Return-Path: <linux-kernel-owner@vger.kernel.org>
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
        id S1751601AbdFGOnS (ORCPT <rfc822;w@1wt.eu>);
        Wed, 7 Jun 2017 10:43:18 -0400
Received: from iolanthe.rowland.org ([192.131.102.54]:47914 "HELO
        iolanthe.rowland.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org
        with SMTP id S1751566AbdFGOnQ (ORCPT
        <rfc822;linux-kernel@vger.kernel.org>);
        Wed, 7 Jun 2017 10:43:16 -0400
Date: Wed, 7 Jun 2017 10:43:14 -0400 (EDT)
From: Alan Stern <stern@rowland.harvard.edu>
X-X-Sender: stern@iolanthe.rowland.org
To: Andrey Konovalov <andreyknvl@google.com>
cc: Felipe Balbi <balbi@kernel.org>,
        Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
        Peter Chen <peter.chen@nxp.com>,
        Krzysztof Opasiak <k.opasiak@samsung.com>,
        Colin Ian King <colin.king@canonical.com>,
        =?UTF-8?Q?Felix_H=C3=A4dicke?= <felixhaedicke@web.de>,
        Roger Quadros <rogerq@ti.com>, USB list <linux-usb@vger.kernel.org>,
        LKML <linux-kernel@vger.kernel.org>,
        Dmitry Vyukov <dvyukov@google.com>, Kostya Serebryany <kcc@google.com>,
        syzkaller <syzkaller@googlegroups.com>
Subject: Re: usb/gadget: another GPF in usb_gadget_unregister_driver
In-Reply-To: <CAAeHK+w5zgBWs-Hr2rn8ggNAjGv3soAzCZNyUSnucoPTBy=VcQ@mail.gmail.com>
Message-ID: <Pine.LNX.4.44L0.1706071039530.1751-100000@iolanthe.rowland.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: linux-kernel-owner@vger.kernel.org
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org
Content-Length: 610
Lines: 20

On Wed, 7 Jun 2017, Andrey Konovalov wrote:

> Hi,
> 
> I've got the following error report while fuzzing the kernel with syzkaller.
> 
> On commit b29794ec95c6856b316c2295904208bf11ffddd9 (4.12-rc4+).
> 
> This looks quite similar to
> https://groups.google.com/forum/#!topic/syzkaller/HDawLBeeORI

It does look very similar, but that problem was supposed to have been 
fixed by commit 7b0173811260 ("usb: gadget: udc: core: fix return code 
of usb_gadget_probe_driver()").

> I'm able to reproduce this, so I can collect some debug traces if needed.

Can you provide an strace or the equivalent?

Alan Stern