syzbot


INFO: rcu detected stall in kernel_mbind (2)

Status: auto-obsoleted due to no activity on 2025/12/30 06:09
Subsystems: mm
[Documentation on labels]
First crash: 126d, last: 126d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in kernel_mbind mm kasan 1 4 318d 399d 0/29 auto-obsoleted due to no activity on 2025/06/20 18:50

Sample crash report:
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P26654/1:b..l
rcu: 	(detected by 1, t=10503 jiffies, g=147561, q=355 ncpus=2)
task:syz.5.2751      state:R  running task     stack:27176 pid:26654 tgid:26643 ppid:14295  task_flags:0x400040 flags:0x00080003
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5325 [inline]
 __schedule+0x1190/0x5de0 kernel/sched/core.c:6929
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7256
 irqentry_exit+0x36/0x90 kernel/entry/common.c:211
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:on_stack arch/x86/include/asm/stacktrace.h:58 [inline]
RIP: 0010:stack_access_ok+0x60/0x200 arch/x86/kernel/unwind_orc.c:393
Code: 4c 8d 6b 10 4c 8b 7b 08 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 52 01 00 00 48 89 da 48 8b 4b 10 <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74 08
RSP: 0018:ffffc9000ed272a0 EFLAGS: 00000246
RAX: dffffc0000000000 RBX: ffffc9000ed27350 RCX: ffffc9000ed28000
RDX: ffffc9000ed27350 RSI: ffffc9000ed278d0 RDI: ffffc9000ed27350
RBP: ffffc9000ed278d0 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000002 R11: 00000000000a4719 R12: 0000000000000008
R13: ffffc9000ed27360 R14: ffffc9000ed27358 R15: ffffc9000ed20000
 deref_stack_reg arch/x86/kernel/unwind_orc.c:403 [inline]
 unwind_next_frame+0x15c5/0x20a0 arch/x86/kernel/unwind_orc.c:648
 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 save_stack+0x160/0x1f0 mm/page_owner.c:156
 __reset_page_owner+0x84/0x1a0 mm/page_owner.c:308
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1395 [inline]
 __free_frozen_pages+0x7d5/0x10f0 mm/page_alloc.c:2895
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4d/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:340
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4191 [inline]
 slab_alloc_node mm/slub.c:4240 [inline]
 kmem_cache_alloc_noprof+0x1cb/0x3b0 mm/slub.c:4247
 mt_alloc_one lib/maple_tree.c:176 [inline]
 mas_alloc_nodes+0x18b/0x8b0 lib/maple_tree.c:1255
 mas_node_count_gfp+0x105/0x130 lib/maple_tree.c:1337
 mas_preallocate+0x7e0/0xde0 lib/maple_tree.c:5537
 vma_iter_prealloc mm/vma.h:462 [inline]
 __split_vma+0x34a/0x1070 mm/vma.c:528
 split_vma mm/vma.c:598 [inline]
 vma_modify+0xee1/0x2030 mm/vma.c:1631
 vma_modify_policy+0x219/0x2d0 mm/vma.c:1678
 mbind_range+0x175/0x570 mm/mempolicy.c:983
 do_mbind+0x848/0xf30 mm/mempolicy.c:1485
 kernel_mbind+0x1e3/0x1f0 mm/mempolicy.c:1682
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5469b8eec9
RSP: 002b:00007f546aa19038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
RAX: ffffffffffffffda RBX: 00007f5469de6180 RCX: 00007f5469b8eec9
RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000
RBP: 00007f5469c11f91 R08: 0000000000000006 R09: 0000000000000002
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f5469de6218 R14: 00007f5469de6180 R15: 00007fffc6c388e8
 </TASK>
net_ratelimit: 13226 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:9f:db:75:aa:a3, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
net_ratelimit: 14084 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:9f:db:75:aa:a3, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:9f:db:75:aa:a3, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/10/01 06:07 upstream 4b81e2eb9e4d 65a0eece .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto INFO: rcu detected stall in kernel_mbind
* Struck through repros no longer work on HEAD.