syzbot


WARNING in hif_usb_send/usb_submit_urb

Status: upstream: reported C repro on 2020/10/05 10:59
Reported-by: syzbot+f5378bcf0f0cab45c1c6@syzkaller.appspotmail.com
First crash: 786d, last: 5d00h

Cause bisection: introduced by (bisect log) [no-op commit]:
commit bb5cce12ac717c7462217cd493ed701d12d6dbce
Author: Andre Przywara <andre.przywara@arm.com>
Date: Wed May 13 10:29:58 2020 +0000

  arm64: dts: fvp/juno: Fix node address fields

Crash: WARNING in hif_usb_send/usb_submit_urb (log)
Repro: C syz .config
duplicates (1):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
WARNING in handle_bug/usb_submit_urb C 1 786d 786d 0/24 closed as dup on 2020/10/05 14:54
Patch testing requests:
Created Duration User Patch Repo Result
2020/10/10 01:08 17m stern@rowland.harvard.edu patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git v5.9-rc8 OK
2020/10/10 00:49 5m stern@rowland.harvard.edu patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git v5.9-rc8 error
2020/10/09 18:55 5m stern@rowland.harvard.edu patch https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git 6c8cf369 error

Sample crash report:
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 0 PID: 142 at drivers/usb/core/urb.c:503 usb_submit_urb+0xce2/0x1920 drivers/usb/core/urb.c:502
Modules linked in:
CPU: 0 PID: 142 Comm: kworker/0:2 Not tainted 6.0.0-rc1-syzkaller-00025-g274a2eebf80c #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
Workqueue: events request_firmware_work_func
RIP: 0010:usb_submit_urb+0xce2/0x1920 drivers/usb/core/urb.c:502
Code: 48 c1 e8 03 8a 04 18 84 c0 0f 85 d4 08 00 00 45 8b 06 48 c7 c7 a0 d4 53 8b 48 8b 74 24 20 4c 89 fa 89 e9 31 c0 e8 7e 6f 3e fb <0f> 0b 4c 8b 74 24 30 44 89 e5 48 89 ef 48 c7 c6 d0 f8 76 8d e8 15
RSP: 0018:ffffc9000299f3f8 EFLAGS: 00010246
RAX: bdaf77a4b3bd3f00 RBX: dffffc0000000000 RCX: ffff88801c70d880
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 0000000000000001 R08: ffffffff816d5c7d R09: fffff52000533dfd
R10: fffff52000533dfd R11: 1ffff92000533dfc R12: 0000000000000002
R13: ffff888017ac2500 R14: ffffffff8b53d288 R15: ffff888022318618
FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f73961d1111 CR3: 0000000076973000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 hif_usb_send_regout drivers/net/wireless/ath/ath9k/hif_usb.c:127 [inline]
 hif_usb_send+0x387/0xc40 drivers/net/wireless/ath/ath9k/hif_usb.c:478
 htc_issue_send drivers/net/wireless/ath/ath9k/htc_hst.c:35 [inline]
 htc_connect_service+0xa70/0x13a0 drivers/net/wireless/ath/ath9k/htc_hst.c:280
 ath9k_wmi_connect+0x146/0x230 drivers/net/wireless/ath/ath9k/wmi.c:271

