bisecting cause commit starting from 74522e7baae2561870ea8ddf09dc6a126458cd7b building syzkaller on 749688d22abef3f3cb9a0480e15c19a3f2ed8e13 testing commit 74522e7baae2561870ea8ddf09dc6a126458cd7b with gcc (GCC) 8.1.0 kernel signature: 329bb44cbbdd0cb00372a5577592ed1d2dfdb2f2178c043007a998a7a07aa641 run #0: crashed: WARNING: ODEBUG bug in tcindex_destroy_work run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK testing release v5.5 testing commit d5226fa6dbae0569ee43ecfc08bdcd6770fc4755 with gcc (GCC) 8.1.0 kernel signature: 32cd44a4bb6b249c5ee96bd48c20f40ec913b8c3303abe08ba64d22d02a597b5 run #0: crashed: WARNING: ODEBUG bug in tcindex_destroy_work run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK testing release v5.4 testing commit 219d54332a09e8d8741c1e1982f5eae56099de85 with gcc (GCC) 8.1.0 kernel signature: f69bd42413b44d813dd1498abdf42632f1a421122aa7c529f41825fe17ab3aea run #0: crashed: WARNING: ODEBUG bug in tcindex_destroy_work run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK testing release v5.3 testing commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8 with gcc (GCC) 8.1.0 kernel signature: d0860bfe929d62a0b952aa4fc284def850f7a2487e82aa5831044085a7dcbd98 all runs: OK # git bisect start 219d54332a09e8d8741c1e1982f5eae56099de85 4d856f72c10ecb060868ed10ff1b1453943fc6c8 Bisecting: 7882 revisions left to test after this (roughly 13 steps) [a9f8b38a071b468276a243ea3ea5a0636e848cf2] Merge tag 'for-linus-5.4-1' of git://github.com/cminyard/linux-ipmi testing commit a9f8b38a071b468276a243ea3ea5a0636e848cf2 with gcc (GCC) 8.1.0 kernel signature: 80324183627a136c6300bbc2664cbbaa52a983e4d4e97c1bfd9e6d209ddc2e36 run #0: crashed: WARNING: ODEBUG bug in tcindex_destroy_work run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad a9f8b38a071b468276a243ea3ea5a0636e848cf2 Bisecting: 3920 revisions left to test after this (roughly 12 steps) [fe38bd6862074c0a2b9be7f31f043aaa70b2af5f] Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm testing commit fe38bd6862074c0a2b9be7f31f043aaa70b2af5f with gcc (GCC) 8.1.0 kernel signature: 341288790f7a5818272bdd05d1f595227df40ace51fce965c1b4c85920149e41 all runs: OK # git bisect good fe38bd6862074c0a2b9be7f31f043aaa70b2af5f Bisecting: 1962 revisions left to test after this (roughly 11 steps) [069841ef8293697e951c34f9a45601b77fb541d7] Merge branch '40GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue testing commit 069841ef8293697e951c34f9a45601b77fb541d7 with gcc (GCC) 8.1.0 kernel signature: 17ee9b31a8a111698d2cc820a109f5fe80016c2f17d50fcb5397a3885f40194f all runs: OK # git bisect good 069841ef8293697e951c34f9a45601b77fb541d7 Bisecting: 939 revisions left to test after this (roughly 10 steps) [6cfae0c26b21dce323fe8799b66cf4bc996e3565] Merge tag 'char-misc-5.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc testing commit 6cfae0c26b21dce323fe8799b66cf4bc996e3565 with gcc (GCC) 8.1.0 kernel signature: 5f8ed9893de1dff136702667f271f04ce702663d068edc9794a7a56e3c2c4c44 run #0: crashed: WARNING: ODEBUG bug in tcindex_destroy_work run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 6cfae0c26b21dce323fe8799b66cf4bc996e3565 Bisecting: 564 revisions left to test after this (roughly 9 steps) [3fb73eddba106ad2a265a5c5c29d14b0ed6aaee1] Staging: gasket: Use temporaries to reduce line length. testing commit 3fb73eddba106ad2a265a5c5c29d14b0ed6aaee1 with gcc (GCC) 8.1.0 kernel signature: 223330a07bae6791bdea8b4c4e1007d1a512e51276b19511bc24a9ecaada585b all runs: OK # git bisect good 3fb73eddba106ad2a265a5c5c29d14b0ed6aaee1 Bisecting: 342 revisions left to test after this (roughly 8 steps) [c6b48dad92aedaa9bdc013ee495cb5b1bbdf1f11] Merge tag 'usb-5.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb testing commit c6b48dad92aedaa9bdc013ee495cb5b1bbdf1f11 with gcc (GCC) 8.1.0 kernel signature: b49b646d1ffcbf3083cee8a16b8238a6e4528d152565efdf0ee7d84e59cf33ba all runs: OK # git bisect good c6b48dad92aedaa9bdc013ee495cb5b1bbdf1f11 Bisecting: 171 revisions left to test after this (roughly 8 steps) [feef87e9118fa74f61ae9df206f2fa4fa76a7f7d] firmware: rsu: document sysfs interface testing commit feef87e9118fa74f61ae9df206f2fa4fa76a7f7d with gcc (GCC) 8.1.0 kernel signature: cebabe33425172a83d46dfe6d1ac0ff7222a194b4374263fcb8025746471562f all runs: OK # git bisect good feef87e9118fa74f61ae9df206f2fa4fa76a7f7d Bisecting: 85 revisions left to test after this (roughly 7 steps) [a16c4c5a9cb6368a08c457b6b2dc0be25958dfc0] serial: sh-sci: Don't check for mctrl_gpio_to_gpiod() returning error testing commit a16c4c5a9cb6368a08c457b6b2dc0be25958dfc0 with gcc (GCC) 8.1.0 kernel signature: f8d5f55144012a2ffd1daf17be3a2e1fd04ab94367d30d7944794800826d47c6 all runs: OK # git bisect good a16c4c5a9cb6368a08c457b6b2dc0be25958dfc0 Bisecting: 42 revisions left to test after this (roughly 6 steps) [9b4a66fd21b0735525648ce299f6834ef806a5d2] Merge tag 'misc-habanalabs-next-2019-09-05' of git://people.freedesktop.org/~gabbayo/linux into char-misc-next testing commit 9b4a66fd21b0735525648ce299f6834ef806a5d2 with gcc (GCC) 8.1.0 kernel signature: e287858c630137ca831ba0fbbcc30e63d4b5d4d5df8e944ad6e7882f6a38f62f run #0: crashed: WARNING: ODEBUG bug in tcindex_destroy_work run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 9b4a66fd21b0735525648ce299f6834ef806a5d2 Bisecting: 21 revisions left to test after this (roughly 5 steps) [02e921e42b277c632ebdce355cc22d145944e968] habanalabs: show the process context dram usage testing commit 02e921e42b277c632ebdce355cc22d145944e968 with gcc (GCC) 8.1.0 kernel signature: abe47535456544f0eb15a05635c8c28e3945474a31365f535c601b45f70a9b86 run #0: crashed: WARNING: ODEBUG bug in tcindex_destroy_work run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 02e921e42b277c632ebdce355cc22d145944e968 Bisecting: 10 revisions left to test after this (roughly 3 steps) [836e9494f4485127a5b505ae57e4387bea8b53c4] pcmcia/i82092: Refactored dprintk macro for dev_dbg(). testing commit 836e9494f4485127a5b505ae57e4387bea8b53c4 with gcc (GCC) 8.1.0 kernel signature: 2042d547a8d9dde7cf3a755b48e2b6ad44fa0d8fe79f1a6a1dcb280514a2b641 run #0: crashed: WARNING: ODEBUG bug in tcindex_destroy_work run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 836e9494f4485127a5b505ae57e4387bea8b53c4 Bisecting: 4 revisions left to test after this (roughly 2 steps) [5672ff4dc3898b6b74c114de2f53e667ab5a0327] misc: fastrpc: fix double refcounting on dmabuf testing commit 5672ff4dc3898b6b74c114de2f53e667ab5a0327 with gcc (GCC) 8.1.0 kernel signature: 6480caf2fc8ec0717f3db93bb283ed0af427b127f531168b6c37fc613b9fdf51 all runs: OK # git bisect good 5672ff4dc3898b6b74c114de2f53e667ab5a0327 Bisecting: 2 revisions left to test after this (roughly 1 step) [13c1d4b30e52e8d79b0e01ae3894cf8399572e1d] toshiba: Add correct printk log level while emitting error log testing commit 13c1d4b30e52e8d79b0e01ae3894cf8399572e1d with gcc (GCC) 8.1.0 kernel signature: d7cddf85b6bfa95307b03610cc7ba74f4a64348a7e161cfe436278af124562ce all runs: OK # git bisect good 13c1d4b30e52e8d79b0e01ae3894cf8399572e1d Bisecting: 0 revisions left