lkml.org 
[lkml]   [2021]   [Jul]   [31]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Date
Subjectmemory leak in do_seccomp
Hi All,

We had been running syzkaller on v5.10.y and a "memory leak in
do_seccomp" was being reported on it. I got some time to check that
today and have managed to get a syzkaller
reproducer. I dont have a C reproducer which I can share but I can use
the syz-reproducer to reproduce this with next-20210730.
The old report on v5.10.y is at
https://elisa-builder-00.iol.unh.edu/syzkaller/report?id=f6ddd3b592f00e95f9cbd2e74f70a5b04b015c6f

BUG: memory leak
unreferenced object 0xffff888019282c00 (size 512):
comm "syz-executor.1", pid 7389, jiffies 4294761829 (age 17.841s)
hex dump (first 32 bytes):
01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<00000000762c0963>] do_seccomp+0x2d5/0x27d0
[<0000000006e512d1>] do_syscall_64+0x3b/0x90
[<0000000094ae9ff8>] entry_SYSCALL_64_after_hwframe+0x44/0xae

BUG: memory leak
unreferenced object 0xffffc900006b5000 (size 4096):
comm "syz-executor.1", pid 7389, jiffies 4294761829 (age 17.841s)
hex dump (first 32 bytes):
01 00 00 00 00 00 00 00 00 00 00 00 05 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<00000000854901e5>] __vmalloc_node_range+0x550/0x9a0
[<000000002686628f>] __vmalloc_node+0xb5/0x100
[<0000000004cbd298>] bpf_prog_alloc_no_stats+0x38/0x350
[<0000000009149728>] bpf_prog_alloc+0x24/0x170
[<000000000fe7f1e7>] bpf_prog_create_from_user+0xad/0x2e0
[<000000000c70eb02>] do_seccomp+0x325/0x27d0
[<0000000006e512d1>] do_syscall_64+0x3b/0x90
[<0000000094ae9ff8>] entry_SYSCALL_64_after_hwframe+0x44/0xae

BUG: memory leak
unreferenced object 0xffff888026eb1000 (size 2048):
comm "syz-executor.1", pid 7389, jiffies 4294761829 (age 17.842s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<0000000072de7240>] bpf_prog_alloc_no_stats+0xeb/0x350
[<0000000009149728>] bpf_prog_alloc+0x24/0x170
[<000000000fe7f1e7>] bpf_prog_create_from_user+0xad/0x2e0
[<000000000c70eb02>] do_seccomp+0x325/0x27d0
[<0000000006e512d1>] do_syscall_64+0x3b/0x90
[<0000000094ae9ff8>] entry_SYSCALL_64_after_hwframe+0x44/0xae

BUG: memory leak
unreferenced object 0xffff888014dddac0 (size 16):
comm "syz-executor.1", pid 7389, jiffies 4294761829 (age 17.842s)
hex dump (first 16 bytes):
01 00 ca 08 80 88 ff ff c8 ef df 14 80 88 ff ff ................
backtrace:
[<00000000c5d4ed93>] bpf_prog_store_orig_filter+0x7b/0x1e0
[<000000007cb21c2a>] bpf_prog_create_from_user+0x1c6/0x2e0
[<000000000c70eb02>] do_seccomp+0x325/0x27d0
[<0000000006e512d1>] do_syscall_64+0x3b/0x90
[<0000000094ae9ff8>] entry_SYSCALL_64_after_hwframe+0x44/0xae

BUG: memory leak
unreferenced object 0xffff888014dfefc8 (size 8):
comm "syz-executor.1", pid 7389, jiffies 4294761829 (age 17.842s)
hex dump (first 8 bytes):
06 00 00 00 ff ff ff 7f ........
backtrace:
[<00000000ee5550f8>] kmemdup+0x23/0x50
[<00000000f1acd067>] bpf_prog_store_orig_filter+0x103/0x1e0
[<000000007cb21c2a>] bpf_prog_create_from_user+0x1c6/0x2e0
[<000000000c70eb02>] do_seccomp+0x325/0x27d0
[<0000000006e512d1>] do_syscall_64+0x3b/0x90
[<0000000094ae9ff8>] entry_SYSCALL_64_after_hwframe+0x44/0xae

Not sure if this has been already reported or not, but I will be happy
to test if you have a fix for this.


--
Regards
Sudip

\
 
 \ /
  Last update: 2021-07-31 21:21    [W:0.059 / U:1.260 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site