ci starts bisection 2024-10-17 17:41:30.580785048 +0000 UTC m=+162.397975090 bisecting cause commit starting from 15e7d45e786a62a211dd0098fee7c57f84f8c681 building syzkaller on 666f77ed02b98b834393ff84c646a8d611605f6f fetch other tags and check if the commit is present ensuring issue is reproducible on original commit 15e7d45e786a62a211dd0098fee7c57f84f8c681 testing commit 15e7d45e786a62a211dd0098fee7c57f84f8c681 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ba684086304e7d0bd2e893702a2b0070af7f2b0246c87b67def418bb45aa633f all runs: crashed: WARNING in uvc_status_unregister representative crash: WARNING in uvc_status_unregister, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 15e7d45e786a62a211dd0098fee7c57f84f8c681 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5e82fd45a8794a66cc2d856ef0f7eb0f1234d0294c30257ef04b45d0d9a77af0 all runs: crashed: WARNING in uvc_status_unregister representative crash: WARNING in uvc_status_unregister, types: [WARNING] the bug reproduces without the instrumentation disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed kconfig minimization: base=4045 full=8213 leaves diff=2115 split chunks (needed=false): <2115> split chunk #0 of len 2115 into 5 parts testing without sub-chunk 1/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 15e7d45e786a62a211dd0098fee7c57f84f8c681 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6df27a80b4e93dd6bfea6701a04d73d14cd028cd209532311fc32347361257d0 all runs: crashed: WARNING in uvc_status_unregister representative crash: WARNING in uvc_status_unregister, types: [WARNING] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit 15e7d45e786a62a211dd0098fee7c57f84f8c681 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 68ba86568966cf55f05804ec7a6b2222953934e7d29e3dd311fcb52c02790830 all runs: crashed: WARNING in uvc_status_unregister representative crash: WARNING in uvc_status_unregister, types: [WARNING] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 15e7d45e786a62a211dd0098fee7c57f84f8c681 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: be737af3f18501e3a93b5c93f62bd0c94a35aac2eebfbfee7a49a93f50c7d4c1 all runs: crashed: WARNING in uvc_status_unregister representative crash: WARNING in uvc_status_unregister, types: [WARNING] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 15e7d45e786a62a211dd0098fee7c57f84f8c681 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9564e5e9ba7af5fbccc370ffc859faff64819c4ab1b346e2eada08813561ceda all runs: crashed: WARNING in uvc_status_unregister representative crash: WARNING in uvc_status_unregister, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed testing commit 15e7d45e786a62a211dd0098fee7c57f84f8c681 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d9002d969908ad625ff97e41dc5e5253667ea0b2dd802b801a44f5bc6bcb7385 