INFO: rcu detected stall in corrupted

Status: auto-obsoleted due to no activity on 2026/05/24 04:58
Bug presence: origin:lts
[Documentation on labels]
Reported-by: syzbot+6e6401f532693645ef7a@syzkaller.appspotmail.com
First crash: 278d, last: 158d
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2025/10/27 lts (merge base) b0c51e95f54e syz [report] INFO: task hung in rtnl_lock
2025/10/27 upstream (ToT) dcb6fa37fd7b syz Didn't crash
▶ ▼ Similar bugs (24)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 INFO: rcu detected stall in corrupted origin:upstream missing-backport 1 syz, C inconclusive 4051 4d16h 1236d 0/3 upstream: reported C repro on 2023/03/13 04:03
android-414 INFO: rcu detected stall in corrupted 1 syz, C 3 2595d 2668d 0/1 public: reported C repro on 2019/04/10 16:04
android-49 INFO: rcu detected stall in corrupted 1 syz, C 27 2480d 2665d 0/3 public: reported C repro on 2019/04/14 00:00
upstream INFO: rcu detected stall in corrupted (3) kernel 1 syz, C done 1 2684d 2680d 0/29 closed as invalid on 2019/03/30 00:13
linux-4.14 INFO: rcu detected stall in corrupted (2) 1 syz, C error 4 2238d 2399d 0/1 upstream: reported C repro on 2020/01/04 08:54
linux-6.6 INFO: rcu detected stall in corrupted origin:lts-only 1 syz, C done 118 25d 402d 0/2 upstream: reported C repro on 2025/06/23 09:19
upstream INFO: rcu detected stall in corrupted (4) prio:low tipc 1 syz, C done inconclusive 832 3d13h 2155d 0/29 upstream: reported C repro on 2020/09/04 18:49
upstream INFO: rcu detected stall in corrupted net 1 syz 1 2992d 2992d 8/29 fixed on 2018/07/09 18:05
linux-4.14 INFO: rcu detected stall in corrupted 1 syz, C done 3 2513d 2534d 1/1 fixed on 2019/12/05 23:59
linux-4.19 INFO: rcu detected stall in corrupted 1 syz, C error 2 1652d 2360d 0/1 upstream: reported C repro on 2020/02/13 05:06
upstream INFO: rcu detected stall in corrupted (2) kernel 1 syz 1 2924d 2924d 0/29 closed as invalid on 2018/07/29 11:55
linux-5.15 INFO: rcu detected stall in corrupted origin:lts-only 1 syz, C error 150 1h06m 1012d 0/3 upstream: reported C repro on 2023/10/23 02:41
upstream INFO: task hung in inet_rtm_newaddr prio:normal net 1 syz, C done 155 2d01h 581d 0/29 upstream: reported C repro on 2024/12/26 09:45
upstream INFO: task hung in exit_aio (4) fs 1 6 595d 660d 0/29 auto-obsoleted due to no activity on 2025/03/13 05:51
android-5-15 BUG: soft lockup in corrupted origin:upstream 1 syz, C error 33 684d 840d 0/2 upstream: reported C repro on 2024/04/11 09:01
upstream BUG: workqueue lockup (5) prio:low wireguard arm 1 syz, C done 17035 28m 2389d 0/29 upstream: reported C repro on 2020/01/14 22:04
upstream INFO: task hung in nsim_destroy (4) prio:high net 1 syz, C error error 447 11d 790d 0/29 upstream: reported C repro on 2024/05/31 11:16
upstream INFO: task hung in hub_port_init (3) prio:low usb 1 syz, C error 1151 7h14m 1220d 0/29 upstream: reported C repro on 2023/03/28 12:23
upstream INFO: task hung in reg_process_self_managed_hints prio:high wireless 1 syz, C done 1280 16m 1074d 0/29 upstream: reported C repro on 2023/08/21 16:36
linux-4.14 BUG: soft lockup in corrupted 1 syz, C error 12 1460d 1944d 0/1 upstream: reported C repro on 2021/04/04 06:30
upstream INFO: task hung in reg_check_chans_work (7) prio:normal wireless 1 syz, C error 1066 12h51m 675d 0/29 upstream: reported C repro on 2024/09/23 08:39
upstream INFO: task hung in linkwatch_event (4) prio:low net 1 syz, C done 3651 3h51m 734d 0/29 upstream: reported C repro on 2024/07/27 06:21
upstream INFO: task hung in uevent_show (2) kernel 1 syz, C inconclusive 8325 390d 628d 29/29 fixed on 2025/07/17 21:22
linux-4.19 BUG: soft lockup in corrupted 1 syz, C error 3 1489d 1677d 0/1 upstream: reported C repro on 2021/12/26 20:46
▶ ▼ Last patch testing requests (5)
