From nobody Fri Jun 19 20:17:33 2026 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id 65A9BC433F5 for ; Wed, 30 Mar 2022 01:57:17 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S241763AbiC3B66 (ORCPT ); Tue, 29 Mar 2022 21:58:58 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:59498 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S241753AbiC3B64 (ORCPT ); Tue, 29 Mar 2022 21:58:56 -0400 Received: from mga18.intel.com (mga18.intel.com [134.134.136.126]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id F1097181790; Tue, 29 Mar 2022 18:57:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1648605432; x=1680141432; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=iuMmXF0bNQe1Xj+DzX6bzAAwgBj+1eidK1z/nORUGrA=; b=GZ4fiCL0WvyER+3VCo95o/Ac9uXSMa2ntu+Fx8lrYPh5BnfWrKT8yZx4 Gbilh/MiwOUHB4xOFiF6jtYVYLZ/6xWF3sJAJ7Fb3HuLSiU8SoyxN42KC P6tN427vQKKOhWKQs7s7CDyyme972AE0OPBcVC31S+Xmm46hopuMqLljD qtfU1eMDSAuwevty1anCA731L6peR1BwyNDtwBdylocBh5QTWsYcF+Ni3 NumwgrxKeAibxlV9J31VfvdAWfEDN8iGK0Qe/86Vx50nO4ZDxkF9G5OOd vftPka8n47aDwwZ45w01NWbNliQCJ+wA7u16SPxvET1utT4PyAXp5a/3k g==; X-IronPort-AV: E=McAfee;i="6200,9189,10301"; a="241579993" X-IronPort-AV: E=Sophos;i="5.90,221,1643702400"; d="scan'208";a="241579993" Received: from orsmga007.jf.intel.com ([10.7.209.58]) by orsmga106.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 29 Mar 2022 18:57:11 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.90,221,1643702400"; d="scan'208";a="546653111" Received: from orsmsx601.amr.corp.intel.com ([10.22.229.14]) by orsmga007.jf.intel.com with ESMTP; 29 Mar 2022 18:57:11 -0700 Received: from orsmsx610.amr.corp.intel.com (10.22.229.23) by ORSMSX601.amr.corp.intel.com (10.22.229.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2308.27; Tue, 29 Mar 2022 18:57:11 -0700 Received: from orsmsx611.amr.corp.intel.com (10.22.229.24) by ORSMSX610.amr.corp.intel.com (10.22.229.23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2308.27; Tue, 29 Mar 2022 18:57:10 -0700 Received: from ORSEDG601.ED.cps.intel.com (10.7.248.6) by orsmsx611.amr.corp.intel.com (10.22.229.24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2308.27 via Frontend Transport; Tue, 29 Mar 2022 18:57:10 -0700 Received: from NAM10-BN7-obe.outbound.protection.outlook.com (104.47.70.107) by edgegateway.intel.com (134.134.137.102) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2308.21; Tue, 29 Mar 2022 18:57:10 