ci starts bisection 2023-01-28 16:08:35.012068585 +0000 UTC m=+507428.958130652 bisecting fixing commit since 274a2eebf80c60246f9edd6ef8e9a095ad121264 building syzkaller on d58e263faeabeb9fe94e1fc40dad3d6e88586605 ensuring issue is reproducible on original commit 274a2eebf80c60246f9edd6ef8e9a095ad121264 testing commit 274a2eebf80c60246f9edd6ef8e9a095ad121264 gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 8dfc09d377a097da87b3ea947dd5d5c54d233a70236fe58367c2744b627a9b98 all runs: crashed: WARNING in hif_usb_send/usb_submit_urb testing current HEAD 6d796c50f84ca79f1722bb131799e5a5710c4700 testing commit 6d796c50f84ca79f1722bb131799e5a5710c4700 gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 5dd77386ee0092e00f3ab7933756288be11839bfbbfd42ebd71a78c4bdcadefe run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect start 6d796c50f84ca79f1722bb131799e5a5710c4700 274a2eebf80c60246f9edd6ef8e9a095ad121264 Bisecting: 16693 revisions left to test after this (roughly 14 steps) [08ad43d554bacb9769c6a69d5f771f02f5ba411c] Merge tag 'net-6.1-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit 08ad43d554bacb9769c6a69d5f771f02f5ba411c gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f6edbe8c30880cea24d77cd975d7ae3ef1c1c7e24965d747c5523819678591b8 all runs: crashed: WARNING in hif_usb_send/usb_submit_urb # git bisect good 08ad43d554bacb9769c6a69d5f771f02f5ba411c Bisecting: 8704 revisions left to test after this (roughly 13 steps) [1ca06f1c1acecbe02124f14a37cce347b8c1a90c] Merge tag 'xtensa-20221213' of https://github.com/jcmvbkbc/linux-xtensa testing commit 1ca06f1c1acecbe02124f14a37cce347b8c1a90c gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a61d783534d61ce4780a05128a70a7515eee323ebf1be4b70610840fb42a185c all runs: crashed: WARNING in hif_usb_send/usb_submit_urb # git bisect good 1ca06f1c1acecbe02124f14a37cce347b8c1a90c Bisecting: 4281 revisions left to test after this (roughly 12 steps) [58bcac11fd94f950abc7b8466c5ceac7be07a00e] Merge tag 'usb-6.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb testing commit 58bcac11fd94f950abc7b8466c5ceac7be07a00e gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 6869b6c0248d357bbf443e1dcd972bb7115a4b5b1d71d417883d702f3bcc3038 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #1: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #2: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 58bcac11fd94f950abc7b8466c5ceac7be07a00e Bisecting: 2210 revisions left to test after this (roughly 11 steps) [b11919e1bb7f6f6273f5a33947b8496da2769eb8] Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit b11919e1bb7f6f6273f5a33947b8496da2769eb8 gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 0bdad487293dd392622a61edfe074b7a648755faf8ceb05ff5d8b9430e923778 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #1: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #2: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad b11919e1bb7f6f6273f5a33947b8496da2769eb8 Bisecting: 1100 revisions left to test after this (roughly 10 steps) [c609d739947894d7370eae4cf04eb2c49e910bcf] Merge tag 'wireless-next-2022-11-18' of git://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless-next testing commit c609d739947894d7370eae4cf04eb2c49e910bcf gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: c28ea539f54664f7f962a7428613f0bfd13fd65f7e6b3a4fa39a7850011bf2f8 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad c609d739947894d7370eae4cf04eb2c49e910bcf Bisecting: 554 revisions left to test after this (roughly 9 steps) [d3a4706339da26633316357efe7ab9a92ff29b2a] Merge branch 'rocker-two-small-changes' testing commit d3a4706339da26633316357efe7ab9a92ff29b2a gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 