syzbot

 sign-in | mailing list | source | docs
🐞 Open [745]
🐞 Fixed [120]
🐞 Invalid [785]
⬇ Missing Backports [75]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

INFO: rcu detected stall in sys_execve

Status: upstream: reported on 2025/01/23 20:17
Reported-by: syzbot+c8f053523131494fd85d@syzkaller.appspotmail.com
First crash: 150d, last: 5d01h
▶ ▼ Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in sys_execve kernel 11 2028d 2029d 0/29 closed as invalid on 2019/12/04 14:04
upstream INFO: rcu detected stall in sys_execve (6) mm syz done 51 4d01h 278d 0/29 upstream: reported syz repro on 2024/09/17 11:35
upstream INFO: rcu detected stall in sys_execve (3) kernel 1 1992d 1992d 0/29 closed as invalid on 2020/01/09 08:13
upstream INFO: rcu detected stall in sys_execve (2) kernel 1 1993d 1993d 0/29 closed as invalid on 2020/01/08 05:23
upstream INFO: rcu detected stall in sys_execve (5) tomoyo 2 588d 592d 0/29 auto-obsoleted due to no activity on 2024/02/10 22:46
upstream INFO: rcu detected stall in sys_execve (4) mm 1 1154d 1154d 0/29 auto-closed as invalid on 2022/06/25 07:48
linux-5.15 BUG: soft lockup in sys_execve 1 227d 227d 0/3 auto-obsoleted due to no activity on 2025/02/15 21:26

