BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 154s! BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 154s! BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 151s! Showing busy workqueues and worker pools: workqueue events: flags=0x0 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=12/256 refcnt=13 pending: psi_avgs_work, 5*ovs_dp_masks_rebalance, psi_avgs_work, kfree_rcu_monitor, 2*psi_avgs_work, ima_keys_handler, rht_deferred_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=10/256 refcnt=11 pending: 4*nsim_dev_hwstats_traffic_work, kfree_rcu_monitor, vmstat_shepherd, psi_avgs_work, switchdev_deferred_process_work, 2*rht_deferred_worker workqueue events_long: flags=0x0 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 pending: 3*defense_work_handler, br_multicast_gc_work, br_fdb_cleanup pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 pending: 2*defense_work_handler, 2*br_multicast_gc_work, 3*br_fdb_cleanup workqueue events_unbound: flags=0x2 pwq 4: cpus=0-1 flags=0x4 nice=0 active=9/512 refcnt=10 pending: 3*cfg80211_wiphy_work, crng_reseed, 3*macvlan_process_broadcast, 2*idle_cull_fn pwq 4: cpus=0-1 flags=0x4 nice=0 active=18/512 refcnt=19 pending: 5*cfg80211_wiphy_work, 3*nsim_dev_trap_report_work, toggle_allocation_gate, nsim_dev_trap_report_work, flush_memcg_stats_dwork, 5*macvlan_process_broadcast, 2*idle_cull_fn workqueue events_freezable: flags=0x4 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: update_balloon_stats_func workqueue events_power_efficient: flags=0x80 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 pending: neigh_managed_work, neigh_periodic_work, do_cache_clean, reg_check_chans_work pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 pending: neigh_managed_work, wg_ratelimiter_gc_entries, neigh_periodic_work, gc_worker, check_lifetime workqueue mm_percpu_wq: flags=0x8 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: vmstat_update pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: vmstat_update workqueue writeback: flags=0x4a pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 pending: wb_workfn workqueue kblockd: flags=0x18 pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 pending: blk_mq_timeout_work pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 pending: 2*blk_mq_timeout_work workqueue dm_bufio_cache: flags=0x8 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: work_fn workqueue mld: flags=0x40008 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 pending: mld_ifc_work workqueue ipv6_addrconf: flags=0xe000a pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=8 pending: addrconf_verify_work inactive: 4*addrconf_verify_work workqueue krxrpcd: flags=0xa001a pwq 5: cpus=0-1 node=0 flags=0x4 nice=-20 active=1/1 refcnt=8 pending: rxrpc_peer_keepalive_worker inactive: 4*rxrpc_peer_keepalive_worker workqueue krdsd: flags=0xe000a pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=4 pending: rds_connect_worker workqueue bat_events: flags=0xe000a pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=31 pending: batadv_nc_worker inactive: 3*batadv_nc_worker, 2*batadv_iv_send_outstanding_bat_ogm_packet, 3*batadv_tt_purge, 4*batadv_mcast_mla_update, 4*batadv_purge_orig, 2*batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, 2*batadv_bla_periodic_work, 2*batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge workqueue wg-crypt-wg0: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg1: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x28 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg2: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_send_worker pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg0: flags=0x28 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg0: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg1: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x28 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg1: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x28 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-crypt-wg0: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg2: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg2: flags=0x28 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg2: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg2: flags=0x28 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg1: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg1: flags=0x28 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker workqueue wg-kex-wg2: flags=0x6 pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_send_worker workqueue wg-crypt-wg2: flags=0x28 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_encrypt_worker Showing backtraces of running workers in stalled CPU-bound worker pools: ------------[ cut here ]------------ WARNING: CPU: 0 PID: 8112 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 kernel/rcu/tree_stall.h:993 Modules linked in: CPU: 0 PID: 8112 Comm: syz.3.617 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 kernel/rcu/tree_stall.h:1001 Code: ff ff ff 48 c7 c7 a0 04 ef 96 be 04 00 00 00 e8 4a b9 6c 00 48 89 df b8 01 00 00 00 87 05 7c d9 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 80 51 d3 8c 74 47 48 c7 c0 1c b8 4a 8e 48 c1 e8 03 RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffffffff8cd35180 RCX: ffffffff81702b16 RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35180 RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffffbfff2dde094 R12: 0000000000002904 R13: 1ffff110171c7a22 R14: 0000000000000a02 R15: dffffc0000000000 FS: 00007f79a0f516c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc627ebf40 CR3: 000000007760e000 CR4: 00000000003506f0 Call Trace: rcu_core+0x612/0x1720 kernel/rcu/tree.c:2462 handle_softirqs+0x280/0x820 kernel/softirq.c:578 __do_softirq kernel/softirq.c:612 [inline] invoke_softirq kernel/softirq.c:452 [inline] __irq_exit_rcu+0xc7/0x190 kernel/softirq.c:661 irq_exit_rcu+0x9/0x20 kernel/softirq.c:673 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline] sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1088 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687 RIP: 0010:arch_static_branch arch/x86/include/asm/jump_label.h:27 [inline] RIP: 0010:static_key_false include/linux/jump_label.h:207 [inline] RIP: 0010:native_write_msr arch/x86/include/asm/msr.h:147 [inline] RIP: 0010:wrmsr arch/x86/include/asm/msr.h:254 [inline] RIP: 0010:native_apic_msr_write+0x39/0x50 arch/x86/include/asm/apic.h:196 Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 f3 0f 1e fa 89 f6 31 d2 e9 47 e9 18 03 0f 1f 80 00 00 00 RSP: 0018:ffffc9001df0fcd8 EFLAGS: 00000246 RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f RBP: 0000000000000000 R08: ffffc9001df0fc47 R09: 1ffff92003be1f88 R10: dffffc0000000000 R11: fffff52003be1f89 R12: ffff8880b8e35001 R13: dffffc0000000000 R14: ffff8880b8e35050 R15: 0000000000000020 __apic_send_IPI_self arch/x86/include/asm/apic.h:454 [inline] arch_irq_work_raise+0x68/0x70 arch/x86/kernel/irq_work.c:31 irq_work_queue+0x99/0x140 kernel/irq_work.c:124 bpf_send_signal_common+0x2b6/0x420 kernel/trace/bpf_trace.c:875 ____bpf_send_signal kernel/trace/bpf_trace.c:884 [inline] bpf_send_signal+0x19/0x20 kernel/trace/bpf_trace.c:882 bpf_prog_7ba5217f62dcd359+0x40/0x44 bpf_dispatcher_nop_func include/linux/bpf.h:1223 [inline] __bpf_prog_run include/linux/filter.h:612 [inline] bpf_prog_run include/linux/filter.h:619 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:2322 [inline] bpf_trace_run2+0x1d1/0x3c0 kernel/trace/bpf_trace.c:2361 trace_sys_enter+0x69/0x80 include/trace/events/syscalls.h:18 syscall_trace_enter+0xf0/0x150 kernel/entry/common.c:81 do_syscall_64+0x28/0xb0 arch/x86/entry/common.c:77 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f79a012af79 Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 RSP: 002b:00007f79a0f50a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f RAX: ffffffffffffffda RBX: 00007f79a03e5fa0 RCX: 00007f79a012af79 RDX: 00007f79a0f50a80 RSI: 00007f79a0f50bb0 RDI: 0000000000000011 RBP: 00007f79a0211f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f79a03e6038 R14: 00007f79a03e5fa0 R15: 00007ffd0c2335c8 ---------------- Code disassembly (best guess): 0: 74 2a je 0x2c 2: 83 ff 30 cmp $0x30,%edi 5: 74 25 je 0x2c 7: eb 10 jmp 0x19 9: 81 ff d0 00 00 00 cmp $0xd0,%edi f: 74 1b je 0x2c 11: 81 ff e0 00 00 00 cmp $0xe0,%edi 17: 74 13 je 0x2c 19: c1 ef 04 shr $0x4,%edi 1c: 81 c7 00 08 00 00 add $0x800,%edi 22: 89 f9 mov %edi,%ecx 24: 89 f0 mov %esi,%eax 26: 31 d2 xor %edx,%edx 28: 0f 30 wrmsr * 2a: 66 90 xchg %ax,%ax <-- trapping instruction 2c: c3 ret 2d: f3 0f 1e fa endbr64 31: 89 f6 mov %esi,%esi 33: 31 d2 xor %edx,%edx 35: e9 47 e9 18 03 jmp 0x318e981 3a: 0f .byte 0xf 3b: 1f (bad) 3c: 80 00 00 addb $0x0,(%rax)