* memory leak in nfs_get_client
@ 2019-06-11 4:05 syzbot
2019-06-11 16:23 ` Benjamin Coddington
0 siblings, 1 reply; 6+ messages in thread
From: syzbot @ 2019-06-11 4:05 UTC (permalink / raw)
To: anna.schumaker, linux-kernel, linux-nfs, syzkaller-bugs, trond.myklebust
Hello,
syzbot found the following crash on:
HEAD commit: d1fdb6d8 Linux 5.2-rc4
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=117e0f71a00000
kernel config: https://syzkaller.appspot.com/x/.config?x=cb38d33cd06d8d48
dashboard link: https://syzkaller.appspot.com/bug?extid=7fe11b49c1cc30e3fce2
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=15a46001a00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=174b24d1a00000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+7fe11b49c1cc30e3fce2@syzkaller.appspotmail.com
fl=212 nc=0 na=0]
BUG: memory leak
unreferenced object 0xffff888121b91400 (size 1024):
comm "syz-executor400", pid 6969, jiffies 4294941900 (age 18.210s)
hex dump (first 32 bytes):
01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<000000009c69e9c0>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
[<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280 mm/slab.c:3553
[<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
[<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
[<000000007d1011ce>] nfs_alloc_client+0x2e/0x170 fs/nfs/client.c:152
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff88811e758400 (size 1024):
comm "syz-executor400", pid 6973, jiffies 4294941906 (age 18.150s)
hex dump (first 32 bytes):
01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<000000009c69e9c0>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
[<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280 mm/slab.c:3553
[<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
[<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
[<000000007d1011ce>] nfs_alloc_client+0x2e/0x170 fs/nfs/client.c:152
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888118ef9360 (size 32):
comm "syz-executor400", pid 6973, jiffies 4294941906 (age 18.150s)
hex dump (first 32 bytes):
00 71 54 04 00 ea ff ff c0 6e 9a 04 00 ea ff ff .qT......n......
c0 0b 81 04 00 ea ff ff c0 05 86 04 00 ea ff ff ................
backtrace:
[<000000003e75bb46>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000003e75bb46>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000003e75bb46>] slab_alloc mm/slab.c:3326 [inline]
[<000000003e75bb46>] __do_kmalloc mm/slab.c:3658 [inline]
[<000000003e75bb46>] __kmalloc_track_caller+0x15d/0x2c0 mm/slab.c:3675
[<0000000010f1326b>] kstrdup+0x3a/0x70 mm/util.c:52
[<0000000070b2f357>] nfs_alloc_client+0xbd/0x170 fs/nfs/client.c:169
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888121b91400 (size 1024):
comm "syz-executor400", pid 6969, jiffies 4294941900 (age 19.230s)
hex dump (first 32 bytes):
01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<000000009c69e9c0>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
[<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280 mm/slab.c:3553
[<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
[<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
[<000000007d1011ce>] nfs_alloc_client+0x2e/0x170 fs/nfs/client.c:152
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff88811e758400 (size 1024):
comm "syz-executor400", pid 6973, jiffies 4294941906 (age 19.170s)
hex dump (first 32 bytes):
01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<000000009c69e9c0>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
[<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280 mm/slab.c:3553
[<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
[<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
[<000000007d1011ce>] nfs_alloc_client+0x2e/0x170 fs/nfs/client.c:152
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888118ef9360 (size 32):
comm "syz-executor400", pid 6973, jiffies 4294941906 (age 19.170s)
hex dump (first 32 bytes):
00 71 54 04 00 ea ff ff c0 6e 9a 04 00 ea ff ff .qT......n......
c0 0b 81 04 00 ea ff ff c0 05 86 04 00 ea ff ff ................
backtrace:
[<000000003e75bb46>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000003e75bb46>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000003e75bb46>] slab_alloc mm/slab.c:3326 [inline]
[<000000003e75bb46>] __do_kmalloc mm/slab.c:3658 [inline]
[<000000003e75bb46>] __kmalloc_track_caller+0x15d/0x2c0 mm/slab.c:3675
[<0000000010f1326b>] kstrdup+0x3a/0x70 mm/util.c:52
[<0000000070b2f357>] nfs_alloc_client+0xbd/0x170 fs/nfs/client.c:169
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888121b91400 (size 1024):
comm "syz-executor400", pid 6969, jiffies 4294941900 (age 21.200s)
hex dump (first 32 bytes):
01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<000000009c69e9c0>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
[<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280 mm/slab.c:3553
[<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
[<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
[<000000007d1011ce>] nfs_alloc_client+0x2e/0x170 fs/nfs/client.c:152
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff88811e758400 (size 1024):
comm "syz-executor400", pid 6973, jiffies 4294941906 (age 21.140s)
hex dump (first 32 bytes):
01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<000000009c69e9c0>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
[<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280 mm/slab.c:3553
[<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
[<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
[<000000007d1011ce>] nfs_alloc_client+0x2e/0x170 fs/nfs/client.c:152
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888118ef9360 (size 32):
comm "syz-executor400", pid 6973, jiffies 4294941906 (age 21.140s)
hex dump (first 32 bytes):
00 71 54 04 00 ea ff ff c0 6e 9a 04 00 ea ff ff .qT......n......
