syzbot

 sign-in | mailing list | source | docs
🐞 Open [968] 🐞 Fixed [4037] 🐞 Invalid [9002] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes

memory leak in ath9k_hif_usb_firmware_cb

Status: upstream: reported C repro on 2020/11/10 18:25
Reported-by: syzbot+6692c72009680f7c4eb2@syzkaller.appspotmail.com
First crash: 696d, last: 7h24m
Patch testing requests:
Created Duration User Patch Repo Result
2021/07/09 05:45 15m mudongliangabcd@gmail.com patch upstream error
2021/04/27 06:23 16m dvyukov@google.com patch git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 4a0225c3 OK
2021/04/27 05:38 7m dvyukov@google.com patch git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 4a0225c3 error
2021/04/27 04:50 7m atulgopinathan@gmail.com patch upstream error
2021/04/27 04:46 7m atulgopinathan@gmail.com patch upstream error

Sample crash report:
BUG: memory leak
unreferenced object 0xffff888111eb2f00 (size 192):
  comm "kworker/1:2", pid 140, jiffies 4294946129 (age 14.930s)
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 18 2f eb 11 81 88 ff ff  ........./......
  backtrace:
    [<ffffffff82d94965>] kmalloc include/linux/slab.h:605 [inline]
    [<ffffffff82d94965>] usb_alloc_urb+0xa5/0xb0 drivers/usb/core/urb.c:74
    [<ffffffff82bb31b8>] ath9k_hif_usb_alloc_tx_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:835 [inline]
    [<ffffffff82bb31b8>] ath9k_hif_usb_alloc_urbs+0x148/0x650 drivers/net/wireless/ath/ath9k/hif_usb.c:1014
    [<ffffffff82bb3748>] ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1108 [inline]
    [<ffffffff82bb3748>] ath9k_hif_usb_firmware_cb+0x88/0x1f0 drivers/net/wireless/ath/ath9k/hif_usb.c:1241
    [<ffffffff827b71a7>] request_firmware_work_func+0x47/0x90 drivers/base/firmware_loader/main.c:1107
    [<ffffffff812726aa>] process_one_work+0x2ba/0x5f0 kernel/workqueue.c:2289
    [<ffffffff81272fc9>] worker_thread+0x59/0x5b0 kernel/workqueue.c:2436
    [<ffffffff8127ca45>] kthread+0x125/0x160 kernel/kthread.c:376
    [<ffffffff8100224f>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306

BUG: memory leak
unreferenced object 0xffff888111eb2e40 (size 192):
  comm "kworker/1:2", pid 140, jiffies 4294946129 (age 14.930s)
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 58 2e eb 11 81 88 ff ff  ........X.......
  backtrace:
    [<ffffffff82d94965>] kmalloc include/linux/slab.h:605 [inline]
    [<ffffffff82d94965>] usb_alloc_urb+0xa5/0xb0 drivers/usb/core/urb.c:74
    [<ffffffff82bb31b8>] ath9k_hif_usb_alloc_tx_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:835 [inline]
    [<ffffffff82bb31b8>] ath9k_hif_usb_alloc_urbs+0x148/0x650 drivers/net/wireless/ath/ath9k/hif_usb.c:1014
    [<ffffffff82bb3748>] ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1108 [inline]
    [<ffffffff82bb3748>] ath9k_hif_usb_firmware_cb+0x88/0x1f0 drivers/net/wireless/ath/ath9k/hif_usb.c:1241
    [<ffffffff827b71a7>] request_firmware_work_func+0x47/0x90 drivers/base/firmware_loader/main.c:1107
    [<ffffffff812726aa>] process_one_work+0x2ba/0x5f0 kernel/workqueue.c:2289
    [<ffffffff81272fc9>] worker_thread+0x59/0x5b0 kernel/workqueue.c:2436
    [<ffffffff8127ca45>] kthread+0x125/0x160 kernel/kthread.c:376
    [<ffffffff8100224f>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306

BUG: memory leak
unreferenced object 0xffff888111eb2d80 (size 192):
  comm "kworker/1:2", pid 140, jiffies 4294946129 (age 14.930s)
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 98 2d eb 11 81 88 ff ff  .........-......
  backtrace:
    [<ffffffff82d94965>] kmalloc include/linux/slab.h:605 [inline]
    [<ffffffff82d94965>] usb_alloc_urb+0xa5/0xb0 drivers/usb/core/urb.c:74
    [<ffffffff82bb31b8>] ath9k_hif_usb_alloc_tx_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:835 [inline]
    [<ffffffff82bb31b8>] ath9k_hif_usb_alloc_urbs+0x148/0x650 drivers/net/wireless/ath/ath9k/hif_usb.c:1014
    [<ffffffff82bb3748>] ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1108 [inline]
    [<ffffffff82bb3748>] ath9k_hif_usb_firmware_cb+0x88/0x1f0 drivers/net/wireless/ath/ath9k/hif_usb.c:1241
    [<ffffffff827b71a7>] request_firmware_work_func+0x47/0x90 drivers/base/firmware_loader/main.c:1107
    [<ffffffff812726aa>] process_one_work+0x2ba/0x5f0 kernel/workqueue.c:2289
    [<ffffffff81272fc9>] worker_thread+0x59/0x5b0 kernel/workqueue.c:2436
    [<ffffffff8127ca45>] kthread+0x125/0x160 kernel/kthread.c:376
    [<ffffffff8100224f>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306

BUG: memory leak
unreferenced object 0xffff888111eb2cc0 (size 192):
  comm "kworker/1:2", pid 140, jiffies 4294946129 (age 14.930s)
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 d8 2c eb 11 81 88 ff ff  .........,......
  backtrace:
    [<ffffffff82d94965>] kmalloc include/linux/slab.h:605 [inline]
    [<ffffffff82d94965>] usb_alloc_urb+0xa5/0xb0 drivers/usb/core/urb.c:74
    [<ffffffff82bb31b8>] ath9k_hif_usb_alloc_tx_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:835 [inline]
    [<ffffffff82bb31b8>] ath9k_hif_usb_alloc_urbs+0x148/0x650 drivers/net/wireless/ath/ath9k/hif_usb.c:1014
    [<ffffffff82bb3748>] ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1108 [inline]
    [<ffffffff82bb3748>] ath9k_hif_usb_firmware_cb+0x88/0x1f0 drivers/net/wireless/ath/ath9k/hif_usb.c:1241
    [<ffffffff827b71a7>] request_firmware_work_func+0x47/0x90 drivers/base/firmware_loader/main.c:1107
    [<ffffffff812726aa>] process_one_work+0x2ba/0x5f0 kernel/workqueue.c:2289
    [<ffffffff81272fc9>] worker_thread+0x59/0x5b0 kernel/workqueue.c:2436
    [<ffffffff8127ca45>] kthread+0x125/0x160 kernel/kthread.c:376
    [<ffffffff8100224f>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306

BUG: memory leak
unreferenced object 0xffff888111eb2c00 (size 192):
  comm "kworker/1:2", pid 140, jiffies 4294946129 (age 14.930s)
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 18 2c eb 11 81 88 ff ff  .........,......
  backtrace:
    [<ffffffff82d94965>] kmalloc include/linux/slab.h:605 [inline]
    [<ffffffff82d94965>] usb_alloc_urb+0xa5/0xb0 drivers/usb/core/urb.c:74
    [<ffffffff82bb31b8>] ath9k_hif_usb_alloc_tx_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:835 [inline]
    [<ffffffff82bb31b8>] ath9k_hif_usb_alloc_urbs+0x148/0x650 drivers/net/wireless/ath/ath9k/hif_usb.c:1014
    [<ffffffff82bb3748>] ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1108 [inline]
    [<ffffffff82bb3748>] ath9k_hif_usb_firmware_cb+0x88/0x1f0 drivers/net/wireless/ath/ath9k/hif_usb.c:1241
    [<ffffffff827b71a7>] request_firmware_work_func+0x47/0x90 drivers/base/firmware_loader/main.c:1107
    [<ffffffff812726aa>] process_one_work+0x2ba/0x5f0 kernel/workqueue.c:2289
    [<ffffffff81272fc9>] worker_thread+0x59/0x5b0 kernel/workqueue.c:2436
    [<ffffffff8127ca45>] kthread+0x125/0x160 kernel/kthread.c:376
    [<ffffffff8100224f>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306

Crashes (1512):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-gce-leak 2022/10/06 16:51 upstream 833477fce7a1 131b38ac .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/10/06 14:58 upstream 833477fce7a1 131b38ac .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/10/06 07:00 upstream 833477fce7a1 2c6543ad .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/10/06 06:35 upstream 833477fce7a1 2c6543ad .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/10/05 18:42 upstream 2bca25eaeba6 267e3bb1 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/10/04 19:47 upstream a5088ee7251e eab8f949 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/10/02 07:58 upstream b357fd1c2afc feb56351 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/10/01 11:21 upstream ffb4d94b4314 feb56351 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/30 02:02 upstream 987a926c1d8a 1d385642 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/28 10:15 upstream 46452d3786a8 75c78242 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/27 06:12 upstream 3800a713b607 10323ddf .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/26 12:06 upstream f76349cf4145 d59ba983 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/26 11:18 upstream f76349cf4145 d59ba983 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/26 11:00 upstream f76349cf4145 d59ba983 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/22 20:49 upstream dc164f4fb00a 0042f2b4 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/22 08:59 upstream 06f7db949993 60af5050 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/19 12:41 upstream 521a547ced64 dd9a85ff .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/19 01:20 upstream 38eddeedbbea dd9a85ff .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/17 16:34 upstream a335366bad13 dd9a85ff .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/15 21:00 upstream 3245cb65fd91 dd9a85ff .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/14 10:09 upstream d1221cea11fc b884348d .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/14 05:00 upstream d1221cea11fc b884348d .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/12 20:27 upstream 80e78fcce86d f371ed7e .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/12 15:57 upstream 80e78fcce86d 356d8217 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/11 08:45 upstream b96fbd602d35 356d8217 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/11 06:38 upstream b96fbd602d35 356d8217 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/11 04:27 upstream b96fbd602d35 356d8217 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/10 14:01 upstream ce888220d5c7 356d8217 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/10 10:20 upstream ce888220d5c7 356d8217 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/08 22:27 upstream 26b1224903b3 f3027468 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/04 12:11 upstream 65eea2c060ae 28811d0a .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/01 11:05 upstream c5e4d5e99162 b01ec571 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/01 07:49 upstream c5e4d5e99162 b01ec571 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/08/27 20:30 upstream e022620b5d05 07177916 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/08/26 22:30 upstream 3e5c673f0d75 e5a303f1 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2021/07/08 21:51 upstream 3dbdb38e2869 1b20171a .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2021/04/27 02:52 upstream 9f4ad9e425a1 805b5003 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2021/01/11 08:37 upstream 0653161f0fac 2c1f2513 .config log report syz C
ci-upstream-gce-leak 2020/11/10 11:22 upstream 407ab579637c cca87986 .config log report syz C
ci-upstream-gce-leak 2020/11/09 19:06 upstream f8394f232b1e 64069d48 .config log report syz C
ci-upstream-gce-leak 2022/09/02 08:34 upstream 42e66b1cc3a0 a805568e .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/02 05:43 upstream 42e66b1cc3a0 a805568e .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/09/01 00:56 upstream c5e4d5e99162 51e54e30 .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/08/30 08:54 upstream dcf8e5633e2e 5b44472d .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/08/29 10:32 upstream 8379c0b31fbc 07177916 .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/08/29 08:02 upstream 8379c0b31fbc 07177916 .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/08/28 06:46 upstream 10d4879f9ef0 07177916 .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/08/27 21:11 upstream e022620b5d05 07177916 .config log report syz memory leak in ath9k_hif_usb_firmware_cb
* Struck through repros no longer work on HEAD.