[v6.1] WARNING in smsusb_term_device
1 view
Skip to first unread message
syzbot
Mar 19, 2023, 6:45:46 AM3/19/23
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 7eaef76fbc46 Linux 6.1.20
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=166162d6c80000
kernel config: https://syzkaller.appspot.com/x/.config?x=28c36fe4d02f8c88
dashboard link: https://syzkaller.appspot.com/bug?extid=6889aaa7831fa89fdbe3
compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/610a00ba4375/disk-7eaef76f.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/57c1310f9a30/vmlinux-7eaef76f.xz
kernel image: https://storage.googleapis.com/syzbot-assets/81999f717d3b/bzImage-7eaef76f.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+6889aa...@syzkaller.appspotmail.com
smsusb:smsusb_probe: board id=8, interface number 0
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3731 at kernel/workqueue.c:3066 __flush_work+0x196/0x1a0
Modules linked in:
CPU: 1 PID: 3731 Comm: kworker/1:8 Not tainted 6.1.20-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: usb_hub_wq hub_event
RIP: 0010:__flush_work+0x196/0x1a0 kernel/workqueue.c:3066
Code: 00 00 00 48 3b 8c 24 20 01 00 00 75 21 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 23 ab 30 00 0f 0b eb ab e8 1a ab 30 00 <0f> 0b eb a2 e8 f1 97 30 09 90 53 48 89 fb e8 07 ab 30 00 48 89 df
RSP: 0018:ffffc9000438e880 EFLAGS: 00010287
RAX: ffffffff8159b606 RBX: ffff88823bcf4100 RCX: 0000000000040000
RDX: ffffc900142b0000 RSI: 000000000001ffb1 RDI: 000000000001ffb2
RBP: ffffc9000438e9f0 R08: dffffc0000000000 R09: ffffc9000438e8a0
R10: 0000000000000001 R11: dffffc0000000001 R12: ffff88823bcf40e8
R13: dffffc0000000000 R14: 1ffff92000871d10 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000209be030 CR3: 00000000750a0000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
__cancel_work_timer+0x519/0x6a0 kernel/workqueue.c:3160
smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_term_device+0xba/0x240 drivers/media/usb/siano/smsusb.c:344
smsusb_init_device drivers/media/usb/siano/smsusb.c:419 [inline]
smsusb_probe+0xfed/0x20a0 drivers/media/usb/siano/smsusb.c:567
usb_probe_interface+0x5c0/0xaf0 drivers/usb/core/driver.c:396
really_probe+0x2ab/0xcb0 drivers/base/dd.c:639
__driver_probe_device+0x1c3/0x3f0 drivers/base/dd.c:778
driver_probe_device+0x50/0x420 drivers/base/dd.c:808
__device_attach_driver+0x2cf/0x510 drivers/base/dd.c:936
bus_for_each_drv+0x183/0x200 drivers/base/bus.c:427
__device_attach+0x359/0x570 drivers/base/dd.c:1008
bus_probe_device+0xba/0x1e0 drivers/base/bus.c:487
device_add+0xb48/0xfd0 drivers/base/core.c:3664
usb_set_configuration+0x19dd/0x2020 drivers/usb/core/message.c:2170
usb_generic_driver_probe+0x84/0x140 drivers/usb/core/generic.c:238
usb_probe_device+0x130/0x260 drivers/usb/core/driver.c:293
really_probe+0x2ab/0xcb0 drivers/base/dd.c:639
__driver_probe_device+0x1c3/0x3f0 drivers/base/dd.c:778
driver_probe_device+0x50/0x420 drivers/base/dd.c:808
__device_attach_driver+0x2cf/0x510 drivers/base/dd.c:936
bus_for_each_drv+0x183/0x200 drivers/base/bus.c:427
__device_attach+0x359/0x570 drivers/base/dd.c:1008
bus_probe_device+0xba/0x1e0 drivers/base/bus.c:487
device_add+0xb48/0xfd0 drivers/base/core.c:3664
usb_new_device+0xbdd/0x18e0 drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x2d4d/0x57b0 drivers/usb/core/hub.c:5737
process_one_work+0x909/0x1380 kernel/workqueue.c:2289
worker_thread+0xa5f/0x1210 kernel/workqueue.c:2436
kthread+0x268/0x300 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
</TASK>
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: 7eaef76fbc46 Linux 6.1.20
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=166162d6c80000
kernel config: https://syzkaller.appspot.com/x/.config?x=28c36fe4d02f8c88
dashboard link: https://syzkaller.appspot.com/bug?extid=6889aaa7831fa89fdbe3
compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/610a00ba4375/disk-7eaef76f.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/57c1310f9a30/vmlinux-7eaef76f.xz
kernel image: https://storage.googleapis.com/syzbot-assets/81999f717d3b/bzImage-7eaef76f.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+6889aa...@syzkaller.appspotmail.com
smsusb:smsusb_probe: board id=8, interface number 0
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3731 at kernel/workqueue.c:3066 __flush_work+0x196/0x1a0
Modules linked in:
CPU: 1 PID: 3731 Comm: kworker/1:8 Not tainted 6.1.20-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: usb_hub_wq hub_event
RIP: 0010:__flush_work+0x196/0x1a0 kernel/workqueue.c:3066
Code: 00 00 00 48 3b 8c 24 20 01 00 00 75 21 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 23 ab 30 00 0f 0b eb ab e8 1a ab 30 00 <0f> 0b eb a2 e8 f1 97 30 09 90 53 48 89 fb e8 07 ab 30 00 48 89 df
RSP: 0018:ffffc9000438e880 EFLAGS: 00010287
RAX: ffffffff8159b606 RBX: ffff88823bcf4100 RCX: 0000000000040000
RDX: ffffc900142b0000 RSI: 000000000001ffb1 RDI: 000000000001ffb2
RBP: ffffc9000438e9f0 R08: dffffc0000000000 R09: ffffc9000438e8a0
R10: 0000000000000001 R11: dffffc0000000001 R12: ffff88823bcf40e8
R13: dffffc0000000000 R14: 1ffff92000871d10 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000209be030 CR3: 00000000750a0000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
__cancel_work_timer+0x519/0x6a0 kernel/workqueue.c:3160
smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_term_device+0xba/0x240 drivers/media/usb/siano/smsusb.c:344
smsusb_init_device drivers/media/usb/siano/smsusb.c:419 [inline]
smsusb_probe+0xfed/0x20a0 drivers/media/usb/siano/smsusb.c:567
usb_probe_interface+0x5c0/0xaf0 drivers/usb/core/driver.c:396
really_probe+0x2ab/0xcb0 drivers/base/dd.c:639
__driver_probe_device+0x1c3/0x3f0 drivers/base/dd.c:778
driver_probe_device+0x50/0x420 drivers/base/dd.c:808
__device_attach_driver+0x2cf/0x510 drivers/base/dd.c:936
bus_for_each_drv+0x183/0x200 drivers/base/bus.c:427
