From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id EF041C4332F for ; Thu, 3 Nov 2022 22:14:49 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S231655AbiKCWOr (ORCPT ); Thu, 3 Nov 2022 18:14:47 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:40384 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230489AbiKCWOn (ORCPT ); Thu, 3 Nov 2022 18:14:43 -0400 Received: from mail-io1-f71.google.com (mail-io1-f71.google.com [209.85.166.71]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 36F5221269 for ; Thu, 3 Nov 2022 15:14:40 -0700 (PDT) Received: by mail-io1-f71.google.com with SMTP id w16-20020a6b4a10000000b006a5454c789eso1921764iob.20 for ; Thu, 03 Nov 2022 15:14:40 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:from:subject:message-id:date:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=b+vj0ESjG5r4BIvswDDDboZ1laiioRVaHJ/TmUfSzc4=; b=XTjc/qqOQYsI9J3NCOSZkfmzsUjnW/pPjZ+g+p8MEPs+6Mwi3vi5dD6TZ8YSKCyCe/ hu47YMGOS4gMMwHpSgMflg72o0cbSntHqJ13oTlpSbrwW/vvgS0QBsm2oEs/112FjX3G Cpk6iUTwqQyZNGx6FwEK5R6IuW1MT05ZovmKY0GDEp6TbbBLd+Q49U/mQMYXNjVIaWYC 8B/mFkOVcARGEUSroWxXFond19HegMC79chf0VLFgyNMFP5yxdE0sciLMT+pAEoVOJsJ +/0JcFF7qDZcYvIhc9//DNsZoRaOAFNnYIrUWXwlkacxYFmHbK42d1M3urYGemPxsLv8 DFuQ== X-Gm-Message-State: ACrzQf0eWEheDLdrKBZ6lu7rbuyPKcIamtfMataNTOxpN92Qavesqivr j1T7UNJkP+TRdSvo0p+uvywK3ZlHYlUx4wvCmR5TorJZd2xT X-Google-Smtp-Source: AMsMyM4eMH14ozcQ0xczpTX2Mp2+FyiTYDUqAsExiEsaPiJ+i/x28Ew3iMKu6PAmTQRewZIp/QUUaNy5gfLO2HTUW9p3AQjJYRzg MIME-Version: 1.0 X-Received: by 2002:a02:6a2e:0:b0:363:a0a4:bf24 with SMTP id l46-20020a026a2e000000b00363a0a4bf24mr19955068jac.204.1667513679569; Thu, 03 Nov 2022 15:14:39 -0700 (PDT) Date: Thu, 03 Nov 2022 15:14:39 -0700 X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <000000000000876b4405ec984835@google.com> Subject: [syzbot] memory leak in __insert_pending From: syzbot To: adilger.kernel@dilger.ca, linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com, tytso@mit.edu Content-Type: text/plain; charset="UTF-8" Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hello, syzbot found the following issue on: HEAD commit: 882ad2a2a8ff Merge tag 'random-6.1-rc3-for-linus' of git:/.. git tree: upstream console output: https://syzkaller.appspot.com/x/log.txt?x=14aad446880000 kernel config: https://syzkaller.appspot.com/x/.config?x=8e0c1dbca40c1f1d dashboard link: https://syzkaller.appspot.com/bug?extid=05a0f0ccab4a25626e38 compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 syz repro: https://syzkaller.appspot.com/x/repro.syz?x=11dc2096880000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=13a9300a880000 Downloadable assets: disk image: https://storage.googleapis.com/syzbot-assets/f8f0ce1c9534/disk-882ad2a2.raw.xz vmlinux: https://storage.googleapis.com/syzbot-assets/206eb0f33f01/vmlinux-882ad2a2.xz kernel image: https://storage.googleapis.com/syzbot-assets/13e639ad2934/bzImage-882ad2a2.xz mounted in repro: https://storage.googleapis.com/syzbot-assets/7347d92c0f64/mount_0.gz IMPORTANT: if you fix the issue, please add the following tag to the commit: Reported-by: syzbot+05a0f0ccab4a25626e38@syzkaller.appspotmail.com