ci starts bisection 2024-02-09 10:04:15.433428285 +0000 UTC m=+66367.806698134 bisecting cause commit starting from b1d3a0e70c3881d2f8cf6692ccf7c2a4fb2d030d building syzkaller on 6404acf9ce200d01fcbe0923924c9f6c22c258de fetch other tags and check if the commit is present ensuring issue is reproducible on original commit b1d3a0e70c3881d2f8cf6692ccf7c2a4fb2d030d testing commit b1d3a0e70c3881d2f8cf6692ccf7c2a4fb2d030d gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: dbb8a220b0cded56dc135b71b3a2a76a17e84083b419d03793cd530b0e8e59dc all runs: crashed: possible deadlock in v4l2_ctrl_handler_log_status representative crash: possible deadlock in v4l2_ctrl_handler_log_status, types: [LOCKDEP] check whether we can drop unnecessary instrumentation disabling configs for [BUG KASAN ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit b1d3a0e70c3881d2f8cf6692ccf7c2a4fb2d030d gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fcd18a08e5fa33ff1806f84e6c5826f43f4d7aeff338be605bc81d6c91d841f4 all runs: crashed: possible deadlock in v4l2_ctrl_handler_log_status representative crash: possible deadlock in v4l2_ctrl_handler_log_status, types: [LOCKDEP] the bug reproduces without the instrumentation disabling configs for [HANG LEAK UBSAN BUG KASAN ATOMIC_SLEEP], they are not needed kconfig minimization: base=3937 full=7984 leaves diff=2019 split chunks (needed=false): <2019> split chunk #0 of len 2019 into 5 parts testing without sub-chunk 1/5 disabling configs for [BUG KASAN ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit b1d3a0e70c3881d2f8cf6692ccf7c2a4fb2d030d gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ce2fca6149545e84b76397b402e6c2ac60ed2c714834f7db56f28869428f26ea all runs: crashed: possible deadlock in v4l2_ctrl_handler_log_status representative crash: possible deadlock in v4l2_ctrl_handler_log_status, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [LEAK UBSAN BUG KASAN ATOMIC_SLEEP HANG], they are not needed testing commit b1d3a0e70c3881d2f8cf6692ccf7c2a4fb2d030d gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6b9d55c5aff6c2737e19672f6caca9228dedbc7429ccab37efd2c856f876bc49 all runs: crashed: possible deadlock in v4l2_ctrl_handler_log_status representative crash: possible deadlock in v4l2_ctrl_handler_log_status, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [HANG LEAK UBSAN BUG KASAN ATOMIC_SLEEP], they are not needed testing commit b1d3a0e70c3881d2f8cf6692ccf7c2a4fb2d030d gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 61f515c1f32ed14a72c8cc1f895dff26b21565e5ccfb8f4f97980e41a501da4d all runs: crashed: possible deadlock in v4l2_ctrl_handler_log_status representative crash: possible deadlock in v4l2_ctrl_handler_log_status, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed testing commit b1d3a0e70c3881d2f8cf6692ccf7c2a4fb2d030d gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 15bf33735510714f080bf178034d994468499e8d07b8ce84594ea53bc9caa71b all runs: crashed: possible deadlock in v4l2_ctrl_handler_log_status representative crash: possible deadlock in v4l2_ctrl_handler_log_status, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed testing commit b1d3a0e70c3881d2f8cf6692ccf7c2a4fb2d030d gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5b9a63aa63ce1c7e42fc11306cbf3355e0e4b66517e79b322243ed17491fef14 