syzbot

 sign-in | mailing list | source | docs
🐞 Open [960] 🐞 Fixed [3811] 🐞 Invalid [8185] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes

memory leak in ath9k_hif_usb_firmware_cb
Status: upstream: reported C repro on 2020/11/10 18:25
Reported-by: syzbot+6692c72009680f7c4eb2@syzkaller.appspotmail.com
First crash: 564d, last: 12h10m
Patch testing requests:
Created Duration User Patch Repo Result
2021/07/09 05:45 15m mudongliangabcd@gmail.com patch upstream error
2021/04/27 06:23 16m dvyukov@google.com patch git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 4a0225c3 OK
2021/04/27 05:38 7m dvyukov@google.com patch git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 4a0225c3 error
2021/04/27 04:50 7m atulgopinathan@gmail.com patch upstream error
2021/04/27 04:46 7m atulgopinathan@gmail.com patch upstream error

Sample crash report:
BUG: memory leak
unreferenced object 0xffff88810d1e20c0 (size 192):
  comm "kworker/0:1", pid 35, jiffies 4294945703 (age 14.820s)
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 d8 20 1e 0d 81 88 ff ff  ......... ......
  backtrace:
    [<ffffffff82d649c5>] kmalloc include/linux/slab.h:605 [inline]
    [<ffffffff82d649c5>] usb_alloc_urb+0xa5/0xb0 drivers/usb/core/urb.c:74
    [<ffffffff82b86ac8>] ath9k_hif_usb_alloc_tx_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:835 [inline]
    [<ffffffff82b86ac8>] ath9k_hif_usb_alloc_urbs+0x148/0x650 drivers/net/wireless/ath/ath9k/hif_usb.c:1014
    [<ffffffff82b87058>] ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1108 [inline]
    [<ffffffff82b87058>] ath9k_hif_usb_firmware_cb+0x88/0x1f0 drivers/net/wireless/ath/ath9k/hif_usb.c:1241
    [<ffffffff827926c7>] request_firmware_work_func+0x47/0x90 drivers/base/firmware_loader/main.c:1039
    [<ffffffff81270fef>] process_one_work+0x2bf/0x600 kernel/workqueue.c:2289
    [<ffffffff81271919>] worker_thread+0x59/0x5b0 kernel/workqueue.c:2436
    [<ffffffff8127b555>] kthread+0x125/0x160 kernel/kthread.c:376
    [<ffffffff8100222f>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302

BUG: memory leak
unreferenced object 0xffff88810d1e2180 (size 192):
  comm "kworker/0:1", pid 35, jiffies 4294945703 (age 14.820s)
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 98 21 1e 0d 81 88 ff ff  .........!......
  backtrace:
    [<ffffffff82d649c5>] kmalloc include/linux/slab.h:605 [inline]
    [<ffffffff82d649c5>] usb_alloc_urb+0xa5/0xb0 drivers/usb/core/urb.c:74
    [<ffffffff82b86ac8>] ath9k_hif_usb_alloc_tx_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:835 [inline]
    [<ffffffff82b86ac8>] ath9k_hif_usb_alloc_urbs+0x148/0x650 drivers/net/wireless/ath/ath9k/hif_usb.c:1014
    [<ffffffff82b87058>] ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1108 [inline]
    [<ffffffff82b87058>] ath9k_hif_usb_firmware_cb+0x88/0x1f0 drivers/net/wireless/ath/ath9k/hif_usb.c:1241
    [<ffffffff827926c7>] request_firmware_work_func+0x47/0x90 drivers/base/firmware_loader/main.c:1039
    [<ffffffff81270fef>] process_one_work+0x2bf/0x600 kernel/workqueue.c:2289
    [<ffffffff81271919>] worker_thread+0x59/0x5b0 kernel/workqueue.c:2436
    [<ffffffff8127b555>] kthread+0x125/0x160 kernel/kthread.c:376
    [<ffffffff8100222f>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302

BUG: memory leak
unreferenced object 0xffff88810d1e2240 (size 192):
  comm "kworker/0:1", pid 35, jiffies 4294945703 (age 14.820s)
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 58 22 1e 0d 81 88 ff ff  ........X"......
  backtrace:
    [<ffffffff82d649c5>] kmalloc include/linux/slab.h:605 [inline]
    [<ffffffff82d649c5>] usb_alloc_urb+0xa5/0xb0 drivers/usb/core/urb.c:74
    [<ffffffff82b86ac8>] ath9k_hif_usb_alloc_tx_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:835 [inline]
    [<ffffffff82b86ac8>] ath9k_hif_usb_alloc_urbs+0x148/0x650 drivers/net/wireless/ath/ath9k/hif_usb.c:1014
    [<ffffffff82b87058>] ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1108 [inline]
    [<ffffffff82b87058>] ath9k_hif_usb_firmware_cb+0x88/0x1f0 drivers/net/wireless/ath/ath9k/hif_usb.c:1241
    [<ffffffff827926c7>] request_firmware_work_func+0x47/0x90 drivers/base/firmware_loader/main.c:1039
    [<ffffffff81270fef>] process_one_work+0x2bf/0x600 kernel/workqueue.c:2289
    [<ffffffff81271919>] worker_thread+0x59/0x5b0 kernel/workqueue.c:2436
    [<ffffffff8127b555>] kthread+0x125/0x160 kernel/kthread.c:376
    [<ffffffff8100222f>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302

BUG: memory leak
unreferenced object 0xffff88810d1e2300 (size 192):
  comm "kworker/0:1", pid 35, jiffies 4294945703 (age 14.820s)
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 18 23 1e 0d 81 88 ff ff  .........#......
  backtrace:
    [<ffffffff82d649c5>] kmalloc include/linux/slab.h:605 [inline]
    [<ffffffff82d649c5>] usb_alloc_urb+0xa5/0xb0 drivers/usb/core/urb.c:74
    [<ffffffff82b86ac8>] ath9k_hif_usb_alloc_tx_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:835 [inline]
    [<ffffffff82b86ac8>] ath9k_hif_usb_alloc_urbs+0x148/0x650 drivers/net/wireless/ath/ath9k/hif_usb.c:1014
    [<ffffffff82b87058>] ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1108 [inline]
    [<ffffffff82b87058>] ath9k_hif_usb_firmware_cb+0x88/0x1f0 drivers/net/wireless/ath/ath9k/hif_usb.c:1241
    [<ffffffff827926c7>] request_firmware_work_func+0x47/0x90 drivers/base/firmware_loader/main.c:1039
    [<ffffffff81270fef>] process_one_work+0x2bf/0x600 kernel/workqueue.c:2289
    [<ffffffff81271919>] worker_thread+0x59/0x5b0 kernel/workqueue.c:2436
    [<ffffffff8127b555>] kthread+0x125/0x160 kernel/kthread.c:376
    [<ffffffff8100222f>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302

BUG: memory leak
unreferenced object 0xffff88810d1e26c0 (size 192):
  comm "kworker/0:1", pid 35, jiffies 4294945703 (age 14.820s)
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 d8 26 1e 0d 81 88 ff ff  .........&......
  backtrace:
    [<ffffffff82d649c5>] kmalloc include/linux/slab.h:605 [inline]
    [<ffffffff82d649c5>] usb_alloc_urb+0xa5/0xb0 drivers/usb/core/urb.c:74
    [<ffffffff82b86ac8>] ath9k_hif_usb_alloc_tx_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:835 [inline]
    [<ffffffff82b86ac8>] ath9k_hif_usb_alloc_urbs+0x148/0x650 drivers/net/wireless/ath/ath9k/hif_usb.c:1014
    [<ffffffff82b87058>] ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1108 [inline]
    [<ffffffff82b87058>] ath9k_hif_usb_firmware_cb+0x88/0x1f0 drivers/net/wireless/ath/ath9k/hif_usb.c:1241
    [<ffffffff827926c7>] request_firmware_work_func+0x47/0x90 drivers/base/firmware_loader/main.c:1039
    [<ffffffff81270fef>] process_one_work+0x2bf/0x600 kernel/workqueue.c:2289
    [<ffffffff81271919>] worker_thread+0x59/0x5b0 kernel/workqueue.c:2436
    [<ffffffff8127b555>] kthread+0x125/0x160 kernel/kthread.c:376
    [<ffffffff8100222f>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302

Crashes (1326):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-gce-leak 2022/05/27 23:06 upstream 8291eaafed36 a46af346 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/27 10:51 upstream 7e284070abe5 116e7a7b .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/27 04:43 upstream babf0bb978e3 3037caa9 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/27 04:20 upstream babf0bb978e3 3037caa9 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/26 06:41 upstream 7e062cda7d90 3037caa9 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/25 18:32 upstream fdaf9a5840ac 647c0e27 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/25 03:48 upstream aa051d36ce4a 647c0e27 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/24 03:26 upstream 1e57930e9f40 e7f9308d .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/21 17:14 upstream 3b5e1590a267 7268fa62 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/21 09:50 upstream 3b5e1590a267 7268fa62 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/19 18:54 upstream f993aed406ea 50c53f39 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/19 17:46 upstream f993aed406ea 50c53f39 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/18 20:59 upstream ef1302160bfb 50c53f39 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/18 05:28 upstream 210e04ff7681 744a39e2 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/18 04:01 upstream 210e04ff7681 744a39e2 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/16 08:35 upstream 42226c989789 744a39e2 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/15 17:33 upstream bc403203d65a 744a39e2 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/15 00:29 upstream 2fe1020d73ca 744a39e2 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/14 11:30 upstream ec7f49619d8e 744a39e2 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/14 10:57 upstream ec7f49619d8e 744a39e2 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/13 22:02 upstream f3f19f939c11 107f6434 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/13 05:34 upstream 0ac824f379fb 9ad6612a .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/11 22:48 upstream feb9c5e19e91 beb0b407 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/11 18:52 upstream feb9c5e19e91 beb0b407 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/11 02:30 upstream feb9c5e19e91 8d7b3b67 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/10 15:49 upstream 9be9ed2612b5 8b277b8e .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/10 03:02 upstream 9be9ed2612b5 8b277b8e .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/04/28 09:27 upstream 8f4dd16603ce 8a1f1f07 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/04/27 04:46 upstream cf424ef014ac 1fa34c1b .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/04/25 15:36 upstream af2d861d4cd2 c889aef9 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/04/24 20:29 upstream 22da5264abf4 131df97d .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2021/07/08 21:51 upstream 3dbdb38e2869 1b20171a .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2021/04/27 02:52 upstream 9f4ad9e425a1 805b5003 .config log report syz C memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2021/01/11 08:37 upstream 0653161f0fac 2c1f2513 .config log report syz C
ci-upstream-gce-leak 2020/11/10 11:22 upstream 407ab579637c cca87986 .config log report syz C
ci-upstream-gce-leak 2020/11/09 19:06 upstream f8394f232b1e 64069d48 .config log report syz C
ci-upstream-gce-leak 2022/05/22 18:02 upstream eaea45fc0e7b 7268fa62 .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/22 16:50 upstream eaea45fc0e7b 7268fa62 .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/21 15:03 upstream 3b5e1590a267 7268fa62 .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/21 08:23 upstream 3b5e1590a267 7268fa62 .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/20 03:43 upstream b015dcd62b86 cb1ac2e7 .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/17 21:07 upstream 42226c989789 744a39e2 .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/16 01:08 upstream bc403203d65a 744a39e2 .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/15 10:10 upstream 2fe1020d73ca 744a39e2 .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/15 02:47 upstream 2fe1020d73ca 744a39e2 .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/14 18:47 upstream ec7f49619d8e 744a39e2 .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/05/14 17:39 upstream ec7f49619d8e 744a39e2 .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/04/28 04:02 upstream 8f4dd16603ce 8a1f1f07 .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/04/27 19:26 upstream 46cf2c613f4b 1fa34c1b .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/04/27 03:34 upstream cf424ef014ac 1fa34c1b .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/04/25 12:11 upstream af2d861d4cd2 c889aef9 .config log report syz memory leak in ath9k_hif_usb_firmware_cb
ci-upstream-gce-leak 2022/04/24 22:19 upstream 22da5264abf4 131df97d .config log report syz memory leak in ath9k_hif_usb_firmware_cb