bisecting cause commit starting from 794c7931a2428a656551f2179e6a093233a6e0aa building syzkaller on a2fe1cb58994e43fb14f141ecd6e6dcce9bb697a testing commit 794c7931a2428a656551f2179e6a093233a6e0aa compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: b8792d84b4b4fc38c708b0b3bd25fc3938a6d26aa4ad5537d47a486faae1a6c7 all runs: crashed: WARNING in hid_submit_ctrl/usb_submit_urb testing release v5.13 testing commit 62fb9874f5da54fdb243003b386128037319b219 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 909f5b513362d755e99068620c19525cb2afd91ca8725228219fd46574a48866 all runs: OK # git bisect start 794c7931a2428a656551f2179e6a093233a6e0aa 62fb9874f5da54fdb243003b386128037319b219 Bisecting: 7706 revisions left to test after this (roughly 13 steps) [71bd9341011f626d692aabe024f099820f02c497] Merge branch 'akpm' (patches from Andrew) testing commit 71bd9341011f626d692aabe024f099820f02c497 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: f38e6ef7a09cbf44cb4fdaa8b26970bc4654e2a96050b8ba9d122b139fc240b4 all runs: OK # git bisect good 71bd9341011f626d692aabe024f099820f02c497 Bisecting: 3746 revisions left to test after this (roughly 12 steps) [79160a603bdb51916226caf4a6616cc4e1c58a58] Merge tag 'usb-5.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb testing commit 79160a603bdb51916226caf4a6616cc4e1c58a58 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 4ec73fe21998bb035e4ca9721491cd94239fbd912e4b1a5f08cd60c0b305f355 run #0: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #1: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #2: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #3: boot failed: possible deadlock in get_page_from_freelist run #4: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #5: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #6: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #7: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #8: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #9: boot failed: possible deadlock in get_page_from_freelist # git bisect skip 79160a603bdb51916226caf4a6616cc4e1c58a58 Bisecting: 3746 revisions left to test after this (roughly 12 steps) [e4b275531887fef7f7d8a7284bfc32f0fbbd4208] getcwd(2): clean up error handling testing commit e4b275531887fef7f7d8a7284bfc32f0fbbd4208 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 5eb34758756d7356d5d5e455f4006f59846c7777cbbe2a1aee826bb6ad0d49a4 all runs: OK # git bisect good e4b275531887fef7f7d8a7284bfc32f0fbbd4208 Bisecting: 3746 revisions left to test after this (roughly 12 steps) [e15d4cdf27cb0c1e977270270b2cea12e0955edd] netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state testing commit e15d4cdf27cb0c1e977270270b2cea12e0955edd compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 38c5b5433155917b65d78a677c7e94e0665812b96feaeac212d82d0e6e3e6d9a run #0: boot failed: general protection fault in ptp_clock_register run #1: boot failed: general protection fault in ptp_clock_register run #2: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #3: boot failed: general protection fault in ptp_clock_register run #4: boot failed: possible deadlock in get_page_from_freelist run #5: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #6: boot failed: possible deadlock in fs_reclaim_acquire run #7: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #8: boot failed: possible deadlock in get_page_from_freelist run #9: boot failed: BUG: sleeping function called from invalid context in stack_depot_save # git bisect skip e15d4cdf27cb0c1e977270270b2cea12e0955edd Bisecting: 3746 revisions left to test after this (roughly 12 steps) [420405ecde061fde76d67bd3a67577a563ea758e] configfs: fix the read and write iterators testing commit 420405ecde061fde76d67bd3a67577a563ea758e compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: d9bf2b05827abfb24f42347bbec85c7c358f587c74b3319cbb597f64aa0fcc0d all runs: crashed: WARNING in hid_submit_ctrl/usb_submit_urb # git bisect bad 420405ecde061fde76d67bd3a67577a563ea758e Bisecting: 3193 revisions left to test after this (roughly 12 steps) [f5c13f1fdef9fed65b95c3c5f343d22c425ac1d7] Merge tag 'driver-core-5.