INFO: task syz-executor:1217 blocked for more than 122 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor state:D stack:0 pid:1217 tgid:1217 ppid:1 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:6063 [inline]
__schedule+0x1496/0x20b0 kernel/sched/core.c:7883
__schedule_loop kernel/sched/core.c:7960 [inline]
schedule+0xc5/0x240 kernel/sched/core.c:7975
schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8032
__mutex_lock_common kernel/locking/mutex.c:707 [inline]
__mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806
__mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136
mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285
rtnl_lock+0x19/0x20 net/core/rtnetlink.c:79
ip_tunnel_init_net+0x301/0x870 net/ipv4/ip_tunnel.c:1145
ipgre_init_net+0x28/0x30 net/ipv4/ip_gre.c:1070
ops_init+0x302/0x5d0 net/core/net_namespace.c:139
setup_net+0x227/0x9b0 net/core/net_namespace.c:356
copy_net_ns+0x4fc/0xa20 net/core/net_namespace.c:510
create_new_namespaces+0x390/0x6f0 kernel/nsproxy.c:110
unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228
ksys_unshare+0x4f9/0x920 kernel/fork.c:3385
__do_sys_unshare kernel/fork.c:3471 [inline]
__se_sys_unshare kernel/fork.c:3469 [inline]
__x64_sys_unshare+0x3c/0x50 kernel/fork.c:3469
x64_sys_call+0x2998/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:273
do_syscall_x64 arch/x86/entry/common.c:47 [inline]
do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fe8e6f9f427
RSP: 002b:00007fff2bdd2f28 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007fe8e7225f40 RCX: 00007fe8e6f9f427
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
RBP: 00007fe8e72267b8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
R13: 0000000000000003 R14: 00007fff2bdd3168 R15: 0000000000000000
INFO: task syz-executor:1220 blocked for more than 124 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor state:D stack:0 pid:1220 tgid:1220 ppid:1 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:6063 [inline]
__schedule+0x1496/0x20b0 kernel/sched/core.c:7883
__schedule_loop kernel/sched/core.c:7960 [inline]
schedule+0xc5/0x240 kernel/sched/core.c:7975
schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8032
__mutex_lock_common kernel/locking/mutex.c:707 [inline]
__mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806
__mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136
mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285
rtnl_lock+0x19/0x20 net/core/rtnetlink.c:79
ip_tunnel_init_net+0x301/0x870 net/ipv4/ip_tunnel.c:1145
erspan_init_net+0x2d/0x40 net/ipv4/ip_gre.c:1767
ops_init+0x302/0x5d0 net/core/net_namespace.c:139
setup_net+0x227/0x9b0 net/core/net_namespace.c:356
copy_net_ns+0x4fc/0xa20 net/core/net_namespace.c:510
create_new_namespaces+0x390/0x6f0 kernel/nsproxy.c:110
unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228
ksys_unshare+0x4f9/0x920 kernel/fork.c:3385
__do_sys_unshare kernel/fork.c:3471 [inline]
__se_sys_unshare kernel/fork.c:3469 [inline]
__x64_sys_unshare+0x3c/0x50 kernel/fork.c:3469
x64_sys_call+0x2998/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:273
do_syscall_x64 arch/x86/entry/common.c:47 [inline]
do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fde2259f427
RSP: 002b:00007ffc79625218 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007fde22825f40 RCX: 00007fde2259f427
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
RBP: 00007fde228267b8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
R13: 0000000000000003 R14: 00007ffc79625458 R15: 0000000000000000
INFO: task syz-executor:1222 blocked for more than 128 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor state:D stack:0 pid:1222 tgid:1222 ppid:1 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:6063 [inline]
__schedule+0x1496/0x20b0 kernel/sched/core.c:7883
__schedule_loop kernel/sched/core.c:7960 [inline]
schedule+0xc5/0x240 kernel/sched/core.c:7975
schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8032
__mutex_lock_common kernel/locking/mutex.c:707 [inline]
__mutex_lock+0x902/0x1b90 kernel/locking/mutex.c:806
__mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1136
mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285
rtnl_lock+0x19/0x20 net/core/rtnetlink.c:79
ip_tunnel_init_net+0x301/0x870 net/ipv4/ip_tunnel.c:1145
ipgre_tap_init_net+0x2d/0x40 net/ipv4/ip_gre.c:1748
ops_init+0x302/0x5d0 net/core/net_namespace.c:139
setup_net+0x227/0x9b0 net/core/net_namespace.c:356
