INFO: task syz-executor:18955 blocked for more than 143 seconds. Tainted: G U L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:27624 pid:18955 tgid:18955 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776 rtnl_net_lock include/linux/rtnetlink.h:130 [inline] inet_rtm_newaddr+0x30c/0x1540 net/ipv4/devinet.c:978 rtnetlink_rcv_msg+0x95e/0xe90 net/core/rtnetlink.c:6958 netlink_rcv_skb+0x158/0x420 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5aa/0x870 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x8c8/0xdd0 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] __sys_sendto+0x4a3/0x520 net/socket.c:2206 __do_sys_sendto net/socket.c:2213 [inline] __se_sys_sendto net/socket.c:2209 [inline] __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2209 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa238b9165c RSP: 002b:00007ffe360c6690 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007fa239914620 RCX: 00007fa238b9165c RDX: 0000000000000028 RSI: 00007fa239914670 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffe360c66e4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 R13: 0000000000000000 R14: 00007fa239914670 R15: 0000000000000000 INFO: task syz.0.2638:18971 blocked for more than 143 seconds. Tainted: G U L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.2638 state:D stack:27496 pid:18971 tgid:18970 ppid:17696 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776 wiphy_lock include/net/cfg80211.h:6348 [inline] nl80211_dump_wiphy+0x280/0x800 net/wireless/nl80211.c:3388 genl_dumpit+0x125/0x230 net/netlink/genetlink.c:1027 netlink_dump+0x539/0xd30 net/netlink/af_netlink.c:2325 __netlink_dump_start+0x6d6/0x990 net/netlink/af_netlink.c:2440 genl_family_rcv_msg_dumpit+0x1e2/0x2e0 net/netlink/genetlink.c:1076 genl_family_rcv_msg net/netlink/genetlink.c:1192 [inline] genl_rcv_msg+0x46e/0x800 net/netlink/genetlink.c:1210 netlink_rcv_skb+0x158/0x420 net/netlink/af_netlink.c:2550 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5aa/0x870 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x8c8/0xdd0 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] ____sys_sendmsg+0xa5d/0xc30 net/socket.c:2592 ___sys_sendmsg+0x134/0x1d0 net/socket.c:2646 __sys_sendmsg+0x16d/0x220 net/socket.c:2678 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb781b8f7c9 RSP: 002b:00007fb77fdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fb781de5fa0 RCX: 00007fb781b8f7c9 RDX: 000000000000c004 RSI: 0000200000000000 RDI: 0000000000000003 RBP: 00007fb781c13f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fb781de6038 R14: 00007fb781de5fa0 R15: 00007ffd30435988 INFO: task syz.0.2638:18972 blocked for more than 143 seconds. Tainted: G U L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.2638 state:D stack:28728 pid:18972 tgid:18970 ppid:17696 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7017 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc69/0x1ca0 kernel/locking/mutex.c:776 netlink_dump+0xa25/0xd30 net/netlink/af_netlink.c:2267 netlink_recvmsg+0x7dc/0xa90 net/netlink/af_netlink.c:1976 sock_recvmsg_nosec net/socket.c:1078 [inline] sock_recvmsg+0x1f9/0x250 net/socket.c:1100 ____sys_recvmsg+0x218/0x6b0 net/socket.c:2812 ___sys_recvmsg+0x114/0x1a0 net/socket.c:2854 do_recvmmsg+0x2fe/0x750 net/socket.c:2949 __sys_recvmmsg net/socket.c:3023 [inline] __do_sys_recvmmsg net/socket.c:3046 [inline] __se_sys_recvmmsg net/socket.c:3039 [inline] __x64_sys_recvmmsg+0x22a/0x280 net/socket.c:3039 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb781b8f7c9 RSP: 002b:00007fb77fdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b RAX: ffffffffffffffda RBX: 00007fb781de6090 RCX: 00007fb781b8f7c9 RDX: 000000000000010a RSI: 0000200000000180 RDI: 0000000000000003 RBP: 00007fb781c13f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fb781de6128 R14: 00007fb781de6090 R15: 00007ffd30435988 Showing all locks held in the system: 2 locks held by kworker/0:0/9: 1 lock held by khungtaskd/31: #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline] #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6775 1 lock held by khugepaged/38: #0: ffffffff8e506548 (lock#5){+.+.