syzbot


WARNING in media_create_pad_link

Status: upstream: reported C repro on 2023/03/20 02:06
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+08aaf203dbf7bf8feb6f@syzkaller.appspotmail.com
First crash: 614d, last: 52d
Fix bisection: failed (error log, bisect log)
  
Bug presence (1)
Date Name Commit Repro Result
2024/10/06 upstream (ToT) 8f602276d390 C [report] WARNING in media_create_pad_link
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 WARNING in media_create_pad_link origin:upstream C error 2 82d 614d 0/3 upstream: reported C repro on 2023/03/20 05:39
upstream WARNING in media_create_pad_link usb media C done done 104 2d02h 1653d 24/28 upstream: reported C repro on 2020/05/14 20:18
Last patch testing requests (2)
Created Duration User Patch Repo Result
2024/10/02 03:14 11m retest repro linux-5.15.y report log
2024/10/02 03:14 11m retest repro linux-5.15.y report log
Fix bisection attempts (3)
Created Duration User Patch Repo Result
2023/09/23 21:05 0m bisect fix linux-5.15.y error job log
2023/07/12 22:55 2h51m bisect fix linux-5.15.y OK (0) job log log
2023/06/07 18:03 28m bisect fix linux-5.15.y OK (0) job log log

Sample crash report:
usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a
usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
usb 1-1: Manufacturer: syz
usb 1-1: config 0 descriptor??
usb 1-1: Found UVC 0.00 device <unnamed> (0bd3:0d55)
uvcvideo 1-1:0.0: Entity type for entity Output 255 was not initialized!
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3300 at drivers/media/mc/mc-entity.c:667 media_create_pad_link+0x95c/0xab0
Modules linked in:
CPU: 0 PID: 3300 Comm: kworker/0:3 Not tainted 5.15.110-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
Workqueue: usb_hub_wq hub_event
RIP: 0010:media_create_pad_link+0x95c/0xab0 drivers/media/mc/mc-entity.c:667
Code: 01 00 00 66 ff 03 31 c0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b2 b0 d0 fa 0f 0b b8 ea ff ff ff eb e3 e8 a4 b0 d0 fa <0f> 0b b8 ea ff ff ff eb d5 e8 96 b0 d0 fa 0f 0b b8 ea ff ff ff eb
RSP: 0018:ffffc90002d6ea40 EFLAGS: 00010293
RAX: ffffffff86af2ddc RBX: 0000000000000000 RCX: ffff88801e229d00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff86af24e6 R09: ffffed10028f6a98
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888018a18880
R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880786d9880
FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055f909b56948 CR3: 0000000020d13000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 uvc_mc_create_links drivers/media/usb/uvc/uvc_entity.c:50 [inline]
 uvc_mc_register_entities+0x6e0/0x950 drivers/media/usb/uvc/uvc_entity.c:151
 uvc_register_chains+0x3d4/0x4c0 drivers/media/usb/uvc/uvc_driver.c:2300
 uvc_probe+0xaa4d/0xb310 drivers/media/usb/uvc/uvc_driver.c:2437
 usb_probe_interface+0x5c0/0xaf0 drivers/usb/core/driver.c:396
 really_probe+0x24e/0xb60 drivers/base/dd.c:595
 __driver_probe_device+0x1a2/0x3d0 drivers/base/dd.c:755
 driver_probe_device+0x50/0x420 drivers/base/dd.c:785
 __device_attach_driver+0x2b9/0x500 drivers/base/dd.c:907
 bus_for_each_drv+0x183/0x200 drivers/base/bus.c:427
 __device_attach+0x359/0x570 drivers/base/dd.c:979
 bus_probe_device+0xba/0x1e0 drivers/base/bus.c:487
 device_add+0xb48/0xfd0 drivers/base/core.c:3394
 usb_set_configuration+0x19dd/0x2020 drivers/usb/core/message.c:2170
 usb_generic_driver_probe+0x84/0x140 drivers/usb/core/generic.c:238
 usb_probe_device+0x130/0x260 drivers/usb/core/driver.c:293
 really_probe+0x24e/0xb60 drivers/base/dd.c:595
 __driver_probe_device+0x1a2/0x3d0 drivers/base/dd.c:755
 driver_probe_device+0x50/0x420 drivers/base/dd.c:785
 __device_attach_driver+0x2b9/0x500 drivers/base/dd.c:907
 bus_for_each_drv+0x183/0x200 drivers/base/bus.c:427
 __device_attach+0x359/0x570 drivers/base/dd.c:979
 bus_probe_device+0xba/0x1e0 drivers/base/bus.c:487
 device_add+0xb48/0xfd0 drivers/base/core.c:3394
 usb_new_device+0xc17/0x18d0 drivers/usb/core/hub.c:2568
 hub_port_connect drivers/usb/core/hub.c:5358 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5502 [inline]
 port_event drivers/usb/core/hub.c:5648 [inline]
 hub_event+0x2dd8/0x56d0 drivers/usb/core/hub.c:5730
 process_one_work+0x8a1/0x10c0 kernel/workqueue.c:2306
 worker_thread+0xaca/0x1280 kernel/workqueue.c:2453
 kthread+0x3f6/0x4f0 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
 </TASK>

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/05/08 02:23 linux-5.15.y 8a7f2a5c5aa1 90c93c40 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in media_create_pad_link
2023/03/20 02:06 linux-5.15.y 8020ae3c051d 7939252e .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in media_create_pad_link
2023/04/20 23:54 linux-5.15.y 3299fb36854f 2b32bd34 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in media_create_pad_link
2023/04/19 14:19 linux-5.15.y 4fdad925aa1a 94b4184e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in media_create_pad_link
2023/04/17 05:59 linux-5.15.y 4fdad925aa1a ec410564 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in media_create_pad_link
2023/04/14 01:37 linux-5.15.y 4fdad925aa1a 3cfcaa1b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in media_create_pad_link
2023/03/27 03:30 linux-5.15.y 115472395b0a fbf0499a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in media_create_pad_link
* Struck through repros no longer work on HEAD.