__device_attach+0x359/0x570 drivers/base/dd.c:1008
bus_probe_device+0xba/0x1e0 drivers/base/bus.c:487
device_add+0xb48/0xfd0 drivers/base/core.c:3664
usb_set_configuration+0x19dd/0x2020 drivers/usb/core/message.c:2170
usb_generic_driver_probe+0x84/0x140 drivers/usb/core/generic.c:238
usb_probe_device+0x130/0x260 drivers/usb/core/driver.c:293
really_probe+0x2ab/0xcb0 drivers/base/dd.c:639
__driver_probe_device+0x1c3/0x3f0 drivers/base/dd.c:778
driver_probe_device+0x50/0x420 drivers/base/dd.c:808
__device_attach_driver+0x2cf/0x510 drivers/base/dd.c:936
bus_for_each_drv+0x183/0x200 drivers/base/bus.c:427
__device_attach+0x359/0x570 drivers/base/dd.c:1008
bus_probe_device+0xba/0x1e0 drivers/base/bus.c:487
device_add+0xb48/0xfd0 drivers/base/core.c:3664
usb_new_device+0xbdd/0x18e0 drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x2d4d/0x57b0 drivers/usb/core/hub.c:5737
process_one_work+0x909/0x1380 kernel/workqueue.c:2289
worker_thread+0xa5f/0x1210 kernel/workqueue.c:2436
kthread+0x268/0x300 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
</TASK>
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Mar 19, 2023, 6:48:52 AM3/19/23
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 8020ae3c051d Linux 5.15.103
syzbot found the following issue on:
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=13bef8f2c80000
kernel config: https://syzkaller.appspot.com/x/.config?x=d4215fb4040f8f8d
dashboard link: https://syzkaller.appspot.com/bug?extid=b8eb472024cb0b0ebf77
compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/857e17de0f0a/disk-8020ae3c.raw.xz
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
vmlinux: https://storage.googleapis.com/syzbot-assets/9efc49fcd441/vmlinux-8020ae3c.xz
kernel image: https://storage.googleapis.com/syzbot-assets/f14c38b6bfa7/bzImage-8020ae3c.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
smsusb:smsusb_probe: board id=8, interface number 0
------------[ cut here ]------------
Modules linked in:
CPU: 1 PID: 1068 Comm: kworker/1:2 Not tainted 5.15.103-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: usb_hub_wq hub_event
RIP: 0010:__flush_work+0x196/0x1a0 kernel/workqueue.c:3083
Workqueue: usb_hub_wq hub_event
Code: 00 00 00 48 3b 8c 24 20 01 00 00 75 21 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 43 79 2d 00 0f 0b eb ab e8 3a 79 2d 00 <0f> 0b eb a2 e8 41 d9 cf 08 90 53 48 89 fb e8 27 79 2d 00 48 89 df
RSP: 0018:ffffc90004bce880 EFLAGS: 00010246
RAX: ffffffff8152ff96 RBX: ffff888081878100 RCX: 0000000000040000
RDX: ffffc9000f161000 RSI: 000000000003ffff RDI: 0000000000040000
RBP: ffffc90004bce9f0 R08: dffffc0000000000 R09: ffffc90004bce8a0
R10: 0000000000000001 R11: dffffc0000000001 R12: ffff8880818780e8
R13: dffffc0000000000 R14: 1ffff92000979d10 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff4c4044000 CR3: 000000003e837000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
__cancel_work_timer+0x519/0x6a0 kernel/workqueue.c:3177
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_term_device+0xba/0x240 drivers/media/usb/siano/smsusb.c:344
smsusb_init_device drivers/media/usb/siano/smsusb.c:419 [inline]
smsusb_probe+0xfed/0x20a0 drivers/media/usb/siano/smsusb.c:567
usb_probe_interface+0x5c0/0xaf0 drivers/usb/core/driver.c:396
really_probe+0x24e/0xb60 drivers/base/dd.c:595
smsusb_term_device+0xba/0x240 drivers/media/usb/siano/smsusb.c:344
smsusb_init_device drivers/media/usb/siano/smsusb.c:419 [inline]
smsusb_probe+0xfed/0x20a0 drivers/media/usb/siano/smsusb.c:567
usb_probe_interface+0x5c0/0xaf0 drivers/usb/core/driver.c:396
__driver_probe_device+0x1c3/0x3f0 drivers/base/dd.c:750
driver_probe_device+0x50/0x420 drivers/base/dd.c:780
__device_attach_driver+0x2b9/0x500 drivers/base/dd.c:902
bus_for_each_drv+0x183/0x200 drivers/base/bus.c:427
__device_attach+0x359/0x570 drivers/base/dd.c:974
bus_probe_device+0xba/0x1e0 drivers/base/bus.c:487
device_add+0xb48/0xfd0 drivers/base/core.c:3394
usb_set_configuration+0x19dd/0x2020 drivers/usb/core/message.c:2170
usb_generic_driver_probe+0x84/0x140 drivers/usb/core/generic.c:238
usb_probe_device+0x130/0x260 drivers/usb/core/driver.c:293
really_probe+0x24e/0xb60 drivers/base/dd.c:595
usb_generic_driver_probe+0x84/0x140 drivers/usb/core/generic.c:238
usb_probe_device+0x130/0x260 drivers/usb/core/driver.c:293
__driver_probe_device+0x1c3/0x3f0 drivers/base/dd.c:750
driver_probe_device+0x50/0x420 drivers/base/dd.c:780
__device_attach_driver+0x2b9/0x500 drivers/base/dd.c:902
bus_for_each_drv+0x183/0x200 drivers/base/bus.c:427
__device_attach+0x359/0x570 drivers/base/dd.c:974
bus_probe_device+0xba/0x1e0 drivers/base/bus.c:487
device_add+0xb48/0xfd0 drivers/base/core.c:3394
usb_new_device+0xc17/0x18d0 drivers/usb/core/hub.c:2568
hub_port_connect drivers/usb/core/hub.c:5358 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5502 [inline]
port_event drivers/usb/core/hub.c:5648 [inline]
hub_event+0x2dd8/0x56d0 drivers/usb/core/hub.c:5730
process_one_work+0x90d/0x1270 kernel/workqueue.c:2306
worker_thread+0xaca/0x1280 kernel/workqueue.c:2453
kthread+0x3f6/0x4f0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
syzbot
Mar 19, 2023, 10:59:17 AM3/19/23
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: 8020ae3c051d Linux 5.15.103
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=1202df26c80000
kernel config: https://syzkaller.appspot.com/x/.config?x=f95b212e0ccdd4d1
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=14d47281c80000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=108481bac80000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/6153dfa8dcc0/disk-8020ae3c.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/2093d52db59f/vmlinux-8020ae3c.xz
kernel image: https://storage.googleapis.com/syzbot-assets/85041d0bd356/Image-8020ae3c.gz.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+b8eb47...@syzkaller.appspotmail.com
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: config 0 descriptor??
