ci starts bisection 2023-06-03 17:40:39.07879401 +0000 UTC m=+185992.576748560 bisecting fixing commit since dd81e1c7d5fb126e5fbc5c9e334d7b3ec29a16a0 building syzkaller on 214351e168def9426c79e1f65a93ddb112cee906 ensuring issue is reproducible on original commit dd81e1c7d5fb126e5fbc5c9e334d7b3ec29a16a0 testing commit dd81e1c7d5fb126e5fbc5c9e334d7b3ec29a16a0 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9f2332c179958338efe2f8a97f7d9533a69edf69c92f2465a5fbd03362eb28bc run #0: crashed: WARNING in cm109_input_open/usb_submit_urb run #1: crashed: WARNING in cm109_input_open/usb_submit_urb run #2: crashed: WARNING in cm109_input_open/usb_submit_urb run #3: crashed: WARNING in cm109_input_open/usb_submit_urb run #4: crashed: WARNING in cm109_input_open/usb_submit_urb run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: crashed: WARNING in cm109_input_open/usb_submit_urb run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK reproducer seems to be flaky testing current HEAD 51f269a6ecc701f9932eff5b253a1f89746be6bd testing commit 51f269a6ecc701f9932eff5b253a1f89746be6bd gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a478f387f80b6023885fe518dd01044e9b26ac77090999398e3af2061843ab40 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #1: crashed: BUG: corrupted list in usb_hcd_link_urb_to_ep run #2: crashed: WARNING in cm109_input_open/usb_submit_urb run #3: crashed: BUG: corrupted list in usb_hcd_link_urb_to_ep run #4: crashed: BUG: corrupted list in usb_hcd_link_urb_to_ep run #5: OK run #6: crashed: BUG: corrupted list in usb_hcd_link_urb_to_ep run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK crash still not fixed/happens on the oldest tested release Reproducer flagged being flaky revisions tested: 2, total time: 40m24.709906257s (build: 15m16.830237244s, test: 23m55.668492292s) crash still not fixed on HEAD or HEAD had kernel test errors commit msg: Merge tag 'probes-fixes-6.4-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace crash: BUG: corrupted list in usb_hcd_link_urb_to_ep list_add double add: new=ffff88806d7e0518, prev=ffff88806d7e0518, next=ffff88807c676070. ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:35! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 8197 Comm: kworker/1:11 Not tainted 6.4.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 Workqueue: usb_hub_wq hub_event RIP: 0010:__list_add_valid+0x9e/0xf0 Code: 39 e7 74 11 4d 39 f7 74 0c b0 01 5b 41 5c 41 5d 41 5e 41 5f c3 48 c7 c7 80 09 d9 89 4c 89 fe 4c 89 e2 4c 89 f1 e8 82 fc 75 05 <0f> 0b 48 c7 c7 80 07 d9 89 e8 74 fc 75 05 0f 0b 48 c7 c7 20 08 d9 RSP: 0018:ffffc900034169a0 EFLAGS: 00010046 RAX: 0000000000000058 RBX: ffff88807c676078 RCX: 3fa1f16ca286d700 RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000001 RBP: ffff88807c676070 R08: dffffc0000000000 R09: ffffed10173e515b R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88806d7e0518 R13: dffffc0000000000 R14: ffff88807c676070 R15: ffff88806d7e0518 FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fcefb761130 CR3: 000000001a92c000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: usb_hcd_link_urb_to_ep+0x17c/0x2c0 dummy_urb_enqueue+0x266/0x6c0 usb_hcd_submit_urb+0x3a0/0x1ce0 cm109_input_open+0x1e6/0x440 input_open_device+0x137/0x290 kbd_connect+0xd1/0x100 input_register_device+0xac4/0xe00 cm109_usb_probe+0x109a/0x1560 usb_probe_interface+0x49f/0x9b0 really_probe+0x250/0xa70 __driver_probe_device+0x138/0x340 driver_probe_device+0x4b/0x3a0 __device_attach_driver+0x2cd/0x3f0 bus_for_each_drv+0x212/0x280 __device_attach+0x255/0x450 bus_probe_device+0x12a/0x200 device_add+0x74b/0xc50 usb_set_configuration+0x156f/0x1b40 usb_generic_driver_probe+0x65/0xf0 usb_probe_device+0xc7/0x1f0 really_probe+0x250/0xa70 __driver_probe_device+0x138/0x340 driver_probe_device+0x4b/0x3a0 __device_attach_driver+0x2cd/0x3f0 bus_for_each_drv+0x212/0x280 __device_attach+0x255/0x450 bus_probe_device+0x12a/0x200 device_add+0x74b/0xc50 usb_new_device+0xab6/0x1820 hub_event+0x2627/0x45e0 process_one_work+0x797/0xe20 worker_thread+0x8c9/0xfd0 kthread+0x276/0x2f0 ret_from_fork+0x1f/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__list_add_valid+0x9e/0xf0 Code: 39 e7 74 11 4d 39 f7 74 0c b0 01 5b 41 5c 41 5d 41 5e 41 5f c3 48 c7 c7 80 09 d9 89 4c 89 fe 4c 89 e2 4c 89 f1 e8 82 fc 75 05 <0f> 0b 48 c7 c7 80 07 d9 89 e8 74 fc 75 05 0f 0b 48 c7 c7 20 08 d9 RSP: 0018:ffffc900034169a0 EFLAGS: 00010046 RAX: 0000000000000058 RBX: ffff88807c676078 RCX: 3fa1f16ca286d700 RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000001 RBP: ffff88807c676070 R08: dffffc0000000000 R09: ffffed10173e515b R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88806d7e0518 R13: dffffc0000000000 R14: ffff88807c676070 R15: ffff88806d7e0518 FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fcefb761130 CR3: 000000001a92c000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400