memory leak in usb_set_configuration

Status: closed as dup on 2020/12/02 20:32
Subsystems: usb
[Documentation on labels]
Reported-by: syzbot+641bd6ff9b25e6d3aad1@syzkaller.appspotmail.com
First crash: 2093d, last: 2007d
▶ ▼ Duplicate of
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
memory leak in hub_event usb 3 syz, C 7 1994d 2083d
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
memory leak in usb_set_configuration 1 (2) 2020/12/02 20:32
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream memory leak in usb_set_configuration (2) usb 3 syz, C 2 1822d 1931d 20/29 fixed on 2021/11/10 00:50
upstream memory leak in usb_set_configuration (3) usb 3 syz, C 2 1495d 1521d 22/29 fixed on 2023/02/24 13:50

Sample crash report:
BUG: memory leak
unreferenced object 0xffff888103f74400 (size 1024):
  comm "kworker/0:2", pid 3589, jiffies 4294946221 (age 15.460s)
  hex dump (first 32 bytes):
    c8 dd 19 11 81 88 ff ff c8 dd 19 11 81 88 ff ff  ................
    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<000000009863a5de>] kmalloc include/linux/slab.h:552 [inline]
    [<000000009863a5de>] kzalloc include/linux/slab.h:682 [inline]
    [<000000009863a5de>] usb_set_configuration+0x187/0xb90 drivers/usb/core/message.c:1992
    [<000000004e64b4f7>] usb_generic_driver_probe+0x8c/0xc0 drivers/usb/core/generic.c:238
    [<000000000abadf62>] usb_probe_device+0x5c/0x140 drivers/usb/core/driver.c:293
    [<0000000002ad52a5>] really_probe+0x159/0x4a0 drivers/base/dd.c:554
    [<00000000aa336a1d>] driver_probe_device+0x84/0x100 drivers/base/dd.c:740
    [<0000000022c47055>] __device_attach_driver+0xee/0x110 drivers/base/dd.c:846
    [<0000000027ac1f1d>] bus_for_each_drv+0xb7/0x100 drivers/base/bus.c:431
    [<000000005641a818>] __device_attach+0x122/0x250 drivers/base/dd.c:914
    [<00000000b666ffaa>] bus_probe_device+0xc6/0xe0 drivers/base/bus.c:491
    [<0000000015e5ef23>] device_add+0x5be/0xc30 drivers/base/core.c:3109
    [<00000000787d97b8>] usb_new_device.cold+0x16a/0x582 drivers/usb/core/hub.c:2555
    [<000000004d48699c>] hub_port_connect drivers/usb/core/hub.c:5223 [inline]
    [<000000004d48699c>] hub_port_connect_change drivers/usb/core/hub.c:5363 [inline]
    [<000000004d48699c>] port_event drivers/usb/core/hub.c:5509 [inline]
    [<000000004d48699c>] hub_event+0x142e/0x20c0 drivers/usb/core/hub.c:5591
    [<0000000008a72726>] process_one_work+0x2c9/0x600 kernel/workqueue.c:2275
    [<00000000c16d6806>] worker_thread+0x59/0x5d0 kernel/workqueue.c:2421
    [<000000004086a3c5>] kthread+0x178/0x1b0 kernel/kthread.c:292
    [<00000000592e5dac>] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296

BUG: memory leak
unreferenced object 0xffff88810a7e1c00 (size 256):
  comm "kworker/0:2", pid 3589, jiffies 4294946227 (age 15.400s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 08 1c 7e 0a 81 88 ff ff  ..........~.....
    08 1c 7e 0a 81 88 ff ff d0 52 5a 82 ff ff ff ff  ..~......RZ.....
