syzbot


kernel panic: corrupted stack end in kernel_init

Status: upstream: reported on 2024/06/01 00:41
Subsystems: integrity lsm
[Documentation on labels]
Reported-by: syzbot+959d626e72881bce20fd@syzkaller.appspotmail.com
First crash: 53d, last: 24d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [kernel?] kernel panic: corrupted stack end in kernel_init 0 (1) 2024/06/01 00:41

Sample crash report:
NET: Registered PF_SMC protocol family
9pnet: Installing 9P2000 support
Key type dns_resolver registered
Key type ceph registered
libceph: loaded (mon/osd proto 15/24)
NET: Registered PF_VSOCK protocol family
Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level
registered taskstats version 1
Loading compiled-in X.509 certificates
Loaded X.509 cert 'Build time autogenerated kernel key: 48746df4e55850f5faf9a201777320db86624b87'
zswap: loaded using pool lzo/zsmalloc
Demotion targets for Node 0: null
debug_vm_pgtable: [debug_vm_pgtable         ]: Validating architecture page table helpers
Key type .fscrypt registered
Key type fscrypt-provisioning registered
Key type big_key registered
Key type encrypted registered
AppArmor: AppArmor sha256 policy hashing enabled
ima: No TPM chip found, activating TPM-bypass!
Loading compiled-in module X.509 certificates
Loaded X.509 cert 'Build time autogenerated kernel key: 48746df4e55850f5faf9a201777320db86624b87'
ima: Allocated hash algorithm: sha256
ima: No architecture policies found
evm: Initialising EVM extended attributes:
evm: security.selinux (disabled)
evm: security.SMACK64 (disabled)
evm: security.SMACK64EXEC (disabled)
evm: security.SMACK64TRANSMUTE (disabled)
evm: security.SMACK64MMAP (disabled)
evm: security.apparmor
evm: security.ima
evm: security.capability
evm: HMAC attrs: 0x1
printk: legacy console [netcon0] enabled
netconsole: network logging started
gtp: GTP module loaded (pdp ctx size 128 bytes)
rdma_rxe: loaded
clk: Disabling unused clocks
PM: genpd: Disabling unused power domains
ALSA device list:
  #0: Dummy 1
  #1: Loopback 1
  #2: Virtual MIDI Card 1
md: Skipping autodetection of RAID arrays. (raid=autodetect will force)
EXT4-fs (vda): mounted filesystem 34b94c48-234b-4869-b990-1f782e29954a ro with ordered data mode. Quota mode: none.
VFS: Mounted root (ext4 filesystem) readonly on device 253:0.
devtmpfs: mounted
Freeing unused kernel image (initmem) memory: 2500K
Failed to set sysctl parameter 'max_rcu_stall_to_panic=1': parameter not found
Run /sbin/init as init process
Kernel panic - not syncing: corrupted stack end detected inside scheduler
CPU: 1 PID: 1 Comm: init Not tainted 6.10.0-rc3-syzkaller-g83a7eefedc9b #0
Hardware name: riscv-virtio,qemu (DT)
Call Trace:
[<ffffffff8000f6f8>] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:129
[<ffffffff85c2e35c>] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:135
[<ffffffff85c880d4>] __dump_stack lib/dump_stack.c:88 [inline]
[<ffffffff85c880d4>] dump_stack_lvl+0x108/0x196 lib/dump_stack.c:114
[<ffffffff85c8817e>] dump_stack+0x1c/0x24 lib/dump_stack.c:123
[<ffffffff85c2ef22>] panic+0x382/0x800 kernel/panic.c:347
[<ffffffff85c97084>] schedule_debug kernel/sched/core.c:5962 [inline]
[<ffffffff85c97084>] __schedule+0x342e/0x3486 kernel/sched/core.c:6628
[<ffffffff85c9807c>] preempt_schedule_irq+0x7a/0x1a8 kernel/sched/core.c:7067
[<ffffffff85c8b862>] raw_irqentry_exit_cond_resched kernel/entry/common.c:311 [inline]
[<ffffffff85c8b862>] raw_irqentry_exit_cond_resched kernel/entry/common.c:303 [inline]
[<ffffffff85c8b862>] irqentry_exit+0x138/0x17a kernel/entry/common.c:354
[<ffffffff85c8a4fa>] do_irq+0x34/0x4a arch/riscv/kernel/traps.c:390
[<ffffffff85caccb0>] ret_from_exception+0x0/0x64 arch/riscv/kernel/entry.S:112
[<ffffffff819c6b6e>] __raw_writel arch/riscv/include/asm/mmio.h:34 [inline]
[<ffffffff819c6b6e>] vm_notify+0x7e/0x1ce drivers/virtio/virtio_mmio.c:285
[<ffffffff819b23c6>] virtqueue_notify+0x82/0x104 drivers/virtio/virtio_ring.c:2370
[<ffffffff827f6644>] virtio_queue_rq+0x298/0x576 drivers/block/virtio_blk.c:462
[<ffffffff81248f36>] blk_mq_dispatch_rq_list+0x3f0/0x1ab6 block/blk-mq.c:2037
[<ffffffff8125d81c>] __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline]
[<ffffffff8125d81c>] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline]
[<ffffffff8125d81c>] __blk_mq_sched_dispatch_requests+0xada/0x135a block/blk-mq-sched.c:309
[<ffffffff8125e17e>] blk_mq_sched_dispatch_requests+0xae/0x12c block/blk-mq-sched.c:331
[<ffffffff8123fd92>] blk_mq_run_hw_queue+0x65c/0xa10 block/blk-mq.c:2250
[<ffffffff81245474>] blk_mq_dispatch_plug_list block/blk-mq.c:2751 [inline]
[<ffffffff81245474>] blk_mq_flush_plug_list.part.0+0x64e/0x21c0 block/blk-mq.c:2799
[<ffffffff8124a666>] blk_mq_flush_plug_list+0x6a/0x8a block/blk-mq.c:2769
[<ffffffff81209ae2>] __blk_flush_plug+0x260/0x442 block/blk-core.c:1194
[<ffffffff8120a586>] blk_finish_plug block/blk-core.c:1221 [inline]
[<ffffffff8120a586>] blk_finish_plug+0x68/0xa6 block/blk-core.c:1218
[<ffffffff806eddea>] read_pages+0x61a/0xc9e mm/readahead.c:183
[<ffffffff806ee6be>] page_cache_ra_unbounded+0x250/0x4e6 mm/readahead.c:273
[<ffffffff806eea44>] do_page_cache_ra+0xf0/0x134 mm/readahead.c:303
[<ffffffff806ef6d4>] page_cache_ra_order mm/readahead.c:547 [inline]
[<ffffffff806ef6d4>] ondemand_readahead+0x576/0x126c mm/readahead.c:669
[<ffffffff806f04d0>] page_cache_async_ra mm/readahead.c:718 [inline]
[<ffffffff806f04d0>] page_cache_async_ra+0x106/0x126 mm/readahead.c:700
[<ffffffff806bf8ec>] filemap_readahead mm/filemap.c:2504 [inline]
[<ffffffff806bf8ec>] filemap_get_pages+0x310/0x1628 mm/filemap.c:2545
[<ffffffff806c0f52>] filemap_read+0x34e/0xc30 mm/filemap.c:2625
[<ffffffff806c1aca>] generic_file_read_iter+0x296/0x38a mm/filemap.c:2806
[<ffffffff80d08eae>] ext4_file_read_iter fs/ext4/file.c:147 [inline]
[<ffffffff80d08eae>] ext4_file_read_iter+0x15e/0x400 fs/ext4/file.c:130
[<ffffffff809be58a>] __kernel_read+0x302/0x886 fs/read_write.c:434
[<ffffffff8108d84a>] integrity_kernel_read+0x92/0xc4 security/integrity/iint.c:28
[<ffffffff81097842>] ima_calc_file_hash_tfm+0x2da/0x3ec security/integrity/ima/ima_crypto.c:480
[<ffffffff810991ae>] ima_calc_file_shash security/integrity/ima/ima_crypto.c:511 [inline]
[<ffffffff810991ae>] ima_calc_file_hash+0x19e/0x456 security/integrity/ima/ima_crypto.c:568
[<ffffffff8109b2b6>] ima_collect_measurement+0x7b8/0x91c security/integrity/ima/ima_api.c:293
[<ffffffff81093d1c>] process_measurement+0x10e4/0x2026 security/integrity/ima/ima_main.c:372
[<ffffffff810951fc>] ima_file_mmap+0x1be/0x1de security/integrity/ima/ima_main.c:462
[<ffffffff80fc59ac>] security_mmap_file+0x102/0x184 security/security.c:2834
[<ffffffff8075f158>] vm_mmap_pgoff+0xd2/0x310 mm/util.c:569
[<ffffffff8075f41a>] vm_mmap+0x84/0xac mm/util.c:592
[<ffffffff80b5b7de>] elf_map fs/binfmt_elf.c:381 [inline]
[<ffffffff80b5b7de>] elf_load+0x186/0x716 fs/binfmt_elf.c:408
[<ffffffff80b5f192>] load_elf_interp fs/binfmt_elf.c:675 [inline]
[<ffffffff80b5f192>] load_elf_binary+0x3424/0x4b32 fs/binfmt_elf.c:1200
[<ffffffff809d8e34>] search_binary_handler fs/exec.c:1797 [inline]
[<ffffffff809d8e34>] exec_binprm fs/exec.c:1839 [inline]
[<ffffffff809d8e34>] bprm_execve fs/exec.c:1891 [inline]
[<ffffffff809d8e34>] bprm_execve+0x748/0x18f0 fs/exec.c:1867
[<ffffffff809dcb36>] kernel_execve+0x364/0x450 fs/exec.c:2058
[<ffffffff85c2d40c>] run_init_process+0x194/0x1a8 init/main.c:1388
[<ffffffff85c2d43e>] try_to_run_init_process+0x1e/0x66 init/main.c:1395
[<ffffffff85c8dec4>] kernel_init+0x180/0x224 init/main.c:1523
[<ffffffff85cacdba>] ret_from_fork+0xe/0x1c arch/riscv/kernel/entry.S:232
SMP: stopping secondary CPUs
Rebooting in 86400 seconds..

Crashes (20):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/06/25 16:54 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b 20dfeecc .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/06/21 21:06 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b edc5149a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/06/21 06:59 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b dac2aa43 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/06/20 20:41 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b 82874357 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/06/18 03:59 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b 1f11cfd7 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/06/17 22:35 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b 1f11cfd7 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/06/17 06:59 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b f429ab00 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/06/15 00:59 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b f429ab00 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/06/14 20:37 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b 8d849073 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/06/14 17:05 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b 8d849073 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/06/13 04:34 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b 2aa5052f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/06/12 23:56 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b 2aa5052f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/06/10 16:24 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 83a7eefedc9b 048c640a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/06/10 12:39 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes e2c79b4c5c4d 82c05ab8 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/06/07 22:58 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes e2c79b4c5c4d 82c05ab8 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/06/01 00:40 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 7932b172ac7e 3113787f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/05/31 22:34 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 7932b172ac7e 3113787f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/05/31 01:15 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 1d84afaf0252 34889ee3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/05/27 14:43 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 6fbf71854e2d 761766e6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
2024/05/27 04:07 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 6fbf71854e2d a10a183e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 kernel panic: corrupted stack end in kernel_init
* Struck through repros no longer work on HEAD.