Re: possible deadlock in do_fcntl

[Desmond Cheong Zhi Xi]

#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master

Testing this without a patch first to make sure it's not bumping against
a different bug.

Best,
Desmond

[syzbot]

Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:
possible deadlock in do_fcntl

========================================================
WARNING: possible irq lock inversion dependency detected
5.13.0-syzkaller #0 Not tainted
--------------------------------------------------------
syz-executor.2/10198 just changed the state of lock:
ffff8880125ad8f8 (&f->f_owner.lock){.+..}-{2:2}, at: f_getown_ex fs/fcntl.c:211 [inline]
ffff8880125ad8f8 (&f->f_owner.lock){.+..}-{2:2}, at: do_fcntl+0x8b4/0x1200 fs/fcntl.c:395
but this lock was taken by another, HARDIRQ-safe lock in the past:
(&dev->event_lock){-.-.}-{2:2}


and interrupts could create inverse lock ordering between them.


other info that might help us debug this:
Chain exists of:

&dev->event_lock --> &new->fa_lock --> &f->f_owner.lock

Possible interrupt unsafe locking scenario:

CPU0 CPU1
---- ----
lock(&f->f_owner.lock);
local_irq_disable();
lock(&dev->event_lock);
lock(&new->fa_lock);
<Interrupt>
lock(&dev->event_lock
);

*** DEADLOCK ***

no locks held by syz-executor.2/10198.

the shortest dependencies between 2nd lock and 1st lock:
->
(&dev->event_lock){-.-.}-{2:2} {
IN-HARDIRQ-W at:
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:159
input_event drivers/input/input.c:445 [inline]
input_event+0x7b/0xb0 drivers/input/input.c:438
input_report_key include/linux/input.h:425 [inline]
psmouse_report_standard_buttons+0x2c/0x80 drivers/input/mouse/psmouse-base.c:123
psmouse_report_standard_packet drivers/input/mouse/psmouse-base.c:141 [inline]
psmouse_process_byte+0x1e1/0x890 drivers/input/mouse/psmouse-base.c:232
psmouse_handle_byte+0x41/0x1b0 drivers/input/mouse/psmouse-base.c:274
psmouse_interrupt+0x304/0xf00 drivers/input/mouse/psmouse-base.c:426
serio_interrupt+0x88/0x150 drivers/input/serio/serio.c:1002
i8042_interrupt+0x27a/0x520 drivers/input/serio/i8042.c:602
__handle_irq_event_percpu+0x303/0x8f0 kernel/irq/handle.c:156
handle_irq_event_percpu kernel/irq/handle.c:196 [inline]
handle_irq_event+0x102/0x280 kernel/irq/handle.c:213
handle_edge_irq+0x25f/0xd00 kernel/irq/chip.c:819
generic_handle_irq_desc include/linux/irqdesc.h:158 [inline]
handle_irq arch/x86/kernel/irq.c:231 [inline]
__common_interrupt+0x9e/0x200 arch/x86/kernel/irq.c:250
common_interrupt+0x9f/0xd0 arch/x86/kernel/irq.c:240
asm_common_interrupt+0x1e/0x40 arch/x86/include/asm/idtentry.h:629
kmem_cache_free+0x94/0x200 mm/slab.c:3743
put_pid.part.0+0xf4/0x140 kernel/pid.c:114
put_pid kernel/pid.c:109 [inline]
delayed_put_pid+0x1f/0x30 kernel/pid.c:123
rcu_do_batch kernel/rcu/tree.c:2558 [inline]
rcu_core+0x7ab/0x1380 kernel/rcu/tree.c:2793
__do_softirq+0x29b/0x9bd kernel/softirq.c:558
run_ksoftirqd kernel/softirq.c:920 [inline]
run_ksoftirqd+0x2d/0x60 kernel/softirq.c:912
smpboot_thread_fn+0x645/0x9c0 kernel/smpboot.c:164
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
IN-SOFTIRQ-W at:
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:159
input_event drivers/input/input.c:445 [inline]
input_event+0x7b/0xb0 drivers/input/input.c:438
input_report_key include/linux/input.h:425 [inline]
psmouse_report_standard_buttons+0x2c/0x80 drivers/input/mouse/psmouse-base.c:123
psmouse_report_standard_packet drivers/input/mouse/psmouse-base.c:141 [inline]
psmouse_process_byte+0x1e1/0x890 drivers/input/mouse/psmouse-base.c:232
psmouse_handle_byte+0x41/0x1b0 drivers/input/mouse/psmouse-base.c:274
psmouse_interrupt+0x304/0xf00 drivers/input/mouse/psmouse-base.c:426
serio_interrupt+0x88/0x150 drivers/input/serio/serio.c:1002
i8042_interrupt+0x27a/0x520 drivers/input/serio/i8042.c:602
__handle_irq_event_percpu+0x303/0x8f0 kernel/irq/handle.c:156
handle_irq_event_percpu kernel/irq/handle.c:196 [inline]
handle_irq_event+0x102/0x280 kernel/irq/handle.c:213
handle_edge_irq+0x25f/0xd00 kernel/irq/chip.c:819
generic_handle_irq_desc include/linux/irqdesc.h:158 [inline]
handle_irq arch/x86/kernel/irq.c:231 [inline]
__common_interrupt+0x9e/0x200 arch/x86/kernel/irq.c:250
common_interrupt+0x9f/0xd0 arch/x86/kernel/irq.c:240
asm_common_interrupt+0x1e/0x40 arch/x86/include/asm/idtentry.h:629
kmem_cache_free+0x94/0x200 mm/slab.c:3743
put_pid.part.0+0xf4/0x140 kernel/pid.c:114
put_pid kernel/pid.c:109 [inline]
delayed_put_pid+0x1f/0x30 kernel/pid.c:123
rcu_do_batch kernel/rcu/tree.c:2558 [inline]
rcu_core+0x7ab/0x1380 kernel/rcu/tree.c:2793
__do_softirq+0x29b/0x9bd kernel/softirq.c:558
run_ksoftirqd kernel/softirq.c:920 [inline]
run_ksoftirqd+0x2d/0x60 kernel/softirq.c:912
smpboot_thread_fn+0x645/0x9c0 kernel/smpboot.c:164
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
INITIAL USE at:
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:159
input_inject_event+0xa6/0x310 drivers/input/input.c:471
__led_set_brightness drivers/leds/led-core.c:47 [inline]
led_set_brightness_nopm drivers/leds/led-core.c:271 [inline]
led_set_brightness_nosleep+0xe6/0x1a0 drivers/leds/led-core.c:287
led_set_brightness+0x134/0x170 drivers/leds/led-core.c:264
led_trigger_event drivers/leds/led-triggers.c:388 [inline]
led_trigger_event+0x75/0xd0 drivers/leds/led-triggers.c:377
kbd_led_trigger_activate+0xc9/0x100 drivers/tty/vt/keyboard.c:1029
led_trigger_set+0x61e/0xbd0 drivers/leds/led-triggers.c:195
led_trigger_set_default drivers/leds/led-triggers.c:259 [inline]
led_trigger_set_default+0x1a6/0x230 drivers/leds/led-triggers.c:246
led_classdev_register_ext+0x5b1/0x7c0 drivers/leds/led-class.c:416
led_classdev_register include/linux/leds.h:190 [inline]
input_leds_connect+0x4bd/0x860 drivers/input/input-leds.c:139
input_attach_handler+0x180/0x1f0 drivers/input/input.c:1035
input_register_device.cold+0xf0/0x303 drivers/input/input.c:2335
atkbd_connect+0x739/0xa00 drivers/input/keyboard/atkbd.c:1293
serio_connect_driver drivers/input/serio/serio.c:47 [inline]
serio_driver_probe+0x72/0xa0 drivers/input/serio/serio.c:778
really_probe+0x291/0xf60 drivers/base/dd.c:576
driver_probe_device+0x298/0x410 drivers/base/dd.c:763
device_driver_attach+0x228/0x290 drivers/base/dd.c:1039
__driver_attach+0x190/0x340 drivers/base/dd.c:1117
bus_for_each_dev+0x147/0x1d0 drivers/base/bus.c:305
serio_attach_driver drivers/input/serio/serio.c:808 [inline]
serio_handle_event+0x5f6/0xa30 drivers/input/serio/serio.c:227
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
}
... key at: [<ffffffff904f5f20>] __key.8+0x0/0x40
... acquired at:
__raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
_raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:151
spin_lock include/linux/spinlock.h:354 [inline]
evdev_pass_values.part.0+0xf6/0x970 drivers/input/evdev.c:261
evdev_pass_values drivers/input/evdev.c:253 [inline]
evdev_events+0x28b/0x3f0 drivers/input/evdev.c:306
input_to_handler+0x2a0/0x4c0 drivers/input/input.c:115
input_pass_values.part.0+0x284/0x700 drivers/input/input.c:145
input_pass_values drivers/input/input.c:134 [inline]
input_handle_event+0x373/0x1440 drivers/input/input.c:404
input_inject_event+0x2f5/0x310 drivers/input/input.c:476
evdev_write+0x430/0x760 drivers/input/evdev.c:530
vfs_write+0x28e/0xa30 fs/read_write.c:603
ksys_write+0x1ee/0x250 fs/read_write.c:658
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae

-> (&client->buffer_lock){....}-{2:2} {
INITIAL USE at:
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
__raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
_raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:151
spin_lock include/linux/spinlock.h:354 [inline]
evdev_pass_values.part.0+0xf6/0x970 drivers/input/evdev.c:261
evdev_pass_values drivers/input/evdev.c:253 [inline]
evdev_events+0x28b/0x3f0 drivers/input/evdev.c:306
input_to_handler+0x2a0/0x4c0 drivers/input/input.c:115
input_pass_values.part.0+0x284/0x700 drivers/input/input.c:145
input_pass_values drivers/input/input.c:134 [inline]
input_handle_event+0x373/0x1440 drivers/input/input.c:404
input_inject_event+0x2f5/0x310 drivers/input/input.c:476
evdev_write+0x430/0x760 drivers/input/evdev.c:530
vfs_write+0x28e/0xa30 fs/read_write.c:603
ksys_write+0x1ee/0x250 fs/read_write.c:658
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
}
... key at: [<ffffffff904f63a0>] __key.4+0x0/0x40
... acquired at:
__raw_read_lock include/linux/rwlock_api_smp.h:149 [inline]
_raw_read_lock+0x5b/0x70 kernel/locking/spinlock.c:223
kill_fasync_rcu fs/fcntl.c:1012 [inline]
kill_fasync fs/fcntl.c:1033 [inline]
kill_fasync+0x14b/0x460 fs/fcntl.c:1026
__pass_event drivers/input/evdev.c:240 [inline]
evdev_pass_values.part.0+0x64e/0x970 drivers/input/evdev.c:278
evdev_pass_values drivers/input/evdev.c:253 [inline]
evdev_events+0x28b/0x3f0 drivers/input/evdev.c:306
input_to_handler+0x2a0/0x4c0 drivers/input/input.c:115
input_pass_values.part.0+0x284/0x700 drivers/input/input.c:145
input_pass_values drivers/input/input.c:134 [inline]
input_handle_event+0x373/0x1440 drivers/input/input.c:404
input_inject_event+0x2f5/0x310 drivers/input/input.c:476
evdev_write+0x430/0x760 drivers/input/evdev.c:530
vfs_write+0x28e/0xa30 fs/read_write.c:603
ksys_write+0x1ee/0x250 fs/read_write.c:658
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae

-> (&new->fa_lock){....}-{2:2} {
INITIAL READ USE at:
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
__raw_read_lock include/linux/rwlock_api_smp.h:149 [inline]
_raw_read_lock+0x5b/0x70 kernel/locking/spinlock.c:223
kill_fasync_rcu fs/fcntl.c:1012 [inline]
kill_fasync fs/fcntl.c:1033 [inline]
kill_fasync+0x14b/0x460 fs/fcntl.c:1026
__pass_event drivers/input/evdev.c:240 [inline]
evdev_pass_values.part.0+0x64e/0x970 drivers/input/evdev.c:278
evdev_pass_values drivers/input/evdev.c:253 [inline]
evdev_events+0x28b/0x3f0 drivers/input/evdev.c:306
input_to_handler+0x2a0/0x4c0 drivers/input/input.c:115
input_pass_values.part.0+0x284/0x700 drivers/input/input.c:145
input_pass_values drivers/input/input.c:134 [inline]
input_handle_event+0x373/0x1440 drivers/input/input.c:404
input_inject_event+0x2f5/0x310 drivers/input/input.c:476
evdev_write+0x430/0x760 drivers/input/evdev.c:530
vfs_write+0x28e/0xa30 fs/read_write.c:603
ksys_write+0x1ee/0x250 fs/read_write.c:658
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
}
... key at: [<ffffffff90242a40>] __key.0+0x0/0x40
... acquired at:
__raw_read_lock_irqsave include/linux/rwlock_api_smp.h:159 [inline]
_raw_read_lock_irqsave+0x70/0x90 kernel/locking/spinlock.c:231
send_sigio+0x24/0x370 fs/fcntl.c:795
kill_fasync_rcu fs/fcntl.c:1019 [inline]
kill_fasync fs/fcntl.c:1033 [inline]
kill_fasync+0x205/0x460 fs/fcntl.c:1026
__pass_event drivers/input/evdev.c:240 [inline]
evdev_pass_values.part.0+0x64e/0x970 drivers/input/evdev.c:278
evdev_pass_values drivers/input/evdev.c:253 [inline]
evdev_events+0x28b/0x3f0 drivers/input/evdev.c:306
input_to_handler+0x2a0/0x4c0 drivers/input/input.c:115
input_pass_values.part.0+0x284/0x700 drivers/input/input.c:145
input_pass_values drivers/input/input.c:134 [inline]
input_handle_event+0x373/0x1440 drivers/input/input.c:404
input_inject_event+0x2f5/0x310 drivers/input/input.c:476
evdev_write+0x430/0x760 drivers/input/evdev.c:530
vfs_write+0x28e/0xa30 fs/read_write.c:603
ksys_write+0x1ee/0x250 fs/read_write.c:658
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae

-> (&f->f_owner.lock){.+..}-{2:2} {
HARDIRQ-ON-R at:
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
__raw_read_lock include/linux/rwlock_api_smp.h:149 [inline]
_raw_read_lock+0x5b/0x70 kernel/locking/spinlock.c:223
f_getown_ex fs/fcntl.c:211 [inline]
do_fcntl+0x8b4/0x1200 fs/fcntl.c:395
__do_sys_fcntl fs/fcntl.c:471 [inline]
__se_sys_fcntl fs/fcntl.c:456 [inline]
__x64_sys_fcntl+0x165/0x1e0 fs/fcntl.c:456
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
INITIAL READ USE at:
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
__raw_read_lock_irqsave include/linux/rwlock_api_smp.h:159 [inline]
_raw_read_lock_irqsave+0x70/0x90 kernel/locking/spinlock.c:231
send_sigio+0x24/0x370 fs/fcntl.c:795
kill_fasync_rcu fs/fcntl.c:1019 [inline]
kill_fasync fs/fcntl.c:1033 [inline]
kill_fasync+0x205/0x460 fs/fcntl.c:1026
__pass_event drivers/input/evdev.c:240 [inline]
evdev_pass_values.part.0+0x64e/0x970 drivers/input/evdev.c:278
evdev_pass_values drivers/input/evdev.c:253 [inline]
evdev_events+0x28b/0x3f0 drivers/input/evdev.c:306
input_to_handler+0x2a0/0x4c0 drivers/input/input.c:115
input_pass_values.part.0+0x284/0x700 drivers/input/input.c:145
input_pass_values drivers/input/input.c:134 [inline]
input_handle_event+0x373/0x1440 drivers/input/input.c:404
input_inject_event+0x2f5/0x310 drivers/input/input.c:476
evdev_write+0x430/0x760 drivers/input/evdev.c:530
vfs_write+0x28e/0xa30 fs/read_write.c:603
ksys_write+0x1ee/0x250 fs/read_write.c:658
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
}
... key at: [<ffffffff90241c60>] __key.5+0x0/0x40
... acquired at:
mark_usage kernel/locking/lockdep.c:4494 [inline]
__lock_acquire+0x123a/0x54a0 kernel/locking/lockdep.c:4969
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
__raw_read_lock include/linux/rwlock_api_smp.h:149 [inline]
_raw_read_lock+0x5b/0x70 kernel/locking/spinlock.c:223
f_getown_ex fs/fcntl.c:211 [inline]
do_fcntl+0x8b4/0x1200 fs/fcntl.c:395
__do_sys_fcntl fs/fcntl.c:471 [inline]
__se_sys_fcntl fs/fcntl.c:456 [inline]
__x64_sys_fcntl+0x165/0x1e0 fs/fcntl.c:456
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae


stack backtrace:
CPU: 0 PID: 10198 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:79 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:96
print_irq_inversion_bug kernel/locking/lockdep.c:203 [inline]
check_usage_backwards kernel/locking/lockdep.c:4066 [inline]
mark_lock_irq kernel/locking/lockdep.c:4156 [inline]
mark_lock.cold+0x1d/0x8e kernel/locking/lockdep.c:4593
mark_usage kernel/locking/lockdep.c:4494 [inline]
__lock_acquire+0x123a/0x54a0 kernel/locking/lockdep.c:4969
lock_acquire kernel/locking/lockdep.c:5625 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
__raw_read_lock include/linux/rwlock_api_smp.h:149 [inline]
_raw_read_lock+0x5b/0x70 kernel/locking/spinlock.c:223
f_getown_ex fs/fcntl.c:211 [inline]
do_fcntl+0x8b4/0x1200 fs/fcntl.c:395
__do_sys_fcntl fs/fcntl.c:471 [inline]
__se_sys_fcntl fs/fcntl.c:456 [inline]
__x64_sys_fcntl+0x165/0x1e0 fs/fcntl.c:456
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4665f9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f713029e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665f9
RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000006
RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008
R13: 00007fffa939b9ff R14: 00007f713029e300 R15: 0000000000022000


Tested on:

commit: 3dbdb38e Merge branch 'for-5.14' of git://git.kernel.org/p..
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=100b4718300000
kernel config: https://syzkaller.appspot.com/x/.config?x=8b9af36f2e2f2dd8
dashboard link: https://syzkaller.appspot.com/bug?extid=e6d5398a02c516ce5e70
compiler:

[Desmond Cheong Zhi Xi]

#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master

Best,
Desmond

[syzbot]

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-and-tested-by: syzbot+e6d539...@syzkaller.appspotmail.com

Tested on:

commit: 3dbdb38e Merge branch 'for-5.14' of git://git.kernel.org/p..
git tree: upstream

kernel config: https://syzkaller.appspot.com/x/.config?x=8b9af36f2e2f2dd8
dashboard link: https://syzkaller.appspot.com/bug?extid=e6d5398a02c516ce5e70
compiler:

patch: https://syzkaller.appspot.com/x/patch.diff?x=161751b4300000

Note: testing is done by a robot and is best-effort only.

