syzbot


WARNING in bcm5974_start_traffic/usb_submit_urb

Status: upstream: reported C repro on 2024/02/06 21:35
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+90c7435c68b469a5d2fe@syzkaller.appspotmail.com
First crash: 139d, last: 23d
Bug presence (2)
Date Name Commit Repro Result
2024/02/07 linux-6.1.y (ToT) f1bb70486c9c C [report] WARNING in bcm5974_start_traffic/usb_submit_urb
2024/02/07 upstream (ToT) 6d280f4d760e C Didn't crash
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in bcm5974_start_traffic/usb_submit_urb input C error 41 94d 1690d 26/27 fixed on 2024/03/26 17:39
linux-5.15 WARNING in bcm5974_start_traffic/usb_submit_urb origin:upstream C error 1 77d 77d 0/3 upstream: reported C repro on 2024/04/08 05:03
upstream WARNING in bcm5974_start_traffic/usb_submit_urb (2) input C 1 60d 71d 0/27 upstream: reported C repro on 2024/04/15 01:54
Fix bisection attempts (4)
Created Duration User Patch Repo Result
2024/06/01 02:30 1h50m bisect fix linux-6.1.y job log (0) log
2024/04/28 15:30 1h57m bisect fix linux-6.1.y job log (0) log
2024/03/28 03:08 2h44m fix candidate upstream job log (0) log
2024/03/12 17:28 1h45m bisect fix linux-6.1.y job log (0) log

Sample crash report:
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 0 PID: 4222 at drivers/usb/core/urb.c:505 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:504
Modules linked in:
CPU: 0 PID: 4222 Comm: udevd Not tainted 6.1.77-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:504
lr : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:504
sp : ffff80001db87390
x29: ffff80001db873d0 x28: 0000000000000001 x27: ffff800013582188
x26: ffff0000ce65a400 x25: ffff0001ffbd4000 x24: 0000000000000400
x23: ffff800013588a00 x22: dfff800000000000 x21: 0000000000000002
x20: 0000000000000cc0 x19: ffff0000c0877800 x18: ffff80001db86780
x17: 0000000000000000 x16: ffff80001215324c x15: 0000000000000000
x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000000001
x11: 0000000000ff0100 x10: 0000000000000000 x9 : 86e120c35e4fb000
x8 : 86e120c35e4fb000 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001db86c78 x4 : ffff800015922b60 x3 : ffff800008586064
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:504
 bcm5974_start_traffic+0xe0/0x154 drivers/input/mouse/bcm5974.c:799
 bcm5974_open+0x98/0x134 drivers/input/mouse/bcm5974.c:839
 input_open_device+0x170/0x29c drivers/input/input.c:650
 evdev_open_device drivers/input/evdev.c:400 [inline]
 evdev_open+0x308/0x4b4 drivers/input/evdev.c:487
 chrdev_open+0x3e8/0x4fc fs/char_dev.c:414
 do_dentry_open+0x734/0xfa0 fs/open.c:882
 vfs_open+0x7c/0x90 fs/open.c:1013
 do_open fs/namei.c:3628 [inline]
 path_openat+0x1e14/0x2548 fs/namei.c:3785
 do_filp_open+0x1bc/0x3cc fs/namei.c:3812
 do_sys_openat2+0x128/0x3d8 fs/open.c:1318
 do_sys_open fs/open.c:1334 [inline]
 __do_sys_openat fs/open.c:1350 [inline]
 __se_sys_openat fs/open.c:1345 [inline]
 __arm64_sys_openat+0x1f0/0x240 fs/open.c:1345
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x64/0x218 arch/arm64/kernel/syscall.c:206
 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 4702
hardirqs last  enabled at (4701): [<ffff800008342890>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:261
hardirqs last disabled at (4702): [<ffff80001214ef04>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (4158): [<ffff800008033064>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (4156): [<ffff800008033030>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/02/06 21:34 linux-6.1.y f1bb70486c9c 6404acf9 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in bcm5974_start_traffic/usb_submit_urb
* Struck through repros no longer work on HEAD.