syzbot


WARNING: ODEBUG bug in usb_unbind_interface (3)

Status: upstream: reported on 2025/05/05 14:07
Subsystems: usb
[Documentation on labels]
Reported-by: syzbot+52ba12be8e4d18263247@syzkaller.appspotmail.com
First crash: 48d, last: 14d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [usb?] WARNING: ODEBUG bug in usb_unbind_interface (3) 0 (1) 2025/05/05 14:07
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 WARNING: ODEBUG bug in usb_unbind_interface 1 704d 704d 0/3 auto-obsoleted due to no activity on 2023/10/23 02:13
upstream WARNING: ODEBUG bug in usb_unbind_interface net usb 1 989d 985d 0/29 auto-obsoleted due to no activity on 2023/01/31 14:08
upstream WARNING: ODEBUG bug in usb_unbind_interface (2) usb 41 163d 454d 0/29 auto-obsoleted due to no activity on 2025/04/16 08:55
linux-6.1 WARNING: ODEBUG bug in usb_unbind_interface (3) 1 216d 216d 0/3 auto-obsoleted due to no activity on 2025/02/22 12:06
linux-6.1 WARNING: ODEBUG bug in usb_unbind_interface (2) 1 355d 355d 0/3 auto-obsoleted due to no activity on 2024/10/06 11:53
linux-5.15 WARNING: ODEBUG bug in usb_unbind_interface origin:lts-only syz inconclusive 2 288d 667d 0/3 auto-obsoleted due to no activity on 2024/12/12 13:34

Sample crash report:
cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
------------[ cut here ]------------
ODEBUG: free active (active state 0) object: ffff888030591260 object type: work_struct hint: usbnet_deferred_kevent+0x0/0xc80 drivers/net/usb/usbnet.c:1615
WARNING: CPU: 0 PID: 5891 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 lib/debugobjects.c:612
Modules linked in:
CPU: 0 UID: 0 PID: 5891 Comm: kworker/0:3 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: usb_hub_wq hub_event
RIP: 0010:debug_print_object+0x16b/0x1e0 lib/debugobjects.c:612
Code: 4c 89 ff e8 d7 b4 5d fd 4d 8b 0f 48 c7 c7 e0 7e e2 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 ba e4 bd fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 c7 ee da 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
RSP: 0018:ffffc9000431f280 EFLAGS: 00010292
RAX: 702ee78bb1db1500 RBX: dffffc0000000000 RCX: 0000000000100000
RDX: ffffc9001e822000 RSI: 0000000000011ef8 RDI: 0000000000011ef9
RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: ffffffff87061d00
R13: ffffffff8be28060 R14: ffff888030591260 R15: ffffffff8b89d4a0
FS:  0000000000000000(0000) GS:ffff888125c5f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00002000003f6030 CR3: 00000000334ba000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 __debug_check_no_obj_freed lib/debugobjects.c:1099 [inline]
 debug_check_no_obj_freed+0x3a2/0x470 lib/debugobjects.c:1129
 slab_free_hook mm/slub.c:2311 [inline]
 slab_free mm/slub.c:4642 [inline]
 kfree+0x112/0x440 mm/slub.c:4841
 device_release+0x99/0x1c0 drivers/base/core.c:-1
 kobject_cleanup lib/kobject.c:689 [inline]
 kobject_release lib/kobject.c:720 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x22b/0x480 lib/kobject.c:737
 usb_unbind_interface+0x26e/0x8f0 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:569 [inline]
 __device_release_driver drivers/base/dd.c:1272 [inline]
 device_release_driver_internal+0x4d6/0x7c0 drivers/base/dd.c:1295
 bus_remove_device+0x34d/0x410 drivers/base/bus.c:579
 device_del+0x511/0x8e0 drivers/base/core.c:3881
 usb_disable_device+0x3e9/0x8a0 drivers/usb/core/message.c:1418
 usb_disconnect+0x330/0x910 drivers/usb/core/hub.c:2316
 hub_port_connect drivers/usb/core/hub.c:5371 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5671 [inline]
 port_event drivers/usb/core/hub.c:5831 [inline]
 hub_event+0x1cdb/0x4a00 drivers/usb/core/hub.c:5913
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3321
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402
 kthread+0x711/0x8a0 kernel/kthread.c:464
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/04 01:11 upstream 546b1c9e93c2 a30356b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in usb_unbind_interface
2025/05/25 05:59 upstream b1427432d3b6 ed351ea7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in usb_unbind_interface
2025/04/30 22:11 upstream b6ea1680d0ac ce7952f4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in usb_unbind_interface
* Struck through repros no longer work on HEAD.