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=fHDWGhfScYCWuF3CWkMmUtTx9H5bhIJBKtgAx8sFLF00obyxX6H5Gp1s0HIfqnrHc/D0Mpxcm5sJY5UoMiaHRuIz50GVHzUv+H39xKaTbM4UojhwvJSjsE7iV5jZcI+83NPT73+OCv9A3tsudd+CErFaIPES5Kj05mlleqtC/Gjj/4qe4DL2AslEQJmegJOwevdEZhRayPfl+3/CIMT5h9o9/kWwXP6Hp3kiOLKPkX2ogo87Qscas5jQ2H2GazFN90e7oc2pw+Usw2vh6zue08RVlr/Kqmg1KERBbz7yQ+U9Rf+Fdys6A+ePs1Jif1waW2azHKGwbznLlqGsWEpWhA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=iuMmXF0bNQe1Xj+DzX6bzAAwgBj+1eidK1z/nORUGrA=; b=ZlJ4Xtt1y6JVb+GAeRsAzlcw76BPvsTRYnL0zxzrlob+XBKM/TzVBuamLbh8DbeLozaOEAaAKK0doU9liYl/t2YKYvCBQT1X7W/iRVTgAXk6QX4GafQifE6YJP2m2NpIfHQ33T1euvl07FyICo1roR29AKGgqVVtc0uxGvQEU2yEmnFVpiz9+xoeyoAXGVyG06U/di6sbwkSucUJ+fPkK6RBxVfSj4wYLwq3OTZckIYUd977NHhVg7u75dg5j59ihMDFzhMbLVVNPs5xqGxvvuodeaal4/Fg5996oORrzDQeeiT1zGUZCINfuisMFH8Ct0+EW5N/dllw6QzoRAZNiA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none Received: from PH0PR11MB5880.namprd11.prod.outlook.com (2603:10b6:510:143::14) by BL0PR11MB3268.namprd11.prod.outlook.com (2603:10b6:208:67::30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5102.18; Wed, 30 Mar 2022 01:57:08 +0000 Received: from PH0PR11MB5880.namprd11.prod.outlook.com ([fe80::d90e:5a21:8192:7c54]) by PH0PR11MB5880.namprd11.prod.outlook.com ([fe80::d90e:5a21:8192:7c54%7]) with mapi id 15.20.5102.023; Wed, 30 Mar 2022 01:57:08 +0000 From: "Zhang, Qiang1" To: syzbot , "davem@davemloft.net" , "kuba@kernel.org" , "linux-can@vger.kernel.org" , "linux-kernel@vger.kernel.org" , "mkl@pengutronix.de" , "netdev@vger.kernel.org" , "pabeni@redhat.com" , "pfink@christ-es.de" , "syzkaller-bugs@googlegroups.com" , "wg@grandegger.com" Subject: RE: [syzbot] memory leak in gs_usb_probe Thread-Topic: [syzbot] memory leak in gs_usb_probe Thread-Index: AQHYQ4DV1H7CRbsUNkiTZLs8PGYT1KzXKcOA Date: Wed, 30 Mar 2022 01:57:08 +0000 Message-ID: References: <000000000000bd6ee505db5cfec6@google.com> In-Reply-To: <000000000000bd6ee505db5cfec6@google.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.6.401.20 dlp-reaction: no-action authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=intel.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 3a57432e-4f9b-4827-e89b-08da11f09913 x-ms-traffictypediagnostic: BL0PR11MB3268:EE_ x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PH0PR11MB5880.namprd11.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230001)(366004)(7696005)(6506007)(8676002)(9686003)(66446008)(71200400001)(86362001)(66476007)(66946007)(64756008)(8936002)(508600001)(316002)(2906002)(966005)(76116006)(110136005)(66556008)(122000001)(921005)(26005)(82960400001)(5660300002)(186003)(55016003)(33656002)(38070700005)(83380400001)(38100700002)(52536014)(7416002)(99710200001)(505234007);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?RDVLZ0UxZW5Rdit0MWltQlFjalp5eUFrZ2dyOGpqb29KenhTcVk4emZBM2hn?