syzbot

 sign-in | mailing list | source | docs
🐞 Open [128]
🐞 Fixed [69]
🐞 Invalid [273]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

BUG: soft lockup in addrconf_rs_timer (3)

Status: premoderation: reported on 2026/02/04 01:38
Reported-by: syzbot+80172120d4df1234797d@syzkaller.appspotmail.com
First crash: 16d, last: 16d
▶ ▼ Similar bugs (23)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: soft lockup in addrconf_rs_timer (3) net 1 syz 8 876d 940d 0/29 auto-obsoleted due to no activity on 2024/01/05 16:48
upstream BUG: soft lockup in addrconf_rs_timer (4) net 1 1 771d 771d 0/29 closed as invalid on 2024/03/12 13:17
android-6-1 BUG: soft lockup in addrconf_rs_timer 1 1 844d 844d 0/2 auto-obsoleted due to no activity on 2024/01/27 13:54
android-5-10 BUG: soft lockup in addrconf_rs_timer (2) 1 C 265 276d 607d 0/2 auto-obsoleted due to no activity on 2025/07/28 18:01
android-5-10 BUG: soft lockup in addrconf_rs_timer 1 2 935d 953d 0/2 auto-obsoleted due to no activity on 2023/10/29 01:38
linux-6.1 BUG: soft lockup in addrconf_rs_timer 1 C done 26 982d 994d 3/3 fixed on 2023/07/30 15:47
linux-4.19 BUG: soft lockup in addrconf_rs_timer 1 syz error 24 1116d 1799d 0/1 upstream: reported syz repro on 2021/03/19 06:05
linux-4.14 BUG: soft lockup in addrconf_rs_timer 1 C error 133 1154d 2356d 0/1 upstream: reported C repro on 2019/09/08 14:09
linux-5.15 BUG: soft lockup in addrconf_rs_timer 1 C error 36 982d 994d 0/3 auto-obsoleted due to no activity on 2023/08/23 09:06
android-5-15 BUG: soft lockup in addrconf_rs_timer (2) 1 syz 99 420d 663d 0/2 auto-obsoleted due to no activity on 2025/02/14 09:13
android-6-1 BUG: soft lockup in addrconf_rs_timer (3) 1 1 321d 321d 0/2 auto-obsoleted due to no activity on 2025/07/03 20:11
linux-6.6 INFO: rcu detected stall in addrconf_rs_timer origin:lts-only 1 syz error 5 19d 82d 0/2 upstream: reported syz repro on 2025/11/29 19:55
android-54 BUG: soft lockup in addrconf_rs_timer 1 190 596d 651d 0/2 auto-obsoleted due to no activity on 2024/08/22 17:20
upstream BUG: soft lockup in addrconf_rs_timer net 1 18 2160d 2357d 0/29 auto-closed as invalid on 2020/07/20 22:25
android-6-1 BUG: soft lockup in addrconf_rs_timer (2) 1 syz 176 442d 647d 0/2 auto-obsoleted due to no activity on 2025/01/24 01:43
upstream BUG: soft lockup in addrconf_rs_timer (2) net 1 C 51 974d 995d 23/29 fixed on 2023/07/04 09:17
android-6-1 BUG: soft lockup in addrconf_rs_timer (4) 1 7 44d 192d 0/2 premoderation: reported on 2025/08/11 17:36
android-5-15 BUG: soft lockup in addrconf_rs_timer 1 1 942d 942d 0/2 auto-obsoleted due to no activity on 2023/10/21 14:14
upstream INFO: rcu detected stall in addrconf_rs_timer (4) net 1 C error error 121 1572d 2026d 0/29 closed as invalid on 2022/02/08 10:39
linux-6.1 INFO: rcu detected stall in addrconf_rs_timer origin:lts-only 1 C done 95 4d22h 636d 0/3 upstream: reported C repro on 2024/05/24 18:08