all runs: OK false negative chance: 0.000 minimized to 423 configs; suspects: [ARCH_ENABLE_MEMORY_HOTREMOVE ATM BCMA BLK_DEV_ZONED BPF_SYSCALL CARDBUS CFG80211 CFG80211_WEXT CMA COMMON_CLK CONTIG_ALLOC DVB_CORE EXTCON FB GPIOLIB HID_ZEROPLUS I2C_MUX IIO IOMMUFD IRQ_REMAP KVM KVM_INTEL LIBNVDIMM MEDIA_ANALOG_TV_SUPPORT MEDIA_CAMERA_SUPPORT MEDIA_CEC_SUPPORT MEDIA_CONTROLLER MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_TEST_SUPPORT MEDIA_USB_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_VIPERBOARD NOP_USB_XCEIV PARPORT PCCARD PCMCIA PHONET RADIO_ADAPTERS RADIO_SI470X RADIO_SI4713 RC_CORE RFKILL SND SOUND SPI SSB TAP TARGET_CORE TUN USB_AMD5536UDC USB_ATM USB_CDNSP_GADGET USB_CDNSP_HOST USB_CDNSP_PCI USB_CDNS_HOST USB_CDNS_SUPPORT USB_CHAOSKEY USB_CHIPIDEA USB_CHIPIDEA_GENERIC USB_CHIPIDEA_HOST USB_CHIPIDEA_MSM USB_CHIPIDEA_NPCM USB_CHIPIDEA_PCI USB_CHIPIDEA_UDC USB_CONFIGFS USB_CONFIGFS_ACM USB_CONFIGFS_ECM USB_CONFIGFS_ECM_SUBSET USB_CONFIGFS_EEM USB_CONFIGFS_F_FS USB_CONFIGFS_F_HID USB_CONFIGFS_F_LB_SS USB_CONFIGFS_F_MIDI USB_CONFIGFS_F_MIDI2 USB_CONFIGFS_F_PRINTER USB_CONFIGFS_F_TCM USB_CONFIGFS_F_UAC1 USB_CONFIGFS_F_UAC1_LEGACY USB_CONFIGFS_F_UAC2 USB_CONFIGFS_F_UVC USB_CONFIGFS_MASS_STORAGE USB_CONFIGFS_NCM USB_CONFIGFS_OBEX USB_CONFIGFS_PHONET USB_CONFIGFS_RNDIS USB_CONFIGFS_SERIAL USB_CONN_GPIO USB_CXACRU USB_CYPRESS_CY7C63 USB_CYTHERM USB_DSBR USB_DUMMY_HCD USB_DWC2 USB_DWC2_HOST USB_DWC2_PCI USB_DWC3 USB_DWC3_GADGET USB_DWC3_HAPS USB_DWC3_OF_SIMPLE USB_DWC3_PCI USB_DWC3_ULPI USB_DYNAMIC_MINORS USB_EG20T USB_EHCI_FSL USB_EHCI_HCD_PLATFORM USB_EHCI_ROOT_HUB_TT USB_EHSET_TEST_FIXTURE USB_EMI26 USB_EMI62 USB_EPSON2888 USB_EZUSB_FX2 USB_FEW_INIT_RETRIES USB_F_ACM USB_F_ECM USB_F_EEM USB_F_FS USB_F_HID USB_F_MASS_STORAGE USB_F_MIDI USB_F_MIDI2 USB_F_NCM USB_F_OBEX USB_F_PHONET USB_F_PRINTER USB_F_RNDIS USB_F_SERIAL USB_F_SS_LB USB_F_SUBSET USB_F_TCM USB_F_UAC1 USB_F_UAC1_LEGACY USB_F_UAC2 USB_F_UVC USB_GADGET USB_GADGETFS USB_GADGET_DEBUG_FILES USB_GADGET_DEBUG_FS USB_GL860 USB_GOKU USB_GR_UDC USB_GSPCA USB_GSPCA_BENQ USB_GSPCA_CONEX USB_GSPCA_CPIA1 USB_GSPCA_DTCS033 USB_GSPCA_ETOMS USB_GSPCA_FINEPIX USB_GSPCA_JEILINJ USB_GSPCA_JL2005BCD USB_GSPCA_KINECT USB_GSPCA_KONICA USB_GSPCA_MARS USB_GSPCA_MR97310A USB_GSPCA_NW80X USB_GSPCA_OV519 USB_GSPCA_OV534 USB_GSPCA_OV534_9 USB_GSPCA_PAC207 USB_GSPCA_PAC7302 USB_GSPCA_PAC7311 USB_GSPCA_SE401 USB_GSPCA_SN9C2028 USB_GSPCA_SN9C20X USB_GSPCA_SONIXB USB_GSPCA_SONIXJ USB_GSPCA_SPCA1528 USB_GSPCA_SPCA500 USB_GSPCA_SPCA501 USB_GSPCA_SPCA505 USB_GSPCA_SPCA506 USB_GSPCA_SPCA508 USB_GSPCA_SPCA561 USB_GSPCA_SQ905 USB_GSPCA_SQ905C USB_GSPCA_SQ930X USB_GSPCA_STK014 USB_GSPCA_STK1135 USB_GSPCA_STV0680 USB_GSPCA_SUNPLUS USB_GSPCA_T613 USB_GSPCA_TOPRO