syzbot


INFO: rcu detected stall in corrupted

Status: upstream: reported syz repro on 2025/06/23 09:19
Reported-by: syzbot+3933334836e4dc9a4f6e@syzkaller.appspotmail.com
First crash: 8h19m, last: 8h19m
Similar bugs (20)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 INFO: rcu detected stall in corrupted origin:upstream missing-backport C inconclusive 3908 1d13h 833d 0/3 upstream: reported C repro on 2023/03/13 04:03
android-414 INFO: rcu detected stall in corrupted C 3 2193d 2266d 0/1 public: reported C repro on 2019/04/10 16:04
android-49 INFO: rcu detected stall in corrupted C 27 2078d 2262d 0/3 public: reported C repro on 2019/04/14 00:00
upstream INFO: rcu detected stall in corrupted (3) kernel C done 1 2281d 2277d 0/29 closed as invalid on 2019/03/30 00:13
linux-4.14 INFO: rcu detected stall in corrupted (2) C error 4 1836d 1997d 0/1 upstream: reported C repro on 2020/01/04 08:54
upstream INFO: rcu detected stall in corrupted (4) tipc C done inconclusive 666 7d11h 1752d 0/29 upstream: reported C repro on 2020/09/04 18:49
upstream INFO: rcu detected stall in corrupted net syz 1 2590d 2589d 8/29 fixed on 2018/07/09 18:05
linux-4.14 INFO: rcu detected stall in corrupted C done 3 2110d 2132d 1/1 fixed on 2019/12/05 23:59
linux-4.19 INFO: rcu detected stall in corrupted C error 2 1250d 1957d 0/1 upstream: reported C repro on 2020/02/13 05:06
upstream INFO: rcu detected stall in corrupted (2) kernel syz 1 2521d 2521d 0/29 closed as invalid on 2018/07/29 11:55
linux-5.15 INFO: rcu detected stall in corrupted origin:lts-only C error 23 4d13h 609d 0/3 upstream: reported C repro on 2023/10/23 02:41
upstream INFO: task hung in exit_aio (4) fs 6 192d 258d 0/29 auto-obsoleted due to no activity on 2025/03/13 05:51
android-5-15 BUG: soft lockup in corrupted origin:upstream C error 33 281d 438d 0/2 upstream: reported C repro on 2024/04/11 09:01
upstream BUG: workqueue lockup (5) wireguard arm C done 12714 14m 1986d 0/29 upstream: reported C repro on 2020/01/14 22:04
upstream INFO: task hung in nsim_destroy (4) net 427 33d 388d 0/29 upstream: reported on 2024/05/31 11:16
upstream INFO: task hung in reg_process_self_managed_hints wireless C done 650 2h57m 672d 0/29 upstream: reported C repro on 2023/08/21 16:36
linux-4.14 BUG: soft lockup in corrupted C error 12 1058d 1541d 0/1 upstream: reported C repro on 2021/04/04 06:30
upstream INFO: task hung in reg_check_chans_work (7) wireless C error 559 19h36m 273d 0/29 upstream: reported C repro on 2024/09/23 08:39
upstream INFO: task hung in uevent_show (2) kernel C inconclusive 8325 3d13h 226d 0/29 upstream: reported C repro on 2024/11/09 14:37
linux-4.19 BUG: soft lockup in corrupted C error 3 1086d 1274d 0/1 upstream: reported C repro on 2021/12/26 20:46

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	(detected by 0, t=10502 jiffies, g=12561, q=788 ncpus=2)
rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294960726-4294950224), jiffies_till_next_fqs=1, root ->qsmask 0x0
rcu: rcu_preempt kthread starved for 10502 jiffies! g12561 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:26568 pid:17    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5381 [inline]
 __schedule+0x14e2/0x4580 kernel/sched/core.c:6700
 schedule+0xbd/0x170 kernel/sched/core.c:6774
 schedule_timeout+0x160/0x280 kernel/time/timer.c:2167
 rcu_gp_fqs_loop+0x302/0x1560 kernel/rcu/tree.c:1667
 rcu_gp_kthread+0x99/0x380 kernel/rcu/tree.c:1866
 kthread+0x2fa/0x390 kernel/kthread.c:388
 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 PID: 6041 Comm: syz.3.19 Not tainted 6.6.94-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:arch_static_branch arch/x86/include/asm/jump_label.h:27 [inline]
RIP: 0010:static_key_false include/linux/jump_label.h:207 [inline]
RIP: 0010:native_write_msr arch/x86/include/asm/msr.h:147 [inline]
RIP: 0010:wrmsr arch/x86/include/asm/msr.h:254 [inline]
RIP: 0010:native_apic_msr_write+0x39/0x50 arch/x86/include/asm/apic.h:196
Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 f3 0f 1e fa 89 f6 31 d2 e9 37 7c 19 03 0f 1f 80 00 00 00
RSP: 0018:ffffc9000387fcd8 EFLAGS: 00000246
RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f
RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f
RBP: 0000000000000000 R08: ffffc9000387fc47 R09: 1ffff9200070ff88
R10: dffffc0000000000 R11: fffff5200070ff89 R12: ffff8880b8e35201
R13: dffffc0000000000 R14: ffff8880b8e35290 R15: 0000000000000020
FS:  00007fbd80fff6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000077489000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __apic_send_IPI_self arch/x86/include/asm/apic.h:454 [inline]
 arch_irq_work_raise+0x68/0x70 arch/x86/kernel/irq_work.c:31
 irq_work_queue+0x99/0x140 kernel/irq_work.c:124
 bpf_send_signal_common+0x2b6/0x420 kernel/trace/bpf_trace.c:875
 ____bpf_send_signal kernel/trace/bpf_trace.c:884 [inline]
 bpf_send_signal+0x19/0x20 kernel/trace/bpf_trace.c:882
 bpf_prog_b89875bed3bf067a+0x43/0x47
 bpf_dispatcher_nop_func include/linux/bpf.h:1213 [inline]
 __bpf_prog_run include/linux/filter.h:612 [inline]
 bpf_prog_run include/linux/filter.h:619 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:2322 [inline]
 bpf_trace_run2+0x1d1/0x3c0 kernel/trace/bpf_trace.c:2361
 trace_sys_enter+0x69/0x80 include/trace/events/syscalls.h:18
 syscall_trace_enter+0xf0/0x150 kernel/entry/common.c:81
 do_syscall_64+0x28/0xb0 arch/x86/entry/common.c:77
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fbd8112ab19
Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
RSP: 002b:00007fbd80ffeb40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f
RAX: ffffffffffffffda RBX: 00007fbd813b5fa8 RCX: 00007fbd8112ab19
RDX: 00007fbd80ffeb40 RSI: 00007fbd80ffec70 RDI: 0000000000000011
RBP: 00007fbd813b5fa0 R08: 0000000000745d1e R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000246 R12: 00007fbd813b5fac
R13: 0000000000000000 R14: 00007fff92cd5b10 R15: 00007fff92cd5bf8
 </TASK>

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/23 09:19 linux-6.6.y 6282921b6825 d6cdfb8a .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan INFO: rcu detected stall in corrupted
* Struck through repros no longer work on HEAD.