BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 149s! Showing busy workqueues and worker pools: workqueue events: flags=0x0 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 in-flight: 4446:xfrm_state_gc_task xfrm_state_gc_task pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=55/256 refcnt=56 pending: free_work, kfree_rcu_work, pwq_unbound_release_workfn, macvlan_process_broadcast, kfree_rcu_monitor, nsim_dev_trap_report_work, nsim_dev_trap_report_work, nsim_dev_trap_report_work, nsim_dev_trap_report_work, pwq_unbound_release_workfn, destroy_super_work, bpf_map_free_deferred, bpf_map_free_deferred, vmstat_shepherd, jump_label_update_timeout, psi_avgs_work, yama_relation_cleanup, macvlan_process_broadcast, macvlan_process_broadcast, ovs_dp_masks_rebalance, ovs_dp_masks_rebalance, macvlan_process_broadcast, l2cap_info_timeout, hci_cmd_timeout, psi_avgs_work, hci_cmd_timeout, hci_cmd_timeout, l2cap_info_timeout, l2cap_info_timeout, key_garbage_collector, macvlan_process_broadcast, macvlan_process_broadcast, hci_cmd_timeout, hci_cmd_timeout, hci_cmd_timeout, macvlan_process_broadcast, macvlan_process_broadcast, l2cap_info_timeout, hci_cmd_timeout, hci_cmd_timeout, l2cap_info_timeout, hci_cmd_timeout, l2cap_info_timeout, rfkill_sync_work , rfkill_global_led_trigger_worker, l2cap_info_timeout, hci_cmd_timeout, hci_cmd_timeout, l2cap_info_timeout, l2cap_info_timeout, hci_cmd_timeout, hci_cmd_timeout, hci_cmd_timeout, l2cap_info_timeout, hci_cmd_timeout workqueