syzbot


WARNING: ODEBUG bug in usb_unbind_interface (2)

Status: upstream: reported on 2024/03/21 02:42
Subsystems: usb
[Documentation on labels]
Reported-by: syzbot+9665bf55b1c828bbcd8a@syzkaller.appspotmail.com
First crash: 122d, last: 22d
Discussions (2)
Title Replies (including bot) Last reply
[PATCH net-next] usbnet: fix cyclical race on disconnect with work queue 7 (7) 2024/03/31 17:03
[syzbot] [usb?] WARNING: ODEBUG bug in usb_unbind_interface (2) 0 (1) 2024/03/21 02:42
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 WARNING: ODEBUG bug in usb_unbind_interface 1 368d 368d 0/3 auto-obsoleted due to no activity on 2023/10/23 02:13
upstream WARNING: ODEBUG bug in usb_unbind_interface net usb 1 653d 649d 0/27 auto-obsoleted due to no activity on 2023/01/31 14:08
linux-6.1 WARNING: ODEBUG bug in usb_unbind_interface (2) 1 19d 19d 0/3 upstream: reported on 2024/06/28 11:53
linux-5.15 WARNING: ODEBUG bug in usb_unbind_interface origin:lts-only syz inconclusive 1 331d 331d 0/3 upstream: reported syz repro on 2023/08/21 04:40

Sample crash report:
------------[ cut here ]------------
ODEBUG: free active (active state 0) object: ffff88802d8f9180 object type: work_struct hint: usbnet_deferred_kevent+0x0/0xb90 drivers/net/usb/usbnet.c:1589
WARNING: CPU: 0 PID: 5137 at lib/debugobjects.c:517 debug_print_object+0x17a/0x1f0 lib/debugobjects.c:514
Modules linked in:
CPU: 0 PID: 5137 Comm: kworker/0:6 Not tainted 6.10.0-rc5-syzkaller-00012-g626737a5791b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Workqueue: usb_hub_wq hub_event
RIP: 0010:debug_print_object+0x17a/0x1f0 lib/debugobjects.c:514
Code: e8 fb a5 4a fd 4c 8b 0b 48 c7 c7 80 21 1f 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 6b 72 aa fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 1c 71 fe 0a 48 83 c4 10 5b 41 5c 41 5d 41 5e 41
RSP: 0018:ffffc90004657258 EFLAGS: 00010282
RAX: e38f237ffaa51500 RBX: ffffffff8bc9e420 RCX: 0000000000040000
RDX: ffffc900120b9000 RSI: 000000000002a697 RDI: 000000000002a698
RBP: ffffffff8c1f2300 R08: ffffffff81585742 R09: fffffbfff1c39994
R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 0000000000000000
R13: ffffffff8c1f2218 R14: dffffc0000000000 R15: ffff88802d8f9180
FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbea30cfd38 CR3: 0000000028f36000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __debug_check_no_obj_freed lib/debugobjects.c:989 [inline]
 debug_check_no_obj_freed+0x45b/0x580 lib/debugobjects.c:1019
 slab_free_hook mm/slub.c:2163 [inline]
 slab_free mm/slub.c:4437 [inline]
 kfree+0x10f/0x360 mm/slub.c:4558
 device_release+0x99/0x1c0
 kobject_cleanup lib/kobject.c:689 [inline]
 kobject_release lib/kobject.c:720 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x22f/0x480 lib/kobject.c:737
 usb_unbind_interface+0x25e/0x940 drivers/usb/core/driver.c:461
 device_remove drivers/base/dd.c:568 [inline]
 __device_release_driver drivers/base/dd.c:1270 [inline]
 device_release_driver_internal+0x503/0x7c0 drivers/base/dd.c:1293
 bus_remove_device+0x34f/0x420 drivers/base/bus.c:574
 device_del+0x57a/0x9b0 drivers/base/core.c:3868
 usb_disable_device+0x3bf/0x850 drivers/usb/core/message.c:1418
 usb_disconnect+0x340/0x950 drivers/usb/core/hub.c:2304
 hub_port_connect drivers/usb/core/hub.c:5361 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x1eb9/0x5150 drivers/usb/core/hub.c:5903
 process_one_work kernel/workqueue.c:3231 [inline]
 process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
 worker_thread+0x86d/0xd70 kernel/workqueue.c:3393
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

Crashes (21):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/06/25 04:24 upstream 626737a5791b 215eef4a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING: ODEBUG bug in usb_unbind_interface
2024/06/25 04:21 upstream 626737a5791b 215eef4a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING: ODEBUG bug in usb_unbind_interface
2024/06/25 04:16 upstream 626737a5791b 215eef4a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING: ODEBUG bug in usb_unbind_interface
2024/06/04 01:01 upstream f06ce441457d 0aba2352 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING: ODEBUG bug in usb_unbind_interface
2024/05/19 20:04 upstream 61307b7be41a c0f1611a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING: ODEBUG bug in usb_unbind_interface
2024/05/09 20:21 upstream 45db3ab70092 de979bc2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in usb_unbind_interface
2024/05/09 20:21 upstream 45db3ab70092 de979bc2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in usb_unbind_interface
2024/04/04 02:40 upstream 480e035fc4c7 51c4dcff .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in usb_unbind_interface
2024/04/02 21:14 upstream 480e035fc4c7 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in usb_unbind_interface
2024/04/01 16:29 upstream 480e035fc4c7 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in usb_unbind_interface
2024/03/30 02:39 upstream 480e035fc4c7 c52bcb23 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in usb_unbind_interface
2024/03/29 12:48 upstream fe46a7dd189e c52bcb23 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING: ODEBUG bug in usb_unbind_interface
2024/03/28 09:44 upstream 480e035fc4c7 454571b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in usb_unbind_interface
2024/03/24 18:56 upstream 480e035fc4c7 0ea90952 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in usb_unbind_interface
2024/03/23 23:26 upstream 480e035fc4c7 0ea90952 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in usb_unbind_interface
2024/03/19 17:29 upstream 480e035fc4c7 baa80228 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in usb_unbind_interface
2024/03/18 12:55 upstream 480e035fc4c7 d615901c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in usb_unbind_interface
2024/03/18 10:56 upstream 480e035fc4c7 d615901c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in usb_unbind_interface
2024/03/18 01:31 upstream 480e035fc4c7 d615901c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in usb_unbind_interface
2024/03/17 02:33 upstream 480e035fc4c7 d615901c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING: ODEBUG bug in usb_unbind_interface
2024/03/30 16:23 linux-next a6bd6c933339 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING: ODEBUG bug in usb_unbind_interface
* Struck through repros no longer work on HEAD.