syzbot


INFO: rcu detected stall in addrconf_rs_timer

Status: upstream: reported C repro on 2025/11/29 19:55
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+1c0f13d7bc65d06d5fc9@syzkaller.appspotmail.com
First crash: 232d, last: 12d
Bug presence (2)
Date Name Commit Repro Result
2026/04/20 linux-6.6.y (ToT) 9760bf04666d C [report] INFO: rcu detected stall in smp_call_function
2026/04/20 upstream (ToT) c1f49dea2b8f C Didn't crash
Similar bugs (32)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in addrconf_rs_timer (2) net 1 362 2482d 2504d 13/29 fixed on 2019/10/21 12:31
linux-4.14 INFO: rcu detected stall in addrconf_rs_timer 1 C error 220 2146d 2509d 0/1 upstream: reported C repro on 2019/09/06 14:33
upstream INFO: rcu detected stall in addrconf_rs_timer net 1 38 2769d 2864d 0/29 closed as dup on 2019/01/02 16:33
linux-4.19 INFO: rcu detected stall in addrconf_rs_timer 1 45 2496d 2509d 0/1 auto-closed as invalid on 2019/12/17 18:46
linux-4.19 BUG: soft lockup in addrconf_rs_timer 1 syz error 24 1267d 1949d 0/1 upstream: reported syz repro on 2021/03/19 06:05
linux-5.15 BUG: soft lockup in addrconf_rs_timer 1 C error 36 1132d 1144d 0/3 auto-obsoleted due to no activity on 2023/08/23 09:06
upstream INFO: rcu detected stall in addrconf_rs_timer (3) net 1 C inconclusive done 81 2404d 2400d 15/29 fixed on 2020/02/18 14:31
linux-4.19 INFO: rcu detected stall in addrconf_rs_timer (2) 1 5 2147d 2220d 0/1 auto-closed as invalid on 2020/12/31 12:17
upstream INFO: rcu detected stall in addrconf_rs_timer (5) kvm 1 4 1546d 1546d 0/29 auto-closed as invalid on 2022/06/24 22:41
upstream INFO: rcu detected stall in addrconf_rs_timer (4) net 1 C error error 121 1722d 2177d 0/29 closed as invalid on 2022/02/08 10:39
linux-6.1 INFO: rcu detected stall in addrconf_rs_timer origin:lts-only 1 C done 122 1d07h 786d 0/3 upstream: reported C repro on 2024/05/24 18:08
linux-5.15 INFO: rcu detected stall in addrconf_rs_timer origin:lts-only 1 C error 115 7d17h 953d 0/3 upstream: reported C repro on 2023/12/10 10:27
upstream INFO: rcu detected stall in addrconf_rs_timer (6) prio:normal virt mm netfilter 1 syz error error 703 21d 779d 0/29 upstream: reported syz repro on 2024/06/01 13:51
upstream BUG: soft lockup in addrconf_rs_timer (3) net 1 syz 8 1026d 1091d 0/29 auto-obsoleted due to no activity on 2024/01/05 16:48
upstream BUG: soft lockup in addrconf_rs_timer (4) net 1 1 922d 922d 0/29 closed as invalid on 2024/03/12 13:17
android-6-1 BUG: soft lockup in addrconf_rs_timer 1 1 995d 995d 0/2 auto-obsoleted due to no activity on 2024/01/27 13:54
android-5-10 BUG: soft lockup in addrconf_rs_timer (2) 1 C 265 426d 757d 0/2 auto-obsoleted due to no activity on 2025/07/28 18:01
android-6-1 BUG: soft lockup in addrconf_rs_timer (5) origin:lts 1 C 6 66d 70d 0/2 upstream: reported C repro on 2026/05/10 21:46
android-5-10 BUG: soft lockup in addrconf_rs_timer 1 2 1085d 1103d 0/2 auto-obsoleted due to no activity on 2023/10/29 01:38
linux-6.1 BUG: soft lockup in addrconf_rs_timer 1 C done 26 1132d 1144d 3/3 fixed on 2023/07/30 15:47
linux-4.14 BUG: soft lockup in addrconf_rs_timer 1 C error 133 1305d 2507d 0/1 upstream: reported C repro on 2019/09/08 14:09
android-5-10 BUG: soft lockup in addrconf_rs_timer (3) 1 1 166d 166d 0/2 auto-obsoleted due to no activity on 2026/05/05 01:45