Modules linked in:
CPU: 1 PID: 3550 Comm: kworker/1:3 Not tainted 5.15.103-syzkaller #0
pc : __flush_work+0x1b4/0x1c0
lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3083
sp : ffff80001f3165e0
x29: ffff80001f316710 x28: 0000000000000000 x27: ffff80001f316848
x26: 0000000000000001 x25: 1fffe00019d5fc1d x24: dfff800000000000
x23: ffff700003e62cbc x22: ffff0000ceafe100 x21: ffff80001f316600
x20: 0000000000000001 x19: ffff0000ceafe0e8 x18: 0000000000000001
x17: ff808000083386a0 x16: ffff8000082eebe4 x15: ffff80000bfdb9d4
x14: ffff80000bfe5fb0 x13: ffffffffffffffff x12: 0000000000000000
x11: ff8080000820a930 x10: 0000000000000000 x9 : ffff80000820a930
x8 : ffff0000d2dc5040 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0
__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3177
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3213
smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_term_device+0x98/0x1cc drivers/media/usb/siano/smsusb.c:344
smsusb_init_device drivers/media/usb/siano/smsusb.c:419 [inline]
smsusb_probe+0xcb8/0x1a0c drivers/media/usb/siano/smsusb.c:567
usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396
really_probe+0x26c/0xaec drivers/base/dd.c:595
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:750
driver_probe_device+0x78/0x34c drivers/base/dd.c:780
__device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:902
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:974
device_initial_probe+0x24/0x34 drivers/base/dd.c:1023
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3394
usb_set_configuration+0x15e0/0x1b60 drivers/usb/core/message.c:2170
usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293
really_probe+0x26c/0xaec drivers/base/dd.c:595
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:750
driver_probe_device+0x78/0x34c drivers/base/dd.c:780
__device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:902
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:974
device_initial_probe+0x24/0x34 drivers/base/dd.c:1023
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3394
usb_new_device+0x8fc/0x1448 drivers/usb/core/hub.c:2568
process_one_work+0x84c/0x14b8 kernel/workqueue.c:2306
worker_thread+0x910/0x1034 kernel/workqueue.c:2453
kthread+0x37c/0x45c kernel/kthread.c:319
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870
irq event stamp: 18358
hardirqs last enabled at (18357): [<ffff80000820ad28>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3170
hardirqs last disabled at (18358): [<ffff800011a00bc8>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:387
softirqs last enabled at (17462): [<ffff800008020e34>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last enabled at (17462): [<ffff800008020e34>] __do_softirq+0xcc4/0xf60 kernel/softirq.c:587
softirqs last disabled at (17457): [<ffff8000081b7b48>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (17457): [<ffff8000081b7b48>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (17457): [<ffff8000081b7b48>] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636
---[ end trace 0b07e0f9548b998c ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3550 at kernel/workqueue.c:3083 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 3550 Comm: kworker/1:3 Tainted: G W 5.15.103-syzkaller #0
pc : __flush_work+0x1b4/0x1c0
lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3083
sp : ffff80001f3165e0
x29: ffff80001f316710 x28: 0000000000000000 x27: ffff80001f316848
x26: 0000000000000001 x25: 1fffe00019d5fc41 x24: dfff800000000000
x23: ffff700003e62cbc x22: ffff0000ceafe220 x21: ffff80001f316600
x20: 0000000000000001 x19: ffff0000ceafe208 x18: 0000000000000001
x17: ff808000083386a0 x16: ffff8000082eebe4 x15: ffff80000bfdb9d4
x14: ffff80000bfe5fb0 x13: ffffffffffffffff x12: 0000000000000000
x11: ff8080000820a930 x10: 0000000000000000 x9 : ffff80000820a930
x8 : ffff0000d2dc5040 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0
__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3177
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3213
smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_term_device+0x98/0x1cc drivers/media/usb/siano/smsusb.c:344
smsusb_init_device drivers/media/usb/siano/smsusb.c:419 [inline]
smsusb_probe+0xcb8/0x1a0c drivers/media/usb/siano/smsusb.c:567
usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396
really_probe+0x26c/0xaec drivers/base/dd.c:595
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:750
driver_probe_device+0x78/0x34c drivers/base/dd.c:780
__device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:902
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:974
device_initial_probe+0x24/0x34 drivers/base/dd.c:1023
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3394
usb_set_configuration+0x15e0/0x1b60 drivers/usb/core/message.c:2170
usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293
really_probe+0x26c/0xaec drivers/base/dd.c:595
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:750
driver_probe_device+0x78/0x34c drivers/base/dd.c:780
__device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:902
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:974
device_initial_probe+0x24/0x34 drivers/base/dd.c:1023
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3394
usb_new_device+0x8fc/0x1448 drivers/usb/core/hub.c:2568
process_one_work+0x84c/0x14b8 kernel/workqueue.c:2306
worker_thread+0x910/0x1034 kernel/workqueue.c:2453
kthread+0x37c/0x45c kernel/kthread.c:319
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870
irq event stamp: 18374
hardirqs last enabled at (18373): [<ffff80000820ad28>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3170
hardirqs last disabled at (18374): [<ffff800011a00bc8>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:387
softirqs last enabled at (18370): [<ffff800008020e34>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last enabled at (18370): [<ffff800008020e34>] __do_softirq+0xcc4/0xf60 kernel/softirq.c:587
softirqs last disabled at (18361): [<ffff8000081b7b48>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (18361): [<ffff8000081b7b48>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (18361): [<ffff8000081b7b48>] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636
---[ end trace 0b07e0f9548b998d ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3550 at kernel/workqueue.c:3083 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 3550 Comm: kworker/1:3 Tainted: G W 5.15.103-syzkaller #0
pc : __flush_work+0x1b4/0x1c0
lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3083
sp : ffff80001f3165e0
x29: ffff80001f316710 x28: 0000000000000000 x27: ffff80001f316848
x26: 0000000000000001 x25: 1fffe00019d5fc65 x24: dfff800000000000
x23: ffff700003e62cbc x22: ffff0000ceafe340 x21: ffff80001f316600
x20: 0000000000000001 x19: ffff0000ceafe328 x18: 0000000000000001
x17: ff808000083386a0 x16: ffff8000082eebe4 x15: ffff80000bfdb9d4