Created Duration User Patch Repo Result
2026/03/29 03:05 20m retest repro android16-6.12 report log
2026/03/29 03:04 13m retest repro android16-6.12 OK log
2026/03/09 06:27 13m retest repro android16-6.12 OK log
2026/01/18 02:59 3m retest repro android16-6.12 error
2025/11/09 02:43 3m retest repro android16-6.12 error

Sample crash report:
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	0-...!: (9999 ticks this GP) idle=52bc/1/0x4000000000000000 softirq=1099/7749 fqs=34
rcu: 	(t=10000 jiffies g=1829 q=7036 ncpus=2)
rcu: rcu_preempt kthread starved for 9921 jiffies! g1829 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:0     pid:18    tgid:18    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5996 [inline]
 __schedule+0x134f/0x1ea0 kernel/sched/core.c:7843
 __schedule_loop kernel/sched/core.c:7924 [inline]
 schedule+0xc5/0x240 kernel/sched/core.c:7939
 schedule_timeout+0x14d/0x3b0 kernel/time/timer.c:2620
 rcu_gp_fqs_loop+0x303/0x1310 kernel/rcu/tree.c:2053
 rcu_gp_kthread+0x9d/0x3a0 kernel/rcu/tree.c:2255
 kthread+0x2c9/0x370 kernel/kthread.c:389
 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 6530 Comm: syz.1.2219 Not tainted syzkaller #0 955f6180463debd82b9f2b9d8786ee899826498b
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:106
Code: cc cc cc cc cc cc cc b8 52 50 5c 25 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 9b 48 00 55 48 89 e5 fb f4 <5d> e9 07 60 02 00 cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90
RSP: 0018:ffffc900047df9d0 EFLAGS: 000002d3
RAX: ffffffff814428e1 RBX: 0000000000000001 RCX: ffff88811bbe3900
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffffc900047df9d0 R08: ffff8881f6f50a94 R09: 1ffff1103edea152
R10: dffffc0000000000 R11: ffffed103edea153 R12: dffffc0000000000
R13: 0000000000000200 R14: 0000000000000001 R15: 1ffff920008fbf3c
FS:  0000555571982500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6952dded58 CR3: 0000000129f46000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 arch_safe_halt arch/x86/include/asm/paravirt.h:112 [inline]
 kvm_wait+0x1c6/0x230 arch/x86/kernel/kvm.c:1081
 pv_wait arch/x86/include/asm/paravirt.h:596 [inline]
 pv_wait_node kernel/locking/qspinlock_paravirt.h:322 [inline]
 __pv_queued_spin_lock_slowpath+0x483/0xe90 kernel/locking/qspinlock.c:473
 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:584 [inline]
 queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline]
 queued_spin_lock include/asm-generic/qspinlock.h:114 [inline]
 do_raw_spin_lock include/linux/spinlock.h:187 [inline]
 __raw_spin_lock include/linux/spinlock_api_smp.h:134 [inline]
 _raw_spin_lock+0x115/0x120 kernel/locking/spinlock.c:154
 <kernel::sync::lock::Lock<rust_binder_main::process::ProcessInner, kernel::sync::lock::spinlock::SpinLockBackend>>::lock rust/kernel/sync/lock.rs:142 [inline]
 <rust_binder_main::process::Process>::flush drivers/android/binder/process.rs:1649 [inline]
 rust_binder_main::rust_binder_flush+0xff/0x3b0 drivers/android/binder/rust_binder_main.rs:497
 filp_flush fs/open.c:1552 [inline]
 filp_close+0xc0/0x160 fs/open.c:1565
 __range_close fs/file.c:710 [inline]
 __close_range+0x529/0x6e0 fs/file.c:767
 __do_sys_close_range fs/open.c:1618 [inline]
 __se_sys_close_range fs/open.c:1615 [inline]
 __x64_sys_close_range+0x7e/0x90 fs/open.c:1615
 x64_sys_call+0x1686/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:437
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fc23939c629
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc67254438 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: ffffffffffffffda RBX: 00007fc239617da0 RCX: 00007fc23939c629
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007fc239617da0 R08: 0000000000000006 R09: 0000000000000000
