syzbot

 sign-in | mailing list | source | docs
🐞 Open [981] ≡ Subsystems 🐞 Fixed [5235] 🐞 Invalid [12495] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

INFO: rcu detected stall in kauditd_thread

Status: closed as invalid on 2022/02/08 10:00
Subsystems: kernel
[Documentation on labels]
First crash: 877d, last: 822d
▶ ▼ Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in kauditd_thread (3) kernel 2 153d 186d 0/26 auto-obsoleted due to no activity on 2024/02/20 23:02
linux-6.1 INFO: rcu detected stall in kauditd_thread (2) 3 28d 134d 0/3 upstream: reported on 2023/12/11 16:51
upstream INFO: rcu detected stall in kauditd_thread (4) audit bpf C 4 4d01h 27d 0/26 upstream: reported C repro on 2024/03/27 18:39
linux-6.1 INFO: rcu detected stall in kauditd_thread 2 248d 335d 0/3 auto-obsoleted due to no activity on 2023/11/27 06:59
linux-5.15 INFO: rcu detected stall in kauditd_thread 2 123d 140d 0/3 auto-obsoleted due to no activity on 2024/03/31 22:45
android-5-15 BUG: soft lockup in kauditd_thread origin:lts C 2 4d13h 19d 0/2 upstream: reported C repro on 2024/04/04 20:01

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	1-...!: (1 ticks this GP) idle=345/1/0x4000000000000000 softirq=59867/59867 fqs=0 
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P13301/1:b..l
	(detected by 0, t=10502 jiffies, g=74873, q=46)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 26 Comm: kauditd Not tainted 5.16.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:lockdep_enabled kernel/locking/lockdep.c:91 [inline]
RIP: 0010:lock_is_held_type+0x3a/0x140 kernel/locking/lockdep.c:5675
Code: 48 83 ec 08 8b 0d 92 c7 47 04 85 c9 0f 84 d9 00 00 00 65 8b 05 37 dd b5 76 85 c0 0f 85 ca 00 00 00 65 4c 8b 24 25 00 70 02 00 <41> 8b 94 24 5c 0a 00 00 85 d2 0f 85 b1 00 00 00 48 89 fd 41 89 f6
RSP: 0018:ffffc90000fd8c28 EFLAGS: 00000046
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000001
RDX: 1ffffffff1771796 RSI: 00000000ffffffff RDI: ffffffff8bb825a0
RBP: 1ffff920001fb191 R08: 0000000000000000 R09: ffffffff8d943117
R10: fffffbfff1b28622 R11: 0000000000000001 R12: ffff888015bec0c0
R13: 00000000ffffffff R14: 1ffff920001fb1ad R15: ffff888077872340
FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020deb000 CR3: 000000001f5b5000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000080b5b2e0
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 lock_is_held include/linux/lockdep.h:283 [inline]
 rcu_read_lock_sched_held+0x3a/0x70 kernel/rcu/update.c:125
 trace_lock_release include/trace/events/lock.h:58 [inline]
 lock_release+0x522/0x720 kernel/locking/lockdep.c:5650
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:149 [inline]
 _raw_spin_unlock_irqrestore+0x16/0x70 kernel/locking/spinlock.c:194
 debug_object_deactivate lib/debugobjects.c:757 [inline]
 debug_object_deactivate+0x264/0x300 lib/debugobjects.c:723
 debug_hrtimer_deactivate kernel/time/hrtimer.c:425 [inline]
 debug_deactivate kernel/time/hrtimer.c:481 [inline]
 __run_hrtimer kernel/time/hrtimer.c:1653 [inline]
 __hrtimer_run_queues+0x3f8/0xe50 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
 __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:27 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:166 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 kernel/kcov.c:200
Code: 48 89 ef 5d e9 e1 4d 46 00 5d be 03 00 00 00 e9 c6 a9 65 02 66 0f 1f 44 00 00 48 8b be b0 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 <65> 8b 05 99 e6 8a 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b
RSP: 0018:ffffc90001037b30 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff888015bec0c0 RSI: ffffffff815e97bc RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8ffcea07
R10: ffffffff815e97b2 R11: 0000000000000000 R12: ffffffff84d75f30
R13: 0000000000000200 R14: ffffc90001037b90 R15: dffffc0000000000
 console_unlock+0x6c2/0xb70 kernel/printk/printk.c:2715
 vprintk_emit+0x198/0x4f0 kernel/printk/printk.c:2244
 vprintk+0x80/0x90 kernel/printk/printk_safe.c:50
 _printk+0xba/0xed kernel/printk/printk.c:2265
 kauditd_printk_skb kernel/audit.c:538 [inline]