c0 0b 81 04 00 ea ff ff c0 05 86 04 00 ea ff ff ................
backtrace:
[<000000003e75bb46>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000003e75bb46>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000003e75bb46>] slab_alloc mm/slab.c:3326 [inline]
[<000000003e75bb46>] __do_kmalloc mm/slab.c:3658 [inline]
[<000000003e75bb46>] __kmalloc_track_caller+0x15d/0x2c0 mm/slab.c:3675
[<0000000010f1326b>] kstrdup+0x3a/0x70 mm/util.c:52
[<0000000070b2f357>] nfs_alloc_client+0xbd/0x170 fs/nfs/client.c:169
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888121b91400 (size 1024):
comm "syz-executor400", pid 6969, jiffies 4294941900 (age 22.200s)
hex dump (first 32 bytes):
01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<000000009c69e9c0>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
[<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280 mm/slab.c:3553
[<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
[<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
[<000000007d1011ce>] nfs_alloc_client+0x2e/0x170 fs/nfs/client.c:152
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff88811e758400 (size 1024):
comm "syz-executor400", pid 6973, jiffies 4294941906 (age 22.140s)
hex dump (first 32 bytes):
01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<000000009c69e9c0>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
[<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280 mm/slab.c:3553
[<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
[<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
[<000000007d1011ce>] nfs_alloc_client+0x2e/0x170 fs/nfs/client.c:152
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888118ef9360 (size 32):
comm "syz-executor400", pid 6973, jiffies 4294941906 (age 22.140s)
hex dump (first 32 bytes):
00 71 54 04 00 ea ff ff c0 6e 9a 04 00 ea ff ff .qT......n......
c0 0b 81 04 00 ea ff ff c0 05 86 04 00 ea ff ff ................
backtrace:
[<000000003e75bb46>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000003e75bb46>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000003e75bb46>] slab_alloc mm/slab.c:3326 [inline]
[<000000003e75bb46>] __do_kmalloc mm/slab.c:3658 [inline]
[<000000003e75bb46>] __kmalloc_track_caller+0x15d/0x2c0 mm/slab.c:3675
[<0000000010f1326b>] kstrdup+0x3a/0x70 mm/util.c:52
[<0000000070b2f357>] nfs_alloc_client+0xbd/0x170 fs/nfs/client.c:169
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888121b91400 (size 1024):
comm "syz-executor400", pid 6969, jiffies 4294941900 (age 23.180s)
hex dump (first 32 bytes):
01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<000000009c69e9c0>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
[<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280 mm/slab.c:3553
[<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
[<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
[<000000007d1011ce>] nfs_alloc_client+0x2e/0x170 fs/nfs/client.c:152
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff88811e758400 (size 1024):
comm "syz-executor400", pid 6973, jiffies 4294941906 (age 23.120s)
hex dump (first 32 bytes):
01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<000000009c69e9c0>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
[<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280 mm/slab.c:3553
[<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
[<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
[<000000007d1011ce>] nfs_alloc_client+0x2e/0x170 fs/nfs/client.c:152
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888118ef9360 (size 32):
comm "syz-executor400", pid 6973, jiffies 4294941906 (age 23.120s)
hex dump (first 32 bytes):
00 71 54 04 00 ea ff ff c0 6e 9a 04 00 ea ff ff .qT......n......
c0 0b 81 04 00 ea ff ff c0 05 86 04 00 ea ff ff ................
backtrace:
[<000000003e75bb46>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000003e75bb46>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000003e75bb46>] slab_alloc mm/slab.c:3326 [inline]
[<000000003e75bb46>] __do_kmalloc mm/slab.c:3658 [inline]
[<000000003e75bb46>] __kmalloc_track_caller+0x15d/0x2c0 mm/slab.c:3675
[<0000000010f1326b>] kstrdup+0x3a/0x70 mm/util.c:52
[<0000000070b2f357>] nfs_alloc_client+0xbd/0x170 fs/nfs/client.c:169
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888121b91400 (size 1024):
comm "syz-executor400", pid 6969, jiffies 4294941900 (age 24.200s)
hex dump (first 32 bytes):
01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<000000009c69e9c0>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
[<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280 mm/slab.c:3553
[<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
[<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
[<000000007d1011ce>] nfs_alloc_client+0x2e/0x170 fs/nfs/client.c:152
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff88811e758400 (size 1024):
comm "syz-executor400", pid 6973, jiffies 4294941906 (age 24.140s)
hex dump (first 32 bytes):
01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<000000009c69e9c0>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
[<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280 mm/slab.c:3553
[<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
[<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
[<000000007d1011ce>] nfs_alloc_client+0x2e/0x170 fs/nfs/client.c:152
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888118ef9360 (size 32):
comm "syz-executor400", pid 6973, jiffies 4294941906 (age 24.140s)
hex dump (first 32 bytes):
00 71 54 04 00 ea ff ff c0 6e 9a 04 00 ea ff ff .qT......n......
