Re: [syzbot] WARNING in pvr2_i2c_core_done

[syzbot]

Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:
WARNING in pvr2_i2c_core_done

pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem.
------------[ cut here ]------------
sysfs group 'power' not found for kobject '0-0044'
WARNING: CPU: 1 PID: 4020 at fs/sysfs/group.c:279 sysfs_remove_group+0x126/0x170 fs/sysfs/group.c:279
Modules linked in:
CPU: 1 PID: 4020 Comm: pvrusb2-context Not tainted 5.12.0-rc3-next-20210319-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:sysfs_remove_group+0x126/0x170 fs/sysfs/group.c:279
Code: 48 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 37 48 8b 33 48 c7 c7 60 98 9c 89 e8 27 c5 e7 06 <0f> 0b eb 98 e8 01 12 c9 ff e9 01 ff ff ff 48 89 df e8 f4 11 c9 ff
RSP: 0018:ffffc9000477fb80 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffffffff89f88e00 RCX: 0000000000000000
RDX: ffff88801eb71b00 RSI: ffffffff815bc7a5 RDI: fffff520008eff62
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff815bb2cb R11: 0000000000000000 R12: ffff888012b5c020
R13: ffffffff89f893a0 R14: 1ffff920008eff98 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000557fc23795a8 CR3: 000000001ddc9000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
dpm_sysfs_remove+0x97/0xb0 drivers/base/power/sysfs.c:837
device_del+0x20c/0xd40 drivers/base/core.c:3398
device_unregister+0x22/0xc0 drivers/base/core.c:3454
i2c_unregister_device include/linux/err.h:41 [inline]
__unregister_client drivers/i2c/i2c-core-base.c:1607 [inline]
__unregister_client+0x95/0xa0 drivers/i2c/i2c-core-base.c:1603
device_for_each_child+0xf9/0x170 drivers/base/core.c:3554
i2c_del_adapter+0x37b/0x680 drivers/i2c/i2c-core-base.c:1670
pvr2_i2c_core_done+0x69/0xc0 drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:652
pvr2_hdw_destroy+0x179/0x3b0 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2679
pvr2_context_destroy+0x84/0x230 drivers/media/usb/pvrusb2/pvrusb2-context.c:70
pvr2_context_check drivers/media/usb/pvrusb2/pvrusb2-context.c:137 [inline]
pvr2_context_thread_func+0x64b/0x850 drivers/media/usb/pvrusb2/pvrusb2-context.c:158
kthread+0x3b1/0x4a0 kernel/kthread.c:292
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294


Tested on:

commit: f00397ee Add linux-next specific files for 20210319
git tree: linux-next
console output: https://syzkaller.appspot.com/x/log.txt?x=10328621d00000
kernel config: https://syzkaller.appspot.com/x/.config?x=768cff001b00f432
dashboard link: https://syzkaller.appspot.com/bug?extid=e74a998ca8f1df9cc332
compiler:

[syzbot]

Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:

possible deadlock in cx25840_ir_rx_shutdown

======================================================
WARNING: possible circular locking dependency detected
5.12.0-rc4-next-20210329-syzkaller #0 Not tainted
------------------------------------------------------
kworker/0:6/10077 is trying to acquire lock:
ffff888023b998c8 (&ir_state->rx_params_lock){+.+.}-{3:3}, at: cx25840_ir_rx_shutdown+0x88/0x1f0 drivers/media/i2c/cx25840/cx25840-ir.c:730

but task is already holding lock:
ffff8880342d9670 (&hdw->ctl_lock_mutex){+.+.}-{3:3}, at: pvr2_hdw_disconnect+0xc2/0x610 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2706

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #2 (&hdw->ctl_lock_mutex){+.+.}-{3:3}:
__mutex_lock_common kernel/locking/mutex.c:949 [inline]
__mutex_lock+0x139/0x1120 kernel/locking/mutex.c:1096
pvr2_i2c_read drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:116 [inline]
pvr2_i2c_basic_op+0x34e/0x900 drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:172
i2c_hack_cx25840+0x2a1/0x510 drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:332
pvr2_i2c_xfer+0x375/0xb90 drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:445
__i2c_transfer+0x52b/0x17d0 drivers/i2c/i2c-core-base.c:2052
i2c_transfer+0x1e6/0x3e0 drivers/i2c/i2c-core-base.c:2113
cx25840_read+0x125/0x1b0 drivers/media/i2c/cx25840/cx25840-core.c:118
cx25840_probe+0x11b/0x560 drivers/media/i2c/cx25840/cx25840-core.c:5848
i2c_device_probe+0x916/0xae0 drivers/i2c/i2c-core-base.c:529
really_probe+0x291/0xf60 drivers/base/dd.c:561
driver_probe_device+0x298/0x410 drivers/base/dd.c:748
__device_attach_driver+0x203/0x2c0 drivers/base/dd.c:855
bus_for_each_drv+0x15f/0x1e0 drivers/base/bus.c:431
__device_attach+0x228/0x4b0 drivers/base/dd.c:923
bus_probe_device+0x1e4/0x290 drivers/base/bus.c:491
device_add+0xbdb/0x1db0 drivers/base/core.c:3277
i2c_new_client_device+0x617/0xb00 drivers/i2c/i2c-core-base.c:923
v4l2_i2c_new_subdev_board+0xaf/0x2c0 drivers/media/v4l2-core/v4l2-i2c.c:80
v4l2_i2c_new_subdev+0x102/0x170 drivers/media/v4l2-core/v4l2-i2c.c:135
pvr2_hdw_load_subdev drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2022 [inline]
pvr2_hdw_load_modules drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2074 [inline]
pvr2_hdw_setup_low drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2155 [inline]
pvr2_hdw_setup drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2261 [inline]
pvr2_hdw_initialize+0xc97/0x37d0 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2338
pvr2_context_check drivers/media/usb/pvrusb2/pvrusb2-context.c:109 [inline]
pvr2_context_thread_func+0x250/0x850 drivers/media/usb/pvrusb2/pvrusb2-context.c:158

kthread+0x3b1/0x4a0 kernel/kthread.c:292
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

-> #1 (i2c_register_adapter){+.+.}-{0:0}:
__rt_mutex_lock kernel/locking/rtmutex.c:1451 [inline]
rt_mutex_lock_nested+0x41/0x60 kernel/locking/rtmutex.c:1464
i2c_lock_bus include/linux/i2c.h:765 [inline]
__i2c_lock_bus_helper drivers/i2c/i2c-core.h:44 [inline]
i2c_transfer+0x1d3/0x3e0 drivers/i2c/i2c-core-base.c:2109
cx25840_read4+0x11f/0x1b0 drivers/media/i2c/cx25840/cx25840-core.c:143
cx25840_and_or4+0x76/0xd0 drivers/media/i2c/cx25840/cx25840-core.c:162
irqenable_rx drivers/media/i2c/cx25840/cx25840-ir.c:491 [inline]
cx25840_ir_rx_shutdown+0x105/0x1f0 drivers/media/i2c/cx25840/cx25840-ir.c:733
cx25840_ir_rx_s_parameters+0xe57/0x1120 drivers/media/i2c/cx25840/cx25840-ir.c:758
cx25840_ir_probe+0x55d/0x680 drivers/media/i2c/cx25840/cx25840-ir.c:1236
cx25840_probe.cold+0x10eb/0x14b9 drivers/media/i2c/cx25840/cx25840-core.c:6025
i2c_device_probe+0x916/0xae0 drivers/i2c/i2c-core-base.c:529
really_probe+0x291/0xf60 drivers/base/dd.c:561
driver_probe_device+0x298/0x410 drivers/base/dd.c:748
__device_attach_driver+0x203/0x2c0 drivers/base/dd.c:855
bus_for_each_drv+0x15f/0x1e0 drivers/base/bus.c:431
__device_attach+0x228/0x4b0 drivers/base/dd.c:923
bus_probe_device+0x1e4/0x290 drivers/base/bus.c:491
device_add+0xbdb/0x1db0 drivers/base/core.c:3277
i2c_new_client_device+0x617/0xb00 drivers/i2c/i2c-core-base.c:923
v4l2_i2c_new_subdev_board+0xaf/0x2c0 drivers/media/v4l2-core/v4l2-i2c.c:80
v4l2_i2c_new_subdev+0x102/0x170 drivers/media/v4l2-core/v4l2-i2c.c:135
pvr2_hdw_load_subdev drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2022 [inline]
pvr2_hdw_load_modules drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2074 [inline]
pvr2_hdw_setup_low drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2155 [inline]
pvr2_hdw_setup drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2261 [inline]
pvr2_hdw_initialize+0xc97/0x37d0 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2338
pvr2_context_check drivers/media/usb/pvrusb2/pvrusb2-context.c:109 [inline]
pvr2_context_thread_func+0x250/0x850 drivers/media/usb/pvrusb2/pvrusb2-context.c:158

kthread+0x3b1/0x4a0 kernel/kthread.c:292
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

-> #0 (&ir_state->rx_params_lock){+.+.}-{3:3}:
check_prev_add kernel/locking/lockdep.c:2938 [inline]
check_prevs_add kernel/locking/lockdep.c:3061 [inline]
validate_chain kernel/locking/lockdep.c:3676 [inline]
__lock_acquire+0x2a17/0x5230 kernel/locking/lockdep.c:4902
lock_acquire kernel/locking/lockdep.c:5512 [inline]
lock_acquire+0x1ab/0x740 kernel/locking/lockdep.c:5477
__mutex_lock_common kernel/locking/mutex.c:949 [inline]
__mutex_lock+0x139/0x1120 kernel/locking/mutex.c:1096
cx25840_ir_rx_shutdown+0x88/0x1f0 drivers/media/i2c/cx25840/cx25840-ir.c:730
cx25840_ir_remove+0x52/0xc0 drivers/media/i2c/cx25840/cx25840-ir.c:1253
cx25840_remove+0x36/0x60 drivers/media/i2c/cx25840/cx25840-core.c:6034
i2c_device_remove+0x7b/0x200 drivers/i2c/i2c-core-base.c:562
__device_release_driver+0x3bd/0x6f0 drivers/base/dd.c:1166
device_release_driver_internal drivers/base/dd.c:1197 [inline]
device_release_driver+0x26/0x40 drivers/base/dd.c:1220
bus_remove_device+0x2eb/0x5a0 drivers/base/bus.c:533
device_del+0x502/0xd40 drivers/base/core.c:3456
device_unregister+0x22/0xc0 drivers/base/core.c:3489

i2c_unregister_device include/linux/err.h:41 [inline]
__unregister_client drivers/i2c/i2c-core-base.c:1607 [inline]
__unregister_client+0x95/0xa0 drivers/i2c/i2c-core-base.c:1603

device_for_each_child+0xf9/0x170 drivers/base/core.c:3589

i2c_del_adapter+0x37b/0x680 drivers/i2c/i2c-core-base.c:1670
pvr2_i2c_core_done+0x69/0xc0 drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:652

pvr2_hdw_disconnect+0x105/0x610 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2707
pvr2_context_disconnect+0x2d/0x80 drivers/media/usb/pvrusb2/pvrusb2-context.c:269
pvr_disconnect+0x7c/0xc0 drivers/media/usb/pvrusb2/pvrusb2-main.c:87
usb_unbind_interface+0x1d8/0x8d0 drivers/usb/core/driver.c:458
__device_release_driver+0x3bd/0x6f0 drivers/base/dd.c:1166
device_release_driver_internal drivers/base/dd.c:1197 [inline]
device_release_driver+0x26/0x40 drivers/base/dd.c:1220
bus_remove_device+0x2eb/0x5a0 drivers/base/bus.c:533
device_del+0x502/0xd40 drivers/base/core.c:3456
usb_disable_device+0x35b/0x7b0 drivers/usb/core/message.c:1413
usb_disconnect.cold+0x27d/0x791 drivers/usb/core/hub.c:2219
hub_port_connect drivers/usb/core/hub.c:5127 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5416 [inline]
port_event drivers/usb/core/hub.c:5562 [inline]
hub_event+0x1c9c/0x4320 drivers/usb/core/hub.c:5644
process_one_work+0x98d/0x1600 kernel/workqueue.c:2275
process_scheduled_works kernel/workqueue.c:2337 [inline]
worker_thread+0x82b/0x1120 kernel/workqueue.c:2423

kthread+0x3b1/0x4a0 kernel/kthread.c:292
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

other info that might help us debug this:

Chain exists of:
&ir_state->rx_params_lock --> i2c_register_adapter --> &hdw->ctl_lock_mutex

Possible unsafe locking scenario:

CPU0 CPU1
---- ----
lock(&hdw->ctl_lock_mutex);
lock(i2c_register_adapter);
lock(&hdw->ctl_lock_mutex);
lock(&ir_state->rx_params_lock);

*** DEADLOCK ***

8 locks held by kworker/0:6/10077:
#0: ffff888015431d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
#0: ffff888015431d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline]
#0: ffff888015431d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline]
#0: ffff888015431d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:616 [inline]
#0: ffff888015431d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:643 [inline]
#0: ffff888015431d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x871/0x1600 kernel/workqueue.c:2246
#1: ffffc9000b2ffda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600 kernel/workqueue.c:2250
#2: ffff88801cdca220 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:744 [inline]
#2: ffff88801cdca220 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4320 drivers/usb/core/hub.c:5590
#3: ffff888012516220 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:744 [inline]
#3: ffff888012516220 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x791 drivers/usb/core/hub.c:2210
#4: ffff8880440c11a8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:744 [inline]
#4: ffff8880440c11a8 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:986 [inline]
#4: ffff8880440c11a8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal drivers/base/dd.c:1194 [inline]
#4: ffff8880440c11a8 (&dev->mutex){....}-{3:3}, at: device_release_driver+0x1c/0x40 drivers/base/dd.c:1220
#5: ffff8880342d8188 (&hdw->big_lock_mutex){+.+.}-{3:3}, at: pvr2_hdw_disconnect+0x7b/0x610 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2705
#6: ffff8880342d9670 (&hdw->ctl_lock_mutex){+.+.}-{3:3}, at: pvr2_hdw_disconnect+0xc2/0x610 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2706
#7: ffff888037b93198 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:744 [inline]
#7: ffff888037b93198 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:986 [inline]
#7: ffff888037b93198 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal drivers/base/dd.c:1194 [inline]
#7: ffff888037b93198 (&dev->mutex){....}-{3:3}, at: device_release_driver+0x1c/0x40 drivers/base/dd.c:1220

stack backtrace:
CPU: 0 PID: 10077 Comm: kworker/0:6 Not tainted 5.12.0-rc4-next-20210329-syzkaller #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011

Workqueue: usb_hub_wq hub_event
Call Trace:
__dump_stack lib/dump_stack.c:79 [inline]
dump_stack+0x141/0x1d7 lib/dump_stack.c:120
check_noncircular+0x25f/0x2e0 kernel/locking/lockdep.c:2129
check_prev_add kernel/locking/lockdep.c:2938 [inline]
check_prevs_add kernel/locking/lockdep.c:3061 [inline]
validate_chain kernel/locking/lockdep.c:3676 [inline]
__lock_acquire+0x2a17/0x5230 kernel/locking/lockdep.c:4902
lock_acquire kernel/locking/lockdep.c:5512 [inline]
lock_acquire+0x1ab/0x740 kernel/locking/lockdep.c:5477
__mutex_lock_common kernel/locking/mutex.c:949 [inline]
__mutex_lock+0x139/0x1120 kernel/locking/mutex.c:1096
cx25840_ir_rx_shutdown+0x88/0x1f0 drivers/media/i2c/cx25840/cx25840-ir.c:730
cx25840_ir_remove+0x52/0xc0 drivers/media/i2c/cx25840/cx25840-ir.c:1253
cx25840_remove+0x36/0x60 drivers/media/i2c/cx25840/cx25840-core.c:6034
i2c_device_remove+0x7b/0x200 drivers/i2c/i2c-core-base.c:562
__device_release_driver+0x3bd/0x6f0 drivers/base/dd.c:1166
device_release_driver_internal drivers/base/dd.c:1197 [inline]
device_release_driver+0x26/0x40 drivers/base/dd.c:1220
bus_remove_device+0x2eb/0x5a0 drivers/base/bus.c:533
device_del+0x502/0xd40 drivers/base/core.c:3456
device_unregister+0x22/0xc0 drivers/base/core.c:3489

i2c_unregister_device include/linux/err.h:41 [inline]
__unregister_client drivers/i2c/i2c-core-base.c:1607 [inline]
__unregister_client+0x95/0xa0 drivers/i2c/i2c-core-base.c:1603

device_for_each_child+0xf9/0x170 drivers/base/core.c:3589

i2c_del_adapter+0x37b/0x680 drivers/i2c/i2c-core-base.c:1670
pvr2_i2c_core_done+0x69/0xc0 drivers/media/usb/pvrusb2/pvrusb2-i2c-core.c:652

pvr2_hdw_disconnect+0x105/0x610 drivers/media/usb/pvrusb2/pvrusb2-hdw.c:2707
pvr2_context_disconnect+0x2d/0x80 drivers/media/usb/pvrusb2/pvrusb2-context.c:269
pvr_disconnect+0x7c/0xc0 drivers/media/usb/pvrusb2/pvrusb2-main.c:87
usb_unbind_interface+0x1d8/0x8d0 drivers/usb/core/driver.c:458
__device_release_driver+0x3bd/0x6f0 drivers/base/dd.c:1166
device_release_driver_internal drivers/base/dd.c:1197 [inline]
device_release_driver+0x26/0x40 drivers/base/dd.c:1220
bus_remove_device+0x2eb/0x5a0 drivers/base/bus.c:533
device_del+0x502/0xd40 drivers/base/core.c:3456
usb_disable_device+0x35b/0x7b0 drivers/usb/core/message.c:1413
usb_disconnect.cold+0x27d/0x791 drivers/usb/core/hub.c:2219
hub_port_connect drivers/usb/core/hub.c:5127 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5416 [inline]
port_event drivers/usb/core/hub.c:5562 [inline]
hub_event+0x1c9c/0x4320 drivers/usb/core/hub.c:5644
process_one_work+0x98d/0x1600 kernel/workqueue.c:2275
process_scheduled_works kernel/workqueue.c:2337 [inline]
worker_thread+0x82b/0x1120 kernel/workqueue.c:2423

kthread+0x3b1/0x4a0 kernel/kthread.c:292
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

usb 5-1: new high-speed USB device number 3 using dummy_hcd
usb 5-1: Using ep0 maxpacket: 16
usb 5-1: config 0 has an invalid interface number: 121 but max is 0
usb 5-1: config 0 has no interface number 0
usb 5-1: config 0 interface 121 altsetting 0 has a duplicate endpoint with address 0xF, skipping
usb 5-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=8e.9f
usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 5-1: Product: syz
usb 5-1: Manufacturer: syz
usb 5-1: SerialNumber: syz
usb 5-1: config 0 descriptor??
pvrusb2: Hardware description: Gotview USB 2.0 DVD 2
usb 5-1: USB disconnect, device number 3
usb 5-1: new high-speed USB device number 4 using dummy_hcd
usb 5-1: Using ep0 maxpacket: 16
usb 5-1: config 0 has an invalid interface number: 121 but max is 0
usb 5-1: config 0 has no interface number 0
usb 5-1: config 0 interface 121 altsetting 0 has a duplicate endpoint with address 0xF, skipping
usb 5-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=8e.9f
usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 5-1: Product: syz
usb 5-1: Manufacturer: syz
usb 5-1: SerialNumber: syz
usb 5-1: config 0 descriptor??
usb 5-1: can't set config #0, error -71
usb 5-1: USB disconnect, device number 4
usb 5-1: new high-speed USB device number 5 using dummy_hcd
usb 5-1: Using ep0 maxpacket: 16
usb 5-1: config 0 has an invalid interface number: 121 but max is 0
usb 5-1: config 0 has no interface number 0
usb 5-1: config 0 interface 121 altsetting 0 has a duplicate endpoint with address 0xF, skipping
usb 5-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=8e.9f
usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 5-1: Product: syz
usb 5-1: Manufacturer: syz
usb 5-1: SerialNumber: syz
usb 5-1: config 0 descriptor??
pvrusb2: Hardware description: Gotview USB 2.0 DVD 2
usb 5-1: USB disconnect, device number 5
pvrusb2: Device being rendered inoperable
usb 2-1: new high-speed USB device number 6 using dummy_hcd
usb 2-1: Using ep0 maxpacket: 16
usb 2-1: device descriptor read/all, error -71
usb 2-1: new high-speed USB device number 7 using dummy_hcd
usb 2-1: Using ep0 maxpacket: 16
usb 2-1: config 0 has an invalid interface number: 121 but max is 0
usb 2-1: config 0 has no interface number 0
usb 2-1: config 0 interface 121 altsetting 0 has a duplicate endpoint with address 0xF, skipping
usb 2-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=8e.9f
usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 2-1: Product: syz
usb 2-1: Manufacturer: syz
usb 2-1: SerialNumber: syz
usb 2-1: config 0 descriptor??
pvrusb2: Hardware description: Gotview USB 2.0 DVD 2
usb 2-1: USB disconnect, device number 7


Tested on:

commit: 9d49ed9c Add linux-next specific files for 20210329
git tree: linux-next
console output: https://syzkaller.appspot.com/x/log.txt?x=16101c0ed00000
kernel config: https://syzkaller.appspot.com/x/.config?x=596ba934e35ca65f

dashboard link: https://syzkaller.appspot.com/bug?extid=e74a998ca8f1df9cc332
compiler:

patch: https://syzkaller.appspot.com/x/patch.diff?x=1653a94ed00000

[syzbot]

Hello,

syzbot tried to test the proposed patch but the build/boot failed:

unregister_netdevice: waiting for DEV to become free

unregister_netdevice: waiting for ip6gre0 to become free. Usage count = 2


[ [0;32m OK [0m] Reached target Multi-User System.
[ [0;32m OK [0m] Reached target Graphical Interface.
Starting Update UTMP about System Runlevel Changes...
[ [0;32m OK [0m] Started Update UTMP about System Runlevel Changes.
[ [0;32m OK [0m] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch.

Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.10.12' (ECDSA) to the list of known hosts.
2021/03/30 10:06:48 fuzzer started
2021/03/30 10:06:48 connecting to host at 10.128.0.169:34611
2021/03/30 10:06:48 checking machine...
2021/03/30 10:06:48 checking revisions...
2021/03/30 10:06:48 testing simple program...
syzkaller login: [ 59.313329][ T8438] IPVS: ftp: loaded support on port[0] = 21
[ 59.451433][ T8438] chnl_net:caif_netlink_parms(): no params data found
[ 59.496501][ T8438] bridge0: port 1(bridge_slave_0) entered blocking state
[ 59.507134][ T8438] bridge0: port 1(bridge_slave_0) entered disabled state
[ 59.515136][ T8438] device bridge_slave_0 entered promiscuous mode
[ 59.525016][ T8438] bridge0: port 2(bridge_slave_1) entered blocking state
[ 59.535750][ T8438] bridge0: port 2(bridge_slave_1) entered disabled state
[ 59.544340][ T8438] device bridge_slave_1 entered promiscuous mode
[ 59.562000][ T8438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 59.574438][ T8438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 59.596034][ T8438] team0: Port device team_slave_0 added
[ 59.603397][ T8438] team0: Port device team_slave_1 added
[ 59.619770][ T8438] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 59.628499][ T8438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 59.657185][ T8438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 59.669918][ T8438] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 59.677295][ T8438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 59.703642][ T8438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 59.727377][ T8438] device hsr_slave_0 entered promiscuous mode
[ 59.734009][ T8438] device hsr_slave_1 entered promiscuous mode
[ 59.816310][ T8438] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 59.826512][ T8438] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 59.836684][ T8438] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 59.845954][ T8438] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 59.867528][ T8438] bridge0: port 2(bridge_slave_1) entered blocking state
[ 59.874888][ T8438] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 59.883020][ T8438] bridge0: port 1(bridge_slave_0) entered blocking state
[ 59.890350][ T8438] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 59.929883][ T8438] 8021q: adding VLAN 0 to HW filter on device bond0
[ 59.943363][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 59.955012][ T3156] bridge0: port 1(bridge_slave_0) entered disabled state
[ 59.963659][ T3156] bridge0: port 2(bridge_slave_1) entered disabled state
[ 59.972539][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 59.985815][ T8438] 8021q: adding VLAN 0 to HW filter on device team0
[ 59.998103][ T8660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 60.008077][ T8660] bridge0: port 1(bridge_slave_0) entered blocking state
[ 60.015166][ T8660] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 60.028365][ T8660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 60.036652][ T8660] bridge0: port 2(bridge_slave_1) entered blocking state
[ 60.043796][ T8660] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 60.061196][ T8660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 60.071487][ T8660] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 60.084203][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 60.101302][ T8438] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 60.114269][ T8438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 60.128111][ T8660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 60.137899][ T8660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 60.146543][ T8660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 60.167916][ T8438] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 60.175716][ T8363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 60.183835][ T8363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 60.207117][ T8363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 60.222204][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 60.230577][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 60.238690][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 60.250370][ T8438] device veth0_vlan entered promiscuous mode
[ 60.262811][ T8438] device veth1_vlan entered promiscuous mode
[ 60.282364][ T8660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 60.291018][ T8660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 60.299880][ T8660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 60.310963][ T8438] device veth0_macvtap entered promiscuous mode
[ 60.321449][ T8438] device veth1_macvtap entered promiscuous mode
[ 60.341639][ T8438] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 60.349655][ T8660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 60.360449][ T8660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 60.371567][ T8438] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 60.380296][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 60.391280][ T8438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 60.400766][ T8438] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 60.409871][ T8438] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 60.419020][ T8438] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 60.496165][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 60.523017][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 60.538653][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 60.540656][ T8660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 60.546662][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 60.565073][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2021/03/30 10:06:51 building call list...
executing program
[ 61.248202][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 62.660738][ T8430] can: request_module (can-proto-0) failed.
[ 63.255526][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
executing program
[ 65.596252][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 65.730337][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
[ 206.597283][ T55] unregister_netdevice: waiting for ip6gre0 to become free. Usage count = 2



Tested on:

commit: 4143e05b Add linux-next specific files for 20210330
git tree: linux-next
kernel config: https://syzkaller.appspot.com/x/.config?x=3e55ebf5d74846d7

dashboard link: https://syzkaller.appspot.com/bug?extid=e74a998ca8f1df9cc332
compiler:

patch: https://syzkaller.appspot.com/x/patch.diff?x=179fa926d00000

[syzbot]

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-and-tested-by: syzbot+e74a99...@syzkaller.appspotmail.com

Tested on:

commit: 9d49ed9c Add linux-next specific files for 20210329
git tree: git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git
kernel config: https://syzkaller.appspot.com/x/.config?x=9aa493ffe513fe79
dashboard link: https://syzkaller.appspot.com/bug?extid=e74a998ca8f1df9cc332
compiler: Debian clang version 11.0.1-2
patch: https://syzkaller.appspot.com/x/patch.diff?x=1355179ed00000

Note: testing is done by a robot and is best-effort only.

[syzbot]

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-and-tested-by: syzbot+e74a99...@syzkaller.appspotmail.com

Tested on:

commit: 9d49ed9c Add linux-next specific files for 20210329
git tree: git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git
kernel config: https://syzkaller.appspot.com/x/.config?x=9aa493ffe513fe79
dashboard link: https://syzkaller.appspot.com/bug?extid=e74a998ca8f1df9cc332
compiler: Debian clang version 11.0.1-2

patch: https://syzkaller.appspot.com/x/patch.diff?x=158a3611d00000

[syzbot]

Hello,

syzbot tried to test the proposed patch but the build/boot failed:

unregister_netdevice: waiting for DEV to become free

unregister_netdevice: waiting for ip6gre0 to become free. Usage count = 2

Warning: Permanently added '10.128.0.77' (ECDSA) to the list of known hosts.
2021/03/31 14:23:19 fuzzer started
2021/03/31 14:23:19 connecting to host at 10.128.0.169:33177
2021/03/31 14:23:19 checking machine...
2021/03/31 14:23:19 checking revisions...
2021/03/31 14:23:19 testing simple program...
syzkaller login: [ 57.196277][ T8395] IPVS: ftp: loaded support on port[0] = 21
[ 57.328147][ T8395] chnl_net:caif_netlink_parms(): no params data found
[ 57.393223][ T8395] bridge0: port 1(bridge_slave_0) entered blocking state
[ 57.403789][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state
[ 57.414825][ T8395] device bridge_slave_0 entered promiscuous mode
[ 57.427090][ T8395] bridge0: port 2(bridge_slave_1) entered blocking state
[ 57.437757][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state
[ 57.450587][ T8395] device bridge_slave_1 entered promiscuous mode
[ 57.474231][ T8395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 57.489605][ T8395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 57.516519][ T8395] team0: Port device team_slave_0 added
[ 57.525206][ T8395] team0: Port device team_slave_1 added
[ 57.544532][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 57.554097][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 57.594132][ T8395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 57.610702][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 57.620915][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 57.661838][ T8395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 57.691377][ T8395] device hsr_slave_0 entered promiscuous mode
[ 57.701273][ T8395] device hsr_slave_1 entered promiscuous mode
[ 57.802272][ T8395] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 57.814784][ T8395] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 57.825673][ T8395] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 57.835729][ T8395] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 57.864051][ T8395] bridge0: port 2(bridge_slave_1) entered blocking state
[ 57.872606][ T8395] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 57.881986][ T8395] bridge0: port 1(bridge_slave_0) entered blocking state
[ 57.892083][ T8395] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 57.941017][ T8395] 8021q: adding VLAN 0 to HW filter on device bond0
[ 57.959674][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 57.975909][ T3737] bridge0: port 1(bridge_slave_0) entered disabled state
[ 57.988444][ T3737] bridge0: port 2(bridge_slave_1) entered disabled state
[ 57.999119][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 58.015391][ T8395] 8021q: adding VLAN 0 to HW filter on device team0
[ 58.027330][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 58.041842][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 58.051430][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 58.071916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 58.082665][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 58.093067][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 58.111751][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 58.123334][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 58.142500][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 58.153735][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 58.171639][ T8395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 58.187125][ T8395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 58.199571][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 58.223300][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 58.236040][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 58.253396][ T8395] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 58.276040][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 58.299170][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 58.311093][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 58.323262][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 58.337166][ T8395] device veth0_vlan entered promiscuous mode
[ 58.352642][ T8395] device veth1_vlan entered promiscuous mode
[ 58.384872][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 58.398097][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 58.417392][ T8395] device veth0_macvtap entered promiscuous mode
[ 58.431234][ T8395] device veth1_macvtap entered promiscuous mode
[ 58.452709][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 58.463985][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 58.475900][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 58.487655][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 58.500572][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 58.516706][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 58.529654][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 58.541300][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 58.557579][ T8395] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 58.572275][ T8395] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 58.584590][ T8395] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 58.598545][ T8395] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
executing program
[ 58.682077][ T254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 58.711908][ T254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 58.730202][ T3136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 58.743617][ T254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 58.754142][ T254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 58.765133][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2021/03/31 14:23:22 building call list...
[ 59.606592][ T254] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 61.253903][ T8649] can: request_module (can-proto-0) failed.
executing program
[ 61.995080][ T254] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 64.078636][ T254] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 64.238024][ T254] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0

[ 205.126538][ T254] unregister_netdevice: waiting for ip6gre0 to become free. Usage count = 2



Tested on:

commit: 7a43c78d Add linux-next specific files for 20210331
git tree: linux-next
kernel config: https://syzkaller.appspot.com/x/.config?x=278ba03ab4be3023

[syzbot]

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-and-tested-by: syzbot+e74a99...@syzkaller.appspotmail.com

Tested on:

commit: 9c54130c Add linux-next specific files for 20210406
git tree: linux-next
kernel config: https://syzkaller.appspot.com/x/.config?x=14567a0b847cd156

dashboard link: https://syzkaller.appspot.com/bug?extid=e74a998ca8f1df9cc332
compiler: Debian clang version 11.0.1-2

patch: https://syzkaller.appspot.com/x/patch.diff?x=17122b0ed00000

[syzbot]

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-and-tested-by: syzbot+e74a99...@syzkaller.appspotmail.com

Tested on:

commit: 9c54130c Add linux-next specific files for 20210406
git tree: linux-next
kernel config: https://syzkaller.appspot.com/x/.config?x=14567a0b847cd156
dashboard link: https://syzkaller.appspot.com/bug?extid=e74a998ca8f1df9cc332
compiler: Debian clang version 11.0.1-2

patch: https://syzkaller.appspot.com/x/patch.diff?x=11880931d00000