ci starts bisection 2023-04-03 08:14:31.125751242 +0000 UTC m=+9221.448493765 bisecting fixing commit since dd81e1c7d5fb126e5fbc5c9e334d7b3ec29a16a0 building syzkaller on 214351e168def9426c79e1f65a93ddb112cee906 ensuring issue is reproducible on original commit dd81e1c7d5fb126e5fbc5c9e334d7b3ec29a16a0 testing commit dd81e1c7d5fb126e5fbc5c9e334d7b3ec29a16a0 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9c519cc68530eff7df8e9f96d27e70197ba866c6b593ef76982476d580a79e84 run #0: crashed: WARNING in cm109_input_open/usb_submit_urb run #1: crashed: WARNING in cm109_input_open/usb_submit_urb run #2: crashed: WARNING in cm109_input_open/usb_submit_urb run #3: crashed: WARNING in cm109_input_open/usb_submit_urb run #4: crashed: BUG: corrupted list in usb_hcd_link_urb_to_ep run #5: crashed: WARNING in cm109_input_open/usb_submit_urb run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK reproducer seems to be flaky testing current HEAD 7e364e56293bb98cae1b55fd835f5991c4e96e7d testing commit 7e364e56293bb98cae1b55fd835f5991c4e96e7d gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: efa9eea432bc066521ce4915cadd59c253d18a8127b6bf30a87ad481cffe058f run #0: crashed: WARNING in cm109_input_open/usb_submit_urb run #1: crashed: WARNING in cm109_input_open/usb_submit_urb run #2: crashed: BUG: corrupted list in usb_hcd_link_urb_to_ep run #3: crashed: WARNING in cm109_input_open/usb_submit_urb run #4: crashed: BUG: corrupted list in usb_hcd_link_urb_to_ep run #5: crashed: BUG: corrupted list in usb_hcd_link_urb_to_ep run #6: crashed: WARNING in cm109_input_open/usb_submit_urb run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK Reproducer flagged being flaky revisions tested: 2, total time: 51m30.426285863s (build: 26m30.063800061s, test: 23m42.231281582s) the crash still happens on HEAD commit msg: Linux 6.3-rc5 crash: WARNING in cm109_input_open/usb_submit_urb input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input1338 ------------[ cut here ]------------ URB ffff88806ce40d00 submitted while active WARNING: CPU: 0 PID: 7823 at drivers/usb/core/urb.c:379 usb_submit_urb+0x9d/0x1860 Modules linked in: CPU: 0 PID: 7823 Comm: kworker/0:4 Not tainted 6.3.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 Workqueue: usb_hub_wq hub_event RIP: 0010:usb_submit_urb+0x9d/0x1860 Code: 30 41 bf f0 ff ff ff 80 3d 7c 36 29 07 00 0f 85 4e 0d 00 00 c6 05 6f 36 29 07 01 48 c7 c7 20 60 f5 89 4c 89 e6 e8 93 3e d1 fb <0f> 0b e9 31 0d 00 00 49 8d 6c 24 40 48 89 e8 48 c1 e8 03 48 89 44 RSP: 0018:ffffc9000b2ceb98 EFLAGS: 00010246 RAX: e0de27b010587900 RBX: 0000000000000cc0 RCX: 0000000000000002 RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000001 RBP: ffff88806ce40d08 R08: dffffc0000000000 R09: ffffed10173c515b R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88806ce40d00 R13: dffffc0000000000 R14: ffff88807e8c3850 R15: 00000000fffffff0 FS: 0000000000000000(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2d04a5c5a8 CR3: 0000000020ef1000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: cm109_input_open+0x1e6/0x440 input_open_device+0x137/0x290 kbd_connect+0xd1/0x100 input_register_device+0xac4/0xe00 cm109_usb_probe+0x1097/0x1560 usb_probe_interface+0x49f/0x9b0 really_probe+0x24d/0xa70 __driver_probe_device+0x1e5/0x360 driver_probe_device+0x4b/0x3a0 __device_attach_driver+0x2cd/0x3f0 bus_for_each_drv+0x212/0x280 __device_attach+0x255/0x450 bus_probe_device+0x12a/0x200 device_add+0x77b/0xd90 usb_set_configuration+0x17dc/0x1de0 usb_generic_driver_probe+0x65/0xf0 usb_probe_device+0xc7/0x1f0 really_probe+0x24d/0xa70 __driver_probe_device+0x1e5/0x360 driver_probe_device+0x4b/0x3a0 __device_attach_driver+0x2cd/0x3f0 bus_for_each_drv+0x212/0x280 __device_attach+0x255/0x450 bus_probe_device+0x12a/0x200 device_add+0x77b/0xd90 usb_new_device+0xab6/0x1820 hub_event+0x2627/0x45e0 process_one_work+0x797/0xe20 worker_thread+0x8c9/0xfd0 kthread+0x232/0x2b0 ret_from_fork+0x1f/0x30