  backtrace:
    [<00000000f49d8356>] kmalloc include/linux/slab.h:552 [inline]
    [<00000000f49d8356>] kzalloc include/linux/slab.h:682 [inline]
    [<00000000f49d8356>] device_private_init drivers/base/core.c:2951 [inline]
    [<00000000f49d8356>] device_add+0x7fa/0xc30 drivers/base/core.c:3001
    [<00000000bc09ad83>] usb_set_configuration+0x9d9/0xb90 drivers/usb/core/message.c:2164
    [<000000004e64b4f7>] usb_generic_driver_probe+0x8c/0xc0 drivers/usb/core/generic.c:238
    [<000000000abadf62>] usb_probe_device+0x5c/0x140 drivers/usb/core/driver.c:293
    [<0000000002ad52a5>] really_probe+0x159/0x4a0 drivers/base/dd.c:554
    [<00000000aa336a1d>] driver_probe_device+0x84/0x100 drivers/base/dd.c:740
    [<0000000022c47055>] __device_attach_driver+0xee/0x110 drivers/base/dd.c:846
    [<0000000027ac1f1d>] bus_for_each_drv+0xb7/0x100 drivers/base/bus.c:431
    [<000000005641a818>] __device_attach+0x122/0x250 drivers/base/dd.c:914
    [<00000000b666ffaa>] bus_probe_device+0xc6/0xe0 drivers/base/bus.c:491
    [<0000000015e5ef23>] device_add+0x5be/0xc30 drivers/base/core.c:3109
    [<00000000787d97b8>] usb_new_device.cold+0x16a/0x582 drivers/usb/core/hub.c:2555
    [<000000004d48699c>] hub_port_connect drivers/usb/core/hub.c:5223 [inline]
    [<000000004d48699c>] hub_port_connect_change drivers/usb/core/hub.c:5363 [inline]
    [<000000004d48699c>] port_event drivers/usb/core/hub.c:5509 [inline]
    [<000000004d48699c>] hub_event+0x142e/0x20c0 drivers/usb/core/hub.c:5591
    [<0000000008a72726>] process_one_work+0x2c9/0x600 kernel/workqueue.c:2275
    [<00000000c16d6806>] worker_thread+0x59/0x5d0 kernel/workqueue.c:2421
    [<000000004086a3c5>] kthread+0x178/0x1b0 kernel/kthread.c:292

Crashes (56):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/02/04 18:39 upstream 61556703b610 42b90a7c .config console log report syz C ci-upstream-gce-leak memory leak in usb_set_configuration
2021/01/04 19:19 upstream e71ba9452f0b 79264ae3 .config console log report syz C ci-upstream-gce-leak
2020/12/14 21:32 upstream 2c85ebc57b3e 97183ed7 .config console log report syz C ci-upstream-gce-leak
2020/12/14 18:52 upstream 2c85ebc57b3e 97183ed7 .config console log report syz C ci-upstream-gce-leak
2020/12/13 22:24 upstream 6bff9bb8a292 b22a7ec3 .config console log report syz C ci-upstream-gce-leak
2020/12/13 19:17 upstream 6bff9bb8a292 bca53db9 .config console log report syz C ci-upstream-gce-leak
2020/12/12 00:48 upstream 33dc9614dc20 ba24ffcd .config console log report syz C ci-upstream-gce-leak
2020/12/11 15:30 upstream 33dc9614dc20 ba24ffcd .config console log report syz C ci-upstream-gce-leak
2020/12/11 09:01 upstream 33dc9614dc20 f900b48c .config console log report syz C ci-upstream-gce-leak
2020/12/09 21:35 upstream a68a0262abda c090b4da .config console log report syz C ci-upstream-gce-leak
2020/12/09 13:33 upstream 7d8761ba27fc 40cc414d .config console log report syz C ci-upstream-gce-leak
2020/12/09 10:56 upstream 7d8761ba27fc 40cc414d .config console log report syz C ci-upstream-gce-leak
2020/12/09 06:11 upstream 7d8761ba27fc 40cc414d .config console log report syz C ci-upstream-gce-leak
2020/12/09 01:45 upstream 7d8761ba27fc a7f7f4a4 .config console log report syz C ci-upstream-gce-leak
2020/12/08 21:16 upstream cd796ed33450 a7f7f4a4 .config console log report syz C ci-upstream-gce-leak
2020/12/08 07:45 upstream cd796ed33450 51a9082e .config console log report syz C ci-upstream-gce-leak
2020/12/07 16:46 upstream 0477e9288185 1190297f .config console log report syz C ci-upstream-gce-leak
2020/12/06 08:56 upstream 33256ce19411 f12ba0c5 .config console log report syz C ci-upstream-gce-leak
2020/12/06 08:35 upstream 33256ce19411 f12ba0c5 .config console log report syz C ci-upstream-gce-leak
