ci2 starts bisection 2023-07-09 19:28:14.365502516 +0000 UTC m=+185087.946052913 bisecting fixing commit since 0ab06468cbd149aac0d7f216ec00452ff8c74e0b building syzkaller on a4ae4f428721da42ac15f07d6f3b54584dedee27 ensuring issue is reproducible on original commit 0ab06468cbd149aac0d7f216ec00452ff8c74e0b testing commit 0ab06468cbd149aac0d7f216ec00452ff8c74e0b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 1b6714e850ff280c3ec949638a26588260c78cba7111b6989b6cd7df353a8c77 all runs: crashed: WARNING in usbnet_start_xmit/usb_submit_urb representative crash: WARNING in usbnet_start_xmit/usb_submit_urb, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 0ab06468cbd149aac0d7f216ec00452ff8c74e0b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: ed15602ef99bb419fac7246e97ced69f585157151ac7d97439dbc8023ad1e190 all runs: crashed: WARNING in usbnet_start_xmit/usb_submit_urb representative crash: WARNING in usbnet_start_xmit/usb_submit_urb, types: [WARNING] the bug reproduces without the instrumentation disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing current HEAD d54cfc420586425d418a53871290cc4a59d33501 testing commit d54cfc420586425d418a53871290cc4a59d33501 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 0a1880c9dced7ec62c00bf25381833e57b337c5226a191986051fb432ac626a0 all runs: crashed: WARNING in usbnet_start_xmit/usb_submit_urb representative crash: WARNING in usbnet_start_xmit/usb_submit_urb, types: [WARNING] crash still not fixed/happens on the oldest tested release revisions tested: 3, total time: 1h45m22.392890515s (build: 1h26m57.197002345s, test: 9m2.894284976s) crash still not fixed on HEAD or HEAD had kernel test errors commit msg: Linux 5.15.120 crash: WARNING in usbnet_start_xmit/usb_submit_urb ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 2663 at drivers/usb/core/urb.c:502 usb_submit_urb+0x44f/0x6a0 drivers/usb/core/urb.c:502 Modules linked in: CPU: 1 PID: 2663 Comm: kworker/1:2 Not tainted 5.15.120-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 Workqueue: mld mld_ifc_work RIP: 0010:usb_submit_urb+0x44f/0x6a0 drivers/usb/core/urb.c:502 Code: 89 54 24 10 44 89 44 24 08 e8 fd 32 bd ff 44 8b 44 24 08 44 89 f9 48 c7 c7 38 1b 92 84 48 8b 54 24 10 48 89 c6 e8 80 67 fd 00 <0f> 0b e9 68 fd ff ff 41 b8 85 03 00 00 45 29 f0 e9 82 fd ff ff 89 RSP: 0018:ffffc90008c93b70 EFLAGS: 00010082 RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 RDX: 0000000000000404 RSI: ffffffff849e0dc1 RDI: 00000000ffffffff RBP: ffff88810bc45540 R08: ffffffff84ff6488 R09: 0000000000000003 R10: 00000000ffffe000 R11: 3fffffffffffffff R12: ffff88810f336800 R13: 0000000000000003 R14: 0000000000000001 R15: 0000000000000003 FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5c12da0480 CR3: 000000011264c000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: usbnet_start_xmit+0x1c8/0x710 drivers/net/usb/usbnet.c:1456 __netdev_start_xmit include/linux/netdevice.h:5018 [inline] netdev_start_xmit include/linux/netdevice.h:5032 [inline] xmit_one net/core/dev.c:3594 [inline] dev_hard_start_xmit+0xf1/0x2c0 net/core/dev.c:3610 sch_direct_xmit+0x99/0x360 net/sched/sch_generic.c:342 __dev_xmit_skb net/core/dev.c:3821 [inline] __dev_queue_xmit+0x74a/0xfe0 net/core/dev.c:4190 neigh_output include/net/neighbour.h:509 [inline] ip6_finish_output2+0x185/0x700 net/ipv6/ip6_output.c:126 dst_output include/net/dst.h:443 [inline] NF_HOOK include/linux/netfilter.h:302 [inline] NF_HOOK include/linux/netfilter.h:296 [inline] mld_sendpack+0x2f8/0x3d0 net/ipv6/mcast.c:1820 mld_send_cr net/ipv6/mcast.c:2121 [inline] mld_ifc_work+0x233/0x570 net/ipv6/mcast.c:2653 process_one_work+0x26f/0x510 kernel/workqueue.c:2307 worker_thread+0x4d/0x3b0 kernel/workqueue.c:2454 kthread+0x13c/0x160 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298