From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-oo1-f70.google.com (mail-oo1-f70.google.com [209.85.161.70]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id A5DAE1607A4 for ; Sun, 31 May 2026 00:21:03 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.161.70 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780186865; cv=none; b=Vs9s4I3bfgoYYmkKjRtAOenJNEeXYjm7/DOXGpc89hEkE43d7BS4BYl1wRDLvnFEj0gGJWjeZ+A88Xr0+e8PHrwRj/7Mq9F7Aue6yuG14WjSMXVNXHnW4gHb+LqXPoi2x21ACsKUgmB7HkikhrDkhDr7xtfZ7zEK0PoJ0dn+TLc= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780186865; c=relaxed/simple; bh=dnO2TUXhNE1jo4sLEahKIPLFA8G4gQyefzvvtBwfdn8=; h=MIME-Version:Date:In-Reply-To:Message-ID:Subject:From:To: Content-Type; b=kAaM+SFnNzq/CNKiCnOQn5yDQybOaGPETiBp9Za6cStqxQiGOdAnzPT1/wQK3+Zd1MWmWNqHncijaMnqcHXg+xNen+IWQjDjwfdoUYooc3PB53ipGp3xTRkWjzVljLpARkj/OYES8NlzVN/BIND4Qa8uznTr1Mqy1/8jpqKsWl0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; arc=none smtp.client-ip=209.85.161.70 Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com Received: by mail-oo1-f70.google.com with SMTP id 006d021491bc7-69d85c328c7so5596529eaf.3 for ; Sat, 30 May 2026 17:21:03 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1780186862; x=1780791662; h=to:from:subject:message-id:in-reply-to:date:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=YUsTumm3YOgqBSLgKyDcmtJExzAEWS60pkPMCj5zY5c=; b=bQ5/Kl1CKUuQHjmwtJXM8qi+XnMVudsVoW4cQiukbbs6sltXvV0ZT0vs8QUbJlzCAK b+Pxr2ibpcI9N+JnYgHsStkQTjHz8Pex+a12oHHdYokKemXxVvy+qIoxilYwpzWP0yGf GXneqOWqVT1dOL480thrvwoYhPDioioA2bwB+LyFfs78e01oMU4SJysdMfSytxsH/hIi G/zCzBs6UOBYi6jdpoIhWaCLyqn6d7Wo6t47YRL0pynA/kCcNWsr1jhzrqXB4RrpMHYK JnJIxFb5GhGta6LPiUSeVN/3y/0mv4tbSZylGDeMiZtWrhLkndoXdSB3hivSBg7bmAZA nOIw== X-Forwarded-Encrypted: i=1; AFNElJ8eNjqx6l0p7tK5DutHLRb2NcFKvFUoTKsegSKcktY+3mpK9FlJDewPJyKDJ9CPcP3vkMoe+wqqNRsWwbg=@vger.kernel.org X-Gm-Message-State: AOJu0Yy8CZwEzc+eBW4BJH5saAbMwa0VYGqOR/ZagNHhAwLKoDmc27x9 jVCNG4i0c9S9LkY/MbFI/AiebRXvb2Iy9WowzSu+jq+JvKSOp5KWyh91S+oZh0OrybW3gWTiaOe dPZ3e+dPZlChNMchRE+pRjy8wnUixkrtWJSaKauyRhZMDAYI4BHwhsrJ0WfM= Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Received: by 2002:a05:6820:189b:b0:69b:9209:576a with SMTP id 006d021491bc7-69e1059e16emr2642876eaf.37.1780186862754; Sat, 30 May 2026 17:21:02 -0700 (PDT) Date: Sat, 30 May 2026 17:21:02 -0700 In-Reply-To: <20260530232001.97305-1-kartikey406@gmail.com> X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <6a1b7eee.0a9e871e.332604.000d.GAE@google.com> Subject: Re: [syzbot] [bluetooth?] memory leak in init_srcu_struct_fields From: syzbot To: kartikey406@gmail.com, linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Content-Type: text/plain; charset="UTF-8" Hello, syzbot has tested the proposed patch but the reproducer is still triggering an issue: memory leak in init_srcu_struct_fields BUG: memory leak unreferenced object (percpu) 0x607e4db7f7c0 (size 384): comm "syz.0.17", pid 6615, jiffies 4294948617 hex dump (first 32 bytes on cpu 1): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 593bdea7): pcpu_alloc_noprof+0x7c7/0xed0 mm/percpu.c:1956 init_srcu_struct_fields+0x2eb/0x350 kernel/rcu/srcutree.c:224 hci_alloc_dev_priv+0x37/0x680 net/bluetooth/hci_core.c:2416 hci_alloc_dev include/net/bluetooth/hci_core.h:1763 [inline] hci_uart_register_dev drivers/bluetooth/hci_ldisc.c:672 [inline] hci_uart_set_proto drivers/bluetooth/hci_ldisc.c:752 [inline] hci_uart_tty_ioctl+0x173/0x460 drivers/bluetooth/hci_ldisc.c:806 tty_ioctl+0xaca/0xd60 drivers/tty/tty_io.c:2801 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0xf4/0x140 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xee/0x600 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88810de8e800 (size 512): comm "syz.0.18", pid 6621, jiffies 4294948621 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 4c023471): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4613 [inline] slab_alloc_node