linux-5.15 INFO: rcu detected stall in addrconf_rs_timer origin:lts-only 1 C error 89 11d 802d 0/3 upstream: reported C repro on 2023/12/10 10:27
upstream INFO: rcu detected stall in addrconf_rs_timer (6) netfilter virt mm 1 syz error error 668 3h06m 628d 0/29 upstream: reported syz repro on 2024/06/01 13:51
upstream INFO: rcu detected stall in addrconf_rs_timer (5) kvm 1 4 1396d 1396d 0/29 auto-closed as invalid on 2022/06/24 22:41

Sample crash report:
watchdog: BUG: soft lockup - CPU#0 stuck for 121s! [syz.1.41318:12099]
Modules linked in:
CPU: 0 PID: 12099 Comm: syz.1.41318 Tainted: G        W         syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:skb_dst_set include/linux/skbuff.h:1009 [inline]
RIP: 0010:ndisc_send_skb+0x2fa/0xbe0 net/ipv6/ndisc.c:500
Code: f8 e9 8a 05 00 00 49 89 c7 e8 62 81 62 fd 48 8b 44 24 58 42 80 3c 28 00 4c 8b 74 24 60 74 08 4c 89 f7 e8 89 ff 9c fd 4d 89 3e <48> 8b 44 24 18 48 b9 f8 f8 f8 f8 f8 f8 f8 f8 4a 89 4c 28 0e 66 42
RSP: 0018:ffffc90000007a40 EFLAGS: 00000246
RAX: 1ffff1102af6cb4b RBX: ffff888157b65a10 RCX: ffff888130474f00
RDX: 0000000000000102 RSI: 00000000ffffffff RDI: 00000000ffffffff
RBP: ffffc90000007c20 R08: ffffc9000000790f R09: ffffc90000007900
R10: dffffc0000000000 R11: fffff52000000f22 R12: ffff888115a978b8
R13: dffffc0000000000 R14: ffff888157b65a58 R15: ffff88815061aa00
FS:  00007f0a99d4c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000011eec4000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300
DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 ndisc_send_rs+0x6e5/0x960 net/ipv6/ndisc.c:707
 addrconf_rs_timer+0x2cf/0x610 net/ipv6/addrconf.c:3968
 call_timer_fn+0x38/0x290 kernel/time/timer.c:1450
 expire_timers kernel/time/timer.c:1495 [inline]
 __run_timers+0x650/0x9e0 kernel/time/timer.c:1789
 run_timer_softirq+0x6a/0xf0 kernel/time/timer.c:1802
 __do_softirq+0x255/0x563 kernel/softirq.c:309
 asm_call_irq_on_stack+0xf/0x20
 </IRQ>
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
 do_softirq_own_stack+0x60/0x80 arch/x86/kernel/irq_64.c:77
 invoke_softirq kernel/softirq.c:405 [inline]
 __irq_exit_rcu+0x128/0x150 kernel/softirq.c:435
 irq_exit_rcu+0x9/0x10 kernel/softirq.c:447
 sysvec_apic_timer_interrupt+0xbf/0xe0 arch/x86/kernel/apic/apic.c:1106
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:635
RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x17
Code: 41 51 41 52 41 53 e8 6b 08 00 00 41 5b 41 5a 41 59 41 58 5f 5e 5a 59 5d c3 90 55 48 89 e5 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <3c> 01 75 03 5a 5d c3 56 0f b6 f0 e8 bc ff ff ff 5e 5a 5d c3 0f 1f
RSP: 0018:ffffc90000aa76f0 EFLAGS: 00000246
RAX: 0000000000000001 RBX: ffffffff86ad35e0 RCX: dffffc0000000000
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff86ad35e8
RBP: ffffc90000aa76f8 R08: ffffffff86ad35e7 R09: 1ffffffff0d5a6bc
R10: dffffc0000000000 R11: fffffbfff0d5a6bd R12: ffff888130474f00
R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88810d4413c1
 pv_queued_spin_unlock arch/x86/include/asm/paravirt.h:559 [inline]
