BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 53s! BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 53s! Showing busy workqueues and worker pools: workqueue events: flags=0x100 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=11 refcnt=12 in-flight: 4838:switchdev_deferred_process_work for 6s ,9:xfrm_state_gc_task for 23s pending: 9*nsim_dev_hwstats_traffic_work workqueue events_unbound: flags=0x2 pwq 8: cpus=0-1 flags=0x4 nice=0 active=23 refcnt=24 pending: nsim_dev_trap_report_work, 7*cfg80211_wiphy_work, toggle_allocation_gate, 8*nsim_dev_trap_report_work, flush_memcg_stats_dwork, crng_reseed, macvlan_process_broadcast, cfg80211_wiphy_work, 2*macvlan_process_broadcast workqueue events_power_efficient: flags=0x82 pwq 8: cpus=0-1 flags=0x4 nice=0 active=6 refcnt=7 pending: gc_worker, 2*neigh_managed_work, neigh_periodic_work, do_cache_clean, check_lifetime workqueue events_dfl_long: flags=0x2 pwq 8: cpus=0-1 flags=0x4 nice=0 active=5 refcnt=6 pending: 5*defense_work_handler workqueue writeback: flags=0x4a pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 pending: wb_update_bandwidth_workfn, wb_workfn workqueue bat_events: flags=0x6000a pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=35 pending: batadv_iv_send_outstanding_bat_ogm_packet inactive: 2*batadv_iv_send_outstanding_bat_ogm_packet, 4*batadv_purge_orig, 2*batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge, 7*batadv_mcast_mla_update, batadv_dat_purge, batadv_bla_periodic_work, 4*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, 3*batadv_tt_purge workqueue wg-kex-wg0: flags=0x6 pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg1: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker workqueue wg-crypt-wg2: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-crypt-wg0: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg1: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker workqueue wg-crypt-wg2: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-crypt-wg0: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg1: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg2: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg0: flags=0x6 pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg1: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker workqueue wg-crypt-wg2: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-crypt-wg0: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg1: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg2: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=0s workers=9 idle: 4468 10 4821 1165 4845 4850 4842 Showing backtraces of busy workers in stalled worker pools: pool 6: no worker in running state, cpu=1 is busy (nr_workers=6 nr_idle=6) The pool might have trouble waking an idle worker. Backtrace of last woken worker: task:kworker/1:2 state:R running task stack:0 pid:874 tgid:874 ppid:2 task_flags:0x4208060 flags:0x00000010 Workqueue: 0x0 (events) Call trace: __switch_to+0x2b4/0x6e4 arch/arm64/kernel/process.c:775 (T) context_switch kernel/sched/core.c:5533 [inline] __schedule+0x135c/0x2b00 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7376 worker_thread+0x924/0xbd0 kernel/workqueue.c:3575 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854 Sending NMI from CPU 0 to CPUs 1: After 10 seconds, these CPUS still haven't responded to the NMI: 1 sched: DL replenish lagged too much BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 93s! BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 93s! Showing busy workqueues and worker pools: workqueue events: flags=0x100 pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 in-flight: 4838:switchdev_deferred_process_work for 46s switchdev_deferred_process_work ,9:xfrm_state_gc_task for 64s workqueue events_unbound: flags=0x2 pwq 8: cpus=0-1 flags=0x4 nice=0 active=27 refcnt=28 pending: nsim_dev_trap_report_work, 7*cfg80211_wiphy_work, toggle_allocation_gate, 8*nsim_dev_trap_report_work, flush_memcg_stats_dwork, crng_reseed, macvlan_process_broadcast, cfg80211_wiphy_work, 3*macvlan_process_broadcast, 2*idle_cull_fn, macvlan_process_broadcast workqueue events_power_efficient: flags=0x82 pwq 8: cpus=0-1 flags=0x4 nice=0 active=7 refcnt=8 pending: gc_worker, 2*neigh_managed_work, neigh_periodic_work, do_cache_clean, 2*check_lifetime workqueue events_dfl_long: flags=0x2 pwq 8: cpus=0-1 flags=0x4 nice=0 active=5 refcnt=6 pending: 5*defense_work_handler workqueue writeback: flags=0x4a pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 pending: wb_update_bandwidth_workfn, wb_workfn workqueue bat_events: flags=0x6000a pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=35 pending: batadv_iv_send_outstanding_bat_ogm_packet inactive: 2*batadv_iv_send_outstanding_bat_ogm_packet, 4*batadv_purge_orig, 2*batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge, 7*batadv_mcast_mla_update, batadv_dat_purge, batadv_bla_periodic_work, 4*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, 3*batadv_tt_purge workqueue wg-kex-wg0: flags=0x6 pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg1: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker workqueue wg-crypt-wg2: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-crypt-wg0: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg1: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker workqueue wg-crypt-wg2: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg0: flags=0x6 pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg1: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg2: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg0: flags=0x6 pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg1: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker workqueue wg-kex-wg2: flags=0x6 pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg2: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-crypt-wg0: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg1: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg2: flags=0x128 pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=0s workers=9 idle: 10 4468 4821 1165 4845 4850 4842 Showing backtraces of busy workers in stalled worker pools: pool 6: no worker in running state, cpu=1 is busy (nr_workers=6 nr_idle=6) The pool might have trouble waking an idle worker. Backtrace of last woken worker: task:kworker/1:2 state:R running task stack:0 pid:874 tgid:874 ppid:2 task_flags:0x4208060 flags:0x00000010 Workqueue: 0x0 (events) Call trace: __switch_to+0x2b4/0x6e4 arch/arm64/kernel/process.c:775 (T) context_switch kernel/sched/core.c:5533 [inline] __schedule+0x135c/0x2b00 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7376 worker_thread+0x924/0xbd0 kernel/workqueue.c:3575 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854 Sending NMI from CPU 0 to CPUs 1: After 10 seconds, these CPUS still haven't responded to the NMI: 1 ------------[ cut here ]------------ WARNING: kernel/rcu/tree_stall.h:1063 at rcu_check_gp_start_stall+0x3ac/0x59c kernel/rcu/tree_stall.h:1064, CPU#0: syz.7.384/7184 Modules linked in: CPU: 0 UID: 0 PID: 7184 Comm: syz.7.384 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : rcu_check_gp_start_stall+0x3ac/0x59c kernel/rcu/tree_stall.h:1064 lr : instrument_atomic_read_write include/linux/instrumented.h:112 [inline] lr : atomic_xchg include/linux/atomic/atomic-instrumented.h:1119 [inline] lr : rcu_check_gp_start_stall+0x384/0x59c kernel/rcu/tree_stall.h:1056 sp : ffff80008f857cf0 x29: ffff80008f857d00 x28: 1ffff000112f9c50 x27: ffff8000899e6000 x26: ffff8000899e6000 x25: ffff8000899e6780 x24: ffff8000899e6000 x23: dfff800000000000 x22: ffff8000899e6740 x21: ffff80008f53df60 x20: 0000800000000000 x19: ffff8000899e6740 x18: ffff8001237ae000 x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000001 x14: 00000000007206e5 x13: 0000000000000001 x12: 0000000000000004 x11: ffff700011ea7bec x10: ffff700011ea7bec x9 : 0000000000000000 x8 : 0000000000000001 x7 : ffff8000804ddb74 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff8000804ddde8 x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000001 Call trace: rcu_check_gp_start_stall+0x3ac/0x59c kernel/rcu/tree_stall.h:1064 (P) rcu_core+0x4a0/0xfbc kernel/rcu/tree.c:2914 rcu_core_si+0x10/0x1c kernel/rcu/tree.c:2936 handle_softirqs+0x324/0xcbc kernel/softirq.c:645 __do_softirq+0x14/0x20 kernel/softirq.c:679 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:78 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:901 do_softirq_own_stack+0x1c/0x28 arch/arm64/kernel/irq.c:83 invoke_softirq kernel/softirq.c:526 [inline] __irq_exit_rcu+0x10c/0x318 kernel/softirq.c:758 irq_exit_rcu+0x14/0x84 kernel/softirq.c:775 __el1_irq arch/arm64/kernel/entry-common.c:569 [inline] el1_interrupt+0x40/0x60 arch/arm64/kernel/entry-common.c:581 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:586 el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:602 __cmpwait_case_32 arch/arm64/include/asm/cmpxchg.h:233 [inline] (P) __cmpwait arch/arm64/include/asm/cmpxchg.h:259 [inline] (P) csd_lock_wait kernel/smp.c:363 [inline] (P) smp_call_function_many_cond+0x1104/0x14e0 kernel/smp.c:1002 (P) smp_call_function kernel/smp.c:1043 [inline] kick_all_cpus_sync+0x34/0x40 kernel/smp.c:1192 arch_jump_label_transform_apply+0x14/0x20 arch/arm64/kernel/jump_label.c:34 __jump_label_update+0x31c/0x344 kernel/jump_label.c:521 jump_label_update+0x428/0x4b8 kernel/jump_label.c:909 static_key_slow_inc_cpuslocked+0x98/0x114 kernel/jump_label.c:168 static_key_slow_inc+0x24/0x40 kernel/jump_label.c:191 block_netpoll_tx include/net/bonding.h:95 [inline] __bond_release_one+0x1b8/0xe10 drivers/net/bonding/bond_main.c:2442 bond_release+0x30/0x40 drivers/net/bonding/bond_main.c:2606 bond_option_slaves_set+0x1e4/0x3f4 drivers/net/bonding/bond_options.c:1817 __bond_opt_set+0x2cc/0xb40 drivers/net/bonding/bond_options.c:826 __bond_opt_set_notify+0x58/0x148 drivers/net/bonding/bond_options.c:851 bond_opt_tryset_rtnl+0x118/0x198 drivers/net/bonding/bond_options.c:876 bonding_sysfs_store_option+0x90/0x104 drivers/net/bonding/bond_sysfs.c:156 dev_attr_store+0x6c/0x90 drivers/base/core.c:2509 sysfs_kf_write+0xe0/0x108 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x260/0x3b8 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x51c/0xa0c fs/read_write.c:687 ksys_write+0x12c/0x228 fs/read_write.c:739 __do_sys_write fs/read_write.c:750 [inline] __se_sys_write fs/read_write.c:747 [inline] __arm64_sys_write+0x84/0x98 fs/read_write.c:747 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606 irq event stamp: 515639 hardirqs last enabled at (515638): [] class_irqsave_destructor include/linux/irqflags.h:268 [inline] hardirqs last enabled at (515638): [] rcu_core+0x43c/0xfbc kernel/rcu/tree.c:2912 hardirqs last disabled at (515639): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:153 [inline] hardirqs last disabled at (515639): [] _raw_spin_lock_irqsave+0x2c/0x7c kernel/locking/spinlock.c:181 softirqs last enabled at (515204): [] softirq_handle_end kernel/softirq.c:491 [inline] softirqs last enabled at (515204): [] handle_softirqs+0xb2c/0xcbc kernel/softirq.c:673 softirqs last disabled at (515213): [] __do_softirq+0x14/0x20 kernel/softirq.c:679 ---[ end trace 0000000000000000 ]---