INFO: task syz.5.970:9823 blocked for more than 148 seconds.
      Tainted: G             L      syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.970       state:D stack:27864 pid:9823  tgid:9822  ppid:9132   task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5388 [inline]
 __schedule+0x1295/0x67a0 kernel/sched/core.c:7189
 __schedule_loop kernel/sched/core.c:7268 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:7283
 schedule_timeout+0x1b2/0x280 kernel/time/sleep_timeout.c:75
 ___down_common kernel/locking/semaphore.c:289 [inline]
 __down_common+0x371/0x8a0 kernel/locking/semaphore.c:314
 down+0x74/0xa0 kernel/locking/semaphore.c:100
 console_lock+0x5b/0xa0 kernel/printk/printk.c:2896
 class_console_lock_constructor include/linux/console.h:736 [inline]
 con_set_cmap+0xbe/0x840 drivers/tty/vt/vt.c:4845
 vt_io_ioctl drivers/tty/vt/vt_ioctl.c:515 [inline]
 vt_ioctl+0xe36/0x31a0 drivers/tty/vt/vt_ioctl.c:747
 tty_ioctl+0x26a/0x1640 drivers/tty/tty_io.c:2792
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x10b/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f989b39ce59
RSP: 002b:00007f989c17a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f989b615fa0 RCX: 00007f989b39ce59
RDX: 00002000000000c0 RSI: 0000000000004b71 RDI: 0000000000000005
RBP: 00007f989b432d6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f989b616038 R14: 00007f989b615fa0 R15: 00007ffebe61ba78
 </TASK>

Showing all locks held in the system:
1 lock held by kthreadd/2:
3 locks held by kworker/0:0/9:
3 locks held by kworker/0:1/10:
4 locks held by kworker/u8:0/12:
3 locks held by kworker/u8:1/13:
1 lock held by khungtaskd/30:
 #0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
 #0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline]
 #0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775
4 locks held by kworker/u8:2/35:
2 locks held by kworker/1:1/42:
2 locks held by kworker/u8:4/58:
3 locks held by kworker/u8:5/82:
4 locks held by kworker/u8:7/1039:
4 locks held by kworker/u8:8/1106:
2 locks held by kworker/u8:9/1120:
4 locks held by kworker/0:2/1626:
1 lock held by klogd/4968:
2 locks held by dhcpcd/5273:
1 lock held by crond/5349:
2 locks held by getty/5368:
 #0: ffff8880382990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 drivers/tty/n_tty.c:2211
2 locks held by syz-executor/5597:
5 locks held by syz-executor/5612:
3 locks held by kworker/0:3/5613:
3 locks held by kworker/0:5/5721:
3 locks held by kworker/0:6/5722:
5 locks held by kworker/0:7/5729:
2 locks held by kworker/1:5/5742:
3 locks held by kworker/u8:10/9077:
2 locks held by syz-executor/9132:
3 locks held by kworker/u8:11/9362:
4 locks held by kworker/u8:12/9363:
4 locks held by kworker/u8:13/9364:
4 locks held by kworker/u8:14/9365:
4 locks held by kworker/u8:15/9366:
4 locks held by kworker/u8:16/9367:
3 locks held by kworker/u8:18/9369:
3 locks held by kworker/u8:19/9370:
4 locks held by kworker/u8:20/9371:
3 locks held by kworker/u8:22/9373:
6 locks held by syz.0.969/9812:
1 lock held by syz.3.971/9827:
6 locks held by kworker/0:8/9835:

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x1d7/0x230 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 __sys_info lib/sys_info.c:157 [inline]
 sys_info+0x141/0x190 lib/sys_info.c:165
 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
 watchdog+0xcb1/0x1030 kernel/hung_task.c:561
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 9835 Comm: kworker/0:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker
RIP: 0010:mark_usage kernel/locking/lockdep.c:4642 [inline]
RIP: 0010:__lock_acquire+0x102f/0x2630 kernel/locking/lockdep.c:5191
Code: 44 8b 44 24 10 85 c0 74 10 44 8b 0d 4b a4 f3 0e 45 85 c9 0f 84 16 06 00 00 90 31 c0 e9 d0 f1 ff ff 89 4c 24 08 ba 05 00 00 00 <48> 89 de 48 89 ef e8 56 e3 ff ff 8b 4c 24 08 85 c0 0f 85 08 f4 ff
