WARNING in smsusb_start_streaming

Status: auto-obsoleted due to no activity on 2024/12/24 15:22
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+f015a8839836ec50ece7@syzkaller.appspotmail.com
First crash: 1121d, last: 1121d
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2023/07/17 linux-5.15.y (ToT) d54cfc420586 C [report] WARNING in smsusb_start_streaming
2023/07/17 upstream (ToT) fdf0eaf11452 C Didn't crash
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 WARNING in smsusb_start_streaming -1 syz, C done 1 1119d 1119d 3/3 fixed on 2023/09/27 12:10
upstream WARNING in smsusb_start_streaming usb media -1 syz, C done done 4 1130d 1130d 0/29 auto-obsoleted due to no activity on 2023/10/15 16:00
▶ ▼ Last patch testing requests (2)
Created Duration User Patch Repo Result
2024/12/24 15:05 16m retest repro linux-5.15.y OK log
2024/10/14 23:19 0m retest repro linux-5.15.y error
▶ ▼ Fix bisection attempts (6)
Created Duration User Patch Repo Result
2024/09/25 15:46 1m fix candidate upstream error job log
2024/07/05 16:40 4m fix candidate upstream error job log
2024/03/28 20:39 1m fix candidate upstream error job log
2024/01/05 07:59 0m fix candidate upstream error job log
2023/11/23 23:07 0m fix candidate upstream error job log
2023/09/02 23:28 0m fix candidate upstream error job log