0e7f055df313304b3169125c84b63e3d2944f3e4edc03e5dfdec4ffae27bf3ae all runs: boot failed: WARNING in genl_register_family # git bisect skip d3a4706339da26633316357efe7ab9a92ff29b2a Bisecting: 555 revisions left to test after this (roughly 9 steps) [386b4174827ce0c7ecc789a6c8bf98e994dc2dee] rocker: Explicitly mark learned FDB entries as offloaded testing commit 386b4174827ce0c7ecc789a6c8bf98e994dc2dee gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 453c6322dbc8b0bcdcec765bf0ab37ae35a8620b63ed41b26b82267da5b1d361 all runs: boot failed: WARNING in genl_register_family # git bisect skip 386b4174827ce0c7ecc789a6c8bf98e994dc2dee Bisecting: 555 revisions left to test after this (roughly 9 steps) [5c624a1d77d3eb2e314b59282b1213fa760d192c] Merge branch 'netlink-formatted-extacks' testing commit 5c624a1d77d3eb2e314b59282b1213fa760d192c gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 201e73684b8431f6e5473a5fc6c5f64864252f0638e022d30ed4f2f1a7404230 all runs: boot failed: WARNING in cpumask_next_wrap # git bisect skip 5c624a1d77d3eb2e314b59282b1213fa760d192c Bisecting: 555 revisions left to test after this (roughly 9 steps) [95170a46b7dddbc3ac31b20ef2e8fa9d556d783d] wifi: iwlwifi: mei: don't send SAP commands if AMT is disabled testing commit 95170a46b7dddbc3ac31b20ef2e8fa9d556d783d gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 645e6f3cbc1160eaf956bd6c1d193e6f79ba421e1b09055f0ddea3dc8f5e4420 all runs: boot failed: WARNING in genl_register_family # git bisect skip 95170a46b7dddbc3ac31b20ef2e8fa9d556d783d Bisecting: 555 revisions left to test after this (roughly 9 steps) [8f88474ce3eca2dd8fb4e08d4b6ab71e76312e3e] wifi: rtw89: 8852b: add chip_ops to get thermal testing commit 8f88474ce3eca2dd8fb4e08d4b6ab71e76312e3e gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9fb788e58a2abaa5debb48b5b12e5d8f7ea2321a00d669a7d6633de9da7060b1 all runs: crashed: WARNING in hif_usb_send/usb_submit_urb # git bisect good 8f88474ce3eca2dd8fb4e08d4b6ab71e76312e3e Bisecting: 516 revisions left to test after this (roughly 9 steps) [07d90c72efbef9767042b1b110420b9a41b6b978] Merge branch 'BPF verifier precision tracking improvements' testing commit 07d90c72efbef9767042b1b110420b9a41b6b978 gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: c6653e3f72bf6c62eb176b5bbc401ff4812d31bd7b5c8bb81bb0e36c3ed8c2e1 all runs: crashed: WARNING in hif_usb_send/usb_submit_urb # git bisect good 07d90c72efbef9767042b1b110420b9a41b6b978 Bisecting: 249 revisions left to test after this (roughly 8 steps) [f4c4ca70dedc1bce8e7b1648e652aa9be1d3fcd7] Merge tag 'for-netdev' of https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next testing commit f4c4ca70dedc1bce8e7b1648e652aa9be1d3fcd7 gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 888014821960a5ec445904624a7d3cc3a576559b5f3e84ba20c068fd2ff9921e all runs: crashed: WARNING in hif_usb_send/usb_submit_urb # git bisect good f4c4ca70dedc1bce8e7b1648e652aa9be1d3fcd7 Bisecting: 124 revisions left to test after this (roughly 7 steps) [cd502236835b678738810ecd501c85a3a7a11150] devlink: Introduce new attribute 'tx_priority' to devlink-rate testing commit cd502236835b678738810ecd501c85a3a7a11150 gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 005e8184ddd17f251373b56e5737e98860d88b9dd5c1f7c8c29b74eee6c50e18 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #1: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #2: crashed: WARNING in hif_usb_send/usb_submit_urb run #3: crashed: WARNING in hif_usb_send/usb_submit_urb run #4: crashed: WARNING in hif_usb_send/usb_submit_urb run #5: crashed: WARNING in hif_usb_send/usb_submit_urb run #6: crashed: WARNING in hif_usb_send/usb_submit_urb run #7: crashed: WARNING in hif_usb_send/usb_submit_urb run #8: crashed: WARNING in hif_usb_send/usb_submit_urb