memory leak in qrtr

memory leak in qrtr_create
Status: upstream: reported C repro on 2021/02/08 11:10
Reported-by: syzbot+35a511c72ea7356cdcf3@syzkaller.appspotmail.com
Fix commit: net: qrtr: fix memory leaks
Patched on: [ci-upstream-linux-next-kasan-gce-root ci-upstream-net-this-kasan-gce], missing on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-net-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb]
First crash: 183d, last: 4h41m

Patch testing requests:
Created	Duration	User	Patch	Repo	Result
2021/07/22 12:03	16m	paskripkin@gmail.com	patch	upstream	OK

Sample crash report:

BUG: memory leak
unreferenced object 0xffff888114f69740 (size 824):
  comm "syz-executor828", pid 8802, jiffies 4294952673 (age 28.900s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    2a 00 01 40 00 00 00 00 00 00 00 00 00 00 00 00  *..@............
  backtrace:
    [<000000004be4e1f1>] sk_prot_alloc+0x3e/0x1c0 net/core/sock.c:1679
    [<000000007f2f489d>] sk_alloc+0x30/0x3f0 net/core/sock.c:1739
    [<00000000757a0f8f>] qrtr_create+0x4d/0xb0 net/qrtr/qrtr.c:1258
    [<00000000bbc4ee06>] __sock_create+0x1ab/0x2b0 net/socket.c:1406
    [<00000000db625ed5>] sock_create net/socket.c:1457 [inline]
    [<00000000db625ed5>] __sys_socket+0x6f/0x140 net/socket.c:1499
    [<000000007aee78f9>] __do_sys_socket net/socket.c:1508 [inline]
    [<000000007aee78f9>] __se_sys_socket net/socket.c:1506 [inline]
    [<000000007aee78f9>] __x64_sys_socket+0x1a/0x20 net/socket.c:1506
    [<000000007941a062>] do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
    [<00000000b7d67485>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888114f69740 (size 824):
  comm "syz-executor828", pid 8802, jiffies 4294952673 (age 28.960s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    2a 00 01 40 00 00 00 00 00 00 00 00 00 00 00 00  *..@............
  backtrace:
    [<000000004be4e1f1>] sk_prot_alloc+0x3e/0x1c0 net/core/sock.c:1679
    [<000000007f2f489d>] sk_alloc+0x30/0x3f0 net/core/sock.c:1739
    [<00000000757a0f8f>] qrtr_create+0x4d/0xb0 net/qrtr/qrtr.c:1258
    [<00000000bbc4ee06>] __sock_create+0x1ab/0x2b0 net/socket.c:1406
    [<00000000db625ed5>] sock_create net/socket.c:1457 [inline]
    [<00000000db625ed5>] __sys_socket+0x6f/0x140 net/socket.c:1499
    [<000000007aee78f9>] __do_sys_socket net/socket.c:1508 [inline]
    [<000000007aee78f9>] __se_sys_socket net/socket.c:1506 [inline]
    [<000000007aee78f9>] __x64_sys_socket+0x1a/0x20 net/socket.c:1506
    [<000000007941a062>] do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
    [<00000000b7d67485>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888114f69740 (size 824):
  comm "syz-executor828", pid 8802, jiffies 4294952673 (age 29.020s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    2a 00 01 40 00 00 00 00 00 00 00 00 00 00 00 00  *..@............
  backtrace:
    [<000000004be4e1f1>] sk_prot_alloc+0x3e/0x1c0 net/core/sock.c:1679
    [<000000007f2f489d>] sk_alloc+0x30/0x3f0 net/core/sock.c:1739
    [<00000000757a0f8f>] qrtr_create+0x4d/0xb0 net/qrtr/qrtr.c:1258
    [<00000000bbc4ee06>] __sock_create+0x1ab/0x2b0 net/socket.c:1406
    [<00000000db625ed5>] sock_create net/socket.c:1457 [inline]
    [<00000000db625ed5>] __sys_socket+0x6f/0x140 net/socket.c:1499
    [<000000007aee78f9>] __do_sys_socket net/socket.c:1508 [inline]
    [<000000007aee78f9>] __se_sys_socket net/socket.c:1506 [inline]
    [<000000007aee78f9>] __x64_sys_socket+0x1a/0x20 net/socket.c:1506
