INFO: task syz.1.1463:17815 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.1463 state:D stack:27544 pid:17815 tgid:17812 ppid:13768 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5533 [inline]
__schedule+0x1259/0x6920 kernel/sched/core.c:7284
__schedule_loop kernel/sched/core.c:7361 [inline]
schedule+0xdd/0x2c0 kernel/sched/core.c:7376
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433
__mutex_lock_common kernel/locking/mutex.c:726 [inline]
__mutex_lock+0xccb/0x1bd0 kernel/locking/mutex.c:821
nfsd_nl_listener_set_doit+0x1a3/0x1dc0 fs/nfsd/nfsctl.c:2057
genl_family_rcv_msg_doit+0x214/0x300 net/netlink/genetlink.c:1114
genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline]
genl_rcv_msg+0x560/0x800 net/netlink/genetlink.c:1209
netlink_rcv_skb+0x159/0x420 net/netlink/af_netlink.c:2575
genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218
netlink_unicast_kernel net/netlink/af_netlink.c:1338 [inline]
netlink_unicast+0x585/0x850 net/netlink/af_netlink.c:1364
netlink_sendmsg+0x8b0/0xda0 net/netlink/af_netlink.c:1919
sock_sendmsg_nosec net/socket.c:800 [inline]
__sock_sendmsg net/socket.c:815 [inline]
____sys_sendmsg+0xa4d/0xbe0 net/socket.c:2713
___sys_sendmsg+0x190/0x1e0 net/socket.c:2767
__sys_sendmsg+0x160/0x210 net/socket.c:2799
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x121/0x770 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd90a79e199
RSP: 002b:00007fd90b64d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fd90aa26090 RCX: 00007fd90a79e199
RDX: 0000000020008050 RSI: 000020
RDX: 0000000020008050 RSI: 00002000000050c0 RDI: 0000000000000003
RBP: 00007fd90a8358e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fd90aa26128 R14: 00007fd90aa26090 R15: 00007ffc9b9c9058
INFO: task syz.1.1463:17820 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.1463 state:D stack:27976 pid:17820 tgid:17812 ppid:13768 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5533 [inline]
__schedule+0x1259/0x6920 kernel/sched/core.c:7284
__schedule_loop kernel/sched/core.c:7361 [inline]
schedule+0xdd/0x2c0 kernel/sched/core.c:7376
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7433
__mutex_lock_common kernel/locking/mutex.c:726 [inline]
__mutex_lock+0xccb/0x1bd0 kernel/locking/mutex.c:821
nfsd_nl_listener_set_doit+0x1a3/0x1dc0 fs/nfsd/nfsctl.c:2057
genl_family_rcv_msg_doit+0x214/0x300 net/netlink/genetlink.c:1114
genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline]
genl_rcv_msg+0x560/0x800 net/netlink/genetlink.c:1209
netlink_rcv_skb+0x159/0x420 net/netlink/af_netlink.c:2575
genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218
netlink_unicast_kernel net/netlink/af_netlink.c:1338 [inline]
netlink_unicast+0x585/0x850 net/netlink/af_netlink.c:1364
netlink_sendmsg+0x8b0/0xda0 net/netlink/af_netlink.c:1919
sock_sendmsg_nosec net/socket.c:800 [inline]
__sock_sendmsg net/socket.c:815 [inline]
____sys_sendmsg+0xa4d/0xbe0 net/socket.c:2713
___sys_sendmsg+0x190/0x1e0 net/socket.c:2767
__sys_sendmsg+0x160/0x210 net/socket.c:2799
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x121/0x770 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd90a79e199
RSP: 002b:00007fd90b62c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fd90aa26180 RCX: 00007fd90a79e199
RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003
RBP: 00007fd90a8358e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fd90aa26218 R14: 00007fd90aa26180 R15: 00007ffc9b9c9058
Showing all locks held in the system:
locks held by khungtaskd/32: 1, last CPU#0:
#0: ffffffff8edec3a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#0: ffffffff8edec3a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffffffff8edec3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6871
locks held by kworker/u8:6/142: 2, on CPU#0:
#0: ffff88801c09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 kernel/workqueue.c:3371
#1: ffffc90002e77d08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 kernel/workqueue.c:3372
locks held by getty/5373: 2, on CPU#0:
#0: ffff88803761c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 drivers/tty/n_tty.c:2211
locks held by syz.0.1075/14828: 2, on CPU#0:
#0: ffffffff90d873c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217
#1: ffffffff8f288ac0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x1a3/0x1dc0 fs/nfsd/nfsctl.c:2057
locks held by kworker/1:1/15173: 1, last CPU#1:
#0: ffffffff8edec3a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#0: ffffffff8edec3a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffffffff8edec3a0 (rcu_read_lock){....}-{1:3}, at: process_one_work+0x880/0x1b10 kernel/workqueue.c:3361
locks held by syz.1.1463/17815: 2, on CPU#1:
#0: ffffffff90d873c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217
#1: ffffffff8f288ac0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x1a3/0x1dc0 fs/nfsd/nfsctl.c:2057
locks held by syz.1.1463/17820: 2, on CPU#0:
#0: ffffffff90d873c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1217
#1: ffffffff8f288ac0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x1a3/0x1dc0 fs/nfsd/nfsctl.c:2057
locks held by kworker/u8:3/18327: 3, last CPU#0:
#0: ffff88801c09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 kernel/workqueue.c:3371
#1: ffff88807eb78008 (&____s->seqcount#14){.-.-}-{0:0}, at: trace_find_filtered_pid kernel/trace/trace_pid.c:15 [inline]
#1: ffff88807eb78008 (&____s->seqcount#14){.-.-}-{0:0}, at: trace_ignore_this_task+0xbc/0x100 kernel/trace/trace_pid.c:44
#2: ffff8880b8426398 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x124/0x1d0 kernel/time/timer.c:1004
locks held by kworker/u8:9/20077: 5, last CPU#0:
#0: ffff88801c09c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 kernel/workqueue.c:3371
#1: ffffc9000686fd08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 kernel/workqueue.c:3372
#2: ffffffff8ec7ca10 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 kernel/jump_label.c:247
#3: ffffffff8ef40400 (jump_label_mutex){+.+.}-{4:4}, at: jump_label_lock kernel/jump_label.c:27 [inline]
#3: ffffffff8ef40400 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x110/0x1c0 kernel/jump_label.c:238
#4: ffffffff8ec9c280 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 arch/x86/kernel/jump_label.c:145
locks held by syz.3.1764/20295: 2, last CPU#0:
#0: ffff88807af07180 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:600 [inline]
#0: ffff88807af07180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 mm/mmap.c:1299
#1: ffffffff8edec3a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#1: ffffffff8edec3a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#1: ffffffff8edec3a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 mm/pgtable-generic.c:290
locks held by syz.4.1765/20293: 2, last CPU#0:
#0: ffff8880798f9bc0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:600 [inline]
#0: ffff8880798f9bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 mm/mmap.c:1299
#1: ffffffff8edec3a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#1: ffffffff8edec3a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#1: ffffffff8edec3a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 mm/pgtable-generic.c:290
locks held by syz.5.1766/20304: 2, last CPU#0:
#0: ffffffff90cbf188 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 net/core/net_namespace.c:578
#1: ffffffff90e4cc60 (tcp_exit_batch_mutex){+.+.}-{4:4}, at: tcp_sk_exit_batch+0x22/0x170 net/ipv4/tcp_ipv4.c:3558
locks held by syz.2.1767/20313: 2, last CPU#0:
#0: ffffffff90cbf188 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 net/core/net_namespace.c:578
#1: ffffffff8edec3a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
#1: ffffffff8edec3a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#1: ffffffff8edec3a0 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline]
#1: ffffffff8edec3a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 arch/x86/kernel/unwind_orc.c:495
locks held by syz.2.1767/20314: 1, last CPU#1:
#0: ffffffff90cbf188 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 net/core/net_namespace.c:578
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:123
nmi_trigger_cpumask_backtrace+0x21f/0x2a0 lib/nmi_backtrace.c:66
trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x141/0x190 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
watchdog+0xcb1/0x1030 kernel/hung_task.c:561
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
RIP: 0010:write_comp_data+0x8/0xa0 kernel/kcov.c:236
Code: 24 08 e8 8b 8a 72 00 e9 6d fd ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 b0 43 81 12 <49> 89 f8 49 89 d2 49 89 f1 65 48 8b 3d 8f 43 81 12 48 63 d0 a9 00
RSP: 0018:ffffc900001574f0 EFLAGS: 00000046
RAX: 8000000000000001 RBX: ffffc9000015792b RCX: ffffffff8bccc890
RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 0000000000000002 R08: 0000000000000004 R09: 0000000000000003
R10: 0000000000000002 R11: 0000000000078368 R12: dffffc0000000000
R13: ffffc90080157927 R14: 0000000000000003 R15: 0000000000000002
FS: 0000000000000000(0000) GS:ffff888123c52000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe67e695ff8 CR3: 00000000786ac000 CR4: 00000000003526f0
Call Trace:
number+0x850/0xc90 lib/vsprintf.c:564
vsnprintf+0x30e/0x1300 lib/vsprintf.c:2913
sprintf+0xcc/0x100 lib/vsprintf.c:3116
print_time kernel/printk/printk.c:1359 [inline]
info_print_prefix+0x25a/0x350 kernel/printk/printk.c:1385
record_print_text+0x143/0x3c0 kernel/printk/printk.c:1434
printk_get_next_message+0x2d1/0x6c0 kernel/printk/printk.c:3072
nbcon_emit_next_record+0x2f5/0xa70 kernel/printk/nbcon.c:1017
nbcon_emit_one+0x1a8/0x2b0 kernel/printk/nbcon.c:1157
nbcon_kthread_func+0x613/0x7d0 kernel/printk/nbcon.c:1271
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245