INFO: task kworker/1:10:15560 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:10 state:D stack:30376 pid:15560 tgid:15560 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x14bc/0x5000 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0x165/0x360 kernel/sched/core.c:6960 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017 kthread+0x2bc/0x8a0 kernel/kthread.c:451 ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Showing all locks held in the system: 5 locks held by kworker/1:0/24: 1 lock held by khungtaskd/31: #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 2 locks held by kworker/1:1/39: 2 locks held by kworker/1:2/789: 1 lock held by udevd/5192: 2 locks held by getty/5583: #0: ffff88814d75f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 drivers/tty/n_tty.c:2211 4 locks held by udevd/5834: 3 locks held by kworker/u9:3/5839: #0: ffff88801e32e948 ((wq_completion)hci9){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3232 [inline] #0: ffff88801e32e948 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 kernel/workqueue.c:3340 #1: ffffc90003e4fb80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3233 [inline] #1: ffffc90003e4fb80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 kernel/workqueue.c:3340 #2: ffff8880689d8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 net/bluetooth/hci_sync.c:331 2 locks held by kworker/R-wg-cr/5872: 2 locks held by kworker/R-wg-cr/5878: 2 locks held by kworker/R-wg-cr/5879: 2 locks held by kworker/R-wg-cr/5881: 2 locks held by kworker/R-wg-cr/5884: 2 locks held by kworker/R-wg-cr/5888: 2 locks held by kworker/1:4/5914: 2 locks held by kworker/1:5/5942: 2 locks held by kworker/1:6/5973: 2 locks held by kworker/1:7/5986: 4 locks held by kworker/u8:17/6051: #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3232 [inline] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 kernel/workqueue.c:3340 #1: ffffc9000464fb80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3233 [inline] #1: ffffc9000464fb80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 kernel/workqueue.c:3340 #2: ffffffff8f304bb0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 net/core/net_namespace.c:670 #3: ffff8880549a54e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 drivers/net/wireguard/device.c:249 2 locks held by kworker/1:9/6638: 2 locks held by kworker/1:3/15441: 2 locks held by kworker/R-wg-cr/15806: 2 locks held by kworker/R-wg-cr/15809: 2 locks held by kworker/R-wg-cr/15813: 2 locks held by kworker/R-wg-cr/15814: 2 locks held by kworker/R-wg-cr/15983: 2 locks held by kworker/R-wg-cr/15985: 2 locks held by kworker/R-wg-cr/16120: 1 lock held by kworker/R-wg-cr/16122: 1 lock held by syz-executor/16163: #0: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:343 [inline] #0: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 kernel/rcu/tree_exp.h:956 2 locks held by kworker/R-wg-cr/16219: 2 locks held by kworker/R-wg-cr/16222: 2 locks held by kworker/R-wg-cr/16229: 1 lock held by kworker/R-wg-cr/16346: 2 locks held by kworker/R-wg-cr/16348: 2 locks held by kworker/R-wg-cr/16998: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xf95/0xfe0 kernel/hung_task.c:515 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 5886 Comm: kworker/R-wg-cr Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Workqueue: 0x0 (wg-crypt-wg1) RIP: 0010:ath9k_hif_usb_reg_in_cb+0x29/0x6f0 drivers/net/wireless/ath/ath9k/hif_usb.c:736 Code: 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 20 48 89 fb 48 bd 00 00 00 00 00 fc ff df e8 6c 81 26 fb 48 89 5c 24 08 <4c> 8d ab b0 00 00 00 4c 89 eb 48 c1 eb 03 80 3c 2b 00 74 08 4c 89 RSP: 0018:ffffc90000a08918 EFLAGS: 00000046 RAX: ffffffff869b30e4 RBX: ffff888069359300 RCX: ffff8880548a9e80 RDX: 0000000000000100 RSI: ffffffff8d9791a8 RDI: ffff888069359300 RBP: dffffc0000000000 R08: ffffffff8df96003 R09: 1ffffffff1bf2c00 R10: dffffc0000000000 R11: ffffffff869b30c0 R12: ffff888027f7f298 R13: dffffc0000000000 R14: 0000000000000006 R15: ffff8881433f2010 FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31215ff8 CR3: 00000000754a0000 CR4: 0000000000350ef0 Call Trace: __usb_hcd_giveback_urb+0x376/0x540 drivers/usb/core/hcd.c:1661 dummy_timer+0x85f/0x45b0 drivers/usb/gadget/udc/dummy_hcd.c:1995 __run_hrtimer kernel/time/hrtimer.c:1777 [inline] __hrtimer_run_queues+0x51c/0xc30 kernel/time/hrtimer.c:1841 hrtimer_run_softirq+0x187/0x2b0 kernel/time/hrtimer.c:1858 handle_softirqs+0x27d/0x850 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:723 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1056 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:worker_detach_from_pool kernel/workqueue.c:2732 [inline] RIP: 0010:rescuer_thread+0x65e/0xed0 kernel/workqueue.c:3560 Code: 03 80 3c 28 00 74 08 48 89 df e8 4d 5d 9b 00 48 b8 00 01 00 00 00 00 ad de 48 83 c0 22 48 89 03 41 80 3c 2f 00 48 8b 5c 24 48 <74> 08 4c 89 f7 e8 28 5d 9b 00 49 c7 06 00 00 00 00 48 c7 c7 c0 7c RSP: 0018:ffffc9000424fc38 EFLAGS: 00000246 RAX: dead000000000122 RBX: ffff88807c853c00 RCX: ffff8880548a9e80 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88803316fc68 RBP: dffffc0000000000 R08: ffffffff8f822077 R09: 1ffffffff1f0440e R10: dffffc0000000000 R11: fffffbfff1f0440f R12: ffff88803316fc60 R13: ffff8880548a9e98 R14: ffff88803316fc58 R15: 1ffff1100662df8b kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246