[BUG] WARN videobuf2-core.c:2210 -- go7007_stop_streaming leaves buffers ACTIVE

[Farhad Alemi]

Hello,

As part of the kernel research at ASU's SEFCOM
lab, we hit the crash below. Crash reports can be found here:

  https://github.com/farhad-alemi/public_bug_reports/tree/main/159-media-go7007-stop_streaming-buffers-active/

  go7007 3-1:1.0: unable to reset the USB interface
  WIS Star Trek or compatible: error transferring firmware
  atomic_read(&q->owned_by_drv_count)
  WARNING: drivers/media/common/videobuf2/videobuf2-core.c:2210 at
__vb2_queue_cancel+0xabd/0xdb0, CPU#1: repro/9514
  RIP: 0010:__vb2_queue_cancel+0xabd/0xdb0
  Call Trace:
   __vb2_queue_cancel+0xabd/0xdb0
   vb2_core_streamoff+0x4c/0x140
   __video_do_ioctl+0xadb/0xca0
   video_usercopy+0x876/0x1450
   v4l2_ioctl+0x18d/0x1e0
   __se_sys_ioctl+0xfc/0x170
  Kernel panic - not syncing: kernel: panic_on_warn set ...

Our reproducer.c is available upon request.

Happy to test a patch if that would help.

Regards,