WARNING in lock_release

Status: fixed on 2017/12/22 19:15
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+0415e5f62aec83dfecbd675dfd1e16d73be06542@syzkaller.appspotmail.com
Fix commit: ca0168e8a77c alloc_super(): do ->s_umount initialization earlier
First crash: 3178d, last: 3138d

Sample crash report:
RBP: 0000000000000086 R08: 0000000020000000 R09: 65732f636f003031
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401d60
R13: 0000000000401df0 R14: 0000000000000000 R15: 0000000000000000
DEBUG_LOCKS_WARN_ON(depth <= 0)
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3043 at kernel/locking/lockdep.c:3766 __lock_release kernel/locking/lockdep.c:3766 [inline]
WARNING: CPU: 0 PID: 3043 at kernel/locking/lockdep.c:3766 lock_release+0x5de/0xd90 kernel/locking/lockdep.c:4023
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 3043 Comm: syzkaller384967 Not tainted 4.14.0-rc8-next-20171109+ #39
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 panic+0x1e4/0x41c kernel/panic.c:183
 __warn+0x1c4/0x1e0 kernel/panic.c:546
 report_bug+0x211/0x2d0 lib/bug.c:184
 fixup_bug+0x40/0x90 arch/x86/kernel/traps.c:176
 do_trap_no_signal arch/x86/kernel/traps.c:210 [inline]
 do_trap+0x260/0x390 arch/x86/kernel/traps.c:259
 do_error_trap+0x120/0x390 arch/x86/kernel/traps.c:296
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:309
 invalid_op+0x18/0x20 arch/x86/entry/entry_64.S:926
RIP: 0010:__lock_release kernel/locking/lockdep.c:3766 [inline]
RIP: 0010:lock_release+0x5de/0xd90 kernel/locking/lockdep.c:4023
RSP: 0018:ffff8801ccfe7740 EFLAGS: 00010082
RAX: 000000000000001f RBX: 1ffff100399fceed RCX: 0000000000000000
RDX: 000000000000001f RSI: 1ffff100399fcea8 RDI: ffffed00399fcedc
RBP: ffff8801ccfe78b0 R08: 0000000000000001 R09: 0000000000000000
R10: ffff8801cceac580 R11: fffffbfff0e8546b R12: ffff8801ccfe7788
R13: ffff8801ccfe7888 R14: ffff8801cc018b98 R15: ffffffff8746ad60
 up_write+0x6b/0x120 kernel/locking/rwsem.c:131
 destroy_unused_super.part.7+0x18/0xd0 fs/super.c:163
 destroy_unused_super fs/super.c:505 [inline]
 alloc_super fs/super.c:258 [inline]
 sget_userns+0x905/0xe20 fs/super.c:503
 sget+0xd2/0x120 fs/super.c:554
 mount_nodev+0x37/0x100 fs/super.c:1157
 devpts_mount+0x2c/0x40 fs/devpts/inode.c:481
 mount_fs+0x66/0x2d0 fs/super.c:1219
 vfs_kern_mount.part.26+0xc6/0x4a0 fs/namespace.c:1037
 vfs_kern_mount fs/namespace.c:2509 [inline]
 do_new_mount fs/namespace.c:2512 [inline]
 do_mount+0xea1/0x2bb0 fs/namespace.c:2841
 SYSC_mount fs/namespace.c:3057 [inline]
 SyS_mount+0xab/0x120 fs/namespace.c:3034
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x440439
RSP: 002b:00007ffdf34ca458 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000440439
RDX: 0000000020e3b000 RSI: 000000002059e000 RDI: 0000000020ae0ff4
RBP: 0000000000000086 R08: 0000000020000000 R09: 65732f636f003031
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401d60
R13: 0000000000401df0 R14: 0000000000000000 R15: 0000000000000000
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (72):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2017/11/09 07:30 linux-next 5515cf16e270 e0a2b195 .config console log report syz C ci-upstream-next-kasan-gce
2017/11/09 07:19 linux-next 5515cf16e270 e0a2b195 .config console log report syz skylake-linux-next-kasan-qemu
2017/12/16 09:57 upstream f6f3732162b5 b6f0c91b .config console log report ci-upstream-kasan-gce
2017/12/14 08:22 upstream 7c5cac1bc717 ac20b98c .config console log report ci-upstream-kasan-gce
2017/12/13 19:08 upstream d39a01eff9af 06ea774d .config console log report ci-upstream-kasan-gce
2017/12/10 18:46 upstream 51090c5d6de0 5ad0ce95 .config console log report ci-upstream-kasan-gce
