syzbot


kernel panic: corrupted stack end in handle_mm_fault

Status: internal: reported on 2022/06/08 16:28
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: b81d591386c3 riscv: Increase stack size under KASAN
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-riscv64]
First crash: 235d, last: 235d

Sample crash report:
Kernel panic - not syncing: corrupted stack end detected inside scheduler
CPU: 0 PID: 2050 Comm: rm Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0
Hardware name: riscv-virtio,qemu (DT)
Call Trace:
[<ffffffff8000a228>] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:113
[<ffffffff831668cc>] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:119
[<ffffffff831756ba>] __dump_stack lib/dump_stack.c:88 [inline]
[<ffffffff831756ba>] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:106
[<ffffffff83175742>] dump_stack+0x1c/0x24 lib/dump_stack.c:113
[<ffffffff83166fa8>] panic+0x24a/0x634 kernel/panic.c:233
[<ffffffff831a688a>] schedule_debug kernel/sched/core.c:5541 [inline]
[<ffffffff831a688a>] schedule+0x0/0x14c kernel/sched/core.c:6187
[<ffffffff831a6b00>] preempt_schedule_common+0x4e/0xde kernel/sched/core.c:6462
[<ffffffff831a6bc4>] preempt_schedule+0x34/0x36 kernel/sched/core.c:6487
[<ffffffff831afc2c>] __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
[<ffffffff831afc2c>] _raw_spin_unlock+0x60/0x6a kernel/locking/spinlock.c:186
[<ffffffff803d8a58>] spin_unlock include/linux/spinlock.h:389 [inline]
[<ffffffff803d8a58>] do_anonymous_page mm/memory.c:3826 [inline]
[<ffffffff803d8a58>] handle_pte_fault mm/memory.c:4568 [inline]
[<ffffffff803d8a58>] __handle_mm_fault+0x1798/0x23a4 mm/memory.c:4705
[<ffffffff803d98fa>] handle_mm_fault+0x296/0x674 mm/memory.c:4803
[<ffffffff8001188e>] do_page_fault+0x308/0xa3c arch/riscv/mm/fault.c:323
[<ffffffff80005724>] ret_from_exception+0x0/0x10
[<ffffffff80ad15c2>] instrument_copy_to_user include/linux/instrumented.h:118 [inline]
[<ffffffff80ad15c2>] copyout lib/iov_iter.c:154 [inline]
[<ffffffff80ad15c2>] copyout lib/iov_iter.c:149 [inline]
[<ffffffff80ad15c2>] copy_page_to_iter_iovec lib/iov_iter.c:226 [inline]
[<ffffffff80ad15c2>] __copy_page_to_iter lib/iov_iter.c:850 [inline]
[<ffffffff80ad15c2>] copy_page_to_iter+0x3c4/0xbee lib/iov_iter.c:878
SMP: stopping secondary CPUs
Rebooting in 86400 seconds..

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Title
ci-qemu2-riscv64 2022/06/08 16:27 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d b2706118 .config console log report info kernel panic: corrupted stack end in handle_mm_fault
* Struck through repros no longer work on HEAD.