all runs: OK false negative chance: 0.000 minimized to 403 configs; suspects: [ARCH_ENABLE_MEMORY_HOTREMOVE ATM BCMA BLK_DEV_ZONED BPF_SYSCALL CARDBUS CFG80211 CFG80211_WEXT CMA COMMON_CLK CONTIG_ALLOC CRYPTO_842 CRYPTO_LZ4 CRYPTO_LZ4HC CRYPTO_LZO CRYPTO_ZSTD DVB_CORE EXTCON FB GPIOLIB HID_ZEROPLUS I2C_MUX IIO IOMMUFD IRQ_REMAP KVM KVM_INTEL LIBNVDIMM MEDIA_ANALOG_TV_SUPPORT MEDIA_CAMERA_SUPPORT MEDIA_CEC_SUPPORT MEDIA_CONTROLLER MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_TEST_SUPPORT MEDIA_USB_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_VIPERBOARD PARPORT PCCARD PCMCIA PHONET RADIO_ADAPTERS RADIO_SI470X RADIO_SI4713 RC_CORE RFKILL SND SOUND SPI SSB TAP TARGET_CORE TUN USB_AMD5536UDC USB_ATM USB_CONFIGFS USB_CONFIGFS_ECM USB_CONFIGFS_ECM_SUBSET USB_CONFIGFS_EEM USB_CONFIGFS_F_FS USB_CONFIGFS_F_HID USB_CONFIGFS_F_LB_SS USB_CONFIGFS_F_MIDI USB_CONFIGFS_F_PRINTER USB_CONFIGFS_F_TCM USB_CONFIGFS_F_UAC1 USB_CONFIGFS_F_UAC1_LEGACY USB_CONFIGFS_F_UAC2 USB_CONFIGFS_F_UVC USB_CONFIGFS_MASS_STORAGE USB_CONFIGFS_NCM USB_CONFIGFS_OBEX USB_CONFIGFS_PHONET USB_CONFIGFS_RNDIS USB_CONFIGFS_SERIAL USB_CXACRU USB_CYPRESS_CY7C63 USB_CYTHERM USB_DSBR USB_DUMMY_HCD USB_DWC2 USB_DWC2_HOST USB_DWC2_PCI USB_DWC3 USB_DWC3_GADGET USB_DWC3_OF_SIMPLE USB_DWC3_PCI USB_DWC3_ULPI USB_DYNAMIC_MINORS USB_EG20T USB_EHCI_HCD_PLATFORM USB_EHCI_ROOT_HUB_TT USB_EHSET_TEST_FIXTURE USB_EMI26 USB_EMI62 USB_EPSON2888 USB_EZUSB_FX2 USB_FEW_INIT_RETRIES USB_F_ACM USB_F_ECM USB_F_EEM USB_F_FS USB_F_HID USB_F_MASS_STORAGE USB_F_MIDI USB_F_NCM USB_F_OBEX USB_F_PHONET USB_F_PRINTER USB_F_RNDIS USB_F_SERIAL USB_F_SS_LB USB_F_SUBSET USB_F_TCM USB_F_UAC1 USB_F_UAC1_LEGACY USB_F_UAC2 USB_F_UVC USB_GADGET USB_GADGETFS USB_GADGET_DEBUG_FILES USB_GADGET_DEBUG_FS USB_GL860 USB_GOKU USB_GPIO_VBUS USB_GR_UDC USB_GSPCA USB_GSPCA_BENQ USB_GSPCA_CONEX USB_GSPCA_CPIA1 USB_GSPCA_DTCS033 USB_GSPCA_ETOMS USB_GSPCA_FINEPIX USB_GSPCA_JEILINJ USB_GSPCA_JL2005BCD USB_GSPCA_KINECT USB_GSPCA_KONICA USB_GSPCA_MARS USB_GSPCA_MR97310A USB_GSPCA_NW80X USB_GSPCA_OV519 USB_GSPCA_OV534 USB_GSPCA_OV534_9 USB_GSPCA_PAC207 USB_GSPCA_PAC7302 USB_GSPCA_PAC7311 USB_GSPCA_SE401 USB_GSPCA_SN9C2028 USB_GSPCA_SN9C20X USB_GSPCA_SONIXB USB_GSPCA_SONIXJ USB_GSPCA_SPCA1528 USB_GSPCA_SPCA500 USB_GSPCA_SPCA501 USB_GSPCA_SPCA505 USB_GSPCA_SPCA506 USB_GSPCA_SPCA508 USB_GSPCA_SPCA561 USB_GSPCA_SQ905 USB_GSPCA_SQ905C USB_GSPCA_SQ930X USB_GSPCA_STK014 USB_GSPCA_STK1135 USB_GSPCA_STV0680 USB_GSPCA_SUNPLUS USB_GSPCA_T613 USB_GSPCA_TOPRO USB_GSPCA_TOUPTEK USB_GSPCA_TV8532 USB_GSPCA_VC032X USB_GSPCA_VICAM USB_GSPCA_XIRLINK_CIT USB_GSPCA_ZC3XX USB_HACKRF USB_HCD_BCMA USB_HCD_SSB USB_HSIC_USB3503 USB_HSIC_USB4604 USB_HSO USB_HUB_USB251XB USB_IDMOUSE USB_IOWARRIOR USB_IPHETH USB_ISIGHTFW USB_ISP116X_HCD USB_ISP1301 USB_ISP1760 USB_ISP1760_DUAL_ROLE USB_ISP1760_HCD USB_ISP1761_UDC USB_KAWETH USB_KC2190 USB_KEENE USB_LAN78XX USB_LCD USB_LD USB_LEDS_TRIGGER_USBPORT USB_LED_TRIG USB_LEGOTOWER USB_LIBCOMPOSITE USB_LINK_LAYER_TEST USB_M5602 USB_MA901 USB_MAX3421_HCD USB_MDC800 USB_MICROTEK USB_MR800 USB_MSI2500 USB_MUSB_DUAL_ROLE USB_MUSB_HDRC USB_MV_U3D USB_MV_UDC USB_NET2272 USB_NET2272_DMA USB_NET2280 USB_NET_AX88179_178A USB_NET_AX8817X