syzbot

 sign-in | mailing list | source | docs
🐞 Open [975] ≡ Subsystems 🐞 Fixed [5207] 🐞 Invalid [12455] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

INFO: rcu detected stall in dput (6)

Status: auto-obsoleted due to no activity on 2023/01/16 04:13
Subsystems: fs
[Documentation on labels]
First crash: 591d, last: 531d
▶ ▼ Similar bugs (9)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in dput (4) kvm C error error 2 857d 1217d 0/26 closed as invalid on 2022/02/08 10:37
upstream INFO: rcu detected stall in dput (3) kernel 1 1559d 1559d 0/26 closed as invalid on 2020/01/09 08:13
upstream INFO: rcu detected stall in dput (8) mm C done 11 7d16h 106d 0/26 upstream: reported C repro on 2023/12/31 19:35
linux-5.15 INFO: rcu detected stall in dput 2 230d 270d 0/3 auto-obsoleted due to no activity on 2023/12/08 00:28
linux-5.15 INFO: rcu detected stall in dput (2) 2 23d 31d 0/3 upstream: reported on 2024/03/15 21:30
upstream INFO: rcu detected stall in dput (5) fs 1 727d 727d 0/26 auto-closed as invalid on 2022/07/18 12:41
linux-6.1 INFO: rcu detected stall in dput 1 278d 278d 0/3 auto-obsoleted due to no activity on 2023/10/20 22:44
upstream INFO: rcu detected stall in dput fs 1 1595d 1595d 0/26 closed as invalid on 2019/12/04 14:04
upstream INFO: rcu detected stall in dput (2) kernel 2 1560d 1560d 0/26 closed as invalid on 2020/01/08 05:33

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	0-...!: (0 ticks this GP) idle=501c/1/0x4000000000000000 softirq=11570/11570 fqs=0
	(detected by 1, t=10502 jiffies, g=12437, q=116 ncpus=2)
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 6072 Comm: syz-executor.5 Not tainted 6.1.0-rc1-next-20221021-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
RIP: 0010:__rb_erase_augmented include/linux/rbtree_augmented.h:214 [inline]
RIP: 0010:rb_erase+0x5bd/0x1210 lib/rbtree.c:443
Code: 00 74 80 48 89 14 24 e8 c1 9a 82 f8 48 8b 14 24 e9 6e ff ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 <0f> 85 c1 0a 00 00 4d 8b 65 00 4c 89 e3 48 83 e3 fc 0f 84 0c 01 00
RSP: 0018:ffffc90000007d70 EFLAGS: 00000046
RAX: dffffc0000000000 RBX: ffff88807afa3340 RCX: 0000000000000000
RDX: 1ffff1100f5f4668 RSI: ffff8880b9a2a610 RDI: ffff88807afa3350
RBP: ffff8880b9a2a610 R08: 0000000000000006 R09: 0000000000000001
R10: ffff88807afa3340 R11: 0000000000000001 R12: ffff8880b9a2a618
R13: ffff88807afa3340 R14: 0000000000000000 R15: ffff8880b9a2a610
FS:  0000555556916400(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000000 CR3: 0000000025ab1000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 rb_erase_cached include/linux/rbtree.h:126 [inline]
 timerqueue_del+0x7f/0x140 lib/timerqueue.c:57
 __remove_hrtimer+0xa1/0x2a0 kernel/time/hrtimer.c:1116
 __run_hrtimer kernel/time/hrtimer.c:1665 [inline]
 __hrtimer_run_queues+0x548/0xfb0 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1096 [inline]
 __sysvec_apic_timer_interrupt+0x17c/0x640 arch/x86/kernel/apic/apic.c:1113
 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1107
 </IRQ>
 <TASK>
 asm_sysvec_x86_platform_ipi-0xa/0x20
RIP: 0010:iput+0x0/0x70 fs/inode.c:1760
Code: ff e9 ad fc ff ff 4c 89 ff e8 fc 4d ea ff e9 e5 fd ff ff 4c 89 e7 e8 ef 4d ea ff e9 bc fc ff ff 66 2e 0f 1f 84 00 00 00 00 00 <55> 48 89 fd 53 e8 e6 c0 9d ff 48 85 ed 74 49 e8 dc c0 9d ff 48 8d
RSP: 0018:ffffc9000d1afd18 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff888029010000 RSI: ffffffff81dd7419 RDI: ffff888039a7dac0
RBP: ffff88808a3ea8d0 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 000000000008c001 R12: ffff888039a7dac0
R13: ffff88808a3ea8d8 R14: 0000000000000000 R15: 0000000000000000
 dentry_unlink_inode+0x2b1/0x460 fs/dcache.c:401
 __dentry_kill+0x3c0/0x640 fs/dcache.c:607
 dentry_kill fs/dcache.c:733 [inline]
 dput+0x806/0xdb0 fs/dcache.c:913
 __fput+0x3cc/0xa90 fs/file_table.c:328
 task_work_run+0x16b/0x270 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:171 [inline]
 exit_to_user_mode_prepare+0x23c/0x250 kernel/entry/common.c:203
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x19/0x50 kernel/entry/common.c:296
 do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7ff3faa3d37b
Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
RSP: 002b:00007ffe19b3fff0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007ff3faa3d37b
RDX: ffffffffffffffb8 RSI: ffffffffffffffff RDI: 0000000000000004
RBP: 00007ff3fabad980 R08: 0000000000000000 R09: 00007ff3fa600000
R10: 00007ff3fa600138 R11: 0000000000000293 R12: 0000000000051d5a
R13: 00007ffe19b400f0 R14: 00007ff3fababf80 R15: 0000000000000032
 </TASK>
rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g12437 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: 	Possible timer handling issue on cpu=0 timer-softirq=10046
rcu: rcu_preempt kthread starved for 10502 jiffies! g12437 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:I stack:29288 pid:16    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5191 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6503
 schedule+0xda/0x1b0 kernel/sched/core.c:6579
 schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1935
 rcu_gp_fqs_loop+0x190/0x910 kernel/rcu/tree.c:1680
 rcu_gp_kthread+0x236/0x360 kernel/rcu/tree.c:1879
 kthread+0x2e4/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 6072 Comm: syz-executor.5 Not tainted 6.1.0-rc1-next-20221021-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
RIP: 0010:cpu_max_bits_warn include/linux/cpumask.h:110 [inline]
RIP: 0010:cpumask_check include/linux/cpumask.h:117 [inline]
RIP: 0010:cpumask_test_cpu include/linux/cpumask.h:444 [inline]
RIP: 0010:cpu_online include/linux/cpumask.h:1030 [inline]
RIP: 0010:trace_lock_acquire include/trace/events/lock.h:24 [inline]
RIP: 0010:lock_acquire+0xc6/0x630 kernel/locking/lockdep.c:5639
Code: 00 fc ff df 4c 89 d1 41 83 e2 07 48 c1 e9 03 41 83 c2 03 0f b6 04 01 41 38 c2 7c 08 84 c0 0f 85 b5 04 00 00 3b 15 4a 7d 62 0c <0f> 83 62 04 00 00 89 d2 be 08 00 00 00 48 89 d0 48 89 54 24 08 48
RSP: 0018:ffffc90000007cb0 EFLAGS: 00000093
RAX: 0000000000000000 RBX: 1ffff92000000f99 RCX: 1ffffffff1b846c0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807afa3300
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: ffff88807afa3300 R15: 0000000000000000
FS:  0000555556916400(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000000 CR3: 0000000025ab1000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
 _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154
 spin_lock include/linux/spinlock.h:350 [inline]
 advance_sched+0x53/0x9a0 net/sched/sch_taprio.c:700
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x690/0xfb0 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1096 [inline]
 __sysvec_apic_timer_interrupt+0x17c/0x640 arch/x86/kernel/apic/apic.c:1113
 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1107
 </IRQ>
 <TASK>
 asm_sysvec_x86_platform_ipi-0xa/0x20
RIP: 0010:iput+0x0/0x70 fs/inode.c:1760
Code: ff e9 ad fc ff ff 4c 89 ff e8 fc 4d ea ff e9 e5 fd ff ff 4c 89 e7 e8 ef 4d ea ff e9 bc fc ff ff 66 2e 0f 1f 84 00 00 00 00 00 <55> 48 89 fd 53 e8 e6 c0 9d ff 48 85 ed 74 49 e8 dc c0 9d ff 48 8d
RSP: 0018:ffffc9000d1afd18 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff888029010000 RSI: ffffffff81dd7419 RDI: ffff888039a7dac0
RBP: ffff88808a3ea8d0 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 000000000008c001 R12: ffff888039a7dac0
R13: ffff88808a3ea8d8 R14: 0000000000000000 R15: 0000000000000000
 dentry_unlink_inode+0x2b1/0x460 fs/dcache.c:401
 __dentry_kill+0x3c0/0x640 fs/dcache.c:607
 dentry_kill fs/dcache.c:733 [inline]
 dput+0x806/0xdb0 fs/dcache.c:913
 __fput+0x3cc/0xa90 fs/file_table.c:328
 task_work_run+0x16b/0x270 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:171 [inline]
 exit_to_user_mode_prepare+0x23c/0x250 kernel/entry/common.c:203
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x19/0x50 kernel/entry/common.c:296
 do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7ff3faa3d37b
Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
RSP: 002b:00007ffe19b3fff0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007ff3faa3d37b
RDX: ffffffffffffffb8 RSI: ffffffffffffffff RDI: 0000000000000004
RBP: 00007ff3fabad980 R08: 0000000000000000 R09: 00007ff3fa600000
R10: 00007ff3fa600138 R11: 0000000000000293 R12: 0000000000051d5a
R13: 00007ffe19b400f0 R14: 00007ff3fababf80 R15: 0000000000000032
 </TASK>

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/11/01 14:00 linux-next 4d48f589d294 a1d8560a .config console log report info [disk image] [vmlinux] ci-upstream-linux-next-kasan-gce-root INFO: rcu detected stall in dput
2022/09/03 05:03 linux-next e47eb90a0a9a 49e94a20 .config console log report info ci-upstream-linux-next-kasan-gce-root INFO: rcu detected stall in dput
* Struck through repros no longer work on HEAD.