* [syzbot] [btrfs?] memory leak in qgroup_reserve_data
@ 2025-12-11 6:23 syzbot
2025-12-11 11:37 ` Edward Adam Davis
2025-12-12 4:07 ` Forwarded: " syzbot
0 siblings, 2 replies; 5+ messages in thread
From: syzbot @ 2025-12-11 6:23 UTC (permalink / raw)
To: clm, dsterba, josef, linux-btrfs, linux-kernel, syzkaller-bugs
Hello,
syzbot found the following issue on:
HEAD commit: ba65a4e7120a Merge tag 'clk-for-linus' of git://git.kernel..
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=149a1992580000
kernel config: https://syzkaller.appspot.com/x/.config?x=69400c231dedfdcf
dashboard link: https://syzkaller.appspot.com/bug?extid=2f8aa76e6acc9fce6638
compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=17674ec2580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=129a1992580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/35dd946c3f76/disk-ba65a4e7.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/4279760dbda5/vmlinux-ba65a4e7.xz
kernel image: https://storage.googleapis.com/syzbot-assets/66920d2c9825/bzImage-ba65a4e7.xz
mounted in repro: https://storage.googleapis.com/syzbot-assets/a1009b9f463a/mount_0.gz
fsck result: OK (log: https://syzkaller.appspot.com/x/fsck.log?x=15666eb4580000)
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+2f8aa76e6acc9fce6638@syzkaller.appspotmail.com
BUG: memory leak
unreferenced object 0xffff888108c93440 (size 64):
comm "syz.0.25", pid 6287, jiffies 4294945820
hex dump (first 32 bytes):
00 10 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
50 36 c9 08 81 88 ff ff 50 36 c9 08 81 88 ff ff P6......P6......
backtrace (crc 5115bfd6):
kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
slab_post_alloc_hook mm/slub.c:4953 [inline]
slab_alloc_node mm/slub.c:5258 [inline]
__kmalloc_cache_noprof+0x3b2/0x570 mm/slub.c:5766
kmalloc_noprof include/linux/slab.h:957 [inline]
extent_changeset_alloc fs/btrfs/extent_io.h:203 [inline]
qgroup_reserve_data+0x42c/0x4d0 fs/btrfs/qgroup.c:4199
btrfs_qgroup_reserve_data+0x9a/0xb0 fs/btrfs/qgroup.c:4257
btrfs_check_data_free_space+0x101/0x200 fs/btrfs/delalloc-space.c:164
btrfs_page_mkwrite+0x180/0xd30 fs/btrfs/file.c:1888
do_page_mkwrite+0x6c/0x100 mm/memory.c:3528
wp_page_shared mm/memory.c:3929 [inline]
do_wp_page+0x4fe/0x1d50 mm/memory.c:4148
handle_pte_fault mm/memory.c:6289 [inline]
__handle_mm_fault+0x125f/0x1e50 mm/memory.c:6411
handle_mm_fault+0x31c/0x630 mm/memory.c:6580
do_user_addr_fault+0x34f/0xba0 arch/x86/mm/fault.c:1336
handle_page_fault arch/x86/mm/fault.c:1476 [inline]
exc_page_fault+0x64/0xb0 arch/x86/mm/fault.c:1532
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
BUG: memory leak
unreferenced object 0xffff888108c93640 (size 64):
comm "syz.0.25", pid 6287, jiffies 4294945820
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 ff 0f 00 00 00 00 00 00 ................
50 34 c9 08 81 88 ff ff 50 34 c9 08 81 88 ff ff P4......P4......
