BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 41s! Showing busy workqueues and worker pools: workqueue events: flags=0x100 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=11 refcnt=12 in-flight: 4804:drain_vmap_area_work for 5s pending: 3*nsim_dev_hwstats_traffic_work, vmstat_shepherd, psi_avgs_work, 5*ovs_dp_masks_rebalance pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=13 refcnt=14 in-flight: 24:reg_todo for 79s pending: drm_fb_helper_damage_work, psi_avgs_work, 3*nsim_dev_hwstats_traffic_work, ovs_dp_masks_rebalance, 4*psi_avgs_work, delayed_vfree_work, free_obj_work workqueue events_unbound: flags=0x2 pwq 8: cpus=0-1 flags=0x6 nice=0 active=18 refcnt=19 in-flight: 14:cfg80211_wiphy_work for 38s ,923:cfg80211_wiphy_work for 94s cfg80211_wiphy_work ,3318:cfg80211_wiphy_work for 86s cfg80211_wiphy_work ,12:cfg80211_wiphy_work for 93s cfg80211_wiphy_work ,40:nsim_dev_trap_report_work for 2s ,1326:cfg80211_wiphy_work for 73s cfg80211_wiphy_work pending: toggle_allocation_gate, 4*nsim_dev_trap_report_work, flush_memcg_stats_dwork, cfg80211_wiphy_work, nsim_dev_trap_report_work pwq 8: cpus=0-1 flags=0x6 nice=0 active=8 refcnt=9 in-flight: 54:cfg80211_wiphy_work for 71s cfg80211_wiphy_work ,3183:cfg80211_wiphy_work for 86s cfg80211_wiphy_work ,1360:cfg80211_wiphy_work for 65s cfg80211_wiphy_work ,58:cfg80211_wiphy_work for 90s cfg80211_wiphy_work workqueue events_power_efficient: flags=0x82 pwq 8: cpus=0-1 flags=0x6 nice=0 active=9 refcnt=10 in-flight: 5940:neigh_periodic_work for 10s ,5939:reg_check_chans_work for 21s pending: fb_flashcursor, do_cache_clean, gc_worker, nf_flow_offload_work_gc, wg_ratelimiter_gc_entries, 2*neigh_managed_work pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 in-flight: 136:crda_timeout_work for 60s workqueue events_dfl_long: flags=0x2 pwq 8: cpus=0-1 flags=0x6 nice=0 active=6 refcnt=7 pending: 6*defense_work_handler workqueue mm_percpu_wq: flags=0x108 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: vmstat_update pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: vmstat_update workqueue writeback: flags=0x4a pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 in-flight: 1449:wb_workfn for 84s workqueue cfg80211: flags=0x2000a pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=6 MAYDAY in-flight: 57(RESCUER):cfg80211_dfs_channels_update_work for 42s workqueue bat_events: flags=0x6000a pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=37 MAYDAY in-flight: 2855(RESCUER):batadv_tt_purge for 21s pending: mayday_cursor_func inactive: batadv_tt_purge, batadv_bla_periodic_work, 2*batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, 7*batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge, 4*batadv_mcast_mla_update, 2*batadv_purge_orig, 3*batadv_iv_send_outstanding_bat_ogm_packet, 2*batadv_purge_orig, 2*batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge workqueue bond0: flags=0x2000a pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 pending: bond_mii_monitor workqueue wg-crypt-wg0: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg0: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-crypt-wg1: flags=0x128 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-crypt-wg2: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg1: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x128 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_tx_worker, wg_packet_encrypt_worker workqueue wg-kex-wg2: flags=0x6 pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg2: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-crypt-wg0: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_tx_worker, wg_packet_encrypt_worker workqueue wg-crypt-wg1: flags=0x128 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-crypt-wg2: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-crypt-wg0: flags=0x128 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-crypt-wg1: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-crypt-wg2: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg0: flags=0x124 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg0: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-crypt-wg1: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker workqueue wg-kex-wg2: flags=0x124 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg2: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=5s workers=7 idle: 9 4817 10 4796 866 4803 pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=41s workers=8 idle: 4710 