syzbot


WARNING in usbnet_start_xmit/usb_submit_urb

Status: fixed on 2023/10/12 12:47
Subsystems: usb
[Documentation on labels]
Reported-by: syzbot+63ee658b9a100ffadbe2@syzkaller.appspotmail.com
Fix commit: 5e1627cb43dd net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
First crash: 859d, last: 272d
Cause bisection: introduced by (bisect log) :
commit 45bf39f8df7f05efb83b302c65ae3b9bc92b7065
Author: Alan Stern <stern@rowland.harvard.edu>
Date: Tue Jan 31 20:49:04 2023 +0000

  USB: core: Don't hold device lock while reading the "descriptors" sysfs file

Crash: WARNING in usbnet_start_xmit/usb_submit_urb (log)
Repro: C syz .config
  
Discussions (11)
Title Replies (including bot) Last reply
[PATCH AUTOSEL 4.14] net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb 1 (1) 2023/08/03 13:05
[PATCH AUTOSEL 4.19] net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb 1 (1) 2023/08/03 13:05
[PATCH AUTOSEL 5.4 1/2] net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb 1 (1) 2023/08/03 13:04
[PATCH AUTOSEL 5.10 1/3] net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb 1 (1) 2023/08/03 13:04
[PATCH AUTOSEL 5.15 1/3] net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb 1 (1) 2023/08/03 13:04
[PATCH AUTOSEL 6.1 1/4] net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb 1 (1) 2023/08/03 13:04
[PATCH AUTOSEL 6.4 1/4] net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb 1 (1) 2023/08/03 13:04
[PATCH v2] net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb 1 (1) 2023/07/12 14:15
[PATCH] net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb 1 (1) 2023/07/11 17:38
[syzbot] WARNING in usbnet_start_xmit/usb_submit_urb 7 (13) 2023/06/23 17:16
Re: [PATCH] usbnet: sanity check for endpoint types 1 (1) 2021/11/25 17:39
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 WARNING in usbnet_start_xmit/usb_submit_urb C done 2 253d 309d 3/3 fixed on 2023/09/23 10:19
linux-6.1 WARNING in usbnet_start_xmit/usb_submit_urb origin:lts-only C done 2 240d 311d 3/3 fixed on 2023/09/27 12:10
upstream WARNING in usbnet_start_xmit/usb_submit_urb (2) usb C error 4 3d08h 1d18h 0/26 upstream: reported C repro on 2024/03/17 14:43
Last patch testing requests (7)
Created Duration User Patch Repo Result
2023/06/23 15:23 29m stern@rowland.harvard.edu patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/ v6.4-rc7 OK log
2023/04/13 08:11 14m retest repro https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing report log
2022/12/02 02:30 14m retest repro https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing report log
2021/12/09 12:03 21m oneukum@suse.com patch https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git 048ff8629e11 OK
2021/11/25 13:37 9m oneukum@suse.com patch https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git 048ff8629e11 report log
2021/11/18 17:20 12m oneukum@suse.com patch https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git 048ff8629e11 report log
2021/11/18 14:34 13m oneukum@suse.com patch https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git 048ff8629e11 report log

Sample crash report:
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 3 != type 1
WARNING: CPU: 0 PID: 754 at drivers/usb/core/urb.c:504 usb_submit_urb+0xed6/0x1880 drivers/usb/core/urb.c:504
Modules linked in:
CPU: 0 PID: 754 Comm: kworker/0:2 Not tainted 6.4.0-rc7-syzkaller-00014-g692b7dc87ca6 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
Workqueue: mld mld_ifc_work
RIP: 0010:usb_submit_urb+0xed6/0x1880 drivers/usb/core/urb.c:504
Code: 7c 24 18 e8 2c b4 5b fb 48 8b 7c 24 18 e8 42 07 f0 fe 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 a0 c9 fc 8a e8 5a 6f 23 fb <0f> 0b e9 58 f8 ff ff e8 fe b3 5b fb 48 81 c5 c0 05 00 00 e9 84 f7
RSP: 0018:ffffc9000463f568 EFLAGS: 00010086
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff88801eb28000 RSI: ffffffff814c03b7 RDI: 0000000000000001
RBP: ffff8881443b7190 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000003
R13: ffff88802a77cb18 R14: 0000000000000003 R15: ffff888018262500
FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000556a99c15a18 CR3: 0000000028c71000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 usbnet_start_xmit+0xfe5/0x2190 drivers/net/usb/usbnet.c:1453
 __netdev_start_xmit include/linux/netdevice.h:4918 [inline]
 netdev_start_xmit include/linux/netdevice.h:4932 [inline]
 xmit_one net/core/dev.c:3578 [inline]
 dev_hard_start_xmit+0x187/0x700 net/core/dev.c:3594
 sch_direct_xmit+0x1a3/0xc30 net/sched/sch_generic.c:342
 __dev_xmit_skb net/core/dev.c:3805 [inline]
 __dev_queue_xmit+0x14d6/0x3b10 net/core/dev.c:4210
 dev_queue_xmit include/linux/netdevice.h:3088 [inline]
 neigh_resolve_output net/core/neighbour.c:1552 [inline]
 neigh_resolve_output+0x51b/0x870 net/core/neighbour.c:1532
 neigh_output include/net/neighbour.h:544 [inline]
 ip6_finish_output2+0x55a/0x1560 net/ipv6/ip6_output.c:134
 __ip6_finish_output net/ipv6/ip6_output.c:195 [inline]
 ip6_finish_output+0x69a/0x1170 net/ipv6/ip6_output.c:206
 NF_HOOK_COND include/linux/netfilter.h:292 [inline]
 ip6_output+0x1f1/0x540 net/ipv6/ip6_output.c:227
 dst_output include/net/dst.h:458 [inline]
 NF_HOOK include/linux/netfilter.h:303 [inline]
 NF_HOOK include/linux/netfilter.h:297 [inline]
 mld_sendpack+0xa09/0xed0 net/ipv6/mcast.c:1820
 mld_send_cr net/ipv6/mcast.c:2121 [inline]
 mld_ifc_work+0x73c/0xe20 net/ipv6/mcast.c:2653
 process_one_work+0x99a/0x15e0 kernel/workqueue.c:2405
 worker_thread+0x67d/0x10c0 kernel/workqueue.c:2552
 kthread+0x344/0x440 kernel/kthread.c:379
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>

