INFO: task hung in netdev_run_todo (4)

Status: upstream: reported on 2024/10/09 19:06
Subsystems: net
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+894cca71fa925aabfdb2@syzkaller.appspotmail.com
First crash: 792d, last: 42m
▶ ▼ ✨ AI Jobs (4)
ID Workflow Result Correct Bug Created Started Finished Revision
a3b2d365 repro-c Reproduced: ✅ ❓ INFO: task hung in netdev_run_todo (4) 2026/08/06 14:12 2026/08/06 14:12 2026/08/06 19:49 c38879ea
7e78fae6 assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ✅ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ INFO: task hung in netdev_run_todo (4) 2026/06/01 02:23 2026/06/01 02:23 2026/06/01 03:31 6b4a8443
ca4c1867 assessment-security 💥 INFO: task hung in netdev_run_todo (4) 2026/05/15 10:03 2026/05/15 10:03 2026/05/15 10:04 9cd3beaa
a523f87b repro ❓ INFO: task hung in netdev_run_todo (4) 2026/03/07 09:34 2026/03/07 09:34 2026/03/07 09:43 31e9c887
▶ ▼ Discussions (9)
Title Replies (including bot) Last reply
[syzbot] Monthly wireless report (Oct 2026) 0 (1) 2026/10/05 20:33
[syzbot] Monthly net report (Jul 2026) 0 (1) 2026/07/25 04:32
[syzbot] Monthly wireless report (Apr 2026) 0 (1) 2026/04/01 07:42
[syzbot] Monthly wireguard report (Mar 2026) 0 (1) 2026/03/19 21:35
[syzbot] Monthly wireguard report (Nov 2025) 0 (1) 2025/11/30 10:08
[syzbot] Monthly wireguard report (May 2025) 0 (1) 2025/05/12 06:34
[syzbot] Monthly wireguard report (Feb 2025) 0 (1) 2025/02/26 15:11
[syzbot] Monthly wireguard report (Dec 2024) 0 (1) 2024/12/26 09:01
[syzbot] [net?] INFO: task hung in netdev_run_todo (4) 0 (1) 2024/10/09 19:06
▶ ▼ Similar bugs (18)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 INFO: task hung in netdev_run_todo (3) 1 15 1444d 1760d 0/1 auto-obsoleted due to no activity on 2023/03/07 08:19
linux-6.6 INFO: task hung in netdev_run_todo 1 1 411d 411d 0/2 auto-obsoleted due to no activity on 2025/12/14 15:00
linux-5.15 INFO: task hung in netdev_run_todo (3) 1 1 299d 299d 0/3 auto-obsoleted due to no activity on 2026/04/05 15:48
upstream INFO: task hung in netdev_run_todo net 1 12 2618d 3173d 0/29 closed as invalid on 2019/10/23 07:29
linux-4.19 INFO: task hung in netdev_run_todo (2) 1 3 2251d 2299d 0/1 auto-closed as invalid on 2020/12/20 04:57
linux-5.15 INFO: task hung in netdev_run_todo (4) 1 syz 4 11d 67d 0/3 upstream: reported syz repro on 2026/08/15 05:07
android-44 INFO: task hung in netdev_run_todo 1 1 3113d 3113d 0/2 auto-closed as invalid on 2019/02/22 12:49
android-6-12 INFO: task hung in netdev_run_todo (2) 1 152 16d 272d 0/1 premoderation: reported on 2026/01/22 03:02
linux-4.19 INFO: task hung in netdev_run_todo 1 1 2577d 2577d 0/1 auto-closed as invalid on 2020/01/29 06:48
upstream INFO: task hung in netdev_run_todo (3) net 1 24 855d 893d 0/29 auto-obsoleted due to no activity on 2024/08/07 04:24
linux-5.15 INFO: task hung in netdev_run_todo 1 1 1090d 1090d 0/3 auto-obsoleted due to no activity on 2024/02/04 09:09
linux-6.6 INFO: task hung in netdev_run_todo (2) 1 1 280d 280d 0/2 auto-obsoleted due to no activity on 2026/04/24 20:32
upstream INFO: task hung in netdev_run_todo (2) staging wireguard usb 1 syz, C error 241 981d 2138d 0/29 auto-obsoleted due to no activity on 2024/05/05 22:51
android-49 INFO: task hung in netdev_run_todo 1 1 3105d 3105d 0/3 auto-closed as invalid on 2019/02/22 14:57
linux-4.14 INFO: task hung in netdev_run_todo 1 1 1438d 1438d 0/1 auto-obsoleted due to no activity on 2023/03/13 17:45
android-6-12 INFO: task hung in netdev_run_todo 1 184 342d 486d 0/1 auto-obsoleted due to no activity on 2026/01/03 01:56
linux-5.15 INFO: task hung in netdev_run_todo (2) 1 54 703d 884d 0/3 auto-obsoleted due to no activity on 2025/01/26 20:30
upstream INFO: task can't die in netdev_run_todo net 1 syz error 2 1860d 2253d 0/29 auto-obsoleted due to no activity on 2023/04/16 04:59
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2026/08/06 20:15 5h56m nogikh@google.com upstream report log

Sample crash report:
INFO: task syz.1.1317:9111 blocked for more than 143 seconds.
      Tainted: G             L      syzkaller #0
      Blocked by coredump.
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.1317      state:D stack:20544 pid:9111  tgid:9111  ppid:5586   task_flags:0x40044c flags:0x00080003
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5583 [inline]
 __schedule+0x171d/0x56e0 kernel/sched/core.c:7382
 __schedule_loop kernel/sched/core.c:7459 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7474
 schedule_timeout+0xc0/0x2c0 kernel/time/sleep_timeout.c:75
 do_wait_for_common kernel/sched/completion.c:100 [inline]