1074 1093 26 4718 4983 4831 pool 8: cpus=0-1 flags=0x6 nice=0 hung=0s workers=15 manager: 5941 Showing backtraces of busy workers in stalled worker pools: pool 6: no worker in running state, cpu=1 is busy (nr_workers=8 nr_idle=7) The pool might have trouble waking an idle worker. Backtrace of last woken worker: task:kworker/1:4 state:R running task stack:0 pid:4710 tgid:4710 ppid:2 task_flags:0x4208060 flags:0x00000010 Workqueue: 0x0 (wg-kex-wg0) Call trace: __switch_to+0x2b4/0x6e4 arch/arm64/kernel/process.c:775 (T) context_switch kernel/sched/core.c:5520 [inline] __schedule+0x1370/0x2d80 kernel/sched/core.c:7270 __schedule_loop kernel/sched/core.c:7347 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7362 worker_thread+0x924/0xbd0 kernel/workqueue.c:3566 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 2855 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: bat_events batadv_tt_purge pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : lock_release+0x208/0x3b4 arch/arm64/include/asm/irqflags.h:-1 lr : lockdep_recursion_finish kernel/locking/lockdep.c:470 [inline] lr : lock_release+0x1e8/0x3b4 kernel/locking/lockdep.c:5932 sp : ffff80008ec46860 x29: ffff80008ec46870 x28: ffff0000f5762780 x27: 0000000000000004 x26: 0000000000000000 x25: 0000000000000000 x24: ffff800088ba22f8 x23: ffff0000cdfc46f0 x22: 0000000000000005 x21: ffff0000cdfc3b00 x20: ffff800088de2060 x19: ffff800084cc16d4 x18: 0000000045cf16d1 x17: ffff80012517a000 x16: ffff80008ec40000 x15: 0000001c0000001c x14: 00000000850ade10 x13: 0000000000000009 x12: 0000000000000000 x11: 000000004cbcf016 x10: 0000000000000003 x9 : 0000000000000000 x8 : 00000000000000c0 x7 : ffff800084cc0e0c x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008ec46860 x2 : 0000000000000005 x1 : ffff0000cdfc3b00 x0 : 0000000000000001 Call trace: __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P) arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P) lock_release+0x208/0x3b4 kernel/locking/lockdep.c:5933 (P) rcu_lock_release include/linux/rcupdate.h:319 [inline] rcu_read_unlock include/linux/rcupdate.h:880 [inline] __skb_flow_dissect+0xc30/0x5368 net/core/flow_dissector.c:1172 __xfrm_decode_session+0xf4/0x8a8 net/xfrm/xfrm_policy.c:3502 xfrm_decode_session include/net/xfrm.h:1357 [inline] ip_route_me_harder+0x7c4/0xd80 net/ipv4/netfilter.c:67 synproxy_send_tcp+0x2d4/0x5a4 net/netfilter/nf_synproxy_core.c:434 synproxy_send_client_synack+0x3b0/0x640 net/netfilter/nf_synproxy_core.c:487 nft_synproxy_eval_v4+0x16c/0x278 net/netfilter/nft_synproxy.c:59 nft_synproxy_do_eval+0x2d8/0x4a4 net/netfilter/nft_synproxy.c:141 nft_synproxy_eval+0x34/0x48 net/netfilter/nft_synproxy.c:247 expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline] nft_do_chain+0x418/0x13c8 net/netfilter/nf_tables_core.c:285 nft_do_chain_inet+0x284/0x3d4 net/netfilter/nft_chain_filter.c:162 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline] nf_hook_slow+0xc8/0x224 net/netfilter/core.c:619 nf_hook include/linux/netfilter.h:280 [inline] NF_HOOK+0x1f0/0x398 include/linux/netfilter.h:323 ip_local_deliver+0x128/0x188 net/ipv4/ip_input.c:262 dst_input include/net/dst.h:480 [inline] ip_rcv_finish+0x20c/0x230 net/ipv4/ip_input.c:492 NF_HOOK+0x308/0x398 include/linux/netfilter.h:325 ip_rcv+0x7c/0x9c net/ipv4/ip_input.c:612 __netif_receive_skb_one_core+0xc8/0x110 net/core/dev.c:6264 __netif_receive_skb+0x34/0x128 net/core/dev.c:6377 process_backlog+0x5f4/0x16f8 net/core/dev.c:6728 __napi_poll+0xb4/0x328 net/core/dev.c:7787 napi_poll net/core/dev.c:7850 [inline] net_rx_action+0x5b0/0xc14 net/core/dev.c:8007 handle_softirqs+0x2ec/0xd98 kernel/softirq.c:645 __do_softirq+0x14/0x20 kernel/softirq.c:679 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:78 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:885 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:83 do_softirq+0x90/0xf8 kernel/softirq.c:546 __local_bh_enable_ip+0x240/0x35c kernel/softirq.c:473 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:237 [inline] _raw_spin_unlock_bh+0x3c/0x4c kernel/locking/spinlock.c:245 spin_unlock_bh include/linux/spinlock.h:407 [inline] batadv_tt_global_purge net/batman-adv/translation-table.c:2390 [inline] batadv_tt_purge+0x3e4/0x7b4 net/batman-adv/translation-table.c:3754 process_one_work kernel/workqueue.c:3387 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3470 rescuer_thread+0x68c/0xd90 kernel/workqueue.c:3694 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838