syzbot


WARNING in corrupted/usb_submit_urb (2)

Status: upstream: reported C repro on 2020/11/20 15:15
Reported-by: syzbot+4feb9bb7280fb554f021@syzkaller.appspotmail.com
First crash: 749d, last: 20d

Cause bisection: introduced by (bisect log) [no-op commit]:
commit 7e49afc03212010d0ee27532a75cfeb0125bd868
Author: Masahiro Yamada <masahiroy@kernel.org>
Date: Fri Apr 17 18:04:55 2020 +0000

  um: do not evaluate compiler's library path when cleaning

Crash: WARNING in hif_usb_send/usb_submit_urb (log)
Repro: C syz .config

Fix bisection: fixed by (bisect log) :
commit c318840fb2a42ce25febc95c4c19357acf1ae5ca
Author: Alan Stern <stern@rowland.harvard.edu>
Date: Wed Dec 30 16:20:44 2020 +0000

  USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug

similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in corrupted/usb_submit_urb C 23 1013d 905d 0/24 closed as invalid on 2020/06/19 14:24

Sample crash report:
usb 1-1: config 0 descriptor??
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 0 PID: 3295 at drivers/usb/core/urb.c:505 usb_submit_urb+0xce2/0x1920 drivers/usb/core/urb.c:504
Modules linked in:
CPU: 0 PID: 3295 Comm: kworker/0:3 Not tainted 6.1.0-rc5-syzkaller-00144-g84368d882b96 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Workqueue: usb_hub_wq hub_event
RIP: 0010:usb_submit_urb+0xce2/0x1920 drivers/usb/core/urb.c:504
Code: 48 c1 e8 03 8a 04 18 84 c0 0f 85 d4 08 00 00 45 8b 06 48 c7 c7 e0 f1 c1 8b 48 8b 74 24 20 4c 89 fa 89 e9 31 c0 e8 6e 10 d7 fa <0f> 0b 4c 8b 74 24 30 44 89 e5 48 89 ef 48 c7 c6 30 56 e2 8d e8 d5
RSP: 0018:ffffc900036ce830 EFLAGS: 00010246
RAX: 1aed2cacde807400 RBX: dffffc0000000000 RCX: ffff888021560000
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 0000000000000001 R08: ffffffff816fdb6d R09: ffffed1017304f1b
R10: ffffed1017304f1b R11: 1ffff11017304f1a R12: 0000000000000002
R13: ffff888017c13200 R14: ffffffff8bc1efc8 R15: ffff888018813c80
FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffdcd83b5c8 CR3: 000000007ac97000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 usb_start_wait_urb+0x10e/0x51 drivers/usb/core/message.c:58

