From: kernel test robot <lkp@intel.com>
To: oe-kbuild@lists.linux.dev
Cc: lkp@intel.com, Dan Carpenter <error27@gmail.com>
Subject: [android-common:android16-6.12 1/1] mm/damon/tests/sysfs-kunit.h:80 damon_sysfs_test_add_targets() error: dereferencing freed memory 'sysfs_target' (line 79)
Date: Sat, 14 Nov 2026 16:05:00 +0100 [thread overview]
Message-ID: <202611141540.dikinyHI-lkp@intel.com> (raw)
Unfiltered warning: this smatch report is sent as-is and has not been
reviewed for false positives, so please treat it with due skepticism.
BCC: lkp@intel.com
CC: oe-kbuild-all@lists.linux.dev
TO: cros-kernel-buildreports@googlegroups.com
tree: https://android.googlesource.com/kernel/common android16-6.12
head: 793c58ba801e0ec6ed0c3b71d1a1f091a42d299c
commit: 8a2944f5a54f0b3cece27a265e319c499ca40cb2 [1/1] mm/damon/tests/sysfs-kunit: handle alloc failures on damon_sysfs_test_add_targets()
:::::: branch date: 16 hours ago
:::::: commit date: 10 months ago
config: arm-randconfig-2200-20261113 (https://download.01.org/0day-ci/archive/20261114/202611141540.dikinyHI-lkp@intel.com/config)
compiler: clang version 24.0.0git (https://github.com/llvm/llvm-project 8621950157210c1fa68f20f0614cb51310ec9dff)
smatch: v0.5.0-9187-g5189e3fb
If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <lkp@intel.com>
| Reported-by: Dan Carpenter <error27@gmail.com>
| Closes: https://lore.kernel.org/r/202611141540.dikinyHI-lkp@intel.com/
smatch warnings:
mm/damon/tests/sysfs-kunit.h:80 damon_sysfs_test_add_targets() error: dereferencing freed memory 'sysfs_target' (line 79)
vim +/sysfs_target +80 mm/damon/tests/sysfs-kunit.h
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 40
2caef83db9f8e08 mm/damon/sysfs-test.h SeongJae Park 2024-06-18 41 static void damon_sysfs_test_add_targets(struct kunit *test)
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 42 {
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 43 struct damon_sysfs_targets *sysfs_targets;
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 44 struct damon_sysfs_target *sysfs_target;
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 45 struct damon_ctx *ctx;
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 46
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 47 sysfs_targets = damon_sysfs_targets_alloc();
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 48 if (!sysfs_targets)
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 49 kunit_skip(test, "sysfs_targets alloc fail");
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 50 sysfs_targets->nr = 1;
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 51 sysfs_targets->targets_arr = kmalloc_array(1,
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 52 sizeof(*sysfs_targets->targets_arr), GFP_KERNEL);
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 53 if (!sysfs_targets->targets_arr) {
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 54 kfree(sysfs_targets);
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 55 kunit_skip(test, "targets_arr alloc fail");
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 56 }
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 57
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 58 sysfs_target = damon_sysfs_target_alloc();
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 59 if (!sysfs_target) {
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 60 kfree(sysfs_targets->targets_arr);
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 61 kfree(sysfs_targets);
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 62 kunit_skip(test, "sysfs_target alloc fail");
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 63 }
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 64 sysfs_target->pid = __damon_sysfs_test_get_any_pid(12, 100);
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 65 sysfs_target->regions = damon_sysfs_regions_alloc();
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 66 if (!sysfs_target->regions) {
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 67 kfree(sysfs_targets->targets_arr);
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 68 kfree(sysfs_targets);
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 69 kfree(sysfs_target);
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 70 kunit_skip(test, "sysfs_regions alloc fail");
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 71 }
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 72
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 73 sysfs_targets->targets_arr[0] = sysfs_target;
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 74
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 75 ctx = damon_new_ctx();
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 76 if (!ctx) {
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 77 kfree(sysfs_targets->targets_arr);
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 78 kfree(sysfs_targets);
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 @79 kfree(sysfs_target);
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 @80 kfree(sysfs_target->regions);
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 81 kunit_skip(test, "ctx alloc fail");
8a2944f5a54f0b3 mm/damon/tests/sysfs-kunit.h SeongJae Park 2025-11-01 82 }
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 83
2caef83db9f8e08 mm/damon/sysfs-test.h SeongJae Park 2024-06-18 84 damon_sysfs_add_targets(ctx, sysfs_targets);
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 85 KUNIT_EXPECT_EQ(test, 1u, nr_damon_targets(ctx));
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 86
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 87 sysfs_target->pid = __damon_sysfs_test_get_any_pid(
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 88 sysfs_target->pid + 1, 200);
2caef83db9f8e08 mm/damon/sysfs-test.h SeongJae Park 2024-06-18 89 damon_sysfs_add_targets(ctx, sysfs_targets);
d96727a251fd2b9 mm/damon/sysfs-test.h SeongJae Park 2024-06-18 90 KUNIT_EXPECT_EQ(test, 2u, nr_damon_targets(ctx));
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 91
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 92 damon_destroy_ctx(ctx);
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 93 kfree(sysfs_targets->targets_arr);
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 94 kfree(sysfs_targets);
2d6a1c835685de3 mm/damon/tests/sysfs-kunit.h Jinjie Ruan 2024-10-10 95 kfree(sysfs_target->regions);
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 96 kfree(sysfs_target);
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 97 }
b8ee5575f763c23 mm/damon/sysfs-test.h SeongJae Park 2023-10-22 98
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
reply other threads:[~2026-11-14 15:05 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=202611141540.dikinyHI-lkp@intel.com \
--to=lkp@intel.com \
--cc=error27@gmail.com \
--cc=oe-kbuild@lists.linux.dev \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.