to test after this (roughly 1 step) [ef9ae0c58bd9bc3fc80054ac09ef993a07d9e1a3] uio: Documentation: Add information on using uio_pdrv_genirq with DT testing commit ef9ae0c58bd9bc3fc80054ac09ef993a07d9e1a3 with gcc (GCC) 8.1.0 kernel signature: 5c1bdd15743e43b468a857bdf3fc6449784804b96c808737d18f2d18bf97817a all runs: OK # git bisect good ef9ae0c58bd9bc3fc80054ac09ef993a07d9e1a3 836e9494f4485127a5b505ae57e4387bea8b53c4 is the first bad commit commit 836e9494f4485127a5b505ae57e4387bea8b53c4 Author: Adam Zerella Date: Sun Aug 25 15:35:10 2019 +1000 pcmcia/i82092: Refactored dprintk macro for dev_dbg(). As suggested in https://kernelnewbies.org/KernelJanitors/Todo this patch replaces the outdated macro of DPRINTK for dev_dbg() To: Dominik Brodowski To: Thomas Gleixner To: Adam Zerella To: linux-kernel@vger.kernel.org Signed-off-by: Adam Zerella Link: https://lore.kernel.org/r/20190825053513.13990-1-adam.zerella@gmail.com Signed-off-by: Greg Kroah-Hartman drivers/pcmcia/i82092.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) culprit signature: 2042d547a8d9dde7cf3a755b48e2b6ad44fa0d8fe79f1a6a1dcb280514a2b641 parent signature: 5c1bdd15743e43b468a857bdf3fc6449784804b96c808737d18f2d18bf97817a revisions tested: 18, total time: 4h56m14.332819854s (build: 1h52m26.327683791s, test: 3h2m24.889898036s) first bad commit: 836e9494f4485127a5b505ae57e4387bea8b53c4 pcmcia/i82092: Refactored dprintk macro for dev_dbg(). cc: ["adam.zerella@gmail.com" "gregkh@linuxfoundation.org" "linux-kernel@vger.kernel.org" "linux@dominikbrodowski.net" "tglx@linutronix.de"] crash: WARNING: ODEBUG bug in tcindex_destroy_work ------------[ cut here ]------------ ODEBUG: free active (active state 0) object type: work_struct hint: tcindex_destroy_rexts_work+0x0/0x20 net/sched/cls_tcindex.c:143 WARNING: CPU: 1 PID: 21 at lib/debugobjects.c:484 debug_print_object+0x168/0x210 lib/debugobjects.c:481 Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 21 Comm: kworker/u4:1 Not tainted 5.3.0-rc7-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: tc_filter_workqueue tcindex_destroy_work Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x113/0x167 lib/dump_stack.c:113 panic+0x223/0x4dc kernel/panic.c:219 __warn.cold.10+0x1b/0x37 kernel/panic.c:576 report_bug+0x1a4/0x200 lib/bug.c:186 fixup_bug arch/x86/kernel/traps.c:179 [inline] do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:272 do_invalid_op+0x36/0x40 arch/x86/kernel/traps.c:291 invalid_op+0x23/0x30 arch/x86/entry/entry_64.S:1028 RIP: 0010:debug_print_object+0x168/0x210 lib/debugobjects.c:481 Code: ab 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 92 00 00 00 48 8b 14 dd e0 d3 ab 87 4c 89 fe 48 c7 c7 e0 c8 ab 87 e8 ca 96 f5 fd <0f> 0b 83 05 f3 f9 43 06 01 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f RSP: 0018:ffff8880a9a9fc38 EFLAGS: 00010086 RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a6bf280 RBP: ffff8880a9a9fc78 R08: ffffed1015d24101 R09: ffffed1015d24101 R10: ffffed1015d24100 R11: ffff8880ae920807 R12: 0000000000000001 R13: ffffffff88b654c0 R14: ffffffff8142a4f0 R15: ffffffff87abd040 __debug_check_no_obj_freed lib/debugobjects.c:963 [inline] debug_check_no_obj_freed+0x2db/0x436 lib/debugobjects.c:994 kfree+0xf6/0x2c0 mm/slab.c:3755 tcindex_destroy_work+0x2f/0x80 net/sched/cls_tcindex.c:231 process_one_work+0x856/0x1630 kernel/workqueue.c:2269 worker_thread+0x85/0xb60 kernel/workqueue.c:2415 kthread+0x331/0x3f0 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Kernel Offset: disabled Rebooting in 86400 seconds..