ci starts bisection 2023-03-27 07:02:08.470727114 +0000 UTC m=+187812.623438423 bisecting fixing commit since b229b6ca5abbd63ff40c1396095b1b36b18139c3 building syzkaller on 2a71366bacf3bf9a3a1a149e631fb15a7d0f2077 ensuring issue is reproducible on original commit b229b6ca5abbd63ff40c1396095b1b36b18139c3 testing commit b229b6ca5abbd63ff40c1396095b1b36b18139c3 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: abed0d806233982cae6c3f9ee5b5777aee4d373dcf380052d85239c402b931f6 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #1: crashed: WARNING in shark_write_val/usb_submit_urb run #2: crashed: WARNING in shark_write_val/usb_submit_urb run #3: crashed: WARNING in shark_write_val/usb_submit_urb run #4: crashed: WARNING in shark_write_val/usb_submit_urb run #5: crashed: WARNING in shark_write_val/usb_submit_urb run #6: crashed: WARNING in shark_write_val/usb_submit_urb run #7: crashed: WARNING in shark_write_val/usb_submit_urb run #8: crashed: WARNING in shark_write_val/usb_submit_urb run #9: crashed: WARNING in shark_write_val/usb_submit_urb run #10: crashed: WARNING in shark_write_val/usb_submit_urb run #11: crashed: WARNING in shark_write_val/usb_submit_urb run #12: crashed: WARNING in shark_write_val/usb_submit_urb run #13: crashed: SYZFATAL: executor failed NUM times: executor NUM: exit status NUM run #14: crashed: WARNING in shark_write_val/usb_submit_urb run #15: crashed: SYZFATAL: executor failed NUM times: executor NUM: failed to write control pipe: write |NUM: broken pipe run #16: crashed: WARNING in shark_write_val/usb_submit_urb run #17: crashed: WARNING in shark_write_val/usb_submit_urb run #18: crashed: SYZFATAL: executor failed NUM times: executor NUM: exit status NUM run #19: crashed: WARNING in shark_write_val/usb_submit_urb testing current HEAD 197b6b60ae7bc51dd0814953c562833143b292aa testing commit 197b6b60ae7bc51dd0814953c562833143b292aa gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 544b91d89ae4d6529faf204f626e2cda89ea83a5b364632bbbf5bd08dc1b12aa all runs: crashed: WARNING in shark_write_val/usb_submit_urb revisions tested: 2, total time: 23m1.791827492s (build: 14m36.037877299s, test: 7m9.96013416s) the crash still happens on HEAD commit msg: Linux 6.3-rc4 crash: WARNING in shark_write_val/usb_submit_urb usb 1-1: string descriptor 0 read error: -22 usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: config 0 descriptor?? ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 0 PID: 897 at drivers/usb/core/urb.c:504 usb_submit_urb+0xb07/0x1690 drivers/usb/core/urb.c:504 Modules linked in: CPU: 0 PID: 897 Comm: kworker/0:2 Not tainted 6.3.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 Workqueue: usb_hub_wq hub_event RIP: 0010:usb_submit_urb+0xb07/0x1690 drivers/usb/core/urb.c:504 Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 03 14 0a ff 44 8b 04 24 4c 89 e2 48 c7 c7 40 6c a9 89 8b 4c 24 08 48 89 c6 e8 d9 54 fc fb <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00 RSP: 0018:ffffc9000447eed8 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff888020f4b000 RCX: 0000000000000000 RDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000000000000001 RBP: ffff888025a24200 R08: 0000000000000000 R09: ffffc9000447ec07 R10: fffff5200088fd80 R11: 0000000000000000 R12: ffff88802a5b86c0 R13: 0000000000000002 R14: 0000000000000002 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055d8be668300 CR3: 000000000af6b000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: usb_start_wait_urb+0xf9/0x450 drivers/usb/core/message.c:58 shark_write_val+0x1f5/0x310 drivers/media/radio/radio-shark.c:94 snd_tea575x_hw_init drivers/media/radio/tea575x.c:502 [inline] snd_tea575x_init+0x85/0xa10 drivers/media/radio/tea575x.c:517 usb_shark_probe+0x5ea/0x910 drivers/media/radio/radio-shark2.c:312 usb_probe_interface+0x268/0x810 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:552 [inline] really_probe+0x1c7/0xb20 drivers/base/dd.c:631 __driver_probe_device+0x186/0x460 drivers/base/dd.c:768 driver_probe_device+0x44/0x110 drivers/base/dd.c:798 __device_attach_driver+0x14a/0x270 drivers/base/dd.c:926 bus_for_each_drv+0xfe/0x190 drivers/base/bus.c:457 __device_attach+0x19e/0x3d0 drivers/base/dd.c:998 bus_probe_device+0x127/0x170 drivers/base/bus.c:532 device_add+0xee0/0x1930 drivers/base/core.c:3589 usb_set_configuration+0xab8/0x1a20 drivers/usb/core/message.c:2171 usb_generic_driver_probe+0x84/0xd0 drivers/usb/core/generic.c:238 usb_probe_device+0x94/0x230 drivers/usb/core/driver.c:293 call_driver_probe drivers/base/dd.c:552 [inline] really_probe+0x1c7/0xb20 drivers/base/dd.c:631 __driver_probe_device+0x186/0x460 drivers/base/dd.c:768 driver_probe_device+0x44/0x110 drivers/base/dd.c:798 __device_attach_driver+0x14a/0x270 drivers/base/dd.c:926 bus_for_each_drv+0xfe/0x190 drivers/base/bus.c:457 __device_attach+0x19e/0x3d0 drivers/base/dd.c:998 bus_probe_device+0x127/0x170 drivers/base/bus.c:532 device_add+0xee0/0x1930 drivers/base/core.c:3589 usb_new_device+0xc6a/0x1920 drivers/usb/core/hub.c:2575 hub_port_connect drivers/usb/core/hub.c:5407 [inline] hub_port_connect_change drivers/usb/core/hub.c:5551 [inline] port_event drivers/usb/core/hub.c:5711 [inline] hub_event+0x24c8/0x4240 drivers/usb/core/hub.c:5793 process_one_work+0x865/0x13f0 kernel/workqueue.c:2390 worker_thread+0x598/0xec0 kernel/workqueue.c:2537 kthread+0x294/0x330 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308