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P4491/1:b..l P8474/1:b..l
	(detected by 1, t=10502 jiffies, g=63241, q=324 ncpus=2)
task:rm              state:R  running task     stack:23744 pid:8474  ppid:8447   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x10e9/0x40d0 kernel/sched/core.c:6561
 preempt_schedule_irq+0xb1/0x150 kernel/sched/core.c:6873
 irqentry_exit+0x63/0x70 kernel/entry/common.c:439
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:check_region_inline mm/kasan/generic.c:169 [inline]
RIP: 0010:kasan_check_range+0xd/0x290 mm/kasan/generic.c:189
Code: c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 a4 01 00 00 41 57 <41> 56 53 49 89 f8 49 01 f0 0f 82 57 02 00 00 49 89 f8 49 c1 e8 2f
RSP: 0018:ffffc90003ab7730 EFLAGS: 00000202
RAX: ffffffff89fd6c01 RBX: 000000000000000e RCX: ffffffff89fd6c36
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff96e2e1c0
RBP: ffffc90003ab7910 R08: ffff88807bf08000 R09: 0000000000000003
R10: 0000000000000003 R11: 0000000000000000 R12: ffff888056322ca8
R13: ffff88802f35ce80 R14: 0000000000000001 R15: 0000000000000300
 instrument_atomic_read_write include/linux/instrumented.h:102 [inline]
 atomic_inc include/linux/atomic/atomic-instrumented.h:190 [inline]
 mt_validate_nulls lib/maple_tree.c:7193 [inline]
 mt_validate+0x4426/0x4c90 lib/maple_tree.c:7244
 validate_mm_mt+0xcd/0x420 mm/mmap.c:294
 __install_special_mapping+0x2f/0x2f0 mm/mmap.c:3538
 map_vdso+0x1aa/0x2e0 arch/x86/entry/vdso/vma.c:280
 load_elf_binary+0x1c2e/0x26d0 fs/binfmt_elf.c:1309
 search_binary_handler fs/exec.c:1764 [inline]
 exec_binprm fs/exec.c:1805 [inline]
 bprm_execve+0xb10/0x18a0 fs/exec.c:1874
 do_execveat_common+0x51b/0x6c0 fs/exec.c:1979
 do_execve fs/exec.c:2053 [inline]
 __do_sys_execve fs/exec.c:2129 [inline]
 __se_sys_execve fs/exec.c:2124 [inline]
 __x64_sys_execve+0x8e/0xa0 fs/exec.c:2124
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f7d81fdb107
RSP: 002b:00007ffc1a1d6578 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
RAX: ffffffffffffffda RBX: 0000564240ec9fe0 RCX: 00007f7d81fdb107
RDX: 0000564240eca000 RSI: 0000564240ec9fe0 RDI: 0000564240eca088
RBP: 0000564240eca088 R08: 00007ffc1a1d8e31 R09: 0000000000000000
R10: 0000000000000008 R11: 0000000000000246 R12: 0000564240eca000
R13: 00007f7d821a0e8b R14: 0000564240eca000 R15: 0000000000000000
 </TASK>
task:kworker/u4:17   state:R  running task     stack:24768 pid:4491  ppid:2      flags:0x00004000
Workqueue: bat_events batadv_nc_worker
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x10e9/0x40d0 kernel/sched/core.c:6561
 preempt_schedule_irq+0xb1/0x150 kernel/sched/core.c:6873
 irqentry_exit+0x63/0x70 kernel/entry/common.c:439
 asm_sysvec_reschedule_ipi+0x16/0x20 arch/x86/include/asm/idtentry.h:696
RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:87 [inline]
RIP: 0010:memory_is_nonzero mm/kasan/generic.c:102 [inline]
RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:128 [inline]
RIP: 0010:memory_is_poisoned mm/kasan/generic.c:159 [inline]
RIP: 0010:check_region_inline mm/kasan/generic.c:180 [inline]
RIP: 0010:kasan_check_range+0x81/0x290 mm/kasan/generic.c:189
Code: 03 4e 8d 14 3b 4d 89 d6 4d 29 ce 49 83 fe 10 7f 26 4d 85 f6 0f 84 39 01 00 00 48 f7 d3 4c 01 db 41 80 39 00 0f 85 c1 01 00 00 <49> ff c1 48 ff c3 75 ee e9 1c 01 00 00 44 89 cb 83 e3 07 0f 84 b5
RSP: 0018:ffffc9000485faa0 EFLAGS: 00000246
RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffffff8162eaa9
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8dfe85a8
RBP: ffffc9000485fbc8 R08: dffffc0000000000 R09: fffffbfff1bfd0b5
R10: fffffbfff1bfd0b6 R11: 1ffffffff1bfd0b5 R12: 0000000000000000
R13: 1ffff9200090bf64 R14: 0000000000000001 R15: dffffc0000000001
 instrument_atomic_read include/linux/instrumented.h:72 [inline]
 _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
 cpumask_test_cpu include/linux/cpumask.h:444 [inline]
 cpu_online include/linux/cpumask.h:1030 [inline]
 trace_lock_acquire include/trace/events/lock.h:24 [inline]
 lock_acquire+0xd9/0x490 kernel/locking/lockdep.c:5633
 rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
 rcu_read_lock include/linux/rcupdate.h:791 [inline]
 batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:408 [inline]
 batadv_nc_worker+0xeb/0x600 net/batman-adv/network-coding.c:719
 process_one_work+0x898/0x1160 kernel/workqueue.c:2292
 worker_thread+0xaa2/0x1250 kernel/workqueue.c:2439
 kthread+0x29d/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
rcu: rcu_preempt kthread starved for 10547 jiffies! g63241 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27744 pid:16    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x10e9/0x40d0 kernel/sched/core.c:6561
 schedule+0xb9/0x180 kernel/sched/core.c:6637
 schedule_timeout+0x15c/0x280 kernel/time/timer.c:1965
 rcu_gp_fqs_loop+0x2f2/0x1310 kernel/rcu/tree.c:1706
 rcu_gp_kthread+0x95/0x380 kernel/rcu/tree.c:1905
 kthread+0x29d/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:51 [inline]
NMI backtrace for cpu 0 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:89 [inline]
NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 arch/x86/kernel/process.c:735

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/18 08:58 linux-6.1.y 58485ff1a74f e77fae15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in sys_execve
2025/04/02 07:17 linux-6.1.y 8e60a714ba3b c799dfdd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in sys_execve
2025/01/23 20:16 linux-6.1.y 75cefdf153f5 521b0ce3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in sys_execve
* Struck through repros no longer work on HEAD.