Crashes (53):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-smack-root 2022/11/19 06:08 upstream 84368d882b96 5bb70014 .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2022/09/27 07:23 upstream 3800a713b607 10323ddf .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-selinux-root 2022/09/17 13:39 upstream a335366bad13 dd9a85ff .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-root 2022/09/13 06:08 upstream 6504d82f4440 f371ed7e .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce 2022/09/13 03:08 upstream 80e78fcce86d f371ed7e .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-root 2022/08/14 17:19 upstream 7ebfc85e2cd7 8dfcaa3d .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce 2022/07/21 14:36 upstream 353f7988dd84 6e67af9d .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce 2022/07/06 15:27 upstream e35e5b6f695d bff65f44 .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce 2022/06/25 13:15 upstream 6a0a17e6c6d1 a371c43c .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-selinux-root 2022/05/24 07:25 upstream 1e57930e9f40 e7f9308d .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce 2022/05/12 21:59 upstream 0ac824f379fb 9ad6612a .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2022/04/10 14:19 upstream 1862a69c9174 e22c3da3 .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-root 2022/03/14 13:43 upstream 09688c0166e7 9e8eaa75 .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce 2021/10/03 04:34 upstream ab2a7a35c4e7 db0f5787 .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-root 2021/08/10 11:42 upstream 9a73fa375d58 6972b106 .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-selinux-root 2021/07/31 03:22 upstream 764a5bc89b12 6c236867 .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-selinux-root 2021/07/17 18:22 upstream d980cc0620ae f115ae98 .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-selinux-root 2021/07/08 11:02 upstream 3dbdb38e2869 95793bce .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-root 2021/06/11 04:16 upstream f09eacca59d2 1ba81399 .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2021/06/02 02:58 upstream c2131f7e73c9 032639db .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-root 2021/06/01 16:41 upstream c2131f7e73c9 032639db .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2021/05/30 22:06 upstream b90e90f40b4f 325a8dab .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2021/05/29 11:03 upstream 5ff2756afde0 858ea628 .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-root 2021/05/26 15:08 upstream ad9f25d33860 54f0bcf1 .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2021/03/30 07:15 upstream 1e43c377a79f 6a81331a .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-root 2021/03/29 06:43 upstream 81b1d39fd39a a8529b82 .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-selinux-root 2021/02/13 14:38 upstream c6d8570e4d64 98682e5e .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce 2021/02/04 20:08 upstream 61556703b610 42b90a7c .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2021/01/30 19:58 upstream 0e9bcda5d286 fc9fd31e .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2022/10/20 06:11 linux-next a72b55bc981b b31320fc .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2022/08/08 00:00 linux-next cb71b93c2dc3 88e3a122 .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2022/04/10 09:18 linux-next ff511c1c68a5 e22c3da3 .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/07/11 06:13 linux-next 92510a7fd93c 8f5a7b8c .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/06/27 13:22 linux-next a1f92694393a 9d2ab5df .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/06/22 19:14 linux-next a1f92694393a aba2b2fb .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/06/21 10:27 linux-next a1f92694393a aba2b2fb .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/06/21 02:22 linux-next a1f92694393a aba2b2fb .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/06/20 04:26 linux-next a1f92694393a aba2b2fb .config log report syz C WARNING in corrupted/usb_submit_urb
ci2-upstream-usb 2021/05/24 01:46 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5cc59c418fde 3c7fef33 .config log report syz C WARNING in corrupted/usb_submit_urb
ci2-upstream-usb 2021/05/23 18:10 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5cc59c418fde 3c7fef33 .config log report syz C WARNING in corrupted/usb_submit_urb
ci2-upstream-usb 2021/05/23 11:15 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5cc59c418fde 3c7fef33 .config log report syz C WARNING in corrupted/usb_submit_urb
ci2-upstream-usb 2021/05/23 07:53 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5cc59c418fde 3c7fef33 .config log report syz C WARNING in corrupted/usb_submit_urb
ci2-upstream-usb 2021/05/23 04:39 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5cc59c418fde 3c7fef33 .config log report syz C WARNING in corrupted/usb_submit_urb
ci2-upstream-usb 2021/05/22 19:52 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5cc59c418fde 3c7fef33 .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/03/29 18:39 linux-next 931294922e65 a8529b82 .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/03/05 14:03 linux-next 4641b32307b3 9d751681 .config log report syz C WARNING in corrupted/usb_submit_urb
ci-upstream-kasan-gce 2020/12/08 22:27 upstream cd796ed33450 a7f7f4a4 .config log report syz C
ci-upstream-kasan-gce 2020/11/20 04:24 upstream 3494d58865ad 0767f13f .config log report syz C
ci-upstream-kasan-gce-386 2020/11/26 10:11 upstream fa02fcd94b0c 2f1cec62 .config log report syz C
ci2-upstream-usb 2020/12/14 02:24 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a256e24021bf 8f160dd5 .config log report syz C
ci2-upstream-usb 2020/12/13 05:25 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a256e24021bf bca53db9 .config log report syz C
ci2-upstream-usb 2020/12/10 03:13 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 8010622c86ca c090b4da .config log report syz C
ci2-upstream-usb 2020/12/08 09:53 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 08a02f954b0d 9af51e31 .config log report syz C
* Struck through repros no longer work on HEAD.