 queued_spin_unlock arch/x86/include/asm/qspinlock.h:56 [inline]
 do_raw_spin_unlock include/linux/spinlock.h:213 [inline]
 __raw_spin_unlock include/linux/spinlock_api_smp.h:151 [inline]
 _raw_spin_unlock+0x41/0x70 kernel/locking/spinlock.c:183
 spin_unlock include/linux/spinlock.h:395 [inline]
 __mutex_lock_common kernel/locking/mutex.c:1052 [inline]
 __mutex_lock+0x6c7/0xc60 kernel/locking/mutex.c:1117
 __mutex_lock_slowpath+0xe/0x10 kernel/locking/mutex.c:1379
 mutex_lock+0xdb/0xf0 kernel/locking/mutex.c:299
 rtnl_lock+0x15/0x20 net/core/rtnetlink.c:72
 fib6_rules_net_exit+0x12/0x50 net/ipv6/fib6_rules.c:506
 ops_exit_list net/core/net_namespace.c:185 [inline]
 setup_net+0x729/0xb60 net/core/net_namespace.c:368
 copy_net_ns+0x314/0x520 net/core/net_namespace.c:486
 create_new_namespaces+0x3a2/0x650 kernel/nsproxy.c:110
 copy_namespaces+0x1d1/0x220 kernel/nsproxy.c:179
 copy_process+0x11d3/0x3300 kernel/fork.c:2271
 kernel_clone+0x233/0x960 kernel/fork.c:2650
 __do_sys_clone kernel/fork.c:2776 [inline]
 __se_sys_clone kernel/fork.c:2760 [inline]
 __x64_sys_clone+0x198/0x210 kernel/fork.c:2760
 do_syscall_64+0x31/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7f0a9b2efeb9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f0a99d4bfd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f0a9b56afa0 RCX: 00007f0a9b2efeb9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060002080
RBP: 00007f0a9b35dc1f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
R13: 00007f0a9b56b038 R14: 00007f0a9b56afa0 R15: 00007ffd81b9e2b8
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 12210 Comm: syz.9.41345 Tainted: G        W         syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:arch_static_branch arch/x86/include/asm/jump_label.h:25 [inline]
RIP: 0010:static_key_false include/linux/jump_label.h:221 [inline]
RIP: 0010:native_write_msr arch/x86/include/asm/msr.h:162 [inline]
RIP: 0010:wrmsr arch/x86/include/asm/msr.h:273 [inline]
RIP: 0010:native_apic_msr_write+0x39/0x50 arch/x86/include/asm/apic.h:208
Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <e9> 02 00 00 00 eb d6 89 f6 31 d2 e8 07 51 2b 01 5d c3 0f 1f 44 00
RSP: 0018:ffffc9000016f888 EFLAGS: 00000046
RAX: 000000000000008e RBX: 000000000000008e RCX: 0000000000000838
RDX: 0000000000000000 RSI: 000000000000008e RDI: 0000000000000838
RBP: ffffc9000016f888 R08: ffff88810d4413c0 R09: 0000000000000002
R10: 0000000000000003 R11: 0000000000010501 R12: ffff8881f7126ea8
R13: ffff8881f7126e88 R14: ffffffff85bf6998 R15: dffffc0000000000
FS:  00007fcea34136c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000169c4b000 CR4: 00000000003506a0
DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000200000000300
DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 apic_write arch/x86/include/asm/apic.h:396 [inline]
 lapic_next_event+0x5f/0x70 arch/x86/kernel/apic/apic.c:466
 clockevents_program_event+0x1fa/0x8b0 kernel/time/clockevents.c:334
 tick_program_event+0xa3/0x120 kernel/time/tick-oneshot.c:44
 hrtimer_interrupt+0x3f9/0xdc0 kernel/time/hrtimer.c:1726
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline]
 __sysvec_apic_timer_interrupt+0xfa/0x3f0 arch/x86/kernel/apic/apic.c:1112
 run_sysvec_on_irqstack_cond arch/x86/include/asm/irq_stack.h:91 [inline]
 sysvec_apic_timer_interrupt+0xba/0xe0 arch/x86/kernel/apic/apic.c:1106
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:635
RIP: 0010:update_stack_state+0x3c7/0x480 arch/x86/kernel/unwind_frame.c:-1
Code: 80 3c 20 00 74 08 4c 89 ef e8 a5 fc 6f 00 65 48 8b 05 ad 36 d3 7e 49 39 45 00 74 0e 48 8b 7d d0 e8 2e fc ff ff 49 89 c6 eb 1d <4c> 8b 75 d0 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8
RSP: 0018:ffffc9000016fbb8 EFLAGS: 00000246
RAX: ffff88810d4413c0 RBX: ffffc9000016fd08 RCX: ffffc9000016fe01
RDX: ffffc9000016fe30 RSI: 1ffff9200002dfa2 RDI: ffffc9000016fd60
RBP: ffffc9000016fc78 R08: ffffc9000016fdd0 R09: ffffc9000016fdc8
R10: 0000000000000000 R11: fffff5200002dfad R12: dffffc0000000000
R13: ffffc9000016fd30 R14: ffffc9000016fd60 R15: 1ffff9200002dfa9
 unwind_next_frame+0x3d5/0x700 arch/x86/kernel/unwind_frame.c:316
 arch_stack_walk+0x108/0x140 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa6/0xf0 kernel/stacktrace.c:121
 kasan_save_stack mm/kasan/common.c:38 [inline]
 kasan_set_track+0x4a/0x70 mm/kasan/common.c:45
 kasan_set_free_info+0x23/0x40 mm/kasan/generic.c:370
 ____kasan_slab_free+0x125/0x160 mm/kasan/common.c:362
 __kasan_slab_free+0x11/0x20 mm/kasan/common.c:370
 kasan_slab_free include/linux/kasan.h:220 [inline]
 slab_free_hook mm/slub.c:1600 [inline]
 slab_free_freelist_hook+0xc5/0x190 mm/slub.c:1626
 slab_free mm/slub.c:3208 [inline]
 kmem_cache_free+0x100/0x2d0 mm/slub.c:3224
 kfree_skbmem+0x10c/0x180 net/core/skbuff.c:-1
 __kfree_skb net/core/skbuff.c:695 [inline]
 kfree_skb+0xc1/0x2f0 net/core/skbuff.c:713
 ipip6_tunnel_xmit net/ipv6/sit.c:1040 [inline]
 sit_tunnel_xmit+0xd21/0x1db0 net/ipv6/sit.c:1075
 __netdev_start_xmit include/linux/netdevice.h:4864 [inline]
 netdev_start_xmit include/linux/netdevice.h:4878 [inline]
 xmit_one net/core/dev.c:3608 [inline]
 dev_hard_start_xmit+0x244/0x670 net/core/dev.c:3624
 __dev_queue_xmit+0x143e/0x2590 net/core/dev.c:4210
 dev_queue_xmit+0x17/0x20 net/core/dev.c:4243
 neigh_connected_output+0x432/0x460 net/core/neighbour.c:1538
 neigh_output include/net/neighbour.h:517 [inline]
 ip6_finish_output2+0xef7/0x1560 net/ipv6/ip6_output.c:130
 __ip6_finish_output+0x5ff/0x790 net/ipv6/ip6_output.c:201
 ip6_finish_output+0x33/0x1f0 net/ipv6/ip6_output.c:211
 NF_HOOK_COND include/linux/netfilter.h:288 [inline]
 ip6_output+0x1fa/0x420 net/ipv6/ip6_output.c:234
 dst_output include/net/dst.h:451 [inline]
 NF_HOOK include/linux/netfilter.h:299 [inline]
 ndisc_send_skb+0x765/0xbe0 net/ipv6/ndisc.c:513
 ndisc_send_rs+0x6e5/0x960 net/ipv6/ndisc.c:707
 addrconf_rs_timer+0x2cf/0x610 net/ipv6/addrconf.c:3968
 call_timer_fn+0x38/0x290 kernel/time/timer.c:1450