USB_GSPCA_TOUPTEK USB_GSPCA_TV8532 USB_GSPCA_VC032X USB_GSPCA_VICAM USB_GSPCA_XIRLINK_CIT USB_GSPCA_ZC3XX USB_HACKRF USB_HCD_BCMA USB_HCD_SSB USB_HSIC_USB3503 USB_HSIC_USB4604 USB_HSO USB_HUB_USB251XB USB_IDMOUSE USB_IOWARRIOR USB_IPHETH USB_ISIGHTFW USB_ISP116X_HCD USB_ISP1301 USB_ISP1760 USB_ISP1760_DUAL_ROLE USB_ISP1760_HCD USB_ISP1761_UDC USB_KAWETH USB_KC2190 USB_KEENE USB_LAN78XX USB_LCD USB_LD USB_LEDS_TRIGGER_USBPORT USB_LED_TRIG USB_LEGOTOWER USB_LGM_PHY USB_LIBCOMPOSITE USB_LINK_LAYER_TEST USB_M5602 USB_MA901 USB_MAX3420_UDC USB_MAX3421_HCD USB_MDC800 USB_MICROTEK USB_MR800 USB_MSI2500 USB_MUSB_DUAL_ROLE USB_MUSB_HDRC USB_MV_U3D USB_MV_UDC USB_NET2272 USB_NET2272_DMA USB_NET2280 USB_NET_AQC111 USB_NET_AX88179_178A USB_NET_AX8817X USB_NET_CDCETHER USB_NET_CDC_EEM USB_NET_CDC_MBIM USB_NET_CDC_NCM USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_CH9200 USB_NET_CX82310_ETH USB_NET_DM9601 USB_NET_GL620A USB_NET_HUAWEI_CDC_NCM USB_NET_INT51X1 USB_NET_KALMIA USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_QMI_WWAN USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_OXU210HP_HCD USB_PEGASUS USB_PULSE8_CEC USB_PWC USB_PWC_INPUT_EVDEV USB_PXA27X USB_R8A66597 USB_R8A66597_HCD USB_RAINSHADOW_CEC USB_RAREMONO USB_RAW_GADGET USB_RTL8150 USB_RTL8152 USB_RTL8153_ECM USB_S2255 USB_SERIAL USB_SERIAL_AIRCABLE USB_SERIAL_ARK3116 USB_SERIAL_BELKIN USB_SERIAL_CH341 USB_SERIAL_CONSOLE USB_SERIAL_CP210X USB_SERIAL_CYBERJACK USB_SERIAL_CYPRESS_M8 USB_SERIAL_DEBUG USB_SERIAL_DIGI_ACCELEPORT USB_SERIAL_EDGEPORT USB_SERIAL_EDGEPORT_TI USB_SERIAL_EMPEG USB_SERIAL_F81232 USB_SERIAL_F8153X USB_SERIAL_FTDI_SIO USB_SERIAL_GARMIN USB_SERIAL_GENERIC USB_SERIAL_IPAQ USB_SERIAL_IPW USB_SERIAL_IR USB_SERIAL_IUU USB_SERIAL_KEYSPAN USB_SERIAL_KEYSPAN_PDA USB_SERIAL_KLSI USB_SERIAL_KOBIL_SCT USB_SERIAL_MCT_U232 USB_SERIAL_METRO USB_SERIAL_MOS7715_PARPORT USB_SERIAL_MOS7720 USB_SERIAL_MOS7840 USB_SERIAL_MXUPORT USB_SERIAL_NAVMAN USB_SERIAL_OMNINET USB_SERIAL_OPTICON USB_SERIAL_OPTION USB_SERIAL_OTI6858 USB_SERIAL_PL2303 USB_SERIAL_QCAUX USB_SERIAL_QT2 USB_SERIAL_QUALCOMM USB_SERIAL_SAFE USB_SERIAL_SIERRAWIRELESS USB_SERIAL_SIMPLE USB_SERIAL_SPCP8X5 USB_SERIAL_SSU100 USB_SERIAL_SYMBOL USB_SERIAL_TI USB_SERIAL_UPD78F0730 USB_SERIAL_VISOR USB_SERIAL_WHITEHEAT USB_SERIAL_WISHBONE USB_SERIAL_WWAN USB_SERIAL_XR USB_SERIAL_XSENS_MT USB_SEVSEG USB_SI470X USB_SI4713 USB_SIERRA_NET USB_SISUSBVGA USB_SL811_CS USB_SL811_HCD USB_SL811_HCD_ISO USB_SNP_CORE USB_SPEEDTOUCH USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_ENE_UB6250 USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_STV06XX USB_TEST USB_TMC USB_TRANCEVIBRATOR USB_UAS USB_UEAGLEATM USB_ULPI_BUS USB_USBNET USB_USS720 USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_VIDEO_CLASS