syzbot


INFO: rcu detected stall in dcache_dir_open

Status: auto-obsoleted due to no activity on 2025/04/23 01:08
Subsystems: mm
[Documentation on labels]
First crash: 348d, last: 266d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in dcache_dir_open (2) mm 1 2 169d 176d 0/29 auto-obsoleted due to no activity on 2025/07/29 09:09

Sample crash report:
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:95:8d:17:43:da, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P8/1:b..l P5815/1:b..l P5830/1:b..l
rcu: 	(detected by 0, t=10502 jiffies, g=5761, q=872 ncpus=2)
task:syz-executor    state:R  running task     stack:21472 pid:5830  tgid:5830  ppid:5812   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5373 [inline]
 __schedule+0x1142/0x5b60 kernel/sched/core.c:6760
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7082
 irqentry_exit+0x36/0x90 kernel/entry/common.c:354
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:stack_trace_consume_entry+0x4/0x170 kernel/stacktrace.c:86
Code: 38 14 00 e9 35 ff ff ff 49 c7 c4 ea ff ff ff eb c7 e8 60 cc a9 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> b8 00 00 00 00 00 fc ff df 55 53 48 89 fb 48 83 c7 10 48 89 fa
RSP: 0018:ffffc9000419f328 EFLAGS: 00000286
RAX: ffffffff8185b505 RBX: ffffc9000419f330 RCX: ffffc9000419f3c8
RDX: 1ffff92000833e6f RSI: ffffffff8185b505 RDI: ffffc9000419f3f0
RBP: ffffc9000419f3c0 R08: ffffc9000419f364 R09: ffffffff90f25d4a
R10: ffffc9000419f330 R11: 0000000000004064 R12: ffffffff8185b170
R13: ffffc9000419f3f0 R14: 0000000000000000 R15: ffff888068b94880
 arch_stack_walk+0x86/0x100 arch/x86/kernel/stacktrace.c:27
 stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122
 save_stack+0x162/0x1f0 mm/page_owner.c:156
 __reset_page_owner+0x8d/0x400 mm/page_owner.c:297
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_unref_page+0x661/0x1080 mm/page_alloc.c:2659
 __put_partials+0x14c/0x170 mm/slub.c:3157
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4119 [inline]
 slab_alloc_node mm/slub.c:4168 [inline]
 __do_kmalloc_node mm/slub.c:4297 [inline]
 __kmalloc_noprof+0x1cd/0x510 mm/slub.c:4310
 kmalloc_noprof include/linux/slab.h:905 [inline]
 memcg_init_list_lru_one mm/list_lru.c:406 [inline]
 memcg_list_lru_alloc+0x29f/0x730 mm/list_lru.c:538
 __memcg_slab_post_alloc_hook+0x12c/0x9b0 mm/memcontrol.c:2991
 memcg_slab_post_alloc_hook mm/slub.c:2152 [inline]
 slab_post_alloc_hook mm/slub.c:4129 [inline]
 slab_alloc_node mm/slub.c:4168 [inline]
 kmem_cache_alloc_lru_noprof+0x363/0x3d0 mm/slub.c:4187
 __d_alloc+0x31/0xaa0 fs/dcache.c:1646
 d_alloc_anon fs/dcache.c:1743 [inline]
 d_alloc_cursor+0x3e/0xe0 fs/dcache.c:1749
 dcache_dir_open+0x3b/0x90 fs/libfs.c:91
 do_dentry_open+0xf59/0x1ea0 fs/open.c:938
 vfs_open+0x82/0x3f0 fs/open.c:1068
 do_open fs/namei.c:3828 [inline]
 path_openat+0x1e81/0x2d70 fs/namei.c:3987
 do_filp_open+0x20c/0x470 fs/namei.c:4014
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1395
 do_sys_open fs/open.c:1410 [inline]
 __do_sys_openat fs/open.c:1426 [inline]
 __se_sys_openat fs/open.c:1421 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1421
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff426d85621
RSP: 002b:00007fff677554f0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00007ff426d85621
RDX: 0000000000090800 RSI: 00007ff426e01e28 RDI: 00000000ffffff9c
RBP: 00007fff6775558c R08: 0000000000000000 R09: 00007ff427c05000
R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000
R13: 000000000000e19c R14: 00007fff677555e0 R15: 0000000000000002
 </TASK>
task:syz-executor    state:R  running task     stack:22928 pid:5815  tgid:5815  ppid:5811   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5373 [inline]
 __schedule+0x1142/0x5b60 kernel/sched/core.c:6760
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7082
 irqentry_exit+0x36/0x90 kernel/entry/common.c:354
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:arch_stack_walk+0xc3/0x100 arch/x86/kernel/stacktrace.c:30
Code: ff ff 85 c0 74 10 48 89 df e8 09 c9 08 00 48 85 c0 48 89 c6 75 d1 48 8b 45 d0 65 48 2b 04 25 28 00 00 00 75 34 48 83 c4 68 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 65 48 8b 05 a7 74 c3 7e
RSP: 0018:ffffc9000426f6c0 EFLAGS: 00000286
RAX: 0000000000000000 RBX: fffff5200084dede RCX: ffffc9000426f580
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880267fa884
RBP: ffffc9000426f6e0 R08: 0000000000000000 R09: fffffbfff20c1a3a
R10: ffffffff9060d1d7 R11: 0000000000000002 R12: ffffffff8185b170
R13: ffffc9000426f710 R14: 0000000000000000 R15: ffff8880267fa440
 stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122
 save_stack+0x162/0x1f0 mm/page_owner.c:156
 __reset_page_owner+0x8d/0x400 mm/page_owner.c:297
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_unref_page+0x661/0x1080 mm/page_alloc.c:2659
 __put_partials+0x14c/0x170 mm/slub.c:3157
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4119 [inline]
 slab_alloc_node mm/slub.c:4168 [inline]
 kmem_cache_alloc_noprof+0x226/0x3d0 mm/slub.c:4175
 alloc_empty_file+0x73/0x1e0 fs/file_table.c:228
 path_openat+0xe1/0x2d70 fs/namei.c:3973
 do_filp_open+0x20c/0x470 fs/namei.c:4014
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1395
 do_sys_open fs/open.c:1410 [inline]
 __do_sys_openat fs/open.c:1426 [inline]
 __se_sys_openat fs/open.c:1421 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1421
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8ccd385621
RSP: 002b:00007ffc0dad5bd0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f8ccd4018f4 RCX: 00007f8ccd385621
RDX: 0000000000090800 RSI: 00007ffc0dad6d70 RDI: 00000000ffffff9c
RBP: 00007ffc0dad6d5c R08: 0000000000000000 R09: 00007f8cce167000
R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffc0dad6d70
R13: 00007f8ccd4018f4 R14: 00007ffc0dad6db0 R15: 0000000000000002
 </TASK>
task:kworker/0:0     state:R  running task     stack:26992 pid:8     tgid:8     ppid:2      flags:0x00004000
Workqueue: events nsim_fib_event_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5373 [inline]
 __schedule+0x1142/0x5b60 kernel/sched/core.c:6760
 preempt_schedule_notrace+0x62/0xe0 kernel/sched/core.c:7032
 preempt_schedule_notrace_thunk+0x1a/0x30 arch/x86/entry/thunk.S:13
 rcu_read_unlock_sched_notrace include/linux/rcupdate.h:971 [inline]
 find_stack lib/stackdepot.c:579 [inline]
 stack_depot_save_flags+0x458/0x9c0 lib/stackdepot.c:618
 save_stack+0x16f/0x1f0 mm/page_owner.c:157
 __reset_page_owner+0x8d/0x400 mm/page_owner.c:297
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_unref_page+0x661/0x1080 mm/page_alloc.c:2659
 __put_partials+0x14c/0x170 mm/slub.c:3157
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4119 [inline]
 slab_alloc_node mm/slub.c:4168 [inline]
 __kmalloc_cache_noprof+0x243/0x410 mm/slub.c:4324
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 nsim_fib6_rt_nh_add+0x4a/0x290 drivers/net/netdevsim/fib.c:500
 nsim_fib6_rt_create drivers/net/netdevsim/fib.c:562 [inline]
 nsim_fib6_rt_insert drivers/net/netdevsim/fib.c:752 [inline]
 nsim_fib6_event drivers/net/netdevsim/fib.c:856 [inline]
 nsim_fib_event drivers/net/netdevsim/fib.c:889 [inline]
 nsim_fib_event_work+0x14f7/0x26d0 drivers/net/netdevsim/fib.c:1493
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
net_ratelimit: 27392 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:95:8d:17:43:da, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:95:8d:17:43:da, vlan:0)
net_ratelimit: 36997 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:95:8d:17:43:da, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:95:8d:17:43:da, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:95:8d:17:43:da, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:95:8d:17:43:da, vlan:0)

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/01/23 01:02 upstream c4b9570cfb63 25e17fd3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: rcu detected stall in dcache_dir_open
2025/01/13 12:44 upstream 5bc55a333a2f 6dbc6a9b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: rcu detected stall in dcache_dir_open
2024/11/19 10:49 net 4262bacb748f 571351cb .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: rcu detected stall in dcache_dir_open
2024/11/02 09:04 net b2183187c5fd f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: rcu detected stall in dcache_dir_open
* Struck through repros no longer work on HEAD.