syzbot


WARNING in bcm5974_start_traffic/usb_submit_urb
Status: upstream: reported C repro on 2019/11/08 13:54
Reported-by: syzbot+348331f63b034f89b622@syzkaller.appspotmail.com
First crash: 930d, last: 10d

Cause bisection: failed (bisect log)
Patch testing requests:
Created Duration User Patch Repo Result
2020/09/11 09:36 11m anant.thazhemadam@gmail.com https://github.com/google/kasan.git usb-fuzzer report log

Sample crash report:
------------[ cut here ]------------
usb 7-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 2 PID: 3112 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 drivers/usb/core/urb.c:502
Modules linked in:
CPU: 2 PID: 3112 Comm: acpid Not tainted 5.17.0-rc6-syzkaller-00184-g38f80f42147f #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
RIP: 0010:usb_submit_urb+0xed2/0x18a0 drivers/usb/core/urb.c:502
Code: 7c 24 18 e8 30 5a 0e fc 48 8b 7c 24 18 e8 e6 00 08 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 20 d7 4a 8a e8 0b 2f 9e 03 <0f> 0b e9 58 f8 ff ff e8 02 5a 0e fc 48 81 c5 48 06 00 00 e9 84 f7
RSP: 0018:ffffc90000cf7818 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
RDX: ffff88801e6da2c0 RSI: ffffffff815f12d8 RDI: fffff5200019eef5
RBP: ffff888018ba6c00 R08: 0000000000000000 R09: 0000000000000001
R10: ffffffff815eb96e R11: 0000000000000000 R12: 0000000000000001
R13: ffff888018d7c700 R14: 0000000000000002 R15: ffff88801ca40400
FS:  00007fb9d9dbd740(0000) GS:ffff88802cd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f702c2b02f0 CR3: 000000001d23f000 CR4: 0000000000150ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 bcm5974_start_traffic drivers/input/mouse/bcm5974.c:799 [inline]
 bcm5974_start_traffic+0xbd/0x170 drivers/input/mouse/bcm5974.c:783
 bcm5974_open+0x9f/0x160 drivers/input/mouse/bcm5974.c:839
 input_open_device+0x1bb/0x320 drivers/input/input.c:629
 mousedev_open_device+0xdc/0x140 drivers/input/mousedev.c:430
 mousedev_open+0x2f8/0x580 drivers/input/mousedev.c:556
 chrdev_open+0x266/0x770 fs/char_dev.c:414
 do_dentry_open+0x4b9/0x1250 fs/open.c:824
 do_open fs/namei.c:3476 [inline]
 path_openat+0x1c9e/0x2940 fs/namei.c:3609
 do_filp_open+0x1aa/0x400 fs/namei.c:3636
 do_sys_openat2+0x16d/0x4d0 fs/open.c:1214
 do_sys_open fs/open.c:1230 [inline]
 __do_sys_openat fs/open.c:1246 [inline]
 __se_sys_openat fs/open.c:1241 [inline]
 __x64_sys_openat+0x13f/0x1f0 fs/open.c:1241
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fb9d9ea5697
Code: 25 00 00 41 00 3d 00 00 41 00 74 37 64 8b 04 25 18 00 00 00 85 c0 75 5b 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 85 00 00 00 48 83 c4 68 5d 41 5c c3 0f 1f
RSP: 002b:00007ffed888bd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffed888c028 RCX: 00007fb9d9ea5697
RDX: 0000000000080800 RSI: 00007ffed888bf28 RDI: 00000000ffffff9c
RBP: 00007ffed888bf28 R08: 00007ffed888c03c R09: 00007ffed888bf28
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800
R13: 00007ffed888c028 R14: 0000000000000020 R15: 0000000000000000
 </TASK>

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2022/05/15 19:55 upstream 0cdd776ec92c 8f5a7b8c .config log report syz C
ci-upstream-kasan-gce-selinux-root 2022/02/03 13:13 upstream 88808fbbead4 8f5a7b8c .config log report syz C
ci-upstream-kasan-gce-selinux-root 2021/12/04 16:02 upstream 12119cfa1052 8f5a7b8c .config log report syz C
ci-upstream-kasan-gce-selinux-root 2021/10/21 16:40 upstream 2f111a6fd5b5 8f5a7b8c .config log report syz C
ci-upstream-kasan-gce-selinux-root 2021/09/14 07:01 upstream d0ee23f9d78b 8f5a7b8c .config log report syz C
ci-upstream-kasan-gce-selinux-root 2021/08/15 01:31 upstream ba31f97d43be 8f5a7b8c .config log report syz C
Crashes (23):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-qemu-upstream 2022/03/04 20:35 upstream 38f80f42147f 45a13a73 .config log report syz C WARNING in bcm5974_start_traffic/usb_submit_urb
ci-upstream-kasan-gce-selinux-root 2021/07/10 15:52 upstream 3dbdb38e2869 8f5a7b8c .config log report syz C WARNING in bcm5974_start_traffic/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2021/05/31 11:23 upstream 8124c8a6b353 325a8dab .config log report syz C WARNING in bcm5974_start_traffic/usb_submit_urb
ci-upstream-kasan-gce-root 2021/05/28 11:23 upstream 97e5bf604b7a 858ea628 .config log report syz C WARNING in bcm5974_start_traffic/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/06/21 12:53 linux-next a1f92694393a aba2b2fb .config log report syz C WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2020/12/09 11:50 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b175d273d4e4 99917735 .config log report syz C
ci2-upstream-usb 2020/05/14 03:56 https://github.com/google/kasan.git usb-fuzzer 059e7e0ff26c a885920d .config log report syz C
ci2-upstream-usb 2019/11/08 02:46 https://github.com/google/kasan.git usb-fuzzer d60bbfea36c1 f39aff9e .config log report syz C
ci2-upstream-usb 2022/04/15 19:36 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 312310928417 8bcc32a6 .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2022/04/06 20:23 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 312310928417 97582466 .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2022/03/09 11:18 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 98d107b84614 9e8eaa75 .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2022/02/10 23:35 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing c3c9cee59282 0b33604d .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2022/01/03 22:34 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e681a9d2050c 4a3f34f2 .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2022/01/02 08:14 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing db3e8244bd1c e1768e9c .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/11/04 15:41 linux-next 8a796a1dfca2 4c1be0be .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2021/10/25 05:18 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing c26f1c109d21 4f0000ee .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2021/09/21 16:19 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a0f497199090 169724fe .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2020/12/09 06:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b175d273d4e4 40cc414d .config log report info
ci2-upstream-usb 2020/06/26 16:05 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing fb5746826a0c 9506ea6d .config log report
ci2-upstream-usb 2020/06/20 18:40 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing f8f02d5c671f c655ec77 .config log report
ci2-upstream-usb 2020/06/11 03:06 https://github.com/google/kasan.git usb-fuzzer 2089c6ed5a17 3ab7a05a .config log report
ci2-upstream-usb 2020/02/29 02:38 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c c88c7b75 .config log report
ci2-upstream-usb 2020/02/27 10:34 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 40bcfdd5 .config log report