syzbot


WARNING in usbvision_write_reg/usb_submit_urb

Status: upstream: reported C repro on 2019/07/23 12:48
Reported-by: syzbot+1fe821ea9f66c0df9cbf@syzkaller.appspotmail.com
First crash: 1233d, last: 910d
Patch testing requests:
Created Duration User Patch Repo Result
2022/08/31 17:27 15m retest repro https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing error
2022/08/31 16:27 15m retest repro https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing error
2022/08/31 15:27 20m retest repro https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing error
2022/08/31 14:27 15m retest repro https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing error
2022/08/31 13:27 14m retest repro https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing error
2022/08/31 12:27 15m retest repro https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing error
2022/08/31 11:27 15m retest repro https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing error
2022/08/31 10:27 0m retest repro https://github.com/google/kasan.git usb-fuzzer error

Sample crash report:
usb 1-1: New USB device found, idVendor=0573, idProduct=4d31, bcdDevice=83.78
usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
usb 1-1: config 0 descriptor??
usbvision_probe: Hauppauge WinTV USB Pro (PAL B/G FM) found
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 2 != type 3
WARNING: CPU: 0 PID: 95 at drivers/usb/core/urb.c:478 usb_submit_urb+0x1188/0x1460 drivers/usb/core/urb.c:478
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 95 Comm: kworker/0:2 Not tainted 5.5.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usb_hub_wq hub_event
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xef/0x16e lib/dump_stack.c:118
 panic+0x2aa/0x6e1 kernel/panic.c:221
 __warn.cold+0x2f/0x30 kernel/panic.c:582
 report_bug+0x27b/0x2f0 lib/bug.c:195
 fixup_bug arch/x86/kernel/traps.c:174 [inline]
 fixup_bug arch/x86/kernel/traps.c:169 [inline]
 do_error_trap+0x12b/0x1e0 arch/x86/kernel/traps.c:267
 do_invalid_op+0x32/0x40 arch/x86/kernel/traps.c:286
 invalid_op+0x23/0x30 arch/x86/entry/entry_64.S:1027
RIP: 0010:usb_submit_urb+0x1188/0x1460 drivers/usb/core/urb.c:478
Code: 4d 85 ed 74 46 e8 a8 1c e1 fd 4c 89 f7 e8 90 87 17 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 60 27 3b 86 e8 30 03 b6 fd <0f> 0b e9 20 f4 ff ff e8 7c 1c e1 fd 0f 1f 44 00 00 e8 72 1c e1 fd
RSP: 0018:ffff8881d5fa6fb8 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8129598d RDI: ffffed103abf4de9
RBP: ffff8881ca155f00 R08: ffff8881d711e200 R09: fffffbfff1269cae
R10: fffffbfff1269cad R11: ffffffff8934e56f R12: 0000000000000002
R13: ffff8881d0d39df8 R14: ffff8881cde390a0 R15: ffff8881d4ffd800
 usb_start_wait_urb+0x108/0x4c0 drivers/usb/core/message.c:57
 usb_internal_control_msg drivers/usb/core/message.c:101 [inline]
 usb_control_msg+0x31c/0x4a0 drivers/usb/core/message.c:152
 usbvision_write_reg+0x175/0x1f0 drivers/media/usb/usbvision/usbvision-core.c:1383
 usbvision_audio_off+0x1e/0xc0 drivers/media/usb/usbvision/usbvision-core.c:2183
 usbvision_configure_video drivers/media/usb/usbvision/usbvision-video.c:1398 [inline]
 usbvision_probe.cold+0x12a4/0x1f21 drivers/media/usb/usbvision/usbvision-video.c:1532
 usb_probe_interface+0x310/0x800 drivers/usb/core/driver.c:361
 really_probe+0x290/0xad0 drivers/base/dd.c:548