x14: ffff80000bfe5fb0 x13: ffffffffffffffff x12: 0000000000000000
x11: ff8080000820a930 x10: 0000000000000000 x9 : ffff80000820a930
x8 : ffff0000d2dc5040 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0
__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3177
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3213
smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_term_device+0x98/0x1cc drivers/media/usb/siano/smsusb.c:344
smsusb_init_device drivers/media/usb/siano/smsusb.c:419 [inline]
smsusb_probe+0xcb8/0x1a0c drivers/media/usb/siano/smsusb.c:567
usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396
really_probe+0x26c/0xaec drivers/base/dd.c:595
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:750
driver_probe_device+0x78/0x34c drivers/base/dd.c:780
__device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:902
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:974
device_initial_probe+0x24/0x34 drivers/base/dd.c:1023
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3394
usb_set_configuration+0x15e0/0x1b60 drivers/usb/core/message.c:2170
usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293
really_probe+0x26c/0xaec drivers/base/dd.c:595
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:750
driver_probe_device+0x78/0x34c drivers/base/dd.c:780
__device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:902
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:974
device_initial_probe+0x24/0x34 drivers/base/dd.c:1023
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3394
usb_new_device+0x8fc/0x1448 drivers/usb/core/hub.c:2568
process_one_work+0x84c/0x14b8 kernel/workqueue.c:2306
worker_thread+0x910/0x1034 kernel/workqueue.c:2453
kthread+0x37c/0x45c kernel/kthread.c:319
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870
irq event stamp: 18396
hardirqs last enabled at (18395): [<ffff80000820ad28>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3170
hardirqs last disabled at (18396): [<ffff800011a00bc8>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:387
softirqs last enabled at (18388): [<ffff800008020e34>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last enabled at (18388): [<ffff800008020e34>] __do_softirq+0xcc4/0xf60 kernel/softirq.c:587
softirqs last disabled at (18377): [<ffff8000081b7b48>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (18377): [<ffff8000081b7b48>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (18377): [<ffff8000081b7b48>] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636
---[ end trace 0b07e0f9548b998e ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3550
HEAD commit: 8020ae3c051d Linux 5.15.103
git tree: linux-5.15.y
kernel config: https://syzkaller.appspot.com/x/.config?x=f95b212e0ccdd4d1
dashboard link: https://syzkaller.appspot.com/bug?extid=b8eb472024cb0b0ebf77
compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2
userspace arch: arm64
compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=14d47281c80000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=108481bac80000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/6153dfa8dcc0/disk-8020ae3c.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/2093d52db59f/vmlinux-8020ae3c.xz
kernel image: https://storage.googleapis.com/syzbot-assets/85041d0bd356/Image-8020ae3c.gz.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+b8eb47...@syzkaller.appspotmail.com
usb 1-1: SerialNumber: syz
usb 1-1: config 0 descriptor??
smsusb:smsusb_probe: board id=8, interface number 0
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3550 at kernel/workqueue.c:3083 __flush_work+0x1b4/0x1c0
------------[ cut here ]------------
Modules linked in:
CPU: 1 PID: 3550 Comm: kworker/1:3 Not tainted 5.15.103-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: usb_hub_wq hub_event
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
Workqueue: usb_hub_wq hub_event
pc : __flush_work+0x1b4/0x1c0
lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3083
sp : ffff80001f3165e0
x29: ffff80001f316710 x28: 0000000000000000 x27: ffff80001f316848
x26: 0000000000000001 x25: 1fffe00019d5fc1d x24: dfff800000000000
x23: ffff700003e62cbc x22: ffff0000ceafe100 x21: ffff80001f316600
x20: 0000000000000001 x19: ffff0000ceafe0e8 x18: 0000000000000001
x17: ff808000083386a0 x16: ffff8000082eebe4 x15: ffff80000bfdb9d4
x14: ffff80000bfe5fb0 x13: ffffffffffffffff x12: 0000000000000000
x11: ff8080000820a930 x10: 0000000000000000 x9 : ffff80000820a930
x8 : ffff0000d2dc5040 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0
__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3177
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3213
smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_term_device+0x98/0x1cc drivers/media/usb/siano/smsusb.c:344
smsusb_init_device drivers/media/usb/siano/smsusb.c:419 [inline]
smsusb_probe+0xcb8/0x1a0c drivers/media/usb/siano/smsusb.c:567
usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396
really_probe+0x26c/0xaec drivers/base/dd.c:595
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:750
driver_probe_device+0x78/0x34c drivers/base/dd.c:780
__device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:902
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:974
device_initial_probe+0x24/0x34 drivers/base/dd.c:1023
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3394
usb_set_configuration+0x15e0/0x1b60 drivers/usb/core/message.c:2170
usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293
really_probe+0x26c/0xaec drivers/base/dd.c:595
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:750
driver_probe_device+0x78/0x34c drivers/base/dd.c:780
__device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:902
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:974
device_initial_probe+0x24/0x34 drivers/base/dd.c:1023
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3394
usb_new_device+0x8fc/0x1448 drivers/usb/core/hub.c:2568
hub_port_connect drivers/usb/core/hub.c:5358 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5502 [inline]
port_event drivers/usb/core/hub.c:5648 [inline]
hub_event+0x22e4/0x48c4 drivers/usb/core/hub.c:5730
hub_port_connect_change drivers/usb/core/hub.c:5502 [inline]
port_event drivers/usb/core/hub.c:5648 [inline]
process_one_work+0x84c/0x14b8 kernel/workqueue.c:2306
worker_thread+0x910/0x1034 kernel/workqueue.c:2453
kthread+0x37c/0x45c kernel/kthread.c:319
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870
irq event stamp: 18358
hardirqs last enabled at (18357): [<ffff80000820ad28>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3170
hardirqs last disabled at (18358): [<ffff800011a00bc8>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:387
softirqs last enabled at (17462): [<ffff800008020e34>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last enabled at (17462): [<ffff800008020e34>] __do_softirq+0xcc4/0xf60 kernel/softirq.c:587
