syzbot


WARNING in imon_probe

Status: fixed on 2023/12/05 18:07
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+8d4395f6867abd9166f9@syzkaller.appspotmail.com
Fix commit: b083aaf5db2e media: imon: fix access to invalid resource for the second interface
First crash: 547d, last: 478d
Fix bisection: fixed by (bisect log) :
commit b083aaf5db2eeca9e362723258e5d8698f7dd84e
Author: Takashi Iwai <tiwai@suse.de>
Date: Fri Sep 22 12:38:07 2023 +0000

  media: imon: fix access to invalid resource for the second interface

  
Bug presence (1)
Date Name Commit Repro Result
2023/06/13 upstream (ToT) fb054096aea0 C [report] WARNING in imon_probe
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 WARNING in imon_probe syz error 2 514d 547d 0/3 auto-obsoleted due to no activity on 2023/12/11 03:28
upstream WARNING in imon_probe usb media syz 6 403d 544d 0/28 closed as dup on 2023/09/26 19:30

Sample crash report:
imon 1-1:1.0: unable to initialize intf0, err -19
imon:imon_probe: failed to initialize context!
imon 1-1:1.0: unable to register, err -19
usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
------------[ cut here ]------------
DEBUG_LOCKS_WARN_ON(lock->magic != lock)
WARNING: CPU: 0 PID: 7 at kernel/locking/mutex.c:582 __mutex_lock_common+0x1a2a/0x2520 kernel/locking/mutex.c:582
Modules linked in:
CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted 6.1.46-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
Workqueue: usb_hub_wq hub_event
RIP: 0010:__mutex_lock_common+0x1a2a/0x2520 kernel/locking/mutex.c:582
Code: 04 28 84 c0 0f 85 82 08 00 00 83 3d 07 f7 e5 03 00 0f 85 10 e7 ff ff 48 c7 c7 c0 cc eb 8a 48 c7 c6 60 cd eb 8a e8 36 9f c4 f6 <0f> 0b e9 f6 e6 ff ff e8 8a d1 72 f6 e9 59 fb ff ff 0f 0b e9 cd f0
RSP: 0018:ffffc900000c6ba0 EFLAGS: 00010246
RAX: 291c3cbfa4c46200 RBX: 0000000000000000 RCX: ffff88813fe4bb80
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc900000c6d18 R08: ffffffff81525dfe R09: ffffed1017304f1c
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7a47e5a111 CR3: 00000000275b6000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __mutex_lock kernel/locking/mutex.c:747 [inline]
 mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:799
 imon_init_intf1 drivers/media/rc/imon.c:2321 [inline]
 imon_probe+0x274/0x3320 drivers/media/rc/imon.c:2449
 usb_probe_interface+0x5c0/0xaf0 drivers/usb/core/driver.c:396
 really_probe+0x2ab/0xcb0 drivers/base/dd.c:639
 __driver_probe_device+0x1a2/0x3d0 drivers/base/dd.c:783
 driver_probe_device+0x50/0x420 drivers/base/dd.c:813
 __device_attach_driver+0x2cf/0x510 drivers/base/dd.c:941
 bus_for_each_drv+0x183/0x200 drivers/base/bus.c:427
 __device_attach+0x359/0x570 drivers/base/dd.c:1013
 bus_probe_device+0xba/0x1e0 drivers/base/bus.c:487
 device_add+0xb48/0xfd0 drivers/base/core.c:3664
 usb_set_configuration+0x19dd/0x2020 drivers/usb/core/message.c:2170
 usb_generic_driver_probe+0x84/0x140 drivers/usb/core/generic.c:238
 usb_probe_device+0x130/0x260 drivers/usb/core/driver.c:293
 really_probe+0x2ab/0xcb0 drivers/base/dd.c:639
 __driver_probe_device+0x1a2/0x3d0 drivers/base/dd.c:783
 driver_probe_device+0x50/0x420 drivers/base/dd.c:813
 __device_attach_driver+0x2cf/0x510 drivers/base/dd.c:941
 bus_for_each_drv+0x183/0x200 drivers/base/bus.c:427
 __device_attach+0x359/0x570 drivers/base/dd.c:1013
 bus_probe_device+0xba/0x1e0 drivers/base/bus.c:487
 device_add+0xb48/0xfd0 drivers/base/core.c:3664
 usb_new_device+0xbdd/0x18e0 drivers/usb/core/hub.c:2575
 hub_port_connect drivers/usb/core/hub.c:5355 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5499 [inline]
 port_event drivers/usb/core/hub.c:5655 [inline]
 hub_event+0x2d4d/0x57b0 drivers/usb/core/hub.c:5737
 process_one_work+0x8aa/0x11f0 kernel/workqueue.c:2292
 worker_thread+0xa5f/0x1210 kernel/workqueue.c:2439
 kthread+0x26e/0x300 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/08/21 10:01 linux-6.1.y 6c44e13dc284 d216d8a0 .config console log report syz [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in imon_probe
2023/06/13 12:35 linux-6.1.y 2f3918bc53fb 749afb64 .config console log report syz [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in imon_probe
* Struck through repros no longer work on HEAD.