run #9: crashed: WARNING in hif_usb_send/usb_submit_urb # git bisect good cd502236835b678738810ecd501c85a3a7a11150 Bisecting: 61 revisions left to test after this (roughly 6 steps) [14566bbfdfaf3784f43ea9ca6769463dd6bed1e2] wifi: rtl8xxxu: Split up rtl8xxxu_identify_chip testing commit 14566bbfdfaf3784f43ea9ca6769463dd6bed1e2 gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a7f0905cec0dffbc70f4846e3d0bacc6ef57a7b1ab9165ade04ad5a9085b6845 all runs: boot failed: WARNING in genl_register_family # git bisect skip 14566bbfdfaf3784f43ea9ca6769463dd6bed1e2 Bisecting: 61 revisions left to test after this (roughly 6 steps) [0323f194c0da764b339048b45149e48851e7ea68] wifi: iwlwifi: dbg: add support for DBGC4 on BZ family and above testing commit 0323f194c0da764b339048b45149e48851e7ea68 gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9d7f656f5ad5ca7a03a78de1a1df87f419c2df9b22c3b143f901712e7942871a all runs: boot failed: WARNING in genl_register_family # git bisect skip 0323f194c0da764b339048b45149e48851e7ea68 Bisecting: 61 revisions left to test after this (roughly 6 steps) [0af03170637f47fb5cc6501d4b2dcbf1c14772a9] sctp: add dif and sdif check in asoc and ep lookup testing commit 0af03170637f47fb5cc6501d4b2dcbf1c14772a9 gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 51e63cf3d3e909e13e55ad06c735ffda90c2c5fd01f1abfa0c48e0dab18a3f7e run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #1: crashed: WARNING in hif_usb_send/usb_submit_urb run #2: crashed: WARNING in hif_usb_send/usb_submit_urb run #3: crashed: WARNING in hif_usb_send/usb_submit_urb run #4: crashed: WARNING in hif_usb_send/usb_submit_urb run #5: crashed: WARNING in hif_usb_send/usb_submit_urb run #6: crashed: WARNING in hif_usb_send/usb_submit_urb run #7: crashed: WARNING in hif_usb_send/usb_submit_urb run #8: crashed: WARNING in hif_usb_send/usb_submit_urb run #9: crashed: WARNING in hif_usb_send/usb_submit_urb # git bisect good 0af03170637f47fb5cc6501d4b2dcbf1c14772a9 Bisecting: 49 revisions left to test after this (roughly 6 steps) [7b0ac469e331d9f9fd77f4ebb7a6322f5562db67] wifi: rtl8xxxu: Recognise all possible chip cuts testing commit 7b0ac469e331d9f9fd77f4ebb7a6322f5562db67 gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9a30586b52f3bfa8208addc0ec3257f9059baa38c50914784d557f1d0ed61327 all runs: boot failed: WARNING in genl_register_family # git bisect skip 7b0ac469e331d9f9fd77f4ebb7a6322f5562db67 Bisecting: 49 revisions left to test after this (roughly 6 steps) [473118917cc33b98510880458c724bd833653db6] wifi: ath10k: Check return value of ath10k_get_arvif() in ath10k_wmi_event_tdls_peer() testing commit 473118917cc33b98510880458c724bd833653db6 gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b0baed55407b02f1520fff010cf923616146d47ecc335391fd39de1f06ccaa5c all runs: OK # git bisect bad 473118917cc33b98510880458c724bd833653db6 Bisecting: 10 revisions left to test after this (roughly 3 steps) [c2a94de38c74e86f49124ac14f093d6a5c377a90] wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() testing commit c2a94de38c74e86f49124ac14f093d6a5c377a90 gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d5a2534cbeaa868ece559c9fb25502cecc7fc1de6f266e754cc4742a049aa393 all runs: crashed: WARNING in hif_usb_send/usb_submit_urb # git bisect good c2a94de38c74e86f49124ac14f093d6a5c377a90 Bisecting: 4 revisions left to test after this (roughly 3 steps) [3ff51d7416ee1ea2d771051a0ffa1ec8be054768] wifi: ath11k: fix firmware assert during bandwidth change for peer sta testing commit 3ff51d7416ee1ea2d771051a0ffa1ec8be054768 gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: fe166a4e1d4fdd28d6066797eae1964a71724ac93d37137bfee9de3bdcc8c079 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 