c0 0b 81 04 00 ea ff ff c0 05 86 04 00 ea ff ff ................
backtrace:
[<000000003e75bb46>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000003e75bb46>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000003e75bb46>] slab_alloc mm/slab.c:3326 [inline]
[<000000003e75bb46>] __do_kmalloc mm/slab.c:3658 [inline]
[<000000003e75bb46>] __kmalloc_track_caller+0x15d/0x2c0 mm/slab.c:3675
[<0000000010f1326b>] kstrdup+0x3a/0x70 mm/util.c:52
[<0000000070b2f357>] nfs_alloc_client+0xbd/0x170 fs/nfs/client.c:169
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888121b91400 (size 1024):
comm "syz-executor400", pid 6969, jiffies 4294941900 (age 25.180s)
hex dump (first 32 bytes):
01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<000000009c69e9c0>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
[<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280 mm/slab.c:3553
[<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
[<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
[<000000007d1011ce>] nfs_alloc_client+0x2e/0x170 fs/nfs/client.c:152
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff88811e758400 (size 1024):
comm "syz-executor400", pid 6973, jiffies 4294941906 (age 25.120s)
hex dump (first 32 bytes):
01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<000000009c69e9c0>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
[<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280 mm/slab.c:3553
[<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
[<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
[<000000007d1011ce>] nfs_alloc_client+0x2e/0x170 fs/nfs/client.c:152
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
BUG: memory leak
unreferenced object 0xffff888118ef9360 (size 32):
comm "syz-executor400", pid 6973, jiffies 4294941906 (age 25.120s)
hex dump (first 32 bytes):
00 71 54 04 00 ea ff ff c0 6e 9a 04 00 ea ff ff .qT......n......
c0 0b 81 04 00 ea ff ff c0 05 86 04 00 ea ff ff ................
backtrace:
[<000000003e75bb46>] kmemleak_alloc_recursive
include/linux/kmemleak.h:43 [inline]
[<000000003e75bb46>] slab_post_alloc_hook mm/slab.h:439 [inline]
[<000000003e75bb46>] slab_alloc mm/slab.c:3326 [inline]
[<000000003e75bb46>] __do_kmalloc mm/slab.c:3658 [inline]
[<000000003e75bb46>] __kmalloc_track_caller+0x15d/0x2c0 mm/slab.c:3675
[<0000000010f1326b>] kstrdup+0x3a/0x70 mm/util.c:52
[<0000000070b2f357>] nfs_alloc_client+0xbd/0x170 fs/nfs/client.c:169
[<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500 fs/nfs/client.c:425
[<000000004dc18603>] nfs_init_server+0xc6/0x450 fs/nfs/client.c:671
[<0000000072615bbf>] nfs_create_server+0x83/0x1f0 fs/nfs/client.c:958
[<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
[<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
[<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
[<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
[<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
[<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
[<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
[<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
[<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
[<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
[<00000000ce916bab>] do_syscall_64+0x76/0x1a0
arch/x86/entry/common.c:301
[<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
executing program
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this bug, for details see:
https://goo.gl/tpsmEJ#testing-patches
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: memory leak in nfs_get_client
2019-06-11 4:05 memory leak in nfs_get_client syzbot
@ 2019-06-11 16:23 ` Benjamin Coddington
2019-07-02 6:31 ` Eric Biggers
0 siblings, 1 reply; 6+ messages in thread
From: Benjamin Coddington @ 2019-06-11 16:23 UTC (permalink / raw)
To: syzbot
Cc: anna.schumaker, linux-kernel, linux-nfs, syzkaller-bugs, trond.myklebust
Ugh.. Now that you can cancel the wait, you have to also handle if "new"
was allocated. I think this needs:
diff --git a/fs/nfs/client.c b/fs/nfs/client.c
index d7e4f0848e28..4d90f5bf0b0a 100644
--- a/fs/nfs/client.c
+++ b/fs/nfs/client.c
@@ -406,10 +406,10 @@ struct nfs_client *nfs_get_client(const struct
nfs_client_initdata *cl_init)
clp = nfs_match_client(cl_init);
if (clp) {
spin_unlock(&nn->nfs_client_lock);
- if (IS_ERR(clp))
- return clp;
if (new)
new->rpc_ops->free_client(new);
+ if (IS_ERR(clp))
+ return clp;
return nfs_found_client(cl_init, clp);
}
if (new) {
I'll patch/test and send it along.
