syzbot

 sign-in | mailing list | source | docs
🐞 Open [1032] ≡ Subsystems 🐞 Fixed [5263] 🐞 Invalid [12582] ⬇ Missing Backports [85] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

memory leak in copy_net_ns (2)

Status: auto-obsoleted due to no activity on 2024/02/10 06:01
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+989b6c53cd6d6ec47ab2@syzkaller.appspotmail.com
First crash: 233d, last: 195d
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [net?] memory leak in copy_net_ns (2) 0 (1) 2023/12/01 16:14
▶ ▼ Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream memory leak in copy_net_ns C done 422 1648d 1685d 13/26 fixed on 2019/11/23 02:56
▶ ▼ Last patch testing requests (4)
Created Duration User Patch Repo Result
2024/02/10 05:41 19m retest repro upstream OK log
2023/12/01 14:19 1h40m edumazet@google.com upstream report log
2023/11/07 13:54 30m retest repro upstream log
2023/09/30 08:09 24m retest repro upstream OK log

Sample crash report:
BUG: memory leak
unreferenced object 0xffff88810e8d3660 (size 32):
  comm "syz-executor.3", pid 5088, jiffies 4294979538 (age 423.340s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff81574aa5>] kmalloc_trace+0x25/0x90 mm/slab_common.c:1117
    [<ffffffff83eb94f0>] kmalloc include/linux/slab.h:599 [inline]
    [<ffffffff83eb94f0>] kzalloc include/linux/slab.h:720 [inline]
    [<ffffffff83eb94f0>] net_alloc net/core/net_namespace.c:422 [inline]
    [<ffffffff83eb94f0>] copy_net_ns+0xc0/0x3d0 net/core/net_namespace.c:476
    [<ffffffff812db5d7>] create_new_namespaces+0x197/0x500 kernel/nsproxy.c:110
    [<ffffffff812dc012>] unshare_nsproxy_namespaces+0xa2/0x120 kernel/nsproxy.c:228
    [<ffffffff81293f84>] ksys_unshare+0x314/0x610 kernel/fork.c:3435
    [<ffffffff81294296>] __do_sys_unshare kernel/fork.c:3506 [inline]
    [<ffffffff81294296>] __se_sys_unshare kernel/fork.c:3504 [inline]
    [<ffffffff81294296>] __x64_sys_unshare+0x16/0x20 kernel/fork.c:3504
    [<ffffffff84b2b548>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84b2b548>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88810e8d3fa0 (size 32):
  comm "syz-executor.4", pid 5078, jiffies 4294979546 (age 423.260s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff81574aa5>] kmalloc_trace+0x25/0x90 mm/slab_common.c:1117
    [<ffffffff83eb94f0>] kmalloc include/linux/slab.h:599 [inline]
    [<ffffffff83eb94f0>] kzalloc include/linux/slab.h:720 [inline]
    [<ffffffff83eb94f0>] net_alloc net/core/net_namespace.c:422 [inline]
    [<ffffffff83eb94f0>] copy_net_ns+0xc0/0x3d0 net/core/net_namespace.c:476
    [<ffffffff812db5d7>] create_new_namespaces+0x197/0x500 kernel/nsproxy.c:110
    [<ffffffff812dc012>] unshare_nsproxy_namespaces+0xa2/0x120 kernel/nsproxy.c:228
    [<ffffffff81293f84>] ksys_unshare+0x314/0x610 kernel/fork.c:3435
    [<ffffffff81294296>] __do_sys_unshare kernel/fork.c:3506 [inline]
    [<ffffffff81294296>] __se_sys_unshare kernel/fork.c:3504 [inline]
    [<ffffffff81294296>] __x64_sys_unshare+0x16/0x20 kernel/fork.c:3504
    [<ffffffff84b2b548>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84b2b548>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888111239400 (size 32):
  comm "syz-executor.1", pid 5075, jiffies 4294979553 (age 423.190s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff81574aa5>] kmalloc_trace+0x25/0x90 mm/slab_common.c:1117
