syzbot


memory leak in cap_inode_getsecurity

Status: upstream: reported C repro on 2019/10/03 19:59
Reported-by: syzbot+942d5390db2d9624ced8@syzkaller.appspotmail.com
First crash: 1096d, last: 64d
Patch testing requests:
Created Duration User Patch Repo Result
2022/08/03 04:36 16m miklos@szeredi.hu patch upstream OK log
2022/08/01 12:20 15m miklos@szeredi.hu patch upstream OK log
2022/08/01 10:11 16m miklos@szeredi.hu patch upstream OK log
2021/08/03 02:11 9m phind.uet@gmail.com patch linux-next report log
2021/08/02 16:15 12m phind.uet@gmail.com linux-next report log
2021/07/30 13:32 8m phind.uet@gmail.com upstream report log

Sample crash report:
executing program
BUG: memory leak
unreferenced object 0xffff88810f0ac060 (size 32):
  comm "syz-executor240", pid 3622, jiffies 4294961303 (age 14.040s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff814c6ecd>] __do_krealloc mm/slab_common.c:1185 [inline]
    [<ffffffff814c6ecd>] krealloc+0x4d/0xb0 mm/slab_common.c:1218
    [<ffffffff8162625c>] vfs_getxattr_alloc+0x13c/0x1c0 fs/xattr.c:379
    [<ffffffff822374b2>] cap_inode_getsecurity+0xb2/0x500 security/commoncap.c:400
    [<ffffffff8223d88c>] security_inode_getsecurity+0x7c/0xb0 security/security.c:1441
    [<ffffffff81625a0a>] xattr_getsecurity fs/xattr.c:327 [inline]
    [<ffffffff81625a0a>] vfs_getxattr+0x22a/0x290 fs/xattr.c:423
    [<ffffffff81c0ab02>] ovl_xattr_get+0x62/0xa0 fs/overlayfs/inode.c:404
    [<ffffffff81624742>] __vfs_getxattr+0x72/0xa0 fs/xattr.c:401
    [<ffffffff82236f52>] cap_inode_need_killpriv+0x22/0x40 security/commoncap.c:301
    [<ffffffff8223d773>] security_inode_need_killpriv+0x23/0x60 security/security.c:1419
    [<ffffffff8161074e>] dentry_needs_remove_privs fs/inode.c:1992 [inline]
    [<ffffffff8161074e>] dentry_needs_remove_privs+0x4e/0xa0 fs/inode.c:1982
    [<ffffffff815cfead>] do_truncate+0x7d/0x130 fs/open.c:57
    [<ffffffff815d0169>] vfs_truncate+0x209/0x240 fs/open.c:111
    [<ffffffff815d0268>] do_sys_truncate.part.0+0xc8/0xe0 fs/open.c:134
    [<ffffffff815d0303>] do_sys_truncate fs/open.c:128 [inline]
    [<ffffffff815d0303>] __do_sys_truncate fs/open.c:146 [inline]
    [<ffffffff815d0303>] __se_sys_truncate fs/open.c:144 [inline]
    [<ffffffff815d0303>] __x64_sys_truncate+0x33/0x50 fs/open.c:144
    [<ffffffff845b1955>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff845b1955>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84600087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd


Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-gce-leak 2022/07/31 15:11 upstream 6a010258447d fef302b1 .config log report syz C memory leak in cap_inode_getsecurity
ci-upstream-gce-leak 2019/10/03 14:23 upstream 0f1a7b3fac05 fc17ba49 .config log report syz
* Struck through repros no longer work on HEAD.