}-{4:4}, at: __lru_add_drain_all+0x6e/0x6f0 mm/swap.c:840 3 locks held by kworker/1:1/48: #0: ffff88813ff56948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232 #1: ffffc90000b87c90 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233 #2: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x91/0x1190 net/wireless/reg.c:2453 4 locks held by kworker/1:2/914: #0: ffff888058a75948 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232 #1: ffffc90003697c90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233 #2: ffff888027b79308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 drivers/net/wireguard/noise.c:598 #3: ffff888056094890 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 drivers/net/wireguard/noise.c:632 4 locks held by kworker/0:2/978: 1 lock held by udevd/5203: 2 locks held by kworker/0:3/5839: 2 locks held by kworker/0:5/5878: 2 locks held by kworker/0:7/5886: 4 locks held by kworker/1:3/5899: #0: ffff88807b37ed48 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232 #1: ffffc900044bfc90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233 #2: ffff88805c1e1308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 drivers/net/wireguard/noise.c:598 #3: ffff888034839708 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 drivers/net/wireguard/noise.c:632 3 locks held by kworker/u10:0/7221: 3 locks held by kworker/u10:1/7224: 4 locks held by kworker/u10:3/7229: 3 locks held by kworker/u10:4/7230: 4 locks held by kworker/u10:6/7235: 3 locks held by kworker/u10:7/7241: 2 locks held by kworker/u10:8/7244: 3 locks held by kworker/u10:9/7249: #0: ffff88814dad2948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232 #1: ffffc900033e7c90 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233 #2: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #2: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 net/ipv6/addrconf.c:4734 3 locks held by kworker/u10:12/7313: 3 locks held by kworker/u10:13/7462: 4 locks held by kworker/u10:14/7468: #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232 #1: ffffc9000b397c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233 #2: ffffffff9012e6d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 net/core/net_namespace.c:670 #3: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x120 net/wireless/core.c:1693 3 locks held by kworker/u10:16/7633: 4 locks held by kworker/u10:17/7634: 3 locks held by kworker/u10:18/7636: 2 locks held by kworker/u10:19/7637: 3 locks held by kworker/u10:21/7639: 1 lock held by syz-executor/10479: #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: tun_detach drivers/net/tun.c:634 [inline] #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 drivers/net/tun.c:3436 3 locks held by kworker/u11:3/10483: 4 locks held by kworker/u10:22/10752: 4 locks held by kworker/u10:24/10754: 4 locks held by kworker/u10:25/10755: 4 locks held by kworker/u10:27/10757: #0: ffff8880126a1148 ((wq_completion)wg-kex-wg2#15){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232 #1: ffffc9000bb77c90 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233 #2: ffff8880635cd308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 drivers/net/wireguard/noise.c:529 #3: ffff88807c1a8338 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 drivers/net/wireguard/noise.c:530 4 locks held by kworker/u10:29/10759: 4 locks held by kworker/u10:30/10760: 4 locks held by kworker/u10:33/10763: 3 locks held by kworker/u10:34/10764: 3 locks held by kworker/u10:35/10767: 4 locks held by kworker/u10:37/10769: 3 locks held by kworker/u10:39/10771: 4 locks held by kworker/1:7/10942: #0: ffff88807f21c148 ((wq_completion)wg-kex-wg1#18){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232 #1: ffffc9000bee7c90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233 #2: ffff888041935308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 drivers/net/wireguard/noise.c:598 #3: ffff88807f4134c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 drivers/net/wireguard/noise.c:632 3 locks held by kworker/u10:40/11529: 4 locks held by kworker/u10:41/11530: 2 locks held by kworker/0:8/13290: 2 locks held by getty/14708: #0: ffff88814ece00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc9000c7cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 drivers/tty/n_tty.c:2211 6 locks held by kworker/u11:1/17074: 1 lock held by syz-executor/17364: #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: tun_detach drivers/net/tun.c:634 [inline] #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 drivers/net/tun.c:3436 1 lock held by syz.6.2637/18940: #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: tun_detach drivers/net/tun.c:634 [inline] #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 drivers/net/tun.c:3436 1 lock held by syz-executor/18955: #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 net/ipv4/devinet.c:978 1 lock held by syz-executor/18961: #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 net/ipv4/devinet.c:978 4 locks held by syz.0.2638/18971: #0: ffffffff901eb350 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffff8880343b46f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 net/netlink/af_netlink.c:2404 #2: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_dump_wiphy+0x47/0x800 