    [<000000007941a062>] do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
    [<00000000b7d67485>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888114f69740 (size 824):
  comm "syz-executor828", pid 8802, jiffies 4294952673 (age 29.090s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    2a 00 01 40 00 00 00 00 00 00 00 00 00 00 00 00  *..@............
  backtrace:
    [<000000004be4e1f1>] sk_prot_alloc+0x3e/0x1c0 net/core/sock.c:1679
    [<000000007f2f489d>] sk_alloc+0x30/0x3f0 net/core/sock.c:1739
    [<00000000757a0f8f>] qrtr_create+0x4d/0xb0 net/qrtr/qrtr.c:1258
    [<00000000bbc4ee06>] __sock_create+0x1ab/0x2b0 net/socket.c:1406
    [<00000000db625ed5>] sock_create net/socket.c:1457 [inline]
    [<00000000db625ed5>] __sys_socket+0x6f/0x140 net/socket.c:1499
    [<000000007aee78f9>] __do_sys_socket net/socket.c:1508 [inline]
    [<000000007aee78f9>] __se_sys_socket net/socket.c:1506 [inline]
    [<000000007aee78f9>] __x64_sys_socket+0x1a/0x20 net/socket.c:1506
    [<000000007941a062>] do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
    [<00000000b7d67485>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888114f69740 (size 824):
  comm "syz-executor828", pid 8802, jiffies 4294952673 (age 29.150s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    2a 00 01 40 00 00 00 00 00 00 00 00 00 00 00 00  *..@............
  backtrace:
    [<000000004be4e1f1>] sk_prot_alloc+0x3e/0x1c0 net/core/sock.c:1679
    [<000000007f2f489d>] sk_alloc+0x30/0x3f0 net/core/sock.c:1739
    [<00000000757a0f8f>] qrtr_create+0x4d/0xb0 net/qrtr/qrtr.c:1258
    [<00000000bbc4ee06>] __sock_create+0x1ab/0x2b0 net/socket.c:1406
    [<00000000db625ed5>] sock_create net/socket.c:1457 [inline]
    [<00000000db625ed5>] __sys_socket+0x6f/0x140 net/socket.c:1499
    [<000000007aee78f9>] __do_sys_socket net/socket.c:1508 [inline]
    [<000000007aee78f9>] __se_sys_socket net/socket.c:1506 [inline]
    [<000000007aee78f9>] __x64_sys_socket+0x1a/0x20 net/socket.c:1506
    [<000000007941a062>] do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
    [<00000000b7d67485>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888114f69740 (size 824):
  comm "syz-executor828", pid 8802, jiffies 4294952673 (age 29.210s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    2a 00 01 40 00 00 00 00 00 00 00 00 00 00 00 00  *..@............
  backtrace:
    [<000000004be4e1f1>] sk_prot_alloc+0x3e/0x1c0 net/core/sock.c:1679
    [<000000007f2f489d>] sk_alloc+0x30/0x3f0 net/core/sock.c:1739
    [<00000000757a0f8f>] qrtr_create+0x4d/0xb0 net/qrtr/qrtr.c:1258
    [<00000000bbc4ee06>] __sock_create+0x1ab/0x2b0 net/socket.c:1406
    [<00000000db625ed5>] sock_create net/socket.c:1457 [inline]
    [<00000000db625ed5>] __sys_socket+0x6f/0x140 net/socket.c:1499
    [<000000007aee78f9>] __do_sys_socket net/socket.c:1508 [inline]
    [<000000007aee78f9>] __se_sys_socket net/socket.c:1506 [inline]
    [<000000007aee78f9>] __x64_sys_socket+0x1a/0x20 net/socket.c:1506
    [<000000007941a062>] do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
    [<00000000b7d67485>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888114f69740 (size 824):
  comm "syz-executor828", pid 8802, jiffies 4294952673 (age 29.270s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    2a 00 01 40 00 00 00 00 00 00 00 00 00 00 00 00  *..@............
  backtrace:
    [<000000004be4e1f1>] sk_prot_alloc+0x3e/0x1c0 net/core/sock.c:1679
    [<000000007f2f489d>] sk_alloc+0x30/0x3f0 net/core/sock.c:1739
