From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-qt1-f179.google.com (mail-qt1-f179.google.com [209.85.160.179]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 3FD75197A6C for ; Sun, 13 Jul 2025 19:19:39 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.160.179 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1752434381; cv=none; b=rLiHGR0vpLytBhozA/LX1Gqfopf7EHsPTrQ/ck3wlaL/jYunv7/EEB65y4gJ7mH8yU46DVikF8Zmz9OiMdBEDmUI2WZJkFpSTwky8LVRnGUI3HWdglPWiKPXVvwb1s/KifIX0jxym2HFgL9jDlrRGBDX+jQsutf2GcZF5AKKMAY= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1752434381; c=relaxed/simple; bh=Dz9Nrd23/h+D0OAbLCheONZQH5JNDDp+EBXaUGM7iPo=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=nKCyz3hcsF2O8pfUUvBvImNkFk6s5gjSunfhYEgre5yG5907dIpMT3mpjo7FvfK6P4YVNE/IvPNOJzKtrjOwkwx8eoU42T9IO9jrq2+xL4Mm/KcI6vhNF15NLj6e8Ha9xrasJK41XBr+XiKtVOV4XuayP2TAP8jlzWOhIYEaEpc= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=rowland.harvard.edu; spf=fail smtp.mailfrom=g.harvard.edu; dkim=pass (2048-bit key) header.d=rowland.harvard.edu header.i=@rowland.harvard.edu header.b=uN0ieuy3; arc=none smtp.client-ip=209.85.160.179 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=rowland.harvard.edu Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=g.harvard.edu Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=rowland.harvard.edu header.i=@rowland.harvard.edu header.b="uN0ieuy3" Received: by mail-qt1-f179.google.com with SMTP id d75a77b69052e-4a5840ec53dso40153381cf.0 for ; Sun, 13 Jul 2025 12:19:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rowland.harvard.edu; s=google; t=1752434378; x=1753039178; darn=vger.kernel.org; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=u7N66BOOoEFjiJc1Bb7wi8qfy7ECChKd31KVqGQ2Gcg=; b=uN0ieuy3wyhiVmtQf7gAfhcNv/eCpTEw1XnQv5FPJ5fP6zhwKB2A6wxwU7FBvr+SGU e7Bq73cYqP1zDOl2uy4n9J8Z8DlAe+D2FNPZhX+VZWpm8J6KSjwLrXWMNT1oCekADqa/ KOMbMqggClx/tq+eBKv+e4GoMdNzbQxwj30bcA7mW3k30JJAh2Sa8IsIkxe8Nq2H7Qsz MgvrPXtKKx1VJNqE9cn7FkLtYDBzGA8C/u0FSm2HLx8S6OwHXG0YR1Ebhj7kgUnlzPIy 7G7add9U5GuDx8GlQEplpxXTqrulwd8R/M2qc99y2TzyzOaHYg5WX1szi0/29Kk1YEbT 6//Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752434378; x=1753039178; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=u7N66BOOoEFjiJc1Bb7wi8qfy7ECChKd31KVqGQ2Gcg=; b=cNQVRttfNUN9pnO3eGn3usOBIlJjtNmPRZ2No+LMhEOKCLe2gs/6oAJaVZj/Idv3i7 9jDYfP7qFJWZBZMYyMTw2pRFyG62Q2eXJEuzk/3czs1CLbZs2WuFy2doimx6NDA9HL/Y FGCialtjEuK2ZZG/ajD3Jb/75seDcBjUWDbMt2TFsi7iCJsdVN9YlZMPw1WpYkUi3hJ3 +yHLcDmB4Ku5bIJup3dEICoNrlJAdCAKILDuv3crBrz7ck/35nBCgOuj6ygiV8+i6KOX RhuPJUK46ZY7iTubMvoMb3fI9NAjLS2rr5R6sXNKkB4lT/yWPT1xgJqeoICsMmkLvMGG 8pfA== X-Forwarded-Encrypted: i=1; AJvYcCWM3B8y/0yuLlF5kdFk985EhAYxzY3lUXr4Bb71yIeDewxBM1L7cbMJOIMGwYskJ7OQs9AkX+6fVRc=@vger.kernel.org X-Gm-Message-State: AOJu0Ywgdk0sWm+aOYmsyI4P3g0rXyIaUzQxXLK3wu9vOVGMxHEgzkWr kYfroVOBs1yuwHi6l4D16uLZ9P1cEkcRlxFd2WXI/hSIpbTDiUsecSNeYJlBEBPS1w== X-Gm-Gg: ASbGnctFetY89uSJ8yotusdwAFRONC00VLlcvRp04xQGPYPl32X0UyPctpfNWdRhOyT 8MX8bUU+jZaan5izTf7U2MwUJpWS8xoCfBcQEgI2UpYBBGB/FSgJfQo7QLf2cn5zorbREcKlr5W pFJkbQpiBFxY4sdTBvstYwHCwt7Nic1MjM3asa3etvM44wVk0NRuN6hm4OfzY8BH/rXdnVd9ExB 