 kauditd_hold_skb.cold+0x41/0x50 kernel/audit.c:571
 kauditd_send_queue kernel/audit.c:734 [inline]
 kauditd_thread+0x859/0x1070 kernel/audit.c:858
 kthread+0x2e9/0x3a0 kernel/kthread.c:377
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
task:syz-executor.2  state:R  running task     stack:29120 pid:13301 ppid:  3642 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4986 [inline]
 __schedule+0xab2/0x4e90 kernel/sched/core.c:6296
 preempt_schedule_notrace+0x5b/0xd0 kernel/sched/core.c:6541
 preempt_schedule_notrace_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:36
 rcu_is_watching+0x7f/0xb0 kernel/rcu/tree.c:1129
 rcu_read_unlock include/linux/rcupdate.h:723 [inline]
 __rhashtable_insert_fast include/linux/rhashtable.h:795 [inline]
 rhashtable_lookup_insert_key include/linux/rhashtable.h:958 [inline]
 __netlink_insert net/netlink/af_netlink.c:525 [inline]
 netlink_insert+0xaad/0x1690 net/netlink/af_netlink.c:584
 __netlink_kernel_create+0x256/0x850 net/netlink/af_netlink.c:2063
 netlink_kernel_create include/linux/netlink.h:62 [inline]
 nl_fib_lookup_init net/ipv4/fib_frontend.c:1389 [inline]
 fib_net_init net/ipv4/fib_frontend.c:1590 [inline]
 fib_net_init+0x217/0x3b0 net/ipv4/fib_frontend.c:1580
 ops_init+0xaf/0x470 net/core/net_namespace.c:140
 setup_net+0x54f/0xbb0 net/core/net_namespace.c:330
 copy_net_ns+0x318/0x760 net/core/net_namespace.c:474
 create_new_namespaces+0x3f6/0xb20 kernel/nsproxy.c:110
 unshare_nsproxy_namespaces+0xc1/0x1f0 kernel/nsproxy.c:226
 ksys_unshare+0x445/0x920 kernel/fork.c:3048
 __do_sys_unshare kernel/fork.c:3119 [inline]
 __se_sys_unshare kernel/fork.c:3117 [inline]
 __x64_sys_unshare+0x2d/0x40 kernel/fork.c:3117
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f5035855059
RSP: 002b:00007f50341ca168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007f5035967f60 RCX: 00007f5035855059
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000400
RBP: 00007f50358af08d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc316866ef R14: 00007f50341ca300 R15: 0000000000022000
 </TASK>
rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g74873 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: 	Possible timer handling issue on cpu=1 timer-softirq=44967
rcu: rcu_preempt kthread starved for 10502 jiffies! g74873 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:I stack:28640 pid:   14 ppid:     2 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4986 [inline]
 __schedule+0xab2/0x4e90 kernel/sched/core.c:6296
 schedule+0xd2/0x260 kernel/sched/core.c:6369
 schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1881
 rcu_gp_fqs_loop+0x186/0x810 kernel/rcu/tree.c:1963
 rcu_gp_kthread+0x1de/0x320 kernel/rcu/tree.c:2136
 kthread+0x2e9/0x3a0 kernel/kthread.c:377
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 26 Comm: kauditd Not tainted 5.16.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:trace_lock_acquire include/trace/events/lock.h:13 [inline]
RIP: 0010:lock_acquire+0xc5/0x510 kernel/locking/lockdep.c:5610
Code: 08 00 00 00 48 89 d0 48 89 54 24 08 48 c1 f8 06 48 8d 3c c5 10 31 94 8d e8 58 d7 61 00 48 8b 54 24 08 48 0f a3 15 db ba 37 0c <0f> 82 64 03 00 00 48 c7 c0 4c 64 94 8d 48 ba 00 00 00 00 00 fc ff
RSP: 0018:ffffc90000fd8c20 EFLAGS: 00000047
RAX: 0000000000000001 RBX: 1ffff920001fb186 RCX: ffffffff815c7628
RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8d943110
RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8d943117
R10: fffffbfff1b28622 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: ffffffff907b39d8 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020deb000 CR3: 000000001f5b5000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000080b5b2e0
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
 _raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:162
 debug_object_activate+0x12e/0x3e0 lib/debugobjects.c:661
 debug_hrtimer_activate kernel/time/hrtimer.c:420 [inline]
 debug_activate kernel/time/hrtimer.c:475 [inline]
 enqueue_hrtimer+0x27/0x3e0 kernel/time/hrtimer.c:1084
