WARNING in pm_qos_remove_request

Status: upstream: reported C repro on 2020/11/29 23:53
Reported-by: syzbot+8cb60ca357880f414585@syzkaller.appspotmail.com
First crash: 2091d, last: 1605d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 WARNING in pm_qos_remove_request (2) -1 syz, C error 7 1378d 1605d 0/1 upstream: reported C repro on 2022/03/30 20:12
linux-4.19 WARNING in pm_qos_remove_request -1 1 1881d 1881d 0/1 auto-closed as invalid on 2021/10/26 09:18
▶ ▼ Last patch testing requests (4)
Created Duration User Patch Repo Result
2023/02/17 03:32 9m retest repro linux-4.14.y report log
2023/02/17 02:32 9m retest repro linux-4.14.y report log
2022/10/21 11:30 18m retest repro linux-4.14.y report log
2022/10/20 23:30 14m retest repro linux-4.14.y report log
▶ ▼ Fix bisection attempts (16)
Created Duration User Patch Repo Result
2022/03/29 19:55 16m bisect fix linux-4.14.y error job log
2022/02/26 13:08 26m bisect fix linux-4.14.y OK (0) job log log
2022/01/27 12:19 27m bisect fix linux-4.14.y OK (0) job log log
2021/12/28 11:56 23m bisect fix linux-4.14.y OK (0) job log log
2021/11/28 11:33 22m bisect fix linux-4.14.y OK (0) job log log
2021/10/29 11:09 23m bisect fix linux-4.14.y OK (0) job log log
2021/09/26 12:24 27m bisect fix linux-4.14.y OK (0) job log log
2021/08/27 11:25 29m bisect fix linux-4.14.y OK (0) job log log
2021/07/28 10:54 26m bisect fix linux-4.14.y OK (0) job log log
2021/06/28 10:30 23m bisect fix linux-4.14.y OK (0) job log log
2021/05/29 09:52 25m bisect fix linux-4.14.y OK (0) job log log
2021/04/29 09:09 25m bisect fix linux-4.14.y OK (0) job log log
2021/03/30 08:45 23m bisect fix linux-4.14.y OK (0) job log log
2021/02/28 08:06 25m bisect fix linux-4.14.y OK (0) job log log
2021/01/29 07:30 25m bisect fix linux-4.14.y OK (0) job log log
2020/12/30 04:19 23m bisect fix linux-4.14.y OK (0) job log log

Sample crash report:
pm_qos_remove_request() called for unknown object
------------[ cut here ]------------
WARNING: CPU: 1 PID: 7993 at kernel/power/qos.c:534 pm_qos_remove_request.cold+0x11/0x18 kernel/power/qos.c:534
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 7993 Comm: syz-executor103 Not tainted 4.14.274-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 panic+0x1f9/0x42d kernel/panic.c:183
 __warn.cold+0x20/0x44 kernel/panic.c:547
 report_bug+0x208/0x250 lib/bug.c:183
 fixup_bug arch/x86/kernel/traps.c:177 [inline]
 fixup_bug arch/x86/kernel/traps.c:172 [inline]
 do_error_trap+0x195/0x2d0 arch/x86/kernel/traps.c:295
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964
RIP: 0010:pm_qos_remove_request.cold+0x11/0x18 kernel/power/qos.c:534
RSP: 0018:ffff888095d6fc58 EFLAGS: 00010282
RAX: 0000000000000031 RBX: ffff888235af65c0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff878bc440 RDI: ffffed1012badf81
RBP: ffff8880a55ed6c0 R08: 0000000000000031 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff11012badf99
R13: 0000000000004112 R14: ffff8880a55ed6e8 R15: 0000000000000000
 snd_pcm_hw_free sound/core/pcm_native.c:795 [inline]
 snd_pcm_common_ioctl+0x12da/0x2810 sound/core/pcm_native.c:2928
 snd_pcm_ioctl+0x6d/0xa0 sound/core/pcm_native.c:3007
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f160807a7a9
RSP: 002b:00007ffc0a71ed28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00000000000f4240 RCX: 00007f160807a7a9
RDX: 0000000000000000 RSI: 0000000000004112 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001
R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000006c9a
R13: 00007ffc0a71ed3c R14: 00007ffc0a71ed50 R15: 00007ffc0a71ed40
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/03/30 17:06 linux-4.14.y af1af6ebca0e 42718dd6 .config console log report syz C ci2-linux-4-14 WARNING in pm_qos_remove_request
2020/11/29 23:52 linux-4.14.y 87335852c5d9 a0092f9d .config console log report syz C ci2-linux-4-14
* Struck through repros no longer work on HEAD.