INFO: task syz.5.970:9823 blocked for more than 148 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.5.970 state:D stack:27864 pid:9823 tgid:9822 ppid:9132 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1295/0x67a0 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7283 schedule_timeout+0x1b2/0x280 kernel/time/sleep_timeout.c:75 ___down_common kernel/locking/semaphore.c:289 [inline] __down_common+0x371/0x8a0 kernel/locking/semaphore.c:314 down+0x74/0xa0 kernel/locking/semaphore.c:100 console_lock+0x5b/0xa0 kernel/printk/printk.c:2896 class_console_lock_constructor include/linux/console.h:736 [inline] con_set_cmap+0xbe/0x840 drivers/tty/vt/vt.c:4845 vt_io_ioctl drivers/tty/vt/vt_ioctl.c:515 [inline] vt_ioctl+0xe36/0x31a0 drivers/tty/vt/vt_ioctl.c:747 tty_ioctl+0x26a/0x1640 drivers/tty/tty_io.c:2792 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x10b/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f989b39ce59 RSP: 002b:00007f989c17a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f989b615fa0 RCX: 00007f989b39ce59 RDX: 00002000000000c0 RSI: 0000000000004b71 RDI: 0000000000000005 RBP: 00007f989b432d6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f989b616038 R14: 00007f989b615fa0 R15: 00007ffebe61ba78 Showing all locks held in the system: 1 lock held by kthreadd/2: 3 locks held by kworker/0:0/9: 3 locks held by kworker/0:1/10: 4 locks held by kworker/u8:0/12: 3 locks held by kworker/u8:1/13: 1 lock held by khungtaskd/30: #0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775 4 locks held by kworker/u8:2/35: 2 locks held by kworker/1:1/42: 2 locks held by kworker/u8:4/58: 3 locks held by kworker/u8:5/82: 4 locks held by kworker/u8:7/1039: 4 locks held by kworker/u8:8/1106: 2 locks held by kworker/u8:9/1120: 4 locks held by kworker/0:2/1626: 1 lock held by klogd/4968: 2 locks held by dhcpcd/5273: 1 lock held by crond/5349: 2 locks held by getty/5368: #0: ffff8880382990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 drivers/tty/n_tty.c:2211 2 locks held by syz-executor/5597: 5 locks held by syz-executor/5612: 3 locks held by kworker/0:3/5613: 3 locks held by kworker/0:5/5721: 3 locks held by kworker/0:6/5722: 5 locks held by kworker/0:7/5729: 2 locks held by kworker/1:5/5742: 3 locks held by kworker/u8:10/9077: 2 locks held by syz-executor/9132: 3 locks held by kworker/u8:11/9362: 4 locks held by kworker/u8:12/9363: 4 locks held by kworker/u8:13/9364: 4 locks held by kworker/u8:14/9365: 4 locks held by kworker/u8:15/9366: 4 locks held by kworker/u8:16/9367: 3 locks held by kworker/u8:18/9369: 3 locks held by kworker/u8:19/9370: 4 locks held by kworker/u8:20/9371: 3 locks held by kworker/u8:22/9373: 6 locks held by syz.0.969/9812: 1 lock held by syz.3.971/9827: 6 locks held by kworker/0:8/9835: ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x1d7/0x230 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x141/0x190 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xcb1/0x1030 kernel/hung_task.c:561 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 9835 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker RIP: 0010:mark_usage kernel/locking/lockdep.c:4642 [inline] RIP: 0010:__lock_acquire+0x102f/0x2630 kernel/locking/lockdep.c:5191 Code: 44 8b 44 24 10 85 c0 74 10 44 8b 0d 4b a4 f3 0e 45 85 c9 0f 84 16 06 00 00 90 31 c0 e9 d0 f1 ff ff 89 4c 24 08 ba 05 00 00 00 <48> 89 de 48 89 ef e8 56 e3 ff ff 8b 4c 24 08 85 c0 0f 85 08 f4 ff RSP: 0018:ffffc90000006c10 EFLAGS: 00000002 RAX: 0000000000000000 RBX: ffff888078fd5658 RCX: 0000000000000005 RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000020 RBP: ffff888078fd4a00 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000005 R15: 0000000000000003 FS: 0000000000000000(0000) GS:ffff88812436a000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f964f800000 CR3: 000000000e596000 CR4: 00000000003526f0 Call Trace: lock_acquire kernel/locking/lockdep.c:5868 [inline] lock_acquire+0x1b1/0x370 kernel/locking/lockdep.c:5825 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:132 [inline] _raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:166 __debug_check_no_obj_freed lib/debugobjects.c:1105 [inline] debug_check_no_obj_freed+0x1c9/0x630 lib/debugobjects.c:1146 slab_free_hook mm/slub.c:2620 [inline] slab_free mm/slub.c:6251 [inline] kmem_cache_free+0x3c4/0x6c0 mm/slub.c:6378 __skb_ext_put+0x102/0x2f0 net/core/skbuff.c:7232 skb_ext_reset include/linux/skbuff.h:5116 [inline] skb_ext_reset include/linux/skbuff.h:5113 [inline] skb_release_head_state+0x2c8/0x400 net/core/skbuff.c:1181 skb_release_all net/core/skbuff.c:1187 [inline] __kfree_skb net/core/skbuff.c:1203 [inline] sk_skb_reason_drop+0xc4/0x1b0 net/core/skbuff.c:1241 kfree_skb_reason include/linux/skbuff.h:1322 [inline] kfree_skb include/linux/skbuff.h:1331 [inline] ip6_mc_input+0x832/0xf50 net/ipv6/ip6_input.c:638 dst_input include/net/dst.h:480 [inline] ip6_rcv_finish+0x294/0x300 net/ipv6/ip6_input.c:119 ip_sabotage_in+0x21e/0x290 net/bridge/br_netfilter_hooks.c:988 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_slow+0xbf/0x220 net/netfilter/core.c:619 nf_hook.constprop.0+0x2a6/0x750 include/linux/netfilter.h:273 NF_HOOK include/linux/netfilter.h:316 [inline] ipv6_rcv+0xa4/0x3d0 net/ipv6/ip6_input.c:351 __netif_receive_skb_one_core+0x12d/0x1e0 net/core/dev.c:6202 __netif_receive_skb+0x1f/0x120 net/core/dev.c:6315 netif_receive_skb_internal net/core/dev.c:6401 [inline] netif_receive_skb+0x13b/0x7f0 net/core/dev.c:6460 NF_HOOK include/linux/netfilter.h:318 [inline] NF_HOOK include/linux/netfilter.h:312 [inline] br_pass_frame_up+0x346/0x490 net/bridge/br_input.c:70 br_handle_frame_finish+0xa74/0x1f60 net/bridge/br_input.c:235 br_nf_hook_thresh+0x30d/0x420 net/bridge/br_netfilter_hooks.c:1165 br_nf_pre_routing_finish_ipv6+0x659/0xdd0 net/bridge/br_netfilter_ipv6.c:153 NF_HOOK include/linux/netfilter.h:318 [inline] br_nf_pre_routing_ipv6+0x39c/0x8b0 net/bridge/br_netfilter_ipv6.c:183 br_nf_pre_routing+0x90f/0x1560 net/bridge/br_netfilter_hooks.c:513 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_bridge_pre net/bridge/br_input.c:291 [inline] br_handle_frame+0xcdd/0x1520 net/bridge/br_input.c:442 __netif_receive_skb_core.constprop.0+0x6c5/0x3530 net/core/dev.c:6089 __netif_receive_skb_one_core+0xb0/0x1e0 net/core/dev.c:6200 __netif_receive_skb+0x1f/0x120 net/core/dev.c:6315 process_backlog+0x37a/0x1580 net/core/dev.c:6666 __napi_poll.constprop.0+0xaf/0x450 net/core/dev.c:7733 napi_poll net/core/dev.c:7796 [inline] net_rx_action+0xa40/0xf20 net/core/dev.c:7953 handle_softirqs+0x1ea/0xa00 kernel/softirq.c:622 do_softirq kernel/softirq.c:523 [inline] do_softirq+0xac/0xe0 kernel/softirq.c:510 __local_bh_enable_ip+0xf8/0x120 kernel/softirq.c:450 spin_unlock_bh include/linux/spinlock.h:396 [inline] ptr_ring_consume_bh include/linux/ptr_ring.h:377 [inline] wg_packet_encrypt_worker+0x254/0xbd0 drivers/net/wireguard/send.c:293 process_one_work+0xa0e/0x1980 kernel/workqueue.c:3314 process_scheduled_works kernel/workqueue.c:3397 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3478 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245