syzbot


INFO: rcu detected stall in sys_mprotect (3)

Status: upstream: reported on 2025/09/19 07:33
Reported-by: syzbot+38389a646a23817e3097@syzkaller.appspotmail.com
First crash: 228d, last: 9d01h
Similar bugs (16)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in sys_mprotect (6) kernel 1 3 1209d 1259d 0/29 auto-obsoleted due to no activity on 2023/04/20 15:51
upstream INFO: rcu detected stall in sys_mprotect (3) mm 1 3 2309d 2308d 0/29 closed as invalid on 2020/01/09 08:13
upstream INFO: rcu detected stall in sys_mprotect (2) mm 1 1 2309d 2309d 0/29 closed as invalid on 2020/01/08 05:23
linux-6.6 INFO: rcu detected stall in sys_mprotect (2) origin:lts-only 1 syz error 3 126d 142d 0/2 upstream: reported syz repro on 2025/12/14 03:47
upstream INFO: rcu detected stall in sys_mprotect (8) mm 1 syz done error 109 35d 571d 0/29 upstream: reported syz repro on 2024/10/11 07:05
linux-5.15 INFO: rcu detected stall in sys_mprotect 1 1 738d 738d 0/3 auto-obsoleted due to no activity on 2024/08/04 17:12
linux-6.6 INFO: rcu detected stall in sys_mprotect 1 1 263d 263d 0/2 auto-obsoleted due to no activity on 2025/11/23 01:57
upstream INFO: rcu detected stall in sys_mprotect (5) kernel 1 1 1527d 1527d 0/29 auto-closed as invalid on 2022/05/29 03:15
linux-5.15 INFO: rcu detected stall in sys_mprotect (3) 1 1 188d 188d 0/3 auto-obsoleted due to no activity on 2026/02/05 12:28
upstream INFO: rcu detected stall in sys_mprotect (4) mm 1 1 1592d 1592d 0/29 closed as invalid on 2022/02/08 10:00
upstream INFO: rcu detected stall in sys_mprotect mm 1 3 2345d 2345d 0/29 closed as invalid on 2019/12/04 14:04
linux-5.15 INFO: rcu detected stall in sys_mprotect (2) 1 1 292d 292d 0/3 auto-obsoleted due to no activity on 2025/10/24 12:50
upstream INFO: rcu detected stall in sys_mprotect (7) mm 1 9 839d 1067d 0/29 auto-obsoleted due to no activity on 2024/04/15 19:55
linux-6.1 INFO: rcu detected stall in sys_mprotect (2) 1 1 464d 464d 0/3 auto-obsoleted due to no activity on 2025/05/06 08:25
linux-6.1 INFO: rcu detected stall in sys_mprotect 1 7 635d 711d 0/3 auto-obsoleted due to no activity on 2024/11/16 09:36
android-5-15 BUG: soft lockup in sys_mprotect 1 1 706d 706d 0/2 auto-obsoleted due to no activity on 2024/08/27 08:23

