INFO: rcu detected stall in sctp_generate_heartbeat_event

Status: upstream: reported on 2026/11/14 11:24
Reported-by: syzbot+555a0c0285c4cba5fc21@syzkaller.appspotmail.com
First crash: 20h05m, last: 20h05m
▶ ▼ Similar bugs (8)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in sctp_generate_heartbeat_event (3) sctp 1 4 2130d 2255d 0/29 auto-closed as invalid on 2021/04/15 02:19
linux-4.14 INFO: rcu detected stall in sctp_generate_heartbeat_event 1 29 2271d 2514d 0/1 auto-closed as invalid on 2020/12/24 11:25
upstream INFO: rcu detected stall in sctp_generate_heartbeat_event sctp 1 2 3103d 3112d 8/29 fixed on 2018/07/09 18:05
upstream INFO: rcu detected stall in sctp_generate_heartbeat_event (2) net 1 1 2601d 2600d 0/29 auto-closed as invalid on 2019/12/30 14:27
upstream INFO: rcu detected stall in sctp_generate_heartbeat_event (4) sctp 1 1 1806d 1806d 0/29 closed as invalid on 2022/02/08 10:10
linux-4.14 BUG: soft lockup in sctp_generate_heartbeat_event (2) 1 1 2061d 2061d 0/1 auto-closed as invalid on 2021/07/22 12:40
upstream BUG: soft lockup in sctp_generate_heartbeat_event (2) trace 1 1 307d 307d 0/29 closed as invalid on 2026/02/11 22:39
linux-4.19 BUG: soft lockup in sctp_generate_heartbeat_event 1 syz, C error 14 1352d 2018d 0/1 upstream: reported C repro on 2021/05/06 15:10