 __run_hrtimer kernel/time/hrtimer.c:1702 [inline]
 __hrtimer_run_queues+0xb02/0xe50 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
 __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:27 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:166 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 kernel/kcov.c:200
Code: 48 89 ef 5d e9 e1 4d 46 00 5d be 03 00 00 00 e9 c6 a9 65 02 66 0f 1f 44 00 00 48 8b be b0 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 <65> 8b 05 99 e6 8a 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b
RSP: 0018:ffffc90001037b30 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff888015bec0c0 RSI: ffffffff815e97bc RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8ffcea07
R10: ffffffff815e97b2 R11: 0000000000000000 R12: ffffffff84d75f30
R13: 0000000000000200 R14: ffffc90001037b90 R15: dffffc0000000000
 console_unlock+0x6c2/0xb70 kernel/printk/printk.c:2715
 vprintk_emit+0x198/0x4f0 kernel/printk/printk.c:2244
 vprintk+0x80/0x90 kernel/printk/printk_safe.c:50
 _printk+0xba/0xed kernel/printk/printk.c:2265
 kauditd_printk_skb kernel/audit.c:538 [inline]
 kauditd_hold_skb.cold+0x41/0x50 kernel/audit.c:571
 kauditd_send_queue kernel/audit.c:734 [inline]
 kauditd_thread+0x859/0x1070 kernel/audit.c:858
 kthread+0x2e9/0x3a0 kernel/kthread.c:377
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [kworker/u4:14:6847]
Modules linked in:
irq event stamp: 8893840
hardirqs last  enabled at (8893839): [<ffffffff89600c02>] asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
hardirqs last disabled at (8893840): [<ffffffff894c91bb>] sysvec_apic_timer_interrupt+0xb/0xc0 arch/x86/kernel/apic/apic.c:1097
softirqs last  enabled at (8843992): [<ffffffff81465513>] invoke_softirq kernel/softirq.c:432 [inline]
softirqs last  enabled at (8843992): [<ffffffff81465513>] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:637
softirqs last disabled at (8843907): [<ffffffff81465513>] invoke_softirq kernel/softirq.c:432 [inline]
softirqs last disabled at (8843907): [<ffffffff81465513>] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:637
CPU: 0 PID: 6847 Comm: kworker/u4:14 Not tainted 5.16.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:check_kcov_mode+0x31/0x40 kernel/kcov.c:178
Code: 89 c2 81 e2 00 01 00 00 a9 00 01 ff 00 74 10 31 c0 85 d2 74 15 8b 96 a4 15 00 00 85 d2 74 0b 8b 86 80 15 00 00 39 f8 0f 94 c0 <c3> 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 31 c0 65 8b 15 07 eb
RSP: 0018:ffffc9000bdb79f8 EFLAGS: 00000293
RAX: 0000000000000000 RBX: ffff8880b9d3f3a0 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffff88803172a1c0 RDI: 0000000000000003
RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000001
R10: ffffffff816c0826 R11: 0000000000000000 R12: ffffed10173a7e75
R13: 0000000000000001 R14: ffff8880b9d3f3a8 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000002000b000 CR3: 000000000b88e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000080b5b2e0
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 write_comp_data kernel/kcov.c:221 [inline]
 __sanitizer_cov_trace_const_cmp4+0x1c/0x70 kernel/kcov.c:287
 csd_lock_wait kernel/smp.c:440 [inline]
 smp_call_function_many_cond+0x476/0xc20 kernel/smp.c:969
 on_each_cpu_cond_mask+0x56/0xa0 kernel/smp.c:1135
 on_each_cpu include/linux/smp.h:71 [inline]
 text_poke_sync arch/x86/kernel/alternative.c:1112 [inline]
 text_poke_bp_batch+0x1b1/0x510 arch/x86/kernel/alternative.c:1300
 text_poke_flush arch/x86/kernel/alternative.c:1470 [inline]
 text_poke_flush arch/x86/kernel/alternative.c:1467 [inline]
 text_poke_finish+0x16/0x30 arch/x86/kernel/alternative.c:1477
 arch_jump_label_transform_apply+0x13/0x20 arch/x86/kernel/jump_label.c:146
 jump_label_update+0x1da/0x400 kernel/jump_label.c:830
 static_key_enable_cpuslocked+0x1b1/0x260 kernel/jump_label.c:177
 static_key_enable+0x16/0x20 kernel/jump_label.c:190
 toggle_allocation_gate mm/kfence/core.c:734 [inline]
 toggle_allocation_gate+0x100/0x390 mm/kfence/core.c:726
 process_one_work+0x9ac/0x1650 kernel/workqueue.c:2307
 worker_thread+0x657/0x1110 kernel/workqueue.c:2454
 kthread+0x2e9/0x3a0 kernel/kthread.c:377
