assert failed: (c->c_flags & CALLOUT_PENDING) == 0

Status: fixed on 2019/09/12 08:30
Reported-by: syzbot+95b252c7c7f5cd2c8f2e@syzkaller.appspotmail.com
Fix commit: 80a06cecc711 Fix race in timer destruction.
First crash: 2765d, last: 2627d

Sample crash report:
login: [  37.9813454] panic: kernel diagnostic assertion "(c->c_flags & CALLOUT_PENDING) == 0" failed: file "/syzkaller/managers/netbsd/kernel/sys/kern/kern_timeout.c", line 317 callout 0xffffb28012edaaa0: c_func (0xffffffff80f07d12) c_flags (0x102) destroyed from 0xffffffff80f07bdf
[  37.9950094] cpu0: Begin traceback...
[  37.9950094] vpanic() at netbsd:vpanic+0x214
[  38.0013110] _GLOBAL__sub_D_65535_0_cpu_configure() at netbsd:_GLOBAL__sub_D_65535_0_cpu_configure
[  38.0112920] callout_destroy() at netbsd:callout_destroy+0x118
[  38.0212739] itimerfree() at netbsd:itimerfree+0x102
[  38.0312561] timers_free() at netbsd:timers_free+0x2ef
[  38.0412394] exit1() at netbsd:exit1+0x276
[  38.0512213] sys_exit() at netbsd:sys_exit+0x6c
[  38.0612058] syscall() at netbsd:syscall+0x30e
[  38.0612058] --- syscall (number 1) ---
[  38.0748190] 740eac4fe47a:
[  38.0748190] cpu0: End traceback...

[  38.0827541] dumping to dev 4,1 (offset=0, size=0): not possible
[  38.0827541] rebooting...
SeaBIOS (version 1.8.2-20190204_181744-google)
Total RAM Size = 0x00000001e0000000 = 7680 MiB
CPUs found: 2     Max CPUs supported: 2
found virtio-scsi at 0:3
virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0
virtio-scsi blksize=512 sectors=4194304 = 2048 MiB
drive 0x000f2a00: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304
Booting from Hard Disk 0...

Crashes (2918):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/02/27 18:32 netbsd ad95769f6884 083cfd0e console log report syz C ci2-netbsd
2019/02/26 17:51 netbsd ed61d1fdd6fd a36ecd98 console log report syz C ci2-netbsd
2019/02/25 01:18 netbsd 11eef5b2ee47 7a06e792 console log report syz C ci2-netbsd
2019/07/11 21:42 netbsd 96e9c8a1fee4 186a30b9 console log report ci2-netbsd
2019/07/05 03:17 netbsd ae077064650c deef5fbc console log report ci2-netbsd
2019/07/04 03:25 netbsd 25fd1e923c2f 55565fa0 console log report ci2-netbsd
2019/06/26 14:38 netbsd 1f165a8e6c16 4d342240 console log report ci2-netbsd
2019/06/23 11:16 netbsd 65dff94be83b 34bf9440 console log report ci2-netbsd
2019/06/23 05:58 netbsd 65dff94be83b 34bf9440 console log report ci2-netbsd
2019/06/22 06:22 netbsd 4ad6ffcafd2c 34bf9440 console log report ci2-netbsd
2019/06/21 13:51 netbsd 1f4f83687ee8 34bf9440 console log report ci2-netbsd
2019/06/21 00:47 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/20 22:57 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/20 21:53 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/20 19:35 netbsd b8a18b79975d 34bf9440 console log report ci2-netbsd
2019/06/20 10:34 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 06:35 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 05:07 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/20 03:42 netbsd 841ec313576b 34bf9440 console log report ci2-netbsd
2019/06/19 20:23 netbsd 8da280eb0989 34bf9440 console log report ci2-netbsd
2019/05/17 23:25 netbsd d392fe408d81 40046286 console log report ci2-netbsd
2019/05/12 09:00 netbsd 308a4de880f8 c017728b console log report ci2-netbsd
2019/05/12 01:51 netbsd d2740109e7c1 0637a7f0 console log report ci2-netbsd
2019/05/10 19:53 netbsd 9c2e192a1ba6 46caad94 console log report ci2-netbsd
2019/05/07 15:00 netbsd 014f8a6c6f91 04e9d8ce console log report ci2-netbsd
2019/05/04 09:28 netbsd c50cc7984a99 d28f4ce5 console log report ci2-netbsd
2019/05/03 16:21 netbsd f865d38b9d4c 1bfa09b9 console log report ci2-netbsd
2019/05/01 08:18 netbsd fe3c80c3ed2d 618456b4 console log report ci2-netbsd
2019/04/28 00:55 netbsd f98e3e3cdffe b617407b console log report ci2-netbsd
2019/04/26 05:11 netbsd 2e4b206544e7 b617407b console log report ci2-netbsd
2019/04/25 20:42 netbsd a23dff14a970 f46aabc8 console log report ci2-netbsd
2019/04/15 15:43 netbsd 425dd0ee874e 505ab413 console log report ci2-netbsd
2019/04/12 15:21 netbsd 1ed788060c36 4f421599 console log report ci2-netbsd
2019/04/10 16:13 netbsd 467fc66daef1 65b612b7 console log report ci2-netbsd
2019/04/09 01:57 netbsd 1b93ab6a788b 995065ff console log report ci2-netbsd
2019/04/08 01:17 netbsd a10759f081a1 c34fde03 console log report ci2-netbsd
2019/04/06 12:38 netbsd c2452c62ad22 c34fde03 console log report ci2-netbsd
2019/04/02 03:30 netbsd a56714f2dad5 a9ca43d4 console log report ci2-netbsd
2019/04/01 22:36 netbsd a56714f2dad5 a9ca43d4 console log report ci2-netbsd
2019/03/31 16:41 netbsd 8f84b6998922 0c624d4d console log report ci2-netbsd
2019/03/29 21:01 netbsd cf839abab789 c35ee0ea console log report ci2-netbsd
2019/03/29 17:09 netbsd ce815d3feb61 e825006c console log report ci2-netbsd
2019/03/29 14:07 netbsd ce815d3feb61 e825006c console log report ci2-netbsd
2019/03/28 10:44 netbsd ccd42e1453ee f94f56fe console log report ci2-netbsd
2019/03/27 22:12 netbsd e9135a77cb57 f94f56fe console log report ci2-netbsd
2019/03/24 09:21 netbsd 326a04504535 acbc5b7d console log report ci2-netbsd
2019/03/22 15:55 netbsd 041f49c609cb 028c0951 console log report ci2-netbsd
2019/03/22 12:45 netbsd 041f49c609cb dce6e62f console log report ci2-netbsd
2019/03/22 02:02 netbsd f4c3b2df5c66 dce6e62f console log report ci2-netbsd
2019/03/19 05:56 netbsd 532dd151dfbf 46264c32 console log report ci2-netbsd
2019/03/19 02:56 netbsd 532dd151dfbf 46264c32 console log report ci2-netbsd
2019/02/24 07:00 netbsd dc893675b200 7a06e792 console log report ci2-netbsd
* Struck through repros no longer work on HEAD.