2017/12/10 00:55 upstream 4ded3bec65a0 5ad0ce95 .config console log report ci-upstream-kasan-gce
2017/12/08 19:46 upstream 3625de4b2872 b0fa969c .config console log report ci-upstream-kasan-gce
2017/12/04 00:37 upstream ae64f9bd1d36 48359b97 .config console log report ci-upstream-kasan-gce
2017/12/03 15:02 upstream 2db767d9889c 48359b97 .config console log report ci-upstream-kasan-gce
2017/12/02 05:47 upstream a0651c7fa2c0 48359b97 .config console log report ci-upstream-kasan-gce
2017/12/02 05:47 upstream a0651c7fa2c0 48359b97 .config console log report ci-upstream-kasan-gce
2017/12/14 05:28 upstream 7c5cac1bc717 06ea774d .config console log report ci-upstream-kasan-gce-386
2017/12/14 01:23 upstream d39a01eff9af 06ea774d .config console log report ci-upstream-kasan-gce-386
2017/12/13 22:20 upstream d39a01eff9af 06ea774d .config console log report ci-upstream-kasan-gce-386
2017/12/13 19:30 upstream d39a01eff9af 06ea774d .config console log report ci-upstream-kasan-gce-386
2017/12/10 00:42 upstream 4ded3bec65a0 5ad0ce95 .config console log report ci-upstream-kasan-gce-386
2017/12/09 17:46 upstream f335195adf04 5ad0ce95 .config console log report ci-upstream-kasan-gce-386
2017/12/07 11:13 upstream 968edbd93c0c 5d643f8e .config console log report ci-upstream-kasan-gce-386
2017/12/06 17:32 upstream 328b4ed93b69 5d643f8e .config console log report ci-upstream-kasan-gce-386
2017/12/04 09:25 upstream ae64f9bd1d36 48359b97 .config console log report ci-upstream-kasan-gce-386
2017/12/04 09:21 upstream ae64f9bd1d36 48359b97 .config console log report ci-upstream-kasan-gce-386
2017/12/04 08:01 upstream ae64f9bd1d36 48359b97 .config console log report ci-upstream-kasan-gce-386
2017/12/04 07:04 upstream ae64f9bd1d36 48359b97 .config console log report ci-upstream-kasan-gce-386
2017/12/03 22:09 upstream ae64f9bd1d36 48359b97 .config console log report ci-upstream-kasan-gce-386
2017/12/03 16:17 upstream 2db767d9889c 48359b97 .config console log report ci-upstream-kasan-gce-386
2017/12/03 11:15 upstream 2db767d9889c 48359b97 .config console log report ci-upstream-kasan-gce-386
2017/12/03 09:39 upstream 2db767d9889c 48359b97 .config console log report ci-upstream-kasan-gce-386
2017/12/03 05:06 upstream 2db767d9889c 48359b97 .config console log report ci-upstream-kasan-gce-386
2017/12/03 01:26 upstream 2db767d9889c 48359b97 .config console log report ci-upstream-kasan-gce-386
2017/12/03 00:09 upstream 2db767d9889c 48359b97 .config console log report ci-upstream-kasan-gce-386
2017/12/02 22:45 upstream 2db767d9889c 48359b97 .config console log report ci-upstream-kasan-gce-386
2017/12/02 16:16 upstream 2db767d9889c 48359b97 .config console log report ci-upstream-kasan-gce-386
2017/12/02 09:45 upstream a0651c7fa2c0 48359b97 .config console log report ci-upstream-kasan-gce-386
2017/12/02 09:23 upstream a0651c7fa2c0 48359b97 .config console log report ci-upstream-kasan-gce-386
2017/12/02 09:14 upstream a0651c7fa2c0 48359b97 .config console log report ci-upstream-kasan-gce-386
2017/12/19 07:51 net-next-old 962b582785b6 1c4160ef .config console log report ci-upstream-net-kasan-gce
2017/12/17 11:03 net-next-old c30abd5e40dd d5beb42a .config console log report ci-upstream-net-kasan-gce
2017/12/13 19:04 net-next-old f93ea3bf151d 06ea774d .config console log report ci-upstream-net-kasan-gce
2017/12/11 15:02 net-next-old a0b586fa75a6 27f5dfef .config console log report ci-upstream-net-kasan-gce
2017/12/04 11:12 linux-next 7cc61a0a562c 48359b97 .config console log report ci-upstream-next-kasan-gce
2017/12/03 06:27 mmots 4131d5166185 29b0fd90 .config console log report ci-upstream-mmots-kasan-gce
* Struck through repros no longer work on HEAD.