syzbot

 sign-in | mailing list | source | docs
🐞 Open [957] ≡ Subsystems 🐞 Fixed [4569] 🐞 Invalid [10546] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

WARNING in bcm5974_start_traffic/usb_submit_urb

Status: upstream: reported C repro on 2019/11/08 13:54
Labels: input (incorrect?)
Reported-by: syzbot+348331f63b034f89b622@syzkaller.appspotmail.com
First crash: 1307d, last: 6d01h

Cause bisection: failed (error log, bisect log)
▶ ▼ Discussions (4)
Title Replies (including bot) Last reply
[syzbot] Monthly input report (Jun 2023) 0 (1) 2023/06/06 23:24
[syzbot] Monthly input report (May 2023) 0 (1) 2023/05/05 21:40
[syzbot] Monthly input report 0 (1) 2023/04/04 14:19
WARNING in bcm5974_start_traffic/usb_submit_urb 0 (1) 2019/11/08 13:54
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2020/09/11 09:36 11m anant.thazhemadam@gmail.com https://github.com/google/kasan.git usb-fuzzer report log
▶ ▼ Fix bisection attempts (13)
Created Duration User Patch Repo Result
2023/05/22 05:47 24m bisect fix upstream job log (0) log
2023/04/02 20:03 24m bisect fix upstream job log (0) log
2023/03/03 17:57 24m bisect fix upstream job log (0) log
2023/02/01 15:14 25m bisect fix upstream job log (0) log
2022/11/17 09:42 23m bisect fix upstream job log (0) log
2022/07/14 20:21 19m bisect fix upstream job log (0) log
2022/06/14 20:00 20m bisect fix upstream job log (0) log
2022/05/15 19:36 19m bisect fix upstream job log (0) log
2022/02/03 12:53 19m bisect fix upstream job log (0) log
2021/12/04 15:41 20m bisect fix upstream job log (0) log
2021/10/21 16:19 20m bisect fix upstream job log (0) log
2021/09/14 06:40 20m bisect fix upstream job log (0) log
2021/08/15 01:10 20m bisect fix upstream job log (0) log

Sample crash report:
------------[ cut here ]------------
usb 5-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 0 PID: 4607 at drivers/usb/core/urb.c:504 usb_submit_urb+0xed6/0x1880 drivers/usb/core/urb.c:504
Modules linked in:
CPU: 0 PID: 4607 Comm: acpid Not tainted 6.4.0-rc4-syzkaller-00078-g929ed21dfdb6 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
RIP: 0010:usb_submit_urb+0xed6/0x1880 drivers/usb/core/urb.c:504
Code: 7c 24 18 e8 ac 1d 5c fb 48 8b 7c 24 18 e8 52 13 f0 fe 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 80 9e fc 8a e8 1a db 23 fb <0f> 0b e9 58 f8 ff ff e8 7e 1d 5c fb 48 81 c5 c0 05 00 00 e9 84 f7
RSP: 0018:ffffc900033af838 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
RDX: ffff888028e91b80 RSI: ffffffff814b2457 RDI: 0000000000000001
RBP: ffff888016281d00 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 3a312d3520627375 R12: 0000000000000001
R13: ffff88802418bc40 R14: 0000000000000002 R15: ffff88801ed17c00
FS:  00007f4602ea2740(0000) GS:ffff88806b600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005640eb2db080 CR3: 000000002ad2c000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 bcm5974_start_traffic drivers/input/mouse/bcm5974.c:799 [inline]
 bcm5974_start_traffic+0xbd/0x180 drivers/input/mouse/bcm5974.c:783
 bcm5974_open+0xa3/0x170 drivers/input/mouse/bcm5974.c:839
 input_open_device+0x1bf/0x320 drivers/input/input.c:652
 mousedev_open_device+0xe0/0x140 drivers/input/mousedev.c:430
 mousedev_open+0x2fc/0x580 drivers/input/mousedev.c:556
 chrdev_open+0x26a/0x770 fs/char_dev.c:414
 do_dentry_open+0x6cc/0x13f0 fs/open.c:920
 do_open fs/namei.c:3636 [inline]
 path_openat+0x1baa/0x2750 fs/namei.c:3791
 do_filp_open+0x1ba/0x410 fs/namei.c:3818
 do_sys_openat2+0x16d/0x4c0 fs/open.c:1356
 do_sys_open fs/open.c:1372 [inline]
 __do_sys_openat fs/open.c:1388 [inline]
 __se_sys_openat fs/open.c:1383 [inline]
 __x64_sys_openat+0x143/0x1f0 fs/open.c:1383
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f4602f6c9a4
Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffce4a655a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffce4a65888 RCX: 00007f4602f6c9a4
RDX: 0000000000080800 RSI: 00007ffce4a65788 RDI: 00000000ffffff9c
RBP: 00007ffce4a65788 R08: 00000000000000f4 R09: 00007ffce4a65788
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800
R13: 0000000000000040 R14: 00007ffce4a65888 R15: 00007ffce4a65788
 </TASK>