= =?utf-8?B?d1pFb2x3bVluZ0JWeThpWDJMbGE4V0xFTmlTYm40UmFoU1U3WFM5RVRlUlNR?= =?utf-8?B?S3pPTHhSR3F4N2x5OGloTnNtUlZmbWdHUlJIRFJtVDB5VkpSZkFyaG4vNVpM?= =?utf-8?B?WXpTSVlFU29KV3Ntck1zQk90b09wOFNkb1BWd3o3eVRKUjh0V2I0VDZsbW01?= =?utf-8?B?ZEJXdFVBK3JmSEJ6aHhUYmRicjBUUWNMSFBESjVNNXVHb09FMUtPY0Z3ZURS?= =?utf-8?B?bnBadHVBbFU3VjFxNlRTcVdvZ0lNdHZ5MjJRYWFNSzZqRU85RUZzZTFITVoz?= =?utf-8?B?QXpVTXlwSzNYdzZWRXNDZUp0RkgvQzhJaHAvWU9IallyU2FnNjNJaEdyT2pN?= =?utf-8?B?WWhzUS9pR0VBWml3Sm14NlJDUXplMU1TbmQ2YUw5Z3dMN2tRVmFkY1k1akY4?= =?utf-8?B?VWVYUGNaWWhYSmlsRXYwMzJMelNlZlRITnJic2pXZng3dmRSbnBEQ2tQV0Vi?= =?utf-8?B?NDkwM2VFK2FXTDJLN2tDVmRNOWVUazd2Mlp1NWlMVkpDV2ZtMUUwU1VReU1Q?= =?utf-8?B?Y2ppbktoSExQZVh2Wjh5UE1aOE55U3JmMkVLSFd6QmV5MUpHd0FESEZRU2c4?= =?utf-8?B?Y04xdjIybTFpdy95ZUJRdnJDcmVCYXM4VWRNWmlhclpmZkgvZmVpc1o0bHNW?= =?utf-8?B?TENrR1dyem5RWURwU0IxbDVRWHVJSTF4STQvOXNrMkhLRXZFSnlVSEZ2dFh0?= =?utf-8?B?WExJeVlDbHZlUVV1N1AwbDdUZjd4NHlubWlvUzVINTBPSXlFT21Telora0JG?= =?utf-8?B?RzA2QUoyY1RZeHR0NEtxOGdzajVHaWhDVW54OEVCVTBKQzNORU4xS2lDTDNx?= =?utf-8?B?ZnNEL05SSVdEUjNvYjNGd1NVOHdqekdyQUZwcmdZdDljV0VpdUxUc0tBQzFB?= =?utf-8?B?a3ZCMWlEVy83VjdGaEdHTDlNdHpWSlBWY295QUQ4TFRtTGhHeENkdm55elk3?= =?utf-8?B?aXZISXJJbEd6c0RsVGRCWTFxcEpndjJ5a01yajZVdGkxOWFGR3pNa0hEVVZo?= =?utf-8?B?MGVRd2s5VnVFaE8rcGJoSWJxeTBYd2Q4NEthZW81aXVQMFVOOGNtN0Z4RWlt?= =?utf-8?B?UXRWOEdHTnN5SE5MelR3c3lTbXVUNFpOWS9ETWpOTlhrVWZReXc2TVNpeGlD?= =?utf-8?B?RytZZEc3R0ZQMTQ4enNnQ21SQ1pKaUhGTXZLU1VUUjd2dzJ1N2NHQnV6UXFI?= =?utf-8?B?b3RrMUdKTnJxcHVJSW9ONVVLbWxZMWpBYXZGOTMzZTVWWUlHWE1RRnU5RzNk?= =?utf-8?B?bTNkRVo5aUVBdlJaa0FDUy9pMVA5QXFWNGxtSlBubm0vNUtReDFuRzlhNEVw?= =?utf-8?B?UXNINE5EWkNsbGZFR3pOV25CaDVDRUEwVVlabmVXeHVreU9iMjhnL1VXaHU0?= =?utf-8?B?RUJnRXlrWk8yZDZacVR6YUNVUk1sYm12UjNiKzFwbEhRRUU5TWZEQXljaDFE?= =?utf-8?B?azdaOG1hYXBsYldCeGlCekZSaUxWSFpLb1dXcFhwbjJwWTJSOC9ueVRLcmlX?= =?utf-8?B?TkJXTUxHeHNPemdnbVlZWDlWcFAxZmtBMG1GRlEyNVJWdThnSUhKRFdHT01V?= =?utf-8?B?WEFRbzVYaHkxMUNHWjNJdm9SS1dZOEYvTGtWSzZjb3lFOUJEalpyeXQxK05i?= =?utf-8?B?ZTVOanJ1N0dpb0VjK0FzaENTVEV2Ukl3TVJ5bitIeGFQOEJXUlVlN1lUYVB2?= =?utf-8?B?eGZ5QWJKU3NYekFkTmZjeURCWWR5RlF5cHJiTXV4bjBkWGR4MkRYV2pvbVhk?= =?utf-8?B?SnFWeUNpYkV0bFZHYWcxUVczcU9ObWpWK0JQazRLQW54alRKS3hJbXlVZU9r?= =?utf-8?B?d0YrWnVtTkYzVnkzQzZEZ1M4N0VEdDZTL0JlU1lsT2pqTmVCNmNZV09VVkgx?= =?utf-8?B?eXFQOXZLdEpnN2ZVeTFOMmxOemxzMXg4QmlHN05qZ0hHbFRXY08zN1cxaTdS?= =?utf-8?B?QUYya3ZPOGZDdGJmd1pONHVRdDhKaUNPVE9PU3BFWm5FSUNja3BvaGlPRFpP?= =?utf-8?B?dnV5cHBEU1l4L3JHd2srTjJKYnBOUG1oTmVJbzUxV1UwYXJ3V29SekJORHc4?= =?utf-8?B?L1RSWlVjdFV4SnFkNVNmMnpKWWJlR3Vabm45TmFiMU5tRVJBbnhrbmlueVVM?= =?utf-8?B?K0NvMjV0YUx3UHRIYlhUWElaY0hkdlFqVzJubnRqSHNIU1VLUGR2ekdmTmx6?