On Tue, 23 May 2023 18:42:53 +0200 Jason A. Donenfeld wrote: > > It should, no idea why it isn't. Looking thru the code now I don't see > > any obvious gaps where timer object is on a list but not active :S > > There's no way to get a vmcore from syzbot, right? :) > > > > Also I thought the shutdown leads to a warning when someone tries to > > schedule the dead timer but in fact add_timer() just exits cleanly. > > So the shutdown won't help us find the culprit :( > > Worth noting that it could also be caused by adding to a dead timer > anywhere in priv_data of another netdev, not just the sole timer_list > in net_device.
Oh, I thought you zero'ed in on the watchdog based on offsets. Still, object debug should track all timers in the slab and complain on the free path.