syzbot


INFO: rcu detected stall in NF_HOOK

Status: upstream: reported C repro on 2025/11/16 12:13
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+aee517bb6707b646b2b5@syzkaller.appspotmail.com
First crash: 56d, last: 7d06h
Bug presence (1)
Date Name Commit Repro Result
2026/01/04 upstream (ToT) 9ace4753a520 C [report] INFO: rcu detected stall in tc_modify_qdisc
Similar bugs (7)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in NF_HOOK netfilter usb 1 C error 13 555d 570d 0/29 closed as dup on 2024/06/20 17:29
linux-5.15 INFO: rcu detected stall in NF_HOOK 1 1 675d 675d 0/3 auto-obsoleted due to no activity on 2024/06/15 14:02
linux-5.15 INFO: rcu detected stall in NF_HOOK (3) 1 2 355d 374d 0/3 auto-obsoleted due to no activity on 2025/05/01 22:51
linux-6.1 INFO: rcu detected stall in NF_HOOK origin:lts-only 1 syz unreliable 26 61d 586d 0/3 upstream: reported syz repro on 2024/06/04 14:31
upstream INFO: rcu detected stall in NF_HOOK (2) netfilter sctp lsm 1 C inconclusive error 124 3d21h 458d 0/29 upstream: reported C repro on 2024/10/10 12:45
linux-5.15 INFO: rcu detected stall in NF_HOOK (2) 1 1 558d 558d 0/3 auto-obsoleted due to no activity on 2024/10/11 06:09
android-54 BUG: soft lockup in NF_HOOK 1 1 578d 578d 0/2 auto-obsoleted due to no activity on 2024/09/10 19:37