USB_NET_CDCETHER USB_NET_CDC_EEM USB_NET_CDC_MBIM USB_NET_CDC_NCM USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_CH9200 USB_NET_CX82310_ETH USB_NET_DM9601 USB_NET_GL620A USB_NET_HUAWEI_CDC_NCM USB_NET_INT51X1 USB_NET_KALMIA USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_QMI_WWAN USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_OXU210HP_HCD USB_PEGASUS USB_PULSE8_CEC USB_PWC USB_PWC_INPUT_EVDEV USB_PXA27X USB_R8A66597 USB_R8A66597_HCD USB_RAINSHADOW_CEC USB_RAREMONO USB_RAW_GADGET USB_RTL8150 USB_RTL8152 USB_RTL8153_ECM USB_S2255 USB_SERIAL USB_SERIAL_AIRCABLE USB_SERIAL_ARK3116 USB_SERIAL_BELKIN USB_SERIAL_CH341 USB_SERIAL_CONSOLE USB_SERIAL_CP210X USB_SERIAL_CYBERJACK USB_SERIAL_CYPRESS_M8 USB_SERIAL_DEBUG USB_SERIAL_DIGI_ACCELEPORT USB_SERIAL_EDGEPORT USB_SERIAL_EDGEPORT_TI USB_SERIAL_EMPEG USB_SERIAL_F81232 USB_SERIAL_F8153X USB_SERIAL_FTDI_SIO USB_SERIAL_GARMIN USB_SERIAL_GENERIC USB_SERIAL_IPAQ USB_SERIAL_IPW USB_SERIAL_IR USB_SERIAL_IUU USB_SERIAL_KEYSPAN USB_SERIAL_KEYSPAN_PDA USB_SERIAL_KLSI USB_SERIAL_KOBIL_SCT USB_SERIAL_MCT_U232 USB_SERIAL_METRO USB_SERIAL_MOS7715_PARPORT USB_SERIAL_MOS7720 USB_SERIAL_MOS7840 USB_SERIAL_MXUPORT USB_SERIAL_NAVMAN USB_SERIAL_OMNINET USB_SERIAL_OPTICON USB_SERIAL_OPTION USB_SERIAL_OTI6858 USB_SERIAL_PL2303 USB_SERIAL_QCAUX USB_SERIAL_QT2 USB_SERIAL_QUALCOMM USB_SERIAL_SAFE USB_SERIAL_SIERRAWIRELESS USB_SERIAL_SIMPLE USB_SERIAL_SPCP8X5 USB_SERIAL_SSU100 USB_SERIAL_SYMBOL USB_SERIAL_TI USB_SERIAL_UPD78F0730 USB_SERIAL_VISOR USB_SERIAL_WHITEHEAT USB_SERIAL_WISHBONE USB_SERIAL_WWAN USB_SERIAL_XR USB_SERIAL_XSENS_MT USB_SEVSEG USB_SI470X USB_SI4713 USB_SIERRA_NET USB_SISUSBVGA USB_SL811_CS USB_SL811_HCD USB_SL811_HCD_ISO USB_SNP_CORE USB_SPEEDTOUCH USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_ENE_UB6250 USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_STV06XX USB_TEST USB_TMC USB_TRANCEVIBRATOR USB_UAS USB_UEAGLEATM USB_ULPI_BUS USB_USBNET USB_USS720 USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_VIDEO_CLASS USB_VIDEO_CLASS_INPUT_EVDEV USB_VL600 USB_WDM USB_XHCI_DBGCAP USB_XHCI_PLATFORM USB_XUSBATM USB_YUREX USERFAULTFD USERIO USERMODE_DRIVER USER_RETURN_NOTIFIER UVC_COMMON U_SERIAL_CONSOLE V4L2_MEM2MEM_DEV V4L_TEST_DRIVERS VALIDATE_FS_PARSER VDPA VDPA_SIM VDPA_SIM_BLOCK VDPA_SIM_NET VDPA_USER VETH VFIO VFIO_DEVICE_CDEV VFIO_PCI VFIO_PCI_CORE VFIO_PCI_INTX VFIO_PCI_MMAP VFIO_VIRQFD VGASTATE VHOST VHOST_CROSS_ENDIAN_LEGACY VHOST_IOTLB VHOST_NET VHOST_RING VHOST_TASK VHOST_VDPA VHOST_VSOCK VIDEO VIDEOBUF2_CORE VIDEOBUF2_DMA_CONTIG VIDEOBUF2_DMA_SG VIDEOBUF2_MEMOPS VIDEOBUF2_V4L2 VIDEOBUF2_VMALLOC VIDEOMODE_HELPERS VIDEO_AU0828 VIDEO_AU0828_RC VIDEO_AU0828_V4L2 VIDEO_CS53L32A VIDEO_CX231XX VIDEO_CX231XX_ALSA VIDEO_CX231XX_DVB VIDEO_CX231XX_RC VIDEO_CX2341X VIDEO_CX25840 VIDEO_DEV VIDEO_EM28XX VIDEO_EM28XX_ALSA VIDEO_EM28XX_DVB VIDEO_EM28XX_RC VIDEO_EM28XX_V4L2 VIDEO_GO7007 VIDEO_GO7007_LOADER VIDEO_GO7007_USB VIDEO_GO7007_USB_S2250_BOARD VIDEO_HDPVR VIDEO_MSP3400 VIDEO_PVRUSB2 VIDEO_PVRUSB2_DVB VIDEO_PVRUSB2_SYSFS VIDEO_SAA711X VIDEO_STK1160 VIDEO_TUNER VIDEO_TVEEPROM VIDEO_USBTV VIDEO_V4L2_I2C VIDEO_V4L2_SUBDEV_API VIDEO_V4L2_TPG VIDEO_VICODEC VIDEO_VIM2M VIDEO_VIMC VIDEO_VIVID VIDEO_VIVID_CEC VIDEO_WM8775 VIPERBOARD_ADC