syzbot


WARNING in cancel_delayed_work

Status: upstream: reported C repro on 2020/07/31 03:13
Reported-by: syzbot+35e70efb794757d7e175@syzkaller.appspotmail.com
First crash: 789d, last: 103d

Cause bisection: introduced by (bisect log) :
commit fbd05e4a6e82fd573d3aa79e284e424b8d78c149
Author: Luca Coelho <luciano.coelho@intel.com>
Date: Thu Sep 15 15:15:09 2016 +0000

  cfg80211: add helper to find an IE that matches a byte-array

Crash: no output from test machine (log)
Repro: C syz .config

Fix bisection: fixed by (bisect log) :
commit 43016d02cf6e46edfc4696452251d34bba0c0435
Author: Florian Westphal <fw@strlen.de>
Date: Mon May 3 11:51:15 2021 +0000

  netfilter: arptables: use pernet ops struct during unregister


Sample crash report:
------------[ cut here ]------------
ODEBUG: assert_init not available (active state 0) object type: timer_list hint: 0x0
WARNING: CPU: 0 PID: 3618 at lib/debugobjects.c:505 debug_print_object lib/debugobjects.c:502 [inline]
WARNING: CPU: 0 PID: 3618 at lib/debugobjects.c:505 debug_object_assert_init+0x1fa/0x250 lib/debugobjects.c:892
Modules linked in:
CPU: 0 PID: 3618 Comm: syz-executor212 Not tainted 5.19.0-rc2-syzkaller-00117-g47700948a4ab #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:debug_print_object lib/debugobjects.c:502 [inline]
RIP: 0010:debug_object_assert_init+0x1fa/0x250 lib/debugobjects.c:892
Code: e8 ab 62 a5 fd 4c 8b 45 00 48 c7 c7 00 95 e9 8a 48 c7 c6 00 92 e9 8a 48 c7 c2 a0 96 e9 8a 31 c9 49 89 d9 31 c0 e8 56 f3 1a fd <0f> 0b ff 05 aa 88 ce 09 48 83 c5 38 48 89 e8 48 c1 e8 03 42 80 3c
RSP: 0018:ffffc900030778d8 EFLAGS: 00010046
RAX: c03f03ab9b6e8400 RBX: 0000000000000000 RCX: ffff888025d10000
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffffffff8a8f6540 R08: ffffffff816be63d R09: ffffed1017344f14
R10: ffffed1017344f14 R11: 1ffff11017344f13 R12: dffffc0000000000
R13: ffff88814586e200 R14: 0000000000000002 R15: ffffffff9176ea18
FS:  0000555555786300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005582437720b0 CR3: 000000001ef05000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 debug_timer_assert_init kernel/time/timer.c:792 [inline]
 debug_assert_init kernel/time/timer.c:837 [inline]
 del_timer+0xa5/0x3d0 kernel/time/timer.c:1257
 try_to_grab_pending+0x151/0xba0 kernel/workqueue.c:1275
 __cancel_work kernel/workqueue.c:3250 [inline]
 cancel_delayed_work+0xb3/0x380 kernel/workqueue.c:3279
 l2cap_clear_timer include/net/bluetooth/l2cap.h:883 [inline]
 l2cap_chan_del+0x41c/0x610 net/bluetooth/l2cap_core.c:665
 l2cap_sock_shutdown+0x39f/0x860 net/bluetooth/l2cap_sock.c:1377
 l2cap_sock_release+0x68/0x1c0 net/bluetooth/l2cap_sock.c:1420
 __sock_release net/socket.c:650 [inline]
 sock_close+0xd7/0x260 net/socket.c:1365
 __fput+0x3b9/0x820 fs/file_table.c:317
 task_work_run+0x146/0x1c0 kernel/task_work.c:177
 ptrace_notify+0x29a/0x340 kernel/signal.c:2353
 ptrace_report_syscall include/linux/ptrace.h:420 [inline]
 ptrace_report_syscall_exit include/linux/ptrace.h:482 [inline]
 syscall_exit_work+0x8c/0xe0 kernel/entry/common.c:249
 syscall_exit_to_user_mode_prepare+0x62/0x80 kernel/entry/common.c:276
 __syscall_exit_to_user_mode_work kernel/entry/common.c:281 [inline]
 syscall_exit_to_user_mode+0xa/0x60 kernel/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x46/0xb0
RIP: 0033:0x7f88e4eb505b
Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
RSP: 002b:00007fff1cc40e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007f88e4eb505b
RDX: ffffffffffffffb8 RSI: 0000000020000000 RDI: 0000000000000004
RBP: 0000000000000003 R08: 0000000000000000 R09: 000000ff00000001
R10: 000000ff00000001 R11: 0000000000000293 R12: 00005555557862b8
R13: 0000000000000072 R14: 00007fff1cc40ee0 R15: 0000000000000003
 </TASK>

