syzbot


WARNING: ODEBUG bug in md_free_disk

Status: moderation: reported on 2025/08/02 09:35
Subsystems: raid
[Documentation on labels]
Reported-by: syzbot+4a26f2700d49987f1b54@syzkaller.appspotmail.com
First crash: 31d, last: 31d

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 7807 at lib/debugobjects.c:612 debug_print_object+0xc4/0xd8 lib/debugobjects.c:612
ODEBUG: free active (active state 0) object: 8609521c object type: work_struct hint: mddev_delayed_delete+0x0/0x18 drivers/md/md.c:722
Modules linked in:
Kernel panic - not syncing: kernel: panic_on_warn set ...
CPU: 1 UID: 0 PID: 7807 Comm: syz.0.13441 Not tainted 6.16.0-syzkaller #0 PREEMPT 
Hardware name: ARM-Versatile Express
Call trace: 
[<80201a20>] (dump_backtrace) from [<80201b1c>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257)
 r7:00000000 r6:8281fa3c r5:00000000 r4:8225cbf4
[<80201b04>] (show_stack) from [<8021fde0>] (__dump_stack lib/dump_stack.c:94 [inline])
[<80201b04>] (show_stack) from [<8021fde0>] (dump_stack_lvl+0x54/0x7c lib/dump_stack.c:120)
[<8021fd8c>] (dump_stack_lvl) from [<8021fe20>] (dump_stack+0x18/0x1c lib/dump_stack.c:129)
 r5:00000000 r4:82a6dd18
[<8021fe08>] (dump_stack) from [<80202634>] (panic+0x120/0x374 kernel/panic.c:382)
[<80202514>] (panic) from [<80254700>] (check_panic_on_warn kernel/panic.c:273 [inline])
[<80202514>] (panic) from [<80254700>] (get_taint+0x0/0x1c kernel/panic.c:268)
 r3:8280c684 r2:00000001 r1:82243730 r0:8224b0d8
 r7:808d0404
[<8025468c>] (check_panic_on_warn) from [<80254864>] (__warn+0x80/0x188 kernel/panic.c:777)
[<802547e4>] (__warn) from [<80254b54>] (warn_slowpath_fmt+0x1e8/0x1f4 kernel/panic.c:812)
 r8:00000009 r7:822b569c r6:dfab5cc4 r5:83240c00 r4:00000000
[<80254970>] (warn_slowpath_fmt) from [<808d0404>] (debug_print_object+0xc4/0xd8 lib/debugobjects.c:612)
 r10:00000001 r9:86095000 r8:81c01f58 r7:822e0920 r6:82ad9e24 r5:dfab5d6c
 r4:8280ccbc
[<808d0340>] (debug_print_object) from [<808d1e50>] (__debug_check_no_obj_freed lib/debugobjects.c:1099 [inline])
[<808d0340>] (debug_print_object) from [<808d1e50>] (debug_check_no_obj_freed+0x25c/0x2a4 lib/debugobjects.c:1129)
 r8:86095800 r7:8609521c r6:00000100 r5:00000003 r4:00000000
[<808d1bf4>] (debug_check_no_obj_freed) from [<804f8a64>] (slab_free_hook mm/slub.c:2312 [inline])
[<808d1bf4>] (debug_check_no_obj_freed) from [<804f8a64>] (slab_free mm/slub.c:4643 [inline])
[<808d1bf4>] (debug_check_no_obj_freed) from [<804f8a64>] (kfree+0x190/0x394 mm/slub.c:4842)
 r10:000001b4 r9:85436adc r8:83485980 r7:8115a220 r6:83001600 r5:dded2440
 r4:86095000
[<804f88d4>] (kfree) from [<8115a220>] (mddev_free drivers/md/md.c:812 [inline])
[<804f88d4>] (kfree) from [<8115a220>] (md_free_disk+0x70/0x74 drivers/md/md.c:8060)
 r10:000001b4 r9:85436adc r8:83485980 r7:00000000 r6:859b7040 r5:84107980
 r4:86095000
[<8115a1b0>] (md_free_disk) from [<808454f0>] (disk_release+0xa4/0xf8 block/genhd.c:1310)
 r5:84107980 r4:85436a00
[<8084544c>] (disk_release) from [<80b2bc44>] (device_release+0x38/0xa8 drivers/base/core.c:2568)
 r5:84107980 r4:83485a00
[<80b2bc0c>] (device_release) from [<81a00770>] (kobject_cleanup lib/kobject.c:689 [inline])
[<80b2bc0c>] (device_release) from [<81a00770>] (kobject_release lib/kobject.c:720 [inline])
[<80b2bc0c>] (device_release) from [<81a00770>] (kref_put include/linux/kref.h:65 [inline])
[<80b2bc0c>] (device_release) from [<81a00770>] (kobject_put+0xa0/0x1f4 lib/kobject.c:737)
 r5:81d4efe4 r4:83485a00
[<81a006d0>] (kobject_put) from [<80b2be70>] (put_device+0x18/0x1c drivers/base/core.c:3800)
 r7:00000000 r6:85436a00 r5:832aa780 r4:83485be8
[<80b2be58>] (put_device) from [<8081feac>] (blkdev_put_no_open block/bdev.c:844 [inline])
[<80b2be58>] (put_device) from [<8081feac>] (bdev_release+0x128/0x1a0 block/bdev.c:1149)
[<8081fd84>] (bdev_release) from [<8082040c>] (blkdev_release+0x14/0x1c block/fops.c:699)
 r9:83240c00 r8:856dc6d0 r7:85141680 r6:835fba18 r5:044a001d r4:832aa780
[<808203f8>] (blkdev_release) from [<8054c3b4>] (__fput+0xd8/0x2ec fs/file_table.c:468)
[<8054c2dc>] (__fput) from [<8054c65c>] (____fput+0x14/0x18 fs/file_table.c:496)
 r9:83240c00 r8:82a6e6a0 r7:83240c00 r6:83241494 r5:83241464 r4:85d884e0
[<8054c648>] (____fput) from [<80280008>] (task_work_run+0x90/0xb8 kernel/task_work.c:227)
[<8027ff78>] (task_work_run) from [<8022bc18>] (resume_user_mode_work include/linux/resume_user_mode.h:50 [inline])
[<8027ff78>] (task_work_run) from [<8022bc18>] (do_work_pending+0x448/0x4f8 arch/arm/kernel/signal.c:631)
 r9:83240c00 r8:8020029c r7:000001b4 r6:8020029c r5:dfab5fb0 r4:83240c00
[<8022b7d0>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24)
Exception stack(0xdfab5fb0 to 0xdfab5ff8)
5fa0:                                     00000000 0000001e 00000000 7eb9d928
5fc0: 00000000 00000000 00000000 000001b4 00000000 002f62d4 ffffffff 00000000
5fe0: 7eb9d818 7eb9d808 0002675c 00131fc0 20000010 00000003
 r10:000001b4 r9:83240c00 r8:8020029c r7:000001b4 r6:00000000 r5:00000000
 r4:00000000
Rebooting in 86400 seconds..

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/07/29 09:30 upstream 283564a43383 c4a95487 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 WARNING: ODEBUG bug in md_free_disk
* Struck through repros no longer work on HEAD.