Ben
On 11 Jun 2019, at 0:05, syzbot wrote:
> Hello,
>
> syzbot found the following crash on:
>
> HEAD commit: d1fdb6d8 Linux 5.2-rc4
> git tree: upstream
> console output:
> https://syzkaller.appspot.com/x/log.txt?x=117e0f71a00000
> kernel config:
> https://syzkaller.appspot.com/x/.config?x=cb38d33cd06d8d48
> dashboard link:
> https://syzkaller.appspot.com/bug?extid=7fe11b49c1cc30e3fce2
> compiler: gcc (GCC) 9.0.0 20181231 (experimental)
> syz repro:
> https://syzkaller.appspot.com/x/repro.syz?x=15a46001a00000
> C reproducer:
> https://syzkaller.appspot.com/x/repro.c?x=174b24d1a00000
>
> IMPORTANT: if you fix the bug, please add the following tag to the
> commit:
> Reported-by: syzbot+7fe11b49c1cc30e3fce2@syzkaller.appspotmail.com
>
> fl=212 nc=0 na=0]
> BUG: memory leak
> unreferenced object 0xffff888121b91400 (size 1024):
> comm "syz-executor400", pid 6969, jiffies 4294941900 (age 18.210s)
> hex dump (first 32 bytes):
> 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> backtrace:
> [<000000009c69e9c0>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
> [<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280
> mm/slab.c:3553
> [<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
> [<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
> [<000000007d1011ce>] nfs_alloc_client+0x2e/0x170
> fs/nfs/client.c:152
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff88811e758400 (size 1024):
> comm "syz-executor400", pid 6973, jiffies 4294941906 (age 18.150s)
> hex dump (first 32 bytes):
> 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> backtrace:
> [<000000009c69e9c0>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
> [<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280
> mm/slab.c:3553
> [<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
> [<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
> [<000000007d1011ce>] nfs_alloc_client+0x2e/0x170
> fs/nfs/client.c:152
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff888118ef9360 (size 32):
> comm "syz-executor400", pid 6973, jiffies 4294941906 (age 18.150s)
> hex dump (first 32 bytes):
> 00 71 54 04 00 ea ff ff c0 6e 9a 04 00 ea ff ff .qT......n......
> c0 0b 81 04 00 ea ff ff c0 05 86 04 00 ea ff ff ................
> backtrace:
> [<000000003e75bb46>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000003e75bb46>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000003e75bb46>] slab_alloc mm/slab.c:3326 [inline]
> [<000000003e75bb46>] __do_kmalloc mm/slab.c:3658 [inline]
> [<000000003e75bb46>] __kmalloc_track_caller+0x15d/0x2c0
> mm/slab.c:3675
> [<0000000010f1326b>] kstrdup+0x3a/0x70 mm/util.c:52
> [<0000000070b2f357>] nfs_alloc_client+0xbd/0x170
> fs/nfs/client.c:169
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff888121b91400 (size 1024):
> comm "syz-executor400", pid 6969, jiffies 4294941900 (age 19.230s)
> hex dump (first 32 bytes):
> 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> backtrace:
> [<000000009c69e9c0>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
> [<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280
> mm/slab.c:3553
> [<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
> [<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
> [<000000007d1011ce>] nfs_alloc_client+0x2e/0x170
> fs/nfs/client.c:152
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff88811e758400 (size 1024):
> comm "syz-executor400", pid 6973, jiffies 4294941906 (age 19.170s)
> hex dump (first 32 bytes):
> 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> backtrace:
> [<000000009c69e9c0>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
> [<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280
> mm/slab.c:3553
> [<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
> [<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
> [<000000007d1011ce>] nfs_alloc_client+0x2e/0x170
> fs/nfs/client.c:152
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff888118ef9360 (size 32):
> comm "syz-executor400", pid 6973, jiffies 4294941906 (age 19.170s)
> hex dump (first 32 bytes):
> 00 71 54 04 00 ea ff ff c0 6e 9a 04 00 ea ff ff .qT......n......
> c0 0b 81 04 00 ea ff ff c0 05 86 04 00 ea ff ff ................
> backtrace:
> [<000000003e75bb46>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000003e75bb46>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000003e75bb46>] slab_alloc mm/slab.c:3326 [inline]
> [<000000003e75bb46>] __do_kmalloc mm/slab.c:3658 [inline]
> [<000000003e75bb46>] __kmalloc_track_caller+0x15d/0x2c0
> mm/slab.c:3675
> [<0000000010f1326b>] kstrdup+0x3a/0x70 mm/util.c:52
> [<0000000070b2f357>] nfs_alloc_client+0xbd/0x170
> fs/nfs/client.c:169
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff888121b91400 (size 1024):
> comm "syz-executor400", pid 6969, jiffies 4294941900 (age 21.200s)
> hex dump (first 32 bytes):
> 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> backtrace:
> [<000000009c69e9c0>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
> [<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280
> mm/slab.c:3553
> [<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
> [<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
> [<000000007d1011ce>] nfs_alloc_client+0x2e/0x170
> fs/nfs/client.c:152
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff88811e758400 (size 1024):
> comm "syz-executor400", pid 6973, jiffies 4294941906 (age 21.140s)
> hex dump (first 32 bytes):
> 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> backtrace:
> [<000000009c69e9c0>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
> [<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280
> mm/slab.c:3553
> [<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
> [<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
> [<000000007d1011ce>] nfs_alloc_client+0x2e/0x170
> fs/nfs/client.c:152
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff888118ef9360 (size 32):
> comm "syz-executor400", pid 6973, jiffies 4294941906 (age 21.140s)
> hex dump (first 32 bytes):
> 00 71 54 04 00 ea ff ff c0 6e 9a 04 00 ea ff ff .qT......n......