VIRTIO_BALLOON VIRTIO_DMA_SHARED_BUFFER VIRTIO_MEM VIRTIO_MMIO VIRTIO_MMIO_CMDLINE_DEVICES VIRTIO_PMEM VIRTIO_VDPA VIRTIO_VSOCKETS VIRTIO_VSOCKETS_COMMON VIRT_WIFI VLAN_8021Q VLAN_8021Q_GVRP VLAN_8021Q_MVRP VMAP_PFN VMWARE_VMCI VMXNET3 VP_VDPA VSOCKETS VSOCKETS_DIAG VSOCKETS_LOOPBACK VSOCKMON VT_HW_CONSOLE_BINDING VXFS_FS WANT_DEV_COREDUMP WEXT_CORE WEXT_PRIV WEXT_PROC WIREGUARD WIRELESS WIRELESS_EXT WLAN WLAN_VENDOR_ADMTEK WLAN_VENDOR_PURELIFI WLAN_VENDOR_SILABS X86_AMD_PSTATE X86_SGX X86_SGX_KVM X86_USER_SHADOW_STACK X86_X2APIC X86_X32_ABI XDP_SOCKETS XDP_SOCKETS_DIAG XFRM_ESPINTCP XFRM_INTERFACE XFRM_IPCOMP XFRM_MIGRATE XFRM_OFFLOAD XFRM_STATISTICS XFRM_SUB_POLICY XFRM_USER_COMPAT XFS_FS XFS_POSIX_ACL XFS_QUOTA XFS_RT XOR_BLOCKS YENTA YENTA_ENE_TUNE YENTA_O2 YENTA_RICOH YENTA_TI YENTA_TOSHIBA ZEROPLUS_FF ZLIB_DEFLATE ZONEFS_FS ZPOOL ZRAM ZRAM_DEF_COMP_LZORLE ZSMALLOC ZSTD_COMPRESS ZSWAP ZSWAP_COMPRESSOR_DEFAULT_LZO ZSWAP_DEFAULT_ON ZSWAP_SHRINKER_DEFAULT_ON ZSWAP_ZPOOL_DEFAULT_ZSMALLOC] disabling configs for [KASAN ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed picked [v6.7 v6.6 v6.5 v6.3 v6.1 v5.19 v5.17 v5.15 v5.12 v5.9 v5.6 v5.3 v5.0 v4.19] out of 30 release tags testing release v6.7 testing commit 0dd3ee31125508cd67f7e7172247f05b7fd1753a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 81306d21bb9ba36179dfb24bc7730cdab700f268c010edce54b250a8ac2d3ac3 all runs: OK false negative chance: 0.000 # git bisect start b1d3a0e70c3881d2f8cf6692ccf7c2a4fb2d030d 0dd3ee31125508cd67f7e7172247f05b7fd1753a Bisecting: 9725 revisions left to test after this (roughly 13 steps) [61da593f4458f25c59f65cfd9ba1bda570db5db7] Merge tag 'media/v6.8-2' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media testing commit 61da593f4458f25c59f65cfd9ba1bda570db5db7 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2bcae4237745fe9412c8bac189db3cb346fee4e210214542d08bb43d8892db49 all runs: OK false negative chance: 0.000 # git bisect good 61da593f4458f25c59f65cfd9ba1bda570db5db7 Bisecting: 4861 revisions left to test after this (roughly 12 steps) [f59965a75fd3e8540e2e6cb29220e36e61046bd8] Merge branch 'mm-everything' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm testing commit f59965a75fd3e8540e2e6cb29220e36e61046bd8 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3d53a1694e063a2a965cbbbfa7590964573360d01c62ef9efaae34803a4cfff9 all runs: OK false negative chance: 0.000 # git bisect good f59965a75fd3e8540e2e6cb29220e36e61046bd8 Bisecting: 2426 revisions left to test after this (roughly 11 steps) [a55fd154722bacdd3cbed378b62e8e18c9fdd7dc] Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git testing commit a55fd154722bacdd3cbed378b62e8e18c9fdd7dc gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 08bf2ec1bcb7891107a258f335c04dd77799c59b2b34de6575bb46145b3b9aa9 all runs: crashed: possible deadlock in v4l2_ctrl_handler_log_status representative crash: possible deadlock in v4l2_ctrl_handler_log_status, types: [LOCKDEP] # git bisect bad a55fd154722bacdd3cbed378b62e8e18c9fdd7dc Bisecting: 1152 revisions left to test after this (roughly 10 steps) [8caf87347c15a6056bdd5ca8ed7c46b336e84d53] Merge branch 'vfs.all' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs.git testing commit 