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core testing commit f5c13f1fdef9fed65b95c3c5f343d22c425ac1d7 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: a3987e747a0b341672971f98273aa4cff0a8a625785628289bb9db5d68ed2b04 run #0: boot failed: possible deadlock in get_page_from_freelist run #1: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #2: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #3: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #4: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #5: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #6: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #7: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #8: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #9: boot failed: BUG: sleeping function called from invalid context in stack_depot_save # git bisect skip f5c13f1fdef9fed65b95c3c5f343d22c425ac1d7 Bisecting: 3193 revisions left to test after this (roughly 12 steps) [deefd9211ded45a8d2088763b095fd7f2f151d34] staging: rtl8188eu: fix usb_submit_urb error handling testing commit deefd9211ded45a8d2088763b095fd7f2f151d34 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 0856e66785136110d5685b3df24b1d27ee3e92a26c40029d26f713825712ced5 all runs: OK # git bisect good deefd9211ded45a8d2088763b095fd7f2f151d34 Bisecting: 2546 revisions left to test after this (roughly 11 steps) [eed0218e8cae9fcd186c30e9fcf5fe46a87e056e] Merge tag 'char-misc-5.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc testing commit eed0218e8cae9fcd186c30e9fcf5fe46a87e056e compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 844763d03d7c59fd1d91dd7861bf9466d9e927f880e79f06541c8a7c1fbca4a2 run #0: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #1: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #2: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #3: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #4: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #5: boot failed: possible deadlock in get_page_from_freelist run #6: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #7: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #8: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #9: boot failed: BUG: sleeping function called from invalid context in stack_depot_save # git bisect skip eed0218e8cae9fcd186c30e9fcf5fe46a87e056e Bisecting: 2546 revisions left to test after this (roughly 11 steps) [9078204ca5c33ba20443a8623a41a68a9995a70d] serial: mvebu-uart: fix calculation of clock divisor testing commit 9078204ca5c33ba20443a8623a41a68a9995a70d compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: e00d77edf0af73d74d014e4d0e67e0a6e3018c535ac356cc8727b9228bd672be all runs: OK # git bisect good 9078204ca5c33ba20443a8623a41a68a9995a70d Bisecting: 2624 revisions left to test after this (roughly 11 steps) [3f8b8e7dbd79086ad48fcff33de9399f3da66a69] Merge tag 'backlight-next-5.14' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/backlight testing commit 3f8b8e7dbd79086ad48fcff33de9399f3da66a69 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 06c48ba680a940eac69850cbbd83b54089ebc809c09b7652be445c53104954fd run #0: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #1: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #2: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #3: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #4: boot failed: possible deadlock in get_page_from_freelist run #5: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #6: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #7: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #8: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #9: boot failed: BUG: sleeping function called from invalid context in stack_depot_save # git bisect skip 3f8b8e7dbd79086ad48fcff33de9399f3da66a69 Bisecting: 2624 revisions left to test after this (roughly 11 steps) [9d0150db97583cfbb6b44cbe02241a1a48f90210] leds: turris-omnia: add missing MODULE_DEVICE_TABLE testing commit 9d0150db97583cfbb6b44cbe02241a1a48f90210 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 6f244b17bd86467440e3f6bdba94fa5133b2b323bc64a67e1b8a4b361fd8e47c all runs: OK # git bisect good 9d0150db97583cfbb6b44cbe02241a1a48f90210 Bisecting: 2624 revisions left to test after this (roughly 11 steps) [2a8b519ece3bd9a9fd4d890df64adafa68d18036] thunderbolt: No need to include in usb4_port.c testing commit 2a8b519ece3bd9a9fd4d890df64adafa68d18036 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 1a011e4d53f77acd28112fbf234f3996dffb275d62bac95caf3a3e6b04553275 all runs: OK # git bisect good 2a8b519ece3bd9a9fd4d890df64adafa68d18036 Bisecting: 2597 revisions left to test after this (roughly 11 steps) [f9d107644aa4943b383986a8aa36125379eeaa81] loop: split loop_control_ioctl testing commit f9d107644aa4943b383986a8aa36125379eeaa81 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 4a6e258453840d6c20a0c80acc4f6ec7ba46c1982448ffd7e480b11d22df6fba run #0: basic kernel testing failed: possible deadlock in fs_reclaim_acquire run #1: basic kernel testing failed: possible deadlock in fs_reclaim_acquire run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good f9d107644aa4943b383986a8aa36125379eeaa81 Bisecting: 2583 revisions left to test after this (roughly 11 steps) [f22145f1532b00f0132ed0fd5db3900c7f6b7944] dt-bindings: soc: ti: update sci-pm-domain.yaml references testing commit f22145f1532b00f0132ed0fd5db3900c7f6b7944 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: f27b781a0a49a7852f1c4f1d2d6e7fe5900f905ce600ea22e7c7dc39c8a88e0f all runs: OK # git bisect good f22145f1532b00f0132ed0fd5db3900c7f6b7944 Bisecting: 2583 revisions left to test after this (roughly 11 steps) [3fd35de1686bf809431c5f0137de8eee5a2811d6] libperf: Add group support to perf_evsel__open() testing commit 3fd35de1686bf809431c5f0137de8eee5a2811d6 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 31bd2a49397b60cf431db159581dd5489aaef6d5fcecb924ff8f90cbc8adf9db run #0: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #1: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #2: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #3: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #4: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #5: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #6: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #7: boot failed: possible deadlock in get_page_from_freelist run #8: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #9: boot failed: possible deadlock in get_page_from_freelist # git bisect skip 3fd35de1686bf809431c5f0137de8eee5a2811d6 Bisecting: 2583 revisions left to test after this (roughly 11 steps) [08e5138aa419350d0a168abeac3ecec4b7e779be] eeprom: ee1004: Improve check for SMBUS features testing commit 08e5138aa419350d0a168abeac3ecec4b7e779be compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: c44b528d1b0d1ef8b39b071e047c5942c0b8973439b804748e122e8199bf8f70 all runs: OK # git bisect good 08e5138aa419350d0a168abeac3ecec4b7e779be Bisecting: 2525 revisions left to test after this (roughly 11 steps) [4c039d5452691fe80260e4c3dd7b629a095bd0a7] f2fs: Advertise encrypted casefolding in sysfs testing commit 4c039d5452691fe80260e4c3dd7b629a095bd0a7 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 9069bdc79df441c3714883f1f70f7f7c09fef7b5298c46244bba5058c7576d5c all runs: OK # git bisect good 4c039d5452691fe80260e4c3dd7b629a095bd0a7 Bisecting: 2506 revisions left to test after this (roughly 11 steps) [e4f3c9118f27b3b400db9993dd8bfd028d3b86ca] mtd: mtd_oobtest: fix error return code in mtd_oobtest_init() testing commit e4f3c9118f27b3b400db9993dd8bfd028d3b86ca compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: d9f70addf1520c58653ff342282dd823d8a06e2d730ce2e8d0bf25975df587cc all runs: OK # git bisect good e4f3c9118f27b3b400db9993dd8bfd028d3b86ca Bisecting: 2506 revisions left to test after this (roughly 11 steps) [c07c54e9de32ea8e89e7c2a112c14f59602a402c] habanalabs: better error print for pin failure testing commit c07c54e9de32ea8e89e7c2a112c14f59602a402c compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: ba6ef975825d94c7235715b1cade2b0e25754b84a4ceb9daca039164be16df2f all runs: OK # git bisect good c07c54e9de32ea8e89e7c2a112c14f59602a402c Bisecting: 2406 revisions left to test after this (roughly 11 steps) [b8052599420cd94505baec1f22b4e7c9e5ae5fce] Merge tag 'gpio-updates-for-v5.14' of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux testing commit b8052599420cd94505baec1f22b4e7c9e5ae5fce compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 10447c72b56580236f729aac0caa43c717352e9183c26fbbd7fc03aab0b724ae run #0: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #1: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #2: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #3: boot failed: possible deadlock in get_page_from_freelist run #4: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #5: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #6: boot failed: possible deadlock in fs_reclaim_acquire run #7: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #8: boot failed: BUG: sleeping function called from invalid context