USB_VIDEO_CLASS_INPUT_EVDEV USB_VL600 USB_WDM USB_XHCI_DBGCAP USB_XHCI_PCI_RENESAS USB_XHCI_PLATFORM USB_XUSBATM USB_YUREX USERFAULTFD USERIO USERMODE_DRIVER USER_RETURN_NOTIFIER UVC_COMMON U_SERIAL_CONSOLE V4L2_MEM2MEM_DEV V4L_TEST_DRIVERS VALIDATE_FS_PARSER VDPA VDPA_SIM VDPA_SIM_BLOCK VDPA_SIM_NET VETH VFIO VFIO_DEVICE_CDEV VFIO_PCI VFIO_PCI_CORE VFIO_PCI_INTX VFIO_PCI_MMAP VFIO_VIRQFD VGASTATE VHOST VHOST_CROSS_ENDIAN_LEGACY VHOST_IOTLB VHOST_NET VHOST_RING VHOST_TASK VHOST_VDPA VHOST_VSOCK VIDEO VIDEOBUF2_CORE VIDEOBUF2_DMA_CONTIG VIDEOBUF2_DMA_SG VIDEOBUF2_MEMOPS VIDEOBUF2_V4L2 VIDEOBUF2_VMALLOC VIDEOMODE_HELPERS VIDEO_AU0828 VIDEO_AU0828_RC VIDEO_AU0828_V4L2 VIDEO_CS53L32A VIDEO_CX231XX VIDEO_CX231XX_ALSA VIDEO_CX231XX_DVB VIDEO_CX231XX_RC VIDEO_CX2341X VIDEO_CX25840 VIDEO_DEV VIDEO_EM28XX VIDEO_EM28XX_ALSA VIDEO_EM28XX_DVB VIDEO_EM28XX_RC VIDEO_EM28XX_V4L2 VIDEO_GO7007 VIDEO_GO7007_LOADER VIDEO_GO7007_USB VIDEO_GO7007_USB_S2250_BOARD VIDEO_HDPVR VIDEO_MSP3400 VIDEO_PVRUSB2 VIDEO_PVRUSB2_DVB VIDEO_PVRUSB2_SYSFS VIDEO_SAA711X VIDEO_STK1160 VIDEO_TUNER VIDEO_TVEEPROM VIDEO_USBTV VIDEO_V4L2_I2C VIDEO_V4L2_SUBDEV_API VIDEO_V4L2_TPG VIDEO_VICODEC VIDEO_VIM2M VIDEO_VIMC VIDEO_VIVID VIDEO_VIVID_CEC VIDEO_WM8775 VIPERBOARD_ADC VIRTIO_BALLOON VIRTIO_DMA_SHARED_BUFFER VIRTIO_MEM VIRTIO_MMIO VIRTIO_MMIO_CMDLINE_DEVICES VIRTIO_PMEM VIRTIO_VDPA VIRTIO_VSOCKETS VIRTIO_VSOCKETS_COMMON VIRT_WIFI VLAN_8021Q VLAN_8021Q_GVRP VLAN_8021Q_MVRP VMAP_PFN VMWARE_VMCI VMXNET3 VP_VDPA VSOCKETS VSOCKETS_DIAG VSOCKETS_LOOPBACK VSOCKMON VT_HW_CONSOLE_BINDING VXFS_FS WANT_DEV_COREDUMP WEXT_CORE WEXT_PRIV WEXT_PROC WIREGUARD WIRELESS WIRELESS_EXT WLAN WLAN_VENDOR_ADMTEK WLAN_VENDOR_SILABS X86_SGX X86_SGX_KVM X86_USER_SHADOW_STACK X86_X2APIC X86_X32_ABI XDP_SOCKETS XDP_SOCKETS_DIAG XFRM_ESPINTCP XFRM_INTERFACE XFRM_IPCOMP XFRM_MIGRATE XFRM_OFFLOAD XFRM_STATISTICS XFRM_SUB_POLICY XFRM_USER_COMPAT XFS_FS XFS_POSIX_ACL XFS_QUOTA XFS_RT XILLYBUS_CLASS XILLYUSB XOR_BLOCKS YENTA YENTA_ENE_TUNE YENTA_O2 YENTA_RICOH YENTA_TI YENTA_TOSHIBA Z3FOLD Z3FOLD_DEPRECATED ZEROPLUS_FF ZLIB_DEFLATE ZONEFS_FS ZPOOL ZRAM ZRAM_BACKEND_FORCE_LZO ZRAM_BACKEND_LZO ZRAM_DEF_COMP_LZO ZSMALLOC ZSTD_COMPRESS ZSWAP ZSWAP_COMPRESSOR_DEFAULT_842 ZSWAP_DEFAULT_ON ZSWAP_SHRINKER_DEFAULT_ON ZSWAP_ZPOOL_DEFAULT_Z3FOLD_DEPRECATED] disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed picked [v6.11 v6.10 v6.9 v6.7 v6.5 v6.3 v6.1 v5.19 v5.16 v5.13 v5.10 v5.7 v5.4 v5.1 v4.19] out of 34 release tags testing release v6.11 testing commit 98f7e32f20d28ec452afb208f9cffc08448a2652 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3f8d25cd6e42d8181b1cbf003ce3eda636de234b3e23841c6cebc09951f6f67e all runs: OK false negative chance: 0.000 # git bisect start 15e7d45e786a62a211dd0098fee7c57f84f8c681 