8caf87347c15a6056bdd5ca8ed7c46b336e84d53 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 717fdf22f45fd5da6e196152bc18569f6ba4370929d3b9ff04cabdbba900781a all runs: OK false negative chance: 0.000 # git bisect good 8caf87347c15a6056bdd5ca8ed7c46b336e84d53 Bisecting: 592 revisions left to test after this (roughly 9 steps) [9736c648370d237f61065a7e45e668e2db4374e9] dpll: check that pin is registered in __dpll_pin_unregister() testing commit 9736c648370d237f61065a7e45e668e2db4374e9 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0b82bf0ae330e1d37578899b844ea93e15679fd395fc80baa8a1071a8e1ddce8 all runs: OK false negative chance: 0.000 # git bisect good 9736c648370d237f61065a7e45e668e2db4374e9 Bisecting: 248 revisions left to test after this (roughly 8 steps) [6ae871ed3a9a2bad5adccdc01cb7a7aecc67fad3] Merge branch 'master' of git://linuxtv.org/media_tree.git testing commit 6ae871ed3a9a2bad5adccdc01cb7a7aecc67fad3 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 14cbb62ee29d342e490dbf7da394c0d0beb17e37d634e2d699068d869a4f9ba4 all runs: OK false negative chance: 0.000 # git bisect good 6ae871ed3a9a2bad5adccdc01cb7a7aecc67fad3 Bisecting: 130 revisions left to test after this (roughly 7 steps) [f6aa2b1e21854733e160bd1753189470d22f2b22] Merge branch 'opp/linux-next' of git://git.kernel.org/pub/scm/linux/kernel/git/vireshk/pm.git testing commit f6aa2b1e21854733e160bd1753189470d22f2b22 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b422d2a99bdedc735dfe80598bb8818135897af6d9857965b537c2ceca4be422 all runs: crashed: possible deadlock in v4l2_ctrl_handler_log_status representative crash: possible deadlock in v4l2_ctrl_handler_log_status, types: [LOCKDEP] # git bisect bad f6aa2b1e21854733e160bd1753189470d22f2b22 Bisecting: 61 revisions left to test after this (roughly 6 steps) [79f55b4eb8ecd42643a10063019cc3055a7396fb] Merge branch 'master' of git://linuxtv.org/mchehab/media-next.git testing commit 79f55b4eb8ecd42643a10063019cc3055a7396fb gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 90bda4e743e07d492fcd7b7fdfb339de417d6b17f819c367308995bf9b12c5b8 all runs: crashed: possible deadlock in v4l2_ctrl_handler_log_status representative crash: possible deadlock in v4l2_ctrl_handler_log_status, types: [LOCKDEP] # git bisect bad 79f55b4eb8ecd42643a10063019cc3055a7396fb Bisecting: 27 revisions left to test after this (roughly 5 steps) [83d48b5d39261be16902872367e89a0d1a874b0d] media: v4l2-common.h: kerneldoc: correctly format return values testing commit 83d48b5d39261be16902872367e89a0d1a874b0d gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d7751bf371a506dbe8b615d421b8a2a9b7abbbea08380e62b397e087da1e47bd all runs: crashed: possible deadlock in v4l2_ctrl_handler_log_status representative crash: possible deadlock in v4l2_ctrl_handler_log_status, types: [LOCKDEP] # git bisect bad 83d48b5d39261be16902872367e89a0d1a874b0d Bisecting: 13 revisions left to test after this (roughly 4 steps) [d7f4cdc0647014f938ad06cd679d9ad3da070a3e] media: pci: dt315.h: Fix kerneldoc testing commit d7f4cdc0647014f938ad06cd679d9ad3da070a3e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8fb6b3f680fa9a0b53485c368dda8c5de5e47753c82904fd4317788a116288ff all runs: crashed: possible deadlock in v4l2_ctrl_handler_log_status representative