memory leak in reiserfs_parse_options (2)

Status: auto-obsoleted due to no activity on 2024/06/10 22:01
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+67d4d8261283b46b21ac@syzkaller.appspotmail.com
First crash: 1306d, last: 949d
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [reiserfs?] memory leak in reiserfs_parse_options (2) 0 (1) 2023/01/11 10:44
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream memory leak in reiserfs_parse_options fs 3 syz, C 4 2152d 2347d 15/29 fixed on 2020/11/16 12:12
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2024/06/10 21:39 21m retest repro upstream OK log
2024/06/09 14:39 21m retest repro upstream OK log
2024/04/01 15:29 20m retest repro upstream report log
2024/03/31 13:49 21m retest repro upstream report log
2024/02/22 00:15 19m retest repro upstream OK log
2024/02/22 00:15 23m retest repro upstream OK log
2024/02/22 00:15 15m retest repro upstream OK log
2024/01/21 18:05 10m retest repro upstream report log
2024/01/14 06:04 13m retest repro upstream report log
2023/12/13 20:08 14m retest repro upstream report log

Sample crash report:
BUG: memory leak
unreferenced object 0xffff8881082c9bf8 (size 8):
  comm "syz-executor117", pid 5045, jiffies 4294954788 (age 13.680s)
  hex dump (first 8 bytes):
    04 00 00 00 00 00 00 00                          ........
  backtrace:
    [<ffffffff816346fd>] kmemleak_alloc_recursive include/linux/kmemleak.h:42 [inline]
    [<ffffffff816346fd>] slab_post_alloc_hook mm/slab.h:766 [inline]
    [<ffffffff816346fd>] slab_alloc_node mm/slub.c:3478 [inline]
    [<ffffffff816346fd>] __kmem_cache_alloc_node+0x2dd/0x3f0 mm/slub.c:3517
    [<ffffffff8157f72c>] __do_kmalloc_node mm/slab_common.c:1006 [inline]
    [<ffffffff8157f72c>] __kmalloc_node_track_caller+0x4c/0x150 mm/slab_common.c:1027
    [<ffffffff8156ebfc>] kstrdup+0x3c/0x70 mm/util.c:62
    [<ffffffff81820fb4>] reiserfs_parse_options+0x974/0x1010 fs/reiserfs/super.c:1279
    [<ffffffff81823835>] reiserfs_fill_super+0x1b5/0x16a0 fs/reiserfs/super.c:1933
    [<ffffffff8169ef2c>] mount_bdev+0x15c/0x1d0 fs/super.c:1650
    [<ffffffff81706429>] legacy_get_tree+0x29/0x80 fs/fs_context.c:662
    [<ffffffff8169b9ca>] vfs_get_tree+0x2a/0x130 fs/super.c:1771
    [<ffffffff816e153f>] do_new_mount fs/namespace.c:3337 [inline]
    [<ffffffff816e153f>] path_mount+0xc8f/0x10d0 fs/namespace.c:3664
    [<ffffffff816e2131>] do_mount fs/namespace.c:3677 [inline]
    [<ffffffff816e2131>] __do_sys_mount fs/namespace.c:3886 [inline]
    [<ffffffff816e2131>] __se_sys_mount fs/namespace.c:3863 [inline]
    [<ffffffff816e2131>] __x64_sys_mount+0x1a1/0x1f0 fs/namespace.c:3863
    [<ffffffff84b71ebf>] do_syscall_x64 arch/x86/entry/common.c:52 [inline]
    [<ffffffff84b71ebf>] do_syscall_64+0x3f/0x110 arch/x86/entry/common.c:83
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0x6b

BUG: memory leak
unreferenced object 0xffff888107862d48 (size 8):
  comm "syz-executor117", pid 5049, jiffies 4294955380 (age 7.760s)
  hex dump (first 8 bytes):
    04 00 00 00 00 00 00 00                          ........
  backtrace:
    [<ffffffff816346fd>] kmemleak_alloc_recursive include/linux/kmemleak.h:42 [inline]
    [<ffffffff816346fd>] slab_post_alloc_hook mm/slab.h:766 [inline]
    [<ffffffff816346fd>] slab_alloc_node mm/slub.c:3478 [inline]
    [<ffffffff816346fd>] __kmem_cache_alloc_node+0x2dd/0x3f0 mm/slub.c:3517
    [<ffffffff8157f72c>] __do_kmalloc_node mm/slab_common.c:1006 [inline]
    [<ffffffff8157f72c>] __kmalloc_node_track_caller+0x4c/0x150 mm/slab_common.c:1027
    [<ffffffff8156ebfc>] kstrdup+0x3c/0x70 mm/util.c:62
    [<ffffffff81820fb4>] reiserfs_parse_options+0x974/0x1010 fs/reiserfs/super.c:1279
    [<ffffffff81823835>] reiserfs_fill_super+0x1b5/0x16a0 fs/reiserfs/super.c:1933
    [<ffffffff8169ef2c>] mount_bdev+0x15c/0x1d0 fs/super.c:1650
    [<ffffffff81706429>] legacy_get_tree+0x29/0x80 fs/fs_context.c:662
    [<ffffffff8169b9ca>] vfs_get_tree+0x2a/0x130 fs/super.c:1771
    [<ffffffff816e153f>] do_new_mount fs/namespace.c:3337 [inline]
    [<ffffffff816e153f>] path_mount+0xc8f/0x10d0 fs/namespace.c:3664
    [<ffffffff816e2131>] do_mount fs/namespace.c:3677 [inline]
    [<ffffffff816e2131>] __do_sys_mount fs/namespace.c:3886 [inline]
    [<ffffffff816e2131>] __se_sys_mount fs/namespace.c:3863 [inline]
    [<ffffffff816e2131>] __x64_sys_mount+0x1a1/0x1f0 fs/namespace.c:3863
    [<ffffffff84b71ebf>] do_syscall_x64 arch/x86/entry/common.c:52 [inline]
    [<ffffffff84b71ebf>] do_syscall_64+0x3f/0x110 arch/x86/entry/common.c:83
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0x6b

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/12/30 12:47 upstream f016f7547aee fb427a07 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-gce-leak memory leak in reiserfs_parse_options
2023/08/16 08:25 upstream d4f8e13b0614 39990d51 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-gce-leak memory leak in reiserfs_parse_options
2023/05/08 05:30 upstream 17784de648be 90c93c40 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-gce-leak memory leak in reiserfs_parse_options
2023/01/07 10:33 upstream a689b938df39 1dac8c7a .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-gce-leak memory leak in reiserfs_parse_options
2023/09/20 10:31 upstream 2cf0f7156238 0b6a67ac .config console log report syz [mounted in repro] ci-upstream-gce-leak memory leak in reiserfs_parse_options
* Struck through repros no longer work on HEAD.