INFO: task kworker/u8:9:1370 blocked for more than 144 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:9 state:D stack:23592 pid:1370 tgid:1370 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: netns cleanup_net Call Trace: context_switch kernel/sched/core.c:5583 [inline] __schedule+0x125e/0x6990 kernel/sched/core.c:7382 __schedule_loop kernel/sched/core.c:7459 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7474 schedule_timeout+0x1b2/0x280 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:100 [inline] __wait_for_common+0x2e6/0x500 kernel/sched/completion.c:121 __debugfs_file_removed fs/debugfs/inode.c:754 [inline] remove_one+0x312/0x420 fs/debugfs/inode.c:761 __simple_recursive_removal+0x148/0x5c0 fs/libfs.c:623 debugfs_remove+0x5d/0x80 fs/debugfs/inode.c:784 nsim_dev_health_exit+0x3b/0xe0 drivers/net/netdevsim/health.c:227 nsim_dev_reload_destroy+0x144/0x490 drivers/net/netdevsim/dev.c:1713 nsim_dev_reload_down+0x66/0xd0 drivers/net/netdevsim/dev.c:963 devlink_reload+0x1ae/0x7a0 net/devlink/dev.c:462 devlink_pernet_pre_exit+0x247/0x370 net/devlink/core.c:584 ops_pre_exit_list net/core/net_namespace.c:161 [inline] ops_undo_list+0x187/0xab0 net/core/net_namespace.c:235 cleanup_net+0x499/0x920 net/core/net_namespace.c:706 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396 process_scheduled_works kernel/workqueue.c:3479 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task syz.2.377:7492 blocked for more than 144 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.377 state:D stack:27056 pid:7492 tgid:7489 ppid:5601 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5583 [inline] __schedule+0x125e/0x6990 kernel/sched/core.c:7382 __schedule_loop kernel/sched/core.c:7459 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7474 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7531 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0xcca/0x1c10 kernel/locking/mutex.c:821 devlink_health_report+0x656/0xb00 net/devlink/health.c:680 nsim_dev_health_break_write+0x166/0x210 drivers/net/netdevsim/health.c:162 full_proxy_write+0x135/0x1a0 fs/debugfs/file.c:389 vfs_write+0x2aa/0x1050 fs/read_write.c:685 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f06cad9f559 RSP: 002b:00007f06cbc7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f06cb025fa0 RCX: 00007f06cad9f559 RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000009 RBP: 00007f06cae36b20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f06cb026038 R14: 00007f06cb025fa0 R15: 00007fffea8446b8 Showing all locks held in the system: locks held by khungtaskd/32: 1, last CPU#0: #0: ffffffff8fdecde0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffffffff8fdecde0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8fdecde0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6871 locks held by kworker/u8:9/1370: 6, on CPU#0: #0: ffff88801e2e0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 kernel/workqueue.c:3371 #1: ffffc90005dd7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 kernel/workqueue.c:3372 #2: ffffffff91cbfd08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 net/core/net_namespace.c:677 #3: ffff88802d63c128 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline] #3: ffff88802d63c128 (&dev->mutex){....}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:124 [inline] #3: ffff88802d63c128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370 net/devlink/core.c:581 #4: ffff88802d63b258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devl_lock net/devlink/core.c:314 [inline] #4: ffff88802d63b258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:125 [inline] #4: ffff88802d63b258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x1b4/0x370 net/devlink/core.c:581 #5: ffff888056495950 (&sb->s_type->i_mutex_key#8/2){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1069 [inline] #5: ffff888056495950 (&sb->s_type->i_mutex_key#8/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 fs/libfs.c:619 locks held by getty/5359: 2, on CPU#1: #0: ffff8880395710a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 drivers/tty/n_tty.c:2211 locks held by syz-executor/5602: 4, last CPU#1: #0: ffffffff8ff3e710 (dup_mmap_sem){++++}-{0:0}, at: dup_mm kernel/fork.c:1542 [inline] #0: ffffffff8ff3e710 (dup_mmap_sem){++++}-{0:0}, at: copy_mm kernel/fork.c:1595 [inline] #0: ffffffff8ff3e710 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x7a01/0x84c0 kernel/fork.c:2321 #1: ffff888079fc4080 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:562 [inline] #1: ffff888079fc4080 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 mm/mmap.c:1716 #2: ffff888028c25900 (&mm->mmap_lock/1){+.+.}-{4:4}, at: mmap_write_lock_nested include/linux/mmap_lock.h:552 [inline] #2: ffff888028c25900 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 mm/mmap.c:1723 #3: ffffffff8fdecde0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #3: ffffffff8fdecde0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #3: ffffffff8fdecde0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 mm/pgtable-generic.c:290 locks held by syz-executor/5604: 1, last CPU#0: #0: ffff888054efc460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 fs/namei.c:5706 locks held by syz.2.377/7492: 3, on CPU#0: #0: ffff888078f78630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 fs/file.c:1408 #1: ffff888021ef2460 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #2: ffff88802d63b258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_health_report+0x656/0xb00 net/devlink/health.c:680 locks held by syz-executor/8167: 1, last CPU#0: #0: ffffffff8fdecde0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffffffff8fdecde0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8fdecde0 (rcu_read_lock){....}-{1:3}, at: path_init+0xac1/0x1ab0 fs/namei.c:2689 locks held by dhcpcd-run-hook/8620: 1, on CPU#0: #0: ffff8880554d1860 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_read+0x7d9/0x1200 fs/pipe.c:467 locks held by iou-sqp-8633/8635: 1, last CPU#1: #0: ffff88807f564468 (&sqd->lock){+.+.}-{4:4}, at: io_sq_thread+0xdf8/0x14b0 io_uring/sqpoll.c:363 locks held by dhcpcd-run-hook/8636: 1, last CPU#0: #0: ffff8880554d1860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x46/0x2c0 fs/pipe.c:812 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:123 nmi_trigger_cpumask_backtrace+0x21f/0x2a0 lib/nmi_backtrace.c:66 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x141/0x190 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xcb1/0x1030 kernel/hung_task.c:561 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 77 95 02 e9 93 55 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 eb 15 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 RSP: 0018:ffffc90000197e00 EFLAGS: 00000242 RAX: 000000000186b1e5 RBX: ffff88801feea580 RCX: ffffffff8bd5d315 RDX: 0000000000000001 RSI: ffffffff8e3e5c32 RDI: ffffffff8c625e80 RBP: ffffed1003fdd4b0 R08: 0000000000000001 R09: ffffed1017066815 R10: ffff8880b83340ab R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888122a34000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b335f5ff8 CR3: 000000002d7dd000 CR4: 00000000003526f0 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline] default_idle+0x9/0x10 arch/x86/kernel/process.c:768 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x3ae/0x5b0 kernel/sched/idle.c:355 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:454 start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x158