syzbot


WARNING in bcm5974_start_traffic/usb_submit_urb

Status: upstream: reported C repro on 2019/11/08 13:54
Reported-by: syzbot+348331f63b034f89b622@syzkaller.appspotmail.com
First crash: 1055d, last: 2d18h

Cause bisection: failed (bisect log)
Patch testing requests:
Created Duration User Patch Repo Result
2020/09/11 09:36 11m anant.thazhemadam@gmail.com https://github.com/google/kasan.git usb-fuzzer report log

Sample crash report:
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 1 PID: 2955 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x1880 drivers/usb/core/urb.c:502
Modules linked in:
CPU: 1 PID: 2955 Comm: acpid Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
RIP: 0010:usb_submit_urb+0xed2/0x1880 drivers/usb/core/urb.c:502
Code: 7c 24 18 e8 c0 0d ef fb 48 8b 7c 24 18 e8 a6 6f 03 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 40 dc 8f 8a e8 2b c3 ac 03 <0f> 0b e9 58 f8 ff ff e8 92 0d ef fb 48 81 c5 c0 05 00 00 e9 84 f7
RSP: 0018:ffffc90002d8f830 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
RDX: ffff88807de05880 RSI: ffffffff8161f148 RDI: fffff520005b1ef8
RBP: ffff88801ce71500 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000001
R13: ffff888017aebe10 R14: 0000000000000002 R15: ffff88801267bd00
FS:  00007f663d91f740(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fffced2dff8 CR3: 000000007e691000 CR4: 0000000000350ee0
Call Trace:
 <TASK>
 bcm5974_start_traffic drivers/input/mouse/bcm5974.c:799 [inline]
 bcm5974_start_traffic+0xbd/0x170 drivers/input/mouse/bcm5974.c:783
 bcm5974_open+0x9f/0x160 drivers/input/mouse/bcm5974.c:839
 input_open_device+0x1bb/0x320 drivers/input/input.c:650
 mousedev_open_device+0xdc/0x140 drivers/input/mousedev.c:430
 mousedev_open+0x2f8/0x580 drivers/input/mousedev.c:556
 chrdev_open+0x266/0x770 fs/char_dev.c:414
 do_dentry_open+0x4a4/0x13a0 fs/open.c:878

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2022/07/14 20:40 upstream 4a57a8400075 8f5a7b8c .config log report syz C
ci-upstream-kasan-gce-selinux-root 2022/06/14 20:20 upstream 018ab4fabddd 8f5a7b8c .config log report syz C
ci-upstream-kasan-gce-selinux-root 2022/05/15 19:55 upstream 0cdd776ec92c 8f5a7b8c .config log report syz C
ci-upstream-kasan-gce-selinux-root 2022/02/03 13:13 upstream 88808fbbead4 8f5a7b8c .config log report syz C
ci-upstream-kasan-gce-selinux-root 2021/12/04 16:02 upstream 12119cfa1052 8f5a7b8c .config log report syz C
ci-upstream-kasan-gce-selinux-root 2021/10/21 16:40 upstream 2f111a6fd5b5 8f5a7b8c .config log report syz C
ci-upstream-kasan-gce-selinux-root 2021/09/14 07:01 upstream d0ee23f9d78b 8f5a7b8c .config log report syz C
ci-upstream-kasan-gce-selinux-root 2021/08/15 01:31 upstream ba31f97d43be 8f5a7b8c .config log report syz C
* Struck through repros no longer work on HEAD.
Crashes (29):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2022/08/12 19:47 upstream 7ebfc85e2cd7 402cd70d .config log report syz C WARNING in bcm5974_start_traffic/usb_submit_urb
ci-upstream-kasan-gce 2022/07/16 04:28 upstream 9b59ec8d50a1 95cb00d1 .config log report syz C WARNING in bcm5974_start_traffic/usb_submit_urb
ci-qemu-upstream 2022/03/04 20:35 upstream 38f80f42147f 45a13a73 .config log report syz C WARNING in bcm5974_start_traffic/usb_submit_urb
ci-upstream-kasan-gce-selinux-root 2021/07/10 15:52 upstream 3dbdb38e2869 8f5a7b8c .config log report syz C WARNING in bcm5974_start_traffic/usb_submit_urb
ci-upstream-kasan-gce-smack-root 2021/05/31 11:23 upstream 8124c8a6b353 325a8dab .config log report syz C WARNING in bcm5974_start_traffic/usb_submit_urb
ci-upstream-kasan-gce-root 2021/05/28 11:23 upstream 97e5bf604b7a 858ea628 .config log report syz C WARNING in bcm5974_start_traffic/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2022/09/26 00:06 linux-next aaa11ce2ffc8 0042f2b4 .config log report syz C WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2022/07/16 03:50 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing c76d09da77d6 95cb00d1 .config log report syz C WARNING in bcm5974_start_traffic/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/06/21 12:53 linux-next a1f92694393a aba2b2fb .config log report syz C WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2020/12/09 11:50 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b175d273d4e4 99917735 .config log report syz C
ci2-upstream-usb 2020/05/14 03:56 https://github.com/google/kasan.git usb-fuzzer 059e7e0ff26c a885920d .config log report syz C
ci2-upstream-usb 2019/11/08 02:46 https://github.com/google/kasan.git usb-fuzzer d60bbfea36c1 f39aff9e .config log report syz C
ci-upstream-kasan-gce 2022/09/08 18:19 upstream 26b1224903b3 f3027468 .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2022/07/16 03:03 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing c76d09da77d6 95cb00d1 .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2022/04/15 19:36 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 312310928417 8bcc32a6 .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2022/04/06 20:23 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 312310928417 97582466 .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2022/03/09 11:18 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 98d107b84614 9e8eaa75 .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2022/02/10 23:35 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing c3c9cee59282 0b33604d .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2022/01/03 22:34 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing e681a9d2050c 4a3f34f2 .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2022/01/02 08:14 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing db3e8244bd1c e1768e9c .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci-upstream-linux-next-kasan-gce-root 2021/11/04 15:41 linux-next 8a796a1dfca2 4c1be0be .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2021/10/25 05:18 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing c26f1c109d21 4f0000ee .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2021/09/21 16:19 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a0f497199090 169724fe .config log report info WARNING in bcm5974_start_traffic/usb_submit_urb
ci2-upstream-usb 2020/12/09 06:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b175d273d4e4 40cc414d .config log report info
ci2-upstream-usb 2020/06/26 16:05 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing fb5746826a0c 9506ea6d .config log report
ci2-upstream-usb 2020/06/20 18:40 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing f8f02d5c671f c655ec77 .config log report
ci2-upstream-usb 2020/06/11 03:06 https://github.com/google/kasan.git usb-fuzzer 2089c6ed5a17 3ab7a05a .config log report
ci2-upstream-usb 2020/02/29 02:38 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c c88c7b75 .config log report
ci2-upstream-usb 2020/02/27 10:34 https://github.com/google/kasan.git usb-fuzzer d6ff8147a51c 40bcfdd5 .config log report
* Struck through repros no longer work on HEAD.