INFO: rcu detected stall in rename

Status: auto-obsoleted due to no activity on 2026/11/10 19:14
Subsystems: mm
Labels: prio:normal
[Documentation on labels]
First crash: 127d, last: 94d
▶ ▼ ✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
f0ca248a assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ INFO: rcu detected stall in rename 2026/07/13 00:21 2026/07/13 00:21 2026/07/13 01:06 d78ea535
▶ ▼ Similar bugs (19)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in sys_rename (8) prio:low mm 1 syz 10 268d 264d 0/29 auto-obsoleted due to no activity on 2026/05/31 08:47
upstream INFO: rcu detected stall in sys_rename (2) mm 1 2 2503d 2503d 0/29 closed as invalid on 2020/01/09 08:13
linux-5.15 INFO: rcu detected stall in sys_rename (4) 1 3 297d 361d 0/3 auto-obsoleted due to no activity on 2026/05/02 02:33
linux-5.15 INFO: rcu detected stall in sys_rename (5) 1 2 123d 162d 0/3 auto-obsoleted due to no activity on 2026/10/23 13:07
upstream INFO: rcu detected stall in sys_rename (7) fs 1 2 511d 515d 0/29 auto-obsoleted due to no activity on 2025/09/20 13:58
upstream INFO: rcu detected stall in sys_rename (5) fs 1 2 1084d 1145d 0/29 auto-obsoleted due to no activity on 2024/02/25 12:55
linux-6.1 INFO: rcu detected stall in sys_rename (3) 1 1 275d 275d 0/3 auto-obsoleted due to no activity on 2026/05/24 13:02
upstream INFO: rcu detected stall in sys_rename (4) fs 1 1 1475d 1475d 0/29 auto-obsoleted due to no activity on 2023/02/25 08:48
upstream INFO: rcu detected stall in sys_rename (3) fs 1 3 1576d 1649d 0/29 auto-obsoleted due to no activity on 2022/10/21 16:10
linux-6.1 INFO: rcu detected stall in sys_rename 1 1 568d 568d 0/3 auto-obsoleted due to no activity on 2025/08/04 09:07
linux-5.15 INFO: rcu detected stall in sys_rename 1 1 1135d 1135d 0/3 auto-obsoleted due to no activity on 2024/01/14 17:35
upstream INFO: rcu detected stall in sys_rename (6) fs 1 13 706d 877d 0/29 auto-obsoleted due to no activity on 2025/03/09 06:53
linux-6.1 INFO: rcu detected stall in sys_rename (2) 1 1 457d 457d 0/3 auto-obsoleted due to no activity on 2025/11/23 08:45
linux-6.1 INFO: rcu detected stall in sys_rename (4) 1 1 67d 67d 0/3 upstream: reported on 2026/09/09 02:03
linux-6.6 INFO: rcu detected stall in sys_rename origin:lts-only 1 syz, C done 3 57d 424d 0/2 upstream: reported C repro on 2025/09/16 17:23
upstream INFO: rcu detected stall in sys_rename mm 1 9 2538d 2539d 0/29 closed as invalid on 2019/12/04 14:14
linux-5.15 INFO: rcu detected stall in sys_rename (2) 1 1 829d 829d 0/3 auto-obsoleted due to no activity on 2024/11/15 17:39
linux-5.15 INFO: rcu detected stall in sys_rename (3) 1 1 641d 641d 0/3 auto-obsoleted due to no activity on 2025/05/23 15:25
android-5-15 BUG: soft lockup in sys_rename 1 2 925d 930d 0/2 auto-obsoleted due to no activity on 2024/08/01 16:15

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P10615/1:b..l
rcu: 	(detected by 0, t=10502 jiffies, g=72621, q=1263 ncpus=1)
task:syz.7.1566      state:R  running task     stack:26488 pid:10615 tgid:10614 ppid:9446   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7556
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:rcu_read_lock include/linux/rcupdate.h:841 [inline]
RIP: 0010:class_rcu_constructor include/linux/rcupdate.h:1183 [inline]
RIP: 0010:unwind_next_frame+0xb0/0x2550 arch/x86/kernel/unwind_orc.c:495
Code: 35 00 4c 8d 2d 00 00 00 00 48 c7 c7 60 9c b5 8e 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 41 55 e8 24 31 2b 00 48 83 c4 08 <e8> eb 77 59 0a 85 c0 74 3a e8 62 5b 34 00 84 c0 75 31 e8 d9 77 59
RSP: 0018:ffffc90003d372c8 EFLAGS: 00000282
RAX: e285db8a95212200 RBX: ffffffff816e1b63 RCX: 0000000000000046
RDX: 00000000b058b254 RSI: ffffffff8e4b277d RDI: ffffffff8c4bdd80
RBP: 1ffff920007a6e80 R08: ffffffff8177927f R09: 0000000000000000
R10: 0000000000000000 R11: ffffffff8eb59c60 R12: dffffc0000000000
R13: ffffffff8177927f R14: ffffc90003d373c8 R15: 1ffff920007a6e79
 __unwind_start+0x514/0x660 arch/x86/kernel/unwind_orc.c:787
 unwind_start arch/x86/include/asm/unwind.h:64 [inline]
 arch_stack_walk+0xe3/0x150 arch/x86/kernel/stacktrace.c:24
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 save_stack+0x122/0x230 mm/page_owner.c:165
 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1406 [inline]
 __free_frozen_pages+0xc1e/0xd10 mm/page_alloc.c:2950
 __slab_free+0x274/0x2c0 mm/slub.c:5741
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
 __kasan_kmalloc+0x22/0xb0 mm/kasan/common.c:406
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __do_kmalloc_node mm/slub.c:5334 [inline]
 __kmalloc_noprof+0x375/0x720 mm/slub.c:5359
 _kmalloc_noprof include/linux/slab.h:992 [inline]
 _kzalloc_noprof include/linux/slab.h:1309 [inline]
 tomoyo_encode2 security/tomoyo/realpath.c:45 [inline]
 tomoyo_encode+0x2ad/0x570 security/tomoyo/realpath.c:80
 tomoyo_realpath_from_path+0x5fa/0x640 security/tomoyo/realpath.c:283
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_path2_perm+0x2c5/0x760 security/tomoyo/file.c:927
 tomoyo_path_rename+0x14e/0x1b0 security/tomoyo/tomoyo.c:300
 security_path_rename+0x248/0x460 security/security.c:1544
 filename_renameat2+0x4ba/0x9a0 fs/namei.c:6187
 __do_sys_rename fs/namei.c:6236 [inline]
 __se_sys_rename+0x55/0x2c0 fs/namei.c:6232
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f17ffd9e019
RSP: 002b:00007f1800b9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
RAX: ffffffffffffffda RBX: 00007f1800025fa0 RCX: 00007f17ffd9e019
RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000100
RBP: 00007f17ffe3500c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f1800026038 R14: 00007f1800025fa0 R15: 00007ffd9dd251d8
 </TASK>
rcu: rcu_preempt kthread starved for 397 jiffies! g72621 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:28192 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
 __schedule_loop kernel/sched/core.c:7311 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7326
 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123
 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 UID: 0 PID: 3222 Comm: kworker/R-bat_e Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Workqueue: bat_events batadv_tt_purge
RIP: 0010:arch_atomic_read arch/x86/include/asm/atomic.h:23 [inline]
RIP: 0010:raw_atomic_read include/linux/atomic/atomic-arch-fallback.h:457 [inline]
RIP: 0010:rcu_is_watching_curr_cpu include/linux/context_tracking.h:128 [inline]
RIP: 0010:rcu_is_watching+0x5a/0xb0 kernel/rcu/tree.c:752
Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 fc bc 88 00 48 c7 c3 d8 58 6e 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d b9 31 c1 11 74 11 83 e0 04 c1 e8 02 5b
RSP: 0018:ffffc90000006d38 EFLAGS: 00000216
RAX: 0000000000000000 RBX: ffff8880b86338d8 RCX: 0000000080000102
RDX: ffffc90000006e01 RSI: ffffffff8c4bdd60 RDI: ffffffff8c4bdd20
RBP: 1ffffffff22f9b01 R08: ffffc900000079b0 R09: ffffc90000006eb8
R10: dffffc0000000000 R11: fffff52000000dd9 R12: ffffc90000000000