softirqs last disabled at (17457): [<ffff8000081b7b48>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (17457): [<ffff8000081b7b48>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (17457): [<ffff8000081b7b48>] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636
---[ end trace 0b07e0f9548b998c ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3550 at kernel/workqueue.c:3083 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 3550 Comm: kworker/1:3 Tainted: G W 5.15.103-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: usb_hub_wq hub_event
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
Workqueue: usb_hub_wq hub_event
pc : __flush_work+0x1b4/0x1c0
lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3083
sp : ffff80001f3165e0
x29: ffff80001f316710 x28: 0000000000000000 x27: ffff80001f316848
x26: 0000000000000001 x25: 1fffe00019d5fc41 x24: dfff800000000000
x23: ffff700003e62cbc x22: ffff0000ceafe220 x21: ffff80001f316600
x20: 0000000000000001 x19: ffff0000ceafe208 x18: 0000000000000001
x17: ff808000083386a0 x16: ffff8000082eebe4 x15: ffff80000bfdb9d4
x14: ffff80000bfe5fb0 x13: ffffffffffffffff x12: 0000000000000000
x11: ff8080000820a930 x10: 0000000000000000 x9 : ffff80000820a930
x8 : ffff0000d2dc5040 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0
__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3177
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3213
smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_term_device+0x98/0x1cc drivers/media/usb/siano/smsusb.c:344
smsusb_init_device drivers/media/usb/siano/smsusb.c:419 [inline]
smsusb_probe+0xcb8/0x1a0c drivers/media/usb/siano/smsusb.c:567
usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396
really_probe+0x26c/0xaec drivers/base/dd.c:595
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:750
driver_probe_device+0x78/0x34c drivers/base/dd.c:780
__device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:902
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:974
device_initial_probe+0x24/0x34 drivers/base/dd.c:1023
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3394
usb_set_configuration+0x15e0/0x1b60 drivers/usb/core/message.c:2170
usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293
really_probe+0x26c/0xaec drivers/base/dd.c:595
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:750
driver_probe_device+0x78/0x34c drivers/base/dd.c:780
__device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:902
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:974
device_initial_probe+0x24/0x34 drivers/base/dd.c:1023
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3394
usb_new_device+0x8fc/0x1448 drivers/usb/core/hub.c:2568
hub_port_connect drivers/usb/core/hub.c:5358 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5502 [inline]
port_event drivers/usb/core/hub.c:5648 [inline]
hub_event+0x22e4/0x48c4 drivers/usb/core/hub.c:5730
hub_port_connect_change drivers/usb/core/hub.c:5502 [inline]
port_event drivers/usb/core/hub.c:5648 [inline]
process_one_work+0x84c/0x14b8 kernel/workqueue.c:2306
worker_thread+0x910/0x1034 kernel/workqueue.c:2453
kthread+0x37c/0x45c kernel/kthread.c:319
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870
irq event stamp: 18374
hardirqs last enabled at (18373): [<ffff80000820ad28>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3170
hardirqs last disabled at (18374): [<ffff800011a00bc8>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:387
softirqs last enabled at (18370): [<ffff800008020e34>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last enabled at (18370): [<ffff800008020e34>] __do_softirq+0xcc4/0xf60 kernel/softirq.c:587
softirqs last disabled at (18361): [<ffff8000081b7b48>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (18361): [<ffff8000081b7b48>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (18361): [<ffff8000081b7b48>] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636
---[ end trace 0b07e0f9548b998d ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3550 at kernel/workqueue.c:3083 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 3550 Comm: kworker/1:3 Tainted: G W 5.15.103-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: usb_hub_wq hub_event
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
Workqueue: usb_hub_wq hub_event
pc : __flush_work+0x1b4/0x1c0
lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3083
sp : ffff80001f3165e0
x29: ffff80001f316710 x28: 0000000000000000 x27: ffff80001f316848
x26: 0000000000000001 x25: 1fffe00019d5fc65 x24: dfff800000000000
x23: ffff700003e62cbc x22: ffff0000ceafe340 x21: ffff80001f316600
x20: 0000000000000001 x19: ffff0000ceafe328 x18: 0000000000000001
x17: ff808000083386a0 x16: ffff8000082eebe4 x15: ffff80000bfdb9d4
x14: ffff80000bfe5fb0 x13: ffffffffffffffff x12: 0000000000000000
x11: ff8080000820a930 x10: 0000000000000000 x9 : ffff80000820a930
x8 : ffff0000d2dc5040 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0
__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3177
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3213
smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_term_device+0x98/0x1cc drivers/media/usb/siano/smsusb.c:344
smsusb_init_device drivers/media/usb/siano/smsusb.c:419 [inline]
smsusb_probe+0xcb8/0x1a0c drivers/media/usb/siano/smsusb.c:567
usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396
really_probe+0x26c/0xaec drivers/base/dd.c:595
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:750
driver_probe_device+0x78/0x34c drivers/base/dd.c:780
__device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:902
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:974
device_initial_probe+0x24/0x34 drivers/base/dd.c:1023
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3394
usb_set_configuration+0x15e0/0x1b60 drivers/usb/core/message.c:2170
usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293
really_probe+0x26c/0xaec drivers/base/dd.c:595
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:750
driver_probe_device+0x78/0x34c drivers/base/dd.c:780
__device_attach_driver+0x28c/0x4d8 drivers/base/dd.c:902
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:974
device_initial_probe+0x24/0x34 drivers/base/dd.c:1023
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3394
usb_new_device+0x8fc/0x1448 drivers/usb/core/hub.c:2568
hub_port_connect drivers/usb/core/hub.c:5358 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5502 [inline]
port_event drivers/usb/core/hub.c:5648 [inline]
hub_event+0x22e4/0x48c4 drivers/usb/core/hub.c:5730
hub_port_connect_change drivers/usb/core/hub.c:5502 [inline]
port_event drivers/usb/core/hub.c:5648 [inline]
process_one_work+0x84c/0x14b8 kernel/workqueue.c:2306
worker_thread+0x910/0x1034 kernel/workqueue.c:2453
kthread+0x37c/0x45c kernel/kthread.c:319
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870
