ci starts bisection 2023-03-09 18:23:26.583468359 +0000 UTC m=+39946.705994916
bisecting fixing commit since 55be6084c8e0e0ada9278c2ab60b7a584378efda
building syzkaller on 67cb024cd1a3c95e311263a5c95e957f9abfd8ca
ensuring issue is reproducible on original commit 55be6084c8e0e0ada9278c2ab60b7a584378efda
testing commit 55be6084c8e0e0ada9278c2ab60b7a584378efda gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 8e26137a7522052eec1d68e6c907e4773a39ea89ab80fe5739a5282f148363a1
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe
run #1: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM
run #2: crashed: WARNING in cm109_urb_irq_callback/usb_submit_urb
run #3: crashed: WARNING in cm109_urb_irq_callback/usb_submit_urb
run #4: crashed: WARNING in cm109_urb_irq_callback/usb_submit_urb
run #5: crashed: WARNING in cm109_urb_irq_callback/usb_submit_urb
run #6: crashed: WARNING in cm109_urb_irq_callback/usb_submit_urb
run #7: crashed: WARNING in cm109_urb_irq_callback/usb_submit_urb
run #8: crashed: WARNING in cm109_urb_irq_callback/usb_submit_urb
run #9: crashed: WARNING in cm109_urb_irq_callback/usb_submit_urb
run #10: crashed: WARNING in cm109_urb_irq_callback/usb_submit_urb
run #11: crashed: WARNING in cm109_urb_irq_callback/usb_submit_urb
run #12: crashed: WARNING in cm109_urb_irq_callback/usb_submit_urb
run #13: crashed: WARNING in cm109_urb_irq_callback/usb_submit_urb
run #14: crashed: WARNING in cm109_urb_irq_callback/usb_submit_urb
run #15: crashed: WARNING in cm109_urb_irq_callback/usb_submit_urb
run #16: crashed: WARNING in cm109_urb_irq_callback/usb_submit_urb
run #17: crashed: WARNING in cm109_urb_irq_callback/usb_submit_urb
run #18: OK
run #19: OK
testing current HEAD 6a98c9cae232800c319ed69e1063480d31430887
testing commit 6a98c9cae232800c319ed69e1063480d31430887 gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 2ffe8354a504e6d502212548460b08fd530c45a29de299beadda135af5c6fd89
all runs: crashed: WARNING in cm109_urb_irq_callback/usb_submit_urb
revisions tested: 2, total time: 28m43.016545433s (build: 13m32.812543103s, test: 14m29.849427293s)
the crash still happens on HEAD
commit msg: Merge tag 'fs_for_v6.3-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs
crash: WARNING in cm109_urb_irq_callback/usb_submit_urb
cm109 1-1:0.0: cm109_urb_irq_callback: urb status -71
------------[ cut here ]------------
URB ffff888028e2e200 submitted while active
WARNING: CPU: 1 PID: 5046 at drivers/usb/core/urb.c:379 usb_submit_urb+0x1059/0x1690 drivers/usb/core/urb.c:379
Modules linked in:
CPU: 1 PID: 5046 Comm: kworker/1:3 Not tainted 6.3.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: usb_hub_wq hub_event
RIP: 0010:usb_submit_urb+0x1059/0x1690 drivers/usb/core/urb.c:379
Code: 3d d9 52 ae 07 00 b8 f0 ff ff ff 0f 85 f5 fb ff ff 48 89 ee 48 c7 c7 20 e7 c9 89 89 04 24 c6 05 ba 52 ae 07 01 e8 47 0a f1 fb <0f> 0b 8b 04 24 e9 d2 fb ff ff 48 b8 00 00 00 00 00 fc ff df 48 89
RSP: 0018:ffffc900003e8a18 EFLAGS: 00010082
RAX: 0000000000000000 RBX: ffff88801bf5c000 RCX: 0000000000000000