> c0 0b 81 04 00 ea ff ff c0 05 86 04 00 ea ff ff ................
> backtrace:
> [<000000003e75bb46>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000003e75bb46>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000003e75bb46>] slab_alloc mm/slab.c:3326 [inline]
> [<000000003e75bb46>] __do_kmalloc mm/slab.c:3658 [inline]
> [<000000003e75bb46>] __kmalloc_track_caller+0x15d/0x2c0
> mm/slab.c:3675
> [<0000000010f1326b>] kstrdup+0x3a/0x70 mm/util.c:52
> [<0000000070b2f357>] nfs_alloc_client+0xbd/0x170
> fs/nfs/client.c:169
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff888121b91400 (size 1024):
> comm "syz-executor400", pid 6969, jiffies 4294941900 (age 22.200s)
> hex dump (first 32 bytes):
> 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> backtrace:
> [<000000009c69e9c0>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
> [<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280
> mm/slab.c:3553
> [<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
> [<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
> [<000000007d1011ce>] nfs_alloc_client+0x2e/0x170
> fs/nfs/client.c:152
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff88811e758400 (size 1024):
> comm "syz-executor400", pid 6973, jiffies 4294941906 (age 22.140s)
> hex dump (first 32 bytes):
> 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> backtrace:
> [<000000009c69e9c0>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
> [<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280
> mm/slab.c:3553
> [<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
> [<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
> [<000000007d1011ce>] nfs_alloc_client+0x2e/0x170
> fs/nfs/client.c:152
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff888118ef9360 (size 32):
> comm "syz-executor400", pid 6973, jiffies 4294941906 (age 22.140s)
> hex dump (first 32 bytes):
> 00 71 54 04 00 ea ff ff c0 6e 9a 04 00 ea ff ff .qT......n......
> c0 0b 81 04 00 ea ff ff c0 05 86 04 00 ea ff ff ................
> backtrace:
> [<000000003e75bb46>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000003e75bb46>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000003e75bb46>] slab_alloc mm/slab.c:3326 [inline]
> [<000000003e75bb46>] __do_kmalloc mm/slab.c:3658 [inline]
> [<000000003e75bb46>] __kmalloc_track_caller+0x15d/0x2c0
> mm/slab.c:3675
> [<0000000010f1326b>] kstrdup+0x3a/0x70 mm/util.c:52
> [<0000000070b2f357>] nfs_alloc_client+0xbd/0x170
> fs/nfs/client.c:169
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff888121b91400 (size 1024):
> comm "syz-executor400", pid 6969, jiffies 4294941900 (age 23.180s)
> hex dump (first 32 bytes):
> 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> backtrace:
> [<000000009c69e9c0>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
> [<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280
> mm/slab.c:3553
> [<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
> [<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
> [<000000007d1011ce>] nfs_alloc_client+0x2e/0x170
> fs/nfs/client.c:152
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff88811e758400 (size 1024):
> comm "syz-executor400", pid 6973, jiffies 4294941906 (age 23.120s)
> hex dump (first 32 bytes):
> 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> backtrace:
> [<000000009c69e9c0>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
> [<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280
> mm/slab.c:3553
> [<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
> [<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
> [<000000007d1011ce>] nfs_alloc_client+0x2e/0x170
> fs/nfs/client.c:152
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff888118ef9360 (size 32):
> comm "syz-executor400", pid 6973, jiffies 4294941906 (age 23.120s)
> hex dump (first 32 bytes):
> 00 71 54 04 00 ea ff ff c0 6e 9a 04 00 ea ff ff .qT......n......
> c0 0b 81 04 00 ea ff ff c0 05 86 04 00 ea ff ff ................
> backtrace:
> [<000000003e75bb46>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000003e75bb46>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000003e75bb46>] slab_alloc mm/slab.c:3326 [inline]
> [<000000003e75bb46>] __do_kmalloc mm/slab.c:3658 [inline]
> [<000000003e75bb46>] __kmalloc_track_caller+0x15d/0x2c0
> mm/slab.c:3675
> [<0000000010f1326b>] kstrdup+0x3a/0x70 mm/util.c:52
> [<0000000070b2f357>] nfs_alloc_client+0xbd/0x170
> fs/nfs/client.c:169
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff888121b91400 (size 1024):
> comm "syz-executor400", pid 6969, jiffies 4294941900 (age 24.200s)
> hex dump (first 32 bytes):
> 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> backtrace:
> [<000000009c69e9c0>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
> [<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280
> mm/slab.c:3553
> [<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
> [<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
> [<000000007d1011ce>] nfs_alloc_client+0x2e/0x170
> fs/nfs/client.c:152
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff88811e758400 (size 1024):
> comm "syz-executor400", pid 6973, jiffies 4294941906 (age 24.140s)
> hex dump (first 32 bytes):
> 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> backtrace:
> [<000000009c69e9c0>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
> [<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280
> mm/slab.c:3553
> [<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
> [<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
> [<000000007d1011ce>] nfs_alloc_client+0x2e/0x170
> fs/nfs/client.c:152
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff888118ef9360 (size 32):
> comm "syz-executor400", pid 6973, jiffies 4294941906 (age 24.140s)
> hex dump (first 32 bytes):
> 00 71 54 04 00 ea ff ff c0 6e 9a 04 00 ea ff ff .qT......n......
> c0 0b 81 04 00 ea ff ff c0 05 86 04 00 ea ff ff ................
> backtrace:
> [<000000003e75bb46>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000003e75bb46>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000003e75bb46>] slab_alloc mm/slab.c:3326 [inline]
> [<000000003e75bb46>] __do_kmalloc mm/slab.c:3658 [inline]
> [<000000003e75bb46>] __kmalloc_track_caller+0x15d/0x2c0
> mm/slab.c:3675
> [<0000000010f1326b>] kstrdup+0x3a/0x70 mm/util.c:52
> [<0000000070b2f357>] nfs_alloc_client+0xbd/0x170
> fs/nfs/client.c:169
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff888121b91400 (size 1024):
> comm "syz-executor400", pid 6969, jiffies 4294941900 (age 25.180s)
> hex dump (first 32 bytes):
> 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> backtrace:
> [<000000009c69e9c0>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
> [<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280
> mm/slab.c:3553
> [<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
> [<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
> [<000000007d1011ce>] nfs_alloc_client+0x2e/0x170
> fs/nfs/client.c:152
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff88811e758400 (size 1024):
> comm "syz-executor400", pid 6973, jiffies 4294941906 (age 25.120s)
> hex dump (first 32 bytes):
> 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> backtrace:
> [<000000009c69e9c0>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000009c69e9c0>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000009c69e9c0>] slab_alloc mm/slab.c:3326 [inline]
> [<000000009c69e9c0>] kmem_cache_alloc_trace+0x13d/0x280
> mm/slab.c:3553
> [<000000007d1011ce>] kmalloc include/linux/slab.h:547 [inline]
> [<000000007d1011ce>] kzalloc include/linux/slab.h:742 [inline]
> [<000000007d1011ce>] nfs_alloc_client+0x2e/0x170
> fs/nfs/client.c:152
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> BUG: memory leak
> unreferenced object 0xffff888118ef9360 (size 32):
> comm "syz-executor400", pid 6973, jiffies 4294941906 (age 25.120s)
> hex dump (first 32 bytes):
> 00 71 54 04 00 ea ff ff c0 6e 9a 04 00 ea ff ff .qT......n......
> c0 0b 81 04 00 ea ff ff c0 05 86 04 00 ea ff ff ................
> backtrace:
> [<000000003e75bb46>] kmemleak_alloc_recursive
> include/linux/kmemleak.h:43 [inline]
> [<000000003e75bb46>] slab_post_alloc_hook mm/slab.h:439 [inline]
> [<000000003e75bb46>] slab_alloc mm/slab.c:3326 [inline]
> [<000000003e75bb46>] __do_kmalloc mm/slab.c:3658 [inline]
> [<000000003e75bb46>] __kmalloc_track_caller+0x15d/0x2c0
> mm/slab.c:3675
> [<0000000010f1326b>] kstrdup+0x3a/0x70 mm/util.c:52
> [<0000000070b2f357>] nfs_alloc_client+0xbd/0x170
> fs/nfs/client.c:169
> [<000000007f1bdfa5>] nfs_get_client+0x1cb/0x500
> fs/nfs/client.c:425
> [<000000004dc18603>] nfs_init_server+0xc6/0x450
> fs/nfs/client.c:671
> [<0000000072615bbf>] nfs_create_server+0x83/0x1f0
> fs/nfs/client.c:958
> [<00000000d12e9a98>] nfs_try_mount+0x5a/0x350 fs/nfs/super.c:1883
> [<00000000b2735769>] nfs_fs_mount+0x448/0xc52 fs/nfs/super.c:2719
> [<000000000b19c7d0>] legacy_get_tree+0x27/0x80 fs/fs_context.c:661
> [<00000000d4887a5c>] vfs_get_tree+0x2e/0x120 fs/super.c:1476
> [<000000008eec78b0>] do_new_mount fs/namespace.c:2790 [inline]
> [<000000008eec78b0>] do_mount+0x932/0xc50 fs/namespace.c:3110
> [<00000000d0ad59a7>] ksys_mount+0xab/0x120 fs/namespace.c:3319
> [<0000000082fa14d6>] __do_sys_mount fs/namespace.c:3333 [inline]
> [<0000000082fa14d6>] __se_sys_mount fs/namespace.c:3330 [inline]
> [<0000000082fa14d6>] __x64_sys_mount+0x26/0x30 fs/namespace.c:3330
> [<00000000ce916bab>] do_syscall_64+0x76/0x1a0
> arch/x86/entry/common.c:301
> [<0000000070865558>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
>
> executing program
>
>
> ---
> This bug is generated by a bot. It may contain errors.