copy_net_ns+0x4fc/0xa20 net/core/net_namespace.c:510
create_new_namespaces+0x390/0x6f0 kernel/nsproxy.c:110
unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228
ksys_unshare+0x4f9/0x920 kernel/fork.c:3385
__do_sys_unshare kernel/fork.c:3471 [inline]
__se_sys_unshare kernel/fork.c:3469 [inline]
__x64_sys_unshare+0x3c/0x50 kernel/fork.c:3469
x64_sys_call+0x2998/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:273
do_syscall_x64 arch/x86/entry/common.c:47 [inline]
do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fdeeb39f427
RSP: 002b:00007ffe6557e8e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007fdeeb625f40 RCX: 00007fdeeb39f427
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
RBP: 00007fdeeb6267b8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
R13: 0000000000000003 R14: 00007ffe6557eb28 R15: 0000000000000000
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
__dump_stack+0x21/0x30 lib/dump_stack.c:94
dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120
dump_stack+0x19/0x20 lib/dump_stack.c:129
nmi_cpu_backtrace+0x2ba/0x2d0 lib/nmi_backtrace.c:114
nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:63
arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41
cpumask_backtrace+0x1f/0x30 lib/nmi_backtrace.c:127
trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:267 [inline]
watchdog+0xe45/0xf90 kernel/hung_task.c:423
kthread+0x2c4/0x360 kernel/kthread.c:389
ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 0 to CPUs 1:
net_ratelimit: 115496 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:c5:eb:58:ae:ef, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:c5:eb:58:ae:ef, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 613 Comm: kworker/1:5 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker
RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:246 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x2b/0x90 kernel/kcov.c:314
Code: 0f 1e fa 55 48 89 e5 48 8b 45 08 65 48 8b 15 cc 70 7d 7e 65 8b 0d cd 70 7d 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b <83> ba ec 0b 00 00 00 74 52 8b 8a c8 0b 00 00 83 f9 03 75 47 48 8b
RSP: 0018:ffffc90000230168 EFLAGS: 00000246
RAX: ffffffff84fb73e4 RBX: 0000000000000017 RCX: 0000000000000100
RDX: ffff888133d89300 RSI: 0000000000000017 RDI: 0000000000000000
RBP: ffffc90000230168 R08: ffffc90000230540 R09: ffffc90000230550
R10: ffffc900002306b0 R11: fffff520000460da R12: dffffc0000000000
R13: ffff88812fc874c0 R14: 0000000000000003 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056518fbe5af8 CR3: 000000010b702000 CR4: 00000000003526b0
Call Trace:
rt6_score_route+0x34/0x880 net/ipv6/route.c:757
find_match+0x176/0x10d0 net/ipv6/route.c:789
__find_rr_leaf+0x249/0x840 net/ipv6/route.c:872
find_rr_leaf net/ipv6/route.c:893 [inline]
rt6_select net/ipv6/route.c:937 [inline]
fib6_table_lookup+0x2d0/0x980 net/ipv6/route.c:2245
ip6_pol_route+0x17a/0x1370 net/ipv6/route.c:2281
ip6_pol_route_input+0x5a/0x80 net/ipv6/route.c:2338
pol_lookup_func include/net/ip6_fib.h:647 [inline]
fib6_rule_lookup+0x4f1/0x6d0 net/ipv6/fib6_rules.c:117
ip6_route_input_lookup net/ipv6/route.c:2350 [inline]
ip6_route_input+0x60d/0x8d0 net/ipv6/route.c:2646
ip6_rcv_finish_core net/ipv6/ip6_input.c:66 [inline]
ip6_rcv_finish+0x15a/0x3c0 net/ipv6/ip6_input.c:77
NF_HOOK include/linux/netfilter.h:317 [inline]
ipv6_rcv+0xf1/0x240 net/ipv6/ip6_input.c:309
__netif_receive_skb_one_core net/core/dev.c:5801 [inline]
__netif_receive_skb net/core/dev.c:5914 [inline]
process_backlog+0x472/0xaf0 net/core/dev.c:6250
__napi_poll+0xcd/0x600 net/core/dev.c:6901
napi_poll net/core/dev.c:6970 [inline]
net_rx_action+0x5dc/0xd70 net/core/dev.c:7092
handle_softirqs+0x1aa/0x620 kernel/softirq.c:621
__do_softirq+0xf/0x16 kernel/softirq.c:659
do_softirq+0xb8/0x110 kernel/softirq.c:503
__local_bh_enable_ip+0x74/0x80 kernel/softirq.c:430
__raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline]
_raw_spin_unlock_bh+0x54/0x60 kernel/locking/spinlock.c:210
spin_unlock_bh include/linux/spinlock.h:396 [inline]
ptr_ring_consume_bh include/linux/ptr_ring.h:367 [inline]
wg_packet_encrypt_worker+0x2dd/0x1580 drivers/net/wireguard/send.c:293
process_one_work kernel/workqueue.c:3273 [inline]
process_scheduled_works+0x7f4/0x1060 kernel/workqueue.c:3354
worker_thread+0xc99/0x13f0 kernel/workqueue.c:3435
kthread+0x2c4/0x360 kernel/kthread.c:389
ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244