 expire_timers kernel/time/timer.c:1495 [inline]
 __run_timers+0x650/0x9e0 kernel/time/timer.c:1789
 run_timer_softirq+0x6a/0xf0 kernel/time/timer.c:1802
 __do_softirq+0x255/0x563 kernel/softirq.c:309
 asm_call_irq_on_stack+0xf/0x20
 </IRQ>
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
 do_softirq_own_stack+0x60/0x80 arch/x86/kernel/irq_64.c:77
 invoke_softirq kernel/softirq.c:405 [inline]
 __irq_exit_rcu+0x128/0x150 kernel/softirq.c:435
 irq_exit_rcu+0x9/0x10 kernel/softirq.c:447
 sysvec_apic_timer_interrupt+0xbf/0xe0 arch/x86/kernel/apic/apic.c:1106
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:635
RIP: 0010:preempt_schedule_irq+0xa5/0x120 kernel/sched/core.c:5067
Code: 44 24 20 00 02 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 f1 2f c3 fc fb bf 01 00 00 00 <e8> e6 e6 ff ff fa bf 01 00 00 00 e8 8b 31 c3 fc 65 48 8b 1d 83 cd
RSP: 0018:ffffc90000dc7ae0 EFLAGS: 00000246
RAX: 1ffff11021a883be RBX: ffffc90000dc7bb8 RCX: ffffffff86e7f800
RDX: 0000000000400140 RSI: 0000000000000000 RDI: 0000000000000001
RBP: ffffc90000dc7b70 R08: ffffffff86e78048 R09: ffffffff86e78058
R10: ffffffff86e7805c R11: ffffffff86e78043 R12: 0000000000000000
R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920001b8f5c
 irqentry_exit_cond_resched kernel/entry/common.c:365 [inline]
 irqentry_exit+0x56/0x60 kernel/entry/common.c:395
 sysvec_apic_timer_interrupt+0xcb/0xe0 arch/x86/kernel/apic/apic.c:1106
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:635
RIP: 0010:INIT_LIST_HEAD include/linux/list.h:35 [inline]
RIP: 0010:alloc_netdev_mqs+0x46f/0xc80 net/core/dev.c:10563
Code: 00 00 48 8d bb a0 00 00 00 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 3f e2 fe fd 4c 89 b3 a0 00 00 00 4c 8d b3 40 09 00 00 <4c> 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1b e2 fe fd
RSP: 0018:ffffc90000dc7c60 EFLAGS: 00000246
RAX: 1ffff11024166814 RBX: ffff888120b34000 RCX: 0000000000080000
RDX: ffffc9000a546000 RSI: 0000000000000105 RDI: ffff888120b340a0
RBP: ffffc90000dc7cc8 R08: ffff888141561caf R09: 1ffff110282ac395
R10: dffffc0000000000 R11: ffffed10282ac396 R12: dffffc0000000000
R13: ffff888120b344d0 R14: ffff888120b34940 R15: 1ffff11024166843
 tun_set_iff+0x535/0xe00 drivers/net/tun.c:2827
 __tun_chr_ioctl+0x82a/0x1d00 drivers/net/tun.c:3117
 tun_chr_ioctl+0x2a/0x40 drivers/net/tun.c:3395
 vfs_ioctl fs/ioctl.c:48 [inline]
 __do_sys_ioctl fs/ioctl.c:753 [inline]
 __se_sys_ioctl+0x121/0x1a0 fs/ioctl.c:739
 __x64_sys_ioctl+0x7b/0x90 fs/ioctl.c:739
 do_syscall_64+0x31/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7fcea49b6eb9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fcea3413028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fcea4c31fa0 RCX: 00007fcea49b6eb9
RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000007
RBP: 00007fcea4a24c1f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fcea4c32038 R14: 00007fcea4c31fa0 R15: 00007ffdecd08a98
BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 150s!
