INFO: rcu detected stall in sys_rename (5)

Status: upstream: reported on 2026/06/05 22:48
Reported-by: syzbot+e29e16a7b686ba319dc4@syzkaller.appspotmail.com
First crash: 58d, last: 18d
▶ ▼ Similar bugs (17)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in sys_rename (2) mm 1 2 2398d 2399d 0/29 closed as invalid on 2020/01/09 08:13
linux-5.15 INFO: rcu detected stall in sys_rename (4) 1 3 193d 257d 0/3 auto-obsoleted due to no activity on 2026/05/02 02:33
upstream INFO: rcu detected stall in sys_rename (7) fs 1 2 406d 410d 0/29 auto-obsoleted due to no activity on 2025/09/20 13:58
upstream INFO: rcu detected stall in sys_rename (5) fs 1 2 979d 1041d 0/29 auto-obsoleted due to no activity on 2024/02/25 12:55
linux-6.1 INFO: rcu detected stall in sys_rename (3) 1 1 170d 170d 0/3 auto-obsoleted due to no activity on 2026/05/24 13:02
upstream INFO: rcu detected stall in sys_rename (4) fs 1 1 1370d 1370d 0/29 auto-obsoleted due to no activity on 2023/02/25 08:48
upstream INFO: rcu detected stall in sys_rename (3) fs 1 3 1471d 1545d 0/29 auto-obsoleted due to no activity on 2022/10/21 16:10
linux-6.1 INFO: rcu detected stall in sys_rename 1 1 463d 463d 0/3 auto-obsoleted due to no activity on 2025/08/04 09:07
linux-5.15 INFO: rcu detected stall in sys_rename 1 1 1031d 1031d 0/3 auto-obsoleted due to no activity on 2024/01/14 17:35
upstream INFO: rcu detected stall in sys_rename (6) fs 1 13 602d 773d 0/29 auto-obsoleted due to no activity on 2025/03/09 06:53
linux-6.1 INFO: rcu detected stall in sys_rename (2) 1 1 352d 352d 0/3 auto-obsoleted due to no activity on 2025/11/23 08:45
linux-6.6 INFO: rcu detected stall in sys_rename origin:lts-only 1 syz, C done 2 84d 320d 0/2 upstream: reported C repro on 2025/09/16 17:23
upstream INFO: rcu detected stall in sys_rename mm 1 9 2433d 2435d 0/29 closed as invalid on 2019/12/04 14:14
upstream INFO: rcu detected stall in sys_rename (8) mm prio:low 1 syz 10 163d 159d 0/29 auto-obsoleted due to no activity on 2026/05/31 08:47
linux-5.15 INFO: rcu detected stall in sys_rename (2) 1 1 725d 725d 0/3 auto-obsoleted due to no activity on 2024/11/15 17:39
linux-5.15 INFO: rcu detected stall in sys_rename (3) 1 1 536d 536d 0/3 auto-obsoleted due to no activity on 2025/05/23 15:25
android-5-15 BUG: soft lockup in sys_rename 1 2 821d 826d 0/2 auto-obsoleted due to no activity on 2024/08/01 16:15

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	1-...!: (0 ticks this GP) idle=d51/1/0x4000000000000000 softirq=55175/55175 fqs=7 
	(detected by 0, t=10502 jiffies, g=81169, q=207)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 13701 Comm: udevd Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
RIP: 0010:get_current arch/x86/include/asm/current.h:15 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 kernel/kcov.c:205
Code: 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d 80 fa 11 0c 48 89 de 5b e9 07 56 44 00 00 00 cc cc 00 00 cc 48 8b 04 24 <65> 48 8b 0d 14 7d 89 7e 65 8b 15 15 7d 89 7e 81 e2 00 01 ff 00 74
RSP: 0018:ffffc90000dd0cc0 EFLAGS: 00000087
RAX: ffffffff8819bc05 RBX: 0000000000000001 RCX: ffff8880454f3b80
RDX: 0000000000010000 RSI: ffffffff8a7a2a20 RDI: ffff8880454f3b80
RBP: ffff888024808360 R08: ffff88802480818f R09: 1ffff11004901031
R10: dffffc0000000000 R11: ffffed1004901032 R12: 18c279d4c4e9e893
R13: dffffc0000000000 R14: ffff8880789c1b80 R15: ffff888024808000
FS:  00007f38d33bc880(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa9be9b7ff8 CR3: 000000001fb8d000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 rcu_lock_release+0x5/0x20 include/linux/rcupdate.h:317
 rcu_read_unlock include/linux/rcupdate.h:773 [inline]
 advance_sched+0x7b8/0x920 net/sched/sch_taprio.c:751
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x4ea/0xb60 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x397/0x8b0 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1097 [inline]
 __sysvec_apic_timer_interrupt+0x137/0x4a0 arch/x86/kernel/apic/apic.c:1114
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0x9b/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:tomoyo_supervisor+0x6/0x1190 security/tomoyo/common.c:2060
Code: df e8 7e 77 17 fe 48 8b 0b 48 85 c9 48 c7 c0 a0 c9 48 96 48 0f 45 c1 5b 41 5e c3 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 00 02 00 00 48 89 f3 48
RSP: 0018:ffffc900038279a8 EFLAGS: 00000246
RAX: 1ffff92000704f48 RBX: ffffc90003827a60 RCX: ffff88807b9c7880
RDX: ffffffff8a739100 RSI: ffffffff8a73caa0 RDI: ffffc90003827a60
RBP: ffffc900038279b0 R08: ffff888147341ec0 R09: 1ffff1100fc7c909
R10: dffffc0000000000 R11: ffffed100fc7c90a R12: ffffc90003827a40
R13: dffffc0000000000 R14: ffffffff8a739100 R15: ffff88807b9c7880
 tomoyo_audit_path2_log security/tomoyo/file.c:182 [inline]
 tomoyo_path2_perm+0x5f5/0x840 security/tomoyo/file.c:943
 tomoyo_path_rename+0xfd/0x150 security/tomoyo/tomoyo.c:278
 security_path_rename+0x1dc/0x280 security/security.c:1206
 do_renameat2+0x7cd/0xf70 fs/namei.c:4980
 __do_sys_rename fs/namei.c:5039 [inline]
 __se_sys_rename fs/namei.c:5037 [inline]
 __x64_sys_rename+0x82/0x90 fs/namei.c:5037
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f38d347dcc7
Code: e8 5e a7 09 00 f7 d8 19 c0 5b c3 0f 1f 84 00 00 00 00 00 b8 ff ff ff ff 5b c3 66 0f 1f 84 00 00 00 00 00 b8 52 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 01 61 17 00 f7 d8 64 89 02 b8
RSP: 002b:00007fff1c02c9e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000052
RAX: ffffffffffffffda RBX: 0000561ad8b5ee10 RCX: 00007f38d347dcc7
RDX: 0000561ad8b3f010 RSI: 00007fff1c02ca00 RDI: 00007fff1c02ce00
RBP: 0000561ad8b54830 R08: 00000000000001e0 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff1c02ca00
R13: 00007fff1c02ce00 R14: 0000000000000000 R15: 0000561ad7b0f9dd
 </TASK>
rcu: rcu_preempt kthread starved for 10488 jiffies! g81169 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:28112 pid:   15 ppid:     2 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 schedule_timeout+0x184/0x2d0 kernel/time/timer.c:2117
 rcu_gp_fqs_loop+0x2be/0x11f0 kernel/rcu/tree.c:1972
 rcu_gp_kthread+0x9a/0x370 kernel/rcu/tree.c:2145
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
NMI backtrace for cpu 0
CPU: 0 PID: 16457 Comm: syz.0.3067 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
Call Trace:
 <IRQ>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 nmi_cpu_backtrace+0x3a2/0x3d0 lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x163/0x280 lib/nmi_backtrace.c:62
 trigger_single_cpu_backtrace include/linux/nmi.h:166 [inline]
 rcu_check_gp_kthread_starvation+0x1cd/0x250 kernel/rcu/tree_stall.h:487
 print_other_cpu_stall+0x1110/0x1270 kernel/rcu/tree_stall.h:592
 check_cpu_stall kernel/rcu/tree_stall.h:745 [inline]
 rcu_pending kernel/rcu/tree.c:3936 [inline]
 rcu_sched_clock_irq+0x845/0x1120 kernel/rcu/tree.c:2619
 update_process_times+0x193/0x200 kernel/time/timer.c:2021
 tick_sched_handle kernel/time/tick-sched.c:254 [inline]
 tick_sched_timer+0x37d/0x560 kernel/time/tick-sched.c:1473
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x4b0/0xb60 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x397/0x8b0 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1097 [inline]
 __sysvec_apic_timer_interrupt+0x137/0x4a0 arch/x86/kernel/apic/apic.c:1114
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0x9b/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:csd_lock_wait kernel/smp.c:440 [inline]
RIP: 0010:smp_call_function_many_cond+0xba3/0xd80 kernel/smp.c:969
Code: 0f b6 44 05 00 84 c0 0f 85 9a 00 00 00 41 8b 1e 89 de 83 e6 01 31 ff e8 fb 67 0b 00 83 e3 01 75 07 e8 91 64 0b 00 eb 42 f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 75 10 41 f7
RSP: 0018:ffffc90002dcf2a0 EFLAGS: 00000246
RAX: ffffffff816d8e35 RBX: 0000000000000001 RCX: 0000000000080000
RDX: ffffc90005691000 RSI: 000000000007ffff RDI: 0000000000080000
RBP: ffffc90002dcf3e0 R08: ffffffff901e90cf R09: 1ffffffff203d219
R10: dffffc0000000000 R11: fffffbfff203d21a R12: ffff8880b903b3c0
R13: 1ffff110172280b9 R14: ffff8880b91405c8 R15: 0000000000000001
 on_each_cpu_cond_mask+0x3b/0x80 kernel/smp.c:1134
 __purge_vmap_area_lazy+0x21e/0x1940 mm/vmalloc.c:1690
 _vm_unmap_aliases+0x40b/0x4a0 mm/vmalloc.c:2114
 change_page_attr_set_clr+0x317/0xc30 arch/x86/mm/pat/set_memory.c:1740
 change_page_attr_clear arch/x86/mm/pat/set_memory.c:1797 [inline]
 set_memory_ro+0x89/0xd0 arch/x86/mm/pat/set_memory.c:1943
 bpf_jit_binary_lock_ro include/linux/filter.h:919 [inline]
 bpf_int_jit_compile+0xbf27/0xc4d0 arch/x86/net/bpf_jit_comp.c:2478
 bpf_prog_select_runtime+0x46f/0x7b0 kernel/bpf/core.c:1977
 bpf_prog_load+0x100a/0x14e0 kernel/bpf/syscall.c:2358
 __sys_bpf+0x532/0x6f0 kernel/bpf/syscall.c:4657
 __do_sys_bpf kernel/bpf/syscall.c:4761 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:4759 [inline]
 __x64_sys_bpf+0x78/0x90 kernel/bpf/syscall.c:4759
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fa180909e59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fa17eb62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 00007fa180b91fa0 RCX: 00007fa180909e59
RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005
RBP: 00007fa18099fe6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fa180b92038 R14: 00007fa180b91fa0 R15: 00007ffc4c4b75c8
 </TASK>

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/15 13:06 linux-5.15.y c86c4726e7f0 a4ed0f4f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in sys_rename
2026/06/05 22:47 linux-5.15.y dc027a595035 48b6c3fa .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-perf INFO: rcu detected stall in sys_rename
* Struck through repros no longer work on HEAD.