syzbot

 sign-in | mailing list | source | docs
🐞 Open [872] ≡ Subsystems 🐞 Fixed [4875] 🐞 Invalid [11643] ⬇ Missing Backports [68] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

memory leak in xas_create

Status: upstream: reported C repro on 2022/07/09 07:13
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+a785d07959bc94837d51@syzkaller.appspotmail.com
First crash: 515d, last: 10d
▶ ▼ Discussions (3)
Title Replies (including bot) Last reply
[syzbot] Monthly mm report (Nov 2023) 0 (1) 2023/11/15 03:00
[syzbot] Monthly mm report (Sep 2023) 0 (1) 2023/09/11 10:07
[syzbot] memory leak in xas_create 9 (11) 2022/11/06 23:26
▶ ▼ Last patch testing requests (11)
Created Duration User Patch Repo Result
2023/11/22 09:19 18m retest repro upstream report log
2023/11/22 09:19 15m retest repro upstream report log
2023/11/22 09:19 11m retest repro upstream report log
2023/11/22 09:19 24m retest repro upstream OK log
2023/11/22 09:19 11m retest repro upstream report log
2023/11/02 10:28 16m retest repro upstream report log
2023/09/27 15:38 22m retest repro upstream report log
2023/09/27 15:38 13m retest repro upstream report log
2023/09/27 15:38 11m retest repro upstream report log
2023/09/27 15:38 11m retest repro upstream report log
2022/07/10 16:42 5m code@siddh.me https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master error OK

Sample crash report:
write to /proc/sys/kernel/hung_task_check_interval_secs failed: No such file or directory
write to /proc/sys/kernel/softlockup_all_cpu_backtrace failed: No such file or directory
BUG: memory leak
unreferenced object 0xffff88810fd216c0 (size 576):
  comm "syz-executor159", pid 3686, jiffies 4295064650 (age 50.150s)
  hex dump (first 32 bytes):
    06 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    20 85 98 0f 81 88 ff ff d8 16 d2 0f 81 88 ff ff   ...............
  backtrace:
    [<ffffffff844153c6>] xas_alloc+0xf6/0x120 lib/xarray.c:377
    [<ffffffff84418039>] xas_create+0x3b9/0x800 lib/xarray.c:679
    [<ffffffff84418520>] xas_create_range+0xa0/0x1c0 lib/xarray.c:719
    [<ffffffff8159f11c>] collapse_file+0x13c/0x2730 mm/khugepaged.c:1725
    [<ffffffff815a1b28>] hpage_collapse_scan_file+0x418/0x9a0 mm/khugepaged.c:2156
    [<ffffffff815a4001>] madvise_collapse+0x211/0x5e0 mm/khugepaged.c:2611
    [<ffffffff8153ba2d>] madvise_vma_behavior+0x5dd/0x1030 mm/madvise.c:1076
    [<ffffffff81537257>] madvise_walk_vmas+0x127/0x1d0 mm/madvise.c:1250
    [<ffffffff81537eb0>] do_madvise.part.0+0x1c0/0x2b0 mm/madvise.c:1429
    [<ffffffff8153c6e8>] do_madvise mm/madvise.c:1440 [inline]
    [<ffffffff8153c6e8>] __do_sys_madvise mm/madvise.c:1442 [inline]
    [<ffffffff8153c6e8>] __se_sys_madvise mm/madvise.c:1440 [inline]
    [<ffffffff8153c6e8>] __x64_sys_madvise+0x98/0xa0 mm/madvise.c:1440
    [<ffffffff84608225>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84608225>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84800087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88810fd21480 (size 576):
  comm "syz-executor159", pid 3686, jiffies 4295064650 (age 50.150s)
  hex dump (first 32 bytes):
    00 07 00 00 00 00 00 00 c0 16 d2 0f 81 88 ff ff  ................
    20 85 98 0f 81 88 ff ff 98 14 d2 0f 81 88 ff ff   ...............
  backtrace:
    [<ffffffff844153c6>] xas_alloc+0xf6/0x120 lib/xarray.c:377
    [<ffffffff84418039>] xas_create+0x3b9/0x800 lib/xarray.c:679
    [<ffffffff84418520>] xas_create_range+0xa0/0x1c0 lib/xarray.c:719
    [<ffffffff8159f11c>] collapse_file+0x13c/0x2730 mm/khugepaged.c:1725
    [<ffffffff815a1b28>] hpage_collapse_scan_file+0x418/0x9a0 mm/khugepaged.c:2156
    [<ffffffff815a4001>] madvise_collapse+0x211/0x5e0 mm/khugepaged.c:2611
    [<ffffffff8153ba2d>] madvise_vma_behavior+0x5dd/0x1030 mm/madvise.c:1076
    [<ffffffff81537257>] madvise_walk_vmas+0x127/0x1d0 mm/madvise.c:1250
    [<ffffffff81537eb0>] do_madvise.part.0+0x1c0/0x2b0 mm/madvise.c:1429
    [<ffffffff8153c6e8>] do_madvise mm/madvise.c:1440 [inline]
    [<ffffffff8153c6e8>] __do_sys_madvise mm/madvise.c:1442 [inline]
    [<ffffffff8153c6e8>] __se_sys_madvise mm/madvise.c:1440 [inline]
    [<ffffffff8153c6e8>] __x64_sys_madvise+0x98/0xa0 mm/madvise.c:1440
    [<ffffffff84608225>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84608225>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84800087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88810fd21240 (size 576):
  comm "syz-executor159", pid 3686, jiffies 4295064650 (age 50.150s)
  hex dump (first 32 bytes):
    00 06 00 00 00 00 00 00 c0 16 d2 0f 81 88 ff ff  ................
    20 85 98 0f 81 88 ff ff 58 12 d2 0f 81 88 ff ff   .......X.......
  backtrace:
    [<ffffffff844153c6>] xas_alloc+0xf6/0x120 lib/xarray.c:377
    [<ffffffff84418039>] xas_create+0x3b9/0x800 lib/xarray.c:679
    [<ffffffff84418520>] xas_create_range+0xa0/0x1c0 lib/xarray.c:719
    [<ffffffff8159f11c>] collapse_file+0x13c/0x2730 mm/khugepaged.c:1725
    [<ffffffff815a1b28>] hpage_collapse_scan_file+0x418/0x9a0 mm/khugepaged.c:2156
    [<ffffffff815a4001>] madvise_collapse+0x211/0x5e0 mm/khugepaged.c:2611
    [<ffffffff8153ba2d>] madvise_vma_behavior+0x5dd/0x1030 mm/madvise.c:1076
    [<ffffffff81537257>] madvise_walk_vmas+0x127/0x1d0 mm/madvise.c:1250
    [<ffffffff81537eb0>] do_madvise.part.0+0x1c0/0x2b0 mm/madvise.c:1429
    [<ffffffff8153c6e8>] do_madvise mm/madvise.c:1440 [inline]
    [<ffffffff8153c6e8>] __do_sys_madvise mm/madvise.c:1442 [inline]
    [<ffffffff8153c6e8>] __se_sys_madvise mm/madvise.c:1440 [inline]
    [<ffffffff8153c6e8>] __x64_sys_madvise+0x98/0xa0 mm/madvise.c:1440
    [<ffffffff84608225>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84608225>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84800087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88810fd24d80 (size 576):
  comm "syz-executor159", pid 3686, jiffies 4295064650 (age 50.150s)
  hex dump (first 32 bytes):
    00 05 00 00 00 00 00 00 c0 16 d2 0f 81 88 ff ff  ................
    20 85 98 0f 81 88 ff ff 98 4d d2 0f 81 88 ff ff   ........M......
  backtrace:
    [<ffffffff844153c6>] xas_alloc+0xf6/0x120 lib/xarray.c:377
    [<ffffffff84418039>] xas_create+0x3b9/0x800 lib/xarray.c:679
    [<ffffffff84418520>] xas_create_range+0xa0/0x1c0 lib/xarray.c:719
    [<ffffffff8159f11c>] collapse_file+0x13c/0x2730 mm/khugepaged.c:1725
    [<ffffffff815a1b28>] hpage_collapse_scan_file+0x418/0x9a0 mm/khugepaged.c:2156
    [<ffffffff815a4001>] madvise_collapse+0x211/0x5e0 mm/khugepaged.c:2611
    [<ffffffff8153ba2d>] madvise_vma_behavior+0x5dd/0x1030 mm/madvise.c:1076
    [<ffffffff81537257>] madvise_walk_vmas+0x127/0x1d0 mm/madvise.c:1250
    [<ffffffff81537eb0>] do_madvise.part.0+0x1c0/0x2b0 mm/madvise.c:1429
    [<ffffffff8153c6e8>] do_madvise mm/madvise.c:1440 [inline]
    [<ffffffff8153c6e8>] __do_sys_madvise mm/madvise.c:1442 [inline]
    [<ffffffff8153c6e8>] __se_sys_madvise mm/madvise.c:1440 [inline]
    [<ffffffff8153c6e8>] __x64_sys_madvise+0x98/0xa0 mm/madvise.c:1440
    [<ffffffff84608225>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84608225>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84800087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

