memory leak in dvb_create_media_graph

Status: fixed on 2021/11/10 00:50
Subsystems: usb media
[Documentation on labels]
Reported-by: syzbot+7f09440acc069a0d38ac@syzkaller.appspotmail.com
Fix commit: bf9a40ae8d72 media: dvbdev: Fix memory leak in dvb_media_device_free()
First crash: 2083d, last: 1923d
▶ ▼ Discussions (9)
Title Replies (including bot) Last reply
[PATCH 4.19 000/425] 4.19.191-rc1 review 438 (438) 2021/06/24 10:04
[PATCH 5.4 000/184] 5.4.118-rc1 review 201 (201) 2021/06/18 09:41
[PATCH 5.10 000/299] 5.10.36-rc1 review 323 (323) 2021/05/28 16:59
[PATCH 4.9 000/240] 4.9.269-rc1 review 245 (245) 2021/05/21 16:52
[PATCH 4.14 000/323] 4.14.233-rc1 review 326 (326) 2021/05/21 05:55
[PATCH 5.11 000/342] 5.11.20-rc1 review 354 (354) 2021/05/12 06:38
[PATCH 5.12 000/384] 5.12.3-rc1 review 395 (395) 2021/05/11 21:07
[PATCH] media: dvbdev: Fix memory leak in dvb_media_device_free() 1 (1) 2020/12/11 08:30
memory leak in dvb_create_media_graph 0 (1) 2020/11/11 13:55
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2020/12/10 17:29 14m yepeilin.cs@gmail.com patch upstream report log

Sample crash report:
BUG: memory leak
unreferenced object 0xffff88810bc31f80 (size 128):
  comm "kworker/0:2", pid 3062, jiffies 4294943019 (age 13.320s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 06 05 00 00 00 00 00 00  ................
    00 01 00 00 00 00 ad de 22 01 00 00 00 00 ad de  ........".......
  backtrace:
    [<ffffffff82ece371>] kmalloc include/linux/slab.h:554 [inline]
    [<ffffffff82ece371>] kzalloc include/linux/slab.h:684 [inline]
    [<ffffffff82ece371>] dvb_create_media_graph+0x301/0x7d0 drivers/media/dvb-core/dvbdev.c:665
    [<ffffffff82f26400>] dvb_usb_adapter_frontend_init+0x180/0x1b0 drivers/media/usb/dvb-usb/dvb-usb-dvb.c:327
    [<ffffffff84231d10>] dvb_usb_adapter_init drivers/media/usb/dvb-usb/dvb-usb-init.c:84 [inline]
    [<ffffffff84231d10>] dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:173 [inline]
    [<ffffffff84231d10>] dvb_usb_device_init.cold+0x4d0/0x6ae drivers/media/usb/dvb-usb/dvb-usb-init.c:287
    [<ffffffff82f291aa>] gp8psk_usb_probe+0x2a/0x50 drivers/media/usb/dvb-usb/gp8psk.c:304
    [<ffffffff82ba9637>] usb_probe_interface+0x177/0x370 drivers/usb/core/driver.c:396
    [<ffffffff825f6b79>] really_probe+0x159/0x4a0 drivers/base/dd.c:559
    [<ffffffff825f6f44>] driver_probe_device+0x84/0x100 drivers/base/dd.c:745
    [<ffffffff825f765e>] __device_attach_driver+0xee/0x110 drivers/base/dd.c:851
    [<ffffffff825f3ac7>] bus_for_each_drv+0xb7/0x100 drivers/base/bus.c:431
    [<ffffffff825f71f2>] __device_attach+0x122/0x250 drivers/base/dd.c:919
    [<ffffffff825f5766>] bus_probe_device+0xc6/0xe0 drivers/base/bus.c:491
    [<ffffffff825f1cb5>] device_add+0x5d5/0xc40 drivers/base/core.c:3242
    [<ffffffff82ba6bd9>] usb_set_configuration+0x9d9/0xb90 drivers/usb/core/message.c:2164
    [<ffffffff82bb703c>] usb_generic_driver_probe+0x8c/0xc0 drivers/usb/core/generic.c:238
    [<ffffffff82ba8d9c>] usb_probe_device+0x5c/0x140 drivers/usb/core/driver.c:293
    [<ffffffff825f6b79>] really_probe+0x159/0x4a0 drivers/base/dd.c:559

BUG: memory leak
unreferenced object 0xffff88810da2fc00 (size 128):
  comm "kworker/0:2", pid 3062, jiffies 4294943631 (age 7.200s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 06 05 00 00 00 00 00 00  ................
    00 01 00 00 00 00 ad de 22 01 00 00 00 00 ad de  ........".......
  backtrace:
    [<ffffffff82ece371>] kmalloc include/linux/slab.h:554 [inline]
    [<ffffffff82ece371>] kzalloc include/linux/slab.h:684 [inline]
    [<ffffffff82ece371>] dvb_create_media_graph+0x301/0x7d0 drivers/media/dvb-core/dvbdev.c:665
    [<ffffffff82f26400>] dvb_usb_adapter_frontend_init+0x180/0x1b0 drivers/media/usb/dvb-usb/dvb-usb-dvb.c:327
    [<ffffffff84231d10>] dvb_usb_adapter_init drivers/media/usb/dvb-usb/dvb-usb-init.c:84 [inline]
    [<ffffffff84231d10>] dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:173 [inline]
    [<ffffffff84231d10>] dvb_usb_device_init.cold+0x4d0/0x6ae drivers/media/usb/dvb-usb/dvb-usb-init.c:287
    [<ffffffff82f291aa>] gp8psk_usb_probe+0x2a/0x50 drivers/media/usb/dvb-usb/gp8psk.c:304
    [<ffffffff82ba9637>] usb_probe_interface+0x177/0x370 drivers/usb/core/driver.c:396
    [<ffffffff825f6b79>] really_probe+0x159/0x4a0 drivers/base/dd.c:559
    [<ffffffff825f6f44>] driver_probe_device+0x84/0x100 drivers/base/dd.c:745
    [<ffffffff825f765e>] __device_attach_driver+0xee/0x110 drivers/base/dd.c:851
    [<ffffffff825f3ac7>] bus_for_each_drv+0xb7/0x100 drivers/base/bus.c:431
    [<ffffffff825f71f2>] __device_attach+0x122/0x250 drivers/base/dd.c:919
    [<ffffffff825f5766>] bus_probe_device+0xc6/0xe0 drivers/base/bus.c:491
    [<ffffffff825f1cb5>] device_add+0x5d5/0xc40 drivers/base/core.c:3242
    [<ffffffff82ba6bd9>] usb_set_configuration+0x9d9/0xb90 drivers/usb/core/message.c:2164
    [<ffffffff82bb703c>] usb_generic_driver_probe+0x8c/0xc0 drivers/usb/core/generic.c:238
    [<ffffffff82ba8d9c>] usb_probe_device+0x5c/0x140 drivers/usb/core/driver.c:293
    [<ffffffff825f6b79>] really_probe+0x159/0x4a0 drivers/base/dd.c:559

Crashes (26):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/04/18 07:35 upstream 194cf4825638 7e2b734b .config console log report syz C ci-upstream-gce-leak memory leak in dvb_create_media_graph
2021/03/17 04:26 upstream 1df27313f50a fdb2bb2c .config console log report syz C ci-upstream-gce-leak memory leak in dvb_create_media_graph
2021/02/18 09:22 upstream f40ddce88593 14052202 .config console log report syz C ci-upstream-gce-leak memory leak in dvb_create_media_graph
2021/02/17 14:12 upstream f40ddce88593 052f8d9f .config console log report syz C ci-upstream-gce-leak memory leak in dvb_create_media_graph
2021/02/15 08:29 upstream f40ddce88593 98682e5e .config console log report syz C ci-upstream-gce-leak memory leak in dvb_create_media_graph
2021/02/14 22:10 upstream 358feceebbf6 98682e5e .config console log report syz C ci-upstream-gce-leak memory leak in dvb_create_media_graph
2021/02/13 11:32 upstream c6d8570e4d64 98682e5e .config console log report syz C ci-upstream-gce-leak memory leak in dvb_create_media_graph
2021/02/13 00:51 upstream dcc0b49040c7 98682e5e .config console log report syz C ci-upstream-gce-leak memory leak in dvb_create_media_graph
2021/02/11 14:27 upstream 291009f656e8 a52ee10a .config console log report syz C ci-upstream-gce-leak memory leak in dvb_create_media_graph
2021/01/29 05:24 upstream e5ff2cb9cf67 7df34f59 .config console log report syz C ci-upstream-gce-leak memory leak in dvb_create_media_graph
2021/01/11 11:32 upstream 0653161f0fac 2c1f2513 .config console log report syz C ci-upstream-gce-leak
2021/01/07 13:36 upstream 71c061d24438 c104d4a3 .config console log report syz C ci-upstream-gce-leak
2021/01/05 20:32 upstream 36bbbd0e234d a0234d98 .config console log report syz C ci-upstream-gce-leak
2020/12/21 19:14 upstream e37b12e4bb21 04201c06 .config console log report syz C ci-upstream-gce-leak
2020/12/20 18:22 upstream 467f8165a2b0 04201c06 .config console log report syz C ci-upstream-gce-leak
2020/12/19 18:56 upstream 3644e2d2dda7 04201c06 .config console log report syz C ci-upstream-gce-leak
2020/12/19 18:34 upstream 3644e2d2dda7 04201c06 .config console log report syz C ci-upstream-gce-leak
2020/11/27 00:58 upstream 4df910620beb 1d2b823e .config console log report syz C ci-upstream-gce-leak
2020/11/25 01:40 upstream 80145ac2f739 e34b696c .config console log report syz C ci-upstream-gce-leak
2020/11/15 23:17 upstream 0062442ecfef 1bf9a662 .config console log report syz C ci-upstream-gce-leak
2020/11/10 11:55 upstream 407ab579637c cca87986 .config console log report syz C ci-upstream-gce-leak
2020/11/09 14:23 upstream f8394f232b1e 64069d48 .config console log report syz C ci-upstream-gce-leak
2020/11/09 14:01 upstream f8394f232b1e 64069d48 .config console log report syz C ci-upstream-gce-leak
2021/04/13 09:24 upstream 89698becf06d bfeda1b1 .config console log report syz ci-upstream-gce-leak memory leak in dvb_create_media_graph
2021/04/01 23:36 upstream ffd9fb546d49 6a81331a .config console log report syz ci-upstream-gce-leak memory leak in dvb_create_media_graph
2021/04/01 22:29 upstream ffd9fb546d49 6a81331a .config console log report syz ci-upstream-gce-leak memory leak in dvb_create_media_graph
* Struck through repros no longer work on HEAD.