2020/12/05 14:31 upstream b3298500b23f 50503117 .config console log report syz C ci-upstream-gce-leak
2020/12/05 04:03 upstream e87297fa080a 20366b87 .config console log report syz C ci-upstream-gce-leak
2020/12/03 13:05 upstream 34816d20f173 e6b0d314 .config console log report syz C ci-upstream-gce-leak
2020/12/03 04:12 upstream 3bb61aa61828 8c9190ef .config console log report syz C ci-upstream-gce-leak
2020/12/02 21:13 upstream 509a15421674 8c9190ef .config console log report syz C ci-upstream-gce-leak
2020/12/01 03:08 upstream b65054597872 b3a34598 .config console log report syz C ci-upstream-gce-leak
2020/11/30 23:57 upstream b65054597872 78d50c1d .config console log report syz C ci-upstream-gce-leak
2020/11/29 22:05 upstream aae5ab854e38 a0092f9d .config console log report syz C ci-upstream-gce-leak
2020/11/29 04:10 upstream 45e885c439e8 a0092f9d .config console log report syz C ci-upstream-gce-leak
2020/11/29 03:39 upstream 45e885c439e8 a0092f9d .config console log report syz C ci-upstream-gce-leak
2020/11/26 19:26 upstream fa02fcd94b0c 1d2b823e .config console log report syz C ci-upstream-gce-leak
2020/11/26 03:33 upstream fa02fcd94b0c 2f1cec62 .config console log report syz C ci-upstream-gce-leak
2020/11/24 17:30 upstream d5beb3140f91 1ab681a4 .config console log report syz C ci-upstream-gce-leak
2020/11/24 06:25 upstream d5beb3140f91 1ab681a4 .config console log report syz C ci-upstream-gce-leak
2020/11/23 22:35 upstream 418baf2c28f3 878fb17a .config console log report syz C ci-upstream-gce-leak
2020/11/23 00:53 upstream a349e4c65960 0d27f508 .config console log report syz C ci-upstream-gce-leak
2020/11/23 00:32 upstream a349e4c65960 0d27f508 .config console log report syz C ci-upstream-gce-leak
2020/11/21 21:03 upstream 27bba9c532a8 68068804 .config console log report syz C ci-upstream-gce-leak
2020/11/21 09:15 upstream 27bba9c532a8 68068804 .config console log report syz C ci-upstream-gce-leak
2020/11/20 21:57 upstream 4d02da974ea8 740ff461 .config console log report syz C ci-upstream-gce-leak
2020/11/20 12:26 upstream 4d02da974ea8 0767f13f .config console log report syz C ci-upstream-gce-leak
2020/11/19 22:54 upstream 3494d58865ad 0767f13f .config console log report syz C ci-upstream-gce-leak
2020/11/19 05:21 upstream c2e7554e1b85 0767f13f .config console log report syz C ci-upstream-gce-leak
2020/11/18 19:01 upstream 0fa8ee0d9ab9 09323409 .config console log report syz C ci-upstream-gce-leak
2020/11/18 15:04 upstream 0fa8ee0d9ab9 09323409 .config console log report syz C ci-upstream-gce-leak
2020/11/17 22:52 upstream 111e91a6df50 bd2a760b .config console log report syz C ci-upstream-gce-leak
2020/11/17 16:16 upstream 9c87c9f41245 bd2a760b .config console log report syz C ci-upstream-gce-leak
2020/11/16 00:11 upstream 0062442ecfef 1bf9a662 .config console log report syz C ci-upstream-gce-leak
2020/11/15 01:50 upstream e28c0d7c92c8 1bf9a662 .config console log report syz C ci-upstream-gce-leak
2020/11/15 00:48 upstream e28c0d7c92c8 1bf9a662 .config console log report syz C ci-upstream-gce-leak
2020/11/14 23:30 upstream e28c0d7c92c8 1bf9a662 .config console log report syz C ci-upstream-gce-leak
2020/11/13 21:02 upstream 585e5b17b92d e1140d25 .config console log report syz C ci-upstream-gce-leak
2020/11/13 19:45 upstream 585e5b17b92d e1140d25 .config console log report syz C ci-upstream-gce-leak
2020/11/13 06:09 upstream af5043c89a8e 16fca0c8 .config console log report syz C ci-upstream-gce-leak
2020/11/12 14:48 upstream 3d5e28bff7ad 77a55c8e .config console log report syz C ci-upstream-gce-leak
2020/11/11 19:06 upstream eccc87672492 cca87986 .config console log report syz C ci-upstream-gce-leak
2020/11/10 04:01 upstream 407ab579637c 64069d48 .config console log report syz C ci-upstream-gce-leak
* Struck through repros no longer work on HEAD.