syzbot


kernel panic: corrupted stack end in mntput (2)

Status: moderation: reported on 2024/09/15 17:14
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+8c3059cfa6575e8b026b@syzkaller.appspotmail.com
First crash: 33d, last: 17d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel panic: corrupted stack end in mntput fs mm 2 124d 135d 0/28 auto-obsoleted due to no activity on 2024/09/10 14:26

Sample crash report:
Registered RDS/tcp transport
NET: Registered PF_SMC protocol family
9pnet: Installing 9P2000 support
Key type dns_resolver registered
Key type ceph registered
libceph: loaded (mon/osd proto 15/24)
NET: Registered PF_VSOCK protocol family
registered taskstats version 1
Loading compiled-in X.509 certificates
Loaded X.509 cert 'Build time autogenerated kernel key: 9462edf6f0f4fb32d8129e0f807f68da525785f6'
zswap: loaded using pool 842/z3fold
Demotion targets for Node 0: null
debug_vm_pgtable: [debug_vm_pgtable         ]: Validating architecture page table helpers
Key type .fscrypt registered
Key type fscrypt-provisioning registered
Key type big_key registered
Key type encrypted registered
AppArmor: AppArmor sha256 policy hashing enabled
ima: No TPM chip found, activating TPM-bypass!
Loading compiled-in module X.509 certificates
Loaded X.509 cert 'Build time autogenerated kernel key: 9462edf6f0f4fb32d8129e0f807f68da525785f6'
ima: Allocated hash algorithm: sha256
ima: No architecture policies found
evm: Initialising EVM extended attributes:
evm: security.selinux (disabled)
evm: security.SMACK64 (disabled)
evm: security.SMACK64EXEC (disabled)
evm: security.SMACK64TRANSMUTE (disabled)
evm: security.SMACK64MMAP (disabled)
evm: security.apparmor
evm: security.ima
evm: security.capability
evm: HMAC attrs: 0x1
printk: legacy console [netcon0] enabled
netconsole: network logging started
gtp: GTP module loaded (pdp ctx size 128 bytes)
rdma_rxe: loaded
clk: Disabling unused clocks
PM: genpd: Disabling unused power domains
ALSA device list:
  #0: Dummy 1
  #1: Loopback 1
  #2: Virtual MIDI Card 1
md: Skipping autodetection of RAID arrays. (raid=autodetect will force)
EXT4-fs (vda): mounted filesystem 34b94c48-234b-4869-b990-1f782e29954a ro with ordered data mode. Quota mode: none.
VFS: Mounted root (ext4 filesystem) readonly on device 253:0.
devtmpfs: mounted
Freeing unused kernel image (initmem) memory: 2532K
Failed to set sysctl parameter 'max_rcu_stall_to_panic=1': parameter not found
Run /sbin/init as init process
Kernel panic - not syncing: corrupted stack end detected inside scheduler
CPU: 0 UID: 0 PID: 1 Comm: init Not tainted 6.11.0-rc2-syzkaller-g7c1e5b9690b0 #0
Hardware name: riscv-virtio,qemu (DT)
Call Trace:
[<ffffffff80010216>] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:130
[<ffffffff85edbd86>] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:136
[<ffffffff85f3735e>] __dump_stack lib/dump_stack.c:93 [inline]
[<ffffffff85f3735e>] dump_stack_lvl+0x108/0x196 lib/dump_stack.c:119
[<ffffffff85f37408>] dump_stack+0x1c/0x24 lib/dump_stack.c:128
[<ffffffff85edc94a>] panic+0x388/0x806 kernel/panic.c:348
[<ffffffff85f4554a>] schedule_debug kernel/sched/core.c:5745 [inline]
[<ffffffff85f4554a>] __schedule+0x3230/0x3288 kernel/sched/core.c:6411
[<ffffffff85f45a6c>] preempt_schedule_common kernel/sched/core.c:6708 [inline]
[<ffffffff85f45a6c>] preempt_schedule+0xd2/0x1e2 kernel/sched/core.c:6732
[<ffffffff85f5a682>] __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
[<ffffffff85f5a682>] _raw_spin_unlock+0x88/0xa8 kernel/locking/spinlock.c:186
[<ffffffff80a53f8e>] spin_unlock include/linux/spinlock.h:391 [inline]
[<ffffffff80a53f8e>] iput_final fs/inode.c:1801 [inline]
[<ffffffff80a53f8e>] iput fs/inode.c:1829 [inline]
[<ffffffff80a53f8e>] iput+0x4d8/0x814 fs/inode.c:1815
[<ffffffff80a3cefe>] dentry_unlink_inode+0x268/0x51a fs/dcache.c:407
[<ffffffff80a3f91c>] __dentry_kill+0x1ae/0x680 fs/dcache.c:610
[<ffffffff80a46bcc>] shrink_kill fs/dcache.c:1055 [inline]
[<ffffffff80a46bcc>] shrink_dentry_list+0x144/0x646 fs/dcache.c:1082
[<ffffffff80a478e8>] shrink_dcache_parent+0x126/0x5c4 fs/dcache.c:1516
[<ffffffff80a48492>] do_one_tree fs/dcache.c:1545 [inline]
[<ffffffff80a48492>] shrink_dcache_for_umount+0x98/0x37c fs/dcache.c:1562
[<ffffffff809e84cc>] generic_shutdown_super+0x6e/0x342 fs/super.c:620
[<ffffffff809e9912>] kill_anon_super+0x3e/0x6c fs/super.c:1237
[<ffffffff80bf896a>] proc_kill_sb+0x8a/0x11a fs/proc/root.c:272
[<ffffffff809eb536>] deactivate_locked_super+0xd4/0x188 fs/super.c:473
[<ffffffff809eb66a>] deactivate_super fs/super.c:506 [inline]
[<ffffffff809eb66a>] deactivate_super+0x80/0x94 fs/super.c:502
[<ffffffff80a6dcf2>] cleanup_mnt+0x278/0x4b6 fs/namespace.c:1373
[<ffffffff80a6d614>] mntput_no_expire+0xb9a/0xdaa fs/namespace.c:1459
[<ffffffff80a6d898>] mntput+0x74/0xa2 fs/namespace.c:1469
[<ffffffff809e706a>] __fput+0x4c2/0xa12 fs/file_table.c:433
[<ffffffff809e7654>] ____fput+0x1a/0x24 fs/file_table.c:450
[<ffffffff8014e49e>] task_work_run+0x16a/0x25e kernel/task_work.c:228
[<ffffffff85f3a5f8>] resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
[<ffffffff85f3a5f8>] exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
[<ffffffff85f3a5f8>] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
[<ffffffff85f3a5f8>] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
[<ffffffff85f3a5f8>] syscall_exit_to_user_mode+0x30a/0x31e kernel/entry/common.c:218
[<ffffffff85f5ba76>] ret_from_exception+0x0/0x66 arch/riscv/kernel/entry.S:115
SMP: stopping secondary CPUs
Rebooting in 86400 seconds..

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/09/28 02:49 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 7c1e5b9690b0 440b26ec .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in mntput
2024/09/11 17:12 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 1ff95eb2bebd ede7a22c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in mntput
* Struck through repros no longer work on HEAD.