RDX: 0000000000000104 RSI: 0000000000000004 RDI: 0000000000000001
RBP: ffff888028e2e200 R08: 0000000000000001 R09: ffff8880b9d2798b
R10: ffffed10173a4f31 R11: 0000000000000001 R12: ffff88801bf5c058
R13: ffff8880285542c0 R14: 000000000000000f R15: ffff88802873db00
FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000557398ebdd28 CR3: 000000007e3bc000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
cm109_urb_irq_callback+0x280/0xa10 drivers/input/misc/cm109.c:422
__usb_hcd_giveback_urb+0x23e/0x3f0 drivers/usb/core/hcd.c:1671
dummy_timer+0xffa/0x2c10 drivers/usb/gadget/udc/dummy_hcd.c:1988
call_timer_fn+0x19b/0x5d0 kernel/time/timer.c:1700
expire_timers+0x259/0x4f0 kernel/time/timer.c:1751
__run_timers kernel/time/timer.c:2022 [inline]
__run_timers kernel/time/timer.c:1995 [inline]
run_timer_softirq+0x292/0x790 kernel/time/timer.c:2035
__do_softirq+0x2df/0xadf kernel/softirq.c:571
invoke_softirq kernel/softirq.c:445 [inline]
__irq_exit_rcu+0x114/0x190 kernel/softirq.c:650
irq_exit_rcu+0x5/0x20 kernel/softirq.c:662
sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1107
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:console_flush_all+0x4cc/0xa70 kernel/printk/printk.c:2948
Code: 36 05 00 00 44 88 7d 00 e8 e1 4a 00 00 4d 85 e4 0f 85 06 02 00 00 9c 58 f6 c4 02 0f 85 40 03 00 00 4d 85 e4 74 01 fb 48 89 e8 <48> 89 ea 48 c1 e8 03 83 e2 07 42 0f b6 04 28 38 d0 7f 08 84 c0 0f
RSP: 0018:ffffc900030af648 EFLAGS: 00000206
RAX: ffffc900030af788 RBX: ffffffff8bdfe6e0 RCX: 1ffffffff1fb2836
RDX: 0000000000000000 RSI: ffffffff892bf8c0 RDI: ffffffff89863940
RBP: ffffc900030af788 R08: 0000000000000001 R09: ffffffff8fd93a47
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000200
R13: dffffc0000000000 R14: ffffffff8bdfe738 R15: 0000000000000000
console_unlock+0x91/0x140 kernel/printk/printk.c:3016
vprintk_emit+0xa8/0x3d0 kernel/printk/printk.c:2316
dev_vprintk_emit drivers/base/core.c:4805 [inline]
dev_printk_emit+0xcc/0x110 drivers/base/core.c:4816
_dev_info+0xc9/0x100 drivers/base/core.c:4874
usb_disconnect+0xc9/0x870 drivers/usb/core/hub.c:2220
hub_port_connect drivers/usb/core/hub.c:5246 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5551 [inline]
port_event drivers/usb/core/hub.c:5711 [inline]
hub_event+0x17f3/0x4240 drivers/usb/core/hub.c:5793
process_one_work+0x8ba/0x1590 kernel/workqueue.c:2390
worker_thread+0x598/0xec0 kernel/workqueue.c:2537
kthread+0x294/0x330 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
----------------
Code disassembly (best guess):
0: 36 05 00 00 44 88 ss add $0x88440000,%eax
6: 7d 00 jge 0x8
8: e8 e1 4a 00 00 callq 0x4aee
d: 4d 85 e4 test %r12,%r12
10: 0f 85 06 02 00 00 jne 0x21c
16: 9c pushfq
17: 58 pop %rax
18: f6 c4 02 test $0x2,%ah
1b: 0f 85 40 03 00 00 jne 0x361
21: 4d 85 e4 test %r12,%r12
24: 74 01 je 0x27
26: fb sti
27: 48 89 e8 mov %rbp,%rax
* 2a: 48 89 ea mov %rbp,%rdx <-- trapping instruction
2d: 48 c1 e8 03 shr $0x3,%rax
31: 83 e2 07 and $0x7,%edx
34: 42 0f b6 04 28 movzbl (%rax,%r13,1),%eax
39: 38 d0 cmp %dl,%al
3b: 7f 08 jg 0x45
3d: 84 c0 test %al,%al
3f: 0f .byte 0xf