in stack_depot_save run #9: boot failed: BUG: sleeping function called from invalid context in stack_depot_save # git bisect skip b8052599420cd94505baec1f22b4e7c9e5ae5fce Bisecting: 2406 revisions left to test after this (roughly 11 steps) [5cc59c418fde9d02859996707b9d5dfd2941c50b] USB: core: WARN if pipe direction != setup packet direction testing commit 5cc59c418fde9d02859996707b9d5dfd2941c50b compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: b06c56a762dc77e3480e85bd7e3e594600cb46e04585e0eace049426799d657b all runs: crashed: WARNING in hid_submit_ctrl/usb_submit_urb # git bisect bad 5cc59c418fde9d02859996707b9d5dfd2941c50b Bisecting: 27 revisions left to test after this (roughly 5 steps) [c5c7489dc98296841fdf4fc4bfc52727a2057f24] Revert "USB: Add reset-resume quirk for WD19's Realtek Hub" testing commit c5c7489dc98296841fdf4fc4bfc52727a2057f24 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 84f394d73e5806aea82ec93979b788c4eb38548cf723cdc379577f8e8dea5367 all runs: OK # git bisect good c5c7489dc98296841fdf4fc4bfc52727a2057f24 Bisecting: 13 revisions left to test after this (roughly 4 steps) [60d789f3bfbb7428e6ba2949de70a6db8e12e8fa] usb: isp1760: add support for isp1763 testing commit 60d789f3bfbb7428e6ba2949de70a6db8e12e8fa drivers/usb/isp1760/isp1760-core.c:402:3: error: 'DC_CHIP_ID_HIGH' undeclared here (not in a function); did you mean 'HC_CHIP_ID_HIGH'? drivers/usb/isp1760/isp1760-core.c:402:3: error: array index in initializer not of integer type drivers/usb/isp1760/isp1760-core.c:403:3: error: 'DC_CHIP_ID_LOW' undeclared here (not in a function); did you mean 'HC_CHIP_ID_LOW'? drivers/usb/isp1760/isp1760-core.c:403:3: error: array index in initializer not of integer type drivers/usb/isp1760/isp1760-core.c:404:3: error: 'DC_SCRATCH' undeclared here (not in a function); did you mean 'HC_SCRATCH'? drivers/usb/isp1760/isp1760-core.c:404:3: error: array index in initializer not of integer type drivers/usb/isp1760/isp1760-core.c:408:19: error: 'ISP1763_DC_EPMAXPKTSZ' undeclared here (not in a function); did you mean 'ISP176x_DC_EPMAXPKTSZ'? drivers/usb/isp1760/isp1760-core.c:408:42: error: 'ISP1763_DC_EPTYPE' undeclared here (not in a function); did you mean 'ISP176x_DC_EPTYPE'? drivers/usb/isp1760/isp1760-core.c:409:19: error: 'ISP1763_DC_BUFLEN' undeclared here (not in a function); did you mean 'ISP176x_DC_BUFLEN'? drivers/usb/isp1760/isp1760-core.c:409:38: error: 'ISP1763_DC_EPINDEX' undeclared here (not in a function); did you mean 'ISP176x_DC_EPINDEX'? drivers/usb/isp1760/isp1760-core.c:418:26: error: 'ISP1763_DC_ADDRESS' undeclared here (not in a function); did you mean 'ISP176x_DC_ADDRESS'? drivers/usb/isp1760/isp1760-core.c:418:26: error: initializer element is not constant drivers/usb/isp1760/isp1760-core.c:419:28: error: initializer element is not constant drivers/usb/isp1760/isp1760-core.c:420:29: error: 'ISP1763_DC_MODE' undeclared here (not in a function); did you mean 'ISP176x_DC_MODE'? drivers/usb/isp1760/isp1760-core.c:420:29: error: initializer element is not constant drivers/usb/isp1760/isp1760-core.c:421:28: error: initializer element is not constant drivers/usb/isp1760/isp1760-core.c:422:29: error: initializer element is not constant drivers/usb/isp1760/isp1760-core.c:423:31: error: 'ISP1763_DC_INTCONF' undeclared here (not in a function); did you mean 'ISP176x_DC_INTCONF'? drivers/usb/isp1760/isp1760-core.c:423:31: error: initializer element is not constant drivers/usb/isp1760/isp1760-core.c:424:33: error: initializer element is not constant # git bisect skip 60d789f3bfbb7428e6ba2949de70a6db8e12e8fa Bisecting: 13 revisions left to test after this (roughly 4 steps) [dea6f87e60d193b2b3e21f9c6d657e53617369da] usb: typec: tcpm: Refactor logic to enable/disable auto vbus dicharge testing commit dea6f87e60d193b2b3e21f9c6d657e53617369da compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 9b2e69559454153aa2bd206e5d5fa356820a0e5e0f17200bd0ffe2c12218ea19 all runs: OK # git bisect good dea6f87e60d193b2b3e21f9c6d657e53617369da Bisecting: 1 revision left to test after this (roughly 1 step) [59d4d06c8ab0375dcc4bab329e6ecd44dd46373e] usb: typec: tcpm: Move TCPC to APPLY_RC state during PR_SWAP testing commit 59d4d06c8ab0375dcc4bab329e6ecd44dd46373e compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 6a4edc590fa1d8eec946ad193f8ba1ab57786c74797abc0949da3dc91efed396 all runs: OK # git bisect good 59d4d06c8ab0375dcc4bab329e6ecd44dd46373e