 driver_probe_device+0x223/0x350 drivers/base/dd.c:721
 __device_attach_driver+0x1d1/0x290 drivers/base/dd.c:828
 bus_for_each_drv+0x162/0x1e0 drivers/base/bus.c:430
 __device_attach+0x217/0x390 drivers/base/dd.c:894
 bus_probe_device+0x1e4/0x290 drivers/base/bus.c:490
 device_add+0x1459/0x1bf0 drivers/base/core.c:2487
 usb_set_configuration+0xe47/0x17d0 drivers/usb/core/message.c:2023
 generic_probe+0x9d/0xd5 drivers/usb/core/generic.c:210
 usb_probe_device+0xaf/0x140 drivers/usb/core/driver.c:266
 really_probe+0x290/0xad0 drivers/base/dd.c:548
 driver_probe_device+0x223/0x350 drivers/base/dd.c:721
 __device_attach_driver+0x1d1/0x290 drivers/base/dd.c:828
 bus_for_each_drv+0x162/0x1e0 drivers/base/bus.c:430
 __device_attach+0x217/0x390 drivers/base/dd.c:894
 bus_probe_device+0x1e4/0x290 drivers/base/bus.c:490
 device_add+0x1459/0x1bf0 drivers/base/core.c:2487
 usb_new_device.cold+0x540/0xcd0 drivers/usb/core/hub.c:2537
 hub_port_connect drivers/usb/core/hub.c:5184 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5324 [inline]
 port_event drivers/usb/core/hub.c:5470 [inline]
 hub_event+0x21cb/0x4300 drivers/usb/core/hub.c:5552
 process_one_work+0x945/0x15c0 kernel/workqueue.c:2264
 worker_thread+0x96/0xe20 kernel/workqueue.c:2410
 kthread+0x318/0x420 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (43):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-usb 2020/01/23 13:00 https://github.com/google/kasan.git usb-fuzzer 4cc301ee04d9 3334d684 .config log report syz C
ci2-upstream-usb 2019/12/20 01:45 https://github.com/google/kasan.git usb-fuzzer ecdf2214f472 36650b4b .config log report syz C
ci2-upstream-usb 2019/12/17 03:01 https://github.com/google/kasan.git usb-fuzzer 4cc037ecf2cb d13d7958 .config log report syz C
ci2-upstream-usb 2019/11/09 10:50 https://github.com/google/kasan.git usb-fuzzer d60bbfea36c1 1e35461e .config log report syz C
ci2-upstream-usb 2019/10/02 20:11 https://github.com/google/kasan.git usb-fuzzer 58d5f26a5584 2e29b534 .config log report syz C
ci2-upstream-usb 2019/09/21 07:46 https://github.com/google/kasan.git usb-fuzzer e0bd8d794fc9 d96e88f3 .config log report syz C
ci2-upstream-usb 2019/07/23 08:27 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 bb071d58 .config log report syz C
ci2-upstream-usb 2019/07/22 20:13 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 55e0c077 .config log report syz C
ci2-upstream-usb 2020/06/10 02:24 https://github.com/google/kasan.git usb-fuzzer 2089c6ed5a17 860c4de9 .config log report
ci2-upstream-usb 2020/02/11 23:52 https://github.com/google/kasan.git usb-fuzzer 7f0cd6c7c423 4d1ab643 .config log report
ci2-upstream-usb 2020/02/06 00:47 https://github.com/google/kasan.git usb-fuzzer e5cd56e94edd 662cf49a .config log report
ci2-upstream-usb 2020/02/04 11:46 https://github.com/google/kasan.git usb-fuzzer cd234325a5f1 93e5e335 .config log report
ci2-upstream-usb 2020/02/04 05:40 https://github.com/google/kasan.git usb-fuzzer cd234325a5f1 93e5e335 .config log report
ci2-upstream-usb 2020/02/03 04:51 https://github.com/google/kasan.git usb-fuzzer cd234325a5f1 93e5e335 .config log report
ci2-upstream-usb 2020/01/29 10:56 https://github.com/google/kasan.git usb-fuzzer cd234325a5f1 c8e81ce4 .config log report
ci2-upstream-usb 2020/01/25 12:16 https://github.com/google/kasan.git usb-fuzzer cd234325a5f1 2e95ab33 .config log report
