From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id E2AD7C4332F for ; Wed, 9 Nov 2022 18:25:52 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S230473AbiKISZv (ORCPT ); Wed, 9 Nov 2022 13:25:51 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:51300 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230298AbiKISZs (ORCPT ); Wed, 9 Nov 2022 13:25:48 -0500 Received: from mail-io1-f69.google.com (mail-io1-f69.google.com [209.85.166.69]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 08FED2DE8 for ; Wed, 9 Nov 2022 10:25:48 -0800 (PST) Received: by mail-io1-f69.google.com with SMTP id g13-20020a056602072d00b006c60d59110fso11758569iox.12 for ; Wed, 09 Nov 2022 10:25:48 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:from:subject:message-id:in-reply-to:date:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=9fGqAIeMuhrwXfptcLbIlluni1y5fNYxkg7mqkWbCqw=; b=I8IlSr3/ccooTuHV2G8zVWdm9stI9w2W31m/kW1wRiRBUvkEF80da43rdhD707B6gd fruvu0ACsd4IBQgTKea/iUlDUjbNId5UEgBo/RIdK01YGaDNiMmtS/YHa9kLuMvZOcpb KBhxW5KajYMZjOziT+ztsAVHmRlh6vrvR2sRmYUrSOZIKmDqU6sJ8rFLJ29/6ZlxWVGi KLkKi1aO12f1f9tK1utpf7/TOaGdRoda/YcjuijIwKxuNMJBXz75szOJsuwwuHYNs0CD JqsyiGmLLPq/zxxU80JQUe8007XSlJQd6teYzVyS3ZOKKtssH4V+5DddAnFYkxZvLz4K kOvw== X-Gm-Message-State: ACrzQf0MzupFzi6fRM5Al1gUcV7JNKnyelcNOuuii0luWRu08AC8Q/fa A0eAtO7rBa9vWqwFqzE6qba2ux8tc3pdtvgSDY2EhkTSak6c X-Google-Smtp-Source: AMsMyM5VSP02eDnDxeF9p9H+9ItHHOlHZltrqLdAkXdQwNZctajHd6PnT+o9/jbh0Fh90oK/DnP735XMapA8BWJqdWW52dpASwPk MIME-Version: 1.0 X-Received: by 2002:a92:d283:0:b0:300:ddde:c31f with SMTP id p3-20020a92d283000000b00300dddec31fmr1890492ilp.246.1668018347394; Wed, 09 Nov 2022 10:25:47 -0800 (PST) Date: Wed, 09 Nov 2022 10:25:47 -0800 In-Reply-To: <00000000000090655b05a2ff399a@google.com> X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <000000000000134d6205ed0dc953@google.com> Subject: Re: [syzbot] memory leak in drm_vma_node_allow From: syzbot To: 11115066@vivo.com, airlied@gmail.com, airlied@linux.ie, anant.thazhemadam@gmail.com, daniel@ffwll.ch, dri-devel@lists.freedesktop.org, igormtorrente@gmail.com, linux-kernel@vger.kernel.org, maarten.lankhorst@linux.intel.com, mripard@kernel.org, syzkaller-bugs@googlegroups.com, tzimmermann@suse.de Content-Type: text/plain; charset="UTF-8" Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org syzbot has found a reproducer for the following issue on: HEAD commit: f141df371335 Merge tag 'audit-pr-20221107' of git://git.ke.. git tree: upstream console output: https://syzkaller.appspot.com/x/log.txt?x=123bdcd1880000 kernel config: https://syzkaller.appspot.com/x/.config?x=f7ebe38e4b66a7b dashboard link: https://syzkaller.appspot.com/bug?extid=04639d98c75c52e41b8a compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 syz repro: https://syzkaller.appspot.com/x/repro.syz?x=158ec0c1880000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=120cc3e1880000 Downloadable assets: disk image: https://storage.googleapis.com/syzbot-assets/d056ae4a8f32/disk-f141df37.raw.xz vmlinux: https://storage.googleapis.com/syzbot-assets/02fdf71b87b4/vmlinux-f141df37.xz kernel image: https://storage.googleapis.com/syzbot-assets/14078d70a64d/bzImage-f141df37.xz IMPORTANT: if you fix the issue, please add the following tag to the commit: Reported-by: syzbot+04639d98c75c52e41b8a@syzkaller.appspotmail.com executing program executing program executing program executing program BUG: memory leak unreferenced object 0xffff88810f65f0c0 (size 64): comm "syz-executor402", pid 3630, jiffies 4294948375 (age 13.410s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 94 b3 05 81 88 ff ff ................ backtrace: [] kmalloc_trace+0x20/0x90 mm/slab_common.c:1046 [] kmalloc include/linux/slab.h:576 [inline] [] drm_vma_node_allow+0x32/0x120 drivers/gpu/drm/drm_vma_manager.c:274 [] drm_gem_handle_create_tail+0x10a/0x250 drivers/gpu/drm/drm_gem.c:377 [] drm_gem_shmem_create_with_handle drivers/gpu/drm/drm_gem_shmem_helper.c:432 [inline] [] drm_gem_shmem_dumb_create+0xb9/0x200 drivers/gpu/drm/drm_gem_shmem_helper.c:534 [] drm_mode_create_dumb+0x117/0x150 drivers/gpu/drm/drm_dumb_buffers.c:96 [] drm_ioctl_kernel+0x144/0x260 drivers/gpu/drm/drm_ioctl.c:788 [] drm_ioctl+0x2ec/0x4f0 drivers/gpu/drm/drm_ioctl.c:891 [] vfs_ioctl fs/ioctl.c:51 [inline] [] __do_sys_ioctl fs/ioctl.c:870 [inline] [] __se_sys_ioctl fs/ioctl.c:856 [inline] [] __x64_sys_ioctl+0xfc/0x140 fs/ioctl.c:856 [] do_syscall_x64 arch/x86/entry/common.c:50 [inline] [] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 [] entry_SYSCALL_64_after_hwframe+0x63/0xcd