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-smack-root 2021/08/16 03:47 upstream 7c60610d4767 2bd9619f .config log report syz C
ci-upstream-kasan-gce-smack-root 2021/07/17 00:20 upstream 0d18c12b288a 2bd9619f .config log report syz C
ci-upstream-kasan-gce-smack-root 2021/06/16 22:16 upstream 6b00bc639f1f 2bd9619f .config log report syz C
* Struck through repros no longer work on HEAD.
Crashes (373):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-smack-root 2022/08/18 10:03 upstream 274a2eebf80c d58e263f .config log report syz C WARNING in hif_usb_send/usb_submit_urb
ci-qemu-upstream 2022/07/16 18:56 upstream 4a57a8400075 95cb00d1 .config log report syz C WARNING in hif_usb_send/usb_submit_urb
ci-qemu-upstream 2022/07/14 20:13 upstream 4a57a8400075 5d921b08 .config log report syz C WARNING in hif_usb_send/usb_submit_urb
ci-upstream-kasan-gce-root 2022/07/02 12:02 upstream 089866061428 1434eec0 .config log report syz C WARNING in hif_usb_send/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2021/02/10 04:42 upstream e0756cfc7d7c 2bd9619f .config log report syz C WARNING in hif_usb_send/usb_submit_urb
ci-upstream-kasan-gce-root 2021/02/01 11:15 upstream 1048ba83fb1c fc9fd31e .config log report syz C WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/05/12 14:34 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b7a4f9b5d0e4 9ad6612a .config log report syz C WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2020/10/09 14:18 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 6c8cf3695176 fa79ed2a .config log report syz C
ci-upstream-kasan-gce-selinux-root 2022/11/25 22:22 upstream 0b1dcc2cf55a 74a66371 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2022/11/24 20:52 upstream c3eb11fbb826 62e26685 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci-qemu-upstream 2022/11/15 17:20 upstream e01d50cbd6ee bfcab33d .config log report info WARNING in hif_usb_send/usb_submit_urb
ci-upstream-kasan-gce-root 2022/11/08 07:21 upstream 59f2f4b8a757 881db35d .config log report info WARNING in hif_usb_send/usb_submit_urb
ci-qemu-upstream 2022/10/25 10:16 upstream 1a2dcbdde82e 45645420 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci-qemu-upstream 2022/10/22 08:26 upstream 4da34b7d175d c0b80a55 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci-upstream-kasan-gce-root 2022/10/14 07:24 upstream 55be6084c8e0 4954e4b2 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci-upstream-kasan-gce-selinux-root 2022/09/16 19:29 upstream 6879c2d3b960 dd9a85ff .config log report info WARNING in hif_usb_send/usb_submit_urb
ci-qemu-upstream-386 2022/11/01 09:33 upstream 200204f56f3b a1d8560a .config log report info WARNING in hif_usb_send/usb_submit_urb
ci-qemu-upstream-386 2022/10/29 19:46 upstream 200204f56f3b 2a71366b .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/21 01:37 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 5bb70014 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/20 18:29 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 5bb70014 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/20 15:58 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 5bb70014 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/20 11:55 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 5bb70014 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/20 10:39 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 5bb70014 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/20 08:43 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 5bb70014 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/20 06:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 5bb70014 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/20 02:35 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 5bb70014 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/19 22:40 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 5bb70014 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/19 19:24 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 5bb70014 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/19 17:52 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 5bb70014 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/19 16:30 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 5bb70014 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/19 13:49 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 5bb70014 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/19 10:39 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 5bb70014 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/19 08:53 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 5bb70014 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/19 07:20 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 5bb70014 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/17 15:28 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 4ba8ab94 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/15 23:07 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 3a127a31 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/09 15:06 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing d65e6b6e884a bebca8b7 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/03 05:16 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bd707a4f9ebe 7a2ebf95 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/11/01 01:29 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 8527e9421690 a1d8560a .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/10/29 15:18 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a6afa4199d3d 2a71366b .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/10/29 01:58 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a6afa4199d3d 899d812a .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/10/27 23:21 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a6afa4199d3d 5c716ff6 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/10/26 18:47 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a6afa4199d3d 86777b7f .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/10/25 04:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a6afa4199d3d 45645420 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/10/21 09:33 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a6afa4199d3d 63e790dd .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/10/18 11:00 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a6afa4199d3d b31320fc .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/10/16 20:18 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a6afa4199d3d 67cb024c .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/10/13 11:55 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a6afa4199d3d adf90437 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/10/13 02:11 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a6afa4199d3d 3f6b40a1 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/10/12 14:33 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a6afa4199d3d 16a9c9e0 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/10/10 23:21 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a6afa4199d3d 5bcf0c31 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/10/09 00:50 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e8bc52cb8df8 aea5da89 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/10/08 05:41 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 00988f70a076 aea5da89 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/10/04 10:19 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 00988f70a076 978d1f19 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/09/28 19:37 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bce2b0539933 a41a2080 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/09/28 15:54 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bce2b0539933 75c78242 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/09/28 14:27 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bce2b0539933 75c78242 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/09/28 11:52 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bce2b0539933 75c78242 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/09/28 10:22 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bce2b0539933 75c78242 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/09/28 08:36 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bce2b0539933 75c78242 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/09/28 02:45 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bce2b0539933 75c78242 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/09/22 13:19 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b294c2bf4cfd 60af5050 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/09/09 11:02 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 7eb2bf871454 90058bdc .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2022/09/08 11:37 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 8422b769fa46 f3027468 .config log report info WARNING in hif_usb_send/usb_submit_urb
ci2-upstream-usb 2021/01/09 10:07 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 841081d89d5a a6c52263 .config log report info
ci2-upstream-usb 2020/10/05 09:54 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 168ae5a74b4a 5ef9c291 .config log report info
* Struck through repros no longer work on HEAD.