general protection fault in __schedule (3)

Status: upstream: reported on 2026/06/12 18:10
Subsystems: kernel
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+484ec80b3ff2dbdea632@syzkaller.appspotmail.com
Fix commit: sched/fair: Fix newidle vs core-sched
Patched on: [ci-qemu-gce-upstream-auto ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-snapshot-upstream-root ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci-upstream-rust-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu-native-arm64-kvm]
First crash: 55d, last: 4d14h
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
1a736226 assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ general protection fault in __schedule (3) 2026/06/10 06:18 2026/06/10 06:18 2026/06/10 07:16 34dab4be

			
		
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [kernel?] general protection fault in __schedule (3) 2 (3) 2026/06/15 14:32
Similar bugs (11)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in __schedule (5) net 22 syz, C 595 150d 844d 0/29 auto-obsoleted due to no activity on 2026/05/28 17:49
upstream general protection fault in __schedule (2) kernel 2 syz, C done done 1712 2869d 2914d 0/29 closed as dup on 2019/11/22 20:54
upstream general protection fault in __schedule mm 2 syz, C 722 3145d 3147d 0/29 closed as dup on 2017/12/21 00:34
upstream KMSAN: uninit-value in __schedule (4) sctp 17 syz, C error 4 1066d 1062d 0/29 auto-obsoleted due to no activity on 2023/12/10 17:35
linux-4.19 KASAN: use-after-free Read in __schedule 19 1 1980d 1980d 0/1 auto-closed as invalid on 2021/06/29 13:25
linux-6.1 KASAN: slab-out-of-bounds Write in __schedule origin:upstream 21 syz 4 397d 404d 0/3 auto-obsoleted due to no activity on 2025/10/09 02:03
linux-4.19 KASAN: use-after-free Read in __schedule (2) 19 1 1656d 1656d 0/1 auto-closed as invalid on 2022/05/18 22:28
android-54 BUG: unable to handle kernel paging request in __schedule 8 syz, C 12 1984d 2141d 0/2 auto-obsoleted due to no activity on 2023/04/17 21:57
upstream KMSAN: uninit-value in __schedule (3) trace net 7 2 1263d 1267d 0/29 auto-obsoleted due to no activity on 2023/05/17 02:32
upstream KMSAN: uninit-value in __schedule (2) kernel 7 1 1437d 1437d 0/29 auto-obsoleted due to no activity on 2022/11/24 18:35
upstream WARNING: locking bug in __schedule mm 4 1943 495d 785d 0/29 auto-obsoleted due to no activity on 2025/06/02 23:27

