bisecting cause commit starting from 39ad1c1b6bb862841dfb68c4b15165deda190cc8 building syzkaller on aa432daf55aba3936abb40d197956ccdba8b2085 testing commit 39ad1c1b6bb862841dfb68c4b15165deda190cc8 with gcc (GCC) 8.1.0 all runs: crashed: WARNING in vb2_core_reqbufs testing release v4.20 testing commit 8fe28cb58bcb235034b64cbbb7550a8a43fd88be with gcc (GCC) 8.1.0 all runs: OK # git bisect start 39ad1c1b6bb862841dfb68c4b15165deda190cc8 v4.20 Bisecting: 8569 revisions left to test after this (roughly 13 steps) [02061181d3a9ccfe15ef6bc15fa56283acc47620] Merge tag 'staging-4.21-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging testing commit 02061181d3a9ccfe15ef6bc15fa56283acc47620 with gcc (GCC) 8.1.0 run #0: boot failed: create image operation failed: &{Code:UNSUPPORTED_OPERATION Location: Message:Instance failed to start due to preemption. ForceSendFields:[] NullFields:[]}. run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good 02061181d3a9ccfe15ef6bc15fa56283acc47620 Bisecting: 4274 revisions left to test after this (roughly 12 steps) [e0e83b2ba80844648e057325cf683f7175d79334] Merge remote-tracking branch 'imx-mxs/for-next' testing commit e0e83b2ba80844648e057325cf683f7175d79334 with gcc (GCC) 8.1.0 all runs: OK # git bisect good e0e83b2ba80844648e057325cf683f7175d79334 Bisecting: 1969 revisions left to test after this (roughly 11 steps) [c47f88b78968345721bd8098846866876d90f845] Merge remote-tracking branch 'drm/drm-next' testing commit c47f88b78968345721bd8098846866876d90f845 with gcc (GCC) 8.1.0 all runs: crashed: WARNING in vb2_core_reqbufs # git bisect bad c47f88b78968345721bd8098846866876d90f845 Bisecting: 1125 revisions left to test after this (roughly 10 steps) [8f421784211d4ae598743678ed588d53c7847b34] Merge remote-tracking branch 'v4l-dvb/master' testing commit 8f421784211d4ae598743678ed588d53c7847b34 with gcc (GCC) 8.1.0 all runs: crashed: WARNING in vb2_core_reqbufs # git bisect bad 8f421784211d4ae598743678ed588d53c7847b34 Bisecting: 612 revisions left to test after this (roughly 9 steps) [d2eb655d5720b0f534d21c6ae77a564e5a0a77c2] Merge remote-tracking branch 'befs/for-next' testing commit d2eb655d5720b0f534d21c6ae77a564e5a0a77c2 with gcc (GCC) 8.1.0 all runs: OK # git bisect good d2eb655d5720b0f534d21c6ae77a564e5a0a77c2 Bisecting: 308 revisions left to test after this (roughly 8 steps) [812601137f5816a567d4a4d482fc6d0cc1e310fc] Merge remote-tracking branch 'hid/for-next' testing commit 812601137f5816a567d4a4d482fc6d0cc1e310fc with gcc (GCC) 8.1.0 all runs: OK # git bisect good 812601137f5816a567d4a4d482fc6d0cc1e310fc Bisecting: 154 revisions left to test after this (roughly 7 steps) [71f247daf0c7a82a2e9713daa0895f462a6fd8df] media: mt9m001: make SUBDEV_G_FMT ioctl work with SUBDEV_FORMAT_TRY testing commit 71f247daf0c7a82a2e9713daa0895f462a6fd8df with gcc (GCC) 8.1.0 all runs: OK # git bisect good 71f247daf0c7a82a2e9713daa0895f462a6fd8df Bisecting: 79 revisions left to test after this (roughly 6 steps) [bb3b529277b612cae7cc340883fe52b8a4ed328b] hwmon: (via-cputemp) Use permission specific SENSOR[_DEVICE]_ATTR variants testing commit bb3b529277b612cae7cc340883fe52b8a4ed328b with gcc (GCC) 8.1.0 all runs: OK # git bisect good bb3b529277b612cae7cc340883fe52b8a4ed328b Bisecting: 47 revisions left to test after this (roughly 5 steps) [31f433307043cf14ba1057ce4b8eaac17a2c617f] Documentation: DMA-API: fix two typos testing commit 31f433307043cf14ba1057ce4b8eaac17a2c617f with gcc (GCC) 8.1.0 all runs: OK # git bisect good 31f433307043cf14ba1057ce4b8eaac17a2c617f Bisecting: 23 revisions left to test after this (roughly 5 steps) [aea9a4d0d984bdaf5d1bcf172c448596362123bb] Merge remote-tracking branch 'hwmon-staging/hwmon-next' testing commit aea9a4d0d984bdaf5d1bcf172c448596362123bb with gcc (GCC) 8.1.0 all runs: OK # git bisect good aea9a4d0d984bdaf5d1bcf172c448596362123bb Bisecting: 11 revisions left to test after this (roughly 4 steps) [b4ba92d56b4f8ea692a5aaa4b0054824aa6fe47c] media: dev-effect.rst: remove unused Effect Interface chapter testing commit b4ba92d56b4f8ea692a5aaa4b0054824aa6fe47c with gcc (GCC) 8.1.0 all runs: OK # git bisect good b4ba92d56b4f8ea692a5aaa4b0054824aa6fe47c Bisecting: 5 revisions left to test after this (roughly 3 steps) [5fbd0729cfc6601a703ec79a301928bd00bfcb6f] media: vicodec: Add pixel encoding flags to fwht header testing commit 5fbd0729cfc6601a703ec79a301928bd00bfcb6f with gcc (GCC) 8.1.0 all runs: OK # git bisect good 5fbd0729cfc6601a703ec79a301928bd00bfcb6f Bisecting: 2 revisions left to test after this (roughly 2 steps) [f863f222b49a9c7a6cfcc72f1ac74ab14c7a7258] media: vicodec: ensure comp frame pointer kept in range testing commit f863f222b49a9c7a6cfcc72f1ac74ab14c7a7258 with gcc (GCC) 8.1.0 all runs: crashed: WARNING in vb2_core_reqbufs # git bisect bad f863f222b49a9c7a6cfcc72f1ac74ab14c7a7258 Bisecting: 0 revisions left to test after this (roughly 1 step) [3b15f68e19c28a76d175f61943a8c23224afce93] media: vicodec: Add support for resolution change event. testing commit 3b15f68e19c28a76d175f61943a8c23224afce93 with gcc (GCC) 8.1.0 all runs: crashed: WARNING in vb2_core_reqbufs # git bisect bad 3b15f68e19c28a76d175f61943a8c23224afce93 Bisecting: 0 revisions left to test after this (roughly 0 steps) [ddc1b085275144a80260b5062fa341a503b4495c] media: vicodec: Separate fwht header from the frame data testing commit ddc1b085275144a80260b5062fa341a503b4495c with gcc (GCC) 8.1.0 run #0: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/tmp/syz-executor216134449" "root@10.128.15.224:./syz-executor216134449"]: exit status 1 ssh: connect to host 10.128.15.224 port 22: Connection timed out lost connection run #1: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/tmp/syz-executor401544412" "root@10.128.15.218:./syz-executor401544412"]: exit status 1 ssh: connect to host 10.128.15.218 port 22: Connection timed out lost connection run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good ddc1b085275144a80260b5062fa341a503b4495c 3b15f68e19c28a76d175f61943a8c23224afce93 is the first bad commit commit 3b15f68e19c28a76d175f61943a8c23224afce93 Author: Dafna Hirschfeld Date: Mon Jan 21 09:46:18 2019 -0200 media: vicodec: Add support for resolution change event. If the the queues are not streaming then the first resolution change is handled in the buf_queue callback. The following resolution change events are handled in job_ready. Signed-off-by: Dafna Hirschfeld Signed-off-by: Hans Verkuil [hverkuil-cisco@xs4all.nl: wrap info_from_header prototype] Signed-off-by: Mauro Carvalho Chehab :040000 040000 40b25aa2f74e997a401bab71f9198ff9343ae069 74676d7b121299312108ac14b8f4a519a849c751 M drivers revisions tested: 17, total time: 4h20m34.867390115s (build: 1h48m2.292459019s, test: 2h26m19.068654522s) first bad commit: 3b15f68e19c28a76d175f61943a8c23224afce93 media: vicodec: Add support for resolution change event. cc: ["dafna3@gmail.com" "hans.verkuil@cisco.com" "hverkuil-cisco@xs4all.nl" "linux-kernel@vger.kernel.org" "linux-media@vger.kernel.org" "mchehab+samsung@kernel.org" "mchehab@kernel.org"] crash: WARNING in vb2_core_reqbufs IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 8021q: adding VLAN 0 to HW filter on device batadv0 IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network WARNING: CPU: 1 PID: 7550 at drivers/media/common/videobuf2/videobuf2-core.c:728 vb2_core_reqbufs+0x4fc/0xf50 drivers/media/common/videobuf2/videobuf2-core.c:728 Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 7550 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #1 IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x18c/0x257 lib/dump_stack.c:113 IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready panic+0x212/0x41d kernel/panic.c:214 hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network __warn.cold.8+0x1b/0x3c kernel/panic.c:571 IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready report_bug+0x1a4/0x200 lib/bug.c:186 fixup_bug arch/x86/kernel/traps.c:178 [inline] do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:271 IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready do_invalid_op+0x36/0x40 arch/x86/kernel/traps.c:290 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:973 RIP: 0010:vb2_core_reqbufs+0x4fc/0xf50 drivers/media/common/videobuf2/videobuf2-core.c:728 Code: c1 ea 03 42 0f b6 34 32 48 89 c2 83 e2 07 83 c2 03 40 38 f2 7c 09 40 84 f6 0f 85 69 08 00 00 48 83 c0 04 8b 70 fc 85 f6 75 c9 <0f> 0b 41 be ea ff ff ff 48 b8 00 00 00 00 00 fc ff df 48 03 85 98 RSP: 0018:ffff8880a0bf7530 EFLAGS: 00010246 8021q: adding VLAN 0 to HW filter on device batadv0 RAX: 0000000000000000 RBX: ffff8880a0bf7698 RCX: 0000000000000001 kobject: 'vlan0' (000000009e16c031): kobject_add_internal: parent: 'mesh', set: '' RDX: 1ffff1101417eec7 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffff8880a0bf76c0 R08: ffff888090620370 R09: ffff888090620370 R10: ffffed10120c4075 R11: ffff8880906203af R12: ffff888090620310 R13: ffff88809062036c R14: 0000000000000000 R15: ffff8880a0bf75b8 kobject: 'loop5' (00000000cf261ef4): kobject_uevent_env vb2_reqbufs+0x153/0x1b0 drivers/media/common/videobuf2/videobuf2-v4l2.c:664 v4l2_m2m_reqbufs+0x5f/0x120 drivers/media/v4l2-core/v4l2-mem2mem.c:457 v4l2_m2m_ioctl_reqbufs+0x62/0x90 drivers/media/v4l2-core/v4l2-mem2mem.c:1051 v4l_reqbufs+0x93/0xb0 drivers/media/v4l2-core/v4l2-ioctl.c:1918 __video_do_ioctl+0x634/0x1220 drivers/media/v4l2-core/v4l2-ioctl.c:2858 video_usercopy+0x35f/0x1470 drivers/media/v4l2-core/v4l2-ioctl.c:3040 video_ioctl2+0x10/0x12 drivers/media/v4l2-core/v4l2-ioctl.c:3084 v4l2_ioctl+0x12b/0x1d0 drivers/media/v4l2-core/v4l2-dev.c:364 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:509 [inline] do_vfs_ioctl+0x195/0x16a0 fs/ioctl.c:696 kobject: 'loop5' (00000000cf261ef4): fill_kobj_path: path = '/devices/virtual/block/loop5' ksys_ioctl+0x62/0x90 fs/ioctl.c:713 __do_sys_ioctl fs/ioctl.c:720 [inline] __se_sys_ioctl fs/ioctl.c:718 [inline] __x64_sys_ioctl+0x6e/0xb0 fs/ioctl.c:718 do_syscall_64+0x183/0x700 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4581d9 Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f94c4198c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004581d9 RDX: 0000000020000400 RSI: 00000000c0145608 RDI: 0000000000000003 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f94c41996d4 R13: 00000000004c2ff8 R14: 00000000004d5960 R15: 00000000ffffffff Kernel Offset: disabled Rebooting in 86400 seconds..