8Ny4r7NWDbJq3M5aB04qvjLlTQ5uN0JW2LXB48tVzAOioTQg8DSLvcmkpvjtwI4G+f2haW383Uj vNSR9P/O6gvr7pmnGsBe/KakGw2F7tjuLqX8nW67n8s/AAC7uckhwCcgBJQYFEz04i1cDJxHSU/ /GzwSNueE1aI91kmL3KXjzsyLzIxZ6IIqwg== X-Google-Smtp-Source: AGHT+IFeL5zqsclbGt53P8JJz5Oakl/FajGBFk6cyyrPaSa+ENBtKY8kgiVfmKrtS0TZL+eVfwKdOw== X-Received: by 2002:ac8:5912:0:b0:4ab:6eef:315b with SMTP id d75a77b69052e-4ab6eef3840mr9139271cf.23.1752434378071; Sun, 13 Jul 2025 12:19:38 -0700 (PDT) Received: from rowland.harvard.edu ([2601:19b:681:fd10::401d]) by smtp.gmail.com with ESMTPSA id d75a77b69052e-4ab04d910desm27368091cf.9.2025.07.13.12.19.36 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 13 Jul 2025 12:19:37 -0700 (PDT) Date: Sun, 13 Jul 2025 15:19:34 -0400 From: Alan Stern To: syzbot Cc: gregkh@linuxfoundation.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: Re: [syzbot] [usb?] KMSAN: kernel-usb-infoleak in usbhid_raw_request Message-ID: References: <68653bfd.a00a0220.270cb1.0000.GAE@google.com> <6873a1fd.a70a0220.3b380f.002f.GAE@google.com> Precedence: bulk X-Mailing-List: linux-usb@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <6873a1fd.a70a0220.3b380f.002f.GAE@google.com> On Sun, Jul 13, 2025 at 05:09:33AM -0700, syzbot wrote: > syzbot has found a reproducer for the following issue on: > > HEAD commit: 3f31a806a62e Merge tag 'mm-hotfixes-stable-2025-07-11-16-1.. > git tree: upstream > console output: https://syzkaller.appspot.com/x/log.txt?x=14725d82580000 > kernel config: https://syzkaller.appspot.com/x/.config?x=76c2fb9aa0954fb8 > dashboard link: https://syzkaller.appspot.com/bug?extid=fbe9fff1374eefadffb9 > compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=118f50f0580000 > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=12725d82580000 > > Downloadable assets: > disk image: https://storage.googleapis.com/syzbot-assets/33ae17bacfc2/disk-3f31a806.raw.xz > vmlinux: https://storage.googleapis.com/syzbot-assets/f476e6d9400a/vmlinux-3f31a806.xz > kernel image: https://storage.googleapis.com/syzbot-assets/9ae9e3684ea3/bzImage-3f31a806.xz > > IMPORTANT: if you fix the issue, please add the following tag to the commit: > Reported-by: syzbot+fbe9fff1374eefadffb9@syzkaller.appspotmail.com > > microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 > microsoft 0003:045E:07DA.0001: ignoring exceeding usage max > ===================================================== > BUG: KMSAN: kernel-usb-infoleak in usb_submit_urb+0x5a1/0x2630 drivers/usb/core/urb.c:430 > usb_submit_urb+0x5a1/0x2630 drivers/usb/core/urb.c:430 > usb_start_wait_urb+0xc2/0x320 drivers/usb/core/message.c:59 > usb_internal_control_msg drivers/usb/core/message.c:103 [inline] > usb_control_msg+0x27c/0x5b0 drivers/usb/core/message.c:154 > usbhid_raw_request+0x4ab/0x690 drivers/hid/usbhid/hid-core.c:-1 > __hid_request+0x2bd/0x500 drivers/hid/hid-core.c:1989 > hidinput_change_resolution_multipliers drivers/hid/hid-input.c:1950 [inline] Try again, but with Benjamin Tissoires's recent patches. #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/hid c2ca42f190b6 Alan Stern