Crashes (92):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/06/20 20:43 upstream 692b7dc87ca6 09ffe269 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2023/06/07 03:14 upstream a4d7d7011219 a4ae4f42 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64-mte WARNING in usbnet_start_xmit/usb_submit_urb
2023/05/09 16:21 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 986866c3dfb0 30aa2a7e .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2021/11/11 09:49 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 048ff8629e11 75b04091 .config console log report syz C ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2023/05/09 19:17 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 14f8db1c0f9a 30aa2a7e .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in usbnet_start_xmit/usb_submit_urb
2023/05/20 17:41 upstream d635f6cc934b 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/02 19:25 upstream fb184c4af9b9 45a13a73 .config console log report info ci-upstream-kasan-gce-smack-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/01 05:36 upstream 719fce7539cd 45a13a73 .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/02/28 14:31 upstream 7e57714cd0ad 45a13a73 .config console log report info ci-upstream-kasan-gce-smack-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/02/25 12:44 upstream 73878e5eb1bd 7c337266 .config console log report info ci-upstream-kasan-gce-smack-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/02/21 01:06 upstream 7f25f0412c9e 3cd800e4 .config console log report info ci-upstream-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2023/05/09 14:07 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 986866c3dfb0 30aa2a7e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/08/24 02:06 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing ffcf9c5700e4 cea8b0f7 .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/08/16 18:40 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing ffcf9c5700e4 7a7cb304 .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/07/19 19:17 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 32f02a211b0a 72a3cc0c .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/04/05 08:47 linux-next 3ccc91681259 5915c2cb .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/04/05 02:02 linux-next 696206280c5e 5915c2cb .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/04/04 02:54 linux-next e5071887cd22 79a2a8fc .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/04/04 00:20 linux-next e5071887cd22 79a2a8fc .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/04/03 16:00 linux-next e5071887cd22 79a2a8fc .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/04/02 00:48 linux-next e5071887cd22 79a2a8fc .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/04/01 04:22 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing d888c83fcec7 68fc921a .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/30 14:36 linux-next a67ba3cf9551 42718dd6 .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/29 04:23 linux-next 8515d05bf6bc 6bdac766 .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/21 03:19 linux-next 91265a6da44d e2d91b1d .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/16 15:09 linux-next 91265a6da44d 9e8eaa75 .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/16 08:08 linux-next 91265a6da44d 9e8eaa75 .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/15 12:27 linux-next 91265a6da44d 9e8eaa75 .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/14 03:38 linux-next 91265a6da44d 9e8eaa75 .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/13 20:51 linux-next 91265a6da44d 9e8eaa75 .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/10 06:21 linux-next 91265a6da44d 9e8eaa75 .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/08 13:11 linux-next 91265a6da44d 7bdd8b2c .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/08 10:26 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 98d107b84614 7bdd8b2c .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/07 20:36 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 98d107b84614 7bdd8b2c .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/06 16:46 linux-next 91265a6da44d 7bdd8b2c .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/04 17:48 linux-next 91265a6da44d 45a13a73 .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/02 09:13 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing ca9400ef7f67 45a13a73 .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/02 08:24 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing ca9400ef7f67 45a13a73 .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/02 04:04 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing ca9400ef7f67 45a13a73 .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/03/01 17:54 linux-next e6ada6df471f 45a13a73 .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in usbnet_start_xmit/usb_submit_urb
2022/02/28 01:05 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing f6a9a2d64dd1 45a13a73 .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/02/25 13:56 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a352fa58c0ee 7c337266 .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/02/24 19:13 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a352fa58c0ee b28851a4 .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/02/19 20:58 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a5d847b0afd3 3cd800e4 .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/02/19 15:11 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a5d847b0afd3 3cd800e4 .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/02/19 10:26 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a5d847b0afd3 3cd800e4 .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/02/18 21:17 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a5d847b0afd3 3cd800e4 .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/02/18 15:14 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a5d847b0afd3 3cd800e4 .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/02/18 06:26 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing d016cbe4d7ac 3cd800e4 .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/02/17 00:58 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 9902951f536c 50221962 .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2022/02/15 09:36 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 4378e427f705 8b9ca619 .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
2021/11/11 07:17 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 048ff8629e11 75b04091 .config console log report info ci2-upstream-usb WARNING in usbnet_start_xmit/usb_submit_urb
* Struck through repros no longer work on HEAD.