syzbot

 sign-in | mailing list | source | docs
🐞 Open [873]
🐞 Fixed [141]
🐞 Invalid [1009]
⬇ Missing Backports [73]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

INFO: rcu detected stall in dentry_kill

Status: upstream: reported on 2026/01/20 19:30
Reported-by: syzbot+ecc91afd56cfea8535b2@syzkaller.appspotmail.com
First crash: 19d, last: 20h07m
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.6 INFO: rcu detected stall in dentry_kill 1 1 7d20h 7d20h 0/2 upstream: reported on 2026/02/01 10:07

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P7301/1:b..l P7271/1:b..l
	(detected by 0, t=10502 jiffies, g=35441, q=113 ncpus=2)
task:syz.4.987       state:R  running task     stack:22832 pid:7271  ppid:4281   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5245 [inline]
 __schedule+0x11d1/0x40e0 kernel/sched/core.c:6562
 preempt_schedule_irq+0xbb/0x160 kernel/sched/core.c:6874
 irqentry_exit+0x63/0x70 kernel/entry/common.c:439
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:stackdepot_memcmp lib/stackdepot.c:290 [inline]
RIP: 0010:find_stack lib/stackdepot.c:306 [inline]
RIP: 0010:__stack_depot_save+0x174/0x460 lib/stackdepot.c:452
Code: be 12 41 21 ec 4f 8b 2c e0 4d 85 ed 74 64 44 89 f9 eb 09 4d 8b 6d 00 4d 85 ed 74 56 41 39 6d 08 75 f1 45 39 7d 0c 75 eb 31 d2 <49> 8b 34 d6 49 3b 74 d5 18 75 de 48 ff c2 39 d1 75 ee 4d 85 ed 74
RSP: 0018:ffffc9000c0e6ed8 EFLAGS: 00000216
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000010
RDX: 000000000000000a RSI: ffffffff81e71d3a RDI: 0000000000002800
RBP: 00000000b33a772d R08: ffff88823b400000 R09: 0000000000000001
R10: 00000000017305a9 R11: fffff5200181cdcd R12: 00000000000a772d
R13: ffff8880283becf0 R14: ffffc9000c0e6f80 R15: 0000000000000010
 save_stack+0x12f/0x230 mm/page_owner.c:128
 __reset_page_owner+0x51/0x1a0 mm/page_owner.c:148
 reset_page_owner include/linux/page_owner.h:24 [inline]
 free_pages_prepare mm/page_alloc.c:1486 [inline]
 free_pcp_prepare mm/page_alloc.c:1536 [inline]
 free_unref_page_prepare+0x8b4/0x9a0 mm/page_alloc.c:3413
 free_unref_page_list+0xbb/0x8e0 mm/page_alloc.c:3554
 release_pages+0x1fa6/0x2220 mm/swap.c:1035
 __pagevec_release+0x6d/0xe0 mm/swap.c:1055
 pagevec_release include/linux/pagevec.h:71 [inline]
 folio_batch_release include/linux/pagevec.h:135 [inline]
 shmem_undo_range+0x7c2/0x20c0 mm/shmem.c:946
 shmem_truncate_range mm/shmem.c:1062 [inline]
 shmem_evict_inode+0x25b/0xa80 mm/shmem.c:1171
 evict+0x4c9/0x8d0 fs/inode.c:705
 __dentry_kill+0x431/0x650 fs/dcache.c:611
 dentry_kill+0xb8/0x290 fs/dcache.c:-1
 dput+0xfa/0x1d0 fs/dcache.c:918
 __fput+0x5e0/0x920 fs/file_table.c:328
 task_work_run+0x1d0/0x260 kernel/task_work.c:203
 exit_task_work include/linux/task_work.h:39 [inline]
 do_exit+0x982/0x2480 kernel/exit.c:880
 do_group_exit+0x217/0x2d0 kernel/exit.c:1022
 get_signal+0x1272/0x1350 kernel/signal.c:2871
 arch_do_signal_or_restart+0xc4/0x1350 arch/x86/kernel/signal.c:871
 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:210
 irqentry_exit_to_user_mode+0x5/0x30 kernel/entry/common.c:316
 exc_page_fault+0x88/0x100 arch/x86/mm/fault.c:1485
 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:608
RIP: 0033:0x7f506139aec1
RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f5061615fa0 RCX: 00007f506139aeb9
RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
RBP: 00007f5061408c1f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007f5061616038 R14: 00007f5061615fa0 R15: 00007ffc0e5ad4a8
 </TASK>
task:syz.4.996       state:R  running task     stack:23760 pid:7301  ppid:4281   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5245 [inline]
 __schedule+0x11d1/0x40e0 kernel/sched/core.c:6562
 preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:6731
 preempt_schedule+0xbc/0xd0 kernel/sched/core.c:6755
 preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:34
 unwind_next_frame+0x1892/0x20b0 arch/x86/kernel/unwind_orc.c:629
 arch_stack_walk+0x10c/0x140 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa6/0xf0 kernel/stacktrace.c:122