crash: possible deadlock in v4l2_ctrl_handler_log_status, types: [LOCKDEP] # git bisect bad d7f4cdc0647014f938ad06cd679d9ad3da070a3e Bisecting: 6 revisions left to test after this (roughly 3 steps) [8b9911e553e762ebbe626270ce11b008736f1848] media: videobuf2: Fix doc comment testing commit 8b9911e553e762ebbe626270ce11b008736f1848 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8077c4699bcbe6809f831d6d1a533d232443263f8deb52e882fbb711515f7be8 all runs: OK false negative chance: 0.000 # git bisect good 8b9911e553e762ebbe626270ce11b008736f1848 Bisecting: 3 revisions left to test after this (roughly 2 steps) [9801b5b28c6929139d6fceeee8d739cc67bb2739] media: v4l2-ctrls: show all owned controls in log_status testing commit 9801b5b28c6929139d6fceeee8d739cc67bb2739 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a508327d2803b9c5ce64601a3ad59cf921886148f7844d493aecaccd73d2a575 all runs: crashed: possible deadlock in v4l2_ctrl_handler_log_status representative crash: possible deadlock in v4l2_ctrl_handler_log_status, types: [LOCKDEP] # git bisect bad 9801b5b28c6929139d6fceeee8d739cc67bb2739 Bisecting: 0 revisions left to test after this (roughly 1 step) [8674fd635f287a0652ae1459f6ebb15bc82c2707] media: cx231xx: controls are from another device, mark this testing commit 8674fd635f287a0652ae1459f6ebb15bc82c2707 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: beb0ed34208128b8de0b32f2103bb271c6f94cf1033861e3c1e381d5ea01f223 all runs: OK false negative chance: 0.000 # git bisect good 8674fd635f287a0652ae1459f6ebb15bc82c2707 9801b5b28c6929139d6fceeee8d739cc67bb2739 is the first bad commit commit 9801b5b28c6929139d6fceeee8d739cc67bb2739 Author: Hans Verkuil Date: Wed Jan 17 15:52:04 2024 +0100 media: v4l2-ctrls: show all owned controls in log_status VIDIOC_LOG_STATUS will log the controls owned by the driver. But the code didn't take into account the case where a single driver creates multiple control handlers. A good example is the vivid driver, but others use it as well. Modify v4l2_ctrl_handler_log_status() so that it really shows all controls owned by this driver. Signed-off-by: Hans Verkuil drivers/media/v4l2-core/v4l2-ctrls-core.c | 18 +++++++++++++----- 1 file changed, 13 insertions(+), 5 deletions(-) accumulated error probability: 0.00 culprit signature: a508327d2803b9c5ce64601a3ad59cf921886148f7844d493aecaccd73d2a575 parent signature: beb0ed34208128b8de0b32f2103bb271c6f94cf1033861e3c1e381d5ea01f223 revisions tested: 21, total time: 3h53m35.977837919s (build: 1h47m47.653233996s, test: 1h53m0.351415067s) first bad commit: 9801b5b28c6929139d6fceeee8d739cc67bb2739 media: v4l2-ctrls: show all owned controls in log_status recipients (to): ["hverkuil-cisco@xs4all.nl" "linux-kernel@vger.kernel.org"] recipients (cc): ["benjamin.gaignard@collabora.com" "daniel.almeida@collabora.com" "hverkuil-cisco@xs4all.nl" "linux-media@vger.kernel.org" "mchehab@kernel.org" "nicolas.dufresne@collabora.com"] crash: possible deadlock in v4l2_ctrl_handler_log_status vivid-000: ================= START STATUS ================= vivid-000: Boolean: ====================================================== WARNING: possible circular locking dependency detected 6.8.0-rc2-syzkaller #0 Not tainted ------------------------------------------------------ syz-executor.0/2803 is trying to acquire lock: ffff8881102906e0 (vivid_ctrls:1606:(hdl_user_gen)->_lock){+.