3ff51d7416ee1ea2d771051a0ffa1ec8be054768 Bisecting: 2 revisions left to test after this (roughly 2 steps) [16ef02bad239f11f322df8425d302be62f0443ce] wifi: ath9k: verify the expected usb_endpoints are present testing commit 16ef02bad239f11f322df8425d302be62f0443ce gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: ab33fa598ac6d7549685998f90950f8ee24ca48c7c6650cbcefa643ebad22397 all runs: OK # git bisect bad 16ef02bad239f11f322df8425d302be62f0443ce Bisecting: 1 revision left to test after this (roughly 1 step) [d174768932a89c20f2ef6dee2602221143995c29] wifi: ath9k: Remove -Warray-bounds exception testing commit d174768932a89c20f2ef6dee2602221143995c29 gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 6fc1869ae73491f0feebef83aa0d077a362ab3bdedff6f81798ae419135079f7 all runs: crashed: WARNING in hif_usb_send/usb_submit_urb # git bisect good d174768932a89c20f2ef6dee2602221143995c29 Bisecting: 0 revisions left to test after this (roughly 0 steps) [dd95f2239fc846795fc926787c3ae0ca701c9840] wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() testing commit dd95f2239fc846795fc926787c3ae0ca701c9840 gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: fa451eb26181150618369ad83fc63a698b70bc48c7eff3d6454d002b2afbf8b9 all runs: crashed: WARNING in hif_usb_send/usb_submit_urb # git bisect good dd95f2239fc846795fc926787c3ae0ca701c9840 16ef02bad239f11f322df8425d302be62f0443ce is the first bad commit commit 16ef02bad239f11f322df8425d302be62f0443ce Author: Fedor Pchelkin Date: Sun Oct 9 00:15:32 2022 +0300 wifi: ath9k: verify the expected usb_endpoints are present The bug arises when a USB device claims to be an ATH9K but doesn't have the expected endpoints. (In this case there was an interrupt endpoint where the driver expected a bulk endpoint.) The kernel needs to be able to handle such devices without getting an internal error. usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 3 PID: 500 at drivers/usb/core/urb.c:493 usb_submit_urb+0xce2/0x1430 drivers/usb/core/urb.c:493 Modules linked in: CPU: 3 PID: 500 Comm: kworker/3:2 Not tainted 5.10.135-syzkaller #0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events request_firmware_work_func RIP: 0010:usb_submit_urb+0xce2/0x1430 drivers/usb/core/urb.c:493 Call Trace: ath9k_hif_usb_alloc_rx_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:908 [inline] ath9k_hif_usb_alloc_urbs+0x75e/0x1010 drivers/net/wireless/ath/ath9k/hif_usb.c:1019 ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1109 [inline] ath9k_hif_usb_firmware_cb+0x142/0x530 drivers/net/wireless/ath/ath9k/hif_usb.c:1242 request_firmware_work_func+0x12e/0x240 drivers/base/firmware_loader/main.c:1097 process_one_work+0x9af/0x1600 kernel/workqueue.c:2279 worker_thread+0x61d/0x12f0 kernel/workqueue.c:2425 kthread+0x3b4/0x4a0 kernel/kthread.c:313 ret_from_fork+0x22/0x30 arch/x86/entry/entry_64.S:299 Found by Linux Verification Center (linuxtesting.org) with Syzkaller. Suggested-by: Alan Stern Signed-off-by: Fedor Pchelkin Signed-off-by: Alexey Khoroshilov Acked-by: Toke Høiland-Jørgensen Signed-off-by: Kalle Valo Link: https://lore.kernel.org/r/20221008211532.74583-1-pchelkin@ispras.ru drivers/net/wireless/ath/ath9k/hif_usb.c | 14 ++++++++++++++ 1 file changed, 14 insertions(+) culprit signature: ab33fa598ac6d7549685998f90950f8ee24ca48c7c6650cbcefa643ebad22397 parent signature: fa451eb26181150618369ad83fc63a698b70bc48c7eff3d6454d002b2afbf8b9 revisions tested: 25, total time: 6h43m45.247976054s (build: 3h36m8.961803661s, test: 3h3m34.861453971s) first good commit: 16ef02bad239f11f322df8425d302be62f0443ce wifi: ath9k: verify the expected usb_endpoints are present recipients (to): ["khoroshilov@ispras.ru" "pchelkin@ispras.ru" "quic_kvalo@quicinc.com" "toke@toke.dk"] recipients (cc): []