WARNING: ODEBUG bug in __do

WARNING: ODEBUG bug in __do_softirq
Status: upstream: reported syz repro on 2018/02/17 08:15
Reported-by: syzbot+51c9bdfa559769d2f897@syzkaller.appspotmail.com
First crash: 902d, last: 156d

Cause bisection: introduced by (bisect log):

commit 5b317cbf2bcb85a1e96ce87717cb991ecab1dd4d
Author: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
Date: Fri Feb 22 09:17:11 2019 +0000

Merge branch 'pm-cpufreq-fixes'

Crash: KASAN: use-after-free Read in rpc_make_runnable (log)
Repro: syz .config

Fix bisection: failed (bisect log)

similar bugs (1):
Kernel	Title	Repro	Bisected	Count	Last	Reported	Patched	Status
android-49	WARNING: ODEBUG bug in __do_softirq	syz		1	685d	480d	0/3	public: reported syz repro on 2019/04/14 09:28

Sample crash report:

FS-Cache: N-cookie c=00000000e02f5bf5 [p=0000000024489a0e fl=2 nc=0 na=1]
FS-Cache: N-cookie d=00000000f5e1c1cb n=000000003ffefe54
------------[ cut here ]------------
FS-Cache: N-key=[10] '0200020000807f000008'
ODEBUG: free active (active state 0) object type: timer_list hint: xprt_init_autodisconnect+0x0/0x170 net/sunrpc/xprt.c:96
WARNING: CPU: 0 PID: 0 at lib/debugobjects.c:325 debug_print_object+0x16a/0x250 lib/debugobjects.c:325
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.0.0-rc7+ #86
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 panic+0x2cb/0x65c kernel/panic.c:214
 __warn.cold+0x20/0x45 kernel/panic.c:571
 report_bug+0x263/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 fixup_bug arch/x86/kernel/traps.c:173 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:271
 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:290
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:973
RIP: 0010:debug_print_object+0x16a/0x250 lib/debugobjects.c:325
Code: dd 00 50 a2 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 00 50 a2 87 48 c7 c7 a0 45 a2 87 e8 d4 1c 18 fe <0f> 0b 83 05 a1 9a 31 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3
RSP: 0018:ffff8880ae807d08 EFLAGS: 00010086
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
RDX: 0000000000000100 RSI: ffffffff815a92c6 RDI: ffffed1015d00f93
RBP: ffff8880ae807d48 R08: ffffffff8887dec0 R09: fffffbfff1133361
R10: fffffbfff1133360 R11: ffffffff88999b03 R12: 0000000000000001
R13: ffffffff889adde0 R14: ffffffff815fc2a0 R15: ffff888085989288
 __debug_check_no_obj_freed lib/debugobjects.c:785 [inline]
 debug_check_no_obj_freed+0x29f/0x464 lib/debugobjects.c:817
 kfree+0xbd/0x230 mm/slab.c:3810
 __rcu_reclaim kernel/rcu/rcu.h:233 [inline]
 rcu_do_batch kernel/rcu/tree.c:2452 [inline]
 invoke_rcu_callbacks kernel/rcu/tree.c:2773 [inline]
 rcu_process_callbacks+0xa4b/0x1390 kernel/rcu/tree.c:2754
 __do_softirq+0x266/0x95a kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x180/0x1d0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x14a/0x570 arch/x86/kernel/apic/apic.c:1062
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
 </IRQ>
RIP: 0010:native_safe_halt+0x2/0x10 arch/x86/include/asm/irqflags.h:58
Code: ff ff ff 48 89 c7 48 89 45 d8 e8 59 a9 a3 fa 48 8b 45 d8 e9 ce fe ff ff 48 89 df e8 48 a9 a3 fa eb 82 90 90 90 90 90 90 fb f4 <c3> 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 f4 c3 90 90 90 90 90 90
RSP: 0018:ffffffff88807d08 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff1125061 RBX: ffffffff8887dec0 RCX: 0000000000000000
RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff8887e73c
RBP: ffffffff88807d38 R08: ffffffff8887dec0 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffffffff889282f8 R14: 0000000000000000 R15: 0000000000000000
 arch_cpu_idle+0x10/0x20 arch/x86/kernel/process.c:555
 default_idle_call+0x36/0x90 kernel/sched/idle.c:93
 cpuidle_idle_call kernel/sched/idle.c:153 [inline]
 do_idle+0x386/0x570 kernel/sched/idle.c:262
 cpu_startup_entry+0x1b/0x20 kernel/sched/idle.c:353
 rest_init+0x245/0x37b init/main.c:442
 arch_call_rest_init+0xe/0x1b
 start_kernel+0x803/0x83c init/main.c:739
 x86_64_start_reservations+0x29/0x2b arch/x86/kernel/head64.c:470
 x86_64_start_kernel+0x77/0x7b arch/x86/kernel/head64.c:451
 secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:243

======================================================

Crashes (26):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	Maintainers
ci-upstream-kasan-gce-root	2019/02/24 18:56	upstream	e60b5f79	7a06e792	.config	log	report	syz	bp@alien8.de, douly.fnst@cn.fujitsu.com, hpa@zytor.com, konrad.wilk@oracle.com, len.brown@intel.com, linux-kernel@vger.kernel.org, mingo@redhat.com, puwen@hygon.cn, tglx@linutronix.de, vbabka@suse.cz, x86@kernel.org
ci-upstream-kasan-gce-root	2018/12/17 13:58	upstream	7566ec39	def91db3	.config	log	report	syz	andy.shevchenko@gmail.com, bp@alien8.de, douly.fnst@cn.fujitsu.com, hpa@zytor.com, linux-kernel@vger.kernel.org, mingo@redhat.com, nstange@suse.de, qianyue.zj@alibaba-inc.com, tglx@linutronix.de, ville.syrjala@linux.intel.com, x86@kernel.org
ci-upstream-kasan-gce-selinux-root	2018/12/17 13:25	upstream	7566ec39	def91db3	.config	log	report	syz	linux-kernel@vger.kernel.org, mingo@kernel.org, peterz@infradead.org
ci-upstream-bpf-next-kasan-gce	2018/06/29 08:57	bpf-next	509fda10	dba0b50e	.config	log	report	syz	anna.schumaker@netapp.com, bfields@fieldses.org, davem@davemloft.net, jlayton@kernel.org, linux-kernel@vger.kernel.org, linux-nfs@vger.kernel.org, netdev@vger.kernel.org, trond.myklebust@hammerspace.com
ci-upstream-linux-next-kasan-gce-root	2018/12/24 01:49	linux-next	6648e120	e3bd7ab8	.config	log	report	syz	bp@alien8.de, douly.fnst@cn.fujitsu.com, hpa@zytor.com, konrad.wilk@oracle.com, linux-kernel@vger.kernel.org, mingo@redhat.com, puwen@hygon.cn, rppt@linux.vnet.ibm.com, tglx@linutronix.de, ville.syrjala@linux.intel.com, wang.yi59@zte.com.cn, x86@kernel.org
ci-upstream-kasan-gce-selinux-root	2020/03/02 18:33	upstream	63623fd4	c88c7b75	.config	log	report		bp@alien8.de, hpa@zytor.com, linux-kernel@vger.kernel.org, mingo@redhat.com, peterz@infradead.org, tglx@linutronix.de, x86@kernel.org
ci-upstream-kasan-gce-smack-root	2019/04/19 13:30	upstream	6d906f99	b0e8efcb	.config	log	report		bp@alien8.de, hpa@zytor.com, konrad.wilk@oracle.com, len.brown@intel.com, linux-kernel@vger.kernel.org, mingo@redhat.com, nstange@suse.de, puwen@hygon.cn, tglx@linutronix.de, vbabka@suse.cz, wang.yi59@zte.com.cn, x86@kernel.org
ci-upstream-kasan-gce-smack-root	2019/03/17 03:36	upstream	a9dce667	bab43553	.config	log	report		bp@alien8.de, hpa@zytor.com, konrad.wilk@oracle.com, len.brown@intel.com, linux-kernel@vger.kernel.org, mingo@redhat.com, nstange@suse.de, puwen@hygon.cn, rostedt@goodmis.org, tglx@linutronix.de, wang.yi59@zte.com.cn, x86@kernel.org
ci-upstream-kasan-gce-root	2019/03/03 20:54	upstream	c027c7cf	1c0e457a	.config	log	report		linux-kernel@vger.kernel.org, mingo@kernel.org, peterz@infradead.org
ci-upstream-kasan-gce	2019/02/21 19:21	upstream	f6163d67	3133098b	.config	log	report		andy.shevchenko@gmail.com, bp@alien8.de, douly.fnst@cn.fujitsu.com, hpa@zytor.com, len.brown@intel.com, linux-kernel@vger.kernel.org, mingo@redhat.com, nstange@suse.de, puwen@hygon.cn, tglx@linutronix.de, wang.yi59@zte.com.cn, x86@kernel.org
ci-upstream-kasan-gce-selinux-root	2019/02/15 15:00	upstream	cb5b020a	f6f233c0	.config	log	report		linux-kernel@vger.kernel.org, mingo@kernel.org, peterz@infradead.org
ci-upstream-kasan-gce-smack-root	2019/01/26 22:52	upstream	ba606975	c73f090a	.config	log	report		linux-kernel@vger.kernel.org, mingo@kernel.org, peterz@infradead.org
ci-upstream-kasan-gce-root	2019/01/17 07:19	upstream	47bfa6d9	c2faf9b2	.config	log	report		linux-kernel@vger.kernel.org, mingo@kernel.org, peterz@infradead.org
ci-upstream-kasan-gce-root	2019/01/16 09:28	upstream	7939f8be	b47fa78d	.config	log	report		bp@alien8.de, douly.fnst@cn.fujitsu.com, hpa@zytor.com, konrad.wilk@oracle.com, len.brown@intel.com, linux-kernel@vger.kernel.org, mingo@redhat.com, puwen@hygon.cn, rppt@linux.vnet.ibm.com, tglx@linutronix.de, wang.yi59@zte.com.cn, x86@kernel.org
ci-upstream-kasan-gce-selinux-root	2018/12/17 10:38	upstream	7566ec39	def91db3	.config	log	report		andy.shevchenko@gmail.com, bp@alien8.de, douly.fnst@cn.fujitsu.com, hpa@zytor.com, linux-kernel@vger.kernel.org, mingo@redhat.com, nstange@suse.de, puwen@hygon.cn, qianyue.zj@alibaba-inc.com, tglx@linutronix.de, ville.syrjala@linux.intel.com, x86@kernel.org
ci-upstream-kasan-gce-386	2020/02/02 23:00	upstream	46d6b7be	93e5e335	.config	log	report		bp@alien8.de, hpa@zytor.com, linux-kernel@vger.kernel.org, mingo@redhat.com, peterz@infradead.org, tglx@linutronix.de, tony.luck@intel.com, x86@kernel.org
ci-qemu-upstream-386	2020/01/15 13:02	upstream	95e20af9	fa12bd3c	.config	log	report		bp@alien8.de, hpa@zytor.com, linux-kernel@vger.kernel.org, mingo@redhat.com, peterz@infradead.org, tglx@linutronix.de, tony.luck@intel.com, x86@kernel.org
ci-upstream-bpf-next-kasan-gce	2018/07/06 11:01	bpf-next	6fcf9b1d	18403e65	.config	log	report		anna.schumaker@netapp.com, bfields@fieldses.org, davem@davemloft.net, jlayton@kernel.org, linux-kernel@vger.kernel.org, linux-nfs@vger.kernel.org, netdev@vger.kernel.org, trond.myklebust@hammerspace.com
ci-upstream-bpf-next-kasan-gce	2018/07/06 02:34	bpf-next	6fcf9b1d	d3b2a0e2	.config	log	report		anna.schumaker@netapp.com, bfields@fieldses.org, davem@davemloft.net, jlayton@kernel.org, linux-kernel@vger.kernel.org, linux-nfs@vger.kernel.org, netdev@vger.kernel.org, trond.myklebust@hammerspace.com
ci-upstream-bpf-next-kasan-gce	2018/06/29 07:42	bpf-next	509fda10	dba0b50e	.config	log	report		anna.schumaker@netapp.com, bfields@fieldses.org, davem@davemloft.net, jlayton@kernel.org, linux-kernel@vger.kernel.org, linux-nfs@vger.kernel.org, netdev@vger.kernel.org, trond.myklebust@hammerspace.com
ci-upstream-bpf-next-kasan-gce	2018/06/26 20:14	bpf-next	651b4513	b0294c53	.config	log	report		anna.schumaker@netapp.com, bfields@fieldses.org, davem@davemloft.net, jlayton@kernel.org, linux-kernel@vger.kernel.org, linux-nfs@vger.kernel.org, netdev@vger.kernel.org, trond.myklebust@hammerspace.com
ci-upstream-bpf-next-kasan-gce	2018/06/24 04:17	bpf-next	f0dc7f9c	2064fc5c	.config	log	report		anna.schumaker@netapp.com, bfields@fieldses.org, davem@davemloft.net, jlayton@kernel.org, linux-kernel@vger.kernel.org, linux-nfs@vger.kernel.org, netdev@vger.kernel.org, trond.myklebust@hammerspace.com
ci-upstream-bpf-next-kasan-gce	2018/02/16 21:53	bpf-next	0b6b8a3d	c8b3f7c1	.config	log	report		anna.schumaker@netapp.com, bfields@fieldses.org, davem@davemloft.net, jlayton@kernel.org, linux-kernel@vger.kernel.org, linux-nfs@vger.kernel.org, netdev@vger.kernel.org, trond.myklebust@primarydata.com
ci-upstream-bpf-next-kasan-gce	2018/02/15 22:43	bpf-next	0b6b8a3d	c8b3f7c1	.config	log	report		anna.schumaker@netapp.com, bfields@fieldses.org, davem@davemloft.net, jlayton@kernel.org, linux-kernel@vger.kernel.org, linux-nfs@vger.kernel.org, netdev@vger.kernel.org, trond.myklebust@primarydata.com
ci-upstream-linux-next-kasan-gce-root	2019/01/19 00:38	linux-next	9673b4aa	2103a236	.config	log	report		bhe@redhat.com, bp@alien8.de, douly.fnst@cn.fujitsu.com, hpa@zytor.com, konrad.wilk@oracle.com, linux-kernel@vger.kernel.org, mingo@redhat.com, puwen@hygon.cn, tglx@linutronix.de, vbabka@suse.cz, x86@kernel.org
ci-upstream-linux-next-kasan-gce-root	2018/10/06 13:46	linux-next	12ffaa11	8b311eaf	.config	log	report		anna.schumaker@netapp.com, bfields@fieldses.org, davem@davemloft.net, jlayton@kernel.org, linux-kernel@vger.kernel.org, linux-nfs@vger.kernel.org, netdev@vger.kernel.org, trond.myklebust@hammerspace.com