    [<ffffffff83eb94f0>] kmalloc include/linux/slab.h:599 [inline]
    [<ffffffff83eb94f0>] kzalloc include/linux/slab.h:720 [inline]
    [<ffffffff83eb94f0>] net_alloc net/core/net_namespace.c:422 [inline]
    [<ffffffff83eb94f0>] copy_net_ns+0xc0/0x3d0 net/core/net_namespace.c:476
    [<ffffffff812db5d7>] create_new_namespaces+0x197/0x500 kernel/nsproxy.c:110
    [<ffffffff812dc012>] unshare_nsproxy_namespaces+0xa2/0x120 kernel/nsproxy.c:228
    [<ffffffff81293f84>] ksys_unshare+0x314/0x610 kernel/fork.c:3435
    [<ffffffff81294296>] __do_sys_unshare kernel/fork.c:3506 [inline]
    [<ffffffff81294296>] __se_sys_unshare kernel/fork.c:3504 [inline]
    [<ffffffff81294296>] __x64_sys_unshare+0x16/0x20 kernel/fork.c:3504
    [<ffffffff84b2b548>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84b2b548>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888111239840 (size 32):
  comm "syz-executor.7", pid 5076, jiffies 4294979555 (age 423.170s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff81574aa5>] kmalloc_trace+0x25/0x90 mm/slab_common.c:1117
    [<ffffffff83eb94f0>] kmalloc include/linux/slab.h:599 [inline]
    [<ffffffff83eb94f0>] kzalloc include/linux/slab.h:720 [inline]
    [<ffffffff83eb94f0>] net_alloc net/core/net_namespace.c:422 [inline]
    [<ffffffff83eb94f0>] copy_net_ns+0xc0/0x3d0 net/core/net_namespace.c:476
    [<ffffffff812db5d7>] create_new_namespaces+0x197/0x500 kernel/nsproxy.c:110
    [<ffffffff812dc012>] unshare_nsproxy_namespaces+0xa2/0x120 kernel/nsproxy.c:228
    [<ffffffff81293f84>] ksys_unshare+0x314/0x610 kernel/fork.c:3435
    [<ffffffff81294296>] __do_sys_unshare kernel/fork.c:3506 [inline]
    [<ffffffff81294296>] __se_sys_unshare kernel/fork.c:3504 [inline]
    [<ffffffff81294296>] __x64_sys_unshare+0x16/0x20 kernel/fork.c:3504
    [<ffffffff84b2b548>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84b2b548>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888143eae6c0 (size 32):
  comm "syz-executor.6", pid 5077, jiffies 4294979559 (age 423.180s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff81574aa5>] kmalloc_trace+0x25/0x90 mm/slab_common.c:1117
    [<ffffffff83eb94f0>] kmalloc include/linux/slab.h:599 [inline]
    [<ffffffff83eb94f0>] kzalloc include/linux/slab.h:720 [inline]
    [<ffffffff83eb94f0>] net_alloc net/core/net_namespace.c:422 [inline]
    [<ffffffff83eb94f0>] copy_net_ns+0xc0/0x3d0 net/core/net_namespace.c:476
    [<ffffffff812db5d7>] create_new_namespaces+0x197/0x500 kernel/nsproxy.c:110
    [<ffffffff812dc012>] unshare_nsproxy_namespaces+0xa2/0x120 kernel/nsproxy.c:228
    [<ffffffff81293f84>] ksys_unshare+0x314/0x610 kernel/fork.c:3435
    [<ffffffff81294296>] __do_sys_unshare kernel/fork.c:3506 [inline]
    [<ffffffff81294296>] __se_sys_unshare kernel/fork.c:3504 [inline]
    [<ffffffff81294296>] __x64_sys_unshare+0x16/0x20 kernel/fork.c:3504
    [<ffffffff84b2b548>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84b2b548>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

[  846.

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/10/24 13:05 upstream e017769f4ce2 af8d2e46 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in copy_net_ns
2023/09/16 07:27 upstream e42bebf6db29 0b6a67ac .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in copy_net_ns
* Struck through repros no longer work on HEAD.