R10: 00007fc239617cb0 R11: 0000000000000246 R12: 0000000000047d4c
R13: 00007fc239615fac R14: 0000000000047a45 R15: 00007ffc67254540
 </TASK>
CPU: 0 UID: 0 PID: 6532 Comm: syz.1.2219 Not tainted syzkaller #0 955f6180463debd82b9f2b9d8786ee899826498b
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:106
Code: cc cc cc cc cc cc cc b8 52 50 5c 25 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 9b 48 00 55 48 89 e5 fb f4 <5d> e9 07 60 02 00 cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90
RSP: 0018:ffffc90004efc1b0 EFLAGS: 000002d3
RAX: ffffffff814428e1 RBX: 0000000000000003 RCX: ffff88811bbe4c00
RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
RBP: ffffc90004efc1b0 R08: ffff8881115a8088 R09: 1ffff110222b5011
R10: dffffc0000000000 R11: ffffed10222b5012 R12: dffffc0000000000
R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff920009df838
FS:  00007fc2391ff6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc2391ddff8 CR3: 0000000129f46000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 arch_safe_halt arch/x86/include/asm/paravirt.h:112 [inline]
 kvm_wait+0x1c6/0x230 arch/x86/kernel/kvm.c:1081
 pv_wait arch/x86/include/asm/paravirt.h:596 [inline]
 pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:466 [inline]
 __pv_queued_spin_lock_slowpath+0x8e0/0xe90 kernel/locking/qspinlock.c:508
 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:584 [inline]
 queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline]
 queued_spin_lock include/asm-generic/qspinlock.h:114 [inline]
 do_raw_spin_lock include/linux/spinlock.h:187 [inline]
 __raw_spin_lock include/linux/spinlock_api_smp.h:134 [inline]
 _raw_spin_lock+0x115/0x120 kernel/locking/spinlock.c:154
 <kernel::sync::lock::Lock<rust_binder_main::process::ProcessInner, kernel::sync::lock::spinlock::SpinLockBackend>>::lock rust/kernel/sync/lock.rs:142 [inline]
 <rust_binder_main::process::Process>::push_work drivers/android/binder/process.rs:730 [inline]
 <rust_binder_main::thread::Thread>::push_work_if_looper+0x202/0x620 drivers/android/binder/thread.rs:667
 <rust_binder_main::node::NodeDeath>::set_notification_done drivers/android/binder/node.rs:1044 [inline]
 <rust_binder_main::process::Process>::dead_binder_done drivers/android/binder/process.rs:1312 [inline]
 <rust_binder_main::thread::Thread>::write+0x3aa3/0xa690 drivers/android/binder/thread.rs:1505
 <rust_binder_main::thread::Thread>::write_read drivers/android/binder/thread.rs:1608 [inline]
 <rust_binder_main::process::Process>::ioctl_write_read drivers/android/binder/process.rs:1609 [inline]
 <rust_binder_main::process::Process>::ioctl drivers/android/binder/process.rs:1674 [inline]
 rust_binder_main::rust_binder_ioctl+0x1077/0x5da0 drivers/android/binder/rust_binder_main.rs:449
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl+0x135/0x1b0 fs/ioctl.c:893
 __x64_sys_ioctl+0x7f/0xa0 fs/ioctl.c:893
 x64_sys_call+0x1878/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:17
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fc23939c629
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fc2391ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fc239615fa0 RCX: 00007fc23939c629
RDX: 0000200000000040 RSI: 00000000c0306201 RDI: 0000000000000003
RBP: 00007fc239432b39 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fc239616038 R14: 00007fc239615fa0 R15: 00007ffc672542d8
 </TASK>

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/02/23 04:57 android16-6.12 c190014704c7 6e7b5511 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust INFO: rcu detected stall in corrupted
2025/10/26 00:17 android16-6.12 0d6730ee6542 c0460fcd .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust INFO: rcu detected stall in corrupted
* Struck through repros no longer work on HEAD.