syzbot


WARNING: ODEBUG bug in put_device

Status: upstream: reported syz repro on 2020/08/07 07:16
Subsystems: bluetooth
[Documentation on labels]
Reported-by: syzbot+a9290936c6e87b3dc3c2@syzkaller.appspotmail.com
First crash: 1357d, last: 35d
Cause bisection: introduced by (bisect log) :
commit 6f8c8f3c31015808100ee54fc471ff5dffdf1734
Author: Bartosz Golaszewski <bgolaszewski@baylibre.com>
Date: Thu Aug 8 08:01:44 2019 +0000

  hwmon: pmbus: ucd9000: remove unneeded include

Crash: KASAN: use-after-free Read in sco_chan_del (log)
Repro: syz .config
  
Fix bisection: failed (error log, bisect log)
  
Discussions (5)
Title Replies (including bot) Last reply
[syzbot] Monthly bluetooth report (Jun 2023) 0 (1) 2023/07/01 10:15
[syzbot] Monthly bluetooth report (May 2023) 0 (1) 2023/05/30 20:52
[syzbot] Monthly bluetooth report (Apr 2023) 0 (1) 2023/04/30 08:00
[syzbot] Monthly bluetooth report 0 (1) 2023/03/29 10:03
WARNING: ODEBUG bug in put_device 0 (2) 2020/08/09 05:15
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 WARNING: ODEBUG bug in put_device C 743 416d 1389d 0/1 upstream: reported C repro on 2020/07/06 01:29
linux-4.14 WARNING: ODEBUG bug in put_device C error 4 603d 853d 0/1 upstream: reported C repro on 2021/12/24 10:28
Last patch testing requests (5)
Created Duration User Patch Repo Result
2024/04/16 08:22 26m retest repro upstream error OK
2024/01/11 16:52 14m retest repro upstream report log
2023/11/02 09:05 15m retest repro upstream report log
2023/08/24 07:39 20m retest repro upstream OK log
2023/08/24 07:39 14m retest repro upstream report log

Sample crash report:
------------[ cut here ]------------
ODEBUG: free active (active state 0) object type: work_struct hint: hci_conn_timeout+0x0/0x2a0 net/bluetooth/hci_conn.c:1499
WARNING: CPU: 1 PID: 8156 at lib/debugobjects.c:485 debug_print_object+0x160/0x250 lib/debugobjects.c:485
Kernel panic - not syncing: panic_on_warn set ...
CPU: 1 PID: 8156 Comm: kworker/u5:3 Not tainted 5.8.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: hci5 hci_rx_work
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x18f/0x20d lib/dump_stack.c:118
 panic+0x2e3/0x75c kernel/panic.c:231
 __warn.cold+0x20/0x45 kernel/panic.c:600
 report_bug+0x1bd/0x210 lib/bug.c:198
 handle_bug+0x38/0x90 arch/x86/kernel/traps.c:235
 exc_invalid_op+0x14/0x40 arch/x86/kernel/traps.c:255
 asm_exc_invalid_op+0x12/0x20 arch/x86/include/asm/idtentry.h:536
RIP: 0010:debug_print_object+0x160/0x250 lib/debugobjects.c:485
Code: dd e0 cf 93 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 14 dd e0 cf 93 88 48 c7 c7 40 c5 93 88 e8 42 e4 a8 fd <0f> 0b 83 05 23 3c 15 07 01 48 83 c4 20 5b 5d 41 5c 41 5d c3 48 89
RSP: 0018:ffffc9000a26f858 EFLAGS: 00010082
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
RDX: ffff88809eac6380 RSI: ffffffff815d8eb7 RDI: fffff5200144defd
RBP: 0000000000000001 R08: 0000000000000001 R09: ffff8880ae720fcb
R10: 0000000000000000 R11: 0000000035313854 R12: ffffffff89ba3300
R13: ffffffff814b53c0 R14: dead000000000100 R15: dffffc0000000000
 __debug_check_no_obj_freed lib/debugobjects.c:967 [inline]
 debug_check_no_obj_freed+0x301/0x41c lib/debugobjects.c:998
 kfree+0xf0/0x2c0 mm/slab.c:3756
 device_release+0x71/0x200 drivers/base/core.c:1800
 kobject_cleanup lib/kobject.c:704 [inline]
 kobject_release lib/kobject.c:735 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x171/0x270 lib/kobject.c:752
 put_device+0x1b/0x30 drivers/base/core.c:3029
 hci_conn_del+0x27e/0x6a0 net/bluetooth/hci_conn.c:645
 hci_sco_setup+0x3a1/0x440 net/bluetooth/hci_conn.c:400
 hci_conn_complete_evt net/bluetooth/hci_event.c:2657 [inline]
 hci_event_packet+0x5e0b/0x87a8 net/bluetooth/hci_event.c:6058
 hci_rx_work+0x22e/0xb50 net/bluetooth/hci_core.c:4889
 process_one_work+0x94c/0x1670 kernel/workqueue.c:2269
 worker_thread+0x64c/0x1120 kernel/workqueue.c:2415
 kthread+0x3b5/0x4a0 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (44):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/07 02:32 upstream 47ec5303d73e 1f122f88 .config console log report syz ci-upstream-kasan-gce-selinux-root
2023/06/28 18:17 upstream e8f75c0270d9 8064cb02 .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in put_device
2024/03/20 18:59 upstream fe46a7dd189e 5b7d42ae .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING: ODEBUG bug in put_device
2023/09/06 16:25 upstream 65d6e954e378 736a3c37 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING: ODEBUG bug in put_device
2023/06/28 13:37 upstream e8f75c0270d9 8064cb02 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in put_device
2023/05/26 13:42 upstream 9db898594c54 b40ef614 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in put_device
2023/05/15 01:29 upstream f1fcbaa18b28 2b9ba477 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING: ODEBUG bug in put_device
2023/05/11 20:53 upstream 105131df9c3b adb9a3cd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING: ODEBUG bug in put_device
2023/03/31 10:45 upstream 62bad54b26db f325deb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in put_device
2023/01/21 03:33 upstream d368967cb103 559a440a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in put_device
2022/09/21 21:55 upstream 06f7db949993 380f82fb .config console log report info ci-upstream-kasan-gce WARNING: ODEBUG bug in put_device
2022/02/15 22:19 upstream 705d84a366cf 8b9ca619 .config console log report info ci-qemu-upstream WARNING: ODEBUG bug in put_device
2023/04/15 10:22 upstream 95abc817ab3a ec410564 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING: ODEBUG bug in put_device
2022/12/27 23:53 upstream 1b929c02afd3 44712fbc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING: ODEBUG bug in put_device
2023/06/13 10:24 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing d5e234ff08a4 749afb64 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2023/06/06 10:04 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing d37537a1f7cf a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2023/06/02 11:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 243ff7e6a035 a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2023/05/31 05:04 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 922c0cb578ac 09898419 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2023/05/21 18:32 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing ee4d21aa4a22 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2023/05/18 19:05 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a4422ff22142 3bb7af1d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2023/05/16 12:03 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a4422ff22142 71b00cfb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2023/05/08 19:51 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 986866c3dfb0 c7a5e2a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2023/04/29 21:57 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 33afd4b76393 62df2017 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2023/04/25 21:14 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 8f40fc080813 65320f8e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2023/04/21 22:06 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 8f40fc080813 2b32bd34 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2023/04/17 18:59 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 8e86652e3e71 c6ec7083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2023/04/17 05:44 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 8e86652e3e71 ec410564 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2023/04/16 11:18 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 8e86652e3e71 ec410564 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2023/04/14 10:42 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 8e86652e3e71 3cfcaa1b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2023/04/14 03:35 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 8e86652e3e71 3cfcaa1b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2023/04/06 13:20 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 0246b15bbb43 08707520 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2023/03/28 18:11 linux-next a6faf7ea9fcb 48c74771 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING: ODEBUG bug in put_device
2023/03/01 12:49 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 489fa31ea873 ef65e6cb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2023/02/04 08:19 linux-next 4fafd96910ad 1b2f701a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING: ODEBUG bug in put_device
2022/10/28 07:30 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a6afa4199d3d 5c716ff6 .config console log report info [disk image] [vmlinux] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2022/10/26 00:39 linux-next 4d48f589d294 1984aebd .config console log report info [disk image] [vmlinux] ci-upstream-linux-next-kasan-gce-root WARNING: ODEBUG bug in put_device
2022/10/19 17:47 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a6afa4199d3d b31320fc .config console log report info [disk image] [vmlinux] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2022/10/19 05:42 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a6afa4199d3d b31320fc .config console log report info [disk image] [vmlinux] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2022/10/19 02:09 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing a6afa4199d3d b31320fc .config console log report info [disk image] [vmlinux] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2022/09/29 14:53 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing bce2b0539933 45fd7169 .config console log report info ci2-upstream-usb WARNING: ODEBUG bug in put_device
2022/09/22 22:30 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b294c2bf4cfd 0042f2b4 .config console log report info [disk image] [vmlinux] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2022/09/19 23:22 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 7eb2bf871454 dd9a85ff .config console log report info [disk image] [vmlinux] ci2-upstream-usb WARNING: ODEBUG bug in put_device
2022/09/14 10:32 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 7eb2bf871454 b884348d .config console log report info ci2-upstream-usb WARNING: ODEBUG bug in put_device
2022/08/05 17:13 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b2a88c212e65 a65a7ce9 .config console log report info ci2-upstream-usb WARNING: ODEBUG bug in put_device
* Struck through repros no longer work on HEAD.