bisecting fixing commit since d6efb3ac3e6c19ab722b28bdb9252bae0b9676b6
building syzkaller on cb436c69d9bcb0330518a48559649c9436ed5e7a
testing commit d6efb3ac3e6c19ab722b28bdb9252bae0b9676b6 with gcc (GCC) 8.1.0
kernel signature: bae6057c8f17ac43974efaacec2226a6fb462accefea2eac8d362d65c1125482
run #0: crashed: BUG: corrupted list in kobject_add_internal
run #1: crashed: BUG: corrupted list in kobject_add_internal
run #2: crashed: BUG: corrupted list in klist_dec_and_del
run #3: crashed: BUG: corrupted list in kobject_add_internal
run #4: crashed: BUG: corrupted list in kobject_add_internal
run #5: crashed: BUG: corrupted list in kobject_add_internal
run #6: crashed: BUG: corrupted list in kobj_kset_leave
run #7: crashed: BUG: corrupted list in kobject_add_internal
run #8: crashed: BUG: corrupted list in klist_dec_and_del
run #9: crashed: BUG: corrupted list in kobject_add_internal
testing current HEAD 583090b1b8232e6eae243a9009699666153a13a9
testing commit 583090b1b8232e6eae243a9009699666153a13a9 with gcc (GCC) 8.1.0
kernel signature: bdb45db32c5bdae8fc1064500f325038f150cd05856f7f80e19ec08808c06f64
run #0: crashed: BUG: corrupted list in kobject_add_internal
run #1: crashed: BUG: corrupted list in kobject_add_internal
run #2: crashed: BUG: corrupted list in kobject_add_internal
run #3: crashed: BUG: corrupted list in klist_dec_and_del
run #4: crashed: BUG: corrupted list in kobj_kset_leave
run #5: crashed: BUG: corrupted list in kobject_add_internal
run #6: crashed: BUG: corrupted list in kobj_kset_leave
run #7: crashed: BUG: corrupted list in kobject_add_internal
run #8: crashed: BUG: corrupted list in kobject_add_internal
run #9: crashed: BUG: corrupted list in kobj_kset_leave
revisions tested: 2, total time: 16m2.315775108s (build: 9m47.443297583s, test: 5m50.363394391s)
the crash still happens on HEAD
commit msg: Merge tag 'block5.9-2020-10-08' of git://git.kernel.dk/linux-block
crash: BUG: corrupted list in kobj_kset_leave
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:56!
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 0 PID: 8302 Comm: kworker/u5:6 Not tainted 5.9.0-rc8-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: hci0 hci_rx_work
RIP: 0010:__list_del_entry_valid.cold.1+0x20/0x4c lib/list_debug.c:54
Code: 52 f1 83 e8 c7 5c 56 ff 0f 0b 48 89 fe 48 89 c2 48 c7 c7 08 53 f1 83 e8 b3 5c 56 ff 0f 0b 48 c7 c7 b8 53 f1 83 e8 a5 5c 56 ff <0f> 0b 48 89 f2 48 89 fe 48 c7 c7 78 53 f1 83 e8 91 5c 56 ff 0f 0b
RSP: 0018:ffffc90000ed3bb0 EFLAGS: 00010246
RAX: 0000000000000054 RBX: ffff88810f085418 RCX: 0000000000000002
RDX: 0000000000000000 RSI: ffffffff8401b9b1 RDI: 00000000ffffffff
RBP: ffff88810f085420 R08: 0000000000000001 R09: 0000000000000001
R10: ffff88810f15a100 R11: 37ceaebf28818735 R12: ffff88812b060b40
R13: 00000000ffffffef R14: ffffffff84460660 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff88812c000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000ca8660 CR3: 0000000120e83000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __list_del_entry include/linux/list.h:132 [inline]
 list_del_init include/linux/list.h:204 [inline]
 kobj_kset_leave+0x23/0x60 lib/kobject.c:207
 kobject_add_internal+0xca/0x230 lib/kobject.c:257
 kobject_add_varg lib/kobject.c:390 [inline]
 kobject_add+0x7d/0xb0 lib/kobject.c:442
 device_add+0x106/0x780 drivers/base/core.c:2859
 hci_conn_add_sysfs+0x37/0x60 net/bluetooth/hci_sysfs.c:53
 hci_conn_complete_evt.isra.67+0x12d/0x6c0 net/bluetooth/hci_event.c:2623
 hci_event_packet+0x84b/0x286d net/bluetooth/hci_event.c:6058
 hci_rx_work+0xbd/0x500 net/bluetooth/hci_core.c:4889
 process_one_work+0x26a/0x5f0 kernel/workqueue.c:2269
 worker_thread+0x38/0x380 kernel/workqueue.c:2415
 kthread+0x148/0x170 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294
Modules linked in:
---[ end trace c5dd0f5bf886cb1a ]---
RIP: 0010:__list_del_entry_valid.cold.1+0x20/0x4c lib/list_debug.c:54
Code: 52 f1 83 e8 c7 5c 56 ff 0f 0b 48 89 fe 48 89 c2 48 c7 c7 08 53 f1 83 e8 b3 5c 56 ff 0f 0b 48 c7 c7 b8 53 f1 83 e8 a5 5c 56 ff <0f> 0b 48 89 f2 48 89 fe 48 c7 c7 78 53 f1 83 e8 91 5c 56 ff 0f 0b
RSP: 0018:ffffc90000ed3bb0 EFLAGS: 00010246
RAX: 0000000000000054 RBX: ffff88810f085418 RCX: 0000000000000002
RDX: 0000000000000000 RSI: ffffffff8401b9b1 RDI: 00000000ffffffff
RBP: ffff88810f085420 R08: 0000000000000001 R09: 0000000000000001
R10: ffff88810f15a100 R11: 37ceaebf28818735 R12: ffff88812b060b40
R13: 00000000ffffffef R14: ffffffff84460660 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff88812c000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000ca8660 CR3: 0000000120e83000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400