syzbot


WARNING in cm109_urb_irq_callback/usb_submit_urb
Status: upstream: reported C repro on 2020/12/30 03:58
Reported-by: syzbot+2d6d691af5ab4b7e66df@syzkaller.appspotmail.com
First crash: 516d, last: 6d20h

Cause bisection: introduced by (bisect log) [ignored commit]:
commit f2c2e717642c66f7fe7e5dd69b2e8ff5849f4d10
Author: Andrey Konovalov <andreyknvl@google.com>
Date: Mon Feb 24 16:13:03 2020 +0000

  usb: gadget: add raw-gadget interface

Crash: WARNING in cm109_urb_irq_callback/usb_submit_urb (log)
Repro: C syz .config
Patch testing requests:
Created Duration User Patch Repo Result
2021/08/03 19:46 18m paskripkin@gmail.com patch upstream OK

Sample crash report:
cm109 1-1:0.0: cm109_urb_irq_callback: urb status -71
------------[ cut here ]------------
URB 00000000c292c6d3 submitted while active
WARNING: CPU: 1 PID: 3620 at drivers/usb/core/urb.c:378 usb_submit_urb+0x14e2/0x18a0 drivers/usb/core/urb.c:378
Modules linked in:
CPU: 1 PID: 3620 Comm: syz-executor235 Not tainted 5.17.0-rc6-syzkaller-00046-g719fce7539cd #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:usb_submit_urb+0x14e2/0x18a0 drivers/usb/core/urb.c:378
Code: 89 de e8 71 5b 0e fc 84 db 0f 85 a9 f3 ff ff e8 04 58 0e fc 4c 89 fe 48 c7 c7 a0 d5 4a 8a c6 05 3e c1 15 08 01 e8 eb 0d 9e 03 <0f> 0b e9 87 f3 ff ff 41 be ed ff ff ff e9 7c f3 ff ff e8 d7 57 0e
RSP: 0018:ffffc90000fd89d0 EFLAGS: 00010082
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff888079ca81c0 RSI: ffffffff815f12d8 RDI: fffff520001fb12c
RBP: ffff88801b096580 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff815eb96e R11: 0000000000000000 R12: 0000000000000046
R13: ffff88801b945058 R14: 00000000fffffff0 R15: ffff88801c7da300
FS:  0000555555b58300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6ced204109 CR3: 00000000191df000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 cm109_urb_irq_callback+0x44c/0xaa0 drivers/input/misc/cm109.c:422
 __usb_hcd_giveback_urb+0x2b0/0x5c0 drivers/usb/core/hcd.c:1670
 usb_hcd_giveback_urb+0x367/0x410 drivers/usb/core/hcd.c:1747
 dummy_timer+0x11f9/0x32b0 drivers/usb/gadget/udc/dummy_hcd.c:1987
 call_timer_fn+0x1a5/0x6b0 kernel/time/timer.c:1421
 expire_timers kernel/time/timer.c:1466 [inline]
 __run_timers.part.0+0x67c/0xa30 kernel/time/timer.c:1734
 __run_timers kernel/time/timer.c:1715 [inline]
 run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1747
 __do_softirq+0x29b/0x9c2 kernel/softirq.c:558
 invoke_softirq kernel/softirq.c:432 [inline]
 __irq_exit_rcu+0x123/0x180 kernel/softirq.c:637
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1097
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:trace_ext4_es_lookup_extent_enter include/trace/events/ext4.h:2244 [inline]