    [<00000000757a0f8f>] qrtr_create+0x4d/0xb0 net/qrtr/qrtr.c:1258
    [<00000000bbc4ee06>] __sock_create+0x1ab/0x2b0 net/socket.c:1406
    [<00000000db625ed5>] sock_create net/socket.c:1457 [inline]
    [<00000000db625ed5>] __sys_socket+0x6f/0x140 net/socket.c:1499
    [<000000007aee78f9>] __do_sys_socket net/socket.c:1508 [inline]
    [<000000007aee78f9>] __se_sys_socket net/socket.c:1506 [inline]
    [<000000007aee78f9>] __x64_sys_socket+0x1a/0x20 net/socket.c:1506
    [<000000007941a062>] do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
    [<00000000b7d67485>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff888114f69740 (size 824):
  comm "syz-executor828", pid 8802, jiffies 4294952673 (age 29.330s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    2a 00 01 40 00 00 00 00 00 00 00 00 00 00 00 00  *..@............
  backtrace:
    [<000000004be4e1f1>] sk_prot_alloc+0x3e/0x1c0 net/core/sock.c:1679
    [<000000007f2f489d>] sk_alloc+0x30/0x3f0 net/core/sock.c:1739
    [<00000000757a0f8f>] qrtr_create+0x4d/0xb0 net/qrtr/qrtr.c:1258
    [<00000000bbc4ee06>] __sock_create+0x1ab/0x2b0 net/socket.c:1406
    [<00000000db625ed5>] sock_create net/socket.c:1457 [inline]
    [<00000000db625ed5>] __sys_socket+0x6f/0x140 net/socket.c:1499
    [<000000007aee78f9>] __do_sys_socket net/socket.c:1508 [inline]
    [<000000007aee78f9>] __se_sys_socket net/socket.c:1506 [inline]
    [<000000007aee78f9>] __x64_sys_socket+0x1a/0x20 net/socket.c:1506
    [<000000007941a062>] do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
    [<00000000b7d67485>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to /proc/sys/kernel/hung_task_check_interval_secs failed: No such file or directory
write to /proc/sys/kernel/softlockup_all_cpu_backtrace failed: No such file or directory
write to /proc/sys/kernel/hung_task_check_interval_secs failed: No such file or directory
write to /proc/sys/kernel/softlockup_all_cpu_backtrace failed: No such file or directory
write to /proc/sys/kernel/hung_task_check_interval_secs failed: No such file or directory
write to /proc/sys/kernel/softlockup_all_cpu_backtrace failed: No such file or directory
write to /proc/sys/kernel/hung_task_check_interval_secs failed: No such file or directory
write to /proc/sys/kernel/softlockup_all_cpu_backtrace failed: No such file or directory
write to /proc/sys/kernel/hung_task_check_interval_secs failed: No such file or directory
write to /proc/sys/kernel/softlockup_all_cpu_backtrace failed: No such file or directory
write to /proc/sys/kernel/hung_task_check_interval_secs failed: No such file or directory
write to /proc/sys/kernel/softlockup_all_cpu_backtrace failed: No such file or directory
write to /proc/sys/kernel/hung_task_check_interval_secs failed: No such file or directory
write to /proc/sys/kernel/softlockup_all_cpu_backtrace failed: No such file or directory
write to /proc/sys/kernel/hung_task_check_interval_secs failed: No such file or directory
write to /proc/sys/kernel/softlockup_all_cpu_backtrace failed: No such file or directory

Crashes (3):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	Title
ci-upstream-gce-leak	2021/02/15 11:08	upstream	f40ddce88593	98682e5e	.config	log	report	syz	C	memory leak in qrtr_create
ci-upstream-gce-leak	2021/01/27 06:50	upstream	13391c60da33	55a7d4df	.config	log	report	syz	C	memory leak in qrtr_create
ci-upstream-gce-leak	2021/07/29 06:56	upstream	4010a528219e	9a4781d4	.config	log	report	syz		memory leak in qrtr_create