R13: ffffffff8177927f R14: ffffffff8e4fb7d0 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff888124f4e000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1dc0ff9d60 CR3: 00000000278e8000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 trace_lock_release include/trace/events/lock.h:68 [inline]
 lock_release+0x4b/0x3c0 kernel/locking/lockdep.c:5879
 rcu_lock_release include/linux/rcupdate.h:310 [inline]
 rcu_read_unlock include/linux/rcupdate.h:871 [inline]
 class_rcu_destructor include/linux/rcupdate.h:1183 [inline]
 unwind_next_frame+0x1baa/0x2550 arch/x86/kernel/unwind_orc.c:709
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 unpoison_slab_object mm/kasan/common.c:340 [inline]
 __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:366
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4584 [inline]
 slab_alloc_node mm/slub.c:4917 [inline]
 kmem_cache_alloc_node_noprof+0x355/0x610 mm/slub.c:4989
 kmalloc_reserve net/core/skbuff.c:615 [inline]
 __alloc_skb+0x276/0x7a0 net/core/skbuff.c:715
 alloc_skb include/linux/skbuff.h:1384 [inline]
 synproxy_send_client_synack_ipv6+0x16e/0xcd0 net/netfilter/nf_synproxy_core.c:883
 nft_synproxy_eval_v6+0x362/0x4e0 net/netfilter/nft_synproxy.c:90
 nft_synproxy_do_eval+0x3d1/0x550 net/netfilter/nft_synproxy.c:145
 expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline]
 nft_do_chain+0x48d/0x1b10 net/netfilter/nf_tables_core.c:285
 nft_do_chain_inet+0x360/0x4b0 net/netfilter/nft_chain_filter.c:162
 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
 nf_hook_slow+0xc5/0x220 net/netfilter/core.c:619
 nf_hook include/linux/netfilter.h:273 [inline]
 NF_HOOK+0x21f/0x3c0 include/linux/netfilter.h:316
 ip6_input+0x16a/0x270 net/ipv6/ip6_input.c:545
 NF_HOOK+0x336/0x3c0 include/linux/netfilter.h:318
 __netif_receive_skb_one_core net/core/dev.c:6212 [inline]
 __netif_receive_skb net/core/dev.c:6325 [inline]
 process_backlog+0x774/0x1860 net/core/dev.c:6676
 __napi_poll+0xaa/0x330 net/core/dev.c:7735
 napi_poll net/core/dev.c:7798 [inline]
 net_rx_action+0x61d/0xf50 net/core/dev.c:7955
 handle_softirqs+0x225/0x840 kernel/softirq.c:622
 do_softirq+0x76/0xd0 kernel/softirq.c:523
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450
 spin_unlock_bh include/linux/spinlock.h:396 [inline]
 batadv_tt_local_purge+0x2c1/0x340 net/batman-adv/translation-table.c:1366
 batadv_tt_purge+0x35/0xa10 net/batman-adv/translation-table.c:3565
 process_one_work kernel/workqueue.c:3322 [inline]
 process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
 rescuer_thread+0x7b6/0x10b0 kernel/workqueue.c:3629
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/30 19:41 upstream 11028ab62899 aaffb173 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: rcu detected stall in rename
2026/07/11 00:40 net-next b470fde8f77b 99e64375 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: rcu detected stall in rename
2026/08/12 19:08 upstream 3d6d817622b0 7ae4acc7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: rcu detected stall in sys_rename
2026/08/11 07:32 upstream d58772d8520c 039457bd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: rcu detected stall in sys_rename
2026/07/27 08:30 upstream 4235cb24ec1e 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: rcu detected stall in sys_rename
2026/07/13 17:42 upstream a13c140cc289 a870962e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: rcu detected stall in sys_rename
* Struck through repros no longer work on HEAD.