WARNING: stack going in the wrong direction? ip=finish_task_switch

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: a35d65bedfbc Linux 4.14.267
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=17366832700000
kernel config: https://syzkaller.appspot.com/x/.config?x=8535d773e783c59a
dashboard link: https://syzkaller.appspot.com/bug?extid=cdffa40db820a342569c
compiler: gcc version 10.2.1 20210110 (Debian 10.2.1-6)

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+cdffa4...@syzkaller.appspotmail.com

WARNING: stack going in the wrong direction? ip=finish_task_switch+0x14d/0x610
block nbd2: NBD_DISCONNECT
block nbd2: Send disconnect failed -22
block nbd2: shutting down sockets
block nbd2: NBD_DISCONNECT
block nbd2: Send disconnect failed -22
block nbd2: shutting down sockets
mmap: syz-executor.1 (10009) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt.
block nbd2: NBD_DISCONNECT
block nbd2: Send disconnect failed -22
block nbd2: shutting down sockets
block nbd2: NBD_DISCONNECT
block nbd2: Send disconnect failed -22
block nbd2: shutting down sockets
gfs2: not a GFS2 filesystem
gfs2: not a GFS2 filesystem
gfs2: not a GFS2 filesystem
gfs2: not a GFS2 filesystem
netlink: 740 bytes leftover after parsing attributes in process `syz-executor.5'.
tc_ctl_action: received NO action attribs
arp_tables: arptables: counters copy to user failed while replacing table
EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
Bluetooth: hci0 command 0x080d tx timeout
bond0: team0 is up - this may be due to an out of date ifenslave
bridge0: port 3(veth0_to_team) entered blocking state
bridge0: port 3(veth0_to_team) entered disabled state
device veth0_to_team entered promiscuous mode
syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET)
bridge0: port 3(veth0_to_team) entered blocking state
bridge0: port 3(veth0_to_team) entered forwarding state
bond0: team0 is up - this may be due to an out of date ifenslave
bond0: team0 is up - this may be due to an out of date ifenslave
netlink: 181172 bytes leftover after parsing attributes in process `syz-executor.1'.
bond0: team0 is up - this may be due to an out of date ifenslave
kauditd_printk_skb: 4 callbacks suppressed
audit: type=1804 audit(1645026391.013:16): pid=10507 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir669331239/syzkaller.ZEfiBo/61/cgroup.controllers" dev="sda1" ino=14000 res=1
audit: type=1800 audit(1645026391.553:17): pid=10551 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=13963 res=0
input: syz1 as /devices/virtual/input/input6
audit: type=1800 audit(1645026391.573:18): pid=10551 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=13963 res=0
EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
audit: type=1804 audit(1645026391.703:19): pid=10565 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir881374876/syzkaller.3qtjUD/39/file0/file0" dev="sda1" ino=14024 res=1
audit: type=1804 audit(1645026391.713:20): pid=10565 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir881374876/syzkaller.3qtjUD/39/file0/file0" dev="sda1" ino=14024 res=1


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[syzbot]

syzbot has found a reproducer for the following issue on:

HEAD commit: 74766a973637 Linux 4.14.275
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=17780847700000
kernel config: https://syzkaller.appspot.com/x/.config?x=78767ee43940f0a8

dashboard link: https://syzkaller.appspot.com/bug?extid=cdffa40db820a342569c
compiler: gcc version 10.2.1 20210110 (Debian 10.2.1-6)

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=10fdc6c4f00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=120d787f700000