= =?utf-8?B?MGxVM0V4bDNjUVFuby9uV1JyYW9YcXdVSjF3R0xKWkVEeEtpYWNWaExCODJN?= =?utf-8?B?d0VwVWsxYWR5NG0ySUhNZkdjQUtCMmlpWTI0cFBZcUtxdTh2emdqUT09?= Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: PH0PR11MB5880.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 3a57432e-4f9b-4827-e89b-08da11f09913 X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Mar 2022 01:57:08.3595 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: f/gnalJauCmkQAfM+cFEcuKO1OXQFevCnCanmApFb4AF7Q5NrWISnbPSogdDCYiUVrrFh320SH8G+r+7NLTOYA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR11MB3268 X-OriginatorOrg: intel.com Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hello, syzbot found the following issue on: HEAD commit: 52deda9551a0 Merge branch 'akpm' (patches from Andrew) git tree: upstream console output: https://syzkaller.appspot.com/x/log.txt?x=3D12b472dd700000 kernel config: https://syzkaller.appspot.com/x/.config?x=3D9ca2a67ddb20027f dashboard link: https://syzkaller.appspot.com/bug?extid=3D4d0ae90a195b269f1= 02d compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils= for Debian) 2.35.2 syz repro: https://syzkaller.appspot.com/x/repro.syz?x=3D12e96e1d700000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=3D12f8b513700000 IMPORTANT: if you fix the issue, please add the following tag to the commit: Reported-by: syzbot+4d0ae90a195b269f102d@syzkaller.appspotmail.com BUG: memory leak unreferenced object 0xffff88810e4fc300 (size 96): comm "kworker/1:1", pid 25, jiffies 4294948102 (age 15.080s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [] kmalloc include/linux/slab.h:581 [inline] [] gs_make_candev drivers/net/can/usb/gs_usb.c:1065 [= inline] [] gs_usb_probe.cold+0x69e/0x8b8 drivers/net/can/usb/= gs_usb.c:1191 [] usb_probe_interface+0x177/0x370 drivers/usb/core/d= river.c:396 [] call_driver_probe drivers/base/dd.c:517 [inline] [] really_probe.part.0+0xe7/0x380 drivers/base/dd.c:5= 96 [] really_probe drivers/base/dd.c:558 [inline] [] __driver_probe_device+0x10c/0x1e0 drivers/base/dd.= c:755 [] driver_probe_device+0x2a/0x120 drivers/base/dd.c:7= 85 [] __device_attach_driver+0xf6/0x140 drivers/base/dd.= c:902 [] bus_for_each_drv+0xb7/0x100 drivers/base/bus.c:427 [] __device_attach+0x122/0x260 drivers/base/dd.c:973 [] bus_probe_device+0xc6/0xe0 drivers/base/bus.c:487 [] device_add+0x5fb/0xdf0 drivers/base/core.c:3405 [] usb_set_configuration+0x8f2/0xb80 drivers/usb/core= /message.c:2170 [] usb_generic_driver_probe+0x8c/0xc0 drivers/usb/cor= e/generic.c:238 [] usb_probe_device+0x5c/0x140 drivers/usb/core/drive= r.c:293 [] call_driver_probe drivers/base/dd.c:517 [inline] [] really_probe.part.0+0xe7/0x380 drivers/base/dd.c:5= 96 [] really_probe drivers/base/dd.c:558 [inline] [] __driver_probe_device+0x10c/0x1e0 drivers/base/dd.