[Desmond Cheong Zhi Xi]

[syzbot]

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-and-tested-by: syzbot+e6d539...@syzkaller.appspotmail.com

Tested on:

commit: 3dbdb38e Merge branch 'for-5.14' of git://git.kernel.org/p..
git tree: upstream
kernel config: https://syzkaller.appspot.com/x/.config?x=8b9af36f2e2f2dd8
dashboard link: https://syzkaller.appspot.com/bug?extid=e6d5398a02c516ce5e70
compiler:

patch: https://syzkaller.appspot.com/x/patch.diff?x=1796d6c2300000

[Desmond Cheong Zhi Xi]

[syzbot]

Hello,

syzbot tried to test the proposed patch but the build/boot failed:

QCA registered
[ 14.649373][ T1] Bluetooth: HCI UART protocol AG6XX registered
[ 14.656399][ T1] Bluetooth: HCI UART protocol Marvell registered
[ 14.663641][ T1] usbcore: registered new interface driver bcm203x
[ 14.670949][ T1] usbcore: registered new interface driver bpa10x
[ 14.678054][ T1] usbcore: registered new interface driver bfusb
[ 14.685401][ T1] usbcore: registered new interface driver btusb
[ 14.692547][ T1] usbcore: registered new interface driver ath3k
[ 14.700160][ T1] CAPI 2.0 started up with major 68 (middleware)
[ 14.706647][ T1] Modular ISDN core version 1.1.29
[ 14.713178][ T1] NET: Registered PF_ISDN protocol family
[ 14.718905][ T1] DSP module 2.0
[ 14.722441][ T1] mISDN_dsp: DSP clocks every 80 samples. This equals 1 jiffies.
[ 14.742827][ T1] mISDN: Layer-1-over-IP driver Rev. 2.00
[ 14.749378][ T1] 0 virtual devices registered
[ 14.754581][ T1] usbcore: registered new interface driver HFC-S_USB
[ 14.762108][ T1] intel_pstate: CPU model not supported
[ 14.768225][ T1] VUB300 Driver rom wait states = 1C irqpoll timeout = 0400
[ 14.769738][ T1] usbcore: registered new interface driver vub300
[ 14.784637][ T1] usbcore: registered new interface driver ushc
[ 14.799152][ T1] iscsi: registered transport (iser)
[ 14.805804][ T1] SoftiWARP attached
[ 14.809917][ T1] Driver 'framebuffer' was unable to register with bus_type 'coreboot' because the bus was not initialized.
[ 14.822343][ T1] Driver 'memconsole' was unable to register with bus_type 'coreboot' because the bus was not initialized.
[ 14.833863][ T1] Driver 'vpd' was unable to register with bus_type 'coreboot' because the bus was not initialized.
[ 14.855914][ T1] hid: raw HID events driver (C) Jiri Kosina
[ 14.925891][ T1] usbcore: registered new interface driver usbhid
[ 14.932387][ T1] usbhid: USB HID core driver
[ 14.941596][ T1] usbcore: registered new interface driver es2_ap_driver
[ 14.949954][ T1] comedi: version 0.7.76 - http://www.comedi.org
[ 14.957478][ T1] usbcore: registered new interface driver dt9812
[ 14.964580][ T1] usbcore: registered new interface driver ni6501
[ 14.971380][ T1] usbcore: registered new interface driver usbdux
[ 14.978266][ T1] usbcore: registered new interface driver usbduxfast
[ 14.985648][ T1] usbcore: registered new interface driver usbduxsigma
[ 14.993180][ T1] usbcore: registered new interface driver vmk80xx
[ 15.000330][ T1] usbcore: registered new interface driver prism2_usb
[ 15.007804][ T1] usbcore: registered new interface driver r8712u
[ 15.015504][ T1] ashmem: initialized
[ 15.019868][ T1] greybus: registered new driver hid
[ 15.026530][ T1] greybus: registered new driver gbphy
[ 15.032424][ T1] gb_gbphy: registered new driver usb
[ 15.038359][ T1] asus_wmi: ASUS WMI generic driver loaded
[ 15.142573][ T1] usbcore: registered new interface driver snd-usb-audio
[ 15.152076][ T1] usbcore: registered new interface driver snd-ua101
[ 15.159527][ T1] usbcore: registered new interface driver snd-usb-usx2y
[ 15.168013][ T1] usbcore: registered new interface driver snd-usb-us122l
[ 15.176028][ T1] usbcore: registered new interface driver snd-usb-caiaq
[ 15.185165][ T1] usbcore: registered new interface driver snd-usb-6fire
[ 15.192856][ T1] usbcore: registered new interface driver snd-usb-hiface
[ 15.200578][ T1] usbcore: registered new interface driver snd-bcd2000
[ 15.208332][ T1] usbcore: registered new interface driver snd_usb_pod
[ 15.216032][ T1] usbcore: registered new interface driver snd_usb_podhd
[ 15.223548][ T1] usbcore: registered new interface driver snd_usb_toneport
[ 15.231721][ T1] usbcore: registered new interface driver snd_usb_variax
[ 15.239043][ T1] drop_monitor: Initializing network drop monitor service
[ 15.246923][ T1] NET: Registered PF_LLC protocol family
[ 15.253479][ T1] GACT probability on
[ 15.257687][ T1] Mirror/redirect action on
[ 15.262486][ T1] Simple TC action Loaded
[ 15.269779][ T1] netem: version 1.3
[ 15.273950][ T1] u32 classifier
[ 15.277629][ T1] Performance counters on
[ 15.282297][ T1] input device check on
[ 15.286956][ T1] Actions configured
[ 15.293833][ T1] nf_conntrack_irc: failed to register helpers
[ 15.300431][ T1] nf_conntrack_sane: failed to register helpers
[ 15.350614][ T1] nf_conntrack_sip: failed to register helpers
[ 15.361199][ T1] xt_time: kernel timezone is -0000
[ 15.366972][ T1] IPVS: Registered protocols (TCP, UDP, SCTP, AH, ESP)
[ 15.374315][ T1] IPVS: Connection hash table configured (size=4096, memory=64Kbytes)
[ 15.383222][ T1] IPVS: ipvs loaded.
[ 15.387171][ T1] IPVS: [rr] scheduler registered.
[ 15.392747][ T1] IPVS: [wrr] scheduler registered.
[ 15.398025][ T1] IPVS: [lc] scheduler registered.
[ 15.403201][ T1] IPVS: [wlc] scheduler registered.
[ 15.408468][ T1] IPVS: [fo] scheduler registered.
[ 15.413609][ T1] IPVS: [ovf] scheduler registered.
[ 15.418840][ T1] IPVS: [lblc] scheduler registered.
[ 15.424273][ T1] IPVS: [lblcr] scheduler registered.
[ 15.429640][ T1] IPVS: [dh] scheduler registered.
[ 15.434763][ T1] IPVS: [sh] scheduler registered.
[ 15.439862][ T1] IPVS: [mh] scheduler registered.
[ 15.445163][ T1] IPVS: [sed] scheduler registered.
[ 15.450712][ T1] IPVS: [nq] scheduler registered.
[ 15.456052][ T1] IPVS: [twos] scheduler registered.
[ 15.461549][ T1] IPVS: [sip] pe registered.
[ 15.466998][ T1] ipip: IPv4 and MPLS over IPv4 tunneling driver
[ 15.476239][ T1] gre: GRE over IPv4 demultiplexor driver
[ 15.481994][ T1] ip_gre: GRE over IPv4 tunneling driver
[ 15.497157][ T1] IPv4 over IPsec tunneling driver
[ 15.507430][ T1] ipt_CLUSTERIP: ClusterIP Version 0.8 loaded successfully
[ 15.515125][ T1] Initializing XFRM netlink socket
[ 15.520393][ T1] IPsec XFRM device driver
[ 15.525872][ T1] NET: Registered PF_INET6 protocol family
[ 15.544467][ T1] Segment Routing with IPv6
[ 15.549085][ T1] RPL Segment Routing with IPv6
[ 15.554660][ T1] mip6: Mobile IPv6
[ 15.562318][ T1] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
[ 15.575583][ T1] ip6_gre: GRE over IPv6 tunneling driver
[ 15.584152][ T1] NET: Registered PF_PACKET protocol family
[ 15.590303][ T1] NET: Registered PF_KEY protocol family
[ 15.596680][ T1] Bridge firewalling registered
[ 15.602994][ T1] NET: Registered PF_X25 protocol family
[ 15.609255][ T1] X25: Linux Version 0.2
[ 15.654138][ T1] NET: Registered PF_NETROM protocol family
[ 15.699859][ T1] NET: Registered PF_ROSE protocol family
[ 15.706541][ T1] NET: Registered PF_AX25 protocol family
[ 15.712324][ T1] can: controller area network core
[ 15.718042][ T1] NET: Registered PF_CAN protocol family
[ 15.723696][ T1] can: raw protocol
[ 15.727769][ T1] can: broadcast manager protocol
[ 15.732952][ T1] can: netlink gateway - max_hops=1
[ 15.738409][ T1] can: SAE J1939
[ 15.742051][ T1] can: isotp protocol
[ 15.746426][ T1] Bluetooth: RFCOMM TTY layer initialized
[ 15.752165][ T1] Bluetooth: RFCOMM socket layer initialized
[ 15.758544][ T1] Bluetooth: RFCOMM ver 1.11