net/wireless/nl80211.c:3363 #3: ffff888032f80788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: wiphy_lock include/net/cfg80211.h:6348 [inline] #3: ffff888032f80788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_dump_wiphy+0x280/0x800 net/wireless/nl80211.c:3388 1 lock held by syz.0.2638/18972: #0: ffff8880343b46f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: netlink_dump+0xa25/0xd30 net/netlink/af_netlink.c:2267 3 locks held by kworker/0:1/18974: #0: ffff888058a75948 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232 #1: ffffc9000b877c90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233 #2: ffff888056095278 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe80 drivers/net/wireguard/noise.c:822 2 locks held by kworker/0:4/18975: 2 locks held by kworker/0:9/18976: 1 lock held by syz-executor/18979: #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 net/ipv4/devinet.c:978 3 locks held by kworker/0:13/18983: 2 locks held by kworker/0:17/18989: 1 lock held by syz-executor/19006: #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 net/ipv4/devinet.c:978 3 locks held by kworker/0:19/19011: #0: ffff88807b37ed48 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 kernel/workqueue.c:3232 #1: ffffc9000cef7c90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 kernel/workqueue.c:3233 #2: ffff888034839708 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe80 drivers/net/wireguard/noise.c:822 1 lock held by syz-executor/19026: #0: ffff8880439d0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0xb0 net/bluetooth/hci_core.c:428 3 locks held by kworker/0:21/19028: 3 locks held by kworker/u10:2/19033: 1 lock held by syz-executor/19035: #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 net/ipv4/devinet.c:978 1 lock held by syz-executor/19036: #0: ffff8880207e4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0xb0 net/bluetooth/hci_core.c:428 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) Tainted: [U]=USER, [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x133/0x180 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xe66/0x1180 kernel/hung_task.c:515 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 18984 Comm: kworker/0:14 Tainted: G U L syzkaller #0 PREEMPT(full) Tainted: [U]=USER, [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker RIP: 0010:memcmp+0x8d/0x1d0 lib/string.c:694 Code: 42 0f b6 04 28 38 d0 7f 08 84 c0 0f 85 2f 01 00 00 48 89 ea 48 89 e9 0f b6 03 48 c1 ea 03 83 e1 07 42 0f b6 14 2a 38 ca 7f 08 <84> d2 0f 85 f9 00 00 00 0f b6 55 00 29 d0 74 a8 48 83 c4 08 5b 5d RSP: 0018:ffffc90000007720 EFLAGS: 00000297 RAX: 00000000000000ff RBX: ffffc9000000784c RCX: 0000000000000004 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffc9000000784c RBP: ffffc9000000783c R08: 0000000000000003 R09: 0000000000000003 R10: 0000000000000003 R11: ffff8880548995b8 R12: ffffc9000000785c R13: dffffc0000000000 R14: 00000000000002ff R15: ffff888054899500 FS: 0000000000000000(0000) GS:ffff8881248fd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5ff4e7ee9c CR3: 000000000e184000 CR4: 00000000003526f0 Call Trace: memcmp include/linux/fortify-string.h:727 [inline] __flow_hash_consistentify net/core/flow_dissector.c:1783 [inline] __flow_hash_from_keys+0x88/0x4e0 net/core/flow_dissector.c:1804 fib_multipath_hash_from_keys include/net/ip_fib.h:565 [inline] rt6_multipath_hash+0x691/0x1920 net/ipv6/route.c:2601 ip6_route_input+0xacd/0xc70 net/ipv6/route.c:2639 ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 net/ipv6/ip6_input.c:66 ip6_rcv_finish net/ipv6/ip6_input.c:77 [inline] NF_HOOK include/linux/netfilter.h:318 [inline] NF_HOOK include/linux/netfilter.h:312 [inline] ipv6_rcv+0x1e8/0x650 net/ipv6/ip6_input.c:311 __netif_receive_skb_one_core+0x12d/0x1e0 net/core/dev.c:6137 __netif_receive_skb+0x1d/0x160 net/core/dev.c:6250 process_backlog+0x4a2/0x1650 net/core/dev.c:6602 __napi_poll.constprop.0+0xb3/0x540 net/core/dev.c:7666 napi_poll net/core/dev.c:7729 [inline] net_rx_action+0x9f9/0xfa0 net/core/dev.c:7881 handle_softirqs+0x219/0x950 kernel/softirq.c:622 do_softirq kernel/softirq.c:523 [inline] do_softirq+0xb2/0xf0 kernel/softirq.c:510 __local_bh_enable_ip+0x100/0x120 kernel/softirq.c:450 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:936 [inline] wg_pubkey_hashtable_lookup+0x1b0/0x3f0 drivers/net/wireguard/peerlookup.c:69 wg_noise_handshake_consume_initiation+0x452/0x880 drivers/net/wireguard/noise.c:617 wg_receive_handshake_packet+0x219/0xbf0 drivers/net/wireguard/receive.c:144 wg_packet_handshake_receive_worker+0x16d/0x380 drivers/net/wireguard/receive.c:213 process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246