bisecting fixing commit since 051143e1602d90ea71887d92363edd539d411de5
building syzkaller on 9682898d6f14dd27f95c419d059fd867bb91b22b
testing commit 051143e1602d90ea71887d92363edd539d411de5 with gcc (GCC) 8.1.0
kernel signature: 9f104706f4b75b25e8be20b86eaf0102f3231c8fe33db607b1ba222b2369396b
all runs: crashed: WARNING in dlfb_submit_urb/usb_submit_urb
testing current HEAD c85fb28b6f999db9928b841f63f1beeb3074eeca
testing commit c85fb28b6f999db9928b841f63f1beeb3074eeca with gcc (GCC) 8.1.0
kernel signature: 0db147575ca4f531b6c46e7e00e381837aae021ab2e023c9cefea0d2101cc29e
all runs: crashed: WARNING in dlfb_submit_urb/usb_submit_urb
revisions tested: 2, total time: 17m20.14682524s (build: 10m34.781583168s, test: 6m7.806626118s)
the crash still happens on HEAD
commit msg: Merge tag 'arm64-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux
crash: WARNING in dlfb_submit_urb/usb_submit_urb
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 3 != type 1
WARNING: CPU: 0 PID: 5 at drivers/usb/core/urb.c:479 usb_submit_urb+0x4fa/0x520 drivers/usb/core/urb.c:478
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.9.0-rc8-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usb_hub_wq hub_event
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xa3/0xcc lib/dump_stack.c:118
 panic+0x135/0x31a kernel/panic.c:231
 __warn.cold.13+0x20/0x25 kernel/panic.c:600
 report_bug+0xc0/0xf0 lib/bug.c:198
 handle_bug+0x35/0x90 arch/x86/kernel/traps.c:234
 exc_invalid_op+0x13/0x60 arch/x86/kernel/traps.c:254
 asm_exc_invalid_op+0x12/0x20 arch/x86/include/asm/idtentry.h:536
RIP: 0010:usb_submit_urb+0x4fa/0x520 drivers/usb/core/urb.c:478
Code: 00 00 00 89 4c 24 0c 48 89 14 24 e8 90 8a cf ff 8b 4c 24 0c 41 89 e8 48 c7 c7 80 e0 fc 83 48 8b 14 24 48 89 c6 e8 11 88 e4 fe <0f> 0b e9 3f fc ff ff b8 fe ff ff ff e9 f9 fe ff ff b8 f8 ff ff ff
RSP: 0018:ffffc90000c937c0 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffff88810f8d2f00 RCX: 0000000000000001
RDX: 0000000080000001 RSI: ffffffff84021421 RDI: 00000000ffffffff
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001
R10: ffff88812b7ec140 R11: 776a4e43fa62f4c8 R12: 0000000000000cc0
R13: 0000000000000001 R14: ffff88810f938800 R15: 0000000000000003
 dlfb_submit_urb+0x28/0x70 drivers/video/fbdev/udlfb.c:1968
 dlfb_set_video_mode+0x4e6/0x560 drivers/video/fbdev/udlfb.c:315
 dlfb_ops_set_par+0xf2/0x240 drivers/video/fbdev/udlfb.c:1109
 dlfb_usb_probe.cold.26+0x473/0x7ed drivers/video/fbdev/udlfb.c:1731
 usb_probe_interface+0xde/0x210 drivers/usb/core/driver.c:396
 really_probe+0x29e/0x2e0 drivers/base/dd.c:557
 driver_probe_device+0x49/0xa0 drivers/base/dd.c:738
 bus_for_each_drv+0x74/0xc0 drivers/base/bus.c:431
 __device_attach+0xdd/0x140 drivers/base/dd.c:912
 bus_probe_device+0x94/0xb0 drivers/base/bus.c:491
 device_add+0x40a/0x780 drivers/base/core.c:2926
 usb_set_configuration+0x5c0/0x850 drivers/usb/core/message.c:2025
 usb_generic_driver_probe+0x34/0x60 drivers/usb/core/generic.c:240
 usb_probe_device+0x27/0x90 drivers/usb/core/driver.c:293
 really_probe+0x29e/0x2e0 drivers/base/dd.c:557
 driver_probe_device+0x49/0xa0 drivers/base/dd.c:738
 bus_for_each_drv+0x74/0xc0 drivers/base/bus.c:431
 __device_attach+0xdd/0x140 drivers/base/dd.c:912
 bus_probe_device+0x94/0xb0 drivers/base/bus.c:491
 device_add+0x40a/0x780 drivers/base/core.c:2926
 usb_new_device.cold.67+0x111/0x3d5 drivers/usb/core/hub.c:2554
 hub_port_connect drivers/usb/core/hub.c:5208 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5348 [inline]
 port_event drivers/usb/core/hub.c:5494 [inline]
 hub_event+0xb76/0x1280 drivers/usb/core/hub.c:5576
 process_one_work+0x26a/0x5f0 kernel/workqueue.c:2269
 worker_thread+0x38/0x380 kernel/workqueue.c:2415
 kthread+0x148/0x170 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294
Kernel Offset: disabled
Rebooting in 86400 seconds..