WARNING: ODEBUG bug in netdev

WARNING: ODEBUG bug in netdev_freemem
Status: upstream: reported syz repro on 2019/04/17 11:08
Reported-by: syzbot+fd425fba4411ecc3ca61@syzkaller.appspotmail.com
First crash: 840d, last: 531d

Fix bisection: failed (bisect log)

similar bugs (3):
Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
linux-4.14	WARNING: ODEBUG bug in netdev_freemem				179	530d	827d	0/1	auto-closed as invalid on 2020/06/20 15:09
upstream	WARNING: ODEBUG bug in netdev_freemem	syz	done		1042	782d	947d	13/22	fixed on 2019/06/14 18:22
upstream	WARNING: ODEBUG bug in netdev_freemem (2)	syz	error	error	1332	143d	772d	0/22	upstream: reported syz repro on 2019/06/24 08:53

Sample crash report:

bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves
------------[ cut here ]------------
ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x90 kernel/workqueue.c:4941
WARNING: CPU: 0 PID: 23 at lib/debugobjects.c:325 debug_print_object+0x168/0x250 lib/debugobjects.c:325
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 23 Comm: kworker/u4:1 Not tainted 4.19.91-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x197/0x210 lib/dump_stack.c:118
 panic+0x26a/0x50e kernel/panic.c:186
 __warn.cold+0x20/0x53 kernel/panic.c:541
 report_bug+0x263/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 fixup_bug arch/x86/kernel/traps.c:173 [inline]
 do_error_trap+0x204/0x360 arch/x86/kernel/traps.c:296
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:316
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1037
RIP: 0010:debug_print_object+0x168/0x250 lib/debugobjects.c:325
Code: dd e0 63 ea 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd e0 63 ea 87 48 c7 c7 20 59 ea 87 e8 a6 46 dc fd <0f> 0b 83 05 ab 96 6a 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3
RSP: 0018:ffff8880a996f838 EFLAGS: 00010086
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8155bb16 RDI: ffffed101532def9
RBP: ffff8880a996f878 R08: ffff8880a995a600 R09: ffffed1015d03ee3
R10: ffffed1015d03ee2 R11: ffff8880ae81f717 R12: 0000000000000001
R13: ffffffff88fa43a0 R14: ffffffff815b30d0 R15: ffff888084763020
 __debug_check_no_obj_freed lib/debugobjects.c:785 [inline]
 debug_check_no_obj_freed+0x29f/0x464 lib/debugobjects.c:817
 kfree+0xbd/0x220 mm/slab.c:3821
 kvfree+0x61/0x70 mm/util.c:452
 netdev_freemem+0x4c/0x60 net/core/dev.c:8914
 netdev_release+0x86/0xb0 net/core/net-sysfs.c:1645
 device_release+0x7b/0x210 drivers/base/core.c:892
 kobject_cleanup lib/kobject.c:662 [inline]
 kobject_release lib/kobject.c:691 [inline]
 kref_put include/linux/kref.h:70 [inline]
 kobject_put.cold+0x289/0x2e6 lib/kobject.c:708
 netdev_run_todo+0x53b/0x7a0 net/core/dev.c:8819
 rtnl_unlock+0xe/0x10 net/core/rtnetlink.c:117
 default_device_exit_batch+0x358/0x410 net/core/dev.c:9602
 ops_exit_list.isra.0+0xfc/0x150 net/core/net_namespace.c:156
 cleanup_net+0x404/0x960 net/core/net_namespace.c:553
 process_one_work+0x989/0x1750 kernel/workqueue.c:2153
 worker_thread+0x98/0xe40 kernel/workqueue.c:2296
 kthread+0x354/0x420 kernel/kthread.c:246
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415