RSP: 0018:ffffc90000006c10 EFLAGS: 00000002
RAX: 0000000000000000 RBX: ffff888078fd5658 RCX: 0000000000000005
RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000020
RBP: ffff888078fd4a00 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000005 R15: 0000000000000003
FS:  0000000000000000(0000) GS:ffff88812436a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f964f800000 CR3: 000000000e596000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 lock_acquire kernel/locking/lockdep.c:5868 [inline]
 lock_acquire+0x1b1/0x370 kernel/locking/lockdep.c:5825
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:132 [inline]
 _raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:166
 __debug_check_no_obj_freed lib/debugobjects.c:1105 [inline]
 debug_check_no_obj_freed+0x1c9/0x630 lib/debugobjects.c:1146
 slab_free_hook mm/slub.c:2620 [inline]
 slab_free mm/slub.c:6251 [inline]
 kmem_cache_free+0x3c4/0x6c0 mm/slub.c:6378
 __skb_ext_put+0x102/0x2f0 net/core/skbuff.c:7232
 skb_ext_reset include/linux/skbuff.h:5116 [inline]
 skb_ext_reset include/linux/skbuff.h:5113 [inline]
 skb_release_head_state+0x2c8/0x400 net/core/skbuff.c:1181
 skb_release_all net/core/skbuff.c:1187 [inline]
 __kfree_skb net/core/skbuff.c:1203 [inline]
 sk_skb_reason_drop+0xc4/0x1b0 net/core/skbuff.c:1241
 kfree_skb_reason include/linux/skbuff.h:1322 [inline]
 kfree_skb include/linux/skbuff.h:1331 [inline]
 ip6_mc_input+0x832/0xf50 net/ipv6/ip6_input.c:638
 dst_input include/net/dst.h:480 [inline]
 ip6_rcv_finish+0x294/0x300 net/ipv6/ip6_input.c:119
 ip_sabotage_in+0x21e/0x290 net/bridge/br_netfilter_hooks.c:988
 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
 nf_hook_slow+0xbf/0x220 net/netfilter/core.c:619
 nf_hook.constprop.0+0x2a6/0x750 include/linux/netfilter.h:273
 NF_HOOK include/linux/netfilter.h:316 [inline]
 ipv6_rcv+0xa4/0x3d0 net/ipv6/ip6_input.c:351
 __netif_receive_skb_one_core+0x12d/0x1e0 net/core/dev.c:6202
 __netif_receive_skb+0x1f/0x120 net/core/dev.c:6315
 netif_receive_skb_internal net/core/dev.c:6401 [inline]
 netif_receive_skb+0x13b/0x7f0 net/core/dev.c:6460
 NF_HOOK include/linux/netfilter.h:318 [inline]
 NF_HOOK include/linux/netfilter.h:312 [inline]
 br_pass_frame_up+0x346/0x490 net/bridge/br_input.c:70
 br_handle_frame_finish+0xa74/0x1f60 net/bridge/br_input.c:235
 br_nf_hook_thresh+0x30d/0x420 net/bridge/br_netfilter_hooks.c:1165
 br_nf_pre_routing_finish_ipv6+0x659/0xdd0 net/bridge/br_netfilter_ipv6.c:153
 NF_HOOK include/linux/netfilter.h:318 [inline]
 br_nf_pre_routing_ipv6+0x39c/0x8b0 net/bridge/br_netfilter_ipv6.c:183
 br_nf_pre_routing+0x90f/0x1560 net/bridge/br_netfilter_hooks.c:513
 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:291 [inline]
 br_handle_frame+0xcdd/0x1520 net/bridge/br_input.c:442
 __netif_receive_skb_core.constprop.0+0x6c5/0x3530 net/core/dev.c:6089
 __netif_receive_skb_one_core+0xb0/0x1e0 net/core/dev.c:6200
 __netif_receive_skb+0x1f/0x120 net/core/dev.c:6315
 process_backlog+0x37a/0x1580 net/core/dev.c:6666
 __napi_poll.constprop.0+0xaf/0x450 net/core/dev.c:7733
 napi_poll net/core/dev.c:7796 [inline]
 net_rx_action+0xa40/0xf20 net/core/dev.c:7953
 handle_softirqs+0x1ea/0xa00 kernel/softirq.c:622
 do_softirq kernel/softirq.c:523 [inline]
 do_softirq+0xac/0xe0 kernel/softirq.c:510
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0xf8/0x120 kernel/softirq.c:450
 spin_unlock_bh include/linux/spinlock.h:396 [inline]
 ptr_ring_consume_bh include/linux/ptr_ring.h:377 [inline]
 wg_packet_encrypt_worker+0x254/0xbd0 drivers/net/wireguard/send.c:293
 process_one_work+0xa0e/0x1980 kernel/workqueue.c:3314
 process_scheduled_works kernel/workqueue.c:3397 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3478
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>