Showing busy workqueues and worker pools:
workqueue events: flags=0x0
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5
    in-flight: 24844:fqdir_work_fn
    pending: kfree_rcu_monitor, psi_avgs_work, vmstat_shepherd
workqueue events_long: flags=0x0
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
    pending: br_fdb_cleanup, br_fdb_cleanup
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: br_fdb_cleanup
workqueue events_unbound: flags=0x2
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4
    pending: toggle_allocation_gate, linkwatch_event
workqueue events_power_efficient: flags=0x80
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: check_lifetime
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5
    pending: wg_ratelimiter_gc_entries, neigh_periodic_work, neigh_periodic_work, gc_worker
workqueue rcu_gp: flags=0x8
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    in-flight: 1882:wait_rcu_exp_gp
workqueue mm_percpu_wq: flags=0x8
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: vmstat_update
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: vmstat_update
workqueue netns: flags=0xe000a
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=4
    in-flight: 192:cleanup_net
    delayed: cleanup_net
workqueue writeback: flags=0x4a
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
    pending: wb_workfn
workqueue kblockd: flags=0x18
  pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2
    pending: blk_mq_timeout_work
workqueue dm_bufio_cache: flags=0x8
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: work_fn
workqueue ipv6_addrconf: flags=0x40008
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=2
    pending: addrconf_verify_work
workqueue wg-kex-wg0: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
    pending: wg_packet_handshake_send_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-kex-wg1: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
    pending: wg_packet_handshake_send_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-kex-wg0: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-kex-wg1: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-kex-wg2: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-kex-wg0: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-kex-wg1: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-kex-wg0: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-kex-wg1: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=5
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material
workqueue wg-kex-wg2: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-kex-wg0: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-kex-wg1: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-kex-wg0: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-kex-wg1: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-kex-wg0: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-kex-wg1: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-kex-wg2: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-kex-wg0: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-kex-wg1: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-kex-wg2: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-kex-wg0: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-kex-wg1: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
    pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
    pending: wg_packet_encrypt_worker, wg_packet_tx_worker
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
    pending: wg_packet_encrypt_worker, wg_packet_tx_worker
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
    pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-kex-wg0: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
    pending: wg_packet_handshake_send_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
    pending: wg_packet_encrypt_worker, wg_packet_tx_worker
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-kex-wg2: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
    pending: wg_packet_handshake_send_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
    pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-kex-wg0: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
    pending: wg_packet_handshake_send_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
    pending: wg_packet_encrypt_worker, wg_packet_tx_worker
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-kex-wg1: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
    pending: wg_packet_handshake_send_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
    pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
    pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-kex-wg0: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
    pending: wg_packet_handshake_send_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
    pending: wg_packet_encrypt_worker, wg_packet_tx_worker
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-kex-wg1: flags=0x6
  pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
    pending: wg_packet_handshake_send_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
    pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker
  pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=135s workers=26 idle: 24889 24885 24863 24893 24890 24875 24879 8763 24848 8774 8768 24881 24836 16115 24841 24877 24883 24894 8713 8716 24859 8714 24860 24866 24865
pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=159s workers=26 idle: 3369 1887 480 13713 1859 3357 13718 1873 1919 24817 3361 3348 22049 1862 24821 3363 3367 3335 3347 18954 1872 22054 24819 3350 3349
pool 4: cpus=0-1 flags=0x4 nice=0 hung=158s workers=6 idle: 27632 23798 296 1787 26803

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/02/04 01:37 android13-5.10-lts 186f761c519d 42b01fab .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf BUG: soft lockup in addrconf_rs_timer
* Struck through repros no longer work on HEAD.