Crashes (611):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-smack-root 2022/06/17 18:56 upstream 47700948a4ab cb58b3b2 .config log report syz C WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2020/08/22 22:31 upstream c3d8f220d012 1da71ab0 .config log report syz C
ci-upstream-kasan-gce-smack-root 2020/08/05 06:41 upstream c0842fbc1b18 80a06902 .config log report syz C
ci-upstream-kasan-gce-smack-root 2020/08/02 13:18 upstream ac3a0c847296 63a73341 .config log report syz C
ci-upstream-kasan-gce-smack-root 2020/07/31 00:48 upstream 83bdc7275e62 8df85ed9 .config log report syz C
ci-upstream-kasan-gce-smack-root 2020/07/31 00:28 upstream 83bdc7275e62 8df85ed9 .config log report syz C
ci-upstream-kasan-gce-smack-root 2022/02/23 01:55 upstream 917bbdb107f8 6e821dbf .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/10/13 23:37 upstream 348949d9a444 5462d470 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/10/04 19:54 upstream 84b3e42564ac ce697b49 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/08 17:02 upstream d2b6f8a17919 bc5434be .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/08 14:17 upstream d2b6f8a17919 bc5434be .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/08 12:15 upstream d2b6f8a17919 bc5434be .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/08 11:55 upstream d2b6f8a17919 bc5434be .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/08 10:37 upstream d2b6f8a17919 bc5434be .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/08 05:29 upstream d2b6f8a17919 bc5434be .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/08 04:25 upstream d2b6f8a17919 bc5434be .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/07 19:10 upstream d2b6f8a17919 f6da8120 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/07 17:12 upstream d2b6f8a17919 f6da8120 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/07 17:12 upstream d2b6f8a17919 f6da8120 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/07 15:20 upstream d2b6f8a17919 f6da8120 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/07 08:58 upstream d2b6f8a17919 06585184 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/07 07:40 upstream d2b6f8a17919 06585184 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/07 03:08 upstream d2b6f8a17919 06585184 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/07 02:00 upstream d2b6f8a17919 06585184 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/06 19:50 upstream d2b6f8a17919 06585184 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/06 14:46 upstream d2b6f8a17919 06c27ff5 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/06 13:18 upstream d2b6f8a17919 06c27ff5 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/06 11:45 upstream d2b6f8a17919 06c27ff5 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/06 10:36 upstream d2b6f8a17919 06c27ff5 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/06 08:38 upstream d2b6f8a17919 06c27ff5 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/06 07:04 upstream d2b6f8a17919 06c27ff5 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/06 05:05 upstream d2b6f8a17919 06c27ff5 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/05 23:48 upstream d2b6f8a17919 06c27ff5 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/05 18:03 upstream d2b6f8a17919 06c27ff5 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/05 14:51 upstream d2b6f8a17919 06c27ff5 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/05 12:39 upstream d2b6f8a17919 06c27ff5 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/05 08:19 upstream d2b6f8a17919 06c27ff5 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/05 04:55 upstream d2b6f8a17919 06c27ff5 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/05 03:46 upstream d2b6f8a17919 06c27ff5 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/04 19:06 upstream d2b6f8a17919 09efdd63 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/04 17:23 upstream d2b6f8a17919 09efdd63 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/04 16:11 upstream d2b6f8a17919 09efdd63 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/04 13:36 upstream d2b6f8a17919 09efdd63 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/04 13:30 upstream d2b6f8a17919 09efdd63 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/04 09:52 upstream d2b6f8a17919 09efdd63 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/04 01:44 upstream d2b6f8a17919 ad61f371 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/05/03 14:26 upstream d2b6f8a17919 77e2b668 .config log report info WARNING in cancel_delayed_work
ci-upstream-kasan-gce-smack-root 2021/01/15 09:46 upstream 5ee88057889b 65a7a854 .config log report info
* Struck through repros no longer work on HEAD.