syzbot


kernel panic: corrupted stack end in cleanup_net

Status: internal: reported on 2022/05/23 05:54
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: b81d591386c3 riscv: Increase stack size under KASAN
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-riscv64]
First crash: 260d, last: 41d

Sample crash report:
bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
bond0 (unregistering): Released all slaves
Kernel panic - not syncing: corrupted stack end detected inside scheduler
CPU: 0 PID: 2043 Comm: kworker/u4:1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0
Hardware name: riscv-virtio,qemu (DT)
Workqueue: netns cleanup_net
Call Trace:
[<ffffffff8000a228>] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:113
[<ffffffff831668cc>] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:119
[<ffffffff831756ba>] __dump_stack lib/dump_stack.c:88 [inline]
[<ffffffff831756ba>] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:106
[<ffffffff83175742>] dump_stack+0x1c/0x24 lib/dump_stack.c:113
[<ffffffff83166fa8>] panic+0x24a/0x634 kernel/panic.c:233
[<ffffffff831a688a>] schedule_debug kernel/sched/core.c:5541 [inline]
[<ffffffff831a688a>] schedule+0x0/0x14c kernel/sched/core.c:6187
[<ffffffff831a6c62>] preempt_schedule_notrace+0x9c/0x19a kernel/sched/core.c:6541
[<ffffffff831a19b4>] lockdep_enabled kernel/locking/lockdep.c:88 [inline]
[<ffffffff831a19b4>] lock_is_held_type+0x158/0x188 kernel/locking/lockdep.c:5675
[<ffffffff800bac4e>] lock_is_held include/linux/lockdep.h:283 [inline]
[<ffffffff800bac4e>] __might_resched+0x2e/0x342 kernel/sched/core.c:9545
[<ffffffff800bafc0>] __might_sleep+0x5e/0x8e kernel/sched/core.c:9512
[<ffffffff80152f26>] synchronize_rcu_expedited+0x348/0x4e0 kernel/rcu/tree_exp.h:856
[<ffffffff801531fc>] synchronize_rcu+0x13e/0x17a kernel/rcu/tree.c:3785
[<ffffffff8010e8ca>] lockdep_unregister_key+0x1a8/0x22c kernel/locking/lockdep.c:6327
[<ffffffff8009a0b6>] wq_unregister_lockdep kernel/workqueue.c:3508 [inline]
[<ffffffff8009a0b6>] destroy_workqueue+0x38a/0x582 kernel/workqueue.c:4475
[<ffffffff817590a4>] wg_destruct+0x13c/0x24e drivers/net/wireguard/device.c:238
[<ffffffff8274727a>] netdev_run_todo+0x574/0x752 net/core/dev.c:9962
[<ffffffff8275fc06>] rtnl_unlock+0x14/0x1c net/core/rtnetlink.c:112
[<ffffffff8272da60>] default_device_exit_batch+0x28e/0x2dc net/core/dev.c:10946
[<ffffffff8270dc76>] ops_exit_list+0xcc/0xe8 net/core/net_namespace.c:173
[<ffffffff8270f544>] cleanup_net+0x430/0x732 net/core/net_namespace.c:597
[<ffffffff80093b44>] process_one_work+0x654/0xffe kernel/workqueue.c:2307
[<ffffffff8009484e>] worker_thread+0x360/0x8fa kernel/workqueue.c:2454
[<ffffffff800a7f58>] kthread+0x19e/0x1fa kernel/kthread.c:377
[<ffffffff80005724>] ret_from_exception+0x0/0x10
SMP: stopping secondary CPUs
Rebooting in 86400 seconds..

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Title
ci-qemu2-riscv64 2022/12/28 14:03 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 44712fbc .config console log report info kernel panic: corrupted stack end in cleanup_net
ci-qemu2-riscv64 2022/05/23 05:53 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 7268fa62 .config console log report info kernel panic: corrupted stack end in cleanup_net
* Struck through repros no longer work on HEAD.