INFO: task kworker/u8:14:1497 blocked for more than 146 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:14 state:D stack:19936 pid:1497 tgid:1497 ppid:2 task_flags:0x4208060 flags:0x00080000
Workqueue: netns cleanup_net
Call Trace:
context_switch kernel/sched/core.c:5388 [inline]
__schedule+0x16ec/0x5620 kernel/sched/core.c:7189
__schedule_loop kernel/sched/core.c:7268 [inline]
schedule+0x164/0x360 kernel/sched/core.c:7283
rxrpc_destroy_all_calls+0x44e/0x570 net/rxrpc/call_object.c:754
rxrpc_exit_net+0x6f/0xc0 net/rxrpc/net_ns.c:112
ops_exit_list net/core/net_namespace.c:199 [inline]
ops_undo_list+0x49f/0x940 net/core/net_namespace.c:252
cleanup_net+0x56e/0x800 net/core/net_namespace.c:702
process_one_work kernel/workqueue.c:3314 [inline]
process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3397
worker_thread+0xa53/0xfc0 kernel/workqueue.c:3478
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Showing all locks held in the system:
2 locks held by kworker/1:1/36:
1 lock held by khungtaskd/38:
#0: ffffffff8dfc8000 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
#0: ffffffff8dfc8000 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline]
#0: ffffffff8dfc8000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775
2 locks held by kworker/u8:6/149:
#0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline]
#0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 kernel/workqueue.c:3397
#1: ffffc900039bfc40 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3290 [inline]
#1: ffffc900039bfc40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 kernel/workqueue.c:3397
3 locks held by kworker/u8:14/1497:
#0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline]
#0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 kernel/workqueue.c:3397
#2: ffffffff8f340fa0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 net/core/net_namespace.c:673
2 locks held by udevd/4973:
2 locks held by getty/5359:
#0: ffff888036cae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 drivers/tty/n_tty.c:2211
1 lock held by syz-executor/5611:
#0: ffff88803429c480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:493
1 lock held by syz-executor/5620:
2 locks held by kworker/u8:19/6891:
#0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline]
#0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 kernel/workqueue.c:3397
#1: ffffc90006777c40 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3290 [inline]
#1: ffffc90006777c40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 kernel/workqueue.c:3397
1 lock held by syz-executor/8371:
#0: ffff88804fc06480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:493
2 locks held by udevd/8569:
#0: ffffffff8dfc8000 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
#0: ffffffff8dfc8000 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline]
#0: ffffffff8dfc8000 (rcu_read_lock){....}-{1:3}, at: path_init+0x12d/0x14d0 fs/namei.c:2685
#1: ffff888033cb2ed0 (&lockref->lock){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline]
#1: ffff888033cb2ed0 (&lockref->lock){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 lib/lockref.c:155
2 locks held by syz-executor/9693:
#0: ffff88803ad62480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:493
#1: ffff888062cb5d28 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1074 [inline]
#1: ffff888062cb5d28 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: __start_dirop fs/namei.c:2914 [inline]
#1: ffff888062cb5d28 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: start_dirop fs/namei.c:2938 [inline]
#1: ffff888062cb5d28 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_rmdir+0x1cd/0x520 fs/namei.c:5414
2 locks held by kworker/u8:9/10088:
5 locks held by syz.7.748/10238:
2 locks held by syz.7.748/10239:
#0: ffff888032a30e60 (&fc->uapi_mutex){+.+.}-{4:4}, at: __do_sys_fsconfig fs/fsopen.c:461 [inline]
#0: ffff888032a30e60 (&fc->uapi_mutex){+.+.}-{4:4}, at: __se_sys_fsconfig+0x6a3/0x820 fs/fsopen.c:350
#1: ffffffff8de67b98 (wq_pool_mutex){+.+.}-{4:4}, at: apply_wqattrs_lock kernel/workqueue.c:5317 [inline]
#1: ffffffff8de67b98 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9f8/0x1f40 kernel/workqueue.c:5880
=============================================
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)}
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Call Trace:
dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x135/0x170 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
watchdog+0xfd3/0x1030 kernel/hung_task.c:561
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 10238 Comm: syz.7.748 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)}
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:27 [inline]
RIP: 0010:preempt_count_add+0x34/0x190 kernel/sched/core.c:5851
Code: bf 00 00 00 00 00 fc ff df 48 c7 c0 e0 23 75 99 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 ea 00 00 00 83 3d ee a7 e1 17 00 75 07 <65> 8b 05 35 54 d6 10 65 01 3d 2e 54 d6 10 48 c7 c0 e0 23 75 99 48
RSP: 0018:ffffc900067c7568 EFLAGS: 00000046
RAX: 0000000000000004 RBX: 0000000000000246 RCX: ffffffff99752303
RDX: 0000000000000000 RSI: ffffffff8ba75bc0 RDI: 0000000000000001
RBP: ffffc900067c76a0 R08: ffffffff8f8864f7 R09: 1ffffffff1f10c9e
R10: dffffc0000000000 R11: fffffbfff1f10c9f R12: dffffc0000000000
R13: 1ffff92000cf8ebc R14: ffff88803b45a240 R15: dffffc0000000000
FS: 00007fb18de256c0(0000) GS:ffff888126183000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fcde8d7a42c CR3: 00000000839a4000 CR4: 00000000003526f0
Call Trace:
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:131 [inline]
_raw_spin_lock_irqsave+0x24/0x60 kernel/locking/spinlock.c:166
rt_mutex_slowunlock+0xbf/0x8b0 kernel/locking/rtmutex.c:1426
spin_unlock_irqrestore include/linux/spinlock_rt.h:129 [inline]
__skb_try_recv_datagram+0xa9/0x1b0 net/core/datagram.c:267
__unix_dgram_recvmsg+0x2e3/0xd60 net/unix/af_unix.c:2587
sock_recvmsg_nosec+0x10c/0x140 net/socket.c:1137
____sys_recvmsg+0x3ef/0x4b0 net/socket.c:2916
___sys_recvmsg+0x215/0x590 net/socket.c:2960
do_recvmmsg+0x33a/0x800 net/socket.c:3055
__sys_recvmmsg net/socket.c:3129 [inline]
__do_sys_recvmmsg net/socket.c:3152 [inline]
__se_sys_recvmmsg net/socket.c:3145 [inline]
__x64_sys_recvmmsg+0x198/0x250 net/socket.c:3145
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb18fbece59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fb18de25028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
RAX: ffffffffffffffda RBX: 00007fb18fe66090 RCX: 00007fb18fbece59
RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006
RBP: 00007fb18fc82d6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fb18fe66128 R14: 00007fb18fe66090 R15: 00007ffc4ad2d478