irq event stamp: 18396
hardirqs last enabled at (18395): [<ffff80000820ad28>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3170
hardirqs last disabled at (18396): [<ffff800011a00bc8>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:387
softirqs last enabled at (18388): [<ffff800008020e34>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last enabled at (18388): [<ffff800008020e34>] __do_softirq+0xcc4/0xf60 kernel/softirq.c:587
softirqs last disabled at (18377): [<ffff8000081b7b48>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (18377): [<ffff8000081b7b48>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (18377): [<ffff8000081b7b48>] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636
---[ end trace 0b07e0f9548b998e ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3550
syzbot
Mar 19, 2023, 9:00:50 PM3/19/23
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: 7eaef76fbc46 Linux 6.1.20
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=175ae69ac80000
kernel config: https://syzkaller.appspot.com/x/.config?x=29ad3fe3c7b61175
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13e474f2c80000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1786b086c80000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/34f95428f5fb/disk-7eaef76f.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/1bdd9b2c390d/vmlinux-7eaef76f.xz
kernel image: https://storage.googleapis.com/syzbot-assets/419140981cfa/Image-7eaef76f.gz.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+6889aa...@syzkaller.appspotmail.com
Modules linked in:
CPU: 1 PID: 3801 Comm: kworker/1:3 Not tainted 6.1.20-syzkaller #0
sp : ffff8000206a65a0
x29: ffff8000206a66d0 x28: 0000000000000000 x27: ffff8000206a6808
x26: 0000000000000001 x25: 1fffe0001b381c1d x24: dfff800000000000
x23: ffff7000040d4cb4 x22: ffff0000d9c0e100 x21: ffff8000206a65c0
x20: 0000000000000001 x19: ffff0000d9c0e0e8 x18: ffff8000206a64c0
x17: 0000000000000000 x16: ffff8000121a8c80 x15: ffff80000c2d9f6c
x14: ffff80000c2e4c48 x13: ffff80000c2ea1a0 x12: 0000000000000005
x11: ff8080000821cf1c x10: 0000000000000000 x9 : ffff80000821cf1c
x8 : ffff0000d59b3680 x7 : 0000000000000000 x6 : 000000000000003f
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3196
smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_term_device+0x98/0x1cc drivers/media/usb/siano/smsusb.c:344
smsusb_init_device drivers/media/usb/siano/smsusb.c:419 [inline]
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:778
driver_probe_device+0x78/0x330 drivers/base/dd.c:808
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:936
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1008
device_initial_probe+0x24/0x34 drivers/base/dd.c:1057
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_set_configuration+0x15c0/0x1b40 drivers/usb/core/message.c:2170
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:778
driver_probe_device+0x78/0x330 drivers/base/dd.c:808
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:936
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1008
device_initial_probe+0x24/0x34 drivers/base/dd.c:1057
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
process_one_work+0x868/0x16f4 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x24c/0x2d4 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 69410
hardirqs last enabled at (69409): [<ffff80000821d314>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (69410): [<ffff8000122560d4>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (68086): [<ffff800008020ee8>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (68086): [<ffff800008020ee8>] __do_softirq+0xd88/0xff4 kernel/softirq.c:600
softirqs last disabled at (68071): [<ffff80000802b598>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3801 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 3801 Comm: kworker/1:3 Tainted: G W 6.1.20-syzkaller #0
sp : ffff8000206a65a0
x29: ffff8000206a66d0 x28: 0000000000000000 x27: ffff8000206a6808
x26: 0000000000000001 x25: 1fffe0001b381c41 x24: dfff800000000000
x23: ffff7000040d4cb4 x22: ffff0000d9c0e220 x21: ffff8000206a65c0
x20: 0000000000000001 x19: ffff0000d9c0e208 x18: ffff8000206a64c0
x17: 0000000000000000 x16: ffff8000121a8c80 x15: ffff80000c2d9f6c
x14: ffff80000c2e4c48 x13: ffff80000c2ea1a0 x12: 0000000000000005
x11: ff8080000821cf1c x10: 0000000000000000 x9 : ffff80000821cf1c
x8 : ffff0000d59b3680 x7 : 0000000000000000 x6 : 000000000000003f
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3196
smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_term_device+0x98/0x1cc drivers/media/usb/siano/smsusb.c:344
smsusb_init_device drivers/media/usb/siano/smsusb.c:419 [inline]
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:778
driver_probe_device+0x78/0x330 drivers/base/dd.c:808
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:936
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1008
device_initial_probe+0x24/0x34 drivers/base/dd.c:1057
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_set_configuration+0x15c0/0x1b40 drivers/usb/core/message.c:2170
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:778
driver_probe_device+0x78/0x330 drivers/base/dd.c:808
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:936
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1008
device_initial_probe+0x24/0x34 drivers/base/dd.c:1057
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
process_one_work+0x868/0x16f4 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x24c/0x2d4 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 69434
hardirqs last enabled at (69433): [<ffff80000821d314>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (69434): [<ffff8000122560d4>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (69430): [<ffff800008020ee8>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (69430): [<ffff800008020ee8>] __do_softirq+0xd88/0xff4 kernel/softirq.c:600
softirqs last disabled at (69413): [<ffff80000802b598>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3801 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 3801 Comm: kworker/1:3 Tainted: G W 6.1.20-syzkaller #0
sp : ffff8000206a65a0
x29: ffff8000206a66d0 x28: 0000000000000000 x27: ffff8000206a6808
x26: 0000000000000001 x25: 1fffe0001b381c65 x24: dfff800000000000
x23: ffff7000040d4cb4 x22: ffff0000d9c0e340 x21: ffff8000206a65c0
x20: 0000000000000001 x19: ffff0000d9c0e328 x18: ffff8000206a64c0
x17: 0000000000000000 x16: ffff8000121a8c80 x15: ffff80000c2d9f6c
x14: ffff80000c2e4c48 x13: ffff80000c2ea1a0 x12: 0000000000000005
x11: ff8080000821cf1c x10: 0000000000000000 x9 : ffff80000821cf1c
x8 : ffff0000d59b3680 x7 : 0000000000000000 x6 : 000000000000003f
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3196
smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_term_device+0x98/0x1cc drivers/media/usb/siano/smsusb.c:344
smsusb_init_device drivers/media/usb/siano/smsusb.c:419 [inline]