> See https://goo.gl/tpsmEJ for more information about syzbot.
> syzbot engineers can be reached at syzkaller@googlegroups.com.
>
> syzbot will keep track of this bug report. See:
> https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
> syzbot can test patches for this bug, for details see:
> https://goo.gl/tpsmEJ#testing-patches
^ permalink raw reply related [flat|nested] 6+ messages in thread
* Re: memory leak in nfs_get_client
2019-06-11 16:23 ` Benjamin Coddington
@ 2019-07-02 6:31 ` Eric Biggers
2019-07-02 11:23 ` Benjamin Coddington
0 siblings, 1 reply; 6+ messages in thread
From: Eric Biggers @ 2019-07-02 6:31 UTC (permalink / raw)
To: Benjamin Coddington
Cc: syzbot, anna.schumaker, linux-kernel, linux-nfs, syzkaller-bugs,
trond.myklebust
On Tue, Jun 11, 2019 at 12:23:12PM -0400, Benjamin Coddington wrote:
> Ugh.. Now that you can cancel the wait, you have to also handle if "new" was
> allocated. I think this needs:
>
> diff --git a/fs/nfs/client.c b/fs/nfs/client.c
> index d7e4f0848e28..4d90f5bf0b0a 100644
> --- a/fs/nfs/client.c
> +++ b/fs/nfs/client.c
> @@ -406,10 +406,10 @@ struct nfs_client *nfs_get_client(const struct
> nfs_client_initdata *cl_init)
> clp = nfs_match_client(cl_init);
> if (clp) {
> spin_unlock(&nn->nfs_client_lock);
> - if (IS_ERR(clp))
> - return clp;
> if (new)
> new->rpc_ops->free_client(new);
> + if (IS_ERR(clp))
> + return clp;
> return nfs_found_client(cl_init, clp);
> }
> if (new) {
>
> I'll patch/test and send it along.
>
> Ben
Hi Ben, what happened to this patch?
- Eric
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: memory leak in nfs_get_client
2019-07-02 6:31 ` Eric Biggers
@ 2019-07-02 11:23 ` Benjamin Coddington
2019-07-02 16:11 ` Eric Biggers
0 siblings, 1 reply; 6+ messages in thread
From: Benjamin Coddington @ 2019-07-02 11:23 UTC (permalink / raw)
To: Eric Biggers
Cc: syzbot, anna.schumaker, linux-kernel, linux-nfs, syzkaller-bugs,
trond.myklebust
On 2 Jul 2019, at 2:31, Eric Biggers wrote:
> On Tue, Jun 11, 2019 at 12:23:12PM -0400, Benjamin Coddington wrote:
>> Ugh.. Now that you can cancel the wait, you have to also handle if
>> "new" was
>> allocated. I think this needs:
>>
>> diff --git a/fs/nfs/client.c b/fs/nfs/client.c
>> index d7e4f0848e28..4d90f5bf0b0a 100644
>> --- a/fs/nfs/client.c
>> +++ b/fs/nfs/client.c
>> @@ -406,10 +406,10 @@ struct nfs_client *nfs_get_client(const struct
>> nfs_client_initdata *cl_init)
>> clp = nfs_match_client(cl_init);
>> if (clp) {
>> spin_unlock(&nn->nfs_client_lock);
>> - if (IS_ERR(clp))
>> - return clp;
>> if (new)
>> new->rpc_ops->free_client(new);
>> + if (IS_ERR(clp))
>> + return clp;
>> return nfs_found_client(cl_init, clp);
>> }
>> if (new) {
>>
>> I'll patch/test and send it along.
>>
>> Ben
>
> Hi Ben, what happened to this patch?
I sent it along:
https://lore.kernel.org/linux-nfs/65b675cec79d140df64bc30def88b1def32bf87e.1560272160.git.bcodding@redhat.com/
I don't think it will go in 5.2.. it's not a huge problem.