mm/slub.c:4937 [inline] __kmalloc_cache_noprof+0x371/0x480 mm/slub.c:5443 _kmalloc_noprof include/linux/slab.h:969 [inline] _kzalloc_noprof include/linux/slab.h:1286 [inline] init_srcu_struct_fields+0x2c0/0x350 kernel/rcu/srcutree.c:207 hci_alloc_dev_priv+0x37/0x680 net/bluetooth/hci_core.c:2416 hci_alloc_dev include/net/bluetooth/hci_core.h:1763 [inline] hci_uart_register_dev drivers/bluetooth/hci_ldisc.c:672 [inline] hci_uart_set_proto drivers/bluetooth/hci_ldisc.c:752 [inline] hci_uart_tty_ioctl+0x173/0x460 drivers/bluetooth/hci_ldisc.c:806 tty_ioctl+0xaca/0xd60 drivers/tty/tty_io.c:2801 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0xf4/0x140 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xee/0x600 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object (percpu) 0x607e4db7f940 (size 384): comm "syz.0.18", pid 6621, jiffies 4294948621 hex dump (first 32 bytes on cpu 1): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 593bdea7): pcpu_alloc_noprof+0x7c7/0xed0 mm/percpu.c:1956 init_srcu_struct_fields+0x2eb/0x350 kernel/rcu/srcutree.c:224 hci_alloc_dev_priv+0x37/0x680 net/bluetooth/hci_core.c:2416 hci_alloc_dev include/net/bluetooth/hci_core.h:1763 [inline] hci_uart_register_dev drivers/bluetooth/hci_ldisc.c:672 [inline] hci_uart_set_proto drivers/bluetooth/hci_ldisc.c:752 [inline] hci_uart_tty_ioctl+0x173/0x460 drivers/bluetooth/hci_ldisc.c:806 tty_ioctl+0xaca/0xd60 drivers/tty/tty_io.c:2801 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0xf4/0x140 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xee/0x600 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88810de8fc00 (size 512): comm "syz.0.19", pid 6630, jiffies 4294948624 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc a013f5be): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4613 [inline] slab_alloc_node mm/slub.c:4937 [inline] __kmalloc_cache_noprof+0x371/0x480 mm/slub.c:5443 _kmalloc_noprof include/linux/slab.h:969 [inline] _kzalloc_noprof include/linux/slab.h:1286 [inline] init_srcu_struct_fields+0x2c0/0x350 kernel/rcu/srcutree.c:207 hci_alloc_dev_priv+0x37/0x680 net/bluetooth/hci_core.c:2416 hci_alloc_dev include/net/bluetooth/hci_core.h:1763 [inline] hci_uart_register_dev drivers/bluetooth/hci_ldisc.c:672 [inline] hci_uart_set_proto drivers/bluetooth/hci_ldisc.c:752 [inline] hci_uart_tty_ioctl+0x173/0x460 drivers/bluetooth/hci_ldisc.c:806 tty_ioctl+0xaca/0xd60 drivers/tty/tty_io.c:2801 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0xf4/0x140 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xee/0x600 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object (percpu) 0x607e4db7fac0 (size 384): comm "syz.0.19", pid 6630, jiffies 4294948624 hex dump (first 32 bytes on cpu 1): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 593bdea7): pcpu_alloc_noprof+0x7c7/0xed0 mm/percpu.c:1956 init_srcu_struct_fields+0x2eb/0x350 kernel/rcu/srcutree.c:224 hci_alloc_dev_priv+0x37/0x680 net/bluetooth/hci_core.c:2416 hci_alloc_dev include/net/bluetooth/hci_core.h:1763 [inline] hci_uart_register_dev drivers/bluetooth/hci_ldisc.c:672 [inline] hci_uart_set_proto drivers/bluetooth/hci_ldisc.c:752 [inline] hci_uart_tty_ioctl+0x173/0x460 drivers/bluetooth/hci_ldisc.c:806 tty_ioctl+0xaca/0xd60 drivers/tty/tty_io.c:2801 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0xf4/0x140 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xee/0x600 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF Tested on: commit: 7da7f071 Add linux-next specific files for 20260529 git tree: linux-next console output: https://syzkaller.appspot.com/x/log.txt?x=1395b36a580000 kernel config: https://syzkaller.appspot.com/x/.config?x=3dd1e35bbd92239d dashboard link: https://syzkaller.appspot.com/bug?extid=535ecc844591e50588a5 compiler: gcc (Debian 14.2.0-19) 14.2.0, GNU ld (GNU Binutils for Debian) 2.44 patch: https://syzkaller.appspot.com/x/patch.diff?x=123de056580000