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 26 Comm: kauditd Not tainted 5.16.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:rcu_dynticks_curr_cpu_in_eqs kernel/rcu/tree.c:330 [inline]
RIP: 0010:rcu_is_watching+0xe/0xb0 kernel/rcu/tree.c:1128
Code: 90 ad 89 e8 a4 c4 e9 07 65 8a 05 59 c6 a0 7e 0f be c0 c3 66 0f 1f 84 00 00 00 00 00 55 53 65 ff 05 47 89 9f 7e e8 62 c4 e9 07 <48> c7 c3 90 ac 03 00 83 f8 07 89 c5 77 77 48 8d 3c ed a0 88 58 8b
RSP: 0018:ffffc90000fd8bf8 EFLAGS: 00000006
RAX: 0000000000000001 RBX: 1ffff920001fb186 RCX: ffffffff815c7628
RDX: 0000000000000001 RSI: 0000000000010005 RDI: 0000000000000000
RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8d943117
R10: fffffbfff1b28622 R11: 0000000000000000 R12: 0000000000000001
R13: 0000000000000000 R14: ffffffff907b39d8 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020deb000 CR3: 000000001f5b5000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000080b5b2e0
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 rcu_read_lock_held_common kernel/rcu/update.c:108 [inline]
 rcu_read_lock_sched_held+0x1c/0x70 kernel/rcu/update.c:123
 trace_lock_acquire include/trace/events/lock.h:13 [inline]
 lock_acquire+0x442/0x510 kernel/locking/lockdep.c:5610
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
 _raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:162
 debug_object_activate+0x12e/0x3e0 lib/debugobjects.c:661
 debug_hrtimer_activate kernel/time/hrtimer.c:420 [inline]
 debug_activate kernel/time/hrtimer.c:475 [inline]
 enqueue_hrtimer+0x27/0x3e0 kernel/time/hrtimer.c:1084
 __run_hrtimer kernel/time/hrtimer.c:1702 [inline]
 __hrtimer_run_queues+0xb02/0xe50 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
 __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:27 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:166 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 kernel/kcov.c:200
Code: 48 89 ef 5d e9 e1 4d 46 00 5d be 03 00 00 00 e9 c6 a9 65 02 66 0f 1f 44 00 00 48 8b be b0 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 <65> 8b 05 99 e6 8a 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b
RSP: 0018:ffffc90001037b30 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff888015bec0c0 RSI: ffffffff815e97bc RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8ffcea07
R10: ffffffff815e97b2 R11: 0000000000000000 R12: ffffffff84d75f30
R13: 0000000000000200 R14: ffffc90001037b90 R15: dffffc0000000000
 console_unlock+0x6c2/0xb70 kernel/printk/printk.c:2715
 vprintk_emit+0x198/0x4f0 kernel/printk/printk.c:2244
 vprintk+0x80/0x90 kernel/printk/printk_safe.c:50
 _printk+0xba/0xed kernel/printk/printk.c:2265
 kauditd_printk_skb kernel/audit.c:538 [inline]
 kauditd_hold_skb.cold+0x41/0x50 kernel/audit.c:571
 kauditd_send_queue kernel/audit.c:734 [inline]
 kauditd_thread+0x859/0x1070 kernel/audit.c:858
 kthread+0x2e9/0x3a0 kernel/kthread.c:377
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
----------------
Code disassembly (best guess):
   0:	48 83 ec 08          	sub    $0x8,%rsp
   4:	8b 0d 92 c7 47 04    	mov    0x447c792(%rip),%ecx        # 0x447c79c
   a:	85 c9                	test   %ecx,%ecx
   c:	0f 84 d9 00 00 00    	je     0xeb
  12:	65 8b 05 37 dd b5 76 	mov    %gs:0x76b5dd37(%rip),%eax        # 0x76b5dd50
  19:	85 c0                	test   %eax,%eax
  1b:	0f 85 ca 00 00 00    	jne    0xeb
  21:	65 4c 8b 24 25 00 70 	mov    %gs:0x27000,%r12
  28:	02 00
* 2a:	41 8b 94 24 5c 0a 00 	mov    0xa5c(%r12),%edx <-- trapping instruction
  31:	00
  32:	85 d2                	test   %edx,%edx
  34:	0f 85 b1 00 00 00    	jne    0xeb
  3a:	48 89 fd             	mov    %rdi,%rbp
  3d:	41 89 f6             	mov    %esi,%r14d

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/01/22 18:05 upstream 0809edbae347 214351e1 .config console log report info ci-upstream-kasan-gce-selinux-root INFO: rcu detected stall in kauditd_thread
2021/11/29 00:04 upstream d06c942efea4 63eeac02 .config console log report info ci-upstream-kasan-gce-root INFO: rcu detected stall in kauditd_thread
* Struck through repros no longer work on HEAD.