syzbot


kernel panic: corrupted stack end in handle_page_fault

Status: moderation: reported on 2024/06/03 07:38
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+50fd18207c731eea0872@syzkaller.appspotmail.com
First crash: 16d, last: 16d

Sample crash report:
NET: Registered PF_SMC protocol family
9pnet: Installing 9P2000 support
Key type dns_resolver registered
Key type ceph registered
libceph: loaded (mon/osd proto 15/24)
NET: Registered PF_VSOCK protocol family
Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level
registered taskstats version 1
Loading compiled-in X.509 certificates
Loaded X.509 cert 'Build time autogenerated kernel key: ea7f3bda142c883f77af1295bf0d016c41f5f396'
zswap: loaded using pool lzo/zsmalloc
Demotion targets for Node 0: null
debug_vm_pgtable: [debug_vm_pgtable         ]: Validating architecture page table helpers
Key type .fscrypt registered
Key type fscrypt-provisioning registered
Key type big_key registered
Key type encrypted registered
AppArmor: AppArmor sha256 policy hashing enabled
ima: No TPM chip found, activating TPM-bypass!
Loading compiled-in module X.509 certificates
Loaded X.509 cert 'Build time autogenerated kernel key: ea7f3bda142c883f77af1295bf0d016c41f5f396'
ima: Allocated hash algorithm: sha256
ima: No architecture policies found
evm: Initialising EVM extended attributes:
evm: security.selinux (disabled)
evm: security.SMACK64 (disabled)
evm: security.SMACK64EXEC (disabled)
evm: security.SMACK64TRANSMUTE (disabled)
evm: security.SMACK64MMAP (disabled)
evm: security.apparmor
evm: security.ima
evm: security.capability
evm: HMAC attrs: 0x1
printk: legacy console [netcon0] enabled
netconsole: network logging started
gtp: GTP module loaded (pdp ctx size 128 bytes)
rdma_rxe: loaded
clk: Disabling unused clocks
PM: genpd: Disabling unused power domains
ALSA device list:
  #0: Dummy 1
  #1: Loopback 1
  #2: Virtual MIDI Card 1
md: Skipping autodetection of RAID arrays. (raid=autodetect will force)
EXT4-fs (vda): mounted filesystem 34b94c48-234b-4869-b990-1f782e29954a ro with ordered data mode. Quota mode: none.
VFS: Mounted root (ext4 filesystem) readonly on device 253:0.
devtmpfs: mounted
Freeing unused kernel image (initmem) memory: 2500K
Failed to set sysctl parameter 'max_rcu_stall_to_panic=1': parameter not found
Run /sbin/init as init process
Kernel panic - not syncing: corrupted stack end detected inside scheduler
CPU: 0 PID: 1 Comm: init Not tainted 6.10.0-rc1-syzkaller-g1613e604df0c #0
Hardware name: riscv-virtio,qemu (DT)
Call Trace:
[<ffffffff8000f6f8>] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:129
[<ffffffff85c29e7c>] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:135
[<ffffffff85c83b6a>] __dump_stack lib/dump_stack.c:88 [inline]
[<ffffffff85c83b6a>] dump_stack_lvl+0x108/0x196 lib/dump_stack.c:114
[<ffffffff85c83c14>] dump_stack+0x1c/0x24 lib/dump_stack.c:123
[<ffffffff85c2aa42>] panic+0x382/0x800 kernel/panic.c:347
[<ffffffff85c92b18>] schedule_debug kernel/sched/core.c:5962 [inline]
[<ffffffff85c92b18>] __schedule+0x342e/0x3486 kernel/sched/core.c:6628
[<ffffffff85c932bc>] preempt_schedule_notrace+0xe0/0x2be kernel/sched/core.c:7017
[<ffffffff80234042>] lockdep_enabled kernel/locking/lockdep.c:119 [inline]
[<ffffffff80234042>] lock_acquire.part.0+0x1cc/0x820 kernel/locking/lockdep.c:5730
[<ffffffff8023470a>] lock_acquire+0x74/0x98 kernel/locking/lockdep.c:5727
[<ffffffff80865a8e>] fs_reclaim_acquire mm/page_alloc.c:3800 [inline]
[<ffffffff80865a8e>] fs_reclaim_acquire+0x94/0x120 mm/page_alloc.c:3791
[<ffffffff8088d688>] might_alloc include/linux/sched/mm.h:334 [inline]
[<ffffffff8088d688>] slab_pre_alloc_hook mm/slub.c:3890 [inline]
[<ffffffff8088d688>] slab_alloc_node mm/slub.c:3980 [inline]
[<ffffffff8088d688>] kmem_cache_alloc_noprof+0x4c/0x300 mm/slub.c:4007
[<ffffffff8083f4e4>] anon_vma_chain_alloc mm/rmap.c:142 [inline]
[<ffffffff8083f4e4>] __anon_vma_prepare+0xba/0x4e0 mm/rmap.c:195
[<ffffffff807d7c66>] vmf_anon_prepare+0x142/0x24e mm/memory.c:3245
[<ffffffff807e0eb0>] do_cow_fault mm/memory.c:4946 [inline]
[<ffffffff807e0eb0>] do_fault mm/memory.c:5058 [inline]
[<ffffffff807e0eb0>] do_pte_missing mm/memory.c:3903 [inline]
[<ffffffff807e0eb0>] handle_pte_fault mm/memory.c:5380 [inline]
[<ffffffff807e0eb0>] __handle_mm_fault+0x85a/0x3726 mm/memory.c:5523
[<ffffffff807e42fc>] handle_mm_fault+0x580/0xa9c mm/memory.c:5688
[<ffffffff80021b34>] handle_page_fault+0x438/0x1618 arch/riscv/mm/fault.c:345
[<ffffffff85c85f24>] do_page_fault+0x20/0x56 arch/riscv/kernel/traps.c:362
[<ffffffff85ca8744>] ret_from_exception+0x0/0x64 arch/riscv/kernel/entry.S:112
[<ffffffff85c28ab4>] __clear_user+0x20/0x5c arch/riscv/lib/uaccess.S:215
[<ffffffff80b5f59e>] load_elf_interp fs/binfmt_elf.c:675 [inline]
[<ffffffff80b5f59e>] load_elf_binary+0x3424/0x4b32 fs/binfmt_elf.c:1200
[<ffffffff809d9240>] search_binary_handler fs/exec.c:1797 [inline]
[<ffffffff809d9240>] exec_binprm fs/exec.c:1839 [inline]
[<ffffffff809d9240>] bprm_execve fs/exec.c:1891 [inline]
[<ffffffff809d9240>] bprm_execve+0x748/0x18f0 fs/exec.c:1867
[<ffffffff809dcf42>] kernel_execve+0x364/0x450 fs/exec.c:2058
[<ffffffff85c28f2c>] run_init_process+0x194/0x1a8 init/main.c:1388
[<ffffffff85c28f5e>] try_to_run_init_process+0x1e/0x66 init/main.c:1395
[<ffffffff85c89958>] kernel_init+0x180/0x224 init/main.c:1523
[<ffffffff85ca884e>] ret_from_fork+0xe/0x1c arch/riscv/kernel/entry.S:232
SMP: stopping secondary CPUs
Rebooting in 86400 seconds..

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/05/30 07:28 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 1613e604df0c 34889ee3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in handle_page_fault
* Struck through repros no longer work on HEAD.