INFO: task hung in do_uevent

Status: upstream: reported on 2026/08/04 21:23
Reported-by: syzbot+a250ae8cd98c724fe377@syzkaller.appspotmail.com
First crash: 52d, last: 3d16h
▶ ▼ Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 INFO: task hung in do_uevent 1 5 1d22h 52d 0/3 upstream: reported on 2026/08/05 00:48
upstream INFO: task hung in do_uevent prio:high gfs2 1 syz, C error 159 2d18h 50d 0/29 upstream: reported C repro on 2026/08/07 00:00
linux-6.6 INFO: task hung in do_uevent 1 4 39d 52d 0/2 upstream: reported on 2026/08/04 22:04

Sample crash report:
INFO: task syz.0.89:4748 blocked for more than 143 seconds.
      Tainted: G S                 syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.89        state:D stack:26832 pid:4748  ppid:4272   flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5246 [inline]
 __schedule+0x107f/0x4030 kernel/sched/core.c:6563
 schedule+0xb9/0x180 kernel/sched/core.c:6639
 do_uevent+0x1e9/0x490 fs/dlm/lockspace.c:210
 new_lockspace fs/dlm/lockspace.c:659 [inline]
 __dlm_new_lockspace+0x1d6a/0x22b0 fs/dlm/lockspace.c:719
 device_create_lockspace+0xc4/0x350 fs/dlm/user.c:426
 device_write+0x893/0xea0 fs/dlm/user.c:618
 vfs_write+0x2dc/0x9a0 fs/read_write.c:582
 ksys_write+0x14d/0x260 fs/read_write.c:637
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fb90059e0d9
RSP: 002b:00007fb90148a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fb900825fa0 RCX: 00007fb90059e0d9
RDX: 0000000000000078 RSI: 0000200000000500 RDI: 0000000000000006
RBP: 00007fb900635024 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fb900826038 R14: 00007fb900825fa0 R15: 00007fff32b41768
 </TASK>

Showing all locks held in the system:
4 locks held by kworker/u4:1/11:
1 lock held by rcu_tasks_kthre/12:
 #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 kernel/rcu/tasks.h:517
1 lock held by rcu_tasks_trace/13:
 #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 kernel/rcu/tasks.h:517
3 locks held by kworker/1:0/22:
 #0: ffff88802f2a7d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
 #1: ffffc900001c7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
 #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 net/ipv6/addrconf.c:4679
1 lock held by khungtaskd/28:
 #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
 #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:791 [inline]
 #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 kernel/locking/lockdep.c:6527
3 locks held by kworker/u4:2/41:
 #0: ffff8880b8e3ad18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 kernel/sched/core.c:538
 #1: ffff8880b8e27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x400/0x740 kernel/sched/psi.c:999
 #2: ffff88807b4787a8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: wiphy_lock include/net/cfg80211.h:5693 [inline]
 #2: ffff88807b4787a8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x31/0x260 net/wireless/core.c:420
3 locks held by kworker/u4:4/76:
2 locks held by kworker/1:2/2122:
2 locks held by getty/4027:
 #0: ffff88802ffdc098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:244
 #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 drivers/tty/n_tty.c:2198
1 lock held by syz-executor/4259:
3 locks held by kworker/u4:6/4325:
 #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
 #1: ffffc900044d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
 #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 net/core/link_watch.c:263
1 lock held by syz.0.89/4748:
 #0: ffffffff96d4d888 (&ls_lock){+.+.}-{3:3}, at: __dlm_new_lockspace+0xad/0x22b0 fs/dlm/lockspace.c:713
1 lock held by dlm_recoverd/4753:
 #0: ffff88805653cca0 (&ls->ls_in_recovery){+.+.}-{3:3}, at: dlm_recoverd+0xa6/0x1df0 fs/dlm/recoverd.c:312
3 locks held by kworker/0:11/4974:
3 locks held by kworker/0:12/4975:
 #0: ffff88802f2a7d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
 #1: ffffc90005d8fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
 #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 net/ipv6/addrconf.c:4679
2 locks held by kworker/0:13/4977:
 #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
 #1: ffffc9000610fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
3 locks held by kworker/0:14/4979:
 #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
 #1: ffffc9000611fd00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
 #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 net/switchdev/switchdev.c:104
5 locks held by kworker/u4:13/4996:
 #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
 #1: ffffc90006177d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 kernel/workqueue.c:2267
 #2: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 net/core/net_namespace.c:594
 #3: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xee/0x9f0 net/core/dev.c:11535
 #4: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:291 [inline]
 #4: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 kernel/rcu/tree_exp.h:962
2 locks held by syz-executor/5023:
 #0: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 net/core/net_namespace.c:504
 #1: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: fib_net_exit_batch+0x1c/0x90 net/ipv4/fib_frontend.c:1652
2 locks held by syz-executor/5037:
 #0: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 net/core/net_namespace.c:504
 #1: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: tc_action_net_exit include/net/act_api.h:173 [inline]
 #1: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: ife_exit_net+0x2c/0x100 net/sched/act_ife.c:899
2 locks held by syz-executor/5042:
 #0: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 net/core/net_namespace.c:504
 #1: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: ip6mr_net_exit_batch+0x1c/0x90 net/ipv6/ip6mr.c:1374
2 locks held by syz-executor/5051:
 #0: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 net/core/net_namespace.c:504
 #1: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xd2/0x370 net/ipv4/ip_tunnel.c:1152
2 locks held by syz-executor/5054:
 #0: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 net/core/net_namespace.c:504
 #1: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x7fd/0xbd0 net/core/net_namespace.c:358
2 locks held by syz-executor/5057:
 #0: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 net/core/net_namespace.c:504
 #1: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xd2/0x370 net/ipv4/ip_tunnel.c:1152
2 locks held by syz-executor/5059:
 #0: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 net/core/net_namespace.c:504
 #1: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x29c/0x7a0 net/ipv4/ip_tunnel.c:1103
2 locks held by syz-executor/5061:
 #0: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 net/core/net_namespace.c:504
 #1: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x29c/0x7a0 net/ipv4/ip_tunnel.c:1103
1 lock held by syz-executor/5065:
1 lock held by syz-executor/5068:
1 lock held by syz-executor/5069:
1 lock held by syz-executor/5073:

Crashes (18):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/17 22:56 linux-6.1.y e4f7d8be268e 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in do_uevent
2026/08/17 22:36 linux-6.1.y e4f7d8be268e 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in do_uevent
2026/08/17 21:45 linux-6.1.y e4f7d8be268e 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in do_uevent
2026/08/17 21:12 linux-6.1.y e4f7d8be268e 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in do_uevent
2026/08/17 21:09 linux-6.1.y e4f7d8be268e 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in do_uevent
2026/08/17 21:09 linux-6.1.y e4f7d8be268e 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in do_uevent
2026/08/17 20:48 linux-6.1.y e4f7d8be268e 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in do_uevent
2026/08/17 19:34 linux-6.1.y e4f7d8be268e 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in do_uevent
2026/08/17 19:03 linux-6.1.y e4f7d8be268e 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in do_uevent
2026/08/17 19:03 linux-6.1.y e4f7d8be268e 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in do_uevent
2026/08/17 18:45 linux-6.1.y e4f7d8be268e 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in do_uevent
2026/08/05 01:38 linux-6.1.y fb28aa725e05 d4abbeac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in do_uevent
2026/08/05 01:35 linux-6.1.y fb28aa725e05 d4abbeac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in do_uevent
2026/08/05 01:17 linux-6.1.y fb28aa725e05 d4abbeac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in do_uevent
2026/08/04 21:24 linux-6.1.y fb28aa725e05 d4abbeac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in do_uevent
2026/08/04 21:22 linux-6.1.y fb28aa725e05 d4abbeac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in do_uevent
2026/09/22 12:38 linux-6.1.y 1a8763b93150 e12281bd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in do_uevent
2026/09/03 16:40 linux-6.1.y cf82dcca9634 6a988719 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in do_uevent
* Struck through repros no longer work on HEAD.