INFO: task hung in __netlink_dump_start (2)

Status: upstream: reported syz repro on 2024/10/01 03:35
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+e366a09cc586ad2a52e3@syzkaller.appspotmail.com
First crash: 718d, last: 5d20h
Fix bisection: failed (error log, bisect log)
  
Bug presence (2)
Date Name Commit Repro Result
2025/05/29 linux-6.1.y (ToT) da3c5173c55f syz [report] INFO: task hung in rtnl_lock
2025/05/29 upstream (ToT) 90b83efa6701 syz Didn't crash
Similar bugs (11)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in __netlink_dump_start (2) net 1 5 1715d 1796d 0/29 closed as invalid on 2022/02/07 19:19
linux-4.19 INFO: task hung in __netlink_dump_start 1 1 2296d 2296d 0/1 auto-closed as invalid on 2020/10/04 12:25
linux-5.15 INFO: task hung in __netlink_dump_start (2) 1 2 73d 153d 0/3 upstream: reported on 2026/04/18 21:40
upstream INFO: task hung in __netlink_dump_start net 1 2 2164d 2179d 0/29 auto-closed as invalid on 2021/01/13 23:36
linux-5.15 INFO: task hung in __netlink_dump_start 1 20 680d 944d 0/3 auto-obsoleted due to no activity on 2025/02/16 07:38
linux-4.19 INFO: task hung in __netlink_dump_start (2) 1 1 1667d 1667d 0/1 auto-closed as invalid on 2022/06/25 14:03
upstream INFO: task hung in rtnetlink_rcv_msg net 1 syz, C inconclusive inconclusive 1970 802d 2765d 26/29 fixed on 2024/07/09 19:14
upstream INFO: task hung in __netlink_dump_start (3) net 1 3 700d 726d 0/29 auto-obsoleted due to no activity on 2025/01/17 03:09
upstream INFO: task hung in __netlink_dump_start (4) net 1 1 520d 520d 0/29 auto-obsoleted due to no activity on 2025/07/16 06:45
linux-6.1 INFO: task hung in __netlink_dump_start 1 16 819d 964d 0/3 auto-obsoleted due to no activity on 2024/09/29 18:06
upstream INFO: task hung in __netlink_dump_start (5) net 1 3 221d 276d 0/29 auto-obsoleted due to no activity on 2026/05/11 09:51
Fix bisection attempts (2)
Created Duration User Patch Repo Result
2025/11/18 12:44 2h04m fix candidate upstream OK (0) job log
2025/02/17 00:22 18m bisect fix linux-6.1.y error job log

Sample crash report:
INFO: task dhcpcd:3993 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:dhcpcd          state:D stack:0     pid:3993  ppid:1      flags:0x00000804
Call trace:
 __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5246 [inline]
 __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
 schedule+0xc4/0x170 kernel/sched/core.c:6639
 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698
 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679
 __mutex_lock kernel/locking/mutex.c:747 [inline]
 mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799
 __netlink_dump_start+0x104/0x694 net/netlink/af_netlink.c:2310
 netlink_dump_start include/linux/netlink.h:269 [inline]
 rtnetlink_rcv_msg+0xb68/0xcc4 net/core/rtnetlink.c:6122
 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516
 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x588/0x90c net/socket.c:2519
 ___sys_sendmsg net/socket.c:2573 [inline]
 __sys_sendmsg+0x288/0x374 net/socket.c:2602
 __do_sys_sendmsg net/socket.c:2611 [inline]
 __se_sys_sendmsg net/socket.c:2609 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2609
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x200/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
INFO: task kworker/0:20:4480 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:20    state:D stack:0     pid:4480  ppid:2      flags:0x00000008
Workqueue: events switchdev_deferred_process_work
Call trace:
 __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5246 [inline]
 __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
 schedule+0xc4/0x170 kernel/sched/core.c:6639
 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698
 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679
 __mutex_lock kernel/locking/mutex.c:747 [inline]
 mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799
 rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
 switchdev_deferred_process_work+0x14/0x28 net/switchdev/switchdev.c:104
 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
 kthread+0x254/0x2e0 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
INFO: task kworker/u4:7:4553 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:7    state:D stack:0     pid:4553  ppid:2      flags:0x00000008
Workqueue: events_unbound linkwatch_event
Call trace:
 __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5246 [inline]
 __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
 schedule+0xc4/0x170 kernel/sched/core.c:6639
 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698
 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679
 __mutex_lock kernel/locking/mutex.c:747 [inline]
 mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799
 rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
 linkwatch_event+0x14/0x68 net/core/link_watch.c:263
 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
 kthread+0x254/0x2e0 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
INFO: task syz.6.732:7974 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.6.732       state:D stack:0     pid:7974  ppid:5437   flags:0x00000009
Call trace:
 __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5246 [inline]
 __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
 schedule+0xc4/0x170 kernel/sched/core.c:6639
 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698
 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679
 __mutex_lock kernel/locking/mutex.c:747 [inline]
 mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799
 rtnl_lock net/core/rtnetlink.c:74 [inline]
 rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516
 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x588/0x90c net/socket.c:2519
 ___sys_sendmsg net/socket.c:2573 [inline]
 __sys_sendmsg+0x288/0x374 net/socket.c:2602
 __do_sys_sendmsg net/socket.c:2611 [inline]
 __se_sys_sendmsg net/socket.c:2609 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2609
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
INFO: task syz.5.733:7980 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.733       state:D stack:0     pid:7980  ppid:5433   flags:0x00000001
Call trace:
 __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5246 [inline]
 __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
 schedule+0xc4/0x170 kernel/sched/core.c:6639
 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698
 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679
 __mutex_lock kernel/locking/mutex.c:747 [inline]
 mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799
 rtnl_lock net/core/rtnetlink.c:74 [inline]
 rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516
 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x588/0x90c net/socket.c:2519
 ___sys_sendmsg net/socket.c:2573 [inline]
 __sys_sendmsg+0x288/0x374 net/socket.c:2602
 __do_sys_sendmsg net/socket.c:2611 [inline]
 __se_sys_sendmsg net/socket.c:2609 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2609
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
INFO: task syz.8.734:7994 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.8.734       state:D stack:0     pid:7994  ppid:5446   flags:0x00000001
Call trace:
 __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5246 [inline]
 __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
 schedule+0xc4/0x170 kernel/sched/core.c:6639
 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698
 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679
 __mutex_lock kernel/locking/mutex.c:747 [inline]
 mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799
 rtnl_lock net/core/rtnetlink.c:74 [inline]
 rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516
 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x588/0x90c net/socket.c:2519
 ___sys_sendmsg net/socket.c:2573 [inline]
 __sys_sendmsg+0x288/0x374 net/socket.c:2602
 __do_sys_sendmsg net/socket.c:2611 [inline]
 __se_sys_sendmsg net/socket.c:2609 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2609
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
INFO: task syz.7.735:7997 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.7.735       state:D stack:0     pid:7997  ppid:5440   flags:0x00000001
Call trace:
 __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5246 [inline]
 __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
 schedule+0xc4/0x170 kernel/sched/core.c:6639
 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698
 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679
 __mutex_lock kernel/locking/mutex.c:747 [inline]
 mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799
 rtnl_lock net/core/rtnetlink.c:74 [inline]
 rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516
 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x588/0x90c net/socket.c:2519
 ___sys_sendmsg net/socket.c:2573 [inline]
 __sys_sendmsg+0x288/0x374 net/socket.c:2602
 __do_sys_sendmsg net/socket.c:2611 [inline]
 __se_sys_sendmsg net/socket.c:2609 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2609
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
INFO: task syz.9.736:8009 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.9.736       state:D stack:0     pid:8009  ppid:5436   flags:0x00000001
Call trace:
 __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5246 [inline]
 __schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
 schedule+0xc4/0x170 kernel/sched/core.c:6639
 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698
 __mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679
 __mutex_lock kernel/locking/mutex.c:747 [inline]
 mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799
 rtnl_lock net/core/rtnetlink.c:74 [inline]
 rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516
 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x588/0x90c net/socket.c:2519
 ___sys_sendmsg net/socket.c:2573 [inline]
 __sys_sendmsg+0x288/0x374 net/socket.c:2602
 __do_sys_sendmsg net/socket.c:2611 [inline]
 __se_sys_sendmsg net/socket.c:2609 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2609
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585

Showing all locks held in the system:
4 locks held by kworker/u4:0/9:
 #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
 #1: ffff80001cb57c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
 #2: ffff800017a19610 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x144/0xa90 net/core/net_namespace.c:594
 #3: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
3 locks held by kworker/u4:1/11:
1 lock held by rcu_tasks_kthre/12:
 #0: ffff800015577db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517
1 lock held by rcu_tasks_trace/13:
 #0: ffff8000155785d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517
3 locks held by kworker/0:1/14:
 #0: ffff0000d5ee2d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
 #1: ffff80001cba7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
 #2: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
3 locks held by kworker/1:1/24:
 #0: ffff0000d5ee2d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
 #1: ffff80001cc57c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
 #2: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
1 lock held by khungtaskd/28:
 #0: ffff800015577440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349
1 lock held by dhcpcd/3993:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x104/0x694 net/netlink/af_netlink.c:2310
2 locks held by getty/4082:
 #0: ffff0000d6852098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340
 #1: ffff800020aeb2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 drivers/tty/n_tty.c:2198
3 locks held by kworker/0:20/4480:
 #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
 #1: ffff800021687c40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
 #2: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
3 locks held by kworker/u4:7/4553:
 #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
 #1: ffff800021987c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
 #2: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
1 lock held by syz.6.732/7974:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz.5.733/7980:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz.8.734/7994:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz.7.735/7997:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz.9.736/8009:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz-executor/8014:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz-executor/8019:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz-executor/8022:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz-executor/8023:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz-executor/8024:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz-executor/8035:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz-executor/8037:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz-executor/8038:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz-executor/8044:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz-executor/8047:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz-executor/8052:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz-executor/8057:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz-executor/8060:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz-executor/8069:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz-executor/8071:
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff800017a25e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163

=============================================


Crashes (14):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/13 20:06 linux-6.1.y cf82dcca9634 70a60e12 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in __netlink_dump_start
2024/11/22 01:41 linux-6.1.y b67dc5c9ade9 4b25d554 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in __netlink_dump_start
2026/08/15 04:58 linux-6.1.y e4f7d8be268e 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in __netlink_dump_start
2025/06/20 20:27 linux-6.1.y 58485ff1a74f 804b3919 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in __netlink_dump_start
2025/05/27 16:57 linux-6.1.y da3c5173c55f 874a1386 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in __netlink_dump_start
2025/07/30 22:26 linux-6.1.y 3594f306da12 f8f2b4da .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in __netlink_dump_start
2025/07/23 10:52 linux-6.1.y 3369c6df2fae e1dd4f22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in __netlink_dump_start
2025/07/17 22:11 linux-6.1.y f2198ea7eb3e 0d1223f1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in __netlink_dump_start
2025/06/26 11:00 linux-6.1.y 58485ff1a74f 26d77996 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in __netlink_dump_start
2025/05/14 07:28 linux-6.1.y 02b72ccb5f9d 7344edeb .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in __netlink_dump_start
2025/04/10 17:56 linux-6.1.y 420102835862 1ef3ab4d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in __netlink_dump_start
2025/04/06 02:14 linux-6.1.y 8e60a714ba3b 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in __netlink_dump_start
2024/10/23 11:13 linux-6.1.y 7ec6f9fa3d97 15fa2979 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in __netlink_dump_start
2024/10/01 03:34 linux-6.1.y aa4cd140bba5 bbd4e0a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in __netlink_dump_start
* Struck through repros no longer work on HEAD.