syzbot


WARNING: ODEBUG bug in del_timer

Status: auto-closed as invalid on 2019/11/29 04:56
Reported-by: syzbot+2c2b927ed5968a945ac2@syzkaller.appspotmail.com
First crash: 1226d, last: 1226d
similar bugs (4):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 WARNING: ODEBUG bug in del_timer C inconclusive 74 926d 1336d 0/1 upstream: reported C repro on 2019/04/13 05:07
upstream WARNING: ODEBUG bug in del_timer (2) C 6 1667d 1668d 9/24 fixed on 2018/07/09 18:05
upstream WARNING: ODEBUG bug in del_timer (3) syz error error 46 1299d 1312d 0/24 auto-obsoleted due to no activity on 2022/09/06 02:49
upstream WARNING: ODEBUG bug in del_timer C 200 1668d 1685d 6/24 fixed on 2018/05/16 09:57

Sample crash report:
0 pages cma reserved
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
------------[ cut here ]------------
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
ODEBUG: assert_init not available (active state 0) object type: timer_list hint:           (null)
WARNING: CPU: 1 PID: 14492 at lib/debugobjects.c:325 debug_print_object+0x168/0x250 lib/debugobjects.c:325
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 14492 Comm: syz-executor.2 Not tainted 4.19.63 #37
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 panic+0x263/0x507 kernel/panic.c:185
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
3002 total pagecache pages
 __warn.cold+0x20/0x4a kernel/panic.c:540
 report_bug+0x263/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 fixup_bug arch/x86/kernel/traps.c:173 [inline]
 do_error_trap+0x204/0x360 arch/x86/kernel/traps.c:296
0 pages in swap cache
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:316
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1035
RIP: 0010:debug_print_object+0x168/0x250 lib/debugobjects.c:325
Code: dd 80 4e 82 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 80 4e 82 87 48 c7 c7 c0 43 82 87 e8 16 22 19 fe <0f> 0b 83 05 6b b5 17 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3
RSP: 0018:ffff8881b1446c70 EFLAGS: 00010086
RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8155d556 RDI: ffffed1036288d80
RBP: ffff8881b1446cb0 R08: ffff88803defa680 R09: ffffed1015d23ee3
R10: ffffed1015d23ee2 R11: ffff8880ae91f717 R12: 0000000000000001
R13: ffffffff887ac380 R14: ffffffff815b4ab0 R15: ffff8880484c6500
 debug_object_assert_init lib/debugobjects.c:694 [inline]
 debug_object_assert_init+0x23a/0x2f0 lib/debugobjects.c:665
Swap cache stats: add 0, delete 0, find 0/0
 debug_timer_assert_init kernel/time/timer.c:724 [inline]
 debug_assert_init kernel/time/timer.c:776 [inline]
 del_timer+0x7c/0x120 kernel/time/timer.c:1198
 try_to_grab_pending+0x2d7/0x710 kernel/workqueue.c:1223
 __cancel_work_timer+0xc4/0x520 kernel/workqueue.c:2966
Free swap  = 0kB
Total swap = 0kB
1965979 pages RAM
0 pages HighMem/MovableOnly
338856 pages reserved
 cancel_delayed_work_sync+0x1b/0x20 kernel/workqueue.c:3139
0 pages cma reserved
 batadv_nc_mesh_free+0x46/0x11e net/batman-adv/network-coding.c:1891
 batadv_mesh_free+0x82/0x170 net/batman-adv/main.c:242
 batadv_mesh_init+0x5f0/0x6c0 net/batman-adv/main.c:223
 batadv_softif_init_late+0xc0f/0xe90 net/batman-adv/soft-interface.c:863
 register_netdevice+0x2fd/0xff0 net/core/dev.c:8462
Unreclaimable slab info:
Name                      Used          Total
 rtnl_newlink+0x140c/0x1610 net/core/rtnetlink.c:3124
pid_2                     40KB        160KB
batadv_tt_change_cache          7KB         15KB
batadv_tl_cache            9KB         20KB
TIPC                      31KB         43KB
SCTPv6                    30KB         55KB
DCCPv6                    17KB         43KB
DCCP                      23KB         41KB
 rtnetlink_rcv_msg+0x463/0xb00 net/core/rtnetlink.c:4747
 netlink_rcv_skb+0x17d/0x460 net/netlink/af_netlink.c:2454
bridge_fdb_cache          19KB         35KB
fib6_nodes               200KB        256KB
 rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:4765
 netlink_unicast_kernel net/netlink/af_netlink.c:1317 [inline]
 netlink_unicast+0x537/0x720 net/netlink/af_netlink.c:1343
 netlink_sendmsg+0x8ae/0xd70 net/netlink/af_netlink.c:1908
ip6_dst_cache            837KB        941KB
RAWv6                    144KB        156KB
 sock_sendmsg_nosec net/socket.c:622 [inline]
 sock_sendmsg+0xd7/0x130 net/socket.c:632
 __sys_sendto+0x262/0x380 net/socket.c:1787
UDPv6                      3KB          3KB
TCPv6                     29KB         35KB
nf_conntrack               0KB          3KB
sd_ext_cdb                 0KB          7KB
 __do_sys_sendto net/socket.c:1799 [inline]
 __se_sys_sendto net/socket.c:1795 [inline]
 __x64_sys_sendto+0xe1/0x1a0 net/socket.c:1795
 do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x413673
Code: ff 0f 83 b0 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 1d 2c 66 00 00 75 17 49 89 ca b8 2c 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 81 19 00 00 c3 48 83 ec 08 e8 87 fa ff ff
RSP: 002b:00007ffe27fc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000413673
RDX: 000000000000003c RSI: 0000000000a70070 RDI: 0000000000000003
RBP: 00007ffe27fc5178 R08: 00007ffe27fc5040 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
R13: 00000000004bea8a R14: 00007ffe27fc5170 R15: 00000000004bea83
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-19 2019/08/01 04:55 linux-4.19.y 9a9de33a9dfa c692b5bd .config log report
* Struck through repros no longer work on HEAD.