Crashes (34):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Manager Title
2023/06/01 21:14 upstream 929ed21dfdb6 a4ae4f42 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in bcm5974_start_traffic/usb_submit_urb
2022/10/17 16:39 upstream 55be6084c8e0 67cb024c .config strace log report syz C [disk image] [vmlinux] ci-upstream-kasan-gce-smack-root WARNING in bcm5974_start_traffic/usb_submit_urb
2022/08/12 19:47 upstream 7ebfc85e2cd7 402cd70d .config strace log report syz C ci-upstream-kasan-gce-root WARNING in bcm5974_start_traffic/usb_submit_urb
2022/07/16 04:28 upstream 9b59ec8d50a1 95cb00d1 .config strace log report syz C ci-upstream-kasan-gce WARNING in bcm5974_start_traffic/usb_submit_urb
2022/03/04 20:35 upstream 38f80f42147f 45a13a73 .config console log report syz C ci-qemu-upstream WARNING in bcm5974_start_traffic/usb_submit_urb
2021/07/10 15:52 upstream 3dbdb38e2869 8f5a7b8c .config console log report syz C ci-upstream-kasan-gce-selinux-root WARNING in bcm5974_start_traffic/usb_submit_urb
2021/05/31 11:23 upstream 8124c8a6b353 325a8dab .config console log report syz C ci-upstream-kasan-gce-smack-root WARNING in bcm5974_start_traffic/usb_submit_urb
2021/05/28 11:23 upstream 97e5bf604b7a 858ea628 .config console log report syz C ci-upstream-kasan-gce-root WARNING in bcm5974_start_traffic/usb_submit_urb
2022/09/26 00:06 linux-next aaa11ce2ffc8 0042f2b4 .config strace log report syz C ci-upstream-linux-next-kasan-gce-root WARNING in bcm5974_start_traffic/usb_submit_urb
2022/07/16 03:50 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing c76d09da77d6 95cb00d1 .config console log report syz C ci2-upstream-usb WARNING in bcm5974_start_traffic/usb_submit_urb
2021/06/21 12:53 linux-next a1f92694393a aba2b2fb .config console log report syz C ci-upstream-linux-next-kasan-gce-root WARNING in bcm5974_start_traffic/usb_submit_urb
2020/12/09 11:50 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b175d273d4e4 99917735 .config console log report syz C ci2-upstream-usb
2020/05/14 03:56 https://github.com/google/kasan.git usb-fuzzer 059e7e0ff26c a885920d .config console log report syz C ci2-upstream-usb
2019/11/08 02:46 https://github.com/google/kasan.git usb-fuzzer d60bbfea36c1 f39aff9e .config console log report syz C ci2-upstream-usb
2022/09/08 18:19 upstream 26b1224903b3 f3027468 .config console log report info [disk image] [vmlinux] ci-upstream-kasan-gce WARNING in bcm5974_start_traffic/usb_submit_urb
2023/04/22 05:01 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 8f40fc080813 2b32bd34 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING in bcm5974_start_traffic/usb_submit_urb
2022/12/26 07:15 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 8395ae05cb5a 9da18ae8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING in bcm5974_start_traffic/usb_submit_urb
2022/11/18 09:52 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing dd65a243a915 5bb70014 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING in bcm5974_start_traffic/usb_submit_urb
2022/07/16 03:03 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing c76d09da77d6 95cb00d1 .config console log report info ci2-upstream-usb WARNING in bcm5974_start_traffic/usb_submit_urb
2022/04/15 19:36 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 312310928417 8bcc32a6 .config console log report info ci2-upstream-usb WARNING in bcm5974_start_traffic/usb_submit_urb
2022/04/06 20:23 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 312310928417 97582466 .config console log report info ci2-upstream-usb WARNING in bcm5974_start_traffic/usb_submit_urb
2022/03/09 11:18 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 98d107b84614 9e8eaa75 .config console log report info ci2-upstream-usb WARNING in bcm5974_start_traffic/usb_submit_urb
2022/02/10 23:35 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing c3c9cee59282 0b33604d .config console log report info ci2-upstream-usb WARNING in bcm5974_start_traffic/usb_submit_urb
2022/01/03 22:34 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e681a9d2050c 4a3f34f2 .config console log report info ci2-upstream-usb WARNING in bcm5974_start_traffic/usb_submit_urb
2022/01/02 08:14 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing db3e8244bd1c e1768e9c .config console log report info ci2-upstream-usb WARNING in bcm5974_start_traffic/usb_submit_urb
2021/11/04 15:41 linux-next 8a796a1dfca2 4c1be0be .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in bcm5974_start_traffic/usb_submit_urb
2021/10/25 05:18 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing c26f1c109d21 4f0000ee .config console log report info ci2-upstream-usb WARNING in bcm5974_start_traffic/usb_submit_urb
2021/09/21 16:19 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a0f497199090 169724fe .config console log report info ci2-upstream-usb WARNING in bcm5974_start_traffic/usb_submit_urb
2020/12/09 06:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b175d273d4e4 40cc414d .config console log report info ci2-upstream-usb
2020/06/26 16:05 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing fb5746826a0c 9506ea6d .config console log report ci2-upstream-usb
2020/06/20 18:40 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing f8f02d5c671f c655ec77 .config console log report ci2-upstream-usb
2020/06/11 03:06 https://github.com/google/kasan.git usb-fuzzer 2089c6ed5a17 3ab7a05a .config console log report ci2-upstream-usb
2020/02/29 02:38 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c c88c7b75 .config console log report ci2-upstream-usb
2020/02/27 10:34 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 40bcfdd5 .config console log report ci2-upstream-usb
* Struck through repros no longer work on HEAD.