syzbot


WARNING: ODEBUG bug in smc_ib_remove_dev

Status: fixed on 2020/04/15 17:19
Subsystems: net s390
[Documentation on labels]
Reported-by: syzbot+b297c6825752e7a07272@syzkaller.appspotmail.com
Fix commit: ece0d7bd7461 net/smc: cancel event worker during device removal
First crash: 1746d, last: 1729d
Duplicate bugs (2)
duplicates (2):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
WARNING: ODEBUG bug in remove_client_context net s390 1 1737d 1733d 0/28 closed as dup on 2020/03/12 15:17
KASAN: use-after-free Read in rxe_query_port rdma 71 1712d 1744d 0/28 closed as dup on 2020/03/10 14:52
Discussions (6)
Title Replies (including bot) Last reply
[PATCH 4.19 00/89] 4.19.111-rc1 review 97 (97) 2020/03/19 10:04
[PATCH 5.5 000/151] 5.5.10-rc1 review 158 (158) 2020/03/18 10:00
[PATCH 5.4 000/123] 5.4.26-rc1 review 127 (127) 2020/03/18 00:04
[PATCH v2 net] net/smc: cancel event worker during device removal 3 (3) 2020/03/10 22:41
[PATCH net] net/smc: cancel event worker during device removal 6 (6) 2020/03/09 13:19
WARNING: ODEBUG bug in smc_ib_remove_dev 0 (1) 2020/03/02 05:11

Sample crash report:
------------[ cut here ]------------
ODEBUG: free active (active state 0) object type: work_struct hint: smc_ib_port_event_work+0x0/0x360 net/smc/smc_ib.c:312
WARNING: CPU: 0 PID: 10292 at lib/debugobjects.c:485 debug_print_object+0x160/0x250 lib/debugobjects.c:485
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 10292 Comm: kworker/u4:1 Not tainted 5.6.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound ib_unregister_work
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x188/0x20d lib/dump_stack.c:118
 panic+0x2e3/0x75c kernel/panic.c:221
 __warn.cold+0x2f/0x35 kernel/panic.c:582
 report_bug+0x27b/0x2f0 lib/bug.c:195
 fixup_bug arch/x86/kernel/traps.c:174 [inline]
 fixup_bug arch/x86/kernel/traps.c:169 [inline]
 do_error_trap+0x12b/0x220 arch/x86/kernel/traps.c:267
 do_invalid_op+0x32/0x40 arch/x86/kernel/traps.c:286
 invalid_op+0x23/0x30 arch/x86/entry/entry_64.S:1027
RIP: 0010:debug_print_object+0x160/0x250 lib/debugobjects.c:485
Code: dd c0 f3 51 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 14 dd c0 f3 51 88 48 c7 c7 20 e9 51 88 e8 38 d8 b1 fd <0f> 0b 83 05 4b b4 d3 06 01 48 83 c4 20 5b 5d 41 5c 41 5d c3 48 89
RSP: 0018:ffffc90002d87b38 EFLAGS: 00010086
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff815bf4e1 RDI: fffff520005b0f59
RBP: 0000000000000001 R08: ffff888049ed4640 R09: ffffed1015cc45c9
R10: ffffed1015cc45c8 R11: ffff8880ae622e43 R12: ffffffff8977aba0
R13: ffffffff814a89e0 R14: ffff8880a351b158 R15: ffff88809e391118
 __debug_check_no_obj_freed lib/debugobjects.c:967 [inline]
 debug_check_no_obj_freed+0x2e1/0x445 lib/debugobjects.c:998
 kfree+0xf6/0x2b0 mm/slab.c:3756
 smc_ib_remove_dev+0x1e3/0x310 net/smc/smc_ib.c:585
 remove_client_context+0xbe/0x110 drivers/infiniband/core/device.c:724
 disable_device+0x13b/0x230 drivers/infiniband/core/device.c:1268
 __ib_unregister_device+0x91/0x180 drivers/infiniband/core/device.c:1435
 ib_unregister_work+0x15/0x30 drivers/infiniband/core/device.c:1545
 process_one_work+0x94b/0x1690 kernel/workqueue.c:2264
 worker_thread+0x96/0xe20 kernel/workqueue.c:2410
 kthread+0x357/0x430 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (52):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/03/07 19:39 upstream 63849c8f4107 2e9971bb .config console log report ci-upstream-kasan-gce-selinux-root
2020/03/06 16:57 upstream 63623fd44972 c88c7b75 .config console log report ci-upstream-kasan-gce-smack-root
2020/03/06 14:20 upstream 63623fd44972 c88c7b75 .config console log report ci-upstream-kasan-gce-root
2020/03/06 02:58 upstream 63623fd44972 c88c7b75 .config console log report ci-upstream-kasan-gce-root
2020/03/05 06:35 upstream 63623fd44972 c88c7b75 .config console log report ci-upstream-kasan-gce-root
2020/03/05 05:47 upstream 63623fd44972 c88c7b75 .config console log report ci-upstream-kasan-gce-selinux-root
2020/03/05 02:53 upstream 63623fd44972 c88c7b75 .config console log report ci-upstream-kasan-gce-root
2020/03/04 22:35 upstream 63623fd44972 c88c7b75 .config console log report ci-upstream-kasan-gce-smack-root
2020/03/04 22:34 upstream 63623fd44972 c88c7b75 .config console log report ci-upstream-kasan-gce-smack-root
2020/03/01 02:09 upstream 63623fd44972 59b57593 .config console log report ci-upstream-kasan-gce-selinux-root
2020/03/10 11:06 net-old 236205942749 35f53e45 .config console log report ci-upstream-net-this-kasan-gce
2020/03/09 08:53 net-old 17c25cafd4d3 2e9971bb .config console log report ci-upstream-net-this-kasan-gce
2020/03/07 13:24 net-old aeaa925bff84 2e9971bb .config console log report ci-upstream-net-this-kasan-gce
2020/03/06 06:04 net-old 3614d05b5e6b c88c7b75 .config console log report ci-upstream-net-this-kasan-gce
2020/03/05 20:01 net-old 3614d05b5e6b c88c7b75 .config console log report ci-upstream-net-this-kasan-gce
2020/03/04 21:14 net-old 3614d05b5e6b c88c7b75 .config console log report ci-upstream-net-this-kasan-gce
2020/03/04 15:03 net-old 3614d05b5e6b c88c7b75 .config console log report ci-upstream-net-this-kasan-gce
2020/03/04 13:37 net-old 3614d05b5e6b c88c7b75 .config console log report ci-upstream-net-this-kasan-gce
2020/03/04 10:59 net-old 3614d05b5e6b c88c7b75 .config console log report ci-upstream-net-this-kasan-gce
2020/03/03 22:46 net-old 3614d05b5e6b c88c7b75 .config console log report ci-upstream-net-this-kasan-gce
2020/03/03 19:04 net-old 3614d05b5e6b c88c7b75 .config console log report ci-upstream-net-this-kasan-gce
2020/03/03 05:25 net-old 3614d05b5e6b c88c7b75 .config console log report ci-upstream-net-this-kasan-gce
2020/03/03 03:22 net-old 3614d05b5e6b c88c7b75 .config console log report ci-upstream-net-this-kasan-gce
2020/03/02 12:19 net-old 3614d05b5e6b c88c7b75 .config console log report ci-upstream-net-this-kasan-gce
2020/03/02 11:50 net-old 3614d05b5e6b c88c7b75 .config console log report ci-upstream-net-this-kasan-gce
2020/03/01 21:51 net-old 3614d05b5e6b c88c7b75 .config console log report ci-upstream-net-this-kasan-gce
2020/03/01 19:22 net-old 3614d05b5e6b c88c7b75 .config console log report ci-upstream-net-this-kasan-gce
2020/03/13 00:14 net-next-old 93e616131a38 d850e9d0 .config console log report ci-upstream-net-kasan-gce
2020/03/06 06:11 net-next-old 3b3e808cd883 c88c7b75 .config console log report ci-upstream-net-kasan-gce
2020/03/06 03:46 net-next-old 3b3e808cd883 c88c7b75 .config console log report ci-upstream-net-kasan-gce
2020/03/05 23:13 net-next-old 3b3e808cd883 c88c7b75 .config console log report ci-upstream-net-kasan-gce
2020/03/05 21:50 net-next-old 3b3e808cd883 c88c7b75 .config console log report ci-upstream-net-kasan-gce
2020/03/05 21:11 net-next-old 3b3e808cd883 c88c7b75 .config console log report ci-upstream-net-kasan-gce
2020/03/05 20:33 net-next-old 3b3e808cd883 c88c7b75 .config console log report ci-upstream-net-kasan-gce
2020/03/04 14:45 net-next-old 3b3e808cd883 c88c7b75 .config console log report ci-upstream-net-kasan-gce
2020/03/04 10:01 net-next-old 3b3e808cd883 c88c7b75 .config console log report ci-upstream-net-kasan-gce
2020/03/04 04:53 net-next-old 3b3e808cd883 c88c7b75 .config console log report ci-upstream-net-kasan-gce
2020/03/03 23:09 net-next-old 3b3e808cd883 c88c7b75 .config console log report ci-upstream-net-kasan-gce
2020/03/03 23:06 net-next-old 3b3e808cd883 c88c7b75 .config console log report ci-upstream-net-kasan-gce
2020/03/03 22:59 net-next-old 3b3e808cd883 c88c7b75 .config console log report ci-upstream-net-kasan-gce
2020/03/03 16:37 net-next-old 3b3e808cd883 c88c7b75 .config console log report ci-upstream-net-kasan-gce
2020/03/03 09:33 net-next-old 3b3e808cd883 c88c7b75 .config console log report ci-upstream-net-kasan-gce
2020/03/01 19:23 net-next-old 3b3e808cd883 c88c7b75 .config console log report ci-upstream-net-kasan-gce
2020/03/16 04:44 linux-next 770fbb32d34e 749688d2 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/03/14 18:46 linux-next 770fbb32d34e 749688d2 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/03/09 06:45 linux-next 770fbb32d34e 2e9971bb .config console log report ci-upstream-linux-next-kasan-gce-root
2020/03/06 08:15 linux-next c99b17ac0399 c88c7b75 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/03/04 10:05 linux-next c99b17ac0399 c88c7b75 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/03/03 02:36 linux-next c99b17ac0399 c88c7b75 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/02/29 17:41 linux-next bdc5461b23ca 59b57593 .config console log report ci-upstream-linux-next-kasan-gce-root
2020/02/28 10:13 linux-next bdc5461b23ca 59b57593 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.