ci2-upstream-usb 2020/01/21 05:12 https://github.com/google/kasan.git usb-fuzzer 4cc301ee04d9 8eda0b95 .config log report
ci2-upstream-usb 2020/01/15 01:29 https://github.com/google/kasan.git usb-fuzzer 4cc301ee04d9 fa12bd3c .config log report
ci2-upstream-usb 2020/01/08 20:08 https://github.com/google/kasan.git usb-fuzzer ae1794106b94 ddc3e859 .config log report
ci2-upstream-usb 2020/01/04 11:07 https://github.com/google/kasan.git usb-fuzzer ecdf2214f472 68256974 .config log report
ci2-upstream-usb 2019/12/28 03:39 https://github.com/google/kasan.git usb-fuzzer ecdf2214f472 be5c2c81 .config log report
ci2-upstream-usb 2019/12/24 14:45 https://github.com/google/kasan.git usb-fuzzer ecdf2214f472 be5c2c81 .config log report
ci2-upstream-usb 2019/12/24 11:38 https://github.com/google/kasan.git usb-fuzzer ecdf2214f472 be5c2c81 .config log report
ci2-upstream-usb 2019/12/18 12:14 https://github.com/google/kasan.git usb-fuzzer d533c9925862 64ca0a37 .config log report
ci2-upstream-usb 2019/12/18 01:46 https://github.com/google/kasan.git usb-fuzzer d533c9925862 1af3875f .config log report
ci2-upstream-usb 2019/12/17 08:35 https://github.com/google/kasan.git usb-fuzzer 4cc037ecf2cb d13d7958 .config log report
ci2-upstream-usb 2019/12/16 09:58 https://github.com/google/kasan.git usb-fuzzer 4cc037ecf2cb 0ae38e44 .config log report
ci2-upstream-usb 2019/12/16 07:24 https://github.com/google/kasan.git usb-fuzzer 4cc037ecf2cb eef6e580 .config log report
ci2-upstream-usb 2019/11/29 16:16 https://github.com/google/kasan.git usb-fuzzer 32b5e2b28188 4f7e1d0f .config log report
ci2-upstream-usb 2019/10/26 15:26 https://github.com/google/kasan.git usb-fuzzer 22be26f76193 25bb509e .config log report
ci2-upstream-usb 2019/10/24 22:18 https://github.com/google/kasan.git usb-fuzzer 22be26f76193 d01bb02a .config log report
ci2-upstream-usb 2019/10/14 18:31 https://github.com/google/kasan.git usb-fuzzer 22be26f76193 a6aef847 .config log report
ci2-upstream-usb 2019/10/13 12:54 https://github.com/google/kasan.git usb-fuzzer 58d5f26a5584 2f661ec4 .config log report
ci2-upstream-usb 2019/10/07 21:19 https://github.com/google/kasan.git usb-fuzzer 58d5f26a5584 28ac6e64 .config log report
ci2-upstream-usb 2019/10/02 12:34 https://github.com/google/kasan.git usb-fuzzer 58d5f26a5584 2e29b534 .config log report
ci2-upstream-usb 2019/10/01 12:34 https://github.com/google/kasan.git usb-fuzzer 2994c07743fe b7a87a83 .config log report
ci2-upstream-usb 2019/10/01 01:04 https://github.com/google/kasan.git usb-fuzzer 2994c07743fe c7a4fb99 .config log report
ci2-upstream-usb 2019/08/22 22:16 https://github.com/google/kasan.git usb-fuzzer eea39f24f4a5 c6c81a0b .config log report
ci2-upstream-usb 2019/08/19 19:06 https://github.com/google/kasan.git usb-fuzzer e06ce4da6fa7 ae348fb7 .config log report
ci2-upstream-usb 2019/08/15 01:24 https://github.com/google/kasan.git usb-fuzzer d0847550e22d 0d298d6b .config log report
ci2-upstream-usb 2019/08/10 05:39 https://github.com/google/kasan.git usb-fuzzer e96407b49762 acb51638 .config log report
ci2-upstream-usb 2019/07/26 09:49 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 732bc5a0 .config log report
ci2-upstream-usb 2019/07/22 19:52 https://github.com/google/kasan.git usb-fuzzer 6a3599ceaa39 55e0c077 .config log report
* Struck through repros no longer work on HEAD.