syzbot


kernel panic: corrupted stack end in hub_event (3)

Status: upstream: reported on 2024/06/03 05:27
Subsystems: pm
[Documentation on labels]
Reported-by: syzbot+fda41ea3324f13031be5@syzkaller.appspotmail.com
First crash: 58d, last: 3h45m
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [hwmon?] kernel panic: corrupted stack end in hub_event (3) 0 (1) 2024/06/03 05:27
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel panic: corrupted stack end in hub_event kernfs 93 526d 871d 22/27 fixed on 2023/02/24 13:50
upstream kernel panic: corrupted stack end in hub_event (2) kernel 2 166d 171d 0/27 auto-obsoleted due to no activity on 2024/05/21 18:53

Sample crash report:
usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
usb 1-1: config 0 descriptor??
HID 045e:07da: Invalid code 65791 type 1
input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input0
Kernel panic - not syncing: corrupted stack end detected inside scheduler
CPU: 1 PID: 924 Comm: kworker/1:2 Not tainted 6.10.0-rc6-syzkaller-gc562ba719df5 #0
Hardware name: riscv-virtio,qemu (DT)
Workqueue: usb_hub_wq hub_event
Call Trace:
[<ffffffff8000f6fc>] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:130
[<ffffffff85df2034>] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:136
[<ffffffff85e4d4e8>] __dump_stack lib/dump_stack.c:88 [inline]
[<ffffffff85e4d4e8>] dump_stack_lvl+0x108/0x196 lib/dump_stack.c:114
[<ffffffff85e4d592>] dump_stack+0x1c/0x24 lib/dump_stack.c:123
[<ffffffff85df2bfa>] panic+0x382/0x800 kernel/panic.c:347
[<ffffffff85e5c4dc>] schedule_debug kernel/sched/core.c:5962 [inline]
[<ffffffff85e5c4dc>] __schedule+0x342e/0x3486 kernel/sched/core.c:6628
[<ffffffff85e5d4d4>] preempt_schedule_irq+0x7a/0x1a8 kernel/sched/core.c:7067
[<ffffffff85e50c9a>] raw_irqentry_exit_cond_resched kernel/entry/common.c:311 [inline]
[<ffffffff85e50c9a>] raw_irqentry_exit_cond_resched kernel/entry/common.c:303 [inline]
[<ffffffff85e50c9a>] irqentry_exit+0x138/0x17a kernel/entry/common.c:354
[<ffffffff85e4f90e>] do_irq+0x34/0x48 arch/riscv/kernel/traps.c:390
[<ffffffff85e7296c>] ret_from_exception+0x0/0x64 arch/riscv/kernel/entry.S:112
[<ffffffff80132a64>] arch_local_irq_restore arch/riscv/include/asm/irqflags.h:51 [inline]
[<ffffffff80132a64>] queue_work_on+0x84/0x16c kernel/workqueue.c:2415
[<ffffffff8011ebc4>] queue_work include/linux/workqueue.h:621 [inline]
[<ffffffff8011ebc4>] call_usermodehelper_exec+0x1e8/0x4ca kernel/umh.c:434
[<ffffffff85d75e1a>] kobject_uevent_env+0xcec/0x1490 lib/kobject_uevent.c:617
[<ffffffff85d765e0>] kobject_uevent+0x22/0x2e lib/kobject_uevent.c:641
[<ffffffff8274ff4a>] device_add+0x107e/0x181a drivers/base/core.c:3660
[<ffffffff809d1b02>] cdev_device_add+0x130/0x258 fs/char_dev.c:556
[<ffffffff83ad6f40>] evdev_connect+0x36c/0x46e drivers/input/evdev.c:1386
[<ffffffff83ab8b28>] input_attach_handler.isra.0+0x16e/0x23a drivers/input/input.c:1064
[<ffffffff83abc21a>] input_register_device+0xc92/0xea0 drivers/input/input.c:2470
[<ffffffff843c807c>] hidinput_connect+0x4db4/0x8c4a drivers/hid/hid-input.c:2370
[<ffffffff843b92be>] hid_connect+0x126a/0x16be drivers/hid/hid-core.c:2193
[<ffffffff843b97c8>] hid_hw_start drivers/hid/hid-core.c:2308 [inline]
[<ffffffff843b97c8>] hid_hw_start+0xb6/0x13c drivers/hid/hid-core.c:2299
[<ffffffff8445833e>] ms_probe+0x15e/0x4f2 drivers/hid/hid-microsoft.c:391
[<ffffffff843b9e76>] __hid_device_probe drivers/hid/hid-core.c:2632 [inline]
[<ffffffff843b9e76>] hid_device_probe+0x2a4/0x3f2 drivers/hid/hid-core.c:2669
[<ffffffff8275a12a>] call_driver_probe drivers/base/dd.c:578 [inline]
[<ffffffff8275a12a>] really_probe+0x232/0x9be drivers/base/dd.c:656
[<ffffffff8275aa8a>] __driver_probe_device+0x1d4/0x3f2 drivers/base/dd.c:798
[<ffffffff8275ad08>] driver_probe_device+0x60/0x1ce drivers/base/dd.c:828
[<ffffffff8275b058>] __device_attach_driver+0x1e2/0x2fc drivers/base/dd.c:956
[<ffffffff82754996>] bus_for_each_drv+0x142/0x1da drivers/base/bus.c:457
