INFO: task syz.2.2860:25936 blocked for more than 143 seconds.
Tainted: G U L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.2860 state:D stack:28232 pid:25936 tgid:25931 ppid:13699 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5520 [inline]
__schedule+0x1259/0x6920 kernel/sched/core.c:7270
__schedule_loop kernel/sched/core.c:7347 [inline]
schedule+0xdd/0x2c0 kernel/sched/core.c:7362
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7419
__mutex_lock_common kernel/locking/mutex.c:726 [inline]
__mutex_lock+0xcbf/0x1bc0 kernel/locking/mutex.c:821
nfsd_nl_listener_set_doit+0x1a3/0x1dc0 fs/nfsd/nfsctl.c:2057
genl_family_rcv_msg_doit+0x214/0x300 net/netlink/genetlink.c:1114
genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline]
genl_rcv_msg+0x560/0x800 net/netlink/genetlink.c:1209
netlink_rcv_skb+0x159/0x420 net/netlink/af_netlink.c:2556
genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218
netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
netlink_unicast+0x585/0x850 net/netlink/af_netlink.c:1345
netlink_sendmsg+0x8b0/0xda0 net/netlink/af_netlink.c:1900
sock_sendmsg_nosec net/socket.c:800 [inline]
__sock_sendmsg net/socket.c:815 [inline]
____sys_sendmsg+0xa4d/0xbe0 net/socket.c:2713
___sys_sendmsg+0x190/0x1e0 net/socket.c:2767
__sys_sendmsg+0x160/0x210 net/socket.c:2799
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x121/0x770 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f992eb9e0d9
RSP: 002b:00007f992f9c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f992ee26180 RCX: 00007f992eb9e0d9
RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003
RBP: 00007f992ec35024 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f992ee26218 R14: 00007f992ee26180 R15: 00007fff8de2bf08
Showing all locks held in the system:
locks held by kworker/u8:0/12: 3, last CPU#1:
#0: ffff88801d2be140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 kernel/workqueue.c:3362
#1: ffffc90000117d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 kernel/workqueue.c:3363
#2: ffffffff90c9ca48 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 net/core/net_namespace.c:677
locks held by khungtaskd/30: 1, last CPU#0:
#0: ffffffff8ede9b40 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
#0: ffffffff8ede9b40 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline]
#0: ffffffff8ede9b40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6793
locks held by dhcpcd/5275: 1, on CPU#0:
#0: ffffffff90cb5540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
#0: ffffffff90cb5540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:366 [inline]
#0: ffffffff90cb5540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 net/core/rtnetlink.c:4214
locks held by getty/5369: 2, on CPU#1:
#0: ffff8880373a50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 drivers/tty/n_tty.c:2211
locks held by kworker/0:3/14233: 3, on CPU#0:
#0: ffff88801c04f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 kernel/workqueue.c:3362
#1: ffffc90005477d08 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 kernel/workqueue.c:3363
#2: ffffffff8edf54b8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 kernel/rcu/tree.c:3857
locks held by kworker/u8:8/14255: 3, on CPU#1:
#0: ffff88801c08c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 kernel/workqueue.c:3362
#1: ffffc90005537d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 kernel/workqueue.c:3363
#2: ffffffff90cb5540 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 net/core/link_watch.c:313
locks held by syz-executor/20614: 1, last CPU#1:
#0: ffff8880b853baa0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 kernel/sched/core.c:677
locks held by syz-executor/20627: 2, on CPU#0:
#0: ffff88804c554ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 net/bluetooth/hci_core.c:500
#1: ffffffff8edf55e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 kernel/rcu/tree_exp.h:343
locks held by syz.2.2860/25934: 2, on CPU#0:
#0: ffffffff90d648e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217
#1: ffffffff8f27ffe0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x1a3/0x1dc0 fs/nfsd/nfsctl.c:2057
locks held by syz.2.2860/25936: 2, on CPU#1:
