On Mon, Jun 3, 2019 at 3:31 PM syzbot <syzbot+373e6719b49912399d21@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit: 69bbe8c7 usb-fuzzer: main usb gadget fuzzer driver > git tree: https://github.com/google/kasan.git usb-fuzzer > console output: https://syzkaller.appspot.com/x/log.txt?x=1448d0f2a00000 > kernel config: https://syzkaller.appspot.com/x/.config?x=193d8457178b3229 > dashboard link: https://syzkaller.appspot.com/bug?extid=373e6719b49912399d21 > compiler: gcc (GCC) 9.0.0 20181231 (experimental) > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=16e57ca6a00000 > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1106eda2a00000 > > IMPORTANT: if you fix the bug, please add the following tag to the commit: > Reported-by: syzbot+373e6719b49912399d21@xxxxxxxxxxxxxxxxxxxxxxxxx > > usb 1-1: Using ep0 maxpacket: 8 > usb 1-1: config 0 has an invalid interface number: 182 but max is 0 > usb 1-1: config 0 has no interface number 0 > usb 1-1: New USB device found, idVendor=1286, idProduct=2052, > bcdDevice=61.43 > usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 > usb 1-1: config 0 descriptor?? > usb 1-1: Direct firmware load for mrvl/usbusb8997_combo_v4.bin failed with > error -2 > usb 1-1: Failed to get firmware mrvl/usbusb8997_combo_v4.bin > usb 1-1: info: _mwifiex_fw_dpc: unregister device > INFO: trying to register non-static key. > the code is fine but needs lockdep annotation. > turning off the locking correctness validator. > CPU: 1 PID: 21 Comm: kworker/1:1 Not tainted 5.2.0-rc1+ #10 > Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS > Google 01/01/2011 > Workqueue: events request_firmware_work_func > Call Trace: > __dump_stack lib/dump_stack.c:77 [inline] > dump_stack+0xca/0x13e lib/dump_stack.c:113 > assign_lock_key kernel/locking/lockdep.c:774 [inline] > register_lock_class+0x11ae/0x1240 kernel/locking/lockdep.c:1083 > __lock_acquire+0x11d/0x5340 kernel/locking/lockdep.c:3673 > lock_acquire+0x100/0x2b0 kernel/locking/lockdep.c:4302 > del_timer_sync+0x3a/0x130 kernel/time/timer.c:1277 > mwifiex_usb_cleanup_tx_aggr > drivers/net/wireless/marvell/mwifiex/usb.c:1358 [inline] > mwifiex_unregister_dev+0x416/0x690 > drivers/net/wireless/marvell/mwifiex/usb.c:1370 > _mwifiex_fw_dpc+0x577/0xda0 drivers/net/wireless/marvell/mwifiex/main.c:651 > request_firmware_work_func+0x126/0x242 > drivers/base/firmware_loader/main.c:785 > process_one_work+0x905/0x1570 kernel/workqueue.c:2268 > worker_thread+0x96/0xe20 kernel/workqueue.c:2414 > kthread+0x30b/0x410 kernel/kthread.c:254 > ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 > ------------[ cut here ]------------ > ODEBUG: assert_init not available (active state 0) object type: timer_list > hint: 0x0 > WARNING: CPU: 1 PID: 21 at lib/debugobjects.c:325 > debug_print_object+0x160/0x250 lib/debugobjects.c:325 > > > --- > This bug is generated by a bot. It may contain errors. > See https://goo.gl/tpsmEJ for more information about syzbot. > syzbot engineers can be reached at syzkaller@xxxxxxxxxxxxxxxx. > > syzbot will keep track of this bug report. See: > https://goo.gl/tpsmEJ#status for how to communicate with syzbot. > syzbot can test patches for this bug, for details see: > https://goo.gl/tpsmEJ#testing-patches #syz dup: INFO: trying to register non-static key in del_timer_sync (2)
