New: "usbreset" tool causes hung task on kernel 5.15.3+ with Hauppauge WinTV dualHD

https://bugzilla.kernel.org/show_bug.cgi?id=215241

            Bug ID: 215241
           Summary: "usbreset" tool causes hung task on kernel 5.15.3+
                    with Hauppauge WinTV dualHD
           Product: Drivers
           Version: 2.5
    Kernel Version: 5.15.3
          Hardware: All
                OS: Linux
              Tree: Mainline
            Status: NEW
          Severity: normal
          Priority: P1
         Component: USB
          Assignee: [email protected]
          Reporter: [email protected]
        Regression: No

Created attachment 299917
--> https://bugzilla.kernel.org/attachment.cgi?id=299917&action=edit
Dmesg log

Hello, I have a Hauppauge WinTV dualHD DVB-T2 USB card and need to use the nifty tool usbreset to reset its connection after each standby because else it won’t work. Recently, starting with Linux 5.15.3, usbreset started causing severe hangs even to the point of my system being unable to do a proper reboot or shutdown. Same with 5.16.0-rc3. I’m now back on 5.13.2 without this problem. In the attachment you can read a dmesg log. Distro is Arch Linux.

You may reply to this email to add a comment.

You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.kernel.org/show_bug.cgi?id=215241

--- Comment #1 from Alan Stern ([email protected]) --- You can try using "git bisect" to find the commit which caused this bad behavior.

You may reply to this email to add a comment.

You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.kernel.org/show_bug.cgi?id=215241

--- Comment #2 from Maximilian Böhm ([email protected]) ---
I’m trying, but "git tag" is only showing me versions from 2.6.11 to 5.9.9.

You may reply to this email to add a comment.

You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.kernel.org/show_bug.cgi?id=215241

--- Comment #3 from Maximilian Böhm ([email protected]) --- Ah, it’s counting "v5.1.9, v5.10", what a mess. OK, I’m on it.

You may reply to this email to add a comment.

You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.kernel.org/show_bug.cgi?id=215241

--- Comment #4 from Maximilian Böhm ([email protected]) --- Hallo again, found the commit:

$ git bisect bad
2899243f272f8801dceb1bb692bd1a3ae3f281c2 is the first bad commit
commit 2899243f272f8801dceb1bb692bd1a3ae3f281c2
Author: Pavel Skripkin <[email protected]>
Date:   Thu Jul 29 22:23:33 2021 +0200

media: em28xx: add missing em28xx_close_extension

[ Upstream commit 2c98b8a3458df03abdc6945bbef67ef91d181938 ]

If em28xx dev has ->dev_next pointer, we need to delete ->dev_next list node from em28xx_extension_devlist on disconnect to avoid UAF bugs and corrupted list bugs, since driver frees this pointer on disconnect.

Reported-and-tested-by:
[email protected]

    Fixes: 1a23f81b7dc3 ("V4L/DVB (9979): em28xx: move usb probe code to a

proper place")

 drivers/media/usb/em28xx/em28xx-cards.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

What next?

You may reply to this email to add a comment.

You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.kernel.org/show_bug.cgi?id=215241

--- Comment #5 from Alan Stern ([email protected]) ---
You should write to Paul Skripkin, telling him about this problem. And CC: all the people listed on the Signed-off-by: lines, as well as the [email protected] list.

You may reply to this email to add a comment.

You are receiving this mail because:
You are watching the assignee of the bug.