[<ffffffff8275bc7a>] __device_attach+0x1c4/0x462 drivers/base/dd.c:1028
[<ffffffff8275c2a0>] device_initial_probe+0x1c/0x26 drivers/base/dd.c:1077
[<ffffffff82757418>] bus_probe_device+0x15c/0x192 drivers/base/bus.c:532
[<ffffffff8274ffa4>] device_add+0x10d8/0x181a drivers/base/core.c:3679
[<ffffffff843b3118>] hid_add_device+0x374/0x9d8 drivers/hid/hid-core.c:2815
[<ffffffff8453fe54>] usbhid_probe+0xa52/0xf86 drivers/hid/usbhid/hid-core.c:1429
[<ffffffff8332c2fe>] usb_probe_interface+0x2d8/0x8c6 drivers/usb/core/driver.c:399
[<ffffffff8275a12a>] call_driver_probe drivers/base/dd.c:578 [inline]
[<ffffffff8275a12a>] really_probe+0x232/0x9be drivers/base/dd.c:656
[<ffffffff8275aa8a>] __driver_probe_device+0x1d4/0x3f2 drivers/base/dd.c:798
[<ffffffff8275ad08>] driver_probe_device+0x60/0x1ce drivers/base/dd.c:828
[<ffffffff8275b058>] __device_attach_driver+0x1e2/0x2fc drivers/base/dd.c:956
[<ffffffff82754996>] bus_for_each_drv+0x142/0x1da drivers/base/bus.c:457
[<ffffffff8275bc7a>] __device_attach+0x1c4/0x462 drivers/base/dd.c:1028
[<ffffffff8275c2a0>] device_initial_probe+0x1c/0x26 drivers/base/dd.c:1077
[<ffffffff82757418>] bus_probe_device+0x15c/0x192 drivers/base/bus.c:532
[<ffffffff8274ffa4>] device_add+0x10d8/0x181a drivers/base/core.c:3679
[<ffffffff83325c34>] usb_set_configuration+0xf08/0x19dc drivers/usb/core/message.c:2210
[<ffffffff8334d65a>] usb_generic_driver_probe+0xae/0x128 drivers/usb/core/generic.c:254
[<ffffffff833278ce>] usb_probe_device+0xd6/0x360 drivers/usb/core/driver.c:294
[<ffffffff8275a12a>] call_driver_probe drivers/base/dd.c:578 [inline]
[<ffffffff8275a12a>] really_probe+0x232/0x9be drivers/base/dd.c:656
[<ffffffff8275aa8a>] __driver_probe_device+0x1d4/0x3f2 drivers/base/dd.c:798
[<ffffffff8275ad08>] driver_probe_device+0x60/0x1ce drivers/base/dd.c:828
[<ffffffff8275b058>] __device_attach_driver+0x1e2/0x2fc drivers/base/dd.c:956
[<ffffffff82754996>] bus_for_each_drv+0x142/0x1da drivers/base/bus.c:457
[<ffffffff8275bc7a>] __device_attach+0x1c4/0x462 drivers/base/dd.c:1028
[<ffffffff8275c2a0>] device_initial_probe+0x1c/0x26 drivers/base/dd.c:1077
[<ffffffff82757418>] bus_probe_device+0x15c/0x192 drivers/base/bus.c:532
[<ffffffff8274ffa4>] device_add+0x10d8/0x181a drivers/base/core.c:3679
[<ffffffff833018a2>] usb_new_device+0x960/0x1750 drivers/usb/core/hub.c:2651
[<ffffffff83307eca>] hub_port_connect drivers/usb/core/hub.c:5521 [inline]
[<ffffffff83307eca>] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
[<ffffffff83307eca>] port_event drivers/usb/core/hub.c:5821 [inline]
[<ffffffff83307eca>] hub_event+0x2a2a/0x4a5c drivers/usb/core/hub.c:5903
[<ffffffff8012d3ba>] process_one_work+0x938/0x1d5c kernel/workqueue.c:3248
[<ffffffff8012ed9c>] process_scheduled_works kernel/workqueue.c:3329 [inline]
[<ffffffff8012ed9c>] worker_thread+0x5be/0xdec kernel/workqueue.c:3409
[<ffffffff8014d93c>] kthread+0x28c/0x3a6 kernel/kthread.c:389
[<ffffffff85e72a76>] ret_from_fork+0xe/0x1c arch/riscv/kernel/entry.S:232
SMP: stopping secondary CPUs
Rebooting in 86400 seconds..

Crashes (35):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/07/27 10:50 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes c562ba719df5 46eb10b7 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/07/13 09:50 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes c562ba719df5 eaeb5c15 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/07/09 21:48 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes c562ba719df5 bc144f9a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/30 22:10 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes cc2c169e34b4 757f06b1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/24 12:34 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b 0c0f0b4b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/22 23:33 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b edc5149a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/22 21:15 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b edc5149a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/22 20:31 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b edc5149a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/22 17:51 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b edc5149a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/22 16:52 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b edc5149a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/20 08:05 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b 41b7e219 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/19 21:38 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b 41b7e219 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/17 06:19 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b f429ab00 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/17 03:17 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b f429ab00 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/16 05:13 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b f429ab00 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/16 05:12 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b f429ab00 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/10 11:13 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes e2c79b4c5c4d 82c05ab8 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/10 04:54 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes e2c79b4c5c4d 82c05ab8 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/06 22:42 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes e2c79b4c5c4d 121701b6 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/06 18:47 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes e2c79b4c5c4d 121701b6 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/06 10:26 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes e2c79b4c5c4d 121701b6 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/06 02:18 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes e2c79b4c5c4d 121701b6 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/06 02:17 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes e2c79b4c5c4d 121701b6 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/04 06:25 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 7932b172ac7e a1feae05 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/04 01:42 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 7932b172ac7e a1feae05 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/06/03 11:59 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 7932b172ac7e 289d9bef .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/05/30 16:36 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 1613e604df0c 34889ee3 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/05/30 13:56 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 1613e604df0c 34889ee3 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/05/30 13:08 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 1613e604df0c 34889ee3 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/05/30 13:07 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 1613e604df0c 34889ee3 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/05/30 11:44 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 1613e604df0c 34889ee3 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/05/30 11:30 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 1613e604df0c 34889ee3 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/05/30 09:14 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 1613e604df0c 34889ee3 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/05/30 05:24 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 1613e604df0c 34889ee3 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
2024/05/30 05:23 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 1613e604df0c 34889ee3 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in hub_event
* Struck through repros no longer work on HEAD.