BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 47s! Showing busy workqueues and worker pools: workqueue events: flags=0x0 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=28/256 refcnt=29 in-flight: 7:free_obj_work pending: nsim_dev_hwstats_traffic_work, nsim_dev_hwstats_traffic_work, nsim_dev_hwstats_traffic_work, nsim_dev_hwstats_traffic_work, nsim_dev_hwstats_traffic_work, nsim_dev_hwstats_traffic_work, nsim_dev_hwstats_traffic_work, nsim_dev_hwstats_traffic_work, nsim_dev_hwstats_traffic_work, nsim_dev_hwstats_traffic_work, psi_avgs_work, kfree_rcu_monitor, psi_avgs_work, ovs_dp_masks_rebalance, psi_avgs_work, psi_avgs_work, ovs_dp_masks_rebalance, ovs_dp_masks_rebalance, vmstat_shepherd, ovs_dp_masks_rebalance, ovs_dp_masks_rebalance, ovs_dp_masks_rebalance, ovs_dp_masks_rebalance, ovs_dp_masks_rebalance, ovs_dp_masks_rebalance, free_obj_work, switchdev_deferred_process_work workqueue events_long: flags=0x0 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=14/256 refcnt=15 pending: defense_work_handler, defense_work_handler, defense_work_handler, defense_work_handler, defense_work_handler, defense_work_handler, defense_work_handler, defense_work_handler, defense_work_handler, defense_work_handler, defense_work_handler, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work workqueue events_unbound: flags=0x2 pwq 4: cpus=0-1 flags=0x4 nice=0 active=27/512 refcnt=29 in-flight: 7694:cfg80211_wiphy_work, 7693:cfg80211_wiphy_work, 6903:cfg80211_wiphy_work, 7696:cfg80211_wiphy_work, 7686:cfg80211_wiphy_work, 6061:cfg80211_wiphy_work pending: nsim_dev_trap_report_work, nsim_dev_trap_report_work, nsim_dev_trap_report_work, nsim_dev_trap_report_work, nsim_dev_trap_report_work, nsim_dev_trap_report_work, nsim_dev_trap_report_work, nsim_dev_trap_report_work, nsim_dev_trap_report_work, nsim_dev_trap_report_work, toggle_allocation_gate, cfg80211_wiphy_work, flush_memcg_stats_dwork, cfg80211_wiphy_work, cfg80211_wiphy_work, cfg80211_wiphy_work, cfg80211_wiphy_work, cfg80211_wiphy_work, cfg80211_wiphy_work, cfg80211_wiphy_work, cfg80211_wiphy_work workqueue events_power_efficient: flags=0x82 pwq 4: cpus=0-1 flags=0x4 nice=0 active=7/256 refcnt=9 pending: fb_flashcursor, gc_worker, wg_ratelimiter_gc_entries, neigh_periodic_work, check_lifetime, neigh_managed_work, neigh_managed_work workqueue netns: flags=0xe000a pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=4 in-flight: 4386:cleanup_net inactive: cleanup_net workqueue mm_percpu_wq: flags=0x8 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: vmstat_update workqueue writeback: flags=0x4a pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 pending: wb_workfn, wb_workfn workqueue kblockd: flags=0x18 pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 pending: blk_mq_timeout_work, blk_mq_timeout_work workqueue dm_bufio_cache: flags=0x8 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: work_fn workqueue mld: flags=0x40008 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=8 pending: mld_mca_work inactive: mld_mca_work, mld_mca_work, mld_mca_work, mld_mca_work, mld_mca_work, mld_mca_work workqueue ipv6_addrconf: flags=0x40008 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=3 in-flight: 4379:addrconf_dad_work inactive: addrconf_verify_work workqueue krxrpcd: flags=0x0 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=10 pending: rxrpc_peer_keepalive_worker inactive: rxrpc_peer_keepalive_worker, rxrpc_peer_keepalive_worker, rxrpc_peer_keepalive_worker, rxrpc_peer_keepalive_worker, rxrpc_peer_keepalive_worker, rxrpc_peer_keepalive_worker, rxrpc_peer_keepalive_worker, rxrpc_peer_keepalive_worker workqueue bat_events: flags=0xe000a pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=78 in-flight: 1606:batadv_iv_send_outstanding_bat_ogm_packet inactive: batadv_purge_orig, batadv_purge_orig, batadv_purge_orig, batadv_purge_orig, batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge, batadv_nc_worker, batadv_tt_purge, batadv_nc_worker, batadv_nc_worker, batadv_nc_worker , batadv_nc_worker, batadv_nc_worker, batadv_nc_worker, batadv_nc_worker, batadv_nc_worker, batadv_tt_purge, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_dat_purge, batadv_bla_periodic_work, batadv_bla_periodic_work, batadv_dat_purge, batadv_dat_purge, batadv_bla_periodic_work, batadv_bla_periodic_work, batadv_dat_purge, batadv_dat_purge, batadv_bla_periodic_work, batadv_mcast_mla_update, batadv_mcast_mla_update, batadv_mcast_mla_update, batadv_mcast_mla_update, batadv_mcast_mla_update, batadv_mcast_mla_update, batadv_mcast_mla_update, batadv_mcast_mla_update, batadv_mcast_mla_update, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_purge_orig, batadv_tt_purge, batadv_tt_purge, batadv_tt_purge, batadv_tt_purge, batadv_tt_purge , batadv_tt_purge, batadv_dat_purge, batadv_bla_periodic_work, batadv_bla_periodic_work workqueue wg-kex-wg0: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker workqueue wg-kex-wg1: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker workqueue wg-kex-wg2: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker workqueue