From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id E9826C433FE for ; Wed, 9 Mar 2022 23:54:31 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S238353AbiCIXz3 (ORCPT ); Wed, 9 Mar 2022 18:55:29 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:54934 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229586AbiCIXz0 (ORCPT ); Wed, 9 Mar 2022 18:55:26 -0500 Received: from mail-io1-f70.google.com (mail-io1-f70.google.com [209.85.166.70]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 82B1412223D for ; Wed, 9 Mar 2022 15:54:25 -0800 (PST) Received: by mail-io1-f70.google.com with SMTP id w25-20020a6bd619000000b00640ddd0ad11so2768810ioa.2 for ; Wed, 09 Mar 2022 15:54:25 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:date:message-id:subject:from:to; bh=FZKkfb+B9Ye8SW4sgOk+aViFCG1Zd9t6idiFkhiqLKA=; b=g0ov9lk9GvFqoOOXXZPlzI6gKo96E0p6grsJHTU6oldXRvaJFP5/6l86YdAxAXXVtm UwCILfSHxQr20LjYX+Bf4XUt15aMXYrJLWBkhoTf26fEIGVnw2fRBvB4CUK0GLtsotvZ fP0vjrTIRy3+lmr5+YZtVwtMY237hP4XW4S7Q4PCsbbMX874UtUNSM5OVFdog+c+qIWy nnVva6PJA0qjPNwsMIaeNf3X24FPiJbcL6NGPLqWwzJZRff29/b/HmVnrTW7q31vkONA aj+hor2ouL8xFH9ss/TdKIRisVoMbxRK/p8kVEDFrsxCl9jKVEMGFmdRb+jdrTlzv+hP d8mg== X-Gm-Message-State: AOAM531JGIhVORK4rAeH465TJQS7FwmVjx5QSgQiT2E+KACypXGC4+rY 2Mr4RFwF7FYpn/i9oTIbbgEVmkvYC7n4F2VaJc70IAiQtvlw X-Google-Smtp-Source: ABdhPJyVHy/khyyLSyf05JTis72no6NvtkZogjvY6QKKugmN/bv16pOOktXDBrhtnfxHZvR7dvaajtm3yJlsPwJXk3Ttq0pln574 MIME-Version: 1.0 X-Received: by 2002:a92:7513:0:b0:2b9:5b61:e376 with SMTP id q19-20020a927513000000b002b95b61e376mr1558659ilc.193.1646870064861; Wed, 09 Mar 2022 15:54:24 -0800 (PST) Date: Wed, 09 Mar 2022 15:54:24 -0800 X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <000000000000351b8605d9d1d1bf@google.com> Subject: [syzbot] memory leak in usb_get_configuration From: syzbot To: gregkh@linuxfoundation.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, pavel.hofman@ivitera.com, rob@robgreener.com, stern@rowland.harvard.edu, syzkaller-bugs@googlegroups.com Content-Type: text/plain; charset="UTF-8" Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hello, syzbot found the following issue on: HEAD commit: 0014404f9c18 Merge branch 'akpm' (patches from Andrew) git tree: upstream console output: https://syzkaller.appspot.com/x/log.txt?x=15864216700000 kernel config: https://syzkaller.appspot.com/x/.config?x=3f0a704147ec8e32 dashboard link: https://syzkaller.appspot.com/bug?extid=f0fae482604e6d9a87c9 compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13a63dbe700000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10e150a1700000 IMPORTANT: if you fix the issue, please add the following tag to the commit: Reported-by: syzbot+f0fae482604e6d9a87c9@syzkaller.appspotmail.com BUG: memory leak unreferenced object 0xffff88810c0289e0 (size 32): comm "kworker/1:2", pid 139, jiffies 4294947862 (age 15.910s) hex dump (first 32 bytes): 09 02 12 00 01 00 00 00 00 09 04 00 00 00 d0 bb ................ 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 :............... backtrace: [] kmalloc include/linux/slab.h:586 [inline] [] usb_get_configuration+0x1c7/0x1cd0 drivers/usb/core/config.c:919 [] usb_enumerate_device drivers/usb/core/hub.c:2398 [inline] [] usb_new_device+0x1a9/0x2e0 drivers/usb/core/hub.c:2536 [] hub_port_connect drivers/usb/core/hub.c:5358 [inline] [] hub_port_connect_change drivers/usb/core/hub.c:5502 [inline] [] port_event drivers/usb/core/hub.c:5660 [inline] [] hub_event+0x1364/0x21a0 drivers/usb/core/hub.c:5742 [] process_one_work+0x2bf/0x600 kernel/workqueue.c:2307 [] worker_thread+0x59/0x5b0 kernel/workqueue.c:2454 [] kthread+0x125/0x160 kernel/kthread.c:377 [] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 BUG: memory leak unreferenced object 0xffff88810a600f40 (size 64): comm "kworker/1:2", pid 139, jiffies 4294947866 (age 15.870s) hex dump (first 32 bytes): 01 00 00 00 01 00 00 00 09 04 00 00 00 d0 bb 3a ...............: 00 00 00 00 00 00 00 00 f2 89 02 0c 81 88 ff ff ................ backtrace: [] kmalloc include/linux/slab.h:586 [inline] [] kzalloc include/linux/slab.h:714 [inline] [] usb_parse_configuration drivers/usb/core/config.c:772 [inline] [] usb_get_configuration+0x7bd/0x1cd0 drivers/usb/core/config.c:944 [] usb_enumerate_device drivers/usb/core/hub.c:2398 [inline] [] usb_new_device+0x1a9/0x2e0 drivers/usb/core/hub.c:2536 [] hub_port_connect drivers/usb/core/hub.c:5358 [inline] [] hub_port_connect_change drivers/usb/core/hub.c:5502 [inline] [] port_event drivers/usb/core/hub.c:5660 [inline] [] hub_event+0x1364/0x21a0 drivers/usb/core/hub.c:5742 [] process_one_work+0x2bf/0x600 kernel/workqueue.c:2307 [] worker_thread+0x59/0x5b0 kernel/workqueue.c:2454 [] kthread+0x125/0x160 kernel/kthread.c:377 [] ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 --- This report is generated by a bot. It may contain errors. See https://goo.gl/tpsmEJ for more information about syzbot. syzbot engineers can be reached at syzkaller@googlegroups.com. syzbot will keep track of this issue. See: https://goo.gl/tpsmEJ#status for how to communicate with syzbot. syzbot can test patches for this issue, for details see: https://goo.gl/tpsmEJ#testing-patches