syzbot


INFO: rcu detected stall in shmem_fault (2)

Status: upstream: reported on 2024/06/03 20:13
Reported-by: syzbot+cf92cb07cc1063893ed7@syzkaller.appspotmail.com
First crash: 729d, last: 7h38m
Similar bugs (10)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in shmem_fault (4) kernel 1 1 1250d 1250d 0/29 auto-obsoleted due to no activity on 2023/04/08 07:17
upstream INFO: rcu detected stall in shmem_fault mm 1 13 2633d 2793d 0/29 closed as dup on 2019/01/02 16:58
linux-6.6 INFO: rcu detected stall in shmem_fault 1 9 98d 351d 0/2 upstream: reported on 2025/06/16 23:06
linux-6.1 INFO: rcu detected stall in shmem_fault 1 7 661d 726d 0/3 auto-obsoleted due to no activity on 2024/11/18 20:23
upstream INFO: rcu detected stall in shmem_fault (5) cgroups mm 1 3 1020d 1040d 23/29 fixed on 2023/10/12 12:48
linux-5.15 INFO: rcu detected stall in shmem_fault 1 1 1005d 1005d 0/3 auto-obsoleted due to no activity on 2023/12/11 11:17
upstream INFO: rcu detected stall in shmem_fault (3) mm fs 1 4 1499d 1499d 0/29 auto-closed as invalid on 2022/06/25 08:10
linux-6.1 INFO: rcu detected stall in shmem_fault (2) 1 22 17d 532d 0/3 upstream: reported on 2024/12/17 16:40
upstream INFO: rcu detected stall in shmem_fault (2) cgroups mm 1 1 2373d 2373d 0/29 closed as invalid on 2019/12/04 14:04
upstream INFO: rcu detected stall in shmem_fault (6) mm prio:low 1 C 241 3d22h 621d 0/29 upstream: reported C repro on 2024/09/19 14:28

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P3560/1:b..l P6184/1:b..l P9936/1:b..l
	(detected by 1, t=10502 jiffies, g=39821, q=303)
task:syz.9.1302      state:R  running task     stack:24656 pid: 9936 ppid:  7485 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11ef/0x43c0 kernel/sched/core.c:6395
 preempt_schedule_irq+0xbb/0x160 kernel/sched/core.c:6799
 irqentry_exit+0x63/0x70 kernel/entry/common.c:432
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x60 kernel/kcov.c:209
Code: 8b 15 c5 26 89 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 34 16 00 00 00 74 2c 8b 91 10 16 00 00 83 fa 02 75 21 <48> 8b 91 18 16 00 00 48 8b 32 48 8d 7e 01 8b 89 14 16 00 00 48 39
RSP: 0000:ffffc9000351f460 EFLAGS: 00000246
RAX: ffffffff81b7e821 RBX: 00fff00000080001 RCX: ffff8880770dd940
RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff203b018
R10: dffffc0000000000 R11: fffffbfff203b019 R12: dffffc0000000000
R13: dffffc0000000000 R14: ffff888075955800 R15: ffff8880770dd96c
 task_css include/linux/cgroup.h:496 [inline]
 blk_cgroup_congested include/linux/blk-cgroup.h:283 [inline]
 __cgroup_throttle_swaprate+0x201/0x530 mm/swapfile.c:3809
 cgroup_throttle_swaprate include/linux/swap.h:728 [inline]
 shmem_add_to_page_cache+0xb90/0x14d0 mm/shmem.c:727
 shmem_getpage_gfp+0x1796/0x2d40 mm/shmem.c:1940
 shmem_fault+0x1ac/0x540 mm/shmem.c:2118
 __do_fault+0x141/0x330 mm/memory.c:3928
 do_read_fault mm/memory.c:4264 [inline]
 do_fault mm/memory.c:4392 [inline]
 handle_pte_fault mm/memory.c:4650 [inline]
 __handle_mm_fault mm/memory.c:4785 [inline]
 handle_mm_fault+0x2985/0x4410 mm/memory.c:4883
 faultin_page mm/gup.c:976 [inline]
 __get_user_pages+0x94b/0x11e0 mm/gup.c:1197
 populate_vma_page_range+0x213/0x290 mm/gup.c:1529
 __mm_populate+0x275/0x3b0 mm/gup.c:1638
 mm_populate include/linux/mm.h:2646 [inline]
 vm_mmap_pgoff+0x212/0x2d0 mm/util.c:556
 ksys_mmap_pgoff+0x140/0x790 mm/mmap.c:1635
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f8a224d0e59
RSP: 002b:00007f8a2072a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007f8a22749fa0 RCX: 00007f8a224d0e59
RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
RBP: 00007f8a22566d6f R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f8a2274a038 R14: 00007f8a22749fa0 R15: 00007ffdc189bd08
 </TASK>
task:kworker/u4:18   state:R  running task     stack:22736 pid: 6184 ppid:     2 flags:0x00004000
Workqueue: netns cleanup_net
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11ef/0x43c0 kernel/sched/core.c:6395
 preempt_schedule_irq+0xbb/0x160 kernel/sched/core.c:6799
 irqentry_exit+0x63/0x70 kernel/entry/common.c:432
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:__rcu_read_unlock+0x2/0xd0 kernel/rcu/tree_plugin.h:415
Code: 11 ff 03 8b 03 3d 00 00 00 40 7d 02 5b c3 0f 0b eb fa 89 d9 80 e1 07 80 c1 03 38 c1 7c e3 48 89 df e8 b2 c0 58 00 eb d9 41 57 <41> 56 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff df 65 48 8b 3d 15
RSP: 0000:ffffc900034efa30 EFLAGS: 00000293
RAX: ffffffff88646b01 RBX: ffffffff966d23a0 RCX: ffff888059bf0000
RDX: 0000000000000000 RSI: ffffffff8a7a09a0 RDI: ffffffff8a7a0960
RBP: ffffc900034efb50 R08: dffffc0000000000 R09: 1ffffffff203b018
R10: dffffc0000000000 R11: fffffbfff203b019 R12: 000000000003d99e
R13: dffffc0000000000 R14: ffff88814cdeccf0 R15: ffffffff8d61a8a0
 rcu_read_unlock include/linux/rcupdate.h:772 [inline]
 inet_twsk_purge+0x7a2/0x840 net/ipv4/inet_timewait_sock.c:309
 ops_exit_list net/core/net_namespace.c:177 [inline]
 cleanup_net+0x791/0xba0 net/core/net_namespace.c:635
 process_one_work+0x85f/0x1010 kernel/workqueue.c:2310
 worker_thread+0xaa6/0x1290 kernel/workqueue.c:2457
 kthread+0x436/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
task:udevd           state:R  running task     stack:22672 pid: 3560 ppid:     1 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11ef/0x43c0 kernel/sched/core.c:6395
 preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:6571
 preempt_schedule+0xbc/0xd0 kernel/sched/core.c:6596
 preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:34
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline]
 _raw_spin_unlock_irqrestore+0x10d/0x120 kernel/locking/spinlock.c:194
 spin_unlock_irqrestore include/linux/spinlock.h:419 [inline]
 __wake_up_common_lock kernel/sched/wait.c:140 [inline]
 __wake_up_sync_key+0x128/0x190 kernel/sched/wait.c:205
 sock_def_readable+0x136/0x250 net/core/sock.c:3101
 __netlink_sendskb net/netlink/af_netlink.c:1264 [inline]
 netlink_sendskb+0x97/0x130 net/netlink/af_netlink.c:1270
 netlink_sendmsg+0x8ba/0xbe0 net/netlink/af_netlink.c:1918
 sock_sendmsg_nosec net/socket.c:706 [inline]
 __sock_sendmsg net/socket.c:718 [inline]
 ____sys_sendmsg+0x5b7/0x8f0 net/socket.c:2445
 ___sys_sendmsg+0x236/0x2e0 net/socket.c:2499
 __sys_sendmsg net/socket.c:2528 [inline]
 __do_sys_sendmsg net/socket.c:2537 [inline]
 __se_sys_sendmsg+0x1af/0x290 net/socket.c:2535
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fb22547d407
RSP: 002b:00007ffd2a8ee580 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fb22538f880 RCX: 00007fb22547d407
RDX: 0000000000000000 RSI: 00007ffd2a8ee5e0 RDI: 0000000000000004
RBP: 000055e38c099fc0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000b4
R13: 000055e38c0999e0 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
rcu: rcu_preempt kthread starved for 9868 jiffies! g39821 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27536 pid:   15 ppid:     2 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11ef/0x43c0 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 schedule_timeout+0x184/0x2d0 kernel/time/timer.c:2117
 rcu_gp_fqs_loop+0x2be/0x11d0 kernel/rcu/tree.c:1972
 rcu_gp_kthread+0x9b/0x370 kernel/rcu/tree.c:2145
 kthread+0x436/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:51 [inline]
NMI backtrace for cpu 0 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:89 [inline]
NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 arch/x86/kernel/process.c:729
vkms_vblank_simulate: vblank timer overrun