[ 15.763200][ T1] Bluetooth: BNEP (Ethernet Emulation) ver 1.3
[ 15.769379][ T1] Bluetooth: BNEP filters: protocol multicast
[ 15.775521][ T1] Bluetooth: BNEP socket layer initialized
[ 15.781309][ T1] Bluetooth: CMTP (CAPI Emulation) ver 1.0
[ 15.787226][ T1] Bluetooth: CMTP socket layer initialized
[ 15.793094][ T1] Bluetooth: HIDP (Human Interface Emulation) ver 1.2
[ 15.800038][ T1] Bluetooth: HIDP socket layer initialized
[ 15.809030][ T1] NET: Registered PF_RXRPC protocol family
[ 15.815149][ T1] Key type rxrpc registered
[ 15.819781][ T1] Key type rxrpc_s registered
[ 15.825819][ T1] NET: Registered PF_KCM protocol family
[ 15.832058][ T1] lec:lane_module_init: lec.c: initialized
[ 15.838029][ T1] mpoa:atm_mpoa_init: mpc.c: initialized
[ 15.844129][ T1] l2tp_core: L2TP core driver, V2.0
[ 15.849523][ T1] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[ 15.855231][ T1] l2tp_ip: L2TP IP encapsulation support (L2TPv3)
[ 15.862139][ T1] l2tp_netlink: L2TP netlink interface
[ 15.867958][ T1] l2tp_eth: L2TP ethernet pseudowire support (L2TPv3)
[ 15.875204][ T1] l2tp_ip6: L2TP IP encapsulation support for IPv6 (L2TPv3)
[ 15.882929][ T1] NET: Registered PF_PHONET protocol family
[ 15.889157][ T1] 8021q: 802.1Q VLAN Support v1.8
[ 15.904384][ T1] DCCP: Activated CCID 2 (TCP-like)
[ 15.909888][ T1] DCCP: Activated CCID 3 (TCP-Friendly Rate Control)
[ 15.918615][ T1] sctp: Hash tables configured (bind 32/56)
[ 15.926177][ T1] NET: Registered PF_RDS protocol family
[ 15.933082][ T1] Registered RDS/infiniband transport
[ 15.939535][ T1] Registered RDS/tcp transport
[ 15.944668][ T1] tipc: Activated (version 2.0.0)
[ 15.950388][ T1] NET: Registered PF_TIPC protocol family
[ 15.956915][ T1] tipc: Started in single node mode
[ 15.962961][ T1] NET: Registered PF_SMC protocol family
[ 15.969027][ T1] 9pnet: Installing 9P2000 support
[ 15.974987][ T1] NET: Registered PF_CAIF protocol family
[ 15.985615][ T1] NET: Registered PF_IEEE802154 protocol family
[ 15.992340][ T1] Key type dns_resolver registered
[ 15.998013][ T1] Key type ceph registered
[ 16.003060][ T1] libceph: loaded (mon/osd proto 15/24)
[ 16.010013][ T1] batman_adv: B.A.T.M.A.N. advanced 2021.2 (compatibility version 15) loaded
[ 16.019406][ T1] openvswitch: Open vSwitch switching datapath
[ 16.029571][ T1] NET: Registered PF_VSOCK protocol family
[ 16.036512][ T1] mpls_gso: MPLS GSO support
[ 16.052954][ T1] IPI shorthand broadcast: enabled
[ 16.058318][ T1] AVX2 version of gcm_enc/dec engaged.
[ 16.064445][ T1] AES CTR mode by8 optimization enabled
[ 16.077252][ T1] sched_clock: Marking stable (16033580529, 43536551)->(16084789997, -7672917)
[ 16.088458][ T1] registered taskstats version 1
[ 16.102316][ T1] Loading compiled-in X.509 certificates
[ 16.110702][ T1] Loaded X.509 cert 'Build time autogenerated kernel key: f850c787ad998c396ae089c083b940ff0a9abb77'
[ 16.124138][ T1] zswap: loaded using pool lzo/zbud
[ 16.130767][ T1] debug_vm_pgtable: [debug_vm_pgtable ]: Validating architecture page table helpers
[ 16.142445][ T1] Key type ._fscrypt registered
[ 16.147419][ T1] Key type .fscrypt registered
[ 16.152471][ T1] Key type fscrypt-provisioning registered
[ 16.161015][ T1] kAFS: Red Hat AFS client v0.1 registering.
[ 16.167967][ T1] FS-Cache: Netfs 'afs' registered for caching
[ 16.180963][ T1] Btrfs loaded, crc32c=crc32c-intel, assert=on, zoned=yes
[ 16.189479][ T1] Key type big_key registered
[ 16.197642][ T1] Key type encrypted registered
[ 16.203095][ T1] ima: No TPM chip found, activating TPM-bypass!
[ 16.209768][ T1] Loading compiled-in module X.509 certificates
[ 16.216679][ T1] Loaded X.509 cert 'Build time autogenerated kernel key: f850c787ad998c396ae089c083b940ff0a9abb77'
[ 16.227697][ T1] ima: Allocated hash algorithm: sha256
[ 16.233507][ T1] ima: No architecture policies found
[ 16.239114][ T1] evm: Initialising EVM extended attributes:
[ 16.245247][ T1] evm: security.selinux
[ 16.249567][ T1] evm: security.SMACK64 (disabled)
[ 16.254741][ T1] evm: security.SMACK64EXEC (disabled)
[ 16.260198][ T1] evm: security.SMACK64TRANSMUTE (disabled)
[ 16.266311][ T1] evm: security.SMACK64MMAP (disabled)
[ 16.271750][ T1] evm: security.apparmor (disabled)
[ 16.277050][ T1] evm: security.ima
[ 16.280845][ T1] evm: security.capability
[ 16.285549][ T1] evm: HMAC attrs: 0x1
[ 16.291918][ T1] PM: Magic number: 13:943:985
[ 16.300081][ T1] printk: console [netcon0] enabled
[ 16.306340][ T1] netconsole: network logging started
[ 16.312121][ T1] gtp: GTP module loaded (pdp ctx size 104 bytes)
[ 16.320956][ T1] rdma_rxe: loaded
[ 16.325568][ T1] cfg80211: Loading compiled-in X.509 certificates for regulatory database
[ 16.337408][ T1] cfg80211: Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
[ 16.346510][ T20] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 16.355098][ T1] ALSA device list:
[ 16.356610][ T20] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 16.360508][ T1] #0: Dummy 1
[ 16.372548][ T1] #1: Loopback 1
[ 16.376348][ T1] #2: Virtual MIDI Card 1
[ 16.384501][ T1] md: Waiting for all devices to be available before autodetect
[ 16.393686][ T1] md: If you don't use raid, use raid=noautodetect
[ 16.400212][ T1] md: Autodetecting RAID arrays.
[ 16.405328][ T1] md: autorun ...
[ 16.408946][ T1] md: ... autorun DONE.
[ 16.416546][ T1] VFS: Cannot open root device "sda1" or unknown-block(0,0): error -6
[ 16.424881][ T1] Please append a correct "root=" boot option; here are the available partitions:
[ 16.434123][ T1] 0100 4096 ram0
[ 16.434145][ T1] (driver?)
[ 16.442071][ T1] 0101 4096 ram1
[ 16.442083][ T1] (driver?)
[ 16.449999][ T1] 0102 4096 ram2
[ 16.450012][ T1] (driver?)
[ 16.457843][ T1] 0103 4096 ram3
[ 16.457857][ T1] (driver?)
[ 16.465742][ T1] 0104 4096 ram4
[ 16.465755][ T1] (driver?)
[ 16.473659][ T1] 0105 4096 ram5
[ 16.473671][ T1] (driver?)
[ 16.481606][ T1] 0106 4096 ram6
[ 16.481617][ T1] (driver?)
[ 16.489402][ T1] 0107 4096 ram7
[ 16.489414][ T1] (driver?)
[ 16.497188][ T1] 0108 4096 ram8
[ 16.497200][ T1] (driver?)
[ 16.505704][ T1] 0109 4096 ram9
[ 16.505717][ T1] (driver?)
[ 16.513741][ T1] 010a 4096 ram10
[ 16.513758][ T1] (driver?)
[ 16.521604][ T1] 010b 4096 ram11
[ 16.521615][ T1] (driver?)
[ 16.529808][ T1] 010c 4096 ram12
[ 16.529820][ T1] (driver?)
[ 16.537714][ T1] 010d 4096 ram13
[ 16.537725][ T1] (driver?)
[ 16.545677][ T1] 010e 4096 ram14
[ 16.545689][ T1] (driver?)
[ 16.553579][ T1] 010f 4096 ram15
[ 16.553590][ T1] (driver?)
[ 16.561564][ T1] 1f00 128 mtdblock0
[ 16.561576][ T1] (driver?)
[ 16.570156][ T1] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[ 16.579497][ T1] CPU: 1 PID: 1 Comm: swapper/0 Not tainted 5.13.0-syzkaller #0
[ 16.587569][ T1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 16.598124][ T1] Call Trace:
[ 16.601402][ T1] dump_stack_lvl+0xcd/0x134
[ 16.606096][ T1] panic+0x306/0x73d
[ 16.610126][ T1] ? __warn_printk+0xf3/0xf3
[ 16.615525][ T1] mount_block_root+0x3f8/0x4dd
[ 16.620400][ T1] ? init_rootfs+0x59/0x59
[ 16.624978][ T1] ? memcpy+0x39/0x60
[ 16.628947][ T1] mount_root+0x1af/0x1f5
[ 16.633277][ T1] ? mount_block_root+0x4dd/0x4dd
[ 16.638398][ T1] ? memcpy+0x39/0x60
[ 16.642655][ T1] prepare_namespace+0x1ff/0x234
[ 16.647958][ T1] kernel_init_freeable+0x724/0x73c
[ 16.653324][ T1] ? rest_init+0x3d0/0x3d0
[ 16.657926][ T1] kernel_init+0x1a/0x1d0
[ 16.662476][ T1] ? rest_init+0x3d0/0x3d0
[ 16.666896][ T1] ret_from_fork+0x1f/0x30
[ 16.673088][ T1] Kernel Offset: disabled
[ 16.677423][ T1] Rebooting in 86400 seconds..


