syzbot


memory leak in vma_node_allow

Status: upstream: reported C repro on 2023/02/13 00:25
Subsystems: dri
[Documentation on labels]
Reported-by: syzbot+58ea3177ba8bd0a5d8ee@syzkaller.appspotmail.com
First crash: 651d, last: 339d
Discussions (4)
Title Replies (including bot) Last reply
[syzbot] Monthly dri report (Sep 2023) 0 (1) 2023/09/28 11:42
[syzbot] Monthly dri report (Jul 2023) 0 (1) 2023/07/26 20:38
[syzbot] Monthly dri report (May 2023) 0 (1) 2023/05/25 09:36
[syzbot] memory leak in vma_node_allow 0 (1) 2023/02/13 00:25
Last patch testing requests (10)
Created Duration User Patch Repo Result
2024/09/23 01:52 13m retest repro upstream report log
2024/07/14 17:54 14m retest repro upstream report log
2024/05/05 15:22 15m retest repro upstream report log
2024/02/25 14:51 10m retest repro upstream report log
2023/12/17 11:40 13m retest repro upstream report log
2023/10/18 11:33 10m ricardo@marliere.net git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git fd6f7ad2fd4d53fa14f4fd190f9b05d043973892 report log
2023/10/08 10:37 13m retest repro upstream report log
2023/10/08 10:37 16m retest repro upstream OK log
2023/07/23 08:57 57m retest repro upstream report log
2023/05/14 08:44 10m retest repro upstream report log

