Re: BUG: MAX_STACK_TRACE_ENTRIES too low in tipc_topsrv_exit_net

2019-08-22 Thread Andrey Konovalov
On Thu, Aug 22, 2019 at 5:05 AM Eric Biggers  wrote:
>
> On Mon, Aug 19, 2019 at 05:22:07AM -0700, syzbot wrote:
> > Hello,
> >
> > syzbot found the following crash on:
> >
> > HEAD commit:5181b473 net: phy: realtek: add NBase-T PHY auto-detection
> > git tree:   net-next
> > console output: https://syzkaller.appspot.com/x/log.txt?x=156b731c60
> > kernel config:  https://syzkaller.appspot.com/x/.config?x=d4cf1ffb87d590d7
> > dashboard link: https://syzkaller.appspot.com/bug?extid=5f97459a05652f579f6c
> > compiler:   gcc (GCC) 9.0.0 20181231 (experimental)
> >
> > Unfortunately, I don't have any reproducer for this crash yet.
> >
> > IMPORTANT: if you fix the bug, please add the following tag to the commit:
> > Reported-by: syzbot+5f97459a05652f579...@syzkaller.appspotmail.com
> >
> > BUG: MAX_STACK_TRACE_ENTRIES too low!
> > turning off the locking correctness validator.
> > CPU: 0 PID: 2581 Comm: kworker/u4:4 Not tainted 5.3.0-rc3+ #132
> > Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
> > Google 01/01/2011
> > Workqueue: netns cleanup_net
> > Call Trace:
> >  __dump_stack lib/dump_stack.c:77 [inline]
> >  dump_stack+0x172/0x1f0 lib/dump_stack.c:113
> >  save_trace kernel/locking/lockdep.c:473 [inline]
> >  save_trace.isra.0.cold+0x14/0x19 kernel/locking/lockdep.c:458
> >  mark_lock+0x3db/0x11e0 kernel/locking/lockdep.c:3583
> >  mark_usage kernel/locking/lockdep.c:3517 [inline]
> >  __lock_acquire+0x538/0x4c30 kernel/locking/lockdep.c:3834
> >  lock_acquire+0x190/0x410 kernel/locking/lockdep.c:4412
> >  flush_workqueue+0x126/0x14b0 kernel/workqueue.c:2774
> >  drain_workqueue+0x1b4/0x470 kernel/workqueue.c:2939
> >  destroy_workqueue+0x21/0x6c0 kernel/workqueue.c:4320
> >  tipc_topsrv_work_stop net/tipc/topsrv.c:636 [inline]
> >  tipc_topsrv_stop net/tipc/topsrv.c:694 [inline]
> >  tipc_topsrv_exit_net+0x3fe/0x5d8 net/tipc/topsrv.c:706
> >  ops_exit_list.isra.0+0xaa/0x150 net/core/net_namespace.c:172
> >  cleanup_net+0x4e2/0xa70 net/core/net_namespace.c:594
> >  process_one_work+0x9af/0x1740 kernel/workqueue.c:2269
> >  worker_thread+0x98/0xe40 kernel/workqueue.c:2415
> >  kthread+0x361/0x430 kernel/kthread.c:255
> >  ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
> > kobject: 'rx-0' (0e2c91cd): kobject_cleanup, parent 2003fefb
> > kobject: 'rx-0' (0e2c91cd): auto cleanup 'remove' event
> > kobject: 'rx-0' (0e2c91cd): kobject_uevent_env
> > kobject: 'rx-0' (0e2c91cd): kobject_uevent_env: uevent_suppress
> > caused the event to drop!
> > kobject: 'rx-0' (0e2c91cd): auto cleanup kobject_del
> > kobject: 'rx-0' (0e2c91cd): calling ktype release
> > kobject: 'rx-0': free name
> > kobject: 'tx-0' (58b6f726): kobject_cleanup, parent 2003fefb
> > kobject: 'tx-0' (58b6f726): auto cleanup 'remove' event
> > kobject: 'tx-0' (58b6f726): kobject_uevent_env
> > kobject: 'tx-0' (58b6f726): kobject_uevent_env: uevent_suppress
> > caused the event to drop!
> > kobject: 'tx-0' (58b6f726): auto cleanup kobject_del
> > kobject: 'tx-0' (58b6f726): calling ktype release
> > kobject: 'tx-0': free name
> > kobject: 'queues' (2003fefb): kobject_cleanup, parent
> > 9c061a32
> > kobject: 'queues' (2003fefb): calling ktype release
> > kobject: 'queues' (2003fefb): kset_release
> > kobject: 'queues': free name
> > kobject: 'ip6gre0' (18a24d65): kobject_uevent_env
> > kobject: 'ip6gre0' (18a24d65): kobject_uevent_env: uevent_suppress
> > caused the event to drop!
> > kobject: 'rx-0' (940b22b0): kobject_cleanup, parent 05a1fc3a
> > kobject: 'rx-0' (940b22b0): auto cleanup 'remove' event
> > kobject: 'rx-0' (940b22b0): kobject_uevent_env
> > kobject: 'rx-0' (940b22b0): kobject_uevent_env: uevent_suppress
> > caused the event to drop!
> > kobject: 'rx-0' (940b22b0): auto cleanup kobject_del
> > kobject: 'rx-0' (940b22b0): calling ktype release
> > kobject: 'rx-0': free name
> > kobject: 'tx-0' (278e85e2): kobject_cleanup, parent 05a1fc3a
> > kobject: 'tx-0' (278e85e2): auto cleanup 'remove' event
> > kobject: 'tx-0' (278e85e2): kobject_uevent_env
> > kobject: 'tx-0' (278e85e2): kobject_uevent_env: uevent_suppress
> > caused the event to drop!
> > kobject: 'tx-0' (278e85e2): auto cleanup kobject_del
> > kobject: 'tx-0' (278e85e2): calling ktype release
> > kobject: 'tx-0': free name
> > kobject: 'queues' (05a1fc3a): kobject_cleanup, parent
> > 9c061a32
> > kobject: 'queues' (05a1fc3a): calling ktype release
> > kobject: 'queues' (05a1fc3a): kset_release
> > kobject: 'queues': free name
> > kobject: 'ip6gre0' (c78b955b): kobject_uevent_env
> > kobject: 'ip6gre0' (c78b955b): kobject_uevent_env: uevent_suppress
> > caused the event to drop!
> > kobject: 'rx-0' 

Re: BUG: MAX_STACK_TRACE_ENTRIES too low in tipc_topsrv_exit_net

2019-08-21 Thread Eric Biggers
On Mon, Aug 19, 2019 at 05:22:07AM -0700, syzbot wrote:
> Hello,
> 
> syzbot found the following crash on:
> 
> HEAD commit:5181b473 net: phy: realtek: add NBase-T PHY auto-detection
> git tree:   net-next
> console output: https://syzkaller.appspot.com/x/log.txt?x=156b731c60
> kernel config:  https://syzkaller.appspot.com/x/.config?x=d4cf1ffb87d590d7
> dashboard link: https://syzkaller.appspot.com/bug?extid=5f97459a05652f579f6c
> compiler:   gcc (GCC) 9.0.0 20181231 (experimental)
> 
> Unfortunately, I don't have any reproducer for this crash yet.
> 
> IMPORTANT: if you fix the bug, please add the following tag to the commit:
> Reported-by: syzbot+5f97459a05652f579...@syzkaller.appspotmail.com
> 
> BUG: MAX_STACK_TRACE_ENTRIES too low!
> turning off the locking correctness validator.
> CPU: 0 PID: 2581 Comm: kworker/u4:4 Not tainted 5.3.0-rc3+ #132
> Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
> Google 01/01/2011
> Workqueue: netns cleanup_net
> Call Trace:
>  __dump_stack lib/dump_stack.c:77 [inline]
>  dump_stack+0x172/0x1f0 lib/dump_stack.c:113
>  save_trace kernel/locking/lockdep.c:473 [inline]
>  save_trace.isra.0.cold+0x14/0x19 kernel/locking/lockdep.c:458
>  mark_lock+0x3db/0x11e0 kernel/locking/lockdep.c:3583
>  mark_usage kernel/locking/lockdep.c:3517 [inline]
>  __lock_acquire+0x538/0x4c30 kernel/locking/lockdep.c:3834
>  lock_acquire+0x190/0x410 kernel/locking/lockdep.c:4412
>  flush_workqueue+0x126/0x14b0 kernel/workqueue.c:2774
>  drain_workqueue+0x1b4/0x470 kernel/workqueue.c:2939
>  destroy_workqueue+0x21/0x6c0 kernel/workqueue.c:4320
>  tipc_topsrv_work_stop net/tipc/topsrv.c:636 [inline]
>  tipc_topsrv_stop net/tipc/topsrv.c:694 [inline]
>  tipc_topsrv_exit_net+0x3fe/0x5d8 net/tipc/topsrv.c:706
>  ops_exit_list.isra.0+0xaa/0x150 net/core/net_namespace.c:172
>  cleanup_net+0x4e2/0xa70 net/core/net_namespace.c:594
>  process_one_work+0x9af/0x1740 kernel/workqueue.c:2269
>  worker_thread+0x98/0xe40 kernel/workqueue.c:2415
>  kthread+0x361/0x430 kernel/kthread.c:255
>  ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
> kobject: 'rx-0' (0e2c91cd): kobject_cleanup, parent 2003fefb
> kobject: 'rx-0' (0e2c91cd): auto cleanup 'remove' event
> kobject: 'rx-0' (0e2c91cd): kobject_uevent_env
> kobject: 'rx-0' (0e2c91cd): kobject_uevent_env: uevent_suppress
> caused the event to drop!
> kobject: 'rx-0' (0e2c91cd): auto cleanup kobject_del
> kobject: 'rx-0' (0e2c91cd): calling ktype release
> kobject: 'rx-0': free name
> kobject: 'tx-0' (58b6f726): kobject_cleanup, parent 2003fefb
> kobject: 'tx-0' (58b6f726): auto cleanup 'remove' event
> kobject: 'tx-0' (58b6f726): kobject_uevent_env
> kobject: 'tx-0' (58b6f726): kobject_uevent_env: uevent_suppress
> caused the event to drop!
> kobject: 'tx-0' (58b6f726): auto cleanup kobject_del
> kobject: 'tx-0' (58b6f726): calling ktype release
> kobject: 'tx-0': free name
> kobject: 'queues' (2003fefb): kobject_cleanup, parent
> 9c061a32
> kobject: 'queues' (2003fefb): calling ktype release
> kobject: 'queues' (2003fefb): kset_release
> kobject: 'queues': free name
> kobject: 'ip6gre0' (18a24d65): kobject_uevent_env
> kobject: 'ip6gre0' (18a24d65): kobject_uevent_env: uevent_suppress
> caused the event to drop!
> kobject: 'rx-0' (940b22b0): kobject_cleanup, parent 05a1fc3a
> kobject: 'rx-0' (940b22b0): auto cleanup 'remove' event
> kobject: 'rx-0' (940b22b0): kobject_uevent_env
> kobject: 'rx-0' (940b22b0): kobject_uevent_env: uevent_suppress
> caused the event to drop!
> kobject: 'rx-0' (940b22b0): auto cleanup kobject_del
> kobject: 'rx-0' (940b22b0): calling ktype release
> kobject: 'rx-0': free name
> kobject: 'tx-0' (278e85e2): kobject_cleanup, parent 05a1fc3a
> kobject: 'tx-0' (278e85e2): auto cleanup 'remove' event
> kobject: 'tx-0' (278e85e2): kobject_uevent_env
> kobject: 'tx-0' (278e85e2): kobject_uevent_env: uevent_suppress
> caused the event to drop!
> kobject: 'tx-0' (278e85e2): auto cleanup kobject_del
> kobject: 'tx-0' (278e85e2): calling ktype release
> kobject: 'tx-0': free name
> kobject: 'queues' (05a1fc3a): kobject_cleanup, parent
> 9c061a32
> kobject: 'queues' (05a1fc3a): calling ktype release
> kobject: 'queues' (05a1fc3a): kset_release
> kobject: 'queues': free name
> kobject: 'ip6gre0' (c78b955b): kobject_uevent_env
> kobject: 'ip6gre0' (c78b955b): kobject_uevent_env: uevent_suppress
> caused the event to drop!
> kobject: 'rx-0' (0fa7c1d1): kobject_cleanup, parent d264d5b4
> kobject: 'rx-0' (0fa7c1d1): auto cleanup 'remove' event
> kobject: 'rx-0' (0fa7c1d1): kobject_uevent_env
> kobject: 'rx-0' (0fa7c1d1): kobject_uevent_env: 

BUG: MAX_STACK_TRACE_ENTRIES too low in tipc_topsrv_exit_net

2019-08-19 Thread syzbot

Hello,

syzbot found the following crash on:

HEAD commit:5181b473 net: phy: realtek: add NBase-T PHY auto-detection
git tree:   net-next
console output: https://syzkaller.appspot.com/x/log.txt?x=156b731c60
kernel config:  https://syzkaller.appspot.com/x/.config?x=d4cf1ffb87d590d7
dashboard link: https://syzkaller.appspot.com/bug?extid=5f97459a05652f579f6c
compiler:   gcc (GCC) 9.0.0 20181231 (experimental)

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+5f97459a05652f579...@syzkaller.appspotmail.com

BUG: MAX_STACK_TRACE_ENTRIES too low!
turning off the locking correctness validator.
CPU: 0 PID: 2581 Comm: kworker/u4:4 Not tainted 5.3.0-rc3+ #132
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS  
Google 01/01/2011

Workqueue: netns cleanup_net
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 save_trace kernel/locking/lockdep.c:473 [inline]
 save_trace.isra.0.cold+0x14/0x19 kernel/locking/lockdep.c:458
 mark_lock+0x3db/0x11e0 kernel/locking/lockdep.c:3583
 mark_usage kernel/locking/lockdep.c:3517 [inline]
 __lock_acquire+0x538/0x4c30 kernel/locking/lockdep.c:3834
 lock_acquire+0x190/0x410 kernel/locking/lockdep.c:4412
 flush_workqueue+0x126/0x14b0 kernel/workqueue.c:2774
 drain_workqueue+0x1b4/0x470 kernel/workqueue.c:2939
 destroy_workqueue+0x21/0x6c0 kernel/workqueue.c:4320
 tipc_topsrv_work_stop net/tipc/topsrv.c:636 [inline]
 tipc_topsrv_stop net/tipc/topsrv.c:694 [inline]
 tipc_topsrv_exit_net+0x3fe/0x5d8 net/tipc/topsrv.c:706
 ops_exit_list.isra.0+0xaa/0x150 net/core/net_namespace.c:172
 cleanup_net+0x4e2/0xa70 net/core/net_namespace.c:594
 process_one_work+0x9af/0x1740 kernel/workqueue.c:2269
 worker_thread+0x98/0xe40 kernel/workqueue.c:2415
 kthread+0x361/0x430 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
kobject: 'rx-0' (0e2c91cd): kobject_cleanup, parent 2003fefb
kobject: 'rx-0' (0e2c91cd): auto cleanup 'remove' event
kobject: 'rx-0' (0e2c91cd): kobject_uevent_env
kobject: 'rx-0' (0e2c91cd): kobject_uevent_env: uevent_suppress  
caused the event to drop!

kobject: 'rx-0' (0e2c91cd): auto cleanup kobject_del
kobject: 'rx-0' (0e2c91cd): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (58b6f726): kobject_cleanup, parent 2003fefb
kobject: 'tx-0' (58b6f726): auto cleanup 'remove' event
kobject: 'tx-0' (58b6f726): kobject_uevent_env
kobject: 'tx-0' (58b6f726): kobject_uevent_env: uevent_suppress  
caused the event to drop!

kobject: 'tx-0' (58b6f726): auto cleanup kobject_del
kobject: 'tx-0' (58b6f726): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (2003fefb): kobject_cleanup, parent  
9c061a32

kobject: 'queues' (2003fefb): calling ktype release
kobject: 'queues' (2003fefb): kset_release
kobject: 'queues': free name
kobject: 'ip6gre0' (18a24d65): kobject_uevent_env
kobject: 'ip6gre0' (18a24d65): kobject_uevent_env: uevent_suppress  
caused the event to drop!

kobject: 'rx-0' (940b22b0): kobject_cleanup, parent 05a1fc3a
kobject: 'rx-0' (940b22b0): auto cleanup 'remove' event
kobject: 'rx-0' (940b22b0): kobject_uevent_env
kobject: 'rx-0' (940b22b0): kobject_uevent_env: uevent_suppress  
caused the event to drop!

kobject: 'rx-0' (940b22b0): auto cleanup kobject_del
kobject: 'rx-0' (940b22b0): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (278e85e2): kobject_cleanup, parent 05a1fc3a
kobject: 'tx-0' (278e85e2): auto cleanup 'remove' event
kobject: 'tx-0' (278e85e2): kobject_uevent_env
kobject: 'tx-0' (278e85e2): kobject_uevent_env: uevent_suppress  
caused the event to drop!

kobject: 'tx-0' (278e85e2): auto cleanup kobject_del
kobject: 'tx-0' (278e85e2): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (05a1fc3a): kobject_cleanup, parent  
9c061a32

kobject: 'queues' (05a1fc3a): calling ktype release
kobject: 'queues' (05a1fc3a): kset_release
kobject: 'queues': free name
kobject: 'ip6gre0' (c78b955b): kobject_uevent_env
kobject: 'ip6gre0' (c78b955b): kobject_uevent_env: uevent_suppress  
caused the event to drop!

kobject: 'rx-0' (0fa7c1d1): kobject_cleanup, parent d264d5b4
kobject: 'rx-0' (0fa7c1d1): auto cleanup 'remove' event
kobject: 'rx-0' (0fa7c1d1): kobject_uevent_env
kobject: 'rx-0' (0fa7c1d1): kobject_uevent_env: uevent_suppress  
caused the event to drop!

kobject: 'rx-0' (0fa7c1d1): auto cleanup kobject_del
kobject: 'rx-0' (0fa7c1d1): calling ktype release
kobject: 'rx-0': free name
kobject: 'tx-0' (0f66c80c):