On Tue, Jun 11, 2024 at 09:20:31PM -0700, syzbot wrote: > Hello, > > syzbot found the following issue on: > > HEAD commit: 8867bbd4a056 mm: arm64: Fix the out-of-bounds issue in con.. > git tree: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci > console output: https://syzkaller.appspot.com/x/log.txt?x=112ad20a980000 > kernel config: https://syzkaller.appspot.com/x/.config?x=3b4350cf56c61c80 > dashboard link: https://syzkaller.appspot.com/bug?extid=1b2abad17596ad03dcff > compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 > userspace arch: arm64 > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1112d2ce980000 > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=12c37286980000 > > Downloadable assets: > disk image: https://storage.googleapis.com/syzbot-assets/6ea21f50498b/disk-8867bbd4.raw.xz > vmlinux: https://storage.googleapis.com/syzbot-assets/e2fed09364aa/vmlinux-8867bbd4.xz > kernel image: https://storage.googleapis.com/syzbot-assets/4860173c7a18/Image-8867bbd4.gz.xz > > IMPORTANT: if you fix the issue, please add the following tag to the commit: > Reported-by: syzbot+1b2abad17596ad03dcff@xxxxxxxxxxxxxxxxxxxxxxxxx > > cdc_wdm 1-1:1.0: nonzero urb status received: -71 > cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes > cdc_wdm 1-1:1.0: nonzero urb status received: -71 > cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes > watchdog: BUG: soft lockup - CPU#0 stuck for 27s! [kworker/u9:2:6293] > CPU#0 Utilization every 4s during lockup: > #1: 97% system, 1% softirq, 4% hardirq, 0% idle > #2: 98% system, 1% softirq, 3% hardirq, 0% idle > #3: 97% system, 0% softirq, 3% hardirq, 0% idle > #4: 98% system, 1% softirq, 3% hardirq, 0% idle > #5: 98% system, 1% softirq, 3% hardirq, 0% idle > Modules linked in: > irq event stamp: 150196 This patch fixed the problem in a different syzbot lockup. Let's see if it also fixes this one. The console log output suggests that it will. Alan Stern #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git 8867bbd4a056 Index: usb-devel/drivers/usb/class/cdc-wdm.c =================================================================== --- usb-devel.orig/drivers/usb/class/cdc-wdm.c +++ usb-devel/drivers/usb/class/cdc-wdm.c @@ -266,14 +266,14 @@ static void wdm_int_callback(struct urb dev_err(&desc->intf->dev, "Stall on int endpoint\n"); goto sw; /* halt is cleared in work */ default: - dev_err(&desc->intf->dev, + dev_err_ratelimited(&desc->intf->dev, "nonzero urb status received: %d\n", status); break; } } if (urb->actual_length < sizeof(struct usb_cdc_notification)) { - dev_err(&desc->intf->dev, "wdm_int_callback - %d bytes\n", + dev_err_ratelimited(&desc->intf->dev, "wdm_int_callback - %d bytes\n", urb->actual_length); goto exit; }