 save_stack+0x121/0x230 mm/page_owner.c:127
 __reset_page_owner+0x51/0x1a0 mm/page_owner.c:148
 reset_page_owner include/linux/page_owner.h:24 [inline]
 free_pages_prepare mm/page_alloc.c:1486 [inline]
 free_pcp_prepare mm/page_alloc.c:1536 [inline]
 free_unref_page_prepare+0x8b4/0x9a0 mm/page_alloc.c:3413
 free_unref_page_list+0xbb/0x8e0 mm/page_alloc.c:3554
 release_pages+0x1fa6/0x2220 mm/swap.c:1035
 __pagevec_release+0x6d/0xe0 mm/swap.c:1055
 pagevec_release include/linux/pagevec.h:71 [inline]
 folio_batch_release include/linux/pagevec.h:135 [inline]
 shmem_undo_range+0x7c2/0x20c0 mm/shmem.c:946
 shmem_truncate_range mm/shmem.c:1062 [inline]
 shmem_evict_inode+0x25b/0xa80 mm/shmem.c:1171
 evict+0x4c9/0x8d0 fs/inode.c:705
 __dentry_kill+0x431/0x650 fs/dcache.c:611
 dentry_kill+0xb8/0x290 fs/dcache.c:-1
 dput+0xfa/0x1d0 fs/dcache.c:918
 __fput+0x5e0/0x920 fs/file_table.c:328
 task_work_run+0x1d0/0x260 kernel/task_work.c:203
 exit_task_work include/linux/task_work.h:39 [inline]
 do_exit+0x982/0x2480 kernel/exit.c:880
 do_group_exit+0x217/0x2d0 kernel/exit.c:1022
 get_signal+0x1272/0x1350 kernel/signal.c:2871
 arch_do_signal_or_restart+0xc4/0x1350 arch/x86/kernel/signal.c:871
 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:210
 irqentry_exit_to_user_mode+0x5/0x30 kernel/entry/common.c:316
 exc_page_fault+0x88/0x100 arch/x86/mm/fault.c:1485
 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:608
RIP: 0033:0x7f506139aec1
RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f5061615fa0 RCX: 00007f506139aeb9
RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
RBP: 00007f5061408c1f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007f5061616038 R14: 00007f5061615fa0 R15: 00007ffc0e5ad4a8
 </TASK>
rcu: rcu_preempt kthread starved for 9865 jiffies! g35441 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:28016 pid:16    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5245 [inline]
 __schedule+0x11d1/0x40e0 kernel/sched/core.c:6562
 schedule+0xb9/0x180 kernel/sched/core.c:6638
 schedule_timeout+0x184/0x2d0 kernel/time/timer.c:2168
 rcu_gp_fqs_loop+0x303/0x1340 kernel/rcu/tree.c:1706
 rcu_gp_kthread+0x99/0x3b0 kernel/rcu/tree.c:1905
 kthread+0x29d/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
RIP: 0010:default_idle+0xb/0x10 arch/x86/kernel/process.c:742
Code: 48 89 df e8 97 d1 9c f7 e9 44 ff ff ff e8 3d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 77 1c 50 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6
RAX: 3c11152284e87000 RBX: ffffffff8a3692b7 RCX: 3c11152284e87000
RDX: 0000000000000001 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20
RBP: ffffffff8c807ec0 R08: ffff8880b8e3580b R09: 1ffff110171c6b01
R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 1ffffffff1900fbc
R13: dffffc0000000000 R14: ffffffff8c8bc740 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe46725b6c8 CR3: 000000001df67000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 default_idle_call+0x84/0xc0 kernel/sched/idle.c:109
 cpuidle_idle_call kernel/sched/idle.c:191 [inline]
 do_idle+0x20d/0x5a0 kernel/sched/idle.c:303
 cpu_startup_entry+0x3f/0x60 kernel/sched/idle.c:401
 rest_init+0x2dc/0x300 init/main.c:745
 arch_call_rest_init+0xa/0xa init/main.c:905
 start_kernel+0x493/0x53c init/main.c:1152
 secondary_startup_64_no_verify+0xcf/0xdb
 </TASK>

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/02/08 10:28 linux-6.1.y 0182cb5b74ee 4c131dc4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in dentry_kill
2026/02/08 00:14 linux-6.1.y 0182cb5b74ee 4c131dc4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in dentry_kill
2026/01/29 21:58 linux-6.1.y cd9b81672742 aeb6fdd5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in dentry_kill
2026/01/27 17:36 linux-6.1.y cd9b81672742 9a514c2f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in dentry_kill
2026/01/20 19:29 linux-6.1.y cd9b81672742 06648d9c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in dentry_kill
* Struck through repros no longer work on HEAD.