INFO: task kworker/0:1:27429 blocked for more than 145 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:1 state:D stack:20840 pid:27429 tgid:27429 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_power_efficient reg_check_chans_work Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7326 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7bf/0x1550 kernel/locking/mutex.c:821 class_wiphy_constructor include/net/cfg80211.h:6884 [inline] reg_leave_invalid_chans net/wireless/reg.c:2457 [inline] reg_check_chans_work+0x1a1/0x1110 net/wireless/reg.c:2472 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task syz.1.11686:12580 blocked for more than 145 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.11686 state:D stack:26728 pid:12580 tgid:12578 ppid:9101 task_flags:0x400040 flags:0x08080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7326 schedule_timeout+0xc0/0x2c0 kernel/time/sleep_timeout.c:75 ___down_common kernel/locking/semaphore.c:293 [inline] __down_common+0x3b7/0x850 kernel/locking/semaphore.c:318 down+0x80/0xd0 kernel/locking/semaphore.c:100 console_lock+0x58/0x90 kernel/printk/printk.c:2896 class_console_lock_constructor include/linux/console.h:734 [inline] con_flush_chars drivers/tty/vt/vt.c:3730 [inline] con_write+0x80/0x290 drivers/tty/vt/vt.c:3662 process_output_block drivers/tty/n_tty.c:557 [inline] n_tty_write+0xd49/0x11e0 drivers/tty/n_tty.c:2366 iterate_tty_write drivers/tty/tty_io.c:1006 [inline] file_tty_write+0x509/0x9c0 drivers/tty/tty_io.c:1081 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x612/0xba0 fs/read_write.c:687 ksys_write+0x150/0x270 fs/read_write.c:739 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline] __do_fast_syscall_32+0x23e/0x6f0 arch/x86/entry/syscall_32.c:307 do_fast_syscall_32+0x33/0x70 arch/x86/entry/syscall_32.c:332 entry_SYSENTER_compat_after_hwframe+0x84/0x8e RIP: 0023:0xf7f660ec RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001040 RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 INFO: task syz.1.11686:12584 blocked for more than 145 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.11686 state:D stack:28536 pid:12584 tgid:12578 ppid:9101 task_flags:0x400040 flags:0x08080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7326 schedule_timeout+0xc0/0x2c0 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:100 [inline] __wait_for_common kernel/sched/completion.c:121 [inline] wait_for_common kernel/sched/completion.c:132 [inline] wait_for_completion+0x2ca/0x5e0 kernel/sched/completion.c:153 __flush_work+0xa63/0xca0 kernel/workqueue.c:4374 n_tty_read+0x9f2/0x1360 drivers/tty/n_tty.c:2250 iterate_tty_read drivers/tty/tty_io.c:847 [inline] tty_read+0x296/0x6e0 drivers/tty/tty_io.c:922 new_sync_read fs/read_write.c:493 [inline] vfs_read+0x595/0xa80 fs/read_write.c:574 ksys_read+0x150/0x270 fs/read_write.c:716 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline] __do_fast_syscall_32+0x23e/0x6f0 arch/x86/entry/syscall_32.c:307 do_fast_syscall_32+0x33/0x70 arch/x86/entry/syscall_32.c:332 entry_SYSENTER_compat_after_hwframe+0x84/0x8e RIP: 0023:0xf7f660ec RSP: 002b:00000000f540550c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080002080 RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 Showing all locks held in the system: 2 locks held by kworker/0:0/9: 2 locks held by kworker/u8:0/12: #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90000117c40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90000117c40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 1 lock held by khungtaskd/30: #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 2 locks held by kswapd0/84: 4 locks held by kworker/u8:6/201: #0: ffff88802f639140 ((wq_completion)wg-kex-wg0#45){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88802f639140 ((wq_completion)wg-kex-wg0#45){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90003047c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90003047c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff888022fe5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 drivers/net/wireguard/noise.c:529 #3: ffff88805df5aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 drivers/net/wireguard/noise.c:530 1 lock held by hwrng/776: 4 locks held by kworker/u8:7/1021: 2 locks held by kworker/R-bat_e/3228: 1 lock held by klogd/4980: 1 lock held by udevd/4991: 4 locks held by dhcpcd/5286: 2 locks held by getty/5374: #0: ffff888036a200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211 1 lock held by