syzbot


memory leak in hci_conn_add

Status: auto-obsoleted due to no activity on 2022/09/23 12:04
Subsystems: bluetooth
[Documentation on labels]
Reported-by: syzbot+52b86f9cc3cda3b318e0@syzkaller.appspotmail.com
First crash: 1320d, last: 1320d
Discussions (1)
Title Replies (including bot) Last reply
memory leak in hci_conn_add 0 (1) 2020/08/07 07:16
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream memory leak in hci_conn_add (2) bluetooth C 65 140d 198d 0/26 auto-obsoleted due to no activity on 2024/01/09 18:17
Last patch testing requests (2)
Created Duration User Patch Repo Result
2022/09/23 09:30 13m retest repro upstream OK log
2021/05/28 00:55 13m mudongliangabcd@gmail.com upstream OK

Sample crash report:
2020/08/07 02:25:22 executed programs: 153
BUG: memory leak
unreferenced object 0xffff88811aef9800 (size 2048):
  comm "syz-executor.0", pid 7170, jiffies 4295036619 (age 51.850s)
  hex dump (first 32 bytes):
    00 40 3d 15 81 88 ff ff 22 01 00 00 00 00 ad de  .@=.....".......
    00 00 00 00 11 aa aa aa aa aa 00 aa aa aa aa aa  ................
  backtrace:
    [<00000000d9c20f00>] kmalloc include/linux/slab.h:555 [inline]
    [<00000000d9c20f00>] kzalloc include/linux/slab.h:669 [inline]
    [<00000000d9c20f00>] hci_conn_add+0x2e/0x4a0 net/bluetooth/hci_conn.c:525
    [<0000000035c3df04>] hci_connect_acl net/bluetooth/hci_conn.c:1252 [inline]
    [<0000000035c3df04>] hci_connect_acl+0x154/0x170 net/bluetooth/hci_conn.c:1237
    [<0000000084224e06>] l2cap_chan_connect+0x2bb/0xbb0 net/bluetooth/l2cap_core.c:7900
    [<000000008efaf6d0>] bt_6lowpan_connect net/bluetooth/6lowpan.c:932 [inline]
    [<000000008efaf6d0>] lowpan_control_write+0x2fb/0x380 net/bluetooth/6lowpan.c:1166
    [<00000000d92efe51>] full_proxy_write+0x61/0x90 fs/debugfs/file.c:234
    [<000000007171039b>] vfs_write+0xfa/0x250 fs/read_write.c:576
    [<000000006150b244>] ksys_write+0x72/0x120 fs/read_write.c:631
    [<00000000c631a395>] do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
    [<00000000f2b9f07c>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88811c49f200 (size 512):
  comm "syz-executor.0", pid 7170, jiffies 4295036619 (age 51.850s)
  hex dump (first 32 bytes):
    00 98 ef 1a 81 88 ff ff c0 9a 3e 15 81 88 ff ff  ..........>.....
    fd 03 00 00 00 00 00 00 00 06 00 00 00 00 00 00  ................
  backtrace:
    [<000000003ade7b37>] kmalloc include/linux/slab.h:555 [inline]
    [<000000003ade7b37>] kzalloc include/linux/slab.h:669 [inline]
    [<000000003ade7b37>] l2cap_conn_add.part.0+0x3b/0x300 net/bluetooth/l2cap_core.c:7702
    [<00000000c0f3ada8>] l2cap_conn_add net/bluetooth/l2cap_core.c:7888 [inline]
    [<00000000c0f3ada8>] l2cap_chan_connect+0x742/0xbb0 net/bluetooth/l2cap_core.c:7909
    [<000000008efaf6d0>] bt_6lowpan_connect net/bluetooth/6lowpan.c:932 [inline]
    [<000000008efaf6d0>] lowpan_control_write+0x2fb/0x380 net/bluetooth/6lowpan.c:1166
    [<00000000d92efe51>] full_proxy_write+0x61/0x90 fs/debugfs/file.c:234
    [<000000007171039b>] vfs_write+0xfa/0x250 fs/read_write.c:576
    [<000000006150b244>] ksys_write+0x72/0x120 fs/read_write.c:631
    [<00000000c631a395>] do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
    [<00000000f2b9f07c>] entry_SYSCALL_64_after_hwframe+0x44/0xa9


Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/07 02:36 upstream 47ec5303d73e 1f122f88 .config console log report syz ci-upstream-gce-leak
* Struck through repros no longer work on HEAD.