RIP: 0010:ext4_es_lookup_extent+0x891/0xcf0 fs/ext4/extents_status.c:929
Code: c9 68 ff 0f 0b e8 7f c9 68 ff 65 ff 05 38 57 f3 7d 48 c7 c0 a0 15 80 8d 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 <0f> 85 01 04 00 00 48 8b 05 f2 fc 70 0b e8 dd 87 53 ff 31 ff 89 c3
RSP: 0018:ffffc900028178f0 EFLAGS: 00000246
RAX: 1ffffffff1b002b4 RBX: 0000000000000001 RCX: 0000000000000000
RDX: dffffc0000000000 RSI: ffffffff820f1881 RDI: 0000000000000003
RBP: ffff88806df202e0 R08: 0000000000000000 R09: 0000000000000001
R10: ffffffff820f114a R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90002817aac
 ext4_map_blocks+0x1f1/0x18a0 fs/ext4/inode.c:530
 ext4_getblk+0x553/0x6b0 fs/ext4/inode.c:849
 ext4_bread+0x2a/0x1c0 fs/ext4/inode.c:902
 __ext4_read_dirblock+0x34/0xc10 fs/ext4/namei.c:116
 ext4_add_entry+0x77d/0xe90 fs/ext4/namei.c:2350
 ext4_add_nondir+0x90/0x290 fs/ext4/namei.c:2709
 ext4_symlink+0x873/0xd40 fs/ext4/namei.c:3363
 vfs_symlink fs/namei.c:4299 [inline]
 vfs_symlink+0x108/0x2c0 fs/namei.c:4284
 do_symlinkat+0x261/0x2e0 fs/namei.c:4328
 __do_sys_symlink fs/namei.c:4350 [inline]
 __se_sys_symlink fs/namei.c:4348 [inline]
 __x64_sys_symlink+0x75/0x90 fs/namei.c:4348
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f6ced1c5777
Code: 24 30 ba 22 00 00 00 4c 8b 74 24 28 64 c7 03 22 00 00 00 e9 76 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffa0e87688 EFLAGS: 00000202 ORIG_RAX: 0000000000000058
RAX: ffffffffffffffda RBX: 000000000000de8d RCX: 00007f6ced1c5777
RDX: ffffffffffffffc0 RSI: 00007f6ced204127 RDI: 00007f6ced204132
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fffa0e87100
R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa0e876ac
R13: 00007fffa0e876e0 R14: 00007fffa0e876c0 R15: 0000000000000004
 </TASK>
----------------
Code disassembly (best guess):
   0:	c9                   	leaveq
   1:	68 ff 0f 0b e8       	pushq  $0xffffffffe80b0fff
   6:	7f c9                	jg     0xffffffd1
   8:	68 ff 65 ff 05       	pushq  $0x5ff65ff
   d:	38 57 f3             	cmp    %dl,-0xd(%rdi)
  10:	7d 48                	jge    0x5a
  12:	c7 c0 a0 15 80 8d    	mov    $0x8d8015a0,%eax
  18:	48 ba 00 00 00 00 00 	movabs $0xdffffc0000000000,%rdx
  1f:	fc ff df
  22:	48 c1 e8 03          	shr    $0x3,%rax
  26:	80 3c 10 00          	cmpb   $0x0,(%rax,%rdx,1)
* 2a:	0f 85 01 04 00 00    	jne    0x431 <-- trapping instruction
  30:	48 8b 05 f2 fc 70 0b 	mov    0xb70fcf2(%rip),%rax        # 0xb70fd29
  37:	e8 dd 87 53 ff       	callq  0xff538819
  3c:	31 ff                	xor    %edi,%edi
  3e:	89 c3                	mov    %eax,%ebx

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2022/05/12 00:52 upstream feb9c5e19e91 45a13a73 .config log report syz C
ci-upstream-kasan-gce 2021/12/10 11:19 upstream c741e49150db ae6bf8dd .config log report syz C
ci-upstream-kasan-gce 2021/10/09 06:50 upstream 5d6ab0bb408f ae6bf8dd .config log report syz C
ci-upstream-kasan-gce 2021/08/29 09:11 upstream 3f5ad13cb012 ae6bf8dd .config log report syz C
ci-upstream-kasan-gce 2021/07/26 02:55 upstream ff1176468d36 ae6bf8dd .config log report syz C
ci-upstream-kasan-gce-selinux-root 2021/06/10 09:58 upstream cd1245d75ce9 6a81331a .config log report syz C
Crashes (69):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2022/03/01 14:02 upstream 719fce7539cd 45a13a73 .config log report syz C WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2022/01/24 04:36 upstream dd81e1c7d5fb 214351e1 .config log report syz C WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-root 2021/12/24 09:49 upstream 76657eaef4a7 6caa12e4 .config log report syz C WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-root 2021/12/24 09:34 upstream 76657eaef4a7 6caa12e4 .config log report syz C WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2021/06/26 00:25 upstream 44db63d1ad8d ae6bf8dd .config log report syz C WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-selinux-root 2021/04/07 18:54 upstream 2d743660786e 6a81331a .config log report syz C WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2021/04/07 18:43 upstream 2d743660786e 6a81331a .config log report syz C WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2022/02/03 18:44 linux-next 2d3d8c7643a5 4ebb2798 .config log report syz C WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-selinux-root 2022/02/25 00:52 upstream 73878e5eb1bd b28851a4 .config log report syz WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2022/05/19 22:14 upstream f993aed406ea 50c53f39 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2022/04/11 20:22 upstream ce522ba9ef7e af01ee7d .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2022/03/18 10:20 upstream 551acdc3c3d2 e2d91b1d .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2022/03/14 01:00 upstream f0e18b03fcaf 9e8eaa75 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2022/03/08 18:21 upstream ea4424be1688 9e8eaa75 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2022/03/03 07:50 upstream 92ebf5f91b4d 45a13a73 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2022/01/17 08:47 upstream 79e06c4c4950 723cfaf0 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2022/01/09 21:59 upstream 4634129ad9fd 2ca0d385 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2022/01/08 18:11 upstream d1587f7bfe9a 2ca0d385 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2021/12/16 14:59 upstream 2b14864acbaa 8dd6a5e3 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-root 2021/11/10 08:39 upstream cb690f5238d7 55fa030c .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-selinux-root 2021/10/17 22:05 upstream d999ade1cc86 0c5d9412 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2021/09/09 06:29 upstream 2d338201d531 e2776ee4 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2021/08/29 19:51 upstream 3f5ad13cb012 be2c130d .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2021/05/11 09:30 upstream 0aa099a312b6 ca873091 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-root 2021/05/11 09:29 upstream 0aa099a312b6 ca873091 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-selinux-root 2021/05/11 09:28 upstream 0aa099a312b6 ca873091 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2021/05/11 09:19 upstream 0aa099a312b6 ca873091 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2021/05/07 19:58 upstream d2b6f8a17919 f6da8120 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2021/05/07 19:11 upstream d2b6f8a17919 f6da8120 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-root 2021/05/02 21:43 upstream d2b6f8a17919 77e2b668 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2021/05/02 21:39 upstream d2b6f8a17919 77e2b668 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2021/05/01 21:46 upstream d2b6f8a17919 77e2b668 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2021/05/01 21:45 upstream d2b6f8a17919 77e2b668 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-selinux-root 2021/05/01 21:43 upstream d2b6f8a17919 77e2b668 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-root 2021/05/01 21:43 upstream d2b6f8a17919 77e2b668 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2021/04/27 06:21 upstream 4a0225c3d208 805b5003 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2021/04/24 01:37 upstream 18a3c5f7abfd 17f0b706 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2021/04/23 19:55 upstream 18a3c5f7abfd 17f0b706 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2021/04/17 03:33 upstream 2f7b98d1e55c 7e2b734b .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2021/04/13 08:12 upstream 89698becf06d bfeda1b1 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-selinux-root 2021/04/13 07:17 upstream 89698becf06d bfeda1b1 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2021/04/13 05:30 upstream 89698becf06d bfeda1b1 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-root 2021/04/12 08:31 upstream 7d900724913c bfeda1b1 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-selinux-root 2021/04/07 18:27 upstream 2d743660786e 6a81331a .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2021/04/07 18:21 upstream 2d743660786e 6a81331a .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce 2021/03/10 04:54 upstream 144c79ef3353 26967e35 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-386 2021/11/04 12:22 upstream ce840177930f 4c1be0be .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-386 2021/05/11 09:19 upstream 0aa099a312b6 ca873091 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-386 2021/05/02 21:46 upstream d2b6f8a17919 77e2b668 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-386 2021/05/01 21:50 upstream d2b6f8a17919 77e2b668 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-386 2021/04/23 16:08 upstream 18a3c5f7abfd 17f0b706 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-386 2021/04/14 01:41 upstream eebe426d32e1 a184b83e .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-386 2021/04/13 22:25 upstream 89698becf06d a184b83e .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-386 2021/04/13 19:13 upstream 89698becf06d a184b83e .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-386 2021/04/07 19:03 upstream 2d743660786e 6a81331a .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2022/04/05 06:22 linux-next 696206280c5e 5915c2cb .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2022/01/08 23:28 linux-next b8170452cd51 2ca0d385 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/12/17 03:00 linux-next fbf252e09678 44068e19 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/12/13 00:39 linux-next ea922272cbe5 49ca1f59 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/11/07 16:43 linux-next 6a37ebbe07bf 4c1be0be .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/10/09 23:55 linux-next 683f29b781ae 838e7e2c .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/07/30 08:29 linux-next 4ccc9e2db7ac c585c7b0 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/05/07 19:20 linux-next 869a85b925fc f6da8120 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/04/13 05:18 linux-next 5df924d19629 bfeda1b1 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/04/13 05:11 linux-next 5df924d19629 bfeda1b1 .config log report info WARNING in cm109_urb_irq_callback/usb_submit_urb
ci-upstream-kasan-gce-selinux-root 2020/12/30 05:44 upstream 139711f033f6 0fa352f2 .config log report info
ci-upstream-kasan-gce-selinux-root 2020/12/26 03:50 upstream 5814bc2d4cc2 821e0b09 .config log report info
ci-upstream-linux-next-kasan-gce-root 2020/12/30 23:55 linux-next d7a03a44a5e9 ecb8c012 .config log report info