 __wait_for_common kernel/sched/completion.c:121 [inline]
 wait_for_common kernel/sched/completion.c:132 [inline]
 wait_for_completion+0x2c5/0x5d0 kernel/sched/completion.c:153
 rcu_barrier+0x413/0x530 kernel/rcu/tree.c:3972
 netdev_run_todo+0x2fc/0x1060 net/core/dev.c:11826
 tun_detach drivers/net/tun.c:656 [inline]
 tun_chr_close+0x13f/0x1c0 drivers/net/tun.c:3592
 __fput+0x41a/0xa70 fs/file_table.c:512
 fput_close_sync+0x11f/0x240 fs/file_table.c:618
 filp_close_sync+0x6e/0xa0 fs/open.c:1573
 close_files fs/file.c:572 [inline]
 put_files_struct+0x233/0x3c0 fs/file.c:584
 do_exit+0x715/0x2340 kernel/exit.c:984
 do_group_exit+0x22d/0x2f0 kernel/exit.c:1130
 get_signal+0x1216/0x12c0 kernel/signal.c:3112
 arch_do_signal_or_restart+0xbb/0x860 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
 exit_to_user_mode_loop+0x10e/0x770 kernel/entry/common.c:101
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:343 [inline]
 do_syscall_64+0x328/0x520 arch/x86/entry/syscall_64.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f57f5dbf559
RSP: 002b:00007fffdeefba68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007fffdeefbb50 RCX: 00007f57f5dbf559
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 000000000003ba17 R08: 0000000000000001 R09: 0000000000000000
R10: 0000001b30c20000 R11: 0000000000000246 R12: 00007fffdeefbb90
R13: 00007f57f6045fac R14: 000000000003bb11 R15: 00007f57f6045fa0
 </TASK>

Showing all locks held in the system:
locks held by rcuc/0/19: 3, last CPU#0:
 #0: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 kernel/softirq.c:186
 #1: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 net/core/dev.c:6760
 #2: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #2: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #2: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: nf_hook include/linux/netfilter.h:249 [inline]
 #2: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 include/linux/netfilter.h:323
locks held by khungtaskd/38: 1, last CPU#0:
 #0: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871
locks held by kworker/u8:4/67: 2, on CPU#0:
 #0: ffff88801f773938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801f773938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801f773938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801f773938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000152fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000152fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000152fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000152fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
locks held by kworker/u8:8/1147: 2, last CPU#0:
 #0: ffff88813fe2c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88813fe2c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88813fe2c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88813fe2c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000664fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000664fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000664fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000664fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
locks held by kworker/u8:12/1800: 2, on CPU#0:
 #0: ffff88801f773938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff88801f773938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff88801f773938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff88801f773938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000730fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000730fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000730fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000730fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
locks held by kworker/u8:13/1996: 3, on CPU#0:
 #0: ffff888033f99938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888033f99938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888033f99938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888033f99938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000769fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000769fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000769fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000769fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffffffff907d71b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline]
 #2: ffffffff907d71b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 net/ipv6/addrconf.c:4770
locks held by getty/5340: 2, on CPU#0:
 #0: ffff8880374580a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc900044eb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 drivers/tty/n_tty.c:2211
locks held by kworker/u9:6/8311: 7, on CPU#0:
 #0: ffff888033600938 ((wq_completion)hci5){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffff888033600938 ((wq_completion)hci5){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffff888033600938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #0: ffff888033600938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #1: ffffc9000377fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #1: ffffc9000377fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #1: ffffc9000377fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3361 [inline]
 #1: ffffc9000377fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3479
 #2: ffff88805a5c8f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 net/bluetooth/hci_sync.c:337
 #3: ffff88805a5c80b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 net/bluetooth/hci_sync.c:6016
 #4: ffffffff8fd8e2f8 (dev_pm_qos_sysfs_mtx){+.+.}-{4:4}, at: dev_pm_qos_constraints_destroy+0x32/0x480 drivers/base/power/qos.c:254
 #5: ffff88813fe37348 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 fs/kernfs/dir.c:1790
 #6: ffff88813fe37238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 fs/kernfs/dir.c:1791
locks held by syz.1.1317/9111: 1, on CPU#0:
 #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3904
locks held by syz.0.1322/9130: 1, on CPU#0:
 #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3904
locks held by syz.5.1325/9141: 1, on CPU#0:
 #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3904
locks held by syz.2.1334/9166: 1, on CPU#0:
 #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3904
locks held by syz-executor/9182: 1, on CPU#0:
 #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3904
locks held by syz-executor/9205: 1, on CPU#0:
 #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3904
locks held by syz-executor/9212: 1, on CPU#0:
 #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3904
locks held by syz-executor/9233: 1, on CPU#0:
 #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3904
locks held by syz-executor/9348: 1, on CPU#0:
 #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3904
locks held by syz-executor/9361: 2, on CPU#0:
 #0: ffffffff90d3dc20 (&ops->srcu#2){.+.+}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 #0: ffffffff90d3dc20 (&ops->srcu#2){.+.+}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffffffff90d3dc20 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 net/core/rtnetlink.c:595
 #1: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3904
locks held by syz-executor/9364: 2, on CPU#0:
 #0: ffffffff907c8960 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 net/core/net_namespace.c:578
 #1: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3904
locks held by syz-executor/9377: 2, on CPU#0:
 #0: ffffffff907c8960 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 net/core/net_namespace.c:578
 #1: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3904
locks held by syz-executor/9472: 1, on CPU#0:
 #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3904
locks held by syz-executor/9481: 5, last CPU#0:
 #0: ffffffff907c8960 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 net/core/net_namespace.c:578
 #1: ffffffff90520ba0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1fb/0x2f0 drivers/infiniband/core/device.c:1221
 #2: ffffffff90520de0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x2f0 drivers/infiniband/core/device.c:1226
 #3: ffff88803b765208 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x640 drivers/infiniband/core/device.c:976
 #4: ffff88813fe37238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x510 fs/kernfs/dir.c:833
locks held by syz.4.1396/9491: 1, on CPU#0:
 #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 kernel/rcu/tree.c:3904
locks held by syz-executor/9493: 4, on CPU#0:
 #0: ffffffff907c8960 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 net/core/net_namespace.c:578
 #1: ffffffff907d71b8 (rtnl_mutex){+.+.}-{4:4}, at: ops_exit_rtnl_list net/core/net_namespace.c:173 [inline]
 #1: ffffffff907d71b8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8f0 net/core/net_namespace.c:249
 #2: ffff88813fe37348 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 fs/kernfs/dir.c:1790
 #3: ffff88813fe37238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 fs/kernfs/dir.c:1791
locks held by syz-executor/9496: 2, on CPU#0:
 #0: ffff88813fe37348 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 fs/kernfs/dir.c:1790
