Re: [syzbot] [serial?] BUG: soft lockup in debug_check_no_obj_freed
From: Edward Adam Davis
Date: Tue Oct 22 2024 - 03:58:02 EST
directly use the simpler _irq() lock/unlock calls instead of the more
complex _irqsave/_irqrestore variants
#syz test
diff --git a/lib/debugobjects.c b/lib/debugobjects.c
index 5ce473ad499b..936c94655e35 100644
--- a/lib/debugobjects.c
+++ b/lib/debugobjects.c
@@ -958,7 +958,7 @@ EXPORT_SYMBOL_GPL(debug_object_active_state);
#ifdef CONFIG_DEBUG_OBJECTS_FREE
static void __debug_check_no_obj_freed(const void *address, unsigned long size)
{
- unsigned long flags, oaddr, saddr, eaddr, paddr, chunks;
+ unsigned long oaddr, saddr, eaddr, paddr, chunks;
int cnt, objs_checked = 0;
struct debug_obj *obj, o;
struct debug_bucket *db;
@@ -975,7 +975,7 @@ static void __debug_check_no_obj_freed(const void *address, unsigned long size)
repeat:
cnt = 0;
- raw_spin_lock_irqsave(&db->lock, flags);
+ raw_spin_lock_irq(&db->lock);
hlist_for_each_entry_safe(obj, tmp, &db->list, node) {
cnt++;
oaddr = (unsigned long) obj->object;
@@ -985,7 +985,7 @@ static void __debug_check_no_obj_freed(const void *address, unsigned long size)
switch (obj->state) {
case ODEBUG_STATE_ACTIVE:
o = *obj;
- raw_spin_unlock_irqrestore(&db->lock, flags);
+ raw_spin_unlock_irq(&db->lock);
debug_print_object(&o, "free");
debug_object_fixup(o.descr->fixup_free, (void *)oaddr, o.state);
goto repeat;
@@ -995,7 +995,7 @@ static void __debug_check_no_obj_freed(const void *address, unsigned long size)
break;
}
}
- raw_spin_unlock_irqrestore(&db->lock, flags);
+ raw_spin_unlock_irq(&db->lock);
if (cnt > debug_objects_maxchain)
debug_objects_maxchain = cnt;