= c:755 [] driver_probe_device+0x2a/0x120 drivers/base/dd.c:7= 85 BUG: memory leak unreferenced object 0xffff88810e4fc280 (size 96): comm "kworker/1:1", pid 25, jiffies 4294948819 (age 7.910s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [] kmalloc include/linux/slab.h:581 [inline] [] gs_make_candev drivers/net/can/usb/gs_usb.c:1065 [= inline] [] gs_usb_probe.cold+0x69e/0x8b8 drivers/net/can/usb/= gs_usb.c:1191 [] usb_probe_interface+0x177/0x370 drivers/usb/core/d= river.c:396 [] call_driver_probe drivers/base/dd.c:517 [inline] [] really_probe.part.0+0xe7/0x380 drivers/base/dd.c:5= 96 [] really_probe drivers/base/dd.c:558 [inline] [] __driver_probe_device+0x10c/0x1e0 drivers/base/dd.= c:755 [] driver_probe_device+0x2a/0x120 drivers/base/dd.c:7= 85 [] __device_attach_driver+0xf6/0x140 drivers/base/dd.= c:902 [] bus_for_each_drv+0xb7/0x100 drivers/base/bus.c:427 [] __device_attach+0x122/0x260 drivers/base/dd.c:973 [] bus_probe_device+0xc6/0xe0 drivers/base/bus.c:487 [] device_add+0x5fb/0xdf0 drivers/base/core.c:3405 [] usb_set_configuration+0x8f2/0xb80 drivers/usb/core= /message.c:2170 [] usb_generic_driver_probe+0x8c/0xc0 drivers/usb/cor= e/generic.c:238 [] usb_probe_device+0x5c/0x140 drivers/usb/core/drive= r.c:293 [] call_driver_probe drivers/base/dd.c:517 [inline] [] really_probe.part.0+0xe7/0x380 drivers/base/dd.c:5= 96 [] really_probe drivers/base/dd.c:558 [inline] [] __driver_probe_device+0x10c/0x1e0 drivers/base/dd.= c:755 [] driver_probe_device+0x2a/0x120 drivers/base/dd.c:7= 85 #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.g= it master diff --git a/drivers/net/can/usb/gs_usb.c b/drivers/net/can/usb/gs_usb.c index 67408e316062..5234cfff84b8 100644 --- a/drivers/net/can/usb/gs_usb.c +++ b/drivers/net/can/usb/gs_usb.c @@ -1092,6 +1092,7 @@ static struct gs_can *gs_make_candev(unsigned int cha= nnel, dev->data_bt_const.brp_inc =3D le32_to_cpu(bt_const_extende= d->dbrp_inc); dev->can.data_bittiming_const =3D &dev->data_bt_const; + kfree(bt_const_extended); } SET_NETDEV_DEV(netdev, &intf->dev); Thanks, Zqiang --- This report is generated by a bot. It may contain errors. See https://goo.gl/tpsmEJ for more information about syzbot. syzbot engineers can be reached at syzkaller@googlegroups.com. syzbot will keep track of this issue. See: https://goo.gl/tpsmEJ#status for how to communicate with syzbot. syzbot can test patches for this issue, for details see: https://goo.gl/tpsmEJ#testing-patches