98f7e32f20d28ec452afb208f9cffc08448a2652 Bisecting: 8934 revisions left to test after this (roughly 13 steps) [f8ffbc365f703d74ecca8ca787318d05bbee2bf7] Merge tag 'pull-stable-struct_fd' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs testing commit f8ffbc365f703d74ecca8ca787318d05bbee2bf7 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b1357ca8260b46d70347f498338fecc13be93800d883c010fa69e35176042105 all runs: OK false negative chance: 0.000 # git bisect good f8ffbc365f703d74ecca8ca787318d05bbee2bf7 Bisecting: 4448 revisions left to test after this (roughly 12 steps) [8017ed0fcd53075d184c85974e5b6676414a62db] Merge branch 'mm-everything' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm testing commit 8017ed0fcd53075d184c85974e5b6676414a62db gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e4ed76a842229937e7bd803932e63cc8081b1e11b7238ad857fe797b67a60e51 all runs: OK false negative chance: 0.000 # git bisect good 8017ed0fcd53075d184c85974e5b6676414a62db Bisecting: 2470 revisions left to test after this (roughly 11 steps) [8191a2a8006c2b58c7de431c39156900a8a3bed5] Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/cryptodev-2.6.git testing commit 8191a2a8006c2b58c7de431c39156900a8a3bed5 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2d34f8eb169eb6751981ffc58a674877faf11a9a2ceae611564241251884b6d6 all runs: crashed: WARNING in uvc_status_unregister representative crash: WARNING in uvc_status_unregister, types: [WARNING] # git bisect bad 8191a2a8006c2b58c7de431c39156900a8a3bed5 Bisecting: 934 revisions left to test after this (roughly 10 steps) [12213f29c33d8a965de50e3e705cf1a75fd3a1fa] Merge branch 'fs-next' of linux-next testing commit 12213f29c33d8a965de50e3e705cf1a75fd3a1fa gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 273060487195eff04d66c3b1edeb9f9bcbeed5c822b4188cd4d6e7f1f7849ea1 all runs: OK false negative chance: 0.000 # git bisect good 12213f29c33d8a965de50e3e705cf1a75fd3a1fa Bisecting: 458 revisions left to test after this (roughly 9 steps) [e4b495eecfb99b7de2f6b4186f560d36d04db14b] Merge branch 'bpf-next/net' into for-next testing commit e4b495eecfb99b7de2f6b4186f560d36d04db14b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 35bb8c4c3b2e153b40d349efa806ea932c97d6d763b26fef140ff46c54553369 all runs: OK false negative chance: 0.000 # git bisect good e4b495eecfb99b7de2f6b4186f560d36d04db14b Bisecting: 226 revisions left to test after this (roughly 8 steps) [821a49f668f66c763b41dbb35b8694a5f85e4f97] Merge branch 'cpufreq/arm/linux-next' of git://git.kernel.org/pub/scm/linux/kernel/git/vireshk/pm.git testing commit 821a49f668f66c763b41dbb35b8694a5f85e4f97 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b69aefafff141d1f485f92117fcf49eda5a47a88e30e41da3520b84b2b5015b2 all runs: crashed: WARNING in uvc_status_unregister representative crash: WARNING in uvc_status_unregister, types: [WARNING] # git bisect bad 821a49f668f66c763b41dbb35b8694a5f85e4f97 Bisecting: 119 revisions left to test after this (roughly 7 steps) [82483d5c152c6b2d4881f4b2c84e02622f17143b] Merge branch 'hwmon-next' of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging.git testing commit 82483d5c152c6b2d4881f4b2c84e02622f17143b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4fad356ad3f263da758f4440270e20f2887f8704f23799819011679f99e0e1d0 all runs: OK false negative chance: 0.000 # git bisect good 82483d5c152c6b2d4881f4b2c84e02622f17143b Bisecting: 59 revisions left to test after this (roughly 6 steps) [61a830bc0ea69a05d8a4534f825c6aa618263649] media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 testing commit 61a830bc0ea69a05d8a4534f825c6aa618263649 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e131a784f90842a8c39d230fb07feb022e430415318638809291a1cb73d56f1f all runs: crashed: WARNING in uvc_status_unregister representative crash: WARNING in uvc_status_unregister, types: [WARNING] # git bisect bad 61a830bc0ea69a05d8a4534f825c6aa618263649 Bisecting: 29 revisions left to test after this (roughly 5 steps) [3653f14841dc2a76d1fb9997e249715899bf4fb1] media: pwc: set lock before calling vb2_queue_init() testing commit 3653f14841dc2a76d1fb9997e249715899bf4fb1 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f5af403c3fe2ec52528f8679cecd27bd38bea6398f1be6cfae7602c1fe08a08d all runs: crashed: WARNING in uvc_status_unregister representative crash: WARNING in uvc_status_unregister, types: [WARNING] # git bisect bad 3653f14841dc2a76d1fb9997e249715899bf4fb1 Bisecting: 14 revisions left to test after this (roughly 4 steps) [c9df99302fff53b6007666136b9f43fbac7ee3d8] media: uvcvideo: Force UVC version to 1.0a for 0408:4033 testing commit c9df99302fff53b6007666136b9f43fbac7ee3d8 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 446747c716f796196e581a0983d9702e0ef09f13478e8134db62828eeec693e6 all runs: OK false negative chance: 0.000 # git bisect good c9df99302fff53b6007666136b9f43fbac7ee3d8 Bisecting: 7 revisions left to test after this (roughly 3 steps) [01c76fc995cdb1e701fa721c5b373777f0469b37] media: v4l2-core: add v4l2_debugfs_if_alloc/free() testing commit 01c76fc995cdb1e701fa721c5b373777f0469b37 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fba2b5f546fe281b924d015b4d499de8f753b22c3ee84008910fcef9dbc6e002 all runs: crashed: WARNING in uvc_status_unregister representative crash: WARNING in uvc_status_unregister, types: [WARNING] # git bisect bad 01c76fc995cdb1e701fa721c5b373777f0469b37 Bisecting: 3 revisions left to test after this (roughly 2 steps) [c5fe3ed618f995b4a903e574bf2e993cdebeefca] media: uvcvideo: Avoid race condition