INFO: task kworker/0:4:5861 blocked for more than 144 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:4 state:D stack:24840 pid:5861 tgid:5861 ppid:2 task_flags:0x4208060 flags:0x00080000
Workqueue: events_power_efficient reg_check_chans_work
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x60e0 kernel/sched/core.c:6907
__schedule_loop kernel/sched/core.c:6989 [inline]
schedule+0xdd/0x390 kernel/sched/core.c:7004
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7061
__mutex_lock_common kernel/locking/mutex.c:692 [inline]
__mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776
class_wiphy_constructor include/net/cfg80211.h:6441 [inline]
reg_leave_invalid_chans net/wireless/reg.c:2452 [inline]
reg_check_chans_work+0x12f/0x11d0 net/wireless/reg.c:2467
process_one_work+0x9d7/0x1920 kernel/workqueue.c:3275
process_scheduled_works kernel/workqueue.c:3358 [inline]
worker_thread+0x5da/0xe40 kernel/workqueue.c:3439
kthread+0x370/0x450 kernel/kthread.c:467
ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Showing all locks held in the system:
2 locks held by kthreadd/2:
3 locks held by kworker/0:0/9:
3 locks held by kworker/u8:0/12:
3 locks held by kworker/u8:1/13:
3 locks held by kworker/1:0/24:
#0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 kernel/workqueue.c:3250
#1: ffffc900001e7d08 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 kernel/workqueue.c:3251
#2: ffffffff9060f228 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104
1 lock held by khungtaskd/30:
#0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:312 [inline]
#0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:850 [inline]
#0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775
3 locks held by kworker/u8:2/35:
2 locks held by kworker/1:1/42:
3 locks held by kworker/u8:3/49:
3 locks held by kworker/u8:4/58:
3 locks held by kworker/u8:5/85:
3 locks held by kworker/u8:6/152:
3 locks held by kworker/u8:7/682:
4 locks held by kworker/1:2/793:
5 locks held by kworker/u8:8/1105:
3 locks held by kworker/u8:9/1150:
2 locks held by kworker/R-bat_e/3404:
1 lock held by klogd/5165:
2 locks held by udevd/5176:
1 lock held by dhcpcd/5471:
4 locks held by dhcpcd/5472:
2 locks held by getty/5572:
#0: ffff8880390110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 drivers/tty/n_tty.c:2211
1 lock held by syz-executor/5803:
3 locks held by udevd/5809:
1 lock held by syz-executor/5811:
3 locks held by kworker/0:3/5816:
1 lock held by kworker/R-wg-cr/5846:
1 lock held by kworker/R-wg-cr/5847:
#0: ffffffff8e696d68 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2749 [inline]
#0: ffffffff8e696d68 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xb78/0x1490 kernel/workqueue.c:3610
1 lock held by kworker/R-wg-cr/5849:
#0: ffffffff8e696d68 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 kernel/workqueue.c:2691
1 lock held by kworker/R-wg-cr/5851:
#0: ffffffff8e696d68 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2749 [inline]
#0: ffffffff8e696d68 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xb78/0x1490 kernel/workqueue.c:3610
4 locks held by kworker/0:4/5861:
#0: ffff88813fe62148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 kernel/workqueue.c:3250
#1: ffffc90003e37d08 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 kernel/workqueue.c:3251
#2: ffffffff9060f228 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x91/0x11d0 net/wireless/reg.c:2464
#3: ffff888025db8788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6441 [inline]
#3: ffff888025db8788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_leave_invalid_chans net/wireless/reg.c:2452 [inline]
#3: ffff888025db8788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x12f/0x11d0 net/wireless/reg.c:2467
3 locks held by kworker/1:3/5868:
2 locks held by kworker/0:5/5875:
2 locks held by kworker/1:4/5882:
3 locks held by kworker/1:5/5889:
2 locks held by kworker/1:6/5916:
3 locks held by kworker/0:6/5917:
4 locks held by kworker/1:7/5918:
2 locks held by kworker/1:8/5936:
6 locks held by syz.1.1257/8685:
3 locks held by kworker/u8:10/8726:
#0: ffff8880337e9948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 kernel/workqueue.c:3250
#1: ffffc9000371fd08 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 kernel/workqueue.c:3251
#2: ffffffff9060f228 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
#2: ffffffff9060f228 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 net/ipv6/addrconf.c:4739
4 locks held by kworker/u8:11/8727:
4 locks held by kworker/u8:12/8728:
4 locks held by kworker/u8:13/8729:
3 locks held by kworker/u8:14/8730:
3 locks held by kworker/1:9/8731:
3 locks held by kworker/0:10/8732:
3 locks held by syz-executor/8733:
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x1d7/0x230 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x141/0x190 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]
watchdog+0xd25/0x1050 kernel/hung_task.c:515
kthread+0x370/0x450 kernel/kthread.c:467
ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker
RIP: 0010:__lock_is_held kernel/locking/lockdep.c:5601 [inline]
RIP: 0010:lock_is_held_type+0x95/0x140 kernel/locking/lockdep.c:5940
Code: 00 00 85 c0 0f 8e 94 00 00 00 4c 8d b5 18 0b 00 00 45 31 ff eb 11 41 83 c7 01 49 83 c6 28 44 3b bd 10 0b 00 00 7d 77 48 89 de <4c> 89 f7 e8 a3 fe ff ff 85 c0 74 e0 41 83 fc ff 74 13 31 c0 41 f6
RSP: 0018:ffffc90000a07990 EFLAGS: 00000097
RAX: 0000000000000000 RBX: ffffffff9060f228 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffffffff9060f228 RDI: ffff888027d0d418
RBP: ffff888027d0c900 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 00000000ffffffff
R13: 0000000000000246 R14: ffff888027d0d440 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff888124448000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa8b6bea4b8 CR3: 000000000e598000 CR4: 00000000003526f0
Call Trace:
lock_is_held include/linux/lockdep.h:249 [inline]
lockdep_rtnl_is_held+0x1b/0x40 net/core/rtnetlink.c:182
__in6_dev_get include/net/addrconf.h:347 [inline]
ip6_ignore_linkdown include/net/addrconf.h:448 [inline]
find_match net/ipv6/route.c:780 [inline]
__find_rr_leaf+0x64b/0x1070 net/ipv6/route.c:868
find_rr_leaf net/ipv6/route.c:889 [inline]
rt6_select net/ipv6/route.c:933 [inline]
fib6_table_lookup+0x50f/0xa10 net/ipv6/route.c:2246
ip6_pol_route+0x1cc/0x1230 net/ipv6/route.c:2282
pol_lookup_func include/net/ip6_fib.h:617 [inline]
fib6_rule_lookup+0x52f/0x720 net/ipv6/fib6_rules.c:120
ip6_route_input_lookup net/ipv6/route.c:2351 [inline]
ip6_route_input+0x662/0xc50 net/ipv6/route.c:2654
ip6_rcv_finish_core.isra.0+0x1a9/0x5a0 net/ipv6/ip6_input.c:66
ip6_rcv_finish+0x130/0x550 net/ipv6/ip6_input.c:77
ip_sabotage_in+0x21e/0x290 net/bridge/br_netfilter_hooks.c:990
nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
nf_hook_slow+0xbf/0x220 net/netfilter/core.c:623
nf_hook.constprop.0+0x2a6/0x750 include/linux/netfilter.h:273
NF_HOOK include/linux/netfilter.h:316 [inline]
ipv6_rcv+0xa4/0x610 net/ipv6/ip6_input.c:311
__netif_receive_skb_one_core+0x12d/0x1e0 net/core/dev.c:6149
__netif_receive_skb+0x1f/0x120 net/core/dev.c:6262
netif_receive_skb_internal net/core/dev.c:6348 [inline]
netif_receive_skb+0x139/0x820 net/core/dev.c:6407
NF_HOOK include/linux/netfilter.h:318 [inline]
NF_HOOK include/linux/netfilter.h:312 [inline]
br_pass_frame_up+0x346/0x490 net/bridge/br_input.c:70
br_handle_frame_finish+0x84f/0x1f00 net/bridge/br_input.c:235
br_nf_hook_thresh+0x30d/0x420 net/bridge/br_netfilter_hooks.c:1167
br_nf_pre_routing_finish_ipv6+0x769/0xfb0 net/bridge/br_netfilter_ipv6.c:154
NF_HOOK include/linux/netfilter.h:318 [inline]
br_nf_pre_routing_ipv6+0x39c/0x8b0 net/bridge/br_netfilter_ipv6.c:184
br_nf_pre_routing+0x93b/0x1510 net/bridge/br_netfilter_hooks.c:508
nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
nf_hook_bridge_pre net/bridge/br_input.c:291 [inline]
br_handle_frame+0xcdd/0x1520 net/bridge/br_input.c:442
__netif_receive_skb_core.constprop.0+0x6c5/0x3550 net/core/dev.c:6036
__netif_receive_skb_one_core+0xb0/0x1e0 net/core/dev.c:6147
__netif_receive_skb+0x1f/0x120 net/core/dev.c:6262
process_backlog+0x37a/0x1580 net/core/dev.c:6614
__napi_poll.constprop.0+0xaf/0x450 net/core/dev.c:7678
napi_poll net/core/dev.c:7741 [inline]
net_rx_action+0xa40/0xf20 net/core/dev.c:7893
handle_softirqs+0x1eb/0x9e0 kernel/softirq.c:622
do_softirq kernel/softirq.c:523 [inline]
do_softirq+0xac/0xe0 kernel/softirq.c:510
__local_bh_enable_ip+0xf8/0x120 kernel/softirq.c:450
local_bh_enable include/linux/bottom_half.h:33 [inline]
fpregs_unlock arch/x86/include/asm/fpu/api.h:77 [inline]
kernel_fpu_end arch/x86/kernel/fpu/core.c:506 [inline]
kernel_fpu_end+0x64/0x80 arch/x86/kernel/fpu/core.c:499
blake2s_compress+0x78/0xf0 lib/crypto/x86/blake2s.h:42
blake2s_update+0xef/0x320 lib/crypto/blake2s.c:119
hmac.constprop.0+0x33f/0x480 drivers/net/wireguard/noise.c:332
kdf.constprop.0+0x128/0x280 drivers/net/wireguard/noise.c:360
mix_dh+0xd2/0x130 drivers/net/wireguard/noise.c:413
wg_noise_handshake_consume_initiation+0x265/0x860 drivers/net/wireguard/noise.c:608
wg_receive_handshake_packet+0x7b2/0xc20 drivers/net/wireguard/receive.c:144
wg_packet_handshake_receive_worker+0x15e/0x370 drivers/net/wireguard/receive.c:213
process_one_work+0x9d7/0x1920 kernel/workqueue.c:3275
process_scheduled_works kernel/workqueue.c:3358 [inline]
worker_thread+0x5da/0xe40 kernel/workqueue.c:3439
kthread+0x370/0x450 kernel/kthread.c:467
ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245