android-5-15 BUG: soft lockup in addrconf_rs_timer (3) 1 1 90d 90d 0/2 auto-obsoleted due to no activity on 2026/07/19 17:10
android-5-15 BUG: soft lockup in addrconf_rs_timer (2) 1 syz 99 571d 814d 0/2 auto-obsoleted due to no activity on 2025/02/14 09:13
android-6-1 BUG: soft lockup in addrconf_rs_timer (3) 1 1 471d 471d 0/2 auto-obsoleted due to no activity on 2025/07/03 20:11
android-54 BUG: soft lockup in addrconf_rs_timer 1 190 746d 801d 0/2 auto-obsoleted due to no activity on 2024/08/22 17:20
android-5-10 BUG: soft lockup in addrconf_rs_timer (4) 1 1 19d 19d 0/2 premoderation: reported on 2026/06/30 19:53
android-6-1 BUG: soft lockup in addrconf_rs_timer (2) 1 syz 176 592d 797d 0/2 auto-obsoleted due to no activity on 2025/01/24 01:43
upstream BUG: soft lockup in addrconf_rs_timer (2) net 1 C 51 1125d 1145d 23/29 fixed on 2023/07/04 09:17
android-6-1 BUG: soft lockup in addrconf_rs_timer (4) 1 7 194d 342d 0/2 auto-obsoleted due to no activity on 2026/04/06 21:21
android-5-15 BUG: soft lockup in addrconf_rs_timer 1 1 1093d 1093d 0/2 auto-obsoleted due to no activity on 2023/10/21 14:14
upstream BUG: soft lockup in addrconf_rs_timer net 1 18 2310d 2507d 0/29 auto-closed as invalid on 2020/07/20 22:25
Fix bisection attempts (5)
Created Duration User Patch Repo Result
2026/07/09 20:00 2h44m fix candidate upstream OK (0) job log
2026/04/23 04:40 12m fix candidate upstream error job log
2026/03/23 04:41 1m fix candidate upstream error job log
2026/02/21 04:32 1m fix candidate upstream error job log
2026/01/21 13:20 1m fix candidate upstream error job log

Sample crash report:
rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 13254 jiffies s: 2069 root: 0x2/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 5946 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
RIP: 0010:get_current arch/x86/include/asm/current.h:41 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:244 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x90 kernel/kcov.c:313
Code: 08 03 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 15 30 cf 7c 7e 65 8b 0d 31 cf 7c 7e 81 e1 00 01 ff 00 74
RSP: 0018:ffffc900001ef858 EFLAGS: 00000046
RAX: ffffffff8194356b RBX: 00007f7cbd79de59 RCX: ffff88802df78000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff223cea0
R10: dffffc0000000000 R11: fffffbfff223cea1 R12: ffffc900001efa8c
R13: ffffc900001ef960 R14: 00007f7cbd79de59 R15: 1ffff9200003df35
FS:  000055555b0df500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2cf63fff CR3: 000000002eff0000 CR4: 00000000003506e0
Call Trace:
 <IRQ>
 rcu_read_lock include/linux/rcupdate.h:787 [inline]
 is_bpf_text_address+0x5b/0x2a0 kernel/bpf/core.c:741
 kernel_text_address+0xa0/0xd0 kernel/extable.c:125
 __kernel_text_address+0xd/0x30 kernel/extable.c:79
 unwind_get_return_address+0x5d/0xc0 arch/x86/kernel/unwind_orc.c:369
 perf_callchain_kernel+0x304/0x690 arch/x86/events/core.c:2781
 get_perf_callchain+0x231/0x510 kernel/events/callchain.c:204
 perf_callchain kernel/events/core.c:7734 [inline]
 perf_sample_save_callchain include/linux/perf_event.h:1232 [inline]
 perf_prepare_sample+0x3c7/0x1db0 kernel/events/core.c:7778
 __perf_event_output kernel/events/core.c:7966 [inline]
 perf_event_output_forward+0x187/0x3e0 kernel/events/core.c:7987