wg-kex-wg0: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg1: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg2: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg0: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg1: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg2: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg0: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg1: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg2: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg2: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue bond1: flags=0xa000a pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=4 pending: bond_alb_monitor inactive: bond_mii_monitor workqueue bond1: flags=0xa000a pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=4 pending: bond_mii_monitor inactive: bond_alb_monitor workqueue wg-crypt-wg0: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg1: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg2: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg0: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg1: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker workqueue wg-kex-wg2: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker workqueue wg-kex-wg0: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg1: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg2: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg2: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue hci3: flags=0xa0012 pwq 5: cpus=0-1 flags=0x4 nice=-20 active=1/1 refcnt=3 pending: hci_conn_timeout workqueue hci0: flags=0xa0012 pwq 5: cpus=0-1 flags=0x4 nice=-20 active=1/1 refcnt=4 pending: hci_cmd_timeout inactive: hci_conn_timeout pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=47s workers=18 idle: 4791 4888 14 5103 4476 4484 4339 4382 4378 4474 4475 4477 5102 1515 5315 4481 pool 4: cpus=0-1 flags=0x4 nice=0 hung=26s workers=24 idle: 4669 6656 6871 7690 7692 39 9 1574 6115 1615 11 7689 7688 6664 7101 7695 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 7791 at kernel/rcu/tree_stall.h:970 rcu_check_gp_start_stall+0x5b4/0xba8 kernel/rcu/tree_stall.h:971 Modules linked in: CPU: 0 PID: 7791 Comm: syz.9.727 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : rcu_check_gp_start_stall+0x5b4/0xba8 kernel/rcu/tree_stall.h:971 lr : instrument_atomic_read_write include/linux/instrumented.h:102 [inline] lr : atomic_xchg include/linux/atomic/atomic-instrumented.h:473 [inline] lr : rcu_check_gp_start_stall+0x590/0xba8 kernel/rcu/tree_stall.h:963 sp : ffff800008007cf0 x29: ffff800008007d00 x28: 1ffff00002a69e40 x27: ffff8000155ad000 x26: ffff8000155ad000 x25: 0000000000002904 x24: ffff8000155aca80 x23: dfff800000000000 x22: ffff8000155ac000 x21: ffff8000155aca40 x20: ffff80001c647140 x19: ffff8000155aca40 x18: 00000000842c7b58 x17: 0000000000020010 x16: ffff8000082f4488 x15: 0000000000000000 x14: ffff7000038c8e28 x13: 1ffff000038c8e28 x12: 0000000000000004 x11: ffffffffffffffff x10: dfff800000000000 x9 : 0000000000000000 x8 : 0000000000000001 x7 : ffff80000836bdb4 x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000836c22c x2 : 0000000000000001 x1 : 0000000000000004 x0 : ffff8000155aca40 Call trace: rcu_check_gp_start_stall+0x5b4/0xba8 kernel/rcu/tree_stall.h:971 rcu_core+0x578/0x18e8 kernel/rcu/tree.c:2552 rcu_core_si+0x10/0x1c kernel/rcu/tree.c:2574 handle_softirqs+0x318/0xc90 kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:897 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0x23c/0x430 kernel/softirq.c:679 irq_exit_rcu+0x14/0x84 kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 arch_local_irq_enable arch/arm64/include/asm/irqflags.h:35 [inline] raw_spin_rq_unlock_irq kernel/sched/sched.h:1374 [inline] finish_lock_switch+0xb8/0x1c8 kernel/sched/core.c:5005 finish_task_switch+0x120/0x658 kernel/sched/core.c:5123 context_switch kernel/sched/core.c:5249 [inline] __schedule+0xdb8/0x1a6c kernel/sched/core.c:6563 schedule+0xc4/0x170 kernel/sched/core.c:6639 flock_lock_inode_wait fs/locks.c:2037 [inline] locks_lock_inode_wait+0x1a4/0x428 fs/locks.c:2061 locks_lock_file_wait include/linux/fs.h:1371 [inline] __do_sys_flock fs/locks.c:2131 [inline] __se_sys_flock fs/locks.c:2085 [inline] __arm64_sys_flock+0x3fc/0x5f0 fs/locks.c:2085 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x12c arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 71812257 hardirqs last enabled at (71812256): [] rcu_nocb_unlock_irqrestore kernel/rcu/tree_nocb.h:1527 [inline] hardirqs last enabled at (71812256): [] rcu_core+0x504/0x18e8 kernel/rcu/tree.c:2549 hardirqs last disabled at (71812257): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] hardirqs last disabled at (71812257): [] _raw_spin_lock_irqsave+0xa4/0xb0 kernel/locking/spinlock.c:162 softirqs last enabled at (71810494): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (71810509): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- rcu: rcu_preempt: wait state: RCU_GP_WAIT_GPS(1) ->state: 0x402 ->rt_priority 0 delta ->gp_start 12810 ->gp_activity 12809 ->gp_req_activity 12808 ->gp_wake_time 12808 ->gp_wake_seq 40704 ->gp_seq 40704 ->gp_seq_needed 40708 ->gp_max 764 ->gp_flags 0x1 rcu: rcu_node 0:1 ->gp_seq 40704 ->gp_seq_needed 40708 ->qsmask 0x0 .... ->n_boosts 0 rcu: RCU callbacks invoked since boot: 295153 rcu_tasks: RTGS_WAIT_CBS(11) since 48436 g:8 i:0/0 k. rcu_tasks_trace: RTGS_WAIT_CBS(11) since 48478 g:8 i:0/0 k. N0 h:0/0/0