Bisecting: 0 revisions left to test after this (roughly 0 steps) [7257fbc7c598617ca71605089264c61636d52157] usb: typec: tcpci: Implement callback for apply_rc testing commit 7257fbc7c598617ca71605089264c61636d52157 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.1 kernel signature: 295e966a5f0d718e4594d1ee4c830e0afb1a63c02c549a4f0c8acb847ad5b7e5 all runs: OK # git bisect good 7257fbc7c598617ca71605089264c61636d52157 5cc59c418fde9d02859996707b9d5dfd2941c50b is the first bad commit commit 5cc59c418fde9d02859996707b9d5dfd2941c50b Author: Alan Stern Date: Fri May 21 22:16:23 2021 -0400 USB: core: WARN if pipe direction != setup packet direction When a control URB is submitted, the direction indicated by URB's pipe member is supposed to match the direction indicated by the setup packet's bRequestType member. A mismatch could lead to trouble, depending on which field the host controller drivers use for determining the actual direction. This shouldn't ever happen; it would represent a careless bug in a kernel driver somewhere. This patch adds a dev_WARN_ONCE to let people know about the potential problem. Suggested-by: "Geoffrey D. Bennett" Reviewed-by: Johan Hovold Signed-off-by: Alan Stern Link: https://lore.kernel.org/r/20210522021623.GB1260282@rowland.harvard.edu Signed-off-by: Greg Kroah-Hartman drivers/usb/core/urb.c | 3 +++ 1 file changed, 3 insertions(+) culprit signature: b06c56a762dc77e3480e85bd7e3e594600cb46e04585e0eace049426799d657b parent signature: 295e966a5f0d718e4594d1ee4c830e0afb1a63c02c549a4f0c8acb847ad5b7e5 revisions tested: 27, total time: 6h55m30.574190582s (build: 2h59m39.026727437s, test: 3h52m54.308468502s) first bad commit: 5cc59c418fde9d02859996707b9d5dfd2941c50b USB: core: WARN if pipe direction != setup packet direction recipients (to): ["gregkh@linuxfoundation.org" "johan@kernel.org" "stern@rowland.harvard.edu"] recipients (cc): [] crash: WARNING in hid_submit_ctrl/usb_submit_urb ------------[ cut here ]------------ usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType a1 WARNING: CPU: 1 PID: 10159 at drivers/usb/core/urb.c:410 usb_submit_urb+0xfe7/0x1420 drivers/usb/core/urb.c:410 Modules linked in: CPU: 1 PID: 10159 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:usb_submit_urb+0xfe7/0x1420 drivers/usb/core/urb.c:410 Code: 85 f6 0f 84 17 01 00 00 89 4c 24 18 e8 82 16 24 ff 8b 4c 24 18 45 89 e8 4c 89 f2 48 89 c6 48 c7 c7 c0 d6 3e 89 e8 95 a2 35 03 <0f> 0b 4c 8d 75 5c 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea RSP: 0018:ffffc9000ae67c48 EFLAGS: 00010086 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000002 RSI: 0000000000000004 RDI: fffff520015ccf7b RBP: ffff888142595900 R08: 0000000000000001 R09: ffff8880b9f1fa5b R10: ffffed10173e3f4b R11: 0000000020627375 R12: ffff8880328f1000 R13: 00000000000000a1 R14: ffff8880111ed5a0 R15: ffff8880328f1058 FS: 00007fd44d1e8700(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000050eab0 CR3: 0000000016f21000 CR4: 0000000000350ee0 Call Trace: hid_submit_ctrl+0x686/0xf50 drivers/hid/usbhid/hid-core.c:416 usbhid_restart_ctrl_queue.isra.0+0x1cb/0x310 drivers/hid/usbhid/hid-core.c:258 usbhid_submit_report drivers/hid/usbhid/hid-core.c:640 [inline] usbhid_init_reports+0xc4/0x310 drivers/hid/usbhid/hid-core.c:780 hiddev_ioctl+0x991/0x1390 drivers/hid/usbhid/hiddev.c:689 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:1069 [inline] __se_sys_ioctl fs/ioctl.c:1055 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:1055 do_syscall_64+0x3a/0xb0 arch/x86/entry/common.c:47 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fd44d1e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000000000000 RSI: 0000000000004805 RDI: 0000000000000004 RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 R13: 00007fff56b1fb3f R14: 00007fd44d1e8300 R15: 0000000000022000 ---------------- Code disassembly (best guess): 0: 85 f6 test %esi,%esi 2: 0f 84 17 01 00 00 je 0x11f 8: 89 4c 24 18 mov %ecx,0x18(%rsp) c: e8 82 16 24 ff callq 0xff241693 11: 8b 4c 24 18 mov 0x18(%rsp),%ecx 15: 45 89 e8 mov %r13d,%r8d 18: 4c 89 f2 mov %r14,%rdx 1b: 48 89 c6 mov %rax,%rsi 1e: 48 c7 c7 c0 d6 3e 89 mov $0xffffffff893ed6c0,%rdi 25: e8 95 a2 35 03 callq 0x335a2bf 2a: 0f 0b ud2 <-- trapping instruction 2c: 4c 8d 75 5c lea 0x5c(%rbp),%r14 30: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 37: fc ff df 3a: 4c 89 f2 mov %r14,%rdx 3d: 48 rex.W 3e: c1 .byte 0xc1 3f: ea (bad)