Crashes (25):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/03 04:58 linux-5.15.y dc027a595035 3c0d2131 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2026/05/18 06:42 linux-5.15.y 93741761e5e3 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2026/02/24 06:41 linux-5.15.y 3330a8d33e08 41d2fa6a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2025/12/10 17:37 linux-5.15.y 68efe5a6c16a d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2025/11/28 11:55 linux-5.15.y cc5ec8769306 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2025/11/26 22:49 linux-5.15.y cc5ec8769306 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2025/10/03 21:06 linux-5.15.y 29e53a5b1c4f 49379ee0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2025/08/18 08:43 linux-5.15.y c79648372d02 1804e95e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2025/08/08 03:41 linux-5.15.y c79648372d02 6a893178 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2025/07/07 05:08 linux-5.15.y 3dea0e7f549e 4f67c4ae .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2025/06/26 08:03 linux-5.15.y 1c700860e8bc 26d77996 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2025/06/24 16:43 linux-5.15.y 1c700860e8bc e2f27c35 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2025/06/24 16:38 linux-5.15.y 1c700860e8bc e2f27c35 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2025/06/22 16:16 linux-5.15.y 1c700860e8bc d6cdfb8a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2025/05/25 09:01 linux-5.15.y 98f47d0e9b8c ed351ea7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2025/05/19 05:37 linux-5.15.y a68c15152131 f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2025/02/14 06:45 linux-5.15.y c16c81c81336 d9a046cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2025/02/05 16:19 linux-5.15.y c16c81c81336 4dc70884 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2024/12/02 17:59 linux-5.15.y 0a51d2d4527b b499ea68 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2024/10/27 20:55 linux-5.15.y 74cdd62cb470 65e8686b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2024/09/30 06:12 linux-5.15.y 3a5928702e71 ba29ff75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2024/08/23 10:59 linux-5.15.y fa93fa65db6e ce8a9099 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2024/07/12 21:11 linux-5.15.y f45bea23c39c eaeb5c15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2024/06/03 20:12 linux-5.15.y c61bd26ae81a 0aba2352 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in shmem_fault
2024/09/19 06:48 linux-5.15.y 3a5928702e71 c673ca06 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 INFO: rcu detected stall in shmem_fault
* Struck through repros no longer work on HEAD.