syz-executor/5608: 2 locks held by kworker/1:4/5688: 3 locks held by kworker/0:8/15322: #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc9000507fc40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc9000507fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffffffff9002dec0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104 1 lock held by kworker/u8:10/23834: 4 locks held by kworker/u8:11/23995: 4 locks held by kworker/0:1/27429: #0: ffff88801b029d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88801b029d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90003b87c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90003b87c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffffffff9002dec0 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 net/wireless/reg.c:2469 #3: ffff888064f107a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6884 [inline] #3: ffff888064f107a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_leave_invalid_chans net/wireless/reg.c:2457 [inline] #3: ffff888064f107a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x1a1/0x1110 net/wireless/reg.c:2472 3 locks held by kworker/1:0/29499: 2 locks held by kworker/1:2/29500: 6 locks held by kworker/u9:1/31351: #0: ffff88807d123940 ((wq_completion)hci1){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88807d123940 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc900048d7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc900048d7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff88803e9c0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 net/bluetooth/hci_sync.c:331 #3: ffff88803e9c00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 net/bluetooth/hci_sync.c:5894 #4: ffffffff901b5700 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm include/net/bluetooth/hci_core.h:2136 [inline] #4: ffffffff901b5700 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 net/bluetooth/hci_conn.c:1410 #5: ffff88802a9ba2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x520 net/bluetooth/l2cap_core.c:1808 2 locks held by kworker/0:2/32629: 3 locks held by kworker/u8:2/2801: #0: ffff8880320d3940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff8880320d3940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc900066d7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc900066d7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffffffff9002dec0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #2: ffffffff9002dec0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 net/ipv6/addrconf.c:4769 6 locks held by kworker/u8:14/2807: 4 locks held by kworker/u8:15/2808: 2 locks held by udevd/6408: 2 locks held by udevd/6779: 1 lock held by udevd/6989: 2 locks held by syz-executor/7129: 4 locks held by kworker/0:6/7307: 2 locks held by udevd/7547: 4 locks held by kworker/u8:1/8016: #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90004a1fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90004a1fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff8880619b07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6884 [inline] #2: ffff8880619b07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:524 #3: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:343 [inline] #3: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 kernel/rcu/tree_exp.h:961 4 locks held by kworker/u8:4/8017: 3 locks held by kworker/u8:5/8018: 4 locks held by kworker/u8:8/8019: 4 locks held by kworker/u8:9/8020: 4 locks held by kworker/u8:12/8021: 3 locks held by kworker/u8:13/8022: #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc900052c7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc900052c7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff88803ee507a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6884 [inline] #2: ffff88803ee507a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:524 3 locks held by kworker/u8:16/8023: 4 locks held by kworker/u8:17/8024: 3 locks held by kworker/u8:18/8025: 4 locks held by kworker/u8:21/8028: 7 locks held by kworker/u8:22/8029: 4 locks held by kworker/u8:23/8030: 4 locks held by kworker/u8:24/8034: 4 locks held by kworker/u8:25/8036: 4 locks held by kworker/u8:26/8037: 4 locks held by kworker/u8:27/8038: 3 locks held by kworker/u8:28/8039: 2 locks held by kworker/1:1/8295: 4 locks held by kworker/0:11/8308: 4 locks held by kworker/u8:29/9802: 4 locks held by kworker/u8:30/9803: 4 locks held by kworker/u8:31/9804: #0: ffff88802f639140 ((wq_completion)wg-kex-wg0#45){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88802f639140 ((wq_completion)wg-kex-wg0#45){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc9000505fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc9000505fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffff888022fe5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 drivers/net/wireguard/noise.c:529 #3: ffff88805df58330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 drivers/net/wireguard/noise.c:530 4 locks held by kworker/u8:34/9807: 4 locks held by kworker/u8:35/9808: 1 lock held by syz.4.11682/12567: 3 locks held by syz.0.11684/12575: 3 locks held by syz.2.11685/12586: 4 locks held by syz.1.11686/12580: #0: ffff88802e8ee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffff88802e8ee128 (&tty->atomic_write_lock){+.+.}-{4:4}, at: tty_write_lock drivers/tty/tty_io.c:939 [inline] #1: ffff88802e8ee128 (&tty->atomic_write_lock){+.+.}-{4:4}, at: iterate_tty_write drivers/tty/tty_io.c:958 [inline] #1: ffff88802e8ee128 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write+0x1e4/0x9c0 drivers/tty/tty_io.c:1081 #2: ffff88802e8ee2c8 (&tty->termios_rwsem){++++}-{4:4}, at: class_rwsem_read_constructor include/linux/rwsem.h:259 [inline] #2: ffff88802e8ee2c8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_write+0x1f5/0x11e0 drivers/tty/n_tty.c:2349 #3: ffffc9000320b370 (&ldata->output_lock){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline] #3: ffffc9000320b370 (&ldata->output_lock){+.+.}-{4:4}, at: process_output_block drivers/tty/n_tty.c:513 [inline] #3: ffffc9000320b370 (&ldata->output_lock){+.+.}-{4:4}, at: n_tty_write+0x66d/0x11e0 drivers/tty/n_tty.c:2366 2 locks held by syz.1.11686/12584: #0: ffff88802e8ee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000320b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:122 nmi_trigger_cpumask_backtrace+0x17a/0x380 lib/nmi_backtrace.c:65 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xfd7/0x1030 kernel/hung_task.c:561 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 2807 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker RIP: 0010:__debug_check_no_obj_freed lib/debugobjects.c:1163 [inline] RIP: 0010:debug_check_no_obj_freed+0x166/0x450 lib/debugobjects.c:1201 Code: 0f 84 39 02 00 00 4d 89 fd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 4c 89 ff e8 dd 07 56 fd 49 8b 1f <4d> 8d 67 18 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 RSP: 0018:ffffc90000a08728 EFLAGS: 00000046 RAX: dffffc0000000000 RBX: ffff88804d115ee0 RCX: dffffc0000000001 RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000a08680 RBP: ffff88804ec92bb0 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff520001410d0 R12: ffff88807613be88 R13: 1ffff11009a22bd5 R14: 0000000000000083 R15: ffff88804d115ea8 FS: 0000000000000000(0000) GS:ffff88812504b000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000080175018 CR3: 000000005ebe6000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: slab_free_hook mm/slub.c:2608 [inline] slab_free mm/slub.c:6377 [inline] kmem_cache_free+0xfd/0x650 mm/slub.c:6504 nf_conntrack_free+0x55d/0x710 net/netfilter/nf_conntrack_core.c:1742 nf_ct_put include/net/netfilter/nf_conntrack.h:185 [inline] nf_conntrack_in+0x9a9/0x15a0 net/netfilter/nf_conntrack_core.c:2061 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_slow+0xc5/0x220 net/netfilter/core.c:619 nf_hook include/linux/netfilter.h:273 [inline] NF_HOOK+0x21f/0x3c0 include/linux/netfilter.h:316 __netif_receive_skb_one_core net/core/dev.c:6212 [inline] __netif_receive_skb net/core/dev.c:6325 [inline] process_backlog+0xa34/0x1860 net/core/dev.c:6676 __napi_poll+0xaa/0x330 net/core/dev.c:7735 napi_poll net/core/dev.c:7798 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:7955 handle_softirqs+0x225/0x840 kernel/softirq.c:622 do_softirq+0x76/0xd0 kernel/softirq.c:523 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450 blake2s_compress+0xfa/0x1c00 lib/crypto/x86/blake2s.h:42 blake2s_final+0x10f/0x270 lib/crypto/blake2s.c:142 hmac+0x2dc/0x3b0 drivers/net/wireguard/noise.c:333 kdf+0x12d/0x290 drivers/net/wireguard/noise.c:367 mix_dh drivers/net/wireguard/noise.c:413 [inline] wg_noise_handshake_create_initiation+0x29e/0x810 drivers/net/wireguard/noise.c:550 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:34 [inline] wg_packet_handshake_send_worker+0x18c/0x370 drivers/net/wireguard/send.c:51 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog net_ratelimit: 1 callbacks suppressed GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog