Re: WARNING in usbhid_raw_request/usb_submit_urb (3)

2020-04-30 Thread syzbot
Hello, syzbot has tested the proposed patch and the reproducer did not trigger crash: Reported-and-tested-by: syzbot+db339689b2101f6f6...@syzkaller.appspotmail.com Tested on: commit: 0fa84af8 Merge tag 'usb-serial-5.7-rc1' of https://git.ker.. git tree: https://github.com/google/k

Re: WARNING in usbhid_raw_request/usb_submit_urb (3)

2020-04-30 Thread Alan Stern
On Wed, 29 Apr 2020, syzbot wrote: > Hello, > > syzbot has tested the proposed patch but the reproducer still triggered crash: > WARNING in usbhid_raw_request/usb_submit_urb Ugh. I forgot that usbhid also uses usb_control_msg() and usb_interrupt_msg(). Those things can't

Re: WARNING in usbhid_raw_request/usb_submit_urb (3)

2020-04-29 Thread syzbot
Hello, syzbot has tested the proposed patch but the reproducer still triggered crash: WARNING in usbhid_raw_request/usb_submit_urb [ cut here ] usb 3-1: BOGUS urb xfer, pipe 2 != type 2 WARNING: CPU: 1 PID: 5096 at drivers/usb/core/urb.c:478 usb_submit_urb+0x1188/0x1460

Re: WARNING in usbhid_raw_request/usb_submit_urb (3)

2020-04-29 Thread Alan Stern
On Wed, 29 Apr 2020, syzbot wrote: > Hello, > > syzbot has tested the proposed patch and the reproducer did not trigger crash: > > Reported-and-tested-by: syzbot+db339689b2101f6f6...@syzkaller.appspotmail.com Good. Here's an improved version of the patch. Alan Stern #syz test: https://github

Re: WARNING in usbhid_raw_request/usb_submit_urb (3)

2020-04-29 Thread syzbot
Hello, syzbot has tested the proposed patch and the reproducer did not trigger crash: Reported-and-tested-by: syzbot+db339689b2101f6f6...@syzkaller.appspotmail.com Tested on: commit: 0fa84af8 Merge tag 'usb-serial-5.7-rc1' of https://git.ker.. git tree: https://github.com/google/k

Re: WARNING in usbhid_raw_request/usb_submit_urb (3)

2020-04-29 Thread Alan Stern
On Sat, 25 Apr 2020, syzbot wrote: > Hello, > > syzbot has tested the proposed patch and the reproducer did not trigger crash: > > Reported-and-tested-by: syzbot+db339689b2101f6f6...@syzkaller.appspotmail.com This is a two-pronged issue. The first problem is that usbhid does something it shou

WARNING in usbhid_raw_request/usb_submit_urb (2)

2019-10-22 Thread syzbot
Hello, syzbot found the following crash on: HEAD commit:22be26f7 usb-fuzzer: main usb gadget fuzzer driver git tree: https://github.com/google/kasan.git usb-fuzzer console output: https://syzkaller.appspot.com/x/log.txt?x=17f794c4e0 kernel config: https://syzkaller.appspot.com/x/.

Re: WARNING in usbhid_raw_request/usb_submit_urb

2019-08-13 Thread Oliver Neukum
Am Dienstag, den 13.08.2019, 12:26 +0800 schrieb Hillf Danton: > [respin with the mess in Cc list cleaned up] > Followup of commit e3e14de50dff ("HID: fix start/stop cycle in usbhid driver") > > --- a/drivers/hid/usbhid/hid-core.c > +++ b/drivers/hid/usbhid/hid-core.c > @@ -1214,6 +1214,8 @@ stat