 #1: ffff88813fe37238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 fs/kernfs/dir.c:1791
locks held by syz-executor/9513: 4, on CPU#0:
 #0: ffffffff907c8960 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 net/core/net_namespace.c:578
 #1: ffffffff90520ba0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1fb/0x2f0 drivers/infiniband/core/device.c:1221
 #2: ffffffff90520de0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x2f0 drivers/infiniband/core/device.c:1226
 #3: ffff88803b765208 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x640 drivers/infiniband/core/device.c:976
locks held by syz-executor/9552: 1, on CPU#0:
 #0: ffffffff907d71b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline]
 #0: ffffffff907d71b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 net/ipv4/devinet.c:978
locks held by syz-executor/9556: 1, on CPU#0:
 #0: ffffffff907d71b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline]
 #0: ffffffff907d71b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 net/ipv4/devinet.c:978
locks held by syz-executor/9566: 1, on CPU#0:
 #0: ffffffff907d71b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
 #0: ffffffff907d71b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:366 [inline]
 #0: ffffffff907d71b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 net/core/rtnetlink.c:4219
locks held by syz-executor/9577: 1, on CPU#0:
 #0: ffffffff907d71b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline]
 #0: ffffffff907d71b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 net/ipv4/devinet.c:978

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123
 nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66
 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline]
 __sys_info lib/sys_info.c:157 [inline]
 sys_info+0x135/0x170 lib/sys_info.c:165
 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
 watchdog+0xfd2/0x1030 kernel/hung_task.c:561
 kthread+0x38b/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (1028):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/10/22 01:11 upstream 9ba46df34488 61c200c7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/10/21 13:09 upstream 9e947d96915a 61c200c7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/10/20 11:58 upstream f47d223627f8 72cdc28d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/10/19 18:40 upstream c03c1a14507d 72cdc28d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/10/15 15:44 upstream 0fcb05b72344 3f2522c6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/10/15 00:51 upstream 4056b3c9d3c9 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/10/14 14:06 upstream ca3e345926b0 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/10/12 14:42 upstream 24a19b953e2a 745a967f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/10/10 19:59 upstream 3857c2fe5449 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/10/10 05:11 upstream 3857c2fe5449 a8add9cd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/10/09 14:47 upstream af32da41b032 b2734a59 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs INFO: task hung in netdev_run_todo
2026/10/06 13:11 upstream 2c3418fffa9d f7710056 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/09/30 11:05 upstream 551c722f4080 7808aef4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/09/30 10:18 upstream 551c722f4080 7808aef4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/09/30 05:54 upstream 6f8319e3e9a4 7808aef4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/09/28 09:19 upstream 72d3fcf802c4 a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/09/27 21:45 upstream efb44d93a620 a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/09/27 18:15 upstream efb44d93a620 a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/09/26 09:17 upstream 6812ce4e4379 a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/09/25 05:10 upstream 165768bb7026 f281d9d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in netdev_run_todo
2026/09/21 20:36 upstream 93f51579e7df 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/09/21 05:36 upstream 518e5b794c06 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/09/18 09:24 upstream 5dd1818b15d9 8d7d05f1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/09/17 05:56 upstream 238650ef6c7c 95928915 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in netdev_run_todo