write to /proc/sys/kernel/hung_task_check_interval_secs failed: No such file or directory
write to /proc/sys/kernel/softlockup_all_cpu_backtrace failed: No such file or directory
write to /proc/sys/kernel/hung_task_check_interval_secs failed: No such file or directory
write to /proc/sys/kernel/softlockup_all_cpu_backtrace failed: No such file or directory

Crashes (15):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/11/06 23:26 upstream 2f5065a0bc9d 6d752409 .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2023/10/19 09:53 upstream dd72f9c7e512 342b9c55 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2023/07/27 00:33 upstream 5f0bc0b042fc 41fe1bae .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2023/07/26 09:30 upstream 18b44bc5a672 6756545c .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2023/05/05 12:04 upstream 3c4aa4434377 518a39a6 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2023/03/01 23:32 upstream c0927a7a5391 f8902b57 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2023/02/25 02:42 upstream d2980d8d8265 ee50e71c .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2022/11/13 13:55 upstream fef7fd48922d 3ead01ad .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2022/11/05 14:22 upstream 64c3dd0b98f5 6d752409 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2022/11/01 15:16 upstream 5aaef24b5c6d a1d8560a .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2022/10/22 00:36 upstream e35184f32151 4bfd3c27 .config console log report syz [disk image] [vmlinux] ci-upstream-gce-leak memory leak in xas_create
2022/08/28 12:43 upstream 10d4879f9ef0 07177916 .config console log report syz ci-upstream-gce-leak memory leak in xas_create
2022/07/05 07:03 upstream c1084b6c5620 bff65f44 .config console log report syz ci-upstream-gce-leak memory leak in xas_create
2022/10/28 20:15 upstream 23758867219c ea12ae9b .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
2023/11/08 06:03 upstream 13d88ac54ddd 83211397 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in xas_create
* Struck through repros no longer work on HEAD.