Error text is too large and was truncated, full error text is at:
https://syzkaller.appspot.com/x/error.txt?x=12c411fbd00000


Tested on:

commit: 4b820e16 Revert "ALSA: usb-audio: Reduce latency at playba..
git tree: upstream
kernel config: https://syzkaller.appspot.com/x/.config?x=1fc6b5f00336c1f8

dashboard link: https://syzkaller.appspot.com/bug?extid=e6d5398a02c516ce5e70
compiler:

patch: https://syzkaller.appspot.com/x/patch.diff?x=17d9b13c300000

[Desmond Cheong Zhi Xi]

[syzbot]

Hello,

syzbot tried to test the proposed patch but the build/boot failed:

ell registered
[ 17.871011][ T1] usbcore: registered new interface driver bcm203x
[ 17.878415][ T1] usbcore: registered new interface driver bpa10x
[ 17.885404][ T1] usbcore: registered new interface driver bfusb
[ 17.892255][ T1] usbcore: registered new interface driver btusb
[ 17.899367][ T1] usbcore: registered new interface driver ath3k
[ 17.907064][ T1] CAPI 2.0 started up with major 68 (middleware)
[ 17.913492][ T1] Modular ISDN core version 1.1.29
[ 17.919697][ T1] NET: Registered PF_ISDN protocol family
[ 17.925672][ T1] DSP module 2.0
[ 17.929584][ T1] mISDN_dsp: DSP clocks every 80 samples. This equals 1 jiffies.
[ 17.950183][ T1] mISDN: Layer-1-over-IP driver Rev. 2.00
[ 17.957556][ T1] 0 virtual devices registered
[ 17.963129][ T1] usbcore: registered new interface driver HFC-S_USB
[ 17.970406][ T1] intel_pstate: CPU model not supported
[ 17.976078][ T1] VUB300 Driver rom wait states = 1C irqpoll timeout = 0400
[ 17.977618][ T1] usbcore: registered new interface driver vub300
[ 17.992710][ T1] usbcore: registered new interface driver ushc
[ 18.006229][ T1] iscsi: registered transport (iser)
[ 18.013084][ T1] SoftiWARP attached
[ 18.018141][ T1] Driver 'framebuffer' was unable to register with bus_type 'coreboot' because the bus was not initialized.
[ 18.030613][ T1] Driver 'memconsole' was unable to register with bus_type 'coreboot' because the bus was not initialized.
[ 18.042308][ T1] Driver 'vpd' was unable to register with bus_type 'coreboot' because the bus was not initialized.
[ 18.063109][ T1] hid: raw HID events driver (C) Jiri Kosina
[ 18.130160][ T1] usbcore: registered new interface driver usbhid
[ 18.137302][ T1] usbhid: USB HID core driver
[ 18.144923][ T1] usbcore: registered new interface driver es2_ap_driver
[ 18.152148][ T1] comedi: version 0.7.76 - http://www.comedi.org
[ 18.160206][ T1] usbcore: registered new interface driver dt9812
[ 18.168417][ T1] usbcore: registered new interface driver ni6501
[ 18.175913][ T1] usbcore: registered new interface driver usbdux
[ 18.183113][ T1] usbcore: registered new interface driver usbduxfast
[ 18.192089][ T1] usbcore: registered new interface driver usbduxsigma
[ 18.199888][ T1] usbcore: registered new interface driver vmk80xx
[ 18.207566][ T1] usbcore: registered new interface driver prism2_usb
[ 18.215413][ T1] usbcore: registered new interface driver r8712u
[ 18.222655][ T1] ashmem: initialized
[ 18.227450][ T1] greybus: registered new driver hid
[ 18.233843][ T1] greybus: registered new driver gbphy
[ 18.240063][ T1] gb_gbphy: registered new driver usb
[ 18.245765][ T1] asus_wmi: ASUS WMI generic driver loaded
[ 18.350246][ T1] usbcore: registered new interface driver snd-usb-audio
[ 18.358354][ T1] usbcore: registered new interface driver snd-ua101
[ 18.365960][ T1] usbcore: registered new interface driver snd-usb-usx2y
[ 18.373736][ T1] usbcore: registered new interface driver snd-usb-us122l
[ 18.381744][ T1] usbcore: registered new interface driver snd-usb-caiaq
[ 18.389573][ T1] usbcore: registered new interface driver snd-usb-6fire
[ 18.398252][ T1] usbcore: registered new interface driver snd-usb-hiface
[ 18.406827][ T1] usbcore: registered new interface driver snd-bcd2000
[ 18.414417][ T1] usbcore: registered new interface driver snd_usb_pod
[ 18.422592][ T1] usbcore: registered new interface driver snd_usb_podhd
[ 18.430464][ T1] usbcore: registered new interface driver snd_usb_toneport
[ 18.438573][ T1] usbcore: registered new interface driver snd_usb_variax
[ 18.446393][ T1] drop_monitor: Initializing network drop monitor service
[ 18.454604][ T1] NET: Registered PF_LLC protocol family
[ 18.460967][ T1] GACT probability on
[ 18.465384][ T1] Mirror/redirect action on
[ 18.470301][ T1] Simple TC action Loaded
[ 18.478618][ T1] netem: version 1.3
[ 18.482814][ T1] u32 classifier
[ 18.486764][ T1] Performance counters on
[ 18.491528][ T1] input device check on
[ 18.496270][ T1] Actions configured
[ 18.503446][ T1] nf_conntrack_irc: failed to register helpers
[ 18.510041][ T1] nf_conntrack_sane: failed to register helpers
[ 18.558975][ T1] nf_conntrack_sip: failed to register helpers
[ 18.570372][ T1] xt_time: kernel timezone is -0000
[ 18.576008][ T1] IPVS: Registered protocols (TCP, UDP, SCTP, AH, ESP)
[ 18.583296][ T1] IPVS: Connection hash table configured (size=4096, memory=64Kbytes)
[ 18.592716][ T1] IPVS: ipvs loaded.
[ 18.597019][ T1] IPVS: [rr] scheduler registered.
[ 18.602150][ T1] IPVS: [wrr] scheduler registered.
[ 18.608268][ T1] IPVS: [lc] scheduler registered.
[ 18.614777][ T1] IPVS: [wlc] scheduler registered.
[ 18.620017][ T1] IPVS: [fo] scheduler registered.
[ 18.625277][ T1] IPVS: [ovf] scheduler registered.
[ 18.630689][ T1] IPVS: [lblc] scheduler registered.
[ 18.636331][ T1] IPVS: [lblcr] scheduler registered.
[ 18.641812][ T1] IPVS: [dh] scheduler registered.
[ 18.647190][ T1] IPVS: [sh] scheduler registered.
[ 18.652637][ T1] IPVS: [mh] scheduler registered.
[ 18.658236][ T1] IPVS: [sed] scheduler registered.
[ 18.664049][ T1] IPVS: [nq] scheduler registered.
[ 18.669318][ T1] IPVS: [twos] scheduler registered.
[ 18.675037][ T1] IPVS: [sip] pe registered.
[ 18.680980][ T1] ipip: IPv4 and MPLS over IPv4 tunneling driver
[ 18.689996][ T1] gre: GRE over IPv4 demultiplexor driver
[ 18.696337][ T1] ip_gre: GRE over IPv4 tunneling driver
[ 18.710475][ T1] IPv4 over IPsec tunneling driver
[ 18.720802][ T1] ipt_CLUSTERIP: ClusterIP Version 0.8 loaded successfully
[ 18.728999][ T1] Initializing XFRM netlink socket
[ 18.734822][ T1] IPsec XFRM device driver
[ 18.740595][ T1] NET: Registered PF_INET6 protocol family
[ 18.758822][ T1] Segment Routing with IPv6
[ 18.763553][ T1] RPL Segment Routing with IPv6
[ 18.770124][ T1] mip6: Mobile IPv6
[ 18.778058][ T1] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
[ 18.793672][ T1] ip6_gre: GRE over IPv6 tunneling driver
[ 18.802542][ T1] NET: Registered PF_PACKET protocol family
[ 18.809408][ T1] NET: Registered PF_KEY protocol family
[ 18.816724][ T1] Bridge firewalling registered
[ 18.822869][ T1] NET: Registered PF_X25 protocol family
[ 18.829304][ T1] X25: Linux Version 0.2
[ 18.874965][ T1] NET: Registered PF_NETROM protocol family
[ 18.921451][ T1] NET: Registered PF_ROSE protocol family
[ 18.928618][ T1] NET: Registered PF_AX25 protocol family
[ 18.934554][ T1] can: controller area network core
[ 18.940351][ T1] NET: Registered PF_CAN protocol family
[ 18.946341][ T1] can: raw protocol
[ 18.950490][ T1] can: broadcast manager protocol
[ 18.955633][ T1] can: netlink gateway - max_hops=1
[ 18.961199][ T1] can: SAE J1939
[ 18.965050][ T1] can: isotp protocol
[ 18.969548][ T1] Bluetooth: RFCOMM TTY layer initialized
[ 18.975852][ T1] Bluetooth: RFCOMM socket layer initialized
[ 18.982412][ T1] Bluetooth: RFCOMM ver 1.11
[ 18.987426][ T1] Bluetooth: BNEP (Ethernet Emulation) ver 1.3
[ 18.993960][ T1] Bluetooth: BNEP filters: protocol multicast
[ 19.000460][ T1] Bluetooth: BNEP socket layer initialized
[ 19.006737][ T1] Bluetooth: CMTP (CAPI Emulation) ver 1.0
[ 19.012828][ T1] Bluetooth: CMTP socket layer initialized
[ 19.018845][ T1] Bluetooth: HIDP (Human Interface Emulation) ver 1.2
[ 19.026015][ T1] Bluetooth: HIDP socket layer initialized
[ 19.035177][ T1] NET: Registered PF_RXRPC protocol family
[ 19.041261][ T1] Key type rxrpc registered
[ 19.046132][ T1] Key type rxrpc_s registered
[ 19.051644][ T1] NET: Registered PF_KCM protocol family
[ 19.058468][ T1] lec:lane_module_init: lec.c: initialized
[ 19.064536][ T1] mpoa:atm_mpoa_init: mpc.c: initialized
[ 19.070391][ T1] l2tp_core: L2TP core driver, V2.0
[ 19.075847][ T1] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[ 19.081457][ T1] l2tp_ip: L2TP IP encapsulation support (L2TPv3)
[ 19.088013][ T1] l2tp_netlink: L2TP netlink interface
[ 19.093661][ T1] l2tp_eth: L2TP ethernet pseudowire support (L2TPv3)
[ 19.100484][ T1] l2tp_ip6: L2TP IP encapsulation support for IPv6 (L2TPv3)
[ 19.108706][ T1] NET: Registered PF_PHONET protocol family
[ 19.115007][ T1] 8021q: 802.1Q VLAN Support v1.8
[ 19.130810][ T1] DCCP: Activated CCID 2 (TCP-like)
[ 19.136800][ T1] DCCP: Activated CCID 3 (TCP-Friendly Rate Control)
[ 19.145099][ T1] sctp: Hash tables configured (bind 32/56)
[ 19.152868][ T1] NET: Registered PF_RDS protocol family
[ 19.159772][ T1] Registered RDS/infiniband transport
[ 19.166251][ T1] Registered RDS/tcp transport
[ 19.171022][ T1] tipc: Activated (version 2.0.0)
[ 19.176730][ T1] NET: Registered PF_TIPC protocol family
[ 19.183191][ T1] tipc: Started in single node mode
[ 19.189235][ T1] NET: Registered PF_SMC protocol family
[ 19.195304][ T1] 9pnet: Installing 9P2000 support
[ 19.201213][ T1] NET: Registered PF_CAIF protocol family
[ 19.211584][ T1] NET: Registered PF_IEEE802154 protocol family
[ 19.218305][ T1] Key type dns_resolver registered
[ 19.223568][ T1] Key type ceph registered
[ 19.228695][ T1] libceph: loaded (mon/osd proto 15/24)
[ 19.235570][ T1] batman_adv: B.A.T.M.A.N. advanced 2021.2 (compatibility version 15) loaded
[ 19.245013][ T1] openvswitch: Open vSwitch switching datapath
[ 19.253698][ T1] NET: Registered PF_VSOCK protocol family
[ 19.260356][ T1] mpls_gso: MPLS GSO support
[ 19.276772][ T1] IPI shorthand broadcast: enabled
[ 19.282055][ T1] AVX2 version of gcm_enc/dec engaged.
[ 19.287952][ T1] AES CTR mode by8 optimization enabled
[ 19.300868][ T1] sched_clock: Marking stable (19232208639, 68485599)->(19310515106, -9820868)
[ 19.312117][ T1] registered taskstats version 1
[ 19.325887][ T1] Loading compiled-in X.509 certificates
[ 19.334090][ T1] Loaded X.509 cert 'Build time autogenerated kernel key: f850c787ad998c396ae089c083b940ff0a9abb77'
[ 19.346534][ T1] zswap: loaded using pool lzo/zbud
[ 19.353304][ T1] debug_vm_pgtable: [debug_vm_pgtable ]: Validating architecture page table helpers
[ 19.364713][ T1] Key type ._fscrypt registered
[ 19.370292][ T1] Key type .fscrypt registered
[ 19.375840][ T1] Key type fscrypt-provisioning registered
[ 19.384741][ T1] kAFS: Red Hat AFS client v0.1 registering.
[ 19.392265][ T1] FS-Cache: Netfs 'afs' registered for caching
[ 19.407190][ T1] Btrfs loaded, crc32c=crc32c-intel, assert=on, zoned=yes
[ 19.415976][ T1] Key type big_key registered
[ 19.424034][ T1] Key type encrypted registered
[ 19.429778][ T1] ima: No TPM chip found, activating TPM-bypass!
[ 19.436366][ T1] Loading compiled-in module X.509 certificates
[ 19.443393][ T1] Loaded X.509 cert 'Build time autogenerated kernel key: f850c787ad998c396ae089c083b940ff0a9abb77'
[ 19.454975][ T1] ima: Allocated hash algorithm: sha256
[ 19.461470][ T1] ima: No architecture policies found
[ 19.468016][ T1] evm: Initialising EVM extended attributes:
[ 19.474232][ T1] evm: security.selinux
[ 19.478810][ T1] evm: security.SMACK64 (disabled)
[ 19.483948][ T1] evm: security.SMACK64EXEC (disabled)
[ 19.489966][ T1] evm: security.SMACK64TRANSMUTE (disabled)
[ 19.496195][ T1] evm: security.SMACK64MMAP (disabled)
[ 19.502056][ T1] evm: security.apparmor (disabled)
[ 19.507289][ T1] evm: security.ima
[ 19.511133][ T1] evm: security.capability
[ 19.515736][ T1] evm: HMAC attrs: 0x1
[ 19.522592][ T1] PM: Magic number: 13:713:225
[ 19.528110][ T1] net nr14: hash matches
[ 19.533223][ T1] tty ttyu9: hash matches
[ 19.538019][ T1] tty ttyrc: hash matches
[ 19.544799][ T1] printk: console [netcon0] enabled
[ 19.550144][ T1] netconsole: network logging started
[ 19.556268][ T1] gtp: GTP module loaded (pdp ctx size 104 bytes)
[ 19.565425][ T1] rdma_rxe: loaded
[ 19.569978][ T1] cfg80211: Loading compiled-in X.509 certificates for regulatory database
[ 19.581865][ T1] cfg80211: Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
[ 19.591684][ T7] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 19.596809][ T1] ALSA device list:
[ 19.602854][ T7] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 19.606574][ T1] #0: Dummy 1
[ 19.606592][ T1] #1: Loopback 1
[ 19.606603][ T1] #2: Virtual MIDI Card 1
[ 19.633541][ T1] md: Waiting for all devices to be available before autodetect
[ 19.641917][ T1] md: If you don't use raid, use raid=noautodetect
[ 19.648883][ T1] md: Autodetecting RAID arrays.
[ 19.654445][ T1] md: autorun ...
[ 19.658311][ T1] md: ... autorun DONE.
[ 19.666050][ T1] VFS: Cannot open root device "sda1" or unknown-block(0,0): error -6
[ 19.675172][ T1] Please append a correct "root=" boot option; here are the available partitions:
[ 19.684815][ T1] 0100 4096 ram0
[ 19.684832][ T1] (driver?)
[ 19.693169][ T1] 0101 4096 ram1
[ 19.693180][ T1] (driver?)
[ 19.701908][ T1] 0102 4096 ram2
[ 19.701921][ T1] (driver?)
[ 19.710581][ T1] 0103 4096 ram3
[ 19.710595][ T1] (driver?)
[ 19.719383][ T1] 0104 4096 ram4
[ 19.719396][ T1] (driver?)
[ 19.728284][ T1] 0105 4096 ram5
[ 19.728298][ T1] (driver?)
[ 19.736571][ T1] 0106 4096 ram6
[ 19.736585][ T1] (driver?)
[ 19.744956][ T1] 0107 4096 ram7
[ 19.744970][ T1] (driver?)
[ 19.753608][ T1] 0108 4096 ram8
[ 19.753623][ T1] (driver?)
[ 19.761793][ T1] 0109 4096 ram9
[ 19.761806][ T1] (driver?)
[ 19.770214][ T1] 010a 4096 ram10
[ 19.770227][ T1] (driver?)
[ 19.778584][ T1] 010b 4096 ram11
[ 19.778598][ T1] (driver?)
[ 19.787834][ T1] 010c 4096 ram12
[ 19.787847][ T1] (driver?)
[ 19.796214][ T1] 010d 4096 ram13
[ 19.796227][ T1] (driver?)
[ 19.804526][ T1] 010e 4096 ram14
[ 19.804541][ T1] (driver?)
[ 19.812817][ T1] 010f 4096 ram15
[ 19.812829][ T1] (driver?)
[ 19.821043][ T1] 1f00 128 mtdblock0
[ 19.821056][ T1] (driver?)
[ 19.829544][ T1] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[ 19.838963][ T1] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.13.0-syzkaller #0
[ 19.847280][ T1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 19.857605][ T1] Call Trace:
[ 19.860978][ T1] dump_stack_lvl+0xcd/0x134
[ 19.865589][ T1] panic+0x306/0x73d
[ 19.869598][ T1] ? __warn_printk+0xf3/0xf3
[ 19.874374][ T1] mount_block_root+0x3f8/0x4dd
[ 19.879404][ T1] ? init_rootfs+0x59/0x59
[ 19.884069][ T1] ? memcpy+0x39/0x60
[ 19.888144][ T1] mount_root+0x1af/0x1f5
[ 19.892737][ T1] ? mount_block_root+0x4dd/0x4dd
[ 19.897757][ T1] ? memcpy+0x39/0x60
[ 19.902188][ T1] prepare_namespace+0x1ff/0x234
[ 19.907401][ T1] kernel_init_freeable+0x724/0x73c
[ 19.913297][ T1] ? rest_init+0x3e0/0x3e0
[ 19.917813][ T1] kernel_init+0x1a/0x1d0
[ 19.922136][ T1] ? rest_init+0x3e0/0x3e0
[ 19.926799][ T1] ret_from_fork+0x1f/0x30
[ 19.933477][ T1] Kernel Offset: disabled
[ 19.937912][ T1] Rebooting in 86400 seconds..

Error text is too large and was truncated, full error text is at:

https://syzkaller.appspot.com/x/error.txt?x=1107c1e4300000


Tested on:

commit: a180bd1d iov_iter: remove uaccess_kernel() warning from io..
git tree: upstream
kernel config: https://syzkaller.appspot.com/x/.config?x=3c9908e3fa339c44

dashboard link: https://syzkaller.appspot.com/bug?extid=e6d5398a02c516ce5e70
compiler:

patch: https://syzkaller.appspot.com/x/patch.diff?x=149f1bb4300000

[Desmond Cheong Zhi Xi]

[syzbot]

Hello,

syzbot tried to test the proposed patch but the build/boot failed:

HCI UART protocol AG6XX registered

[ 12.866637][ T1] Bluetooth: HCI UART protocol Marvell registered
[ 12.874309][ T1] usbcore: registered new interface driver bcm203x
[ 12.881218][ T1] usbcore: registered new interface driver bpa10x
[ 12.888278][ T1] usbcore: registered new interface driver bfusb
[ 12.895277][ T1] usbcore: registered new interface driver btusb
[ 12.902246][ T1] usbcore: registered new interface driver ath3k
[ 12.909739][ T1] CAPI 2.0 started up with major 68 (middleware)
[ 12.916459][ T1] Modular ISDN core version 1.1.29
[ 12.922675][ T1] NET: Registered PF_ISDN protocol family
[ 12.928762][ T1] DSP module 2.0
[ 12.932360][ T1] mISDN_dsp: DSP clocks every 80 samples. This equals 1 jiffies.
[ 12.952498][ T1] mISDN: Layer-1-over-IP driver Rev. 2.00
[ 12.959116][ T1] 0 virtual devices registered
[ 12.964378][ T1] usbcore: registered new interface driver HFC-S_USB
[ 12.971155][ T1] intel_pstate: CPU model not supported
[ 12.977031][ T1] VUB300 Driver rom wait states = 1C irqpoll timeout = 0400
[ 12.978488][ T1] usbcore: registered new interface driver vub300
[ 12.993225][ T1] usbcore: registered new interface driver ushc
[ 13.005810][ T1] iscsi: registered transport (iser)
[ 13.013820][ T1] SoftiWARP attached
[ 13.018085][ T1] Driver 'framebuffer' was unable to register with bus_type 'coreboot' because the bus was not initialized.
[ 13.029782][ T1] Driver 'memconsole' was unable to register with bus_type 'coreboot' because the bus was not initialized.
[ 13.041580][ T1] Driver 'vpd' was unable to register with bus_type 'coreboot' because the bus was not initialized.
[ 13.062876][ T1] hid: raw HID events driver (C) Jiri Kosina
[ 13.096388][ T1] usbcore: registered new interface driver usbhid
[ 13.104532][ T1] usbhid: USB HID core driver
[ 13.112669][ T1] usbcore: registered new interface driver es2_ap_driver
[ 13.119933][ T1] comedi: version 0.7.76 - http://www.comedi.org
[ 13.147496][ T1] usbcore: registered new interface driver dt9812
[ 13.155992][ T1] usbcore: registered new interface driver ni6501
[ 13.163732][ T1] usbcore: registered new interface driver usbdux
[ 13.170927][ T1] usbcore: registered new interface driver usbduxfast
[ 13.179109][ T1] usbcore: registered new interface driver usbduxsigma
[ 13.187063][ T1] usbcore: registered new interface driver vmk80xx
[ 13.194318][ T1] usbcore: registered new interface driver prism2_usb
[ 13.202489][ T1] usbcore: registered new interface driver r8712u
[ 13.210171][ T1] ashmem: initialized
[ 13.214708][ T1] greybus: registered new driver hid
[ 13.220506][ T1] greybus: registered new driver gbphy
[ 13.226270][ T1] gb_gbphy: registered new driver usb
[ 13.231806][ T1] asus_wmi: ASUS WMI generic driver loaded
[ 13.343803][ T1] usbcore: registered new interface driver snd-usb-audio
[ 13.351980][ T1] usbcore: registered new interface driver snd-ua101
[ 13.359487][ T1] usbcore: registered new interface driver snd-usb-usx2y
[ 13.368001][ T1] usbcore: registered new interface driver snd-usb-us122l
[ 13.376387][ T1] usbcore: registered new interface driver snd-usb-caiaq
[ 13.384187][ T1] usbcore: registered new interface driver snd-usb-6fire
[ 13.392248][ T1] usbcore: registered new interface driver snd-usb-hiface
[ 13.399906][ T1] usbcore: registered new interface driver snd-bcd2000
[ 13.407202][ T1] usbcore: registered new interface driver snd_usb_pod
[ 13.414477][ T1] usbcore: registered new interface driver snd_usb_podhd
[ 13.422008][ T1] usbcore: registered new interface driver snd_usb_toneport
[ 13.429848][ T1] usbcore: registered new interface driver snd_usb_variax
[ 13.437331][ T1] drop_monitor: Initializing network drop monitor service
[ 13.445116][ T1] NET: Registered PF_LLC protocol family
[ 13.450907][ T1] GACT probability on
[ 13.455007][ T1] Mirror/redirect action on
[ 13.459757][ T1] Simple TC action Loaded
[ 13.466790][ T1] netem: version 1.3
[ 13.471141][ T1] u32 classifier
[ 13.475011][ T1] Performance counters on
[ 13.479679][ T1] input device check on
[ 13.484384][ T1] Actions configured
[ 13.487646][ T1] nf_conntrack_irc: failed to register helpers
[ 13.495396][ T1] nf_conntrack_sane: failed to register helpers
[ 13.545897][ T1] nf_conntrack_sip: failed to register helpers
[ 13.556773][ T1] xt_time: kernel timezone is -0000
[ 13.562699][ T1] IPVS: Registered protocols (TCP, UDP, SCTP, AH, ESP)
[ 13.570038][ T1] IPVS: Connection hash table configured (size=4096, memory=64Kbytes)
[ 13.579204][ T1] IPVS: ipvs loaded.
[ 13.583233][ T1] IPVS: [rr] scheduler registered.
[ 13.588444][ T1] IPVS: [wrr] scheduler registered.
[ 13.594148][ T1] IPVS: [lc] scheduler registered.
[ 13.599268][ T1] IPVS: [wlc] scheduler registered.
[ 13.604607][ T1] IPVS: [fo] scheduler registered.
[ 13.609717][ T1] IPVS: [ovf] scheduler registered.
[ 13.615096][ T1] IPVS: [lblc] scheduler registered.
[ 13.620590][ T1] IPVS: [lblcr] scheduler registered.
[ 13.626185][ T1] IPVS: [dh] scheduler registered.
[ 13.631321][ T1] IPVS: [sh] scheduler registered.
[ 13.636462][ T1] IPVS: [mh] scheduler registered.
[ 13.641587][ T1] IPVS: [sed] scheduler registered.
[ 13.646845][ T1] IPVS: [nq] scheduler registered.
[ 13.651999][ T1] IPVS: [twos] scheduler registered.
[ 13.659034][ T1] IPVS: [sip] pe registered.
[ 13.663909][ T1] ipip: IPv4 and MPLS over IPv4 tunneling driver
[ 13.673158][ T1] gre: GRE over IPv4 demultiplexor driver
[ 13.678903][ T1] ip_gre: GRE over IPv4 tunneling driver
[ 13.692763][ T1] IPv4 over IPsec tunneling driver
[ 13.702777][ T1] ipt_CLUSTERIP: ClusterIP Version 0.8 loaded successfully
[ 13.710308][ T1] Initializing XFRM netlink socket
[ 13.716087][ T1] IPsec XFRM device driver
[ 13.721315][ T1] NET: Registered PF_INET6 protocol family
[ 13.739389][ T1] Segment Routing with IPv6
[ 13.744394][ T1] RPL Segment Routing with IPv6
[ 13.749607][ T1] mip6: Mobile IPv6
[ 13.758630][ T1] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
[ 13.773175][ T1] ip6_gre: GRE over IPv6 tunneling driver
[ 13.781355][ T1] NET: Registered PF_PACKET protocol family
[ 13.787403][ T1] NET: Registered PF_KEY protocol family
[ 13.794118][ T1] Bridge firewalling registered
[ 13.800122][ T1] NET: Registered PF_X25 protocol family
[ 13.806671][ T1] X25: Linux Version 0.2
[ 13.855190][ T1] NET: Registered PF_NETROM protocol family
[ 13.906739][ T1] NET: Registered PF_ROSE protocol family
[ 13.913340][ T1] NET: Registered PF_AX25 protocol family
[ 13.919417][ T1] can: controller area network core
[ 13.925280][ T1] NET: Registered PF_CAN protocol family
[ 13.930925][ T1] can: raw protocol
[ 13.934942][ T1] can: broadcast manager protocol
[ 13.940462][ T1] can: netlink gateway - max_hops=1
[ 13.945846][ T1] can: SAE J1939
[ 13.949404][ T1] can: isotp protocol
[ 13.953849][ T1] Bluetooth: RFCOMM TTY layer initialized
[ 13.959611][ T1] Bluetooth: RFCOMM socket layer initialized
[ 13.966180][ T1] Bluetooth: RFCOMM ver 1.11
[ 13.970818][ T1] Bluetooth: BNEP (Ethernet Emulation) ver 1.3
[ 13.977006][ T1] Bluetooth: BNEP filters: protocol multicast
[ 13.983127][ T1] Bluetooth: BNEP socket layer initialized
[ 13.989131][ T1] Bluetooth: CMTP (CAPI Emulation) ver 1.0
[ 13.995890][ T1] Bluetooth: CMTP socket layer initialized
[ 14.001900][ T1] Bluetooth: HIDP (Human Interface Emulation) ver 1.2
[ 14.009065][ T1] Bluetooth: HIDP socket layer initialized
[ 14.018831][ T1] NET: Registered PF_RXRPC protocol family
[ 14.025025][ T1] Key type rxrpc registered
[ 14.029662][ T1] Key type rxrpc_s registered
[ 14.035068][ T1] NET: Registered PF_KCM protocol family
[ 14.042033][ T1] lec:lane_module_init: lec.c: initialized
[ 14.047976][ T1] mpoa:atm_mpoa_init: mpc.c: initialized
[ 14.054351][ T1] l2tp_core: L2TP core driver, V2.0
[ 14.059731][ T1] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[ 14.065506][ T1] l2tp_ip: L2TP IP encapsulation support (L2TPv3)
[ 14.072309][ T1] l2tp_netlink: L2TP netlink interface
[ 14.078342][ T1] l2tp_eth: L2TP ethernet pseudowire support (L2TPv3)
[ 14.085283][ T1] l2tp_ip6: L2TP IP encapsulation support for IPv6 (L2TPv3)
[ 14.092881][ T1] NET: Registered PF_PHONET protocol family
[ 14.099352][ T1] 8021q: 802.1Q VLAN Support v1.8
[ 14.114924][ T1] DCCP: Activated CCID 2 (TCP-like)
[ 14.120745][ T1] DCCP: Activated CCID 3 (TCP-Friendly Rate Control)
[ 14.128994][ T1] sctp: Hash tables configured (bind 32/56)
[ 14.136504][ T1] NET: Registered PF_RDS protocol family
[ 14.142937][ T1] Registered RDS/infiniband transport
[ 14.150322][ T1] Registered RDS/tcp transport
[ 14.155324][ T1] tipc: Activated (version 2.0.0)
[ 14.161173][ T1] NET: Registered PF_TIPC protocol family
[ 14.168059][ T1] tipc: Started in single node mode
[ 14.174239][ T1] NET: Registered PF_SMC protocol family
[ 14.180354][ T1] 9pnet: Installing 9P2000 support
[ 14.186157][ T1] NET: Registered PF_CAIF protocol family
[ 14.196730][ T1] NET: Registered PF_IEEE802154 protocol family
[ 14.203628][ T1] Key type dns_resolver registered
[ 14.209270][ T1] Key type ceph registered
[ 14.214532][ T1] libceph: loaded (mon/osd proto 15/24)
[ 14.221390][ T1] batman_adv: B.A.T.M.A.N. advanced 2021.2 (compatibility version 15) loaded
[ 14.231091][ T1] openvswitch: Open vSwitch switching datapath
[ 14.240061][ T1] NET: Registered PF_VSOCK protocol family
[ 14.246333][ T1] mpls_gso: MPLS GSO support
[ 14.262481][ T1] IPI shorthand broadcast: enabled
[ 14.268098][ T1] AVX2 version of gcm_enc/dec engaged.
[ 14.274234][ T1] AES CTR mode by8 optimization enabled
[ 14.286567][ T1] sched_clock: Marking stable (14263273272, 23154346)->(14301370626, -14943008)
[ 14.297740][ T1] registered taskstats version 1
[ 14.311573][ T1] Loading compiled-in X.509 certificates
[ 14.319800][ T1] Loaded X.509 cert 'Build time autogenerated kernel key: f850c787ad998c396ae089c083b940ff0a9abb77'
[ 14.333372][ T1] zswap: loaded using pool lzo/zbud
[ 14.340103][ T1] debug_vm_pgtable: [debug_vm_pgtable ]: Validating architecture page table helpers
[ 14.351076][ T1] Key type ._fscrypt registered
[ 14.356248][ T1] Key type .fscrypt registered
[ 14.361309][ T1] Key type fscrypt-provisioning registered
[ 14.370598][ T1] kAFS: Red Hat AFS client v0.1 registering.
[ 14.378437][ T1] FS-Cache: Netfs 'afs' registered for caching
[ 14.391079][ T1] Btrfs loaded, crc32c=crc32c-intel, assert=on, zoned=yes
[ 14.399095][ T1] Key type big_key registered
[ 14.407231][ T1] Key type encrypted registered
[ 14.412356][ T1] ima: No TPM chip found, activating TPM-bypass!
[ 14.418841][ T1] Loading compiled-in module X.509 certificates
[ 14.425887][ T1] Loaded X.509 cert 'Build time autogenerated kernel key: f850c787ad998c396ae089c083b940ff0a9abb77'
[ 14.436951][ T1] ima: Allocated hash algorithm: sha256
[ 14.442969][ T1] ima: No architecture policies found
[ 14.448943][ T1] evm: Initialising EVM extended attributes:
[ 14.454956][ T1] evm: security.selinux
[ 14.459098][ T1] evm: security.SMACK64 (disabled)
[ 14.464317][ T1] evm: security.SMACK64EXEC (disabled)
[ 14.470399][ T1] evm: security.SMACK64TRANSMUTE (disabled)
[ 14.476433][ T1] evm: security.SMACK64MMAP (disabled)
[ 14.481960][ T1] evm: security.apparmor (disabled)
[ 14.487378][ T1] evm: security.ima
[ 14.492186][ T1] evm: security.capability
[ 14.496677][ T1] evm: HMAC attrs: 0x1
[ 14.503002][ T1] PM: Magic number: 13:618:935
[ 14.508194][ T1] net ip_vti0: hash matches
[ 14.515525][ T1] printk: console [netcon0] enabled
[ 14.520772][ T1] netconsole: network logging started
[ 14.526611][ T1] gtp: GTP module loaded (pdp ctx size 104 bytes)
[ 14.535195][ T1] rdma_rxe: loaded
[ 14.539439][ T1] cfg80211: Loading compiled-in X.509 certificates for regulatory database
[ 14.550863][ T1] cfg80211: Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
[ 14.560840][ T3148] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 14.563795][ T1] ALSA device list:
[ 14.571275][ T3148] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 14.574712][ T1] #0: Dummy 1
[ 14.586974][ T1] #1: Loopback 1
[ 14.590847][ T1] #2: Virtual MIDI Card 1
[ 14.598938][ T1] md: Waiting for all devices to be available before autodetect
[ 14.606741][ T1] md: If you don't use raid, use raid=noautodetect
[ 14.613286][ T1] md: Autodetecting RAID arrays.
[ 14.618383][ T1] md: autorun ...
[ 14.622024][ T1] md: ... autorun DONE.
[ 14.629680][ T1] VFS: Cannot open root device "sda1" or unknown-block(0,0): error -6
[ 14.639549][ T1] Please append a correct "root=" boot option; here are the available partitions:
[ 14.648911][ T1] 0100 4096 ram0
[ 14.648934][ T1] (driver?)
[ 14.657189][ T1] 0101 4096 ram1
[ 14.657202][ T1] (driver?)
[ 14.665264][ T1] 0102 4096 ram2
[ 14.665278][ T1] (driver?)
[ 14.673453][ T1] 0103 4096 ram3
[ 14.673464][ T1] (driver?)
[ 14.681213][ T1] 0104 4096 ram4
[ 14.681224][ T1] (driver?)
[ 14.689272][ T1] 0105 4096 ram5
[ 14.689283][ T1] (driver?)
[ 14.697276][ T1] 0106 4096 ram6
[ 14.697290][ T1] (driver?)
[ 14.705195][ T1] 0107 4096 ram7
[ 14.705207][ T1] (driver?)
[ 14.713101][ T1] 0108 4096 ram8
[ 14.713112][ T1] (driver?)
[ 14.720947][ T1] 0109 4096 ram9
[ 14.720958][ T1] (driver?)
[ 14.729010][ T1] 010a 4096 ram10
[ 14.729027][ T1] (driver?)
[ 14.737709][ T1] 010b 4096 ram11
[ 14.737721][ T1] (driver?)
[ 14.745799][ T1] 010c 4096 ram12
[ 14.745812][ T1] (driver?)
[ 14.753741][ T1] 010d 4096 ram13
[ 14.753754][ T1] (driver?)
[ 14.761906][ T1] 010e 4096 ram14
[ 14.761917][ T1] (driver?)
[ 14.770012][ T1] 010f 4096 ram15
[ 14.770026][ T1] (driver?)
[ 14.779332][ T1] 1f00 128 mtdblock0
[ 14.779346][ T1] (driver?)
[ 14.788099][ T1] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[ 14.797453][ T1] CPU: 1 PID: 1 Comm: swapper/0 Not tainted 5.13.0-syzkaller #0
[ 14.805159][ T1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 14.815283][ T1] Call Trace:
[ 14.818546][ T1] dump_stack_lvl+0xcd/0x134
[ 14.823168][ T1] panic+0x306/0x73d
[ 14.827046][ T1] ? __warn_printk+0xf3/0xf3
[ 14.831618][ T1] mount_block_root+0x3f8/0x4dd
[ 14.836539][ T1] ? init_rootfs+0x59/0x59
[ 14.840949][ T1] ? memcpy+0x39/0x60
[ 14.845059][ T1] mount_root+0x1af/0x1f5
[ 14.849513][ T1] ? mount_block_root+0x4dd/0x4dd
[ 14.854536][ T1] ? memcpy+0x39/0x60
[ 14.860771][ T1] prepare_namespace+0x1ff/0x234
[ 14.865854][ T1] kernel_init_freeable+0x724/0x73c
[ 14.871216][ T1] ? rest_init+0x3e0/0x3e0
[ 14.875636][ T1] kernel_init+0x1a/0x1d0
[ 14.880050][ T1] ? rest_init+0x3e0/0x3e0
[ 14.884799][ T1] ret_from_fork+0x1f/0x30
[ 14.891240][ T1] Kernel Offset: disabled
[ 14.896055][ T1] Rebooting in 86400 seconds..

Error text is too large and was truncated, full error text is at:

https://syzkaller.appspot.com/x/error.txt?x=16452e78300000


Tested on:

commit: 79160a60 Merge tag 'usb-5.14-rc1' of git://git.kernel.org/..
git tree: upstream
kernel config: https://syzkaller.appspot.com/x/.config?x=7462a38ddd748012

dashboard link: https://syzkaller.appspot.com/bug?extid=e6d5398a02c516ce5e70
compiler:

patch: https://syzkaller.appspot.com/x/patch.diff?x=1577dbac300000

[Desmond Cheong Zhi Xi]

#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master

Trying again, but with the SCSI fix tacked on to the end.

Best,
Desmond

[syzbot]

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-and-tested-by: syzbot+e6d539...@syzkaller.appspotmail.com

Tested on:

commit: 77d34a46 Merge tag 'for-linus' of git://git.armlinux.org.u..

git tree: upstream
kernel config: https://syzkaller.appspot.com/x/.config?x=7462a38ddd748012
dashboard link: https://syzkaller.appspot.com/bug?extid=e6d5398a02c516ce5e70
compiler:

patch: https://syzkaller.appspot.com/x/patch.diff?x=125eaee4300000