2026/09/16 16:50 upstream 9b87fdc9af2f 95928915 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/08/05 16:29 upstream c21bb4193868 b3eac40e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/05/24 22:01 upstream 4cbfe4502e3d c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/05/12 04:56 upstream 50897c955902 d168f260 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2026/04/14 05:15 upstream 26ff969926a0 1a086e7c .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto INFO: task hung in netdev_run_todo
2026/03/03 01:01 upstream af4e9ef3d784 28b83e23 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in netdev_run_todo
2025/07/21 21:41 upstream 89be9a83ccf1 0b3788a0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: task hung in netdev_run_todo
2024/10/06 16:49 upstream 8f602276d390 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in netdev_run_todo
2024/09/27 16:51 upstream 075dbe9f6e3c 2b1784d6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in netdev_run_todo
2026/10/13 13:15 upstream 24a19b953e2a 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in netdev_run_todo
2026/10/08 06:58 upstream 7b63ef2d55f2 6520ecdb .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in netdev_run_todo
2025/02/25 10:53 upstream d082ecbc71e9 d34966d1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64-compat INFO: task hung in netdev_run_todo
2026/10/19 23:46 net 78731b46967e 72cdc28d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/10/19 04:23 net 7ec48f396a1d 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/10/11 05:05 net af32da41b032 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/10/08 17:01 net 6d25ffca055a 4f6a9fcf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/10/05 01:57 net 6dc989ea46b9 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/10/04 08:58 net 6dc989ea46b9 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/10/04 02:10 net 6dc989ea46b9 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/10/03 00:16 net 71a77ab76e74 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/09/30 00:02 net 54518e0e827f 7808aef4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/09/29 12:15 net 6b2462f07cb7 7bf4ea23 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/09/27 10:43 net a7bfaba4823e a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/09/26 19:56 net aadf655e8ea9 a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/09/26 03:54 net aadf655e8ea9 f281d9d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/09/25 02:27 net 11536ee3d3e0 3c3cdf19 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/09/24 07:55 net ab1404ac8115 0a1606bc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/09/23 16:58 net 9c572a83037a abce1216 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/09/23 00:21 net 23d42b9a3bcd 3e2106e5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/09/20 18:21 net c82b797abe66 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/09/20 02:30 net c82b797abe66 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in netdev_run_todo
2026/10/17 10:47 net-next 95a5c641fc7b 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in netdev_run_todo
2026/10/10 02:47 net-next d8674294aefe a8add9cd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in netdev_run_todo
2026/10/03 19:08 net-next cfb7793d1bc0 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in netdev_run_todo
2026/10/02 03:08 net-next eb0c18404c89 6d32eb1f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in netdev_run_todo
2026/09/26 11:43 net-next e3a46dde2398 a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in netdev_run_todo
2026/09/24 00:42 net-next 944ae66642b7 0a1606bc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in netdev_run_todo
2026/09/22 10:47 net-next 2fba93180872 e12281bd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in netdev_run_todo
2026/09/16 07:32 net-next b8e9e7d82e7e 12a0a44a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in netdev_run_todo
2026/09/11 13:10 linux-next 9d80aa4617b3 b6a5eeb7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce INFO: task hung in netdev_run_todo
2026/07/14 17:01 linux-next cc2b5f627e8c 2130f682 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root INFO: task hung in netdev_run_todo
2026/06/19 07:36 https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux master 83f1454877cc d7ffd47b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64 INFO: task hung in netdev_run_todo
2025/08/22 05:15 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git for-next 8f5ae30d69d7 bf27483f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-riscv64 INFO: task hung in netdev_run_todo
* Struck through repros no longer work on HEAD.