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P4724/1:b..l P4726/1:b..l
	(detected by 1, t=10502 jiffies, g=13341, q=472 ncpus=2)
task:sed             state:R  running task     stack:24048 pid:4726  ppid:4725   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5245 [inline]
 __schedule+0x11d1/0x40e0 kernel/sched/core.c:6562
 preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:6731
 preempt_schedule+0xbc/0xd0 kernel/sched/core.c:6755
 preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:34
 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
 _raw_spin_unlock+0x36/0x40 kernel/locking/spinlock.c:186
 spin_unlock include/linux/spinlock.h:391 [inline]
 filemap_map_pages+0xf06/0x11c0 mm/filemap.c:3531
 do_fault_around mm/memory.c:4598 [inline]
 do_read_fault mm/memory.c:4624 [inline]
 do_fault mm/memory.c:4758 [inline]
 handle_pte_fault mm/memory.c:5029 [inline]
 __handle_mm_fault mm/memory.c:5171 [inline]
 handle_mm_fault+0x2991/0x3ee0 mm/memory.c:5292
 do_user_addr_fault+0x51f/0xb10 arch/x86/mm/fault.c:1338
 handle_page_fault arch/x86/mm/fault.c:1429 [inline]
 exc_page_fault+0x60/0x100 arch/x86/mm/fault.c:1482
 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:608
RIP: 0033:0x7fae24768492
RSP: 002b:00007ffc6d3846d0 EFLAGS: 00010202
RAX: 00005615beb9e911 RBX: 0000000000000008 RCX: 00005615beb9e980
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00005615beb9e980
RBP: 000000000000002f R08: 00007fae246dbac0 R09: 0000000000000020
R10: 0000000000000004 R11: 00007ffc6d384204 R12: 00005615beb9e980
R13: 00007fae2479048d R14: 00005615beb9e912 R15: 000000000000002f
 </TASK>
task:modprobe        state:R  running task     stack:23952 pid:4724  ppid:46     flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5245 [inline]
 __schedule+0x11d1/0x40e0 kernel/sched/core.c:6562
 preempt_schedule_irq+0xbb/0x160 kernel/sched/core.c:6874
 irqentry_exit+0x63/0x70 kernel/entry/common.c:439
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:check_kcov_mode kernel/kcov.c:184 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x2c/0x60 kernel/kcov.c:216
Code: 04 24 65 48 8b 0d e4 f9 7f 7e 65 8b 15 e5 f9 7f 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c <8b> 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48
RSP: 0018:ffffc90002fa75f8 EFLAGS: 00000246
RAX: ffffffff8a1b962e RBX: 0000000000000006 RCX: ffff88802e508000
RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000000006
RBP: ffffc90002fa77b0 R08: ffff88802e508000 R09: 0000000000000003
R10: 0000000000000003 R11: 0000000000000000 R12: 000000000000000d
R13: ffff888078c14c80 R14: ffff888078c14c00 R15: 0000000000000007
 mt_validate_nulls lib/maple_tree.c:7211 [inline]
 mt_validate+0x42ee/0x4cb0 lib/maple_tree.c:7249
 validate_mm_mt+0xe2/0x440 mm/mmap.c:295
 validate_mm+0xe1/0x2e0 mm/mmap.c:332
 __vma_adjust+0x1855/0x1cd0 mm/mmap.c:879
 vma_adjust include/linux/mm.h:2810 [inline]
 __split_vma+0x3a7/0x500 mm/mmap.c:-1
 mprotect_fixup+0x5b1/0x800 mm/mprotect.c:623
 do_mprotect_pkey+0x7fe/0xba0 mm/mprotect.c:792
 __do_sys_mprotect mm/mprotect.c:819 [inline]
 __se_sys_mprotect mm/mprotect.c:816 [inline]
 __x64_sys_mprotect+0x7c/0x90 mm/mprotect.c:816
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f73b06992c7
RSP: 002b:00007ffd2652f2d8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: ffffffffffffffda RBX: 00007f73b0675b20 RCX: 00007f73b06992c7
RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007f73b03d1000
RBP: 00007ffd2652f5a0 R08: 0000000000000000 R09: 00007f73b040b2e0
R10: 00007f73b0675b20 R11: 0000000000000206 R12: 0000000000000018
R13: 00000043da803720 R14: 0000000000000000 R15: 00007f73b06ad310
 </TASK>
rcu: rcu_preempt kthread starved for 9596 jiffies! g13341 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27736 pid:16    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5245 [inline]
 __schedule+0x11d1/0x40e0 kernel/sched/core.c:6562
 schedule+0xb9/0x180 kernel/sched/core.c:6638
 schedule_timeout+0x184/0x2d0 kernel/time/timer.c:2168
 rcu_gp_fqs_loop+0x303/0x1340 kernel/rcu/tree.c:1706
 rcu_gp_kthread+0x99/0x3b0 kernel/rcu/tree.c:1905
 kthread+0x29d/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
RIP: 0010:default_idle+0xb/0x10 arch/x86/kernel/process.c:742
Code: 48 89 df e8 77 93 9b f7 e9 44 ff ff ff e8 3d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d a7 ba 4e 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6
RAX: 00e43be0dd5de100 RBX: ffffffff8a37f307 RCX: 00e43be0dd5de100
RDX: 0000000000000001 RSI: ffffffff8a8c1120 RDI: ffffffff8adf13a0
RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01
R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000
R13: dffffc0000000000 R14: ffff888017731dc0 R15: 1ffff9200002efc8
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055c75c538a38 CR3: 000000001836a000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 default_idle_call+0x84/0xc0 kernel/sched/idle.c:109
 cpuidle_idle_call kernel/sched/idle.c:199 [inline]
 do_idle+0x250/0x680 kernel/sched/idle.c:323
 cpu_startup_entry+0x3f/0x60 kernel/sched/idle.c:422
 start_secondary+0xe4/0xf0 arch/x86/kernel/smpboot.c:281
 secondary_startup_64_no_verify+0xcf/0xdb
 </TASK>

Crashes (12):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/04/26 10:22 linux-6.1.y 7c87defbd336 9c2d0995 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in sys_mprotect
2026/03/29 21:26 linux-6.1.y 1989cd3d56e2 b5ceaad2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in sys_mprotect
2026/02/13 13:15 linux-6.1.y 8ce36b2849ef 6a673c50 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in sys_mprotect
2026/02/01 15:01 linux-6.1.y cd9b81672742 6b8752f2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in sys_mprotect
2026/01/27 20:57 linux-6.1.y cd9b81672742 9a514c2f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in sys_mprotect
2026/01/25 09:09 linux-6.1.y cd9b81672742 40acda8a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in sys_mprotect
2025/12/06 06:40 linux-6.1.y f6e38ae624cf d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in sys_mprotect
2025/10/17 18:09 linux-6.1.y c2fda4b3f577 7adf5298 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in sys_mprotect
2025/10/12 23:57 linux-6.1.y 882efbdd9d34 ff1712fe .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in sys_mprotect
2025/09/30 14:18 linux-6.1.y 7b34dc04e4ff 86341da6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in sys_mprotect
2025/09/25 09:14 linux-6.1.y 363a599da6d9 0abd0691 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in sys_mprotect
2025/09/19 07:32 linux-6.1.y 3db754f56897 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in sys_mprotect
* Struck through repros no longer work on HEAD.