Sample crash report:
smsusb:smsusb_probe: board id=7, interface number 147
smsusb:smsusb_probe: board id=7, interface number 0
smsusb:siano_media_device_register: media controller created
smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed
------------[ cut here ]------------
WARNING: CPU: 0 PID: 13 at kernel/workqueue.c:3084 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 0 PID: 13 Comm: kworker/0:1 Not tainted 5.15.120-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
Workqueue: usb_hub_wq hub_event
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __flush_work+0x1b4/0x1c0
lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3084
sp : ffff8000189365a0
x29: ffff8000189366d0 x28: 0000000000000000 x27: ffff800018936808
x26: 0000000000000001 x25: 1fffe0001827b81d x24: dfff800000000000
x23: ffff700003126cb4 x22: ffff0000c13dc100 x21: ffff8000189365c0
x20: 0000000000000001 x19: ffff0000c13dc0e8 x18: ffff8000189364a0
x17: ff80800008335ea8 x16: ffff8000082ea770 x15: 000000000000e09a
x14: 00000000f351f728 x13: ffffffffffffffff x12: 0000000000000000
x11: ff80800008208330 x10: 0000000000000000 x9 : ffff800008208330
x8 : ffff0000c0948000 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 __flush_work+0x1b4/0x1c0
 __cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3178
 cancel_work_sync+0x24/0x38 kernel/workqueue.c:3214
 smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
 smsusb_start_streaming+0x3a0/0x424 drivers/media/usb/siano/smsusb.c:199
 smsusb_init_device drivers/media/usb/siano/smsusb.c:476 [inline]
 smsusb_probe+0x1378/0x1a0c drivers/media/usb/siano/smsusb.c:567
 usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396
 really_probe+0x26c/0xaec drivers/base/dd.c:595
 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:755
 driver_probe_device+0x78/0x34c drivers/base/dd.c:785
 __device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:907
 bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
 __device_attach+0x2f0/0x480 drivers/base/dd.c:979
 device_initial_probe+0x24/0x34 drivers/base/dd.c:1028
 bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
 device_add+0xae0/0xef4 drivers/base/core.c:3394
 usb_set_configuration+0x15e0/0x1b60 drivers/usb/core/message.c:2170
 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
 usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293
 really_probe+0x26c/0xaec drivers/base/dd.c:595
 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:755
 driver_probe_device+0x78/0x34c drivers/base/dd.c:785
 __device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:907
 bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
 __device_attach+0x2f0/0x480 drivers/base/dd.c:979
 device_initial_probe+0x24/0x34 drivers/base/dd.c:1028
 bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
 device_add+0xae0/0xef4 drivers/base/core.c:3394
 usb_new_device+0x8fc/0x1448 drivers/usb/core/hub.c:2568
 hub_port_connect drivers/usb/core/hub.c:5358 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5502 [inline]
 port_event drivers/usb/core/hub.c:5648 [inline]
 hub_event+0x22e4/0x48c4 drivers/usb/core/hub.c:5730
 process_one_work+0x790/0x11b8 kernel/workqueue.c:2307
 worker_thread+0x910/0x1034 kernel/workqueue.c:2454
 kthread+0x37c/0x45c kernel/kthread.c:319
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870
irq event stamp: 45366
hardirqs last  enabled at (45365): [<ffff800008208728>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3171
hardirqs last disabled at (45366): [<ffff800011957088>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:387
softirqs last  enabled at (42620): [<ffff800008020ccc>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last  enabled at (42620): [<ffff800008020ccc>] __do_softirq+0xb5c/0xe20 kernel/softirq.c:587
softirqs last disabled at (42569): [<ffff8000081b573c>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (42569): [<ffff8000081b573c>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (42569): [<ffff8000081b573c>] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636
---[ end trace cca84395badfdf62 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 13 at kernel/workqueue.c:3084 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 0 PID: 13 Comm: kworker/0:1 Tainted: G        W         5.15.120-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
Workqueue: usb_hub_wq hub_event
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __flush_work+0x1b4/0x1c0
lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3084
sp : ffff8000189365a0
x29: ffff8000189366d0 x28: 0000000000000000 x27: ffff800018936808
x26: 0000000000000001 x25: 1fffe0001827b841 x24: dfff800000000000
x23: ffff700003126cb4 x22: ffff0000c13dc220 x21: ffff8000189365c0
x20: 0000000000000001 x19: ffff0000c13dc208 x18: ffff8000189364a0
x17: ff80800008335ea8 x16: ffff8000082ea770 x15: 000000000000e09a
x14: 1ffff0000291e06a x13: ffffffffffffffff x12: 0000000000000000
x11: ff80800008208330 x10: 0000000000000000 x9 : ffff800008208330
x8 : ffff0000c0948000 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 __flush_work+0x1b4/0x1c0
 __cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3178
 cancel_work_sync+0x24/0x38 kernel/workqueue.c:3214
 smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
 smsusb_start_streaming+0x3a0/0x424 drivers/media/usb/siano/smsusb.c:199
 smsusb_init_device drivers/media/usb/siano/smsusb.c:476 [inline]
 smsusb_probe+0x1378/0x1a0c drivers/media/usb/siano/smsusb.c:567
 usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396
 really_probe+0x26c/0xaec drivers/base/dd.c:595
 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:755
 driver_probe_device+0x78/0x34c drivers/base/dd.c:785
 __device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:907
 bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
 __device_attach+0x2f0/0x480 drivers/base/dd.c:979
 device_initial_probe+0x24/0x34 drivers/base/dd.c:1028
 bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
 device_add+0xae0/0xef4 drivers/base/core.c:3394
 usb_set_configuration+0x15e0/0x1b60 drivers/usb/core/message.c:2170
 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
 usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293
 really_probe+0x26c/0xaec drivers/base/dd.c:595
 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:755
 driver_probe_device+0x78/0x34c drivers/base/dd.c:785
 __device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:907
 bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
 __device_attach+0x2f0/0x480 drivers/base/dd.c:979
 device_initial_probe+0x24/0x34 drivers/base/dd.c:1028
 bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
 device_add+0xae0/0xef4 drivers/base/core.c:3394
 usb_new_device+0x8fc/0x1448 drivers/usb/core/hub.c:2568
 hub_port_connect drivers/usb/core/hub.c:5358 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5502 [inline]
 port_event drivers/usb/core/hub.c:5648 [inline]
 hub_event+0x22e4/0x48c4 drivers/usb/core/hub.c:5730
 process_one_work+0x790/0x11b8 kernel/workqueue.c:2307
 worker_thread+0x910/0x1034 kernel/workqueue.c:2454
 kthread+0x37c/0x45c kernel/kthread.c:319
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870
irq event stamp: 45440
hardirqs last  enabled at (45439): [<ffff800008208728>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3171
hardirqs last disabled at (45440): [<ffff800011957088>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:387
softirqs last  enabled at (45428): [<ffff800008020ccc>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last  enabled at (45428): [<ffff800008020ccc>] __do_softirq+0xb5c/0xe20 kernel/softirq.c:587
softirqs last disabled at (45369): [<ffff8000081b573c>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (45369): [<ffff8000081b573c>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (45369): [<ffff8000081b573c>] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636
---[ end trace cca84395badfdf63 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 13 at kernel/workqueue.c:3084 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 0 PID: 13 Comm: kworker/0:1 Tainted: G        W         5.15.120-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
Workqueue: usb_hub_wq hub_event
pstate: 80400005 (Nzcv dai

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/07/16 23:43 linux-5.15.y d54cfc420586 35d9ecc5 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in smsusb_start_streaming
* Struck through repros no longer work on HEAD.