#0: ffffffff90d648e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217
#1: ffffffff8f27ffe0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x1a3/0x1dc0 fs/nfsd/nfsctl.c:2057
locks held by kworker/1:2/26401: 2, last CPU#1:
#0: ffff888036880d40 ((wq_completion)wg-crypt-wg0#15){+.+.}-{0:0}, at: raw_spin_rq_lock_nested+0x2c/0x140 kernel/sched/core.c:677
#1: ffff8880b8524568 (psi_seq){-.-.}-{0:0}, at: psi_sched_switch kernel/sched/stats.h:218 [inline]
#1: ffff8880b8524568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e0c/0x6920 kernel/sched/core.c:7264
locks held by syz-executor/28061: 2, on CPU#1:
#0: ffffffff900370e8 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:187 [inline]
#0: ffffffff900370e8 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:294 [inline]
#0: ffffffff900370e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 net/core/rtnetlink.c:599
#1: ffffffff90cb5540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
#1: ffffffff90cb5540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:366 [inline]
#1: ffffffff90cb5540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 net/core/rtnetlink.c:4214
locks held by syz.4.3140/28116: 2, on CPU#1:
#0: ffffffff90c9ca48 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 net/core/net_namespace.c:579
#1: ffffffff90cb5540 (rtnl_mutex){+.+.}-{4:4}, at: cangw_pernet_exit_batch+0x15/0xa0 net/can/gw.c:1294
locks held by syz.4.3140/28118: 2, on CPU#0:
#0: ffffffff90c9ca48 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 net/core/net_namespace.c:579
#1: ffffffff90cb5540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline]
#1: ffffffff90cb5540 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_notifier_net+0x1c/0xf0 net/core/dev.c:2157
locks held by syz.4.3140/28127: 2, on CPU#1:
#0: ffffffff90c9ca48 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 net/core/net_namespace.c:579
#1: ffffffff90cb5540 (rtnl_mutex){+.+.}-{4:4}, at: cangw_pernet_exit_batch+0x15/0xa0 net/can/gw.c:1294
locks held by syz.0.3141/28135: 3, on CPU#0:
#0: ffffffff90c9ca48 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 net/core/net_namespace.c:579
#1: ffffffff90cb5540 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x90/0xbd0 net/core/dev.c:13261
#2: ffffffff8edf55e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 kernel/rcu/tree_exp.h:343
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full)
Tainted: [U]=USER, [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:123
nmi_trigger_cpumask_backtrace+0x21f/0x2a0 lib/nmi_backtrace.c:66
trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x141/0x190 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
watchdog+0xcb1/0x1030 kernel/hung_task.c:561
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 3 Comm: pool_workqueue_ Tainted: G U L syzkaller #0 PREEMPT(full)
Tainted: [U]=USER, [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:remove_class_from_lock_chain kernel/locking/lockdep.c:6216 [inline]
RIP: 0010:remove_class_from_lock_chains kernel/locking/lockdep.c:6254 [inline]
RIP: 0010:zap_class+0x145/0x330 kernel/locking/lockdep.c:6299
Code: ed 8d 4c 05 00 39 c1 7e 39 89 c2 41 89 c0 4c 8d 8c 12 60 2e a5 96 49 63 f0 48 81 fe 00 00 50 00 0f 83 d3 00 00 00 41 0f b7 11 <81> e2 ff 1f 00 00 4c 39 ea 74 3e 41 83 c0 01 49 83 c1 02 44 39 c1
RSP: 0018:ffffc90000087c78 EFLAGS: 00000087
RAX: 00000000000295db RBX: ffffffff949a65a0 RCX: 00000000000295e0
RDX: 00000000000007c9 RSI: 00000000000295db RDI: 000000000004aea5
RBP: 0000000000000005 R08: 00000000000295db R09: ffffffff96aa5a16
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff97ec5b88
R13: 000000000000087c R14: ffffffff980c2ec8 R15: dead000000000122
FS: 0000000000000000(0000) GS:ffff888123ca9000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007feb02acc000 CR3: 0000000037e62000 CR4: 00000000003526f0
Call Trace:
__lockdep_free_key_range+0x34/0x80 kernel/locking/lockdep.c:6425
lockdep_unregister_key+0x10e/0x2b0 kernel/locking/lockdep.c:6627
wq_unregister_lockdep kernel/workqueue.c:5014 [inline]
pwq_release_workfn+0x7ba/0xbb0 kernel/workqueue.c:5310
kthread_worker_fn+0x300/0xbe0 kernel/kthread.c:1025
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245