.h:552 [inline]
    [<000000005a47a00b>] kzalloc include/linux/slab.h:748 [inline]
    [<000000005a47a00b>] ip_mc_add1_src net/ipv4/igmp.c:1973 [inline]
    [<000000005a47a00b>] ip_mc_add_src+0x36b/0x400 net/ipv4/igmp.c:2097
    [<000000008774c550>] ip_mc_source+0x2e3/0x4e0 net/ipv4/igmp.c:2418
    [<000000004f2f5e13>] do_ip_setsockopt.isra.0+0x24e/0x1930 net/ipv4/ip_sockglue.c:998
    [<00000000a2a59c93>] ip_setsockopt+0x3b/0xb0 net/ipv4/ip_sockglue.c:1248
    [<00000000ab465a3d>] tcp_setsockopt net/ipv4/tcp.c:3133 [inline]
    [<00000000ab465a3d>] tcp_setsockopt+0x46/0x80 net/ipv4/tcp.c:3127
    [<000000006b772b92>] sock_common_setsockopt+0x38/0x50 net/core/sock.c:3130
    [<000000005ee0f186>] __sys_setsockopt+0x10f/0x220 net/socket.c:2084
    [<00000000f0720539>] __do_sys_setsockopt net/socket.c:2100 [inline]
    [<00000000f0720539>] __se_sys_setsockopt net/socket.c:2097 [inline]
    [<00000000f0720539>] __x64_sys_setsockopt+0x26/0x30 net/socket.c:2097
    [<00000000b149e4ab>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:296
    [<00000000501891f4>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/07/26 00:59 upstream 6789f873ed37 732bc5a0 .config console log report syz C ci-upstream-gce-leak
2019/07/24 05:50 upstream c6dd78fcb8ee de453f34 .config console log report syz C ci-upstream-gce-leak
2019/07/22 05:13 upstream c6dd78fcb8ee 1656845f .config console log report syz C ci-upstream-gce-leak
2019/07/19 07:24 upstream 3bfe1fc46794 7bb222f7 .config console log report syz C ci-upstream-gce-leak
2019/07/18 21:06 upstream 22051d9c4a57 7bb222f7 .config console log report syz C ci-upstream-gce-leak
2019/06/26 20:31 upstream 249155c20f9b 7509bf36 .config console log report syz C ci-upstream-gce-leak
2019/06/29 09:19 upstream 556e2f6020bf 7509bf36 .config console log report syz ci-upstream-gce-leak
* Struck through repros no longer work on HEAD.