INFO: rcu detected stall in nf_flow_offload_work_gc

Status: auto-obsoleted due to no activity on 2026/09/11 05:31
Subsystems: netfilter
Labels: prio:high
[Documentation on labels]
First crash: 102d, last: 102d
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
532026d6 assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ✅ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ INFO: rcu detected stall in nf_flow_offload_work_gc 2026/06/15 00:03 2026/06/15 00:03 2026/06/15 01:06 4f06757f

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5799/1:b..l
rcu: 	(detected by 1, t=10506 jiffies, g=66605, q=216 ncpus=2)
task:kworker/0:6     state:R  running task     stack:22376 pid:5799  tgid:5799  ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: events_power_efficient nf_flow_offload_work_gc
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5388 [inline]
 __schedule+0x1295/0x67a0 kernel/sched/core.c:7189
 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7513
 irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x205/0x970 kernel/entry/common.c:164
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:__rhashtable_walk_find_next+0x115/0xaf0 lib/rhashtable.c:844
Code: cf 09 00 00 48 8b 14 24 45 8b 6f 30 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 9b 09 00 00 <48> 8b 04 24 44 89 ee 44 8b 20 44 89 e7 e8 d9 cb 0f fd 45 39 e5 0f
RSP: 0018:ffffc9000460fa88 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffffc9000460fbb0 RCX: ffffffff84f922f6
RDX: 1ffff1100ace4e00 RSI: ffffffff84f8df35 RDI: ffff8880567240a8
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff888056724070
R13: 0000000000000000 R14: 0000000000000000 R15: ffffc9000460fb88
 rhashtable_walk_next+0x1b1/0x540 lib/rhashtable.c:931
 nf_flow_table_iterate net/netfilter/nf_flow_table_core.c:435 [inline]
 nf_flow_table_gc_run net/netfilter/nf_flow_table_core.c:593 [inline]
 nf_flow_offload_work_gc+0xb0/0x1e0 net/netfilter/nf_flow_table_core.c:601
 process_one_work+0xa0e/0x1980 kernel/workqueue.c:3314
 process_scheduled_works kernel/workqueue.c:3397 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3478
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: rcu_preempt kthread starved for 10480 jiffies! g66605 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27992 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5388 [inline]
 __schedule+0x1295/0x67a0 kernel/sched/core.c:7189
 __schedule_loop kernel/sched/core.c:7268 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:7283
 schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x1a9/0x900 kernel/rcu/tree.c:2095
 rcu_gp_kthread+0x179/0x230 kernel/rcu/tree.c:2297
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:63
Code: 96 92 02 e9 43 44 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 f2 21 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
RSP: 0018:ffffc90000197df0 EFLAGS: 00000242
RAX: 000000000356a067 RBX: ffff88801e2fa540 RCX: ffffffff8b89a225
RDX: 0000000000000000 RSI: ffffffff8df0fdfe RDI: ffffffff8c1c4780
RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5
R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001
R13: ffffed1003c5f4a8 R14: 0000000000000001 R15: ffffffff90d71950
FS:  0000000000000000(0000) GS:ffff888124487000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f046d8997ed CR3: 0000000058048000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline]
 default_idle+0x9/0x10 arch/x86/kernel/process.c:767
 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122
 cpuidle_idle_call kernel/sched/idle.c:199 [inline]
 do_idle+0x464/0x590 kernel/sched/idle.c:352
 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:451
 start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312
 common_startup_64+0x13e/0x148
 </TASK>

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/13 05:23 upstream 1dadb7e7eb5a 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: rcu detected stall in nf_flow_offload_work_gc
* Struck through repros no longer work on HEAD.