syzbot


kernel panic: corrupted stack end in rtnl_newlink

Status: upstream: reported on 2022/03/14 08:17
Reported-by: syzbot+0600986d88e2d4d7ebb8@syzkaller.appspotmail.com
Fix commit: b81d591386c3 riscv: Increase stack size under KASAN
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-riscv64]
First crash: 112d, last: 4h30m
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 kernel panic: corrupted stack end in rtnl_newlink 1 339d 339d 0/1 auto-closed as invalid on 2021/11/21 12:28

Sample crash report:
Kernel panic - not syncing: corrupted stack end detected inside scheduler
CPU: 0 PID: 2045 Comm: syz-executor.0 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0
Hardware name: riscv-virtio,qemu (DT)
Call Trace:
[<ffffffff8000a228>] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:113
[<ffffffff831668cc>] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:119
[<ffffffff831756ba>] __dump_stack lib/dump_stack.c:88 [inline]
[<ffffffff831756ba>] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:106
[<ffffffff83175742>] dump_stack+0x1c/0x24 lib/dump_stack.c:113
[<ffffffff83166fa8>] panic+0x24a/0x634 kernel/panic.c:233
[<ffffffff831a688a>] schedule_debug kernel/sched/core.c:5541 [inline]
[<ffffffff831a688a>] schedule+0x0/0x14c kernel/sched/core.c:6187
[<ffffffff831a6b00>] preempt_schedule_common+0x4e/0xde kernel/sched/core.c:6462
[<ffffffff831a6bc4>] preempt_schedule+0x34/0x36 kernel/sched/core.c:6487
[<ffffffff8046ef56>] __slab_alloc.constprop.0+0x8a/0x8c mm/slub.c:3107
[<ffffffff8046fb9c>] slab_alloc_node mm/slub.c:3196 [inline]
[<ffffffff8046fb9c>] slab_alloc mm/slub.c:3238 [inline]
[<ffffffff8046fb9c>] __kmalloc+0x268/0x318 mm/slub.c:4420
[<ffffffff82bde908>] kmalloc include/linux/slab.h:586 [inline]
[<ffffffff82bde908>] kzalloc include/linux/slab.h:715 [inline]
[<ffffffff82bde908>] fib_create_info+0xade/0x2d8e net/ipv4/fib_semantics.c:1464
[<ffffffff82becedc>] fib_table_insert+0x1a0/0xebe net/ipv4/fib_trie.c:1224
[<ffffffff82bd1222>] fib_magic+0x3f4/0x438 net/ipv4/fib_frontend.c:1087
[<ffffffff82bd62a2>] fib_add_ifaddr+0x1fc/0x2e2 net/ipv4/fib_frontend.c:1122
[<ffffffff82bd66ea>] fib_netdev_event+0x362/0x4b0 net/ipv4/fib_frontend.c:1466
[<ffffffff800aac84>] notifier_call_chain+0xb8/0x188 kernel/notifier.c:84
[<ffffffff800aad7e>] raw_notifier_call_chain+0x2a/0x38 kernel/notifier.c:392
[<ffffffff8271d086>] call_netdevice_notifiers_info+0x9e/0x10c net/core/dev.c:1919
[<ffffffff827422c8>] call_netdevice_notifiers_extack net/core/dev.c:1931 [inline]
[<ffffffff827422c8>] call_netdevice_notifiers net/core/dev.c:1945 [inline]
[<ffffffff827422c8>] __dev_notify_flags+0x108/0x1fa net/core/dev.c:8179
[<ffffffff827436f6>] dev_change_flags+0x9c/0xba net/core/dev.c:8215
[<ffffffff82767e16>] do_setlink+0x5d6/0x21c4 net/core/rtnetlink.c:2729
[<ffffffff8276a6a2>] __rtnl_newlink+0x99e/0xfa0 net/core/rtnetlink.c:3412
[<ffffffff8276ad04>] rtnl_newlink+0x60/0x8c net/core/rtnetlink.c:3527
[<ffffffff8276b46c>] rtnetlink_rcv_msg+0x338/0x9a0 net/core/rtnetlink.c:5592
[<ffffffff8296ded2>] netlink_rcv_skb+0xf8/0x2be net/netlink/af_netlink.c:2494
[<ffffffff827624f4>] rtnetlink_rcv+0x26/0x30 net/core/rtnetlink.c:5610
[<ffffffff8296cbcc>] netlink_unicast_kernel net/netlink/af_netlink.c:1317 [inline]
[<ffffffff8296cbcc>] netlink_unicast+0x40e/0x5fe net/netlink/af_netlink.c:1343
[<ffffffff8296d29c>] netlink_sendmsg+0x4e0/0x994 net/netlink/af_netlink.c:1919
[<ffffffff826d264e>] sock_sendmsg_nosec net/socket.c:705 [inline]
[<ffffffff826d264e>] sock_sendmsg+0xa0/0xc4 net/socket.c:725
[<ffffffff826d7026>] __sys_sendto+0x1f2/0x2e0 net/socket.c:2040
[<ffffffff826d7152>] __do_sys_sendto net/socket.c:2052 [inline]
[<ffffffff826d7152>] sys_sendto+0x3e/0x52 net/socket.c:2048
[<ffffffff80005716>] ret_from_syscall+0x0/0x2
SMP: stopping secondary CPUs
Rebooting in 86400 seconds..

Crashes (1173):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-qemu2-riscv64 2022/06/29 02:28 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 496a8536 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/29 00:02 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 496a8536 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/28 21:45 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 496a8536 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/28 20:04 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 496a8536 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/28 15:59 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 496a8536 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/28 14:50 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 496a8536 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/28 12:05 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d ef82eb2c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/28 10:44 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d ef82eb2c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/28 05:02 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d ef82eb2c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/28 02:05 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d ef82eb2c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/28 00:44 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d ef82eb2c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/27 23:34 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d ef82eb2c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/27 22:14 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d ef82eb2c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/27 21:14 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d ef82eb2c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/27 19:19 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d ef82eb2c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/27 17:36 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d ef82eb2c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/26 18:47 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a371c43c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/26 00:04 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a371c43c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/25 22:51 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a371c43c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/25 17:06 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a371c43c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/25 15:14 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a371c43c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/25 12:49 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a371c43c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/25 11:24 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a371c43c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/25 09:18 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a371c43c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/25 06:31 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a371c43c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/25 04:54 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a371c43c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/25 03:36 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a371c43c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/25 00:50 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a371c43c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/24 23:30 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a371c43c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/24 22:03 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a371c43c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/24 19:51 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a371c43c .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/24 16:23 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a5dbd430 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/24 15:20 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a5dbd430 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/24 13:51 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a5dbd430 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/24 12:14 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a5dbd430 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/24 08:22 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a5dbd430 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/24 06:50 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 912f5df7 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/24 04:47 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 912f5df7 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/23 18:59 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 912f5df7 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/23 13:03 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 912f5df7 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/23 09:46 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 912f5df7 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/23 05:06 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 912f5df7 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/22 23:43 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 912f5df7 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/22 21:19 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 912f5df7 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/22 19:39 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 912f5df7 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/22 16:54 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 912f5df7 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/06/22 15:03 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 0fc5c330 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/03/14 07:10 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 9e8eaa75 .config log report info kernel panic: corrupted stack end in rtnl_newlink
ci-qemu2-riscv64 2022/03/08 16:34 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 74583f1b92cb 9e8eaa75 .config log report info kernel panic: corrupted stack end in rtnl_newlink