syzbot


kernel panic: corrupted stack end in shmem_fault

Status: internal: reported on 2022/10/09 20:56
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: b81d591386c3 riscv: Increase stack size under KASAN
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-riscv64]
First crash: 120d, last: 25d

Sample crash report:
Kernel panic - not syncing: corrupted stack end detected inside scheduler
CPU: 0 PID: 7791 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0
Hardware name: riscv-virtio,qemu (DT)
Call Trace:
[<ffffffff8000a228>] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:113
[<ffffffff831668cc>] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:119
[<ffffffff831756ba>] __dump_stack lib/dump_stack.c:88 [inline]
[<ffffffff831756ba>] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:106
[<ffffffff83175742>] dump_stack+0x1c/0x24 lib/dump_stack.c:113
[<ffffffff83166fa8>] panic+0x24a/0x634 kernel/panic.c:233
[<ffffffff831a688a>] schedule_debug kernel/sched/core.c:5541 [inline]
[<ffffffff831a688a>] schedule+0x0/0x14c kernel/sched/core.c:6187
[<ffffffff831a6b00>] preempt_schedule_common+0x4e/0xde kernel/sched/core.c:6462
[<ffffffff831a6bc4>] preempt_schedule+0x34/0x36 kernel/sched/core.c:6487
[<ffffffff831afce2>] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:160 [inline]
[<ffffffff831afce2>] _raw_spin_unlock_irq+0x6c/0x76 kernel/locking/spinlock.c:202
[<ffffffff80389846>] spin_unlock_irq include/linux/spinlock.h:399 [inline]
[<ffffffff80389846>] shmem_add_to_page_cache+0x6ca/0x970 mm/shmem.c:747
[<ffffffff8038d376>] shmem_getpage_gfp+0x73e/0x13ea mm/shmem.c:1902
[<ffffffff8038e136>] shmem_fault+0x114/0x3fe mm/shmem.c:2080
[<ffffffff803cdfc0>] __do_fault+0x8c/0x46c mm/memory.c:3868
[<ffffffff803d83be>] do_read_fault mm/memory.c:4183 [inline]
[<ffffffff803d83be>] do_fault mm/memory.c:4312 [inline]
[<ffffffff803d83be>] handle_pte_fault mm/memory.c:4570 [inline]
[<ffffffff803d83be>] __handle_mm_fault+0x10fe/0x23a4 mm/memory.c:4705
[<ffffffff803d98fa>] handle_mm_fault+0x296/0x674 mm/memory.c:4803
[<ffffffff803c5c8c>] faultin_page mm/gup.c:944 [inline]
[<ffffffff803c5c8c>] __get_user_pages+0x444/0x7b4 mm/gup.c:1165
[<ffffffff803c9dba>] __get_user_pages_locked mm/gup.c:1350 [inline]
[<ffffffff803c9dba>] get_dump_page+0x148/0x74e mm/gup.c:1827
[<ffffffff8060f526>] dump_user_range+0x24c/0x2f0 fs/coredump.c:867
[<ffffffff806043fe>] elf_core_dump+0x1aa6/0x2194 fs/binfmt_elf.c:2290
[<ffffffff8060e7dc>] do_coredump+0x15da/0x20d8 fs/coredump.c:749
[<ffffffff8007c654>] get_signal+0x7f6/0x1754 kernel/signal.c:2848
[<ffffffff80008498>] do_signal arch/riscv/kernel/signal.c:271 [inline]
[<ffffffff80008498>] do_notify_resume+0x11a/0xa56 arch/riscv/kernel/signal.c:317
[<ffffffff80005724>] ret_from_exception+0x0/0x10
SMP: stopping secondary CPUs
Rebooting in 86400 seconds..

Crashes (4):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Title
ci-qemu2-riscv64 2023/01/12 08:34 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 96166539 .config console log report info kernel panic: corrupted stack end in shmem_fault
ci-qemu2-riscv64 2022/11/21 16:18 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d f9a97739 .config console log report info kernel panic: corrupted stack end in shmem_fault
ci-qemu2-riscv64 2022/10/28 09:23 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 8168b69e .config console log report info kernel panic: corrupted stack end in shmem_fault
ci-qemu2-riscv64 2022/10/09 20:55 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d aea5da89 .config console log report info kernel panic: corrupted stack end in shmem_fault
* Struck through repros no longer work on HEAD.