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	0-...0: (0 ticks this GP) idle=c39c/1/0x4000000000000000 softirq=11292/11292 fqs=2100
rcu: 	         hardirqs   softirqs   csw/system
rcu: 	 number:        0          0            0
rcu: 	cputime:        0          0            0   ==> 52550(ms)
rcu: 	(detected by 1, t=10506 jiffies, g=8741, q=158 ncpus=2)
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 3469 Comm: kworker/u4:8 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Workqueue: ipv6_addrconf addrconf_dad_work
RIP: 0010:kasan_mem_to_shadow include/linux/kasan.h:60 [inline]
RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:128 [inline]
RIP: 0010:memory_is_poisoned mm/kasan/generic.c:159 [inline]
RIP: 0010:check_region_inline mm/kasan/generic.c:178 [inline]
RIP: 0010:kasan_check_range+0x52/0x290 mm/kasan/generic.c:187
Code: f9 49 c1 e9 2f 41 81 f9 ff ff 01 00 0f 82 46 02 00 00 49 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 <4d> 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d
RSP: 0018:ffffc90000007400 EFLAGS: 00000082
RAX: ffffffff8a581a01 RBX: 0000000000000018 RCX: ffffffff8a581ad0
RDX: 0000000000000001 RSI: 0000000000000018 RDI: ffff888078238340
RBP: 0000000000000000 R08: ffff888078238357 R09: 000000000001ffff
R10: dffffc0000000000 R11: ffffed100f047068 R12: ffff888078238340
R13: dffffc0000000000 R14: ffff888078238340 R15: 1ffff1100f047068
FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000600 CR3: 0000000077bdf000 CR4: 00000000003506f0
Call Trace:
 <IRQ>
 __asan_memset+0x22/0x40 mm/kasan/shadow.c:84
 rb_link_node include/linux/rbtree.h:63 [inline]
 rb_add_cached include/linux/rbtree.h:182 [inline]
 timerqueue_add+0x180/0x1f0 lib/timerqueue.c:40
 enqueue_hrtimer+0x19b/0x370 kernel/time/hrtimer.c:1116
 __run_hrtimer kernel/time/hrtimer.c:1767 [inline]
 __hrtimer_run_queues+0x637/0xc40 kernel/time/hrtimer.c:1814
 hrtimer_interrupt+0x3c9/0x9c0 kernel/time/hrtimer.c:1876
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1077 [inline]
 __sysvec_apic_timer_interrupt+0xfb/0x3b0 arch/x86/kernel/apic/apic.c:1094
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline]
 sysvec_apic_timer_interrupt+0x51/0xc0 arch/x86/kernel/apic/apic.c:1088
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687
RIP: 0010:skb_dst_set_noref include/linux/skbuff.h:1152 [inline]
RIP: 0010:ip6_route_input+0x70e/0xa50 net/ipv6/route.c:2622
Code: 85 e4 74 07 e8 23 e5 60 f8 eb 1f e8 1c c8 49 f8 41 89 c4 31 ff 89 c6 e8 c0 e8 60 f8 45 85 e4 0f 84 5b 01 00 00 e8 02 e5 60 f8 <4c> 8d a3 81 00 00 00 48 81 c3 84 00 00 00 4d 89 e6 49 c1 ee 03 43
RSP: 0018:ffffc90000007860 EFLAGS: 00000246
RAX: ffffffff8924ab9d RBX: ffff888026392000 RCX: ffff88802d1e9e00
RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc90000007a18 R08: ffffffff8e4a212f R09: 1ffffffff1c94425
R10: dffffc0000000000 R11: fffffbfff1c94426 R12: 0000000000000001
R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88801d311000
 ip6_rcv_finish+0x143/0x230 net/ipv6/ip6_input.c:77
 NF_HOOK+0x303/0x390 include/linux/netfilter.h:304
 __netif_receive_skb_one_core net/core/dev.c:5608 [inline]
 __netif_receive_skb+0xcc/0x290 net/core/dev.c:5722
 process_backlog+0x380/0x6e0 net/core/dev.c:6050
 __napi_poll+0xc0/0x460 net/core/dev.c:6612
 napi_poll net/core/dev.c:6679 [inline]
 net_rx_action+0x5ea/0xbf0 net/core/dev.c:6815
 handle_softirqs+0x280/0x820 kernel/softirq.c:578
 do_softirq+0xed/0x180 kernel/softirq.c:479
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0x178/0x1c0 kernel/softirq.c:406
 local_bh_enable include/linux/bottom_half.h:33 [inline]
 rcu_read_unlock_bh include/linux/rcupdate.h:856 [inline]
 __dev_queue_xmit+0x1449/0x35a0 net/core/dev.c:4452
 neigh_output include/net/neighbour.h:543 [inline]
 ip6_finish_output2+0xe2e/0x1650 net/ipv6/ip6_output.c:141
 dst_output include/net/dst.h:467 [inline]
 NF_HOOK include/linux/netfilter.h:304 [inline]
 ndisc_send_skb+0xbed/0x14b0 net/ipv6/ndisc.c:513
 ndisc_send_ns+0xcc/0x150 net/ipv6/ndisc.c:671
 addrconf_dad_work+0xa25/0x14e0 net/ipv6/addrconf.c:4246
 process_one_work kernel/workqueue.c:2634 [inline]
 process_scheduled_works+0xa45/0x15b0 kernel/workqueue.c:2711
 worker_thread+0xa55/0xfc0 kernel/workqueue.c:2792
 kthread+0x2fa/0x390 kernel/kthread.c:388
 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
 </TASK>

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/01/04 23:21 linux-6.6.y 5fa4793a2d2d d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan INFO: rcu detected stall in NF_HOOK
2025/12/26 04:21 linux-6.6.y 5fa4793a2d2d d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in NF_HOOK
2025/12/17 14:47 linux-6.6.y 5fa4793a2d2d d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in NF_HOOK
2025/12/10 08:59 linux-6.6.y 5fa4793a2d2d d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in NF_HOOK
2025/12/02 20:31 linux-6.6.y 4791134e4aeb d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in NF_HOOK
2025/11/21 04:48 linux-6.6.y 0a805b6ea8cd 2cc4c24a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in NF_HOOK
2025/11/20 20:50 linux-6.6.y 0a805b6ea8cd 2cc4c24a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in NF_HOOK
2025/11/16 12:12 linux-6.6.y 0a805b6ea8cd f7988ea4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan-perf INFO: rcu detected stall in NF_HOOK
* Struck through repros no longer work on HEAD.