Ben
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: memory leak in nfs_get_client
2019-07-02 11:23 ` Benjamin Coddington
@ 2019-07-02 16:11 ` Eric Biggers
2019-07-02 18:29 ` Benjamin Coddington
0 siblings, 1 reply; 6+ messages in thread
From: Eric Biggers @ 2019-07-02 16:11 UTC (permalink / raw)
To: Benjamin Coddington
Cc: syzbot, anna.schumaker, linux-kernel, linux-nfs, syzkaller-bugs,
trond.myklebust
On Tue, Jul 02, 2019 at 07:23:32AM -0400, Benjamin Coddington wrote:
> On 2 Jul 2019, at 2:31, Eric Biggers wrote:
>
> > On Tue, Jun 11, 2019 at 12:23:12PM -0400, Benjamin Coddington wrote:
> > > Ugh.. Now that you can cancel the wait, you have to also handle if
> > > "new" was
> > > allocated. I think this needs:
> > >
> > > diff --git a/fs/nfs/client.c b/fs/nfs/client.c
> > > index d7e4f0848e28..4d90f5bf0b0a 100644
> > > --- a/fs/nfs/client.c
> > > +++ b/fs/nfs/client.c
> > > @@ -406,10 +406,10 @@ struct nfs_client *nfs_get_client(const struct
> > > nfs_client_initdata *cl_init)
> > > clp = nfs_match_client(cl_init);
> > > if (clp) {
> > > spin_unlock(&nn->nfs_client_lock);
> > > - if (IS_ERR(clp))
> > > - return clp;
> > > if (new)
> > > new->rpc_ops->free_client(new);
> > > + if (IS_ERR(clp))
> > > + return clp;
> > > return nfs_found_client(cl_init, clp);
> > > }
> > > if (new) {
> > >
> > > I'll patch/test and send it along.
> > >
> > > Ben
> >
> > Hi Ben, what happened to this patch?
>
> I sent it along:
>
> https://lore.kernel.org/linux-nfs/65b675cec79d140df64bc30def88b1def32bf87e.1560272160.git.bcodding@redhat.com/
>
> I don't think it will go in 5.2.. it's not a huge problem.
>
> Ben
Okay, great. I didn't see it in linux-next and there was no further reply to
this thread, which usually (having seen it happen on lots of syzbot bugs) means
the person forgot about it.
Tip: you can use the '--in-reply-to=<MESSAGE_ID>' option to 'git send-email' or
'git format-patch' to send the patch in response to the original thread, which
makes it very easy to see that a patch was actually sent out.
- Eric
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: memory leak in nfs_get_client
2019-07-02 16:11 ` Eric Biggers
@ 2019-07-02 18:29 ` Benjamin Coddington
0 siblings, 0 replies; 6+ messages in thread
From: Benjamin Coddington @ 2019-07-02 18:29 UTC (permalink / raw)
To: Eric Biggers
Cc: syzbot, anna.schumaker, linux-kernel, linux-nfs, syzkaller-bugs,
trond.myklebust
On 2 Jul 2019, at 12:11, Eric Biggers wrote:
> On Tue, Jul 02, 2019 at 07:23:32AM -0400, Benjamin Coddington wrote:
>> On 2 Jul 2019, at 2:31, Eric Biggers wrote:
>>
>>> On Tue, Jun 11, 2019 at 12:23:12PM -0400, Benjamin Coddington wrote:
>>>> Ugh.. Now that you can cancel the wait, you have to also handle if
>>>> "new" was
>>>> allocated. I think this needs:
>>>>
>>>> diff --git a/fs/nfs/client.c b/fs/nfs/client.c
>>>> index d7e4f0848e28..4d90f5bf0b0a 100644
>>>> --- a/fs/nfs/client.c
>>>> +++ b/fs/nfs/client.c
>>>> @@ -406,10 +406,10 @@ struct nfs_client *nfs_get_client(const
>>>> struct
>>>> nfs_client_initdata *cl_init)
>>>> clp = nfs_match_client(cl_init);
>>>> if (clp) {
>>>> spin_unlock(&nn->nfs_client_lock);
>>>> - if (IS_ERR(clp))
>>>> - return clp;
>>>> if (new)
>>>> new->rpc_ops->free_client(new);
>>>> + if (IS_ERR(clp))
>>>> + return clp;
>>>> return nfs_found_client(cl_init, clp);
>>>> }
>>>> if (new) {
>>>>
>>>> I'll patch/test and send it along.
>>>>
>>>> Ben
>>>
>>> Hi Ben, what happened to this patch?
>>
>> I sent it along:
>>
>> https://lore.kernel.org/linux-nfs/65b675cec79d140df64bc30def88b1def32bf87e.1560272160.git.bcodding@redhat.com/
>>
>> I don't think it will go in 5.2.. it's not a huge problem.
>>
>> Ben
>
> Okay, great. I didn't see it in linux-next and there was no further
> reply to
> this thread, which usually (having seen it happen on lots of syzbot
> bugs) means
> the person forgot about it.
>
> Tip: you can use the '--in-reply-to=<MESSAGE_ID>' option to 'git
> send-email' or
> 'git format-patch' to send the patch in response to the original
> thread, which
> makes it very easy to see that a patch was actually sent out.
Yep, that's nice for those following along, but sometimes I think that
makes
it harder for the maintainers to scrape the patches off the list. I've
had
patches get dropped that were buried at the end of a long discussion, so
I've made a habit of always making patches the top.
Ben
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2019-07-02 18:29 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-06-11 4:05 memory leak in nfs_get_client syzbot
2019-06-11 16:23 ` Benjamin Coddington
2019-07-02 6:31 ` Eric Biggers
2019-07-02 11:23 ` Benjamin Coddington
2019-07-02 16:11 ` Eric Biggers
2019-07-02 18:29 ` Benjamin Coddington
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).