Sample crash report:
Warning: Permanently added '10.128.1.168' (ECDSA) to the list of known hosts.
executing program
executing program
BUG: memory leak
unreferenced object 0xffff88810f1c75c0 (size 64):
  comm "syz-executor750", pid 5060, jiffies 4294945258 (age 13.860s)
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 d6 e4 04 81 88 ff ff  ................
  backtrace:
    [<ffffffff81508f84>] kmalloc_trace+0x24/0x90 mm/slab_common.c:1062
    [<ffffffff82787cca>] kmalloc include/linux/slab.h:580 [inline]
    [<ffffffff82787cca>] vma_node_allow+0x3a/0x150 drivers/gpu/drm/drm_vma_manager.c:255
    [<ffffffff8276788e>] drm_gem_handle_create_tail+0x10e/0x250 drivers/gpu/drm/drm_gem.c:377
    [<ffffffff8278ed4d>] drm_gem_shmem_create_with_handle drivers/gpu/drm/drm_gem_shmem_helper.c:432 [inline]
    [<ffffffff8278ed4d>] drm_gem_shmem_dumb_create+0xbd/0x200 drivers/gpu/drm/drm_gem_shmem_helper.c:534
    [<ffffffff82753a5b>] drm_mode_create_dumb+0x11b/0x150 drivers/gpu/drm/drm_dumb_buffers.c:96
    [<ffffffff82768e28>] drm_ioctl_kernel+0x148/0x260 drivers/gpu/drm/drm_ioctl.c:788
    [<ffffffff82769230>] drm_ioctl+0x2f0/0x500 drivers/gpu/drm/drm_ioctl.c:891
    [<ffffffff81642600>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff81642600>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff81642600>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff81642600>] __x64_sys_ioctl+0x100/0x140 fs/ioctl.c:856
    [<ffffffff8498c889>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff8498c889>] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888109662d80 (size 64):
  comm "syz-executor750", pid 5060, jiffies 4294945258 (age 13.870s)
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 d6 e4 04 81 88 ff ff  ................
  backtrace:
    [<ffffffff81508f84>] kmalloc_trace+0x24/0x90 mm/slab_common.c:1062
    [<ffffffff82787cca>] kmalloc include/linux/slab.h:580 [inline]
    [<ffffffff82787cca>] vma_node_allow+0x3a/0x150 drivers/gpu/drm/drm_vma_manager.c:255
    [<ffffffff8276788e>] drm_gem_handle_create_tail+0x10e/0x250 drivers/gpu/drm/drm_gem.c:377
    [<ffffffff8278ed4d>] drm_gem_shmem_create_with_handle drivers/gpu/drm/drm_gem_shmem_helper.c:432 [inline]
    [<ffffffff8278ed4d>] drm_gem_shmem_dumb_create+0xbd/0x200 drivers/gpu/drm/drm_gem_shmem_helper.c:534
    [<ffffffff82753a5b>] drm_mode_create_dumb+0x11b/0x150 drivers/gpu/drm/drm_dumb_buffers.c:96
    [<ffffffff82768e28>] drm_ioctl_kernel+0x148/0x260 drivers/gpu/drm/drm_ioctl.c:788
    [<ffffffff82769230>] drm_ioctl+0x2f0/0x500 drivers/gpu/drm/drm_ioctl.c:891
    [<ffffffff81642600>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff81642600>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff81642600>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff81642600>] __x64_sys_ioctl+0x100/0x140 fs/ioctl.c:856
    [<ffffffff8498c889>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff8498c889>] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888109662900 (size 64):
  comm "syz-executor750", pid 5069, jiffies 4294945834 (age 8.110s)
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 ce 8f 09 81 88 ff ff  ................
  backtrace:
    [<ffffffff81508f84>] kmalloc_trace+0x24/0x90 mm/slab_common.c:1062
    [<ffffffff82787cca>] kmalloc include/linux/slab.h:580 [inline]
    [<ffffffff82787cca>] vma_node_allow+0x3a/0x150 drivers/gpu/drm/drm_vma_manager.c:255
    [<ffffffff8276788e>] drm_gem_handle_create_tail+0x10e/0x250 drivers/gpu/drm/drm_gem.c:377
    [<ffffffff8278ed4d>] drm_gem_shmem_create_with_handle drivers/gpu/drm/drm_gem_shmem_helper.c:432 [inline]
    [<ffffffff8278ed4d>] drm_gem_shmem_dumb_create+0xbd/0x200 drivers/gpu/drm/drm_gem_shmem_helper.c:534
    [<ffffffff82753a5b>] drm_mode_create_dumb+0x11b/0x150 drivers/gpu/drm/drm_dumb_buffers.c:96
    [<ffffffff82768e28>] drm_ioctl_kernel+0x148/0x260 drivers/gpu/drm/drm_ioctl.c:788
    [<ffffffff82769230>] drm_ioctl+0x2f0/0x500 drivers/gpu/drm/drm_ioctl.c:891
    [<ffffffff81642600>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff81642600>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff81642600>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff81642600>] __x64_sys_ioctl+0x100/0x140 fs/ioctl.c:856
    [<ffffffff8498c889>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff8498c889>] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888109662940 (size 64):
  comm "syz-executor750", pid 5069, jiffies 4294945834 (age 8.110s)
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 ce 8f 09 81 88 ff ff  ................
  backtrace:
    [<ffffffff81508f84>] kmalloc_trace+0x24/0x90 mm/slab_common.c:1062
    [<ffffffff82787cca>] kmalloc include/linux/slab.h:580 [inline]
    [<ffffffff82787cca>] vma_node_allow+0x3a/0x150 drivers/gpu/drm/drm_vma_manager.c:255
    [<ffffffff8276788e>] drm_gem_handle_create_tail+0x10e/0x250 drivers/gpu/drm/drm_gem.c:377
    [<ffffffff8278ed4d>] drm_gem_shmem_create_with_handle drivers/gpu/drm/drm_gem_shmem_helper.c:432 [inline]
    [<ffffffff8278ed4d>] drm_gem_shmem_dumb_create+0xbd/0x200 drivers/gpu/drm/drm_gem_shmem_helper.c:534
    [<ffffffff82753a5b>] drm_mode_create_dumb+0x11b/0x150 drivers/gpu/drm/drm_dumb_buffers.c:96
    [<ffffffff82768e28>] drm_ioctl_kernel+0x148/0x260 drivers/gpu/drm/drm_ioctl.c:788
    [<ffffffff82769230>] drm_ioctl+0x2f0/0x500 drivers/gpu/drm/drm_ioctl.c:891
    [<ffffffff81642600>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff81642600>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff81642600>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff81642600>] __x64_sys_ioctl+0x100/0x140 fs/ioctl.c:856
    [<ffffffff8498c889>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff8498c889>] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd


Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/02/09 00:20 upstream 0983f6bf2bfc fc9c934e .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in vma_node_allow
2023/09/24 10:26 upstream 3aba70aed91f 0b6a67ac .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in vma_node_allow
* Struck through repros no longer work on HEAD.