======================================================

Crashes (243):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro
ci2-linux-4-19	2019/12/27 15:10	linux-4.19.y	672481c2deff	be5c2c81	.config	log	report	syz
ci2-linux-4-19	2019/07/07 02:23	linux-4.19.y	1a0592436669	f62e1e85	.config	log	report	syz
ci2-linux-4-19	2019/06/05 07:12	linux-4.19.y	e109a984cf38	bfb4a51e	.config	log	report	syz
ci2-linux-4-19	2020/02/20 10:57	linux-4.19.y	4fccc2503536	b690a6e3	.config	log	report
ci2-linux-4-19	2020/02/19 20:54	linux-4.19.y	4fccc2503536	47fae6e9	.config	log	report
ci2-linux-4-19	2020/02/06 21:14	linux-4.19.y	b499cf4b3a90	5be3a391	.config	log	report
ci2-linux-4-19	2020/02/04 17:28	linux-4.19.y	32ee7492f104	93e5e335	.config	log	report
ci2-linux-4-19	2020/01/31 19:08	linux-4.19.y	7cdefde351b6	0eb59c27	.config	log	report
ci2-linux-4-19	2020/01/31 12:34	linux-4.19.y	7cdefde351b6	5ed23f9a	.config	log	report
ci2-linux-4-19	2020/01/29 02:29	linux-4.19.y	88d6de67e390	c8e81ce4	.config	log	report
ci2-linux-4-19	2020/01/27 21:08	linux-4.19.y	88d6de67e390	56cd6c9b	.config	log	report
ci2-linux-4-19	2020/01/26 16:30	linux-4.19.y	d183c8e2647a	dd56146d	.config	log	report
ci2-linux-4-19	2020/01/24 15:33	linux-4.19.y	d183c8e2647a	2e95ab33	.config	log	report
ci2-linux-4-19	2020/01/22 10:03	linux-4.19.y	dc4ba5be1bab	8eda0b95	.config	log	report
ci2-linux-4-19	2020/01/20 15:46	linux-4.19.y	dc4ba5be1bab	c40da18c	.config	log	report
ci2-linux-4-19	2020/01/20 08:37	linux-4.19.y	dc4ba5be1bab	0342f8c7	.config	log	report
ci2-linux-4-19	2020/01/19 05:11	linux-4.19.y	dc4ba5be1bab	bc8bc756	.config	log	report
ci2-linux-4-19	2020/01/18 18:47	linux-4.19.y	dc4ba5be1bab	3de7aabb	.config	log	report
ci2-linux-4-19	2020/01/15 17:43	linux-4.19.y	db5b9190ff82	f9b69507	.config	log	report
ci2-linux-4-19	2020/01/15 15:45	linux-4.19.y	db5b9190ff82	069a5a44	.config	log	report
ci2-linux-4-19	2020/01/15 11:36	linux-4.19.y	db5b9190ff82	fa12bd3c	.config	log	report
ci2-linux-4-19	2020/01/13 06:53	linux-4.19.y	dcd888983542	53faa9fe	.config	log	report
ci2-linux-4-19	2020/01/12 10:54	linux-4.19.y	cb1f9a169a0e	31290a45	.config	log	report
ci2-linux-4-19	2020/01/09 03:02	linux-4.19.y	3d40d7117e35	ddc3e859	.config	log	report
ci2-linux-4-19	2020/01/08 18:38	linux-4.19.y	3d40d7117e35	ddc3e859	.config	log	report
ci2-linux-4-19	2020/01/05 22:19	linux-4.19.y	3d40d7117e35	d646e21f	.config	log	report
ci2-linux-4-19	2020/01/01 11:34	linux-4.19.y	c7ecf3e3a71c	25a0186e	.config	log	report
ci2-linux-4-19	2020/01/01 03:31	linux-4.19.y	c7ecf3e3a71c	25a0186e	.config	log	report
ci2-linux-4-19	2019/12/31 22:22	linux-4.19.y	c7ecf3e3a71c	25a0186e	.config	log	report
ci2-linux-4-19	2019/12/31 16:08	linux-4.19.y	c7ecf3e3a71c	7f117e28	.config	log	report
ci2-linux-4-19	2019/12/31 08:00	linux-4.19.y	672481c2deff	7f117e28	.config	log	report
ci2-linux-4-19	2019/12/28 15:58	linux-4.19.y	672481c2deff	af6b8ef8	.config	log	report
ci2-linux-4-19	2019/12/28 08:01	linux-4.19.y	672481c2deff	be5c2c81	.config	log	report
ci2-linux-4-19	2019/12/28 06:20	linux-4.19.y	672481c2deff	be5c2c81	.config	log	report
ci2-linux-4-19	2019/12/27 14:20	linux-4.19.y	672481c2deff	be5c2c81	.config	log	report
ci2-linux-4-19	2019/12/27 01:14	linux-4.19.y	672481c2deff	be5c2c81	.config	log	report
ci2-linux-4-19	2019/12/26 17:43	linux-4.19.y	672481c2deff	be5c2c81	.config	log	report
ci2-linux-4-19	2019/12/26 06:42	linux-4.19.y	672481c2deff	be5c2c81	.config	log	report
ci2-linux-4-19	2019/12/26 03:59	linux-4.19.y	672481c2deff	be5c2c81	.config	log	report
ci2-linux-4-19	2019/12/25 16:26	linux-4.19.y	672481c2deff	be5c2c81	.config	log	report
ci2-linux-4-19	2019/12/25 09:33	linux-4.19.y	672481c2deff	be5c2c81	.config	log	report
ci2-linux-4-19	2019/12/25 03:30	linux-4.19.y	672481c2deff	be5c2c81	.config	log	report
ci2-linux-4-19	2019/12/22 23:53	linux-4.19.y	672481c2deff	8b967267	.config	log	report
ci2-linux-4-19	2019/12/22 19:49	linux-4.19.y	672481c2deff	8b967267	.config	log	report
ci2-linux-4-19	2019/12/22 11:27	linux-4.19.y	672481c2deff	8b967267	.config	log	report
ci2-linux-4-19	2019/12/21 22:17	linux-4.19.y	672481c2deff	bc586918	.config	log	report
ci2-linux-4-19	2019/04/17 10:07	linux-4.19.y	4b0e041c9dad	b0e8efcb	.config	log	report