Sample crash report:
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
CPU: 0 UID: 0 PID: 2149 Comm: kworker/0:1H Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Workqueue: events_highpri snd_vmidi_output_work
RIP: 0010:task_cpu include/linux/sched.h:2268 [inline]
RIP: 0010:is_task_rq_idle kernel/sched/core.c:6175 [inline]
RIP: 0010:cookie_equals kernel/sched/core.c:6180 [inline]
RIP: 0010:pick_next_task kernel/sched/core.c:6361 [inline]
RIP: 0010:__schedule+0x224f/0x6730 kernel/sched/core.c:7149
Code: 0f 85 5f 38 00 00 4d 8b ac 24 d0 0e 00 00 48 c7 c0 00 86 65 94 48 ba 00 00 00 00 00 fc ff df 49 8d 7d 14 48 89 f9 48 c1 e9 03 <0f> b6 0c 11 48 89 fa 83 e2 07 83 c2 03 38 ca 7c 08 84 c9 0f 85 a2
RSP: 0018:ffffc9000d62f958 EFLAGS: 00010003
RAX: ffffffff94658600 RBX: 0000000000000001 RCX: 0000000000000002
RDX: dffffc0000000000 RSI: 1ffffffff1c8d924 RDI: 0000000000000014
RBP: ffffc9000d62fab0 R08: ffff88802b23c198 R09: fffffbfff224545a
R10: ffffffff9122a2d7 R11: 0000000000000000 R12: ffff88802b33b600
R13: 0000000000000000 R14: ffff888013a10700 R15: ffff88802b23b600
FS:  0000000000000000(0000) GS:ffff888096be3000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000080001000 CR3: 0000000025e17000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 preempt_schedule_common+0x42/0xc0 kernel/sched/core.c:7413
 preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline]
 _raw_spin_unlock_irqrestore+0x61/0x80 kernel/locking/spinlock.c:198
 spin_unlock_irqrestore include/linux/spinlock.h:408 [inline]
 class_spinlock_irqsave_destructor include/linux/spinlock.h:619 [inline]
 snd_rawmidi_transmit+0xf1/0x130 sound/core/rawmidi.c:1486
 snd_vmidi_output_work+0x111/0x390 sound/core/seq/seq_virmidi.c:151
 process_one_work+0xa23/0x1940 kernel/workqueue.c:3322
 process_scheduled_works kernel/workqueue.c:3405 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3486
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:task_cpu include/linux/sched.h:2268 [inline]
RIP: 0010:is_task_rq_idle kernel/sched/core.c:6175 [inline]
RIP: 0010:cookie_equals kernel/sched/core.c:6180 [inline]
RIP: 0010:pick_next_task kernel/sched/core.c:6361 [inline]
RIP: 0010:__schedule+0x224f/0x6730 kernel/sched/core.c:7149
Code: 0f 85 5f 38 00 00 4d 8b ac 24 d0 0e 00 00 48 c7 c0 00 86 65 94 48 ba 00 00 00 00 00 fc ff df 49 8d 7d 14 48 89 f9 48 c1 e9 03 <0f> b6 0c 11 48 89 fa 83 e2 07 83 c2 03 38 ca 7c 08 84 c9 0f 85 a2
RSP: 0018:ffffc9000d62f958 EFLAGS: 00010003
RAX: ffffffff94658600 RBX: 0000000000000001 RCX: 0000000000000002
RDX: dffffc0000000000 RSI: 1ffffffff1c8d924 RDI: 0000000000000014
RBP: ffffc9000d62fab0 R08: ffff88802b23c198 R09: fffffbfff224545a
R10: ffffffff9122a2d7 R11: 0000000000000000 R12: ffff88802b33b600
R13: 0000000000000000 R14: ffff888013a10700 R15: ffff88802b23b600
FS:  0000000000000000(0000) GS:ffff888096be3000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000080001000 CR3: 0000000025e17000 CR4: 0000000000352ef0
----------------
Code disassembly (best guess):
   0:	0f 85 5f 38 00 00    	jne    0x3865
   6:	4d 8b ac 24 d0 0e 00 	mov    0xed0(%r12),%r13
   d:	00
   e:	48 c7 c0 00 86 65 94 	mov    $0xffffffff94658600,%rax
  15:	48 ba 00 00 00 00 00 	movabs $0xdffffc0000000000,%rdx
  1c:	fc ff df
  1f:	49 8d 7d 14          	lea    0x14(%r13),%rdi
  23:	48 89 f9             	mov    %rdi,%rcx
  26:	48 c1 e9 03          	shr    $0x3,%rcx
* 2a:	0f b6 0c 11          	movzbl (%rcx,%rdx,1),%ecx <-- trapping instruction
  2e:	48 89 fa             	mov    %rdi,%rdx
  31:	83 e2 07             	and    $0x7,%edx
  34:	83 c2 03             	add    $0x3,%edx
  37:	38 ca                	cmp    %cl,%dl
  39:	7c 08                	jl     0x43
  3b:	84 c9                	test   %cl,%cl
  3d:	0f                   	.byte 0xf
  3e:	85                   	.byte 0x85
  3f:	a2                   	.byte 0xa2

Crashes (1649):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/29 06:12 upstream 3b5f4b83c4ab 4a865b71 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 general protection fault in __schedule
2026/06/23 20:34 linux-next ec039126b7fa 4b1d8f01 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/23 19:03 linux-next ec039126b7fa 4b1d8f01 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/23 17:40 linux-next ec039126b7fa 4b1d8f01 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/23 14:48 linux-next ec039126b7fa 4b1d8f01 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/23 13:52 linux-next ec039126b7fa 4b1d8f01 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/23 12:49 linux-next ec039126b7fa 4b1d8f01 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/23 12:20 linux-next ec039126b7fa 4b1d8f01 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/23 11:19 linux-next ec039126b7fa 4b1d8f01 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/23 10:16 linux-next ec039126b7fa 4b1d8f01 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/23 09:59 linux-next ec039126b7fa 4b1d8f01 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/23 08:09 linux-next ec039126b7fa 5a630be6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/23 07:06 linux-next ec039126b7fa 5a630be6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/23 05:50 linux-next ec039126b7fa 5a630be6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/23 04:50 linux-next ec039126b7fa 5a630be6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/22 23:55 linux-next ec039126b7fa 5a630be6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/22 21:00 linux-next ec039126b7fa 5a630be6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/22 19:54 linux-next ec039126b7fa 5a630be6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/22 19:29 linux-next ec039126b7fa 5a630be6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/22 18:12 linux-next ec039126b7fa 5a630be6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/22 17:04 linux-next ec039126b7fa 5a630be6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/22 14:22 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/22 14:06 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/22 11:56 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/22 10:55 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/22 03:07 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/22 02:00 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/22 00:22 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/21 23:04 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/21 22:00 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/21 21:43 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/21 20:39 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/21 18:15 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/21 17:00 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/21 16:26 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/21 14:32 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/21 13:26 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/21 12:23 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/21 11:18 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/21 11:02 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/21 09:48 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/21 08:45 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/21 08:06 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/21 05:54 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/21 04:34 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/21 02:05 linux-next ec039126b7fa 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
2026/06/12 22:37 linux-next ec039126b7fa 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root general protection fault in __schedule
2026/06/12 17:06 linux-next ec039126b7fa 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root general protection fault in __schedule
2026/06/10 05:40 linux-next 49e02880ec0a 34dab4be .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root general protection fault in __schedule
2026/06/08 18:01 linux-next a87737435cfa 656e94c6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce general protection fault in __schedule
* Struck through repros no longer work on HEAD.