WARNING in corrupted/usb_submit_urb

Status: auto-obsoleted due to no activity on 2025/08/30 15:47
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+c8410485d71b395d830f@syzkaller.appspotmail.com
First crash: 1152d, last: 692d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2023/06/07 upstream (ToT) 5f63595ebd82 C [report] WARNING in amradio_send_cmd/usb_submit_urb
2025/08/30 upstream (ToT) 11e7861d680c C Didn't crash
▶ ▼ Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 WARNING in corrupted/usb_submit_urb origin:upstream -1 syz, C error 2 829d 1156d 0/3 auto-obsoleted due to no activity on 2025/09/23 21:18
upstream WARNING in corrupted/usb_submit_urb (2) usb -1 syz, C error done 69 827d 2081d 0/29 closed as invalid on 2026/07/17 14:22
upstream WARNING in corrupted/usb_submit_urb usb -1 syz, C 23 2345d 2237d 0/29 closed as invalid on 2020/06/19 14:24
▶ ▼ Fix bisection attempts (13)
Created Duration User Patch Repo Result
2024/10/15 01:31 0m bisect fix linux-6.1.y error job log
2024/09/09 08:56 2h22m bisect fix linux-6.1.y OK (0) job log log
2024/08/05 09:10 3h38m bisect fix linux-6.1.y OK (0) job log log
2024/06/26 20:34 57m bisect fix linux-6.1.y OK (0) job log log
2024/05/18 18:41 1h19m bisect fix linux-6.1.y OK (0) job log log
2024/04/12 17:49 3h40m bisect fix linux-6.1.y OK (0) job log log
2024/03/10 17:41 58m bisect fix linux-6.1.y OK (0) job log log
2024/02/01 02:06 1h01m bisect fix linux-6.1.y OK (0) job log log
2023/12/29 01:27 1h14m bisect fix linux-6.1.y OK (0) job log log
2023/11/27 21:07 1h05m bisect fix linux-6.1.y OK (0) job log log
2023/10/28 00:18 1h19m bisect fix linux-6.1.y OK (0) job log log
2023/09/23 13:24 1h04m bisect fix linux-6.1.y OK (0) job log log
2023/07/12 14:37 2h57m bisect fix linux-6.1.y OK (0) job log log

Sample crash report:
usb 1-1: string descriptor 0 read error: -22
usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 0 PID: 154 at drivers/usb/core/urb.c:505 usb_submit_urb+0xc8d/0x1990 drivers/usb/core/urb.c:504
Modules linked in:
CPU: 0 PID: 154 Comm: kworker/0:2 Not tainted 6.1.32-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
Workqueue: usb_hub_wq hub_event
RIP: 0010:usb_submit_urb+0xc8d/0x1990 drivers/usb/core/urb.c:504
Code: 0f b6 04 18 84 c0 44 8b 64 24 1c 0f 85 2b 09 00 00 45 8b 07 48 c7 c7 80 b5 89 8b 48 8b 74 24 08 4c 89 f2 89 e9 e8 b3 10 f0 fa <0f> 0b 48 8b 5c 24 20 48 8b 6c 24 28 41 89 de 4c 89 f7 48 c7 c6 50
RSP: 0018:ffffc9000254ea90 EFLAGS: 00010246
RAX: 768f20bf427bbe00 RBX: dffffc0000000000 RCX: ffff888015733b80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000001 R08: ffffffff81524d7e R09: ffffed1017304f1c
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
R13: ffff888017649f00 R14: ffff8880275b6ac8 R15: ffffffff8b89b368
FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fffa143af88 CR3: 00000000742cf000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/06/07 11:05 linux-6.1.y 76ba310227d2 a4ae4f42 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in corrupted/usb_submit_urb
* Struck through repros no longer work on HEAD.