BUG: memory leak unreferenced object 0xffff888111c8a1e0 (size 32): comm "syz-executor114", pid 3614, jiffies 4294956785 (age 12.710s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [] __insert_pending.isra.0+0xaa/0xf0 fs/ext4/extents_status.c:1895 [] ext4_es_insert_delayed_block+0x224/0x230 fs/ext4/extents_status.c:2018 [] ext4_insert_delayed_block fs/ext4/inode.c:1704 [inline] [] ext4_da_map_blocks fs/ext4/inode.c:1796 [inline] [] ext4_da_get_block_prep+0x3a5/0x7e0 fs/ext4/inode.c:1860 [] __block_write_begin_int+0x1d6/0x9d0 fs/buffer.c:1991 [] ext4_da_convert_inline_data_to_extent fs/ext4/inline.c:877 [inline] [] ext4_da_write_inline_data_begin+0x39b/0xb10 fs/ext4/inline.c:939 [] ext4_da_write_begin+0x477/0x4e0 fs/ext4/inode.c:2986 [] generic_perform_write+0xff/0x2b0 mm/filemap.c:3753 [] ext4_buffered_write_iter+0xbb/0x1d0 fs/ext4/file.c:285 [] ext4_file_write_iter+0xbf/0xbf0 fs/ext4/file.c:700 [] call_write_iter include/linux/fs.h:2191 [inline] [] do_iter_readv_writev+0x147/0x210 fs/read_write.c:735 [] do_iter_write+0xdc/0x300 fs/read_write.c:861 [] vfs_iter_write+0x39/0x60 fs/read_write.c:902 [] iter_file_splice_write+0x434/0x660 fs/splice.c:686 [] do_splice_from fs/splice.c:764 [inline] [] direct_splice_actor+0x4b/0x70 fs/splice.c:931 [] splice_direct_to_actor+0x149/0x350 fs/splice.c:886 [] do_splice_direct+0xe8/0x150 fs/splice.c:974 BUG: memory leak unreferenced object 0xffff888111c8a260 (size 32): comm "syz-executor114", pid 3618, jiffies 4294957317 (age 7.390s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [] __insert_pending.isra.0+0xaa/0xf0 fs/ext4/extents_status.c:1895 [] ext4_es_insert_delayed_block+0x224/0x230 fs/ext4/extents_status.c:2018 [] ext4_insert_delayed_block fs/ext4/inode.c:1704 [inline] [] ext4_da_map_blocks fs/ext4/inode.c:1796 [inline] [] ext4_da_get_block_prep+0x3a5/0x7e0 fs/ext4/inode.c:1860 [] __block_write_begin_int+0x1d6/0x9d0 fs/buffer.c:1991 [] ext4_da_convert_inline_data_to_extent fs/ext4/inline.c:877 [inline] [] ext4_da_write_inline_data_begin+0x39b/0xb10 fs/ext4/inline.c:939 [] ext4_da_write_begin+0x477/0x4e0 fs/ext4/inode.c:2986 [] generic_perform_write+0xff/0x2b0 mm/filemap.c:3753 [] ext4_buffered_write_iter+0xbb/0x1d0 fs/ext4/file.c:285 [] ext4_file_write_iter+0xbf/0xbf0 fs/ext4/file.c:700 [] call_write_iter include/linux/fs.h:2191 [inline] [] do_iter_readv_writev+0x147/0x210 fs/read_write.c:735 [] do_iter_write+0xdc/0x300 fs/read_write.c:861 [] vfs_iter_write+0x39/0x60 fs/read_write.c:902 [] iter_file_splice_write+0x434/0x660 fs/splice.c:686 [] do_splice_from fs/splice.c:764 [inline] [] direct_splice_actor+0x4b/0x70 fs/splice.c:931 [] splice_direct_to_actor+0x149/0x350 fs/splice.c:886 [] do_splice_direct+0xe8/0x150 fs/splice.c:974 --- This report is generated by a bot. It may contain errors. See https://goo.gl/tpsmEJ for more information about syzbot. syzbot engineers can be reached at syzkaller@googlegroups.com. syzbot will keep track of this issue. See: https://goo.gl/tpsmEJ#status for how to communicate with syzbot. syzbot can test patches for this issue, for details see: https://goo.gl/tpsmEJ#testing-patches