+.}-{3:3}, at: v4l2_ctrl_lock include/media/v4l2-ctrls.h:572 [inline] ffff8881102906e0 (vivid_ctrls:1606:(hdl_user_gen)->_lock){+.+.}-{3:3}, at: log_ctrl drivers/media/v4l2-core/v4l2-ctrls-core.c:2518 [inline] ffff8881102906e0 (vivid_ctrls:1606:(hdl_user_gen)->_lock){+.+.}-{3:3}, at: v4l2_ctrl_handler_log_status+0xd3/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2556 but task is already holding lock: ffff888110294240 (vivid_ctrls:1634:(hdl_sdr_cap)->_lock){+.+.}-{3:3}, at: v4l2_ctrl_handler_log_status+0x5d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2551 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #1 (vivid_ctrls:1634:(hdl_sdr_cap)->_lock){+.+.}-{3:3}: __mutex_lock_common kernel/locking/mutex.c:608 [inline] __mutex_lock+0x99/0x9a0 kernel/locking/mutex.c:752 find_ref_lock+0x20/0x100 drivers/media/v4l2-core/v4l2-ctrls-core.c:1647 handler_new_ref+0x6e/0x220 drivers/media/v4l2-core/v4l2-ctrls-core.c:1684 v4l2_ctrl_add_handler+0x8a/0xf0 drivers/media/v4l2-core/v4l2-ctrls-core.c:2208 vivid_create_controls+0x156c/0x1680 drivers/media/test-drivers/vivid/vivid-ctrls.c:1981 vivid_create_instance drivers/media/test-drivers/vivid/vivid-core.c:1854 [inline] vivid_probe+0xf61/0x1800 drivers/media/test-drivers/vivid/vivid-core.c:2018 platform_probe+0x91/0xc0 drivers/base/platform.c:1404 really_probe+0x133/0x450 drivers/base/dd.c:658 __driver_probe_device+0x77/0x140 drivers/base/dd.c:800 driver_probe_device+0x1e/0x1b0 drivers/base/dd.c:830 __driver_attach+0x11a/0x270 drivers/base/dd.c:1216 bus_for_each_dev+0x101/0x150 drivers/base/bus.c:368 bus_add_driver+0x164/0x270 drivers/base/bus.c:673 driver_register+0x5d/0xf0 drivers/base/driver.c:246 vivid_init+0x28/0x50 drivers/media/test-drivers/vivid/vivid-core.c:2145 do_one_initcall+0x134/0x320 init/main.c:1236 do_initcall_level+0x92/0x100 init/main.c:1298 do_initcalls+0x3a/0x70 init/main.c:1314 kernel_init_freeable+0x177/0x1e0 init/main.c:1551 kernel_init+0x15/0x190 init/main.c:1441 ret_from_fork+0x32/0x40 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:242 -> #0 (vivid_ctrls:1606:(hdl_user_gen)->_lock){+.+.}-{3:3}: check_prev_add kernel/locking/lockdep.c:3134 [inline] check_prevs_add kernel/locking/lockdep.c:3253 [inline] validate_chain kernel/locking/lockdep.c:3869 [inline] __lock_acquire+0x11fd/0x2490 kernel/locking/lockdep.c:5137 lock_acquire+0xea/0x270 kernel/locking/lockdep.c:5754 __mutex_lock_common kernel/locking/mutex.c:608 [inline] __mutex_lock+0x99/0x9a0 kernel/locking/mutex.c:752 v4l2_ctrl_lock include/media/v4l2-ctrls.h:572 [inline] log_ctrl drivers/media/v4l2-core/v4l2-ctrls-core.c:2518 [inline] v4l2_ctrl_handler_log_status+0xd3/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2556 v4l2_ctrl_log_status+0x3a/0x50 drivers/media/v4l2-core/v4l2-ctrls-api.c:1206 vidioc_log_status+0x33/0x70 drivers/media/test-drivers/vivid/vivid-core.c:426 v4l_log_status+0x3c/0x80 drivers/media/v4l2-core/v4l2-ioctl.c:2562 __video_do_ioctl+0x360/0x470 drivers/media/v4l2-core/v4l2-ioctl.c:3049 video_usercopy+0x43a/0x720 drivers/media/v4l2-core/v4l2-ioctl.c:3390 v4l2_ioctl+0x42/0x60 drivers/media/v4l2-core/v4l2-dev.c:364 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:871 [inline] __se_sys_ioctl+0x6e/0xc0 fs/ioctl.c:857 do_syscall_64+0xa7/0x1c0 entry_SYSCALL_64_after_hwframe+0x6f/0x77 other info that might help us debug this: Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(vivid_ctrls:1634:(hdl_sdr_cap)->_lock); lock(vivid_ctrls:1606:(hdl_user_gen)->_lock); lock(vivid_ctrls:1634:(hdl_sdr_cap)->_lock); lock(vivid_ctrls:1606:(hdl_user_gen)->_lock); *** DEADLOCK *** 2 locks held by syz-executor.0/2803: #0: ffff888110295a08 (&dev->mutex#3){+.+.}-{3:3}, at: __video_do_ioctl+0x16a/0x470 drivers/media/v4l2-core/v4l2-ioctl.c:3017 #1: ffff888110294240 (vivid_ctrls:1634:(hdl_sdr_cap)->_lock){+.+.}-{3:3}, at: v4l2_ctrl_handler_log_status+0x5d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2551 stack backtrace: CPU: 0 PID: 2803 Comm: syz-executor.0 Not tainted 6.8.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8d/0xe0 lib/dump_stack.c:106 check_noncircular+0x119/0x140 kernel/locking/lockdep.c:2187 check_prev_add kernel/locking/lockdep.c:3134 [inline] check_prevs_add kernel/locking/lockdep.c:3253 [inline] validate_chain kernel/locking/lockdep.c:3869 [inline] __lock_acquire+0x11fd/0x2490 kernel/locking/lockdep.c:5137 lock_acquire+0xea/0x270 kernel/locking/lockdep.c:5754 __mutex_lock_common kernel/locking/mutex.c:608 [inline] __mutex_lock+0x99/0x9a0 kernel/locking/mutex.c:752 v4l2_ctrl_lock include/media/v4l2-ctrls.h:572 [inline] log_ctrl drivers/media/v4l2-core/v4l2-ctrls-core.c:2518 [inline] v4l2_ctrl_handler_log_status+0xd3/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2556 v4l2_ctrl_log_status+0x3a/0x50 drivers/media/v4l2-core/v4l2-ctrls-api.c:1206 vidioc_log_status+0x33/0x70 drivers/media/test-drivers/vivid/vivid-core.c:426 v4l_log_status+0x3c/0x80 drivers/media/v4l2-core/v4l2-ioctl.c:2562 __video_do_ioctl+0x360/0x470 drivers/media/v4l2-core/v4l2-ioctl.c:3049 video_usercopy+0x43a/0x720 drivers/media/v4l2-core/v4l2-ioctl.c:3390 v4l2_ioctl+0x42/0x60 drivers/media/v4l2-core/v4l2-dev.c:364 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:871 [inline] __se_sys_ioctl+0x6e/0xc0 fs/ioctl.c:857 do_syscall_64+0xa7/0x1c0 entry_SYSCALL_64_after_hwframe+0x6f/0x77 RIP: 0033:0x7f2414020da9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f2413ba20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f241414ef80 RCX: 00007f2414020da9 RDX: 0000000000000000 RSI: 0000000000005646 RDI: 0000000000000003 RBP: 00007f241406d47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f241414ef80 R15: 00007ffef800cea8 true vivid-000: Integer 32 Bits: 0 vivid-000: Integer 64 Bits: 0 vivid-000: Menu: Menu Item 3 vivid-000: String: vivid-000: Bitmask: 0x80002000 vivid-000: Integer Menu: 5 vivid-000: U32 1 Element Array: [1] 24 vivid-000: U16 8x16 Matrix: [8][16] 24 vivid-000: U8 2x3x4x5 Array: [2][3][4][5] 24 vivid-000: Area: unknown type 262 vivid-000: Read-Only Integer 32 Bits: 0 vivid-000: U32 Dynamic Array: [100] 50 vivid-000: U8 Pixel Array: [640][368] 128 vivid-000: S32 2 Element Array: [2] 2 vivid-000: S64 5 Element Array: [5] 4 vivid-000: Wrap Sequence Number: false vivid-000: Wrap Timestamp: None vivid-000: Percentage of Dropped Buffers: 0 vivid-000: FM Deviation: 75000 vivid-000: ================== END STATUS ==================