during unregister testing commit c5fe3ed618f995b4a903e574bf2e993cdebeefca gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6328fa2bfa0129f2b4757772bd116901e0b8088b18b939e3f5d44af4385d9630 all runs: crashed: WARNING in uvc_status_unregister representative crash: WARNING in uvc_status_unregister, types: [WARNING] # git bisect bad c5fe3ed618f995b4a903e574bf2e993cdebeefca Bisecting: 0 revisions left to test after this (roughly 1 step) [44f703386021e90cc33346f0ed3beb0274cedd68] media: uvcvideo: Refactor the status irq API testing commit 44f703386021e90cc33346f0ed3beb0274cedd68 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2a6e99505553a0b7271a653e71a6b4c61e45d09d76b36af568d10caafb64832a all runs: OK false negative chance: 0.000 # git bisect good 44f703386021e90cc33346f0ed3beb0274cedd68 c5fe3ed618f995b4a903e574bf2e993cdebeefca is the first bad commit commit c5fe3ed618f995b4a903e574bf2e993cdebeefca Author: Ricardo Ribalda Date: Thu Sep 26 05:49:58 2024 +0000 media: uvcvideo: Avoid race condition during unregister The control events are handled asynchronously by the driver. Once the control event are handled, the urb is re-submitted. If we simply kill the urb, there is a chance that a control event is waiting to be processed, which will re-submit the urb after the device is disconnected. Fix this by calling uvc_status_suspend(), which flushes the async controls and kills the URB in a race-free manner. Reviewed-by: Laurent Pinchart Reviewed-by: Sergey Senozhatsky Signed-off-by: Ricardo Ribalda Link: https://lore.kernel.org/r/20240926-guenter-mini-v7-2-690441953d4a@chromium.org Signed-off-by: Laurent Pinchart Signed-off-by: Hans Verkuil drivers/media/usb/uvc/uvc_status.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) accumulated error probability: 0.00 culprit signature: 6328fa2bfa0129f2b4757772bd116901e0b8088b18b939e3f5d44af4385d9630 parent signature: 2a6e99505553a0b7271a653e71a6b4c61e45d09d76b36af568d10caafb64832a revisions tested: 21, total time: 11h11m10.10017011s (build: 4h47m23.63684972s, test: 2h45m6.31994712s) first bad commit: c5fe3ed618f995b4a903e574bf2e993cdebeefca media: uvcvideo: Avoid race condition during unregister recipients (to): ["hverkuil-cisco@xs4all.nl" "laurent.pinchart@ideasonboard.com" "ribalda@chromium.org" "senozhatsky@chromium.org"] recipients (cc): [] crash: WARNING in uvc_status_unregister usb 1-1: config 0 descriptor?? usb 1-1: Found UVC 0.00 device syz (05ac:8600) usb 1-1: No valid video chain found. ------------[ cut here ]------------ DEBUG_LOCKS_WARN_ON(lock->magic != lock) WARNING: CPU: 0 PID: 8 at kernel/locking/mutex.c:587 __mutex_lock_common kernel/locking/mutex.c:587 [inline] WARNING: CPU: 0 PID: 8 at kernel/locking/mutex.c:587 __mutex_lock+0x294/0x7a0 kernel/locking/mutex.c:752 Modules linked in: CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.12.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: usb_hub_wq hub_event RIP: 0010:__mutex_lock_common kernel/locking/mutex.c:587 [inline] RIP: 0010:__mutex_lock+0x294/0x7a0 kernel/locking/mutex.c:752 Code: eb d0 90 e8 5e c8 2e ff 85 c0 74 22 83 3d 63 3e 05 01 00 75 19 90 48 c7 c7 71 9c f1 82 48 c7 c6 d6 25 f3 82 e8 9d 01 b8 fe 90 <0f> 0b 90 90 90 e9 d2 fd ff ff 48 8b 7c 24 08 e8 18 de bf fe 49 f7 RSP: 0018:ffffc9000004b668 EFLAGS: 00010246 RAX: 06001026e4081e00 RBX: 0000000000000000 RCX: 0000000000000002 RDX: 0000000000000002 RSI: 00000000ffffdfff RDI: 00000000ffffffff RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff832daac0 R10: ffffc9000004b540 R11: ffffc9000004b4e8 R12: ffff88811ba860a8 R13: ffff88811ba86000 R14: ffffffff820abe2b R15: ffff88811a971518 FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005561b62a1bc0 CR3: 0000000113284000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: class_mutex_constructor include/linux/mutex.h:201 [inline] uvc_status_suspend drivers/media/usb/uvc/uvc_status.c:372 [inline] uvc_status_unregister+0x1b/0x50 drivers/media/usb/uvc/uvc_status.c:297 uvc_unregister_video+0x54/0xa0 drivers/media/usb/uvc/uvc_driver.c:1947 uvc_probe+0x20ef/0x2120 drivers/media/usb/uvc/uvc_driver.c:2272 usb_probe_interface+0x1e0/0x380 drivers/usb/core/driver.c:399 really_probe+0x133/0x420 drivers/base/dd.c:658 __driver_probe_device+0x77/0x140 drivers/base/dd.c:800 driver_probe_device+0x1e/0x1b0 drivers/base/dd.c:830 __device_attach_driver+0x139/0x1c0 drivers/base/dd.c:958 bus_for_each_drv+0x10b/0x160 drivers/base/bus.c:459 __device_attach+0xc4/0x190 drivers/base/dd.c:1030 bus_probe_device+0x94/0x110 drivers/base/bus.c:534 device_add+0x25c/0x450 drivers/base/core.c:3675 usb_set_configuration+0x8bf/0xa70 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x2a/0x80 drivers/usb/core/generic.c:254 usb_probe_device+0x60/0x100 drivers/usb/core/driver.c:294 really_probe+0x133/0x420 drivers/base/dd.c:658 __driver_probe_device+0x77/0x140 drivers/base/dd.c:800 driver_probe_device+0x1e/0x1b0 drivers/base/dd.c:830 __device_attach_driver+0x139/0x1c0 drivers/base/dd.c:958 bus_for_each_drv+0x10b/0x160 drivers/base/bus.c:459 __device_attach+0xc4/0x190 drivers/base/dd.c:1030 bus_probe_device+0x94/0x110 drivers/base/bus.c:534 device_add+0x25c/0x450 drivers/base/core.c:3675 usb_new_device+0x445/0x670 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x11a5/0x1b20 drivers/usb/core/hub.c:5903 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0x2e6/0x6b0 kernel/workqueue.c:3310 worker_thread+0x212/0x2d0 kernel/workqueue.c:3391 kthread+0xf5/0x110 kernel/kthread.c:389 ret_from_fork+0x32/0x40 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244