Kernel panic - not syncing: corrupted stack end detected inside scheduler
CPU: 0 PID: 5399 Comm: syz-executor.1 Not tainted 5.10.109-syzkaller-00693-g414e6c8e941c #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack_lvl+0x1e2/0x24b lib/dump_stack.c:118
dump_stack+0x15/0x1d lib/dump_stack.c:135
panic+0x2a1/0x7d9 kernel/panic.c:231
schedule_debug+0x100/0x180 kernel/sched/core.c:4540
__schedule+0x106/0xda0 kernel/sched/core.c:4684
preempt_schedule_irq+0xce/0x140 kernel/sched/core.c:5051
irqentry_exit_cond_resched kernel/entry/common.c:357 [inline]
irqentry_exit+0x50/0x60 kernel/entry/common.c:387
sysvec_apic_timer_interrupt+0xcb/0xe0 arch/x86/kernel/apic/apic.c:1095
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:635
RIP: 0010:is_last_task_frame arch/x86/kernel/unwind_frame.c:156 [inline]
RIP: 0010:unwind_next_frame+0x14a/0x740 arch/x86/kernel/unwind_frame.c:266
Code: 4c 89 e7 e8 88 fa 72 00 48 ba 00 00 00 00 00 fc ff df 4d 8b 34 24 49 8d be 48 7f 00 00 48 8b 5d d0 48 39 fb 0f 84 1c 01 00 00 <49> 81 c6 58 7f 00 00 49 8d 46 e8 48 89 45 c0 48 39 c3 75 58 48 89
RSP: 0018:ffffc9000b76a688 EFLAGS: 00000283
RAX: ffff888151a70000 RBX: ffffc9000b76cab8 RCX: 0000000081ade401
RDX: dffffc0000000000 RSI: ffffffff81ade4e5 RDI: ffffc9000b76ff48
RBP: ffffc9000b76a710 R08: ffffc9000b76a808 R09: 000000000000003a
R10: ffffc9000b76a810 R11: 0000000000000000 R12: ffff888151a70018
R13: 1ffff1102a34e003 R14: ffffc9000b768000 R15: ffffc9000b76a720
arch_stack_walk+0x112/0x140 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x11b/0x1e0 kernel/stacktrace.c:121
kasan_save_stack mm/kasan/common.c:38 [inline]
kasan_set_track mm/kasan/common.c:46 [inline]
set_alloc_info mm/kasan/common.c:428 [inline]
__kasan_slab_alloc+0xb2/0xe0 mm/kasan/common.c:461
kasan_slab_alloc include/linux/kasan.h:259 [inline]
slab_post_alloc_hook mm/slab.h:583 [inline]
slab_alloc_node mm/slub.c:2956 [inline]
slab_alloc mm/slub.c:2964 [inline]
kmem_cache_alloc+0x1a2/0x380 mm/slub.c:2969
kmem_cache_zalloc include/linux/slab.h:654 [inline]
lsm_file_alloc security/security.c:535 [inline]
security_file_alloc+0x36/0x200 security/security.c:1431
__alloc_file+0xc5/0x3b0 fs/file_table.c:106
alloc_empty_file+0xac/0x1b0 fs/file_table.c:151
dentry_open+0x4e/0x100 fs/open.c:956
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open fs/open.c:942 [inline]
dentry_open+0xb8/0x100 fs/open.c:958
file_open+0x2a3/0x650 fs/incfs/vfs.c:1427
do_dentry_open+0x7a5/0x1090 fs/open.c:819
vfs_open+0x73/0x80 fs/open.c:942
do_open fs/namei.c:3327 [inline]
path_openat+0x264d/0x3500 fs/namei.c:3444
do_filp_open+0x200/0x440 fs/namei.c:3471
do_sys_openat2+0x13b/0x470 fs/open.c:1211
do_sys_open fs/open.c:1227 [inline]
__do_sys_openat fs/open.c:1243 [inline]
__se_sys_openat fs/open.c:1238 [inline]
__x64_sys_openat+0x243/0x290 fs/open.c:1238
do_syscall_64+0x31/0x70 arch/x86/entry/common.c:46
entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x7fe67a083049
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe6791b7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fe67a196100 RCX: 00007fe67a083049
RDX: 0000000000000000 RSI: 00000000200000c0 RDI: ffffffffffffff9c
RBP: 00007fe67a0dd08d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe1cb0e2df R14: 00007fe6791b7300 R15: 0000000000022000
Kernel Offset: disabled
Rebooting in 86400 seconds..
----------------
Code disassembly (best guess):
0: 4c 89 e7 mov %r12,%rdi
3: e8 88 fa 72 00 callq 0x72fa90
8: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx
f: fc ff df
12: 4d 8b 34 24 mov (%r12),%r14
16: 49 8d be 48 7f 00 00 lea 0x7f48(%r14),%rdi
1d: 48 8b 5d d0 mov -0x30(%rbp),%rbx
21: 48 39 fb cmp %rdi,%rbx
24: 0f 84 1c 01 00 00 je 0x146
* 2a: 49 81 c6 58 7f 00 00 add $0x7f58,%r14 <-- trapping instruction
31: 49 8d 46 e8 lea -0x18(%r14),%rax
35: 48 89 45 c0 mov %rax,-0x40(%rbp)
39: 48 39 c3 cmp %rax,%rbx
3c: 75 58 jne 0x96
3e: 48 rex.W
3f: 89 .byte 0x89