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:778
driver_probe_device+0x78/0x330 drivers/base/dd.c:808
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:936
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1008
device_initial_probe+0x24/0x34 drivers/base/dd.c:1057
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_set_configuration+0x15c0/0x1b40 drivers/usb/core/message.c:2170
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:778
driver_probe_device+0x78/0x330 drivers/base/dd.c:808
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:936
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1008
device_initial_probe+0x24/0x34 drivers/base/dd.c:1057
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
process_one_work+0x868/0x16f4 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x24c/0x2d4 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 69460
hardirqs last enabled at (69459): [<ffff80000821d314>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (69460): [<ffff8000122560d4>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (69452): [<ffff800008020ee8>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (69452): [<ffff800008020ee8>] __do_softirq+0xd88/0xff4 kernel/softirq.c:600
softirqs last disabled at (69439): [<ffff80000802b598>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3801 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
HEAD commit: 7eaef76fbc46 Linux 6.1.20
git tree: linux-6.1.y
kernel config: https://syzkaller.appspot.com/x/.config?x=29ad3fe3c7b61175
dashboard link: https://syzkaller.appspot.com/bug?extid=6889aaa7831fa89fdbe3
compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2
userspace arch: arm64
compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13e474f2c80000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1786b086c80000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/34f95428f5fb/disk-7eaef76f.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/1bdd9b2c390d/vmlinux-7eaef76f.xz
kernel image: https://storage.googleapis.com/syzbot-assets/419140981cfa/Image-7eaef76f.gz.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+6889aa...@syzkaller.appspotmail.com
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: config 0 descriptor??
usb 1-1: SerialNumber: syz
usb 1-1: config 0 descriptor??
smsusb:smsusb_probe: board id=8, interface number 0
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3801 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
------------[ cut here ]------------
Modules linked in:
CPU: 1 PID: 3801 Comm: kworker/1:3 Not tainted 6.1.20-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: usb_hub_wq hub_event
Workqueue: usb_hub_wq hub_event
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __flush_work+0x1b4/0x1c0
lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
pc : __flush_work+0x1b4/0x1c0
sp : ffff8000206a65a0
x29: ffff8000206a66d0 x28: 0000000000000000 x27: ffff8000206a6808
x26: 0000000000000001 x25: 1fffe0001b381c1d x24: dfff800000000000
x23: ffff7000040d4cb4 x22: ffff0000d9c0e100 x21: ffff8000206a65c0
x20: 0000000000000001 x19: ffff0000d9c0e0e8 x18: ffff8000206a64c0
x17: 0000000000000000 x16: ffff8000121a8c80 x15: ffff80000c2d9f6c
x14: ffff80000c2e4c48 x13: ffff80000c2ea1a0 x12: 0000000000000005
x11: ff8080000821cf1c x10: 0000000000000000 x9 : ffff80000821cf1c
x8 : ffff0000d59b3680 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0
__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3160
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3196
smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_term_device+0x98/0x1cc drivers/media/usb/siano/smsusb.c:344
smsusb_init_device drivers/media/usb/siano/smsusb.c:419 [inline]
smsusb_probe+0xcb8/0x1a0c drivers/media/usb/siano/smsusb.c:567
usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396
really_probe+0x394/0xacc drivers/base/dd.c:639
usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:778
driver_probe_device+0x78/0x330 drivers/base/dd.c:808
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:936
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1008
device_initial_probe+0x24/0x34 drivers/base/dd.c:1057
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_set_configuration+0x15c0/0x1b40 drivers/usb/core/message.c:2170
usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293
really_probe+0x394/0xacc drivers/base/dd.c:639
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:778
driver_probe_device+0x78/0x330 drivers/base/dd.c:808
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:936
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1008
device_initial_probe+0x24/0x34 drivers/base/dd.c:1057
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
process_one_work+0x868/0x16f4 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x24c/0x2d4 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 69410
hardirqs last enabled at (69409): [<ffff80000821d314>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (69410): [<ffff8000122560d4>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (68086): [<ffff800008020ee8>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (68086): [<ffff800008020ee8>] __do_softirq+0xd88/0xff4 kernel/softirq.c:600
softirqs last disabled at (68071): [<ffff80000802b598>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3801 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 3801 Comm: kworker/1:3 Tainted: G W 6.1.20-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: usb_hub_wq hub_event
Workqueue: usb_hub_wq hub_event
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __flush_work+0x1b4/0x1c0
lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
pc : __flush_work+0x1b4/0x1c0
sp : ffff8000206a65a0
x29: ffff8000206a66d0 x28: 0000000000000000 x27: ffff8000206a6808
x26: 0000000000000001 x25: 1fffe0001b381c41 x24: dfff800000000000
x23: ffff7000040d4cb4 x22: ffff0000d9c0e220 x21: ffff8000206a65c0
x20: 0000000000000001 x19: ffff0000d9c0e208 x18: ffff8000206a64c0
x17: 0000000000000000 x16: ffff8000121a8c80 x15: ffff80000c2d9f6c
x14: ffff80000c2e4c48 x13: ffff80000c2ea1a0 x12: 0000000000000005
x11: ff8080000821cf1c x10: 0000000000000000 x9 : ffff80000821cf1c
x8 : ffff0000d59b3680 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0
__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3160
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3196
smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_term_device+0x98/0x1cc drivers/media/usb/siano/smsusb.c:344
smsusb_init_device drivers/media/usb/siano/smsusb.c:419 [inline]
smsusb_probe+0xcb8/0x1a0c drivers/media/usb/siano/smsusb.c:567
usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396
really_probe+0x394/0xacc drivers/base/dd.c:639
usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:778
driver_probe_device+0x78/0x330 drivers/base/dd.c:808