 __perf_event_overflow+0x461/0x660 kernel/events/core.c:9712
 perf_swevent_overflow kernel/events/core.c:9795 [inline]
 perf_swevent_event+0x319/0x570 kernel/events/core.c:9846
 perf_tp_event+0x620/0x1550 kernel/events/core.c:10373
 perf_trace_run_bpf_submit+0xf4/0x1c0 kernel/events/core.c:10292
 perf_trace_preemptirq_template+0x269/0x330 include/trace/events/preemptirq.h:14
 trace_irq_enable+0xbb/0xe0 include/trace/events/preemptirq.h:40
 trace_hardirqs_on+0x18/0x40 kernel/trace/trace_preemptirq.c:56
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687
RIP: 0010:netif_skb_features+0xa6a/0x17f0 net/core/dev.c:3623
Code: f9 48 b9 00 00 00 00 00 fc ff df 4d 8b 3f 49 83 c7 28 4c 89 f8 48 c1 e8 03 80 3c 08 00 74 08 4c 89 ff e8 59 c7 5f f9 4d 8b 2f <4d> 85 ed 74 25 e8 dc 52 07 f9 4c 8b 64 24 08 e9 f9 fe ff ff e8 cd
RSP: 0018:ffffc900001f0320 EFLAGS: 00000246
RAX: 1ffffffff16d2ed9 RBX: 0000200000000080 RCX: dffffc0000000000
RDX: ffffffff887f90e5 RSI: ffffffff8e3cdf00 RDI: 000000000000dd86
RBP: ffffc900001f0430 R08: ffff88802df78000 R09: 0000000000000002
R10: 000000000000a888 R11: 0000000000000100 R12: 1ffff11005310416
R13: 0000000000000000 R14: ffff888029882000 R15: ffffffff8b6976c8
 validate_xmit_skb+0x88/0xf30 net/core/dev.c:3719
 __dev_queue_xmit+0x13a9/0x3630 net/core/dev.c:4444
 dev_queue_xmit include/linux/netdevice.h:3113 [inline]
 neigh_hh_output include/net/neighbour.h:527 [inline]
 neigh_output include/net/neighbour.h:541 [inline]
 ip6_finish_output2+0xdf7/0x1620 net/ipv6/ip6_output.c:141
 dst_output include/net/dst.h:467 [inline]
 NF_HOOK include/linux/netfilter.h:304 [inline]
 ndisc_send_skb+0xbb9/0x1480 net/ipv6/ndisc.c:513
 addrconf_rs_timer+0x36b/0x640 net/ipv6/addrconf.c:4029
 call_timer_fn+0x189/0x540 kernel/time/timer.c:1701
 expire_timers kernel/time/timer.c:1752 [inline]
 __run_timers+0x570/0x810 kernel/time/timer.c:2023
 run_timer_softirq+0x67/0xf0 kernel/time/timer.c:2036
 handle_softirqs+0x27d/0x820 kernel/softirq.c:578
 __do_softirq kernel/softirq.c:612 [inline]
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xd3/0x190 kernel/softirq.c:661
 irq_exit_rcu+0x9/0x20 kernel/softirq.c:673
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline]
 sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1088
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687
RIP: 0010:generic_exec_single+0x477/0x4e0 kernel/smp.c:418
Code: 75 11 e8 2c 00 0b 00 48 85 db 75 16 e8 22 00 0b 00 eb 15 e8 1b 00 0b 00 e8 06 b3 0f 09 48 85 db 74 ea e8 0c 00 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08
RSP: 0018:ffffc900033c7a00 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff88802df78000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900033c7ad0 R08: ffffffff911e7617 R09: 1ffffffff223cec2
R10: dffffc0000000000 R11: fffffbfff223cec3 R12: 1ffff92000678f44
R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000678f65
 smp_call_function_single+0x36d/0x5a0 kernel/smp.c:647
 task_function_call kernel/events/core.c:120 [inline]
 perf_install_in_context+0x5bb/0x920 kernel/events/core.c:2951
 __do_sys_perf_event_open kernel/events/core.c:12949 [inline]
 __se_sys_perf_event_open+0x1841/0x1c60 kernel/events/core.c:12601
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f7cbd79de59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd5ba33f38 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
RAX: ffffffffffffffda RBX: 00007f7cbda25fa0 RCX: 00007f7cbd79de59
RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140
RBP: 00007f7cbd833e6f R08: 0000000000000002 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
R13: 00007f7cbda25fac R14: 00007f7cbda25fa0 R15: 00007f7cbda25fa0
 </TASK>

Crashes (26):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/03 01:23 linux-6.6.y d1cfde2d5d15 2b70b115 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2026/06/22 08:26 linux-6.6.y d1cfde2d5d15 43bfcdb0 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2026/06/15 00:38 linux-6.6.y 924b4a879cbb 1d2f3589 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2026/06/05 03:13 linux-6.6.y 924b4a879cbb 197909be .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2026/05/19 04:05 linux-6.6.y eac8889a3a1c 9f74d399 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2026/04/20 07:30 linux-6.6.y 9760bf04666d 303e2802 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2026/04/19 05:04 linux-6.6.y 9760bf04666d 303e2802 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2026/06/12 01:02 linux-6.6.y 924b4a879cbb d93a6ab6 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf BUG: soft lockup in addrconf_rs_timer
2026/05/13 19:47 linux-6.6.y 3b9f64db0496 fec2a7ee .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2025/11/29 19:54 linux-6.6.y 1e89a1be4fe9 d6526ea3 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2026/06/28 09:16 linux-6.6.y d1cfde2d5d15 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2026/06/28 02:06 linux-6.6.y d1cfde2d5d15 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2026/06/23 22:05 linux-6.6.y d1cfde2d5d15 4b1d8f01 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2026/06/15 01:22 linux-6.6.y 924b4a879cbb 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2026/05/11 00:42 linux-6.6.y 3b9f64db0496 29233ece .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2026/04/17 12:23 linux-6.6.y 8cee53b8eaeb de0a551d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2026/03/31 20:43 linux-6.6.y c09fbcd31ae6 aeea1c72 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2026/03/29 22:29 linux-6.6.y c09fbcd31ae6 b5ceaad2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2026/03/19 22:26 linux-6.6.y 4fc00fe35d46 bd6dcb30 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2026/01/31 16:21 linux-6.6.y 2cf6f68313dc afc0c4d4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2025/12/30 07:50 linux-6.6.y 5fa4793a2d2d d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2025/11/29 20:47 linux-6.6.y 1e89a1be4fe9 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2026/07/07 22:57 linux-6.6.y da47cbc25466 76cdc0c0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf BUG: soft lockup in addrconf_rs_timer
2026/06/25 12:06 linux-6.6.y d1cfde2d5d15 cfa969bf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf BUG: soft lockup in addrconf_rs_timer
2026/05/30 18:42 linux-6.6.y 0a40c6fbd105 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf BUG: soft lockup in addrconf_rs_timer
2026/01/06 11:19 linux-6.6.y 5fa4793a2d2d d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf BUG: soft lockup in addrconf_rs_timer
* Struck through repros no longer work on HEAD.