syzbot


INFO: rcu detected stall in sys_process_vm_readv (6)

Status: auto-obsoleted due to no activity on 2025/09/09 12:22
Subsystems: mm
[Documentation on labels]
First crash: 99d, last: 99d
Similar bugs (10)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in sys_process_vm_readv (2) mm 1 1 1104d 1104d 0/29 auto-obsoleted due to no activity on 2022/12/09 23:02
linux-6.1 INFO: rcu detected stall in sys_process_vm_readv (2) 1 1 228d 228d 0/3 auto-obsoleted due to no activity on 2025/05/13 07:10
upstream INFO: rcu detected stall in sys_process_vm_readv (3) mm cgroups 1 6 638d 814d 0/29 auto-obsoleted due to no activity on 2024/03/20 00:08
upstream INFO: rcu detected stall in sys_process_vm_readv (5) mm 1 1 236d 236d 0/29 auto-obsoleted due to no activity on 2025/04/25 18:06
linux-5.15 INFO: rcu detected stall in sys_process_vm_readv (3) 1 1 196d 196d 0/3 auto-obsoleted due to no activity on 2025/06/14 17:14
linux-5.15 INFO: rcu detected stall in sys_process_vm_readv (2) 1 4 353d 406d 0/3 auto-obsoleted due to no activity on 2025/01/09 01:58
linux-5.15 INFO: rcu detected stall in sys_process_vm_readv 1 2 665d 708d 0/3 auto-obsoleted due to no activity on 2024/03/02 07:32
linux-6.1 INFO: rcu detected stall in sys_process_vm_readv 1 2 425d 438d 0/3 auto-obsoleted due to no activity on 2024/10/28 22:50
upstream INFO: rcu detected stall in sys_process_vm_readv cgroups mm 1 1 1242d 1242d 0/29 auto-closed as invalid on 2022/06/24 21:29
upstream INFO: rcu detected stall in sys_process_vm_readv (4) mm 1 28 363d 499d 0/29 auto-obsoleted due to no activity on 2024/11/29 20:49

Sample crash report:
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P9882/1:b..l
rcu: 	(detected by 1, t=10503 jiffies, g=53141, q=355 ncpus=2)
task:syz.4.993       state:R  running task     stack:24640 pid:9882  tgid:9876  ppid:5854   task_flags:0x400040 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5396 [inline]
 __schedule+0x16f5/0x4d00 kernel/sched/core.c:6785
 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7108
 irqentry_exit+0x6f/0x90 kernel/entry/common.c:307
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:unwind_next_frame+0x7cd/0x2390 arch/x86/kernel/unwind_orc.c:521
Code: 0f 84 d3 0d 00 00 48 83 c7 38 e8 0e 28 00 00 49 89 c4 48 8b 34 24 e9 a9 02 00 00 49 8d 5e 40 48 89 d8 48 c1 e8 03 80 3c 28 00 <74> 11 48 89 df e8 49 31 b1 00 48 8b 34 24 48 8b 54 24 08 4c 8b 23
RSP: 0018:ffffc9000d536a58 EFLAGS: 00000246
RAX: 1ffff92001aa6d6d RBX: ffffc9000d536b68 RCX: ffffffff8fbc7eac
RDX: ffffffff903bc090 RSI: ffffffff903bc094 RDI: ffffffff8be282a0
RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff81729de5
R10: ffffc9000d536b78 R11: ffffffff81acf990 R12: ffffffff903bc095
R13: ffffc9000d536b78 R14: ffffc9000d536b28 R15: ffffc9000d536b60
 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122
 save_stack+0xf5/0x1f0 mm/page_owner.c:156
 __set_page_owner+0x8d/0x4a0 mm/page_owner.c:329
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x240/0x2a0 mm/page_alloc.c:1704
 prep_new_page mm/page_alloc.c:1712 [inline]
 get_page_from_freelist+0x21e4/0x22c0 mm/page_alloc.c:3669
 __alloc_frozen_pages_noprof+0x181/0x370 mm/page_alloc.c:4959
 alloc_pages_mpol+0x232/0x4a0 mm/mempolicy.c:2419
 folio_alloc_mpol_noprof mm/mempolicy.c:2438 [inline]
 vma_alloc_folio_noprof+0xe4/0x200 mm/mempolicy.c:2473
 folio_prealloc+0x30/0x180 mm/memory.c:-1
 wp_page_copy mm/memory.c:3569 [inline]
 do_wp_page+0x1231/0x5800 mm/memory.c:4030
 handle_pte_fault mm/memory.c:6105 [inline]
 __handle_mm_fault+0x1144/0x5620 mm/memory.c:6232
 handle_mm_fault+0x40a/0x8e0 mm/memory.c:6401
 do_user_addr_fault+0x764/0x1390 arch/x86/mm/fault.c:1387
 handle_page_fault arch/x86/mm/fault.c:1476 [inline]
 exc_page_fault+0x76/0xf0 arch/x86/mm/fault.c:1532
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0010:rep_movs_alternative+0x4a/0x90 arch/x86/lib/copy_user_64.S:74
Code: f7 03 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 0f f7 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
RSP: 0018:ffffc9000d537978 EFLAGS: 00050206
RAX: ffffffff84bedd01 RBX: ffff888012a0e000 RCX: 0000000000000e80
RDX: 0000000000000000 RSI: ffff888012a0e180 RDI: 0000200000beb000
RBP: ffffc9000d537ac8 R08: ffff888012a0efff R09: 1ffff11002541dff
R10: dffffc0000000000 R11: ffffed1002541e00 R12: dffffc0000000000
R13: 0000000000beab80 R14: 00007ffffffff000 R15: 0000000000001000
 copy_user_generic arch/x86/include/asm/uaccess_64.h:126 [inline]
 raw_copy_to_user arch/x86/include/asm/uaccess_64.h:147 [inline]
 copy_to_user_iter lib/iov_iter.c:25 [inline]
 iterate_iovec include/linux/iov_iter.h:52 [inline]
 iterate_and_advance2 include/linux/iov_iter.h:302 [inline]
 iterate_and_advance include/linux/iov_iter.h:328 [inline]
 _copy_to_iter+0x484/0x16f0 lib/iov_iter.c:185
 copy_page_to_iter+0x10c/0x1c0 lib/iov_iter.c:362
 process_vm_rw_pages mm/process_vm_access.c:45 [inline]
 process_vm_rw_single_vec mm/process_vm_access.c:118 [inline]
 process_vm_rw_core mm/process_vm_access.c:216 [inline]
 process_vm_rw+0x7c3/0xb40 mm/process_vm_access.c:284
 __do_sys_process_vm_readv mm/process_vm_access.c:296 [inline]
 __se_sys_process_vm_readv mm/process_vm_access.c:292 [inline]
 __x64_sys_process_vm_readv+0xe0/0x100 mm/process_vm_access.c:292
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc59af8e929
RSP: 002b:00007fc59bd17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
RAX: ffffffffffffffda RBX: 00007fc59b1b6240 RCX: 00007fc59af8e929
RDX: 0000000000000002 RSI: 0000200000008400 RDI: 00000000000002cf
RBP: 00007fc59b010b39 R08: 0000000000000286 R09: 0000000000000000
R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fc59b1b6240 R15: 00007fc59b2dfa28
 </TASK>
net_ratelimit: 15895 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
net_ratelimit: 15177 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/11 12:14 upstream aef17cb3d3c4 5d7e17ca .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: rcu detected stall in sys_process_vm_readv
* Struck through repros no longer work on HEAD.