backtrace (crc d90ae07a):
kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
slab_post_alloc_hook mm/slub.c:4953 [inline]
slab_alloc_node mm/slub.c:5258 [inline]
__kmalloc_cache_noprof+0x3b2/0x570 mm/slub.c:5766
kmalloc_noprof include/linux/slab.h:957 [inline]
kzalloc_noprof include/linux/slab.h:1094 [inline]
ulist_prealloc+0x7a/0xd0 fs/btrfs/ulist.c:114
extent_changeset_prealloc fs/btrfs/extent_io.h:213 [inline]
set_extent_bit+0x104/0xc40 fs/btrfs/extent-io-tree.c:1083
btrfs_set_record_extent_bits+0x56/0xa0 fs/btrfs/extent-io-tree.c:1868
qgroup_reserve_data+0x116/0x4d0 fs/btrfs/qgroup.c:4206
btrfs_qgroup_reserve_data+0x9a/0xb0 fs/btrfs/qgroup.c:4257
btrfs_check_data_free_space+0x101/0x200 fs/btrfs/delalloc-space.c:164
btrfs_page_mkwrite+0x180/0xd30 fs/btrfs/file.c:1888
do_page_mkwrite+0x6c/0x100 mm/memory.c:3528
wp_page_shared mm/memory.c:3929 [inline]
do_wp_page+0x4fe/0x1d50 mm/memory.c:4148
handle_pte_fault mm/memory.c:6289 [inline]
__handle_mm_fault+0x125f/0x1e50 mm/memory.c:6411
handle_mm_fault+0x31c/0x630 mm/memory.c:6580
do_user_addr_fault+0x34f/0xba0 arch/x86/mm/fault.c:1336
handle_page_fault arch/x86/mm/fault.c:1476 [inline]
exc_page_fault+0x64/0xb0 arch/x86/mm/fault.c:1532
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
BUG: memory leak
unreferenced object 0xffff8881294d0cc0 (size 64):
comm "syz.0.25", pid 6288, jiffies 4294945820
hex dump (first 32 bytes):
00 10 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
d0 03 4d 29 81 88 ff ff d0 03 4d 29 81 88 ff ff ..M)......M)....
backtrace (crc 99a57742):
kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
slab_post_alloc_hook mm/slub.c:4953 [inline]
slab_alloc_node mm/slub.c:5258 [inline]
__kmalloc_cache_noprof+0x3b2/0x570 mm/slub.c:5766
kmalloc_noprof include/linux/slab.h:957 [inline]
extent_changeset_alloc fs/btrfs/extent_io.h:203 [inline]
qgroup_reserve_data+0x42c/0x4d0 fs/btrfs/qgroup.c:4199
btrfs_qgroup_reserve_data+0x9a/0xb0 fs/btrfs/qgroup.c:4257
btrfs_check_data_free_space+0x101/0x200 fs/btrfs/delalloc-space.c:164
btrfs_page_mkwrite+0x180/0xd30 fs/btrfs/file.c:1888
do_page_mkwrite+0x6c/0x100 mm/memory.c:3528
wp_page_shared mm/memory.c:3929 [inline]
do_wp_page+0x4fe/0x1d50 mm/memory.c:4148
handle_pte_fault mm/memory.c:6289 [inline]
__handle_mm_fault+0x125f/0x1e50 mm/memory.c:6411
handle_mm_fault+0x31c/0x630 mm/memory.c:6580
do_user_addr_fault+0x239/0xba0 arch/x86/mm/fault.c:1387
handle_page_fault arch/x86/mm/fault.c:1476 [inline]
exc_page_fault+0x64/0xb0 arch/x86/mm/fault.c:1532
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
BUG: memory leak
unreferenced object 0xffff8881294d03c0 (size 64):
comm "syz.0.25", pid 6288, jiffies 4294945820
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 ff 0f 00 00 00 00 00 00 ................
d0 0c 4d 29 81 88 ff ff d0 0c 4d 29 81 88 ff ff ..M)......M)....
backtrace (crc edd2342):
kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
slab_post_alloc_hook mm/slub.c:4953 [inline]
slab_alloc_node mm/slub.c:5258 [inline]
__kmalloc_cache_noprof+0x3b2/0x570 mm/slub.c:5766
kmalloc_noprof include/linux/slab.h:957 [inline]
kzalloc_noprof include/linux/slab.h:1094 [inline]
ulist_prealloc+0x7a/0xd0 fs/btrfs/ulist.c:114
extent_changeset_prealloc fs/btrfs/extent_io.h:213 [inline]
set_extent_bit+0x104/0xc40 fs/btrfs/extent-io-tree.c:1083
btrfs_set_record_extent_bits+0x56/0xa0 fs/btrfs/extent-io-tree.c:1868
qgroup_reserve_data+0x116/0x4d0 fs/btrfs/qgroup.c:4206
btrfs_qgroup_reserve_data+0x9a/0xb0 fs/btrfs/qgroup.c:4257
btrfs_check_data_free_space+0x101/0x200 fs/btrfs/delalloc-space.c:164
btrfs_page_mkwrite+0x180/0xd30 fs/btrfs/file.c:1888
do_page_mkwrite+0x6c/0x100 mm/memory.c:3528
wp_page_shared mm/memory.c:3929 [inline]
do_wp_page+0x4fe/0x1d50 mm/memory.c:4148
handle_pte_fault mm/memory.c:6289 [inline]
__handle_mm_fault+0x125f/0x1e50 mm/memory.c:6411
handle_mm_fault+0x31c/0x630 mm/memory.c:6580
do_user_addr_fault+0x239/0xba0 arch/x86/mm/fault.c:1387
handle_page_fault arch/x86/mm/fault.c:1476 [inline]
exc_page_fault+0x64/0xb0 arch/x86/mm/fault.c:1532
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
BUG: memory leak
unreferenced object 0xffff888108c93600 (size 64):
comm "syz.0.25", pid 6287, jiffies 4294945820
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
10 36 c9 08 81 88 ff ff 10 36 c9 08 81 88 ff ff .6.......6......
backtrace (crc cafc2d90):
kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
slab_post_alloc_hook mm/slub.c:4953 [inline]
slab_alloc_node mm/slub.c:5258 [inline]
__kmalloc_cache_noprof+0x3b2/0x570 mm/slub.c:5766
kmalloc_noprof include/linux/slab.h:957 [inline]
extent_changeset_alloc fs/btrfs/extent_io.h:203 [inline]
qgroup_reserve_data+0x42c/0x4d0 fs/btrfs/qgroup.c:4199
btrfs_qgroup_reserve_data+0x2e/0xb0 fs/btrfs/qgroup.c:4250
btrfs_check_data_free_space+0x101/0x200 fs/btrfs/delalloc-space.c:164
btrfs_page_mkwrite+0x180/0xd30 fs/btrfs/file.c:1888
do_page_mkwrite+0x6c/0x100 mm/memory.c:3528
wp_page_shared mm/memory.c:3929 [inline]
do_wp_page+0x4fe/0x1d50 mm/memory.c:4148
handle_pte_fault mm/memory.c:6289 [inline]
__handle_mm_fault+0x125f/0x1e50 mm/memory.c:6411
handle_mm_fault+0x31c/0x630 mm/memory.c:6580
do_user_addr_fault+0x34f/0xba0 arch/x86/mm/fault.c:1336
handle_page_fault arch/x86/mm/fault.c:1476 [inline]
exc_page_fault+0x64/0xb0 arch/x86/mm/fault.c:1532
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [syzbot] [btrfs?] memory leak in qgroup_reserve_data
2025-12-11 6:23 [syzbot] [btrfs?] memory leak in qgroup_reserve_data syzbot
@ 2025-12-11 11:37 ` Edward Adam Davis
2025-12-11 12:51 ` syzbot
2025-12-12 4:07 ` Forwarded: " syzbot
1 sibling, 1 reply; 5+ messages in thread
From: Edward Adam Davis @ 2025-12-11 11:37 UTC (permalink / raw)
To: syzbot+2f8aa76e6acc9fce6638; +Cc: linux-kernel, syzkaller-bugs
#syz test
diff --git a/fs/btrfs/file.c b/fs/btrfs/file.c
index 7a501e73d880..5811f6a2da48 100644
--- a/fs/btrfs/file.c
+++ b/fs/btrfs/file.c
@@ -1910,6 +1910,9 @@ static vm_fault_t btrfs_page_mkwrite(struct vm_fault *vmf)
if (!only_release_metadata)
btrfs_free_reserved_data_space(inode, data_reserved,
page_start, reserved_space);
+ if (data_reserved)
+ goto out_reserve;
+
goto out_noreserve;
}
@@ -2019,6 +2022,7 @@ static vm_fault_t btrfs_page_mkwrite(struct vm_fault *vmf)
else
btrfs_delalloc_release_space(inode, data_reserved, page_start,
reserved_space, true);
+out_reserve:
extent_changeset_free(data_reserved);
out_noreserve:
if (only_release_metadata)
^ permalink raw reply related [flat|nested] 5+ messages in thread
* Re: [syzbot] [btrfs?] memory leak in qgroup_reserve_data
2025-12-11 11:37 ` Edward Adam Davis
@ 2025-12-11 12:51 ` syzbot
0 siblings, 0 replies; 5+ messages in thread
From: syzbot @ 2025-12-11 12:51 UTC (permalink / raw)
To: eadavis, linux-kernel, syzkaller-bugs
Hello,
syzbot tried to test the proposed patch but the build/boot failed:
SYZFAIL: failed to recv rpc
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0
Warning: Permanently added '10.128.1.217' (ED25519) to the list of known hosts.
2025/12/11 12:50:04 parsed 1 programs
[ 37.403916][ T5811] cgroup: Unknown subsys name 'net'
[ 37.508618][ T5811] cgroup: Unknown subsys name 'cpuset'
[ 37.515164][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 45.595622][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 46.835575][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 46.879171][ T5133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 46.886300][ T5133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 46.898402][ T5133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 46.905908][ T5133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 46.913194][ T5133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 47.260995][ T5860] chnl_net:caif_netlink_parms(): no params data found
[ 47.281855][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[ 47.289221][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[ 47.296326][ T5860] bridge_slave_0: entered allmulticast mode
[ 47.302712][ T5860] bridge_slave_0: entered promiscuous mode
[ 47.309503][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[ 47.316605][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[ 47.323822][ T5860] bridge_slave_1: entered allmulticast mode
[ 47.330120][ T5860] bridge_slave_1: entered promiscuous mode
[ 47.342848][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 47.353036][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 47.366202][ T5860] team0: Port device team_slave_0 added
[ 47.372310][ T5860] team0: Port device team_slave_1 added
[ 47.382477][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 47.389859][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 47.416144][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 47.427570][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 47.434595][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 47.461000][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 47.481658][ T5860] hsr_slave_0: entered promiscuous mode
[ 47.487615][ T5860] hsr_slave_1: entered promiscuous mode
[ 47.517506][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 47.525249][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 47.532900][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 47.540987][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 47.553249][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[ 47.560530][ T5860] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 47.568122][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[ 47.575173][ T5860] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 47.592316][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[ 47.601689][ T58] bridge0: port 1(bridge_slave_0) entered disabled state
[ 47.609495][ T58] bridge0: port 2(bridge_slave_1) entered disabled state
[ 47.618901][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[ 47.627093][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 47.634273][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 47.643403][ T58] bridge0: port 2(bridge_slave_1) entered blocking state
[ 47.650641][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 47.690680][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 47.704885][ T5860] veth0_vlan: entered promiscuous mode
[ 47.712118][ T5860] veth1_vlan: entered promiscuous mode
[ 47.722814][ T5860] veth0_macvtap: entered promiscuous mode
[ 47.729850][ T5860] veth1_macvtap: entered promiscuous mode
[ 47.739453][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 47.748702][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 47.758196][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 47.767254][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 47.776557][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 47.786234][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 47.841159][ T1034] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 47.859488][ T1034] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 47.909405][ T1034] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 47.968913][ T1034] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 48.000939][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 48.010765][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 48.021322][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 48.029314][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/12/11 12:50:16 executed programs: 0
[ 50.840038][ T1034] bridge_slave_1: left allmulticast mode
[ 50.846601][ T1034] bridge_slave_1: left promiscuous mode
[ 50.852256][ T1034] bridge0: port 2(bridge_slave_1) entered disabled state
[ 50.860075][ T1034] bridge_slave_0: left allmulticast mode
[ 50.865706][ T1034] bridge_slave_0: left promiscuous mode
[ 50.871491][ T1034] bridge0: port 1(bridge_slave_0) entered disabled state
[ 50.919030][ T1034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 50.928706][ T1034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 50.937917][ T1034] bond0 (unregistering): Released all slaves
[ 51.019077][ T1034] hsr_slave_0: left promiscuous mode
[ 51.024910][ T1034] hsr_slave_1: left promiscuous mode
[ 51.031138][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 51.038891][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 51.046673][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 51.054623][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 51.063401][ T1034] veth1_macvtap: left promiscuous mode
[ 51.069252][ T1034] veth0_macvtap: left promiscuous mode
[ 51.074835][ T1034] veth1_vlan: left promiscuous mode
[ 51.080516][ T1034] veth0_vlan: left promiscuous mode
[ 51.111321][ T1034] team0 (unregistering): Port device team_slave_1 removed
[ 51.119654][ T1034] team0 (unregistering): Port device team_slave_0 removed
[ 53.595513][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 53.602664][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 53.609917][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 53.617376][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 53.625082][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 53.658839][ T5986] chnl_net:caif_netlink_parms(): no params data found
[ 53.677076][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state
[ 53.684290][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state
[ 53.691756][ T5986] bridge_slave_0: entered allmulticast mode
[ 53.698037][ T5986] bridge_slave_0: entered promiscuous mode
[ 53.704616][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state
[ 53.711841][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state
[ 53.719054][ T5986] bridge_slave_1: entered allmulticast mode
[ 53.725237][ T5986] bridge_slave_1: entered promiscuous mode
[ 53.735598][ T5986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 53.745356][ T5986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 53.759567][ T5986] team0: Port device team_slave_0 added
[ 53.765789][ T5986] team0: Port device team_slave_1 added
[ 53.775976][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 53.783114][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 53.809753][ T5986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 53.821002][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 53.828044][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 53.854377][ T5986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 53.871243][ T5986] hsr_slave_0: entered promiscuous mode
[ 53.877038][ T5986] hsr_slave_1: entered promiscuous mode
[ 54.068255][ T5986] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 54.077708][ T5986] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 54.085441][ T5986] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 54.093888][ T5986] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 54.113170][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.120735][ T5986] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 54.128469][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.135750][ T5986] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 54.157830][ T5986] 8021q: adding VLAN 0 to HW filter on device bond0
[ 54.167464][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 54.175477][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 54.186223][ T5986] 8021q: adding VLAN 0 to HW filter on device team0
[ 54.195056][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.202328][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 54.212042][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.219319][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 54.273088][ T5986] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 54.290440][ T5986] veth0_vlan: entered promiscuous mode
[ 54.299332][ T5986] veth1_vlan: entered promiscuous mode
[ 54.311769][ T5986] veth0_macvtap: entered promiscuous mode
[ 54.319507][ T5986] veth1_macvtap: entered promiscuous mode
[ 54.330377][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 54.340331][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 54.355244][ T1034] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 54.364345][ T1034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 54.373731][ T1034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 54.384097][ T1034] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 54.413748][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
SYZFAIL: failed to recv rpc
[ 54.425026][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 54.436532][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 54.445879][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
fd=3 want=4 recv=0 n=0
syzkaller build log:
go env (err=<nil>)
AR='ar'
CC='gcc'
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_ENABLED='1'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
CXX='g++'
GCCGO='gccgo'
GO111MODULE='auto'
GOAMD64='v1'
GOARCH='amd64'
GOAUTH='netrc'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOCACHEPROG=''
GODEBUG=''
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFIPS140='off'
GOFLAGS=''
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build1096256202=/tmp/go-build -gno-record-gcc-switches'
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs-2/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTELEMETRY='local'
GOTELEMETRYDIR='/syzkaller/.config/go/telemetry'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.24.4'
GOWORK=''
PKG_CONFIG='pkg-config'
git status (err=<nil>)
HEAD detached at d6526ea3e
nothing to commit, working tree clean
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=d6526ea3e6ad9081c902859bbb80f9f840377cb4 -X github.com/google/syzkaller/prog.gitRevisionDate=20251126-113115" ./sys/syz-sysgen | grep -q false || go install -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=d6526ea3e6ad9081c902859bbb80f9f840377cb4 -X github.com/google/syzkaller/prog.gitRevisionDate=20251126-113115" ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
bin/syz-sysgen
touch .descriptions
GOOS=linux GOARCH=amd64 go build -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=d6526ea3e6ad9081c902859bbb80f9f840377cb4 -X github.com/google/syzkaller/prog.gitRevisionDate=20251126-113115" -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
mkdir -p ./bin/linux_amd64
g++ -o ./bin/linux_amd64/syz-executor executor/executor.cc \
-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include -DGOOS_linux=1 -DGOARCH_amd64=1 \
-DHOSTGOOS_linux=1 -DGIT_REVISION=\"d6526ea3e6ad9081c902859bbb80f9f840377cb4\"
/usr/bin/ld: /tmp/ccIdn9ML.o: in function `Connection::Connect(char const*, char const*)':
executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0x104): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
./tools/check-syzos.sh 2>/dev/null
Tested on:
commit: d358e525 Merge tag 'for-6.19/dm-changes' of git://git...
git tree: upstream
kernel config: https://syzkaller.appspot.com/x/.config?x=9a0268003e02068d
dashboard link: https://syzkaller.appspot.com/bug?extid=2f8aa76e6acc9fce6638
compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
patch: https://syzkaller.appspot.com/x/patch.diff?x=1140261a580000
^ permalink raw reply [flat|nested] 5+ messages in thread
* Forwarded: memory leak in qgroup_reserve_data
2025-12-11 6:23 [syzbot] [btrfs?] memory leak in qgroup_reserve_data syzbot
2025-12-11 11:37 ` Edward Adam Davis
@ 2025-12-12 4:07 ` syzbot
1 sibling, 0 replies; 5+ messages in thread
From: syzbot @ 2025-12-12 4:07 UTC (permalink / raw)
To: linux-kernel, syzkaller-bugs
For archival purposes, forwarding an incoming command email to
linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com.
***
Subject: memory leak in qgroup_reserve_data
Author: eraykrdg1@gmail.com
#syz test
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [syzbot] [btrfs?] memory leak in qgroup_reserve_data
[not found] <CAHxJ8O9BEvNxGVYBSsHTEtWe-GdzDuDnVeThoZvZ6i1+esOBMA@mail.gmail.com>
@ 2025-12-12 4:38 ` syzbot
0 siblings, 0 replies; 5+ messages in thread
From: syzbot @ 2025-12-12 4:38 UTC (permalink / raw)
To: eraykrdg1, linux-kernel, syzkaller-bugs
Hello,
syzbot has tested the proposed patch and the reproducer did not trigger any issue:
Reported-by: syzbot+2f8aa76e6acc9fce6638@syzkaller.appspotmail.com
Tested-by: syzbot+2f8aa76e6acc9fce6638@syzkaller.appspotmail.com
Tested on:
commit: d358e525 Merge tag 'for-6.19/dm-changes' of git://git...
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=1185561a580000
kernel config: https://syzkaller.appspot.com/x/.config?x=9a0268003e02068d
dashboard link: https://syzkaller.appspot.com/bug?extid=2f8aa76e6acc9fce6638
compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
patch: https://syzkaller.appspot.com/x/patch.diff?x=14b321b4580000
Note: testing is done by a robot and is best-effort only.
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2025-12-12 4:38 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2025-12-11 6:23 [syzbot] [btrfs?] memory leak in qgroup_reserve_data syzbot
2025-12-11 11:37 ` Edward Adam Davis
2025-12-11 12:51 ` syzbot
2025-12-12 4:07 ` Forwarded: " syzbot
[not found] <CAHxJ8O9BEvNxGVYBSsHTEtWe-GdzDuDnVeThoZvZ6i1+esOBMA@mail.gmail.com>
2025-12-12 4:38 ` [syzbot] [btrfs?] " syzbot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox