netdevsim netdevsim1: Falling back to sysfs fallback for: iÒ[Þ list_add corruption. next->prev should be prev (82b6b2d0), but was 00000000. (next=86b639ec). ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:23! Internal error: Oops - BUG: 0 [#1] PREEMPT SMP ARM Modules linked in: CPU: 1 PID: 9490 Comm: syz-executor.1 Not tainted 5.12.0-rc3-syzkaller #0 Hardware name: ARM-Versatile Express PC is at __list_add_valid+0x4c/0x84 lib/list_debug.c:23 LR is at wake_up_klogd.part.0+0x7c/0xb4 kernel/printk/printk.c:3118 pc : [<80807284>] lr : [<802d21b0>] psr: 60090013 sp : 83671c00 ip : 83671b30 fp : 83671c0c r10: 864e7008 r9 : 86b63480 r8 : 86afc400 r7 : 867c2000 r6 : 00001770 r5 : 864e7000 r4 : 82b6b2d0 r3 : 00000000 r2 : 00000000 r1 : ddfd6688 r0 : 0000005d Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 867c29c0 DAC: 00000000 Process syz-executor.1 (pid: 9490, stack limit = 0x83670210) Stack: (0x83671c00 to 0x83672000) 1c00: 83671c44 83671c10 80a39b80 80807244 86b634ec 86b639ec 83671c40 fffffffe 1c20: 83671d1c 867c2000 833ba5b4 86afc400 86b63484 83671cc4 83671c8c 83671c48 1c40: 80a38bcc 80a39a08 fffffffe 81373308 00000000 833ba590 821274e4 833ba5b4 1c60: 836108f8 00000000 83671cc4 83671d1c 86afc400 001c0000 00000046 86059dc0 1c80: 83671cbc 83671c90 80a38da4 80a38844 00000000 00000000 00000001 86059dc0 1ca0: 83671d1c 86a3d000 86afc800 80014869 83671d0c 83671cc0 813c3684 80a38d68 1cc0: 00000000 00000000 00000000 00000000 00000046 86059dc0 83671d0c 83671ce8 1ce0: 8046d9e4 56b92eae 86a3d000 86a3d000 20000040 20000040 80014869 001c0000 1d00: 83671db4 83671d10 8146bd50 813c35dc ffffffff 00000033 e7d80000 5b0fd269 1d20: 2e0000de 6c69662f 00003065 00000000 00000000 00000000 00000000 00000000 1d40: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1d60: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1d80: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 56b92eae 1da0: 86a3d000 00000033 83671e7c 83671db8 81470800 8146bc88 83671ebc 81f4c9b0 1dc0: 00000033 00000033 83671e54 83671dd8 81822cc8 8027e0bc 00000001 00000000 1de0: 81368c9c 86a516c8 83671e04 83671df8 8181dacc 8181d97c 82bdc274 83671e08 1e00: 802bf74c 8181dabc 00000002 86a51040 83671e2c 00000001 00000000 56b92eae 1e20: 83671e4c 56b92eae 86a3d000 83671ec4 00008946 868c8000 83671ebc 00000000 1e40: 00000046 86059dc0 83671e6c 56b92eae 81823534 83671ec4 00008946 868c8000 1e60: 83671ebc 00000000 00000046 86059dc0 83671eb4 83671e80 8138ce54 8146f9b0 1e80: 83671eb4 83671e90 8046d9e4 802bf578 00008946 20003000 868c8000 fffffdfd 1ea0: ffffe000 00000003 83671f0c 83671eb8 81323940 8138c8b8 20008946 86623c01 1ec0: 83671eb0 6474656e 69737665 0000306d 00000000 20000040 00000000 00000000 1ee0: 00000000 56b92eae 806efce8 00008946 00000000 86623c81 20003000 86623c80 1f00: 83671fa4 83671f10 804f33f4 81323548 8020d140 8020e34c 00000000 80200e90 1f20: 828a2438 80200e90 86a51040 80200060 83671f4c 83671f40 8181dacc 8181d97c 1f40: 83671f74 83671f50 8181cb8c 8181dabc 83671f98 80384d84 828abd1c 80200e90 1f60: 60000093 30c5387d 83671f94 83671f78 828abd1c 56b92eae 00000000 00000000 1f80: 00000000 00000000 00000036 80200224 83670000 00000036 00000000 83671fa8 1fa0: 80200060 804f32e0 00000000 00000000 00000003 00008946 20003000 00000000 1fc0: 00000000 00000000 00000000 00000036 7ecc833a 76f996d0 7ecc84ac 76f9920c 1fe0: 76f99048 76f99038 00018d58 0004b620 60000010 00000003 00000000 00000000 Backtrace: [<80807238>] (__list_add_valid) from [<80a39b80>] (__list_add include/linux/list.h:67 [inline]) [<80807238>] (__list_add_valid) from [<80a39b80>] (list_add include/linux/list.h:86 [inline]) [<80807238>] (__list_add_valid) from [<80a39b80>] (fw_load_sysfs_fallback drivers/base/firmware_loader/fallback.c:516 [inline]) [<80807238>] (__list_add_valid) from [<80a39b80>] (fw_load_from_user_helper drivers/base/firmware_loader/fallback.c:581 [inline]) [<80807238>] (__list_add_valid) from [<80a39b80>] (firmware_fallback_sysfs+0x184/0x448 drivers/base/firmware_loader/fallback.c:657) [<80a399fc>] (firmware_fallback_sysfs) from [<80a38bcc>] (_request_firmware+0x394/0x524 drivers/base/firmware_loader/main.c:831) r10:83671cc4 r9:86b63484 r8:86afc400 r7:833ba5b4 r6:867c2000 r5:83671d1c r4:fffffffe [<80a38838>] (_request_firmware) from [<80a38da4>] (request_firmware+0x48/0x60 drivers/base/firmware_loader/main.c:875) r10:86059dc0 r9:00000046 r8:001c0000 r7:86afc400 r6:83671d1c r5:83671cc4 r4:00000000 [<80a38d5c>] (request_firmware) from [<813c3684>] (devlink_compat_flash_update+0xb4/0x1b8 net/core/devlink.c:10515) r7:80014869 r6:86afc800 r5:86a3d000 r4:83671d1c [<813c35d0>] (devlink_compat_flash_update) from [<8146bd50>] (ethtool_flash_device+0xd4/0xe0 net/ethtool/ioctl.c:2076) r8:001c0000 r7:80014869 r6:20000040 r5:20000040 r4:86a3d000 [<8146bc7c>] (ethtool_flash_device) from [<81470800>] (dev_ethtool+0xe5c/0x27c8 net/ethtool/ioctl.c:2760) r5:00000033 r4:86a3d000 [<8146f9a4>] (dev_ethtool) from [<8138ce54>] (dev_ioctl+0x5a8/0x724 drivers/usb/gadget/legacy/inode.c:1955) r10:86059dc0 r9:00000046 r8:00000000 r7:83671ebc r6:868c8000 r5:00008946 r4:83671ec4 [<8138c8ac>] (dev_ioctl) from [<81323940>] (sock_do_ioctl net/socket.c:1062 [inline]) [<8138c8ac>] (dev_ioctl) from [<81323940>] (sock_ioctl+0x404/0x528 net/socket.c:1179) r9:00000003 r8:ffffe000 r7:fffffdfd r6:868c8000 r5:20003000 r4:00008946 [<8132353c>] (sock_ioctl) from [<804f33f4>] (vfs_ioctl fs/ioctl.c:48 [inline]) [<8132353c>] (sock_ioctl) from [<804f33f4>] (do_vfs_ioctl fs/ioctl.c:725 [inline]) [<8132353c>] (sock_ioctl) from [<804f33f4>] (__do_sys_ioctl fs/ioctl.c:751 [inline]) [<8132353c>] (sock_ioctl) from [<804f33f4>] (sys_ioctl+0x120/0xaa4 fs/ioctl.c:739) r8:86623c80 r7:20003000 r6:86623c81 r5:00000000 r4:00008946 [<804f32d4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x2c arch/arm/mm/proc-v7.S:64) Exception stack(0x83671fa8 to 0x83671ff0) 1fa0: 00000000 00000000 00000003 00008946 20003000 00000000 1fc0: 00000000 00000000 00000000 00000036 7ecc833a 76f996d0 7ecc84ac 76f9920c 1fe0: 76f99048 76f99038 00018d58 0004b620 r10:00000036 r9:83670000 r8:80200224 r7:00000036 r6:00000000 r5:00000000 r4:00000000 Code: e1a0300c e3000730 e34801fa eb3ffb3b (e7f001f2) ---[ end trace 47a54799adc88ca4 ]---