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:936
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1008
device_initial_probe+0x24/0x34 drivers/base/dd.c:1057
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_set_configuration+0x15c0/0x1b40 drivers/usb/core/message.c:2170
usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293
really_probe+0x394/0xacc drivers/base/dd.c:639
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:778
driver_probe_device+0x78/0x330 drivers/base/dd.c:808
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:936
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1008
device_initial_probe+0x24/0x34 drivers/base/dd.c:1057
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
process_one_work+0x868/0x16f4 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x24c/0x2d4 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 69434
hardirqs last enabled at (69433): [<ffff80000821d314>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (69434): [<ffff8000122560d4>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (69430): [<ffff800008020ee8>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (69430): [<ffff800008020ee8>] __do_softirq+0xd88/0xff4 kernel/softirq.c:600
softirqs last disabled at (69413): [<ffff80000802b598>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3801 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
CPU: 1 PID: 3801 Comm: kworker/1:3 Tainted: G W 6.1.20-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: usb_hub_wq hub_event
Workqueue: usb_hub_wq hub_event
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __flush_work+0x1b4/0x1c0
lr : __flush_work+0x1b0/0x1c0 kernel/workqueue.c:3066
pc : __flush_work+0x1b4/0x1c0
sp : ffff8000206a65a0
x29: ffff8000206a66d0 x28: 0000000000000000 x27: ffff8000206a6808
x26: 0000000000000001 x25: 1fffe0001b381c65 x24: dfff800000000000
x23: ffff7000040d4cb4 x22: ffff0000d9c0e340 x21: ffff8000206a65c0
x20: 0000000000000001 x19: ffff0000d9c0e328 x18: ffff8000206a64c0
x17: 0000000000000000 x16: ffff8000121a8c80 x15: ffff80000c2d9f6c
x14: ffff80000c2e4c48 x13: ffff80000c2ea1a0 x12: 0000000000000005
x11: ff8080000821cf1c x10: 0000000000000000 x9 : ffff80000821cf1c
x8 : ffff0000d59b3680 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0
__cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3160
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
__flush_work+0x1b4/0x1c0
cancel_work_sync+0x24/0x38 kernel/workqueue.c:3196
smsusb_stop_streaming drivers/media/usb/siano/smsusb.c:182 [inline]
smsusb_term_device+0x98/0x1cc drivers/media/usb/siano/smsusb.c:344
smsusb_init_device drivers/media/usb/siano/smsusb.c:419 [inline]
smsusb_probe+0xcb8/0x1a0c drivers/media/usb/siano/smsusb.c:567
usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396
really_probe+0x394/0xacc drivers/base/dd.c:639
usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:778
driver_probe_device+0x78/0x330 drivers/base/dd.c:808
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:936
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1008
device_initial_probe+0x24/0x34 drivers/base/dd.c:1057
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_set_configuration+0x15c0/0x1b40 drivers/usb/core/message.c:2170
usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293
really_probe+0x394/0xacc drivers/base/dd.c:639
usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293
__driver_probe_device+0x1bc/0x3f8 drivers/base/dd.c:778
driver_probe_device+0x78/0x330 drivers/base/dd.c:808
__device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:936
bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427
__device_attach+0x2f0/0x480 drivers/base/dd.c:1008
device_initial_probe+0x24/0x34 drivers/base/dd.c:1057
bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487
device_add+0xae0/0xef4 drivers/base/core.c:3664
usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575
hub_port_connect drivers/usb/core/hub.c:5355 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
hub_event+0x23dc/0x44a0 drivers/usb/core/hub.c:5737
hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
port_event drivers/usb/core/hub.c:5655 [inline]
process_one_work+0x868/0x16f4 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x24c/0x2d4 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 69460
hardirqs last enabled at (69459): [<ffff80000821d314>] __cancel_work_timer+0x3b0/0x548 kernel/workqueue.c:3153
hardirqs last disabled at (69460): [<ffff8000122560d4>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (69452): [<ffff800008020ee8>] softirq_handle_end kernel/softirq.c:414 [inline]
softirqs last enabled at (69452): [<ffff800008020ee8>] __do_softirq+0xd88/0xff4 kernel/softirq.c:600
softirqs last disabled at (69439): [<ffff80000802b598>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3801 at kernel/workqueue.c:3066 __flush_work+0x1b4/0x1c0
Modules linked in:
syzbot
Sep 26, 2023, 5:46:25 AM9/26/23
to syzkaller...@googlegroups.com
syzbot suspects this issue was fixed by commit:
commit 8abb53c5167cfb5bb275512a3da4ec2468478626
Author: Duoming Zhou <duo...@zju.edu.cn>
Date: Mon May 22 23:59:32 2023 +0000
media: usb: siano: Fix warning due to null work_func_t function pointer
bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=1754428e680000
start commit: 7eaef76fbc46 Linux 6.1.20
git tree: linux-6.1.y
#syz fix: media: usb: siano: Fix warning due to null work_func_t function pointer
For information about bisection process see: https://goo.gl/tpsmEJ#bisection
commit 8abb53c5167cfb5bb275512a3da4ec2468478626
Author: Duoming Zhou <duo...@zju.edu.cn>
Date: Mon May 22 23:59:32 2023 +0000
media: usb: siano: Fix warning due to null work_func_t function pointer
bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=1754428e680000
start commit: 7eaef76fbc46 Linux 6.1.20
git tree: linux-6.1.y
kernel config: https://syzkaller.appspot.com/x/.config?x=29ad3fe3c7b61175
dashboard link: https://syzkaller.appspot.com/bug?extid=6889aaa7831fa89fdbe3
dashboard link: https://syzkaller.appspot.com/bug?extid=6889aaa7831fa89fdbe3
userspace arch: arm64
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13e474f2c80000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1786b086c80000
If the result looks correct, please mark the issue as fixed by replying with:
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13e474f2c80000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1786b086c80000
#syz fix: media: usb: siano: Fix warning due to null work_func_t function pointer
For information about bisection process see: https://goo.gl/tpsmEJ#bisection
syzbot
Sep 30, 2023, 11:31:44 AM9/30/23
to syzkaller...@googlegroups.com
Auto-closing this bug as obsolete.
No recent activity, existing reproducers are no longer triggering the issue.
No recent activity, existing reproducers are no longer triggering the issue.
Reply all
Reply to author
Forward
0 new messages