syzbot


kernel panic: corrupted stack end in hub_event

Status: internal: reported on 2022/03/08 16:48
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: b81d591386c3 riscv: Increase stack size under KASAN
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-riscv64]
First crash: 112d, last: 5h02m

Sample crash report:
plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
Kernel panic - not syncing: corrupted stack end detected inside scheduler
CPU: 0 PID: 3248 Comm: kworker/0:5 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0
Hardware name: riscv-virtio,qemu (DT)
Workqueue: usb_hub_wq hub_event
Call Trace:
[<ffffffff8000a228>] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:113
[<ffffffff831668cc>] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:119
[<ffffffff831756ba>] __dump_stack lib/dump_stack.c:88 [inline]
[<ffffffff831756ba>] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:106
[<ffffffff83175742>] dump_stack+0x1c/0x24 lib/dump_stack.c:113
[<ffffffff83166fa8>] panic+0x24a/0x634 kernel/panic.c:233
[<ffffffff831a688a>] schedule_debug kernel/sched/core.c:5541 [inline]
[<ffffffff831a688a>] schedule+0x0/0x14c kernel/sched/core.c:6187
[<ffffffff831a6b00>] preempt_schedule_common+0x4e/0xde kernel/sched/core.c:6462
[<ffffffff831a6bc4>] preempt_schedule+0x34/0x36 kernel/sched/core.c:6487
[<ffffffff8066764e>] idr_preload_end include/linux/idr.h:174 [inline]
[<ffffffff8066764e>] __kernfs_new_node+0x5e8/0x5f2 fs/kernfs/dir.c:597
[<ffffffff8066a298>] kernfs_new_node+0x66/0xbe fs/kernfs/dir.c:647
[<ffffffff8066e3fc>] __kernfs_create_file+0x4e/0x1e8 fs/kernfs/file.c:987
[<ffffffff806700ba>] sysfs_add_file_mode_ns+0x138/0x254 fs/sysfs/file.c:294
[<ffffffff8067244e>] sysfs_merge_group+0x13e/0x234 fs/sysfs/group.c:342
[<ffffffff81405e50>] dpm_sysfs_add+0x1c6/0x1dc drivers/base/power/sysfs.c:707
[<ffffffff813e6f3a>] device_add+0x846/0x129e drivers/base/core.c:3362
[<ffffffff813e7c82>] device_create_groups_vargs+0x160/0x17e drivers/base/core.c:4062
[<ffffffff813e7d4e>] device_create+0xae/0xe2 drivers/base/core.c:4104
[<ffffffff8234d604>] hidraw_connect+0x12e/0x26e drivers/hid/hidraw.c:565
[<ffffffff8233f8f4>] hid_connect+0x50c/0x858 drivers/hid/hid-core.c:1960
[<ffffffff8233fcdc>] hid_hw_start drivers/hid/hid-core.c:2059 [inline]
[<ffffffff8233fcdc>] hid_hw_start+0x9c/0xda drivers/hid/hid-core.c:2050
[<ffffffff823a0e2e>] plantronics_probe+0x204/0x2a0 drivers/hid/hid-plantronics.c:191
[<ffffffff8234010e>] hid_device_probe+0x1b8/0x24c drivers/hid/hid-core.c:2380
[<ffffffff813eebec>] call_driver_probe drivers/base/dd.c:517 [inline]
[<ffffffff813eebec>] really_probe+0x1a6/0x89e drivers/base/dd.c:596
[<ffffffff813ef52e>] __driver_probe_device+0x24a/0x2d4 drivers/base/dd.c:752
[<ffffffff813ef618>] driver_probe_device+0x60/0x1a4 drivers/base/dd.c:782
[<ffffffff813f02f4>] __device_attach_driver+0x17c/0x224 drivers/base/dd.c:899
[<ffffffff813e9f2c>] bus_for_each_drv+0x132/0x1a6 drivers/base/bus.c:427
[<ffffffff813efc2a>] __device_attach+0x1e0/0x372 drivers/base/dd.c:970
[<ffffffff813f06f6>] device_initial_probe+0x1c/0x26 drivers/base/dd.c:1017
[<ffffffff813eca88>] bus_probe_device+0x144/0x154 drivers/base/bus.c:487
[<ffffffff813e7012>] device_add+0x91e/0x129e drivers/base/core.c:3405
[<ffffffff82339bd2>] hid_add_device+0x268/0x5ca drivers/hid/hid-core.c:2530
[<ffffffff823fa9b2>] usbhid_probe+0x6b6/0x8c0 drivers/hid/usbhid/hid-core.c:1424
[<ffffffff81a537d6>] usb_probe_interface+0x21c/0x57a drivers/usb/core/driver.c:396
[<ffffffff813eebec>] call_driver_probe drivers/base/dd.c:517 [inline]
[<ffffffff813eebec>] really_probe+0x1a6/0x89e drivers/base/dd.c:596
[<ffffffff813ef52e>] __driver_probe_device+0x24a/0x2d4 drivers/base/dd.c:752
[<ffffffff813ef618>] driver_probe_device+0x60/0x1a4 drivers/base/dd.c:782
[<ffffffff813f02f4>] __device_attach_driver+0x17c/0x224 drivers/base/dd.c:899
[<ffffffff813e9f2c>] bus_for_each_drv+0x132/0x1a6 drivers/base/bus.c:427
[<ffffffff813efc2a>] __device_attach+0x1e0/0x372 drivers/base/dd.c:970
[<ffffffff813f06f6>] device_initial_probe+0x1c/0x26 drivers/base/dd.c:1017
[<ffffffff813eca88>] bus_probe_device+0x144/0x154 drivers/base/bus.c:487
[<ffffffff813e7012>] device_add+0x91e/0x129e drivers/base/core.c:3405
[<ffffffff81a4f87a>] usb_set_configuration+0xafe/0xf6a drivers/usb/core/message.c:2170
[<ffffffff81a6818a>] usb_generic_driver_probe+0xb2/0x122 drivers/usb/core/generic.c:238
[<ffffffff81a52b94>] usb_probe_device+0xa8/0x204 drivers/usb/core/driver.c:293
[<ffffffff813eebec>] call_driver_probe drivers/base/dd.c:517 [inline]
[<ffffffff813eebec>] really_probe+0x1a6/0x89e drivers/base/dd.c:596
[<ffffffff813ef52e>] __driver_probe_device+0x24a/0x2d4 drivers/base/dd.c:752
[<ffffffff813ef618>] driver_probe_device+0x60/0x1a4 drivers/base/dd.c:782
[<ffffffff813f02f4>] __device_attach_driver+0x17c/0x224 drivers/base/dd.c:899
[<ffffffff813e9f2c>] bus_for_each_drv+0x132/0x1a6 drivers/base/bus.c:427
[<ffffffff813efc2a>] __device_attach+0x1e0/0x372 drivers/base/dd.c:970
[<ffffffff813f06f6>] device_initial_probe+0x1c/0x26 drivers/base/dd.c:1017
[<ffffffff813eca88>] bus_probe_device+0x144/0x154 drivers/base/bus.c:487
[<ffffffff813e7012>] device_add+0x91e/0x129e drivers/base/core.c:3405
[<ffffffff81a3808a>] usb_new_device+0x5c8/0xd78 drivers/usb/core/hub.c:2566
[<ffffffff81a3c4d6>] hub_port_connect drivers/usb/core/hub.c:5358 [inline]
[<ffffffff81a3c4d6>] hub_port_connect_change drivers/usb/core/hub.c:5502 [inline]
[<ffffffff81a3c4d6>] port_event drivers/usb/core/hub.c:5660 [inline]
[<ffffffff81a3c4d6>] hub_event+0x1b3e/0x3364 drivers/usb/core/hub.c:5742
[<ffffffff80093b44>] process_one_work+0x654/0xffe kernel/workqueue.c:2307
[<ffffffff8009484e>] worker_thread+0x360/0x8fa kernel/workqueue.c:2454
[<ffffffff800a7f58>] kthread+0x19e/0x1fa kernel/kthread.c:377
[<ffffffff80005724>] ret_from_exception+0x0/0x10
SMP: stopping secondary CPUs
Rebooting in 86400 seconds..

Crashes (31):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-qemu2-riscv64 2022/06/29 02:40 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 496a8536 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/06/25 02:15 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d a371c43c .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/06/22 11:32 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 0fc5c330 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/06/18 03:24 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 8f633d84 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/06/01 07:03 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 3666edfe .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/05/31 02:25 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d af70c3a9 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/05/24 03:18 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d e7f9308d .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/05/13 22:25 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 107f6434 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/05/11 14:55 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d beb0b407 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/05/03 07:23 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 7ee63e2c .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/04/30 20:43 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 2df221f6 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/04/29 11:28 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d e9076525 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/04/13 12:58 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d faabdb86 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/04/13 09:49 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d faabdb86 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/04/09 06:12 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d e22c3da3 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/04/09 00:14 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 15be3cba .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/04/08 05:27 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d c6ff3e05 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/04/06 20:05 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 97582466 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/04/01 12:10 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d b183f420 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/03/31 13:36 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d c4c32d8c .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/03/30 12:59 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 42718dd6 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/03/30 08:42 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 6bdac766 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/03/30 00:07 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 6bdac766 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/03/25 22:21 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 89bc8608 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/03/23 00:01 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 5ff41e94 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/03/22 14:39 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d d88ef0c5 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/03/14 12:30 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 9e8eaa75 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/03/11 18:17 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 9e8eaa75 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/03/11 14:06 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes c80ee64a8020 9e8eaa75 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/03/09 06:02 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 74583f1b92cb 9e8eaa75 .config log report info kernel panic: corrupted stack end in hub_event
ci-qemu2-riscv64 2022/03/08 16:47 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 74583f1b92cb 9e8eaa75 .config log report info kernel panic: corrupted stack end in hub_event