syzbot


memory leak in usb_get_configuration

Status: auto-obsoleted due to no activity on 2023/12/02 12:57
Subsystems: usb
[Documentation on labels]
Reported-by: syzbot+f0fae482604e6d9a87c9@syzkaller.appspotmail.com
First crash: 836d, last: 299d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] memory leak in usb_get_configuration 8 (12) 2022/03/12 16:02
Last patch testing requests (16)
Created Duration User Patch Repo Result
2023/11/02 14:43 20m retest repro upstream OK log
2023/11/02 14:43 22m retest repro upstream OK log
2023/11/02 14:43 15m retest repro upstream OK log
2023/11/02 11:02 23m retest repro upstream OK log
2023/11/02 11:02 1h21m retest repro upstream OK log
2023/08/24 08:15 29m retest repro upstream report log
2023/08/24 08:15 2h35m retest repro upstream report log
2023/08/24 08:15 2h48m retest repro upstream report log
2023/08/24 08:15 1h21m retest repro upstream report log
2023/08/24 08:15 14m retest repro upstream report log
2022/08/26 14:57 7m mail@karthek.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master report log
2022/08/25 02:00 9m mudongliangabcd@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git -- report log
2022/08/24 16:37 8m mail@karthek.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master report log
2022/08/24 12:40 8m mail@karthek.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master report log
2022/03/11 21:01 7m stern@rowland.harvard.edu patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/ 0014404f9c18 report log
2022/03/10 09:51 14m oneukum@suse.com patch git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 0014404f9c18 error OK

Sample crash report:
BUG: memory leak
unreferenced object 0xffff88810b5f20c0 (size 32):
  comm "kworker/1:3", pid 4731, jiffies 4294943329 (age 22.160s)
  hex dump (first 32 bytes):
    09 02 12 00 01 00 00 00 00 09 04 00 00 00 18 bb  ................
    26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  &...............
  backtrace:
    [<ffffffff8154621a>] __do_kmalloc_node mm/slab_common.c:965 [inline]
    [<ffffffff8154621a>] __kmalloc+0x4a/0x120 mm/slab_common.c:979
    [<ffffffff831f9819>] kmalloc include/linux/slab.h:563 [inline]
    [<ffffffff831f9819>] usb_get_configuration+0x209/0x2880 drivers/usb/core/config.c:919
    [<ffffffff831e4be8>] usb_enumerate_device drivers/usb/core/hub.c:2407 [inline]
    [<ffffffff831e4be8>] usb_new_device+0x4d8/0x870 drivers/usb/core/hub.c:2545
    [<ffffffff831e7fa5>] hub_port_connect drivers/usb/core/hub.c:5407 [inline]
    [<ffffffff831e7fa5>] hub_port_connect_change drivers/usb/core/hub.c:5551 [inline]
    [<ffffffff831e7fa5>] port_event drivers/usb/core/hub.c:5711 [inline]
    [<ffffffff831e7fa5>] hub_event+0x1875/0x25e0 drivers/usb/core/hub.c:5793
    [<ffffffff812afd6a>] process_one_work+0x2ba/0x650 kernel/workqueue.c:2405
    [<ffffffff812b06ed>] worker_thread+0x5d/0x5c0 kernel/workqueue.c:2552
    [<ffffffff812ba8b3>] kthread+0x133/0x180 kernel/kthread.c:379
    [<ffffffff810031cf>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

BUG: memory leak
unreferenced object 0xffff88810a5ccd00 (size 64):
  comm "kworker/1:3", pid 4731, jiffies 4294943333 (age 22.120s)
  hex dump (first 32 bytes):
    01 00 00 00 01 00 00 00 09 04 00 00 00 18 bb 26  ...............&
    00 00 00 00 00 00 00 00 d2 20 5f 0b 81 88 ff ff  ......... _.....
  backtrace:
    [<ffffffff8154621a>] __do_kmalloc_node mm/slab_common.c:965 [inline]
    [<ffffffff8154621a>] __kmalloc+0x4a/0x120 mm/slab_common.c:979
    [<ffffffff831f9eef>] kmalloc include/linux/slab.h:563 [inline]
    [<ffffffff831f9eef>] kzalloc include/linux/slab.h:680 [inline]
    [<ffffffff831f9eef>] usb_parse_configuration drivers/usb/core/config.c:772 [inline]
    [<ffffffff831f9eef>] usb_get_configuration+0x8df/0x2880 drivers/usb/core/config.c:944
    [<ffffffff831e4be8>] usb_enumerate_device drivers/usb/core/hub.c:2407 [inline]
    [<ffffffff831e4be8>] usb_new_device+0x4d8/0x870 drivers/usb/core/hub.c:2545
    [<ffffffff831e7fa5>] hub_port_connect drivers/usb/core/hub.c:5407 [inline]
    [<ffffffff831e7fa5>] hub_port_connect_change drivers/usb/core/hub.c:5551 [inline]
    [<ffffffff831e7fa5>] port_event drivers/usb/core/hub.c:5711 [inline]
    [<ffffffff831e7fa5>] hub_event+0x1875/0x25e0 drivers/usb/core/hub.c:5793
    [<ffffffff812afd6a>] process_one_work+0x2ba/0x650 kernel/workqueue.c:2405
    [<ffffffff812b06ed>] worker_thread+0x5d/0x5c0 kernel/workqueue.c:2552
    [<ffffffff812ba8b3>] kthread+0x133/0x180 kernel/kthread.c:379
    [<ffffffff810031cf>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

BUG: memory leak
unreferenced object 0xffff88810b5f2080 (size 32):
  comm "kworker/1:3", pid 4731, jiffies 4294944012 (age 15.330s)
  hex dump (first 32 bytes):
    09 02 12 00 01 00 00 00 00 09 04 00 00 00 18 bb  ................
    26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  &...............
  backtrace:
    [<ffffffff8154621a>] __do_kmalloc_node mm/slab_common.c:965 [inline]
    [<ffffffff8154621a>] __kmalloc+0x4a/0x120 mm/slab_common.c:979
    [<ffffffff831f9819>] kmalloc include/linux/slab.h:563 [inline]
    [<ffffffff831f9819>] usb_get_configuration+0x209/0x2880 drivers/usb/core/config.c:919
    [<ffffffff831e4be8>] usb_enumerate_device drivers/usb/core/hub.c:2407 [inline]
    [<ffffffff831e4be8>] usb_new_device+0x4d8/0x870 drivers/usb/core/hub.c:2545
    [<ffffffff831e7fa5>] hub_port_connect drivers/usb/core/hub.c:5407 [inline]
    [<ffffffff831e7fa5>] hub_port_connect_change drivers/usb/core/hub.c:5551 [inline]
    [<ffffffff831e7fa5>] port_event drivers/usb/core/hub.c:5711 [inline]
    [<ffffffff831e7fa5>] hub_event+0x1875/0x25e0 drivers/usb/core/hub.c:5793
    [<ffffffff812afd6a>] process_one_work+0x2ba/0x650 kernel/workqueue.c:2405
    [<ffffffff812b06ed>] worker_thread+0x5d/0x5c0 kernel/workqueue.c:2552
    [<ffffffff812ba8b3>] kthread+0x133/0x180 kernel/kthread.c:379
    [<ffffffff810031cf>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

BUG: memory leak
unreferenced object 0xffff88810a5ccd40 (size 64):
  comm "kworker/1:3", pid 4731, jiffies 4294944016 (age 15.290s)
  hex dump (first 32 bytes):
    01 00 00 00 01 00 00 00 09 04 00 00 00 18 bb 26  ...............&
    00 00 00 00 00 00 00 00 92 20 5f 0b 81 88 ff ff  ......... _.....
  backtrace:
    [<ffffffff8154621a>] __do_kmalloc_node mm/slab_common.c:965 [inline]
    [<ffffffff8154621a>] __kmalloc+0x4a/0x120 mm/slab_common.c:979
    [<ffffffff831f9eef>] kmalloc include/linux/slab.h:563 [inline]
    [<ffffffff831f9eef>] kzalloc include/linux/slab.h:680 [inline]
    [<ffffffff831f9eef>] usb_parse_configuration drivers/usb/core/config.c:772 [inline]
    [<ffffffff831f9eef>] usb_get_configuration+0x8df/0x2880 drivers/usb/core/config.c:944
    [<ffffffff831e4be8>] usb_enumerate_device drivers/usb/core/hub.c:2407 [inline]
    [<ffffffff831e4be8>] usb_new_device+0x4d8/0x870 drivers/usb/core/hub.c:2545
    [<ffffffff831e7fa5>] hub_port_connect drivers/usb/core/hub.c:5407 [inline]
    [<ffffffff831e7fa5>] hub_port_connect_change drivers/usb/core/hub.c:5551 [inline]
    [<ffffffff831e7fa5>] port_event drivers/usb/core/hub.c:5711 [inline]
    [<ffffffff831e7fa5>] hub_event+0x1875/0x25e0 drivers/usb/core/hub.c:5793
    [<ffffffff812afd6a>] process_one_work+0x2ba/0x650 kernel/workqueue.c:2405
    [<ffffffff812b06ed>] worker_thread+0x5d/0x5c0 kernel/workqueue.c:2552
    [<ffffffff812ba8b3>] kthread+0x133/0x180 kernel/kthread.c:379
    [<ffffffff810031cf>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

BUG: memory leak
unreferenced object 0xffff88810a5cc0c0 (size 64):
  comm "kworker/1:3", pid 4731, jiffies 4294944896 (age 6.490s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    ff ff ff ff 00 00 00 00 00 00 00 00 30 30 00 00  ............00..
  backtrace:
    [<ffffffff81545b34>] kmalloc_trace+0x24/0x90 mm/slab_common.c:1057
    [<ffffffff84643560>] kmalloc include/linux/slab.h:559 [inline]
    [<ffffffff84643560>] kzalloc include/linux/slab.h:680 [inline]
    [<ffffffff84643560>] regulatory_hint_core net/wireless/reg.c:3213 [inline]
    [<ffffffff84643560>] restore_regulatory_settings+0x6a0/0x940 net/wireless/reg.c:3547
    [<ffffffff846439d1>] crda_timeout_work+0x21/0x30 net/wireless/reg.c:540
    [<ffffffff812afd6a>] process_one_work+0x2ba/0x650 kernel/workqueue.c:2405
    [<ffffffff812b06ed>] worker_thread+0x5d/0x5c0 kernel/workqueue.c:2552
    [<ffffffff812ba8b3>] kthread+0x133/0x180 kernel/kthread.c:379
    [<ffffffff810031cf>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308


Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/06/14 03:13 upstream fb054096aea0 d2ee9228 .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in usb_get_configuration
2022/08/04 22:39 upstream b44f2fd87919 1c9013ac .config console log report syz C ci-upstream-gce-leak memory leak in usb_get_configuration
2022/03/05 23:45 upstream 0014404f9c18 7bdd8b2c .config console log report syz C ci-upstream-gce-leak memory leak in usb_get_configuration
2023/06/28 08:40 upstream e8f75c0270d9 4cd5bb25 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in usb_get_configuration
2023/06/26 12:40 upstream 6995e2de6891 09ffe269 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-gce-leak memory leak in usb_get_configuration
* Struck through repros no longer work on HEAD.