WARNING in mark_lock (2)

Status: fixed on 2019/10/27 22:28
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+ef8a7c8214359d969c69@syzkaller.appspotmail.com
Fix commit: 8e00c4e9dd85 writeback: fix use-after-free in finish_writeback_work()
First crash: 2499d, last: 2468d
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
WARNING in mark_lock (2) 0 (1) 2019/09/24 08:06
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in mark_lock (3) -1 C done inconclusive 69 2250d 2432d 0/29 auto-obsoleted due to no activity on 2022/12/14 03:19
upstream WARNING in mark_lock kernel -1 syz done 2 2531d 2586d 12/29 fixed on 2019/08/27 17:15

Sample crash report:
------------[ cut here ]------------
DEBUG_LOCKS_WARN_ON(1)
WARNING: CPU: 1 PID: 46 at kernel/locking/lockdep.c:167 hlock_class kernel/locking/lockdep.c:167 [inline]
WARNING: CPU: 1 PID: 46 at kernel/locking/lockdep.c:167 hlock_class kernel/locking/lockdep.c:156 [inline]
WARNING: CPU: 1 PID: 46 at kernel/locking/lockdep.c:167 mark_lock+0x22b/0x1220 kernel/locking/lockdep.c:3643
Kernel panic - not syncing: panic_on_warn set ...
CPU: 1 PID: 46 Comm: kworker/u4:2 Not tainted 5.4.0-rc1+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: writeback wb_workfn (flush-8:0)
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 panic+0x2dc/0x755 kernel/panic.c:220
 __warn.cold+0x2f/0x3c kernel/panic.c:581
 report_bug+0x289/0x300 lib/bug.c:195
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 fixup_bug arch/x86/kernel/traps.c:174 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:272
 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:291
 invalid_op+0x23/0x30 arch/x86/entry/entry_64.S:1028
RIP: 0010:hlock_class kernel/locking/lockdep.c:167 [inline]
RIP: 0010:hlock_class kernel/locking/lockdep.c:156 [inline]
RIP: 0010:mark_lock+0x22b/0x1220 kernel/locking/lockdep.c:3643
Code: d0 7c 08 84 d2 0f 85 a8 0e 00 00 44 8b 1d 7d c7 6d 08 45 85 db 75 b6 48 c7 c6 60 15 ac 87 48 c7 c7 a0 15 ac 87 e8 9d 7f eb ff <0f> 0b 31 db e9 aa fe ff ff 48 c7 c7 20 c1 ae 8a e8 70 94 55 00 e9
RSP: 0018:ffff8880a9b478d0 EFLAGS: 00010082
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff815cb696 RDI: ffffed1015368f0c
RBP: ffff8880a9b47920 R08: ffff8880a9b24480 R09: fffffbfff11f4069
R10: fffffbfff11f4068 R11: ffffffff88fa0343 R12: 0000000000000008
R13: ffff8880a9b24d68 R14: 0000000000000000 R15: 00000000000c119f
 mark_usage kernel/locking/lockdep.c:3592 [inline]
 __lock_acquire+0x538/0x4a00 kernel/locking/lockdep.c:3909
 lock_acquire+0x190/0x410 kernel/locking/lockdep.c:4487
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
 _raw_spin_lock_irqsave+0x95/0xcd kernel/locking/spinlock.c:159
 __wake_up_common_lock+0xc8/0x150 kernel/sched/wait.c:122
 __wake_up+0xe/0x10 kernel/sched/wait.c:142
 finish_writeback_work.isra.0+0xf6/0x120 fs/fs-writeback.c:168
 wb_do_writeback fs/fs-writeback.c:2030 [inline]
 wb_workfn+0x34f/0x1220 fs/fs-writeback.c:2070
 process_one_work+0x9af/0x1740 kernel/workqueue.c:2269
 worker_thread+0x98/0xe40 kernel/workqueue.c:2415
 kthread+0x361/0x430 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (14):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/19 19:56 bpf 05679ca6feeb 8c88c9c1 .config console log report ci-upstream-bpf-kasan-gce
2019/10/08 16:10 net-old 503c9addef61 137e37ca .config console log report ci-upstream-net-this-kasan-gce
2019/10/02 13:52 net-old a761129e3625 2e29b534 .config console log report ci-upstream-net-this-kasan-gce
2019/09/27 02:30 bpf e3439af4a339 2f1548bc .config console log report ci-upstream-bpf-kasan-gce
2019/09/26 00:35 bpf 4670d68b9254 a3355dba .config console log report ci-upstream-bpf-kasan-gce
2019/10/21 10:38 bpf-next ab81e203bc0d 8c88c9c1 .config console log report ci-upstream-bpf-next-kasan-gce
2019/10/19 15:43 net-next-old ebcd670d05d5 8c88c9c1 .config console log report ci-upstream-net-kasan-gce
2019/10/05 12:24 net-next-old 97bfe0e05ceb f3f7d9c8 .config console log report ci-upstream-net-kasan-gce
2019/10/01 21:33 net-next-old 5be5515a8ea1 b7a87a83 .config console log report ci-upstream-net-kasan-gce
2019/09/25 16:30 net-next-old b41dae061bbd a3355dba .config console log report ci-upstream-net-kasan-gce
2019/09/22 15:27 net-next-old b41dae061bbd d96e88f3 .config console log report ci-upstream-net-kasan-gce
2019/09/19 21:38 net-next-old b41dae061bbd eb940044 .config console log report ci-upstream-net-kasan-gce
2019/10/07 01:16 https://github.com/google/kasan.git usb-fuzzer 58d5f26a5584 f3f7d9c8 .config console log report ci2-upstream-usb
2019/09/21 00:26 linux-next b5b3bd898ba9 d96e88f3 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.