Sample crash report:
rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2652 jiffies s: 230969 root: 0x1/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 13604 Comm: syz.1.9659 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
RIP: 0010:check_region_inline mm/kasan/generic.c:172 [inline]
RIP: 0010:kasan_check_range+0x16/0x290 mm/kasan/generic.c:189
Code: 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 ac 01 00 00 55 41 57 41 56 41 54 53 49 89 f8 <49> 01 f0 0f 82 0e 02 00 00 49 89 f8 49 c1 e8 2f 41 81 f8 ff ff 01
RSP: 0018:ffffc90000006fb0 EFLAGS: 00000002
RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff8164a3fc
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8f224168
RBP: ffffc900000070f0 R08: ffffffff8f224168 R09: 1ffffffff1e4482d
R10: dffffc0000000000 R11: fffffbfff1e4482e R12: 1ffff92000000e08
R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000e08
FS:  00007f16ce44a6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f16ce46b990 CR3: 0000000056964000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 instrument_atomic_read include/linux/instrumented.h:72 [inline]
 _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
 cpumask_test_cpu include/linux/cpumask.h:444 [inline]
 cpu_online include/linux/cpumask.h:1030 [inline]
 trace_lock_release include/trace/events/lock.h:69 [inline]
 lock_release+0x82c/0x920 kernel/locking/lockdep.c:5801
 rcu_lock_release include/linux/rcupdate.h:355 [inline]
 rcu_read_unlock include/linux/rcupdate.h:824 [inline]
 __perf_event_output kernel/events/core.c:7732 [inline]
 perf_event_output_forward+0x282/0x2f0 kernel/events/core.c:7741
 __perf_event_overflow+0x457/0x630 kernel/events/core.c:9487
 perf_event_overflow kernel/events/core.c:9508 [inline]
 perf_swevent_hrtimer+0x472/0x630 kernel/events/core.c:10958
 __run_hrtimer kernel/time/hrtimer.c:1751 [inline]
 __hrtimer_run_queues+0x4e7/0xc90 kernel/time/hrtimer.c:1815
 hrtimer_interrupt+0x399/0x980 kernel/time/hrtimer.c:1877
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1107 [inline]
 __sysvec_apic_timer_interrupt+0x153/0x5a0 arch/x86/kernel/apic/apic.c:1124
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0x4d/0xc0 arch/x86/kernel/apic/apic.c:1118
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:sctp_transport_lower_cwnd+0x0/0x940 net/sctp/transport.c:662
Code: 8b 4c 89 f1 41 89 d8 45 89 e9 55 ff 74 24 18 ff 74 24 38 e8 a2 4b b7 fa 48 83 c4 18 e9 01 fe ff ff 66 0f 1f 84 00 00 00 00 00 <55> 41 57 41 56 41 55 41 54 53 50 89 f3 49 89 fe 49 bc 00 00 00 00
RSP: 0018:ffffc90000007838 EFLAGS: 00000246
RAX: 1ffff92000000f44 RBX: ffffc90000007a28 RCX: ffff88804e3b8000
RDX: 0000000000000100 RSI: 0000000000000003 RDI: ffff8880411e1800
RBP: ffffc90000007b18 R08: ffff88804e3b8000 R09: 0000000000000042
R10: 0000000000000041 R11: 0000000000000100 R12: ffff8880717ee000
R13: dffffc0000000000 R14: ffffc90000007a20 R15: 0000000000000023
 sctp_cmd_interpreter net/sctp/sm_sideeffect.c:1657 [inline]
 sctp_side_effects net/sctp/sm_sideeffect.c:1206 [inline]
 sctp_do_sm+0x626/0x5690 net/sctp/sm_sideeffect.c:1177
 sctp_generate_heartbeat_event+0x30c/0x430 net/sctp/sm_sideeffect.c:395
 call_timer_fn+0x1ac/0x670 kernel/time/timer.c:1701
 expire_timers kernel/time/timer.c:1752 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:2023
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:2036
 handle_softirqs+0x291/0x910 kernel/softirq.c:596
 __do_softirq kernel/softirq.c:630 [inline]
 invoke_softirq kernel/softirq.c:470 [inline]
 __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:679
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:691
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1118
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:__sanitizer_cov_trace_cmp8+0x0/0x80 kernel/kcov.c:289
Code: 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 04 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 90 <48> 8b 04 24 65 48 8b 0d b4 04 80 7e 65 8b 15 b5 04 80 7e 81 e2 00
RSP: 0018:ffffc9000c04fc30 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffffffff8de02d20 RCX: ffff88804e3b8000
RDX: 0000000000000000 RSI: 0000000000000415 RDI: 000000000000011d
RBP: 0000000000000002 R08: ffffffff8db82d4b R09: 1ffffffff1b705a9
R10: dffffc0000000000 R11: fffffbfff1b705aa R12: 0000000000000415
R13: 0000000000000000 R14: dffffc0000000000 R15: 000000000000011d
 perf_trace_init+0xa9/0x2d0 kernel/trace/trace_event_perf.c:223
 perf_tp_event_init+0x89/0x110 kernel/events/core.c:10110
 perf_try_init_event+0x12b/0x3d0 kernel/events/core.c:11625
 perf_init_event kernel/events/core.c:11689 [inline]
 perf_event_alloc+0xe7b/0x2190 kernel/events/core.c:11980
 __do_sys_perf_event_open kernel/events/core.c:12514 [inline]
 __se_sys_perf_event_open+0x6fc/0x1eb0 kernel/events/core.c:12406
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f16cd5a94d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f16ce44a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
RAX: ffffffffffffffda RBX: 00007f16cd826090 RCX: 00007f16cd5a94d9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140
RBP: 00007f16cd63804e R08: 0000000000000000 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
R13: 00007f16cd826128 R14: 00007f16cd826090 R15: 00007ffeffc21bb8
 </TASK>

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/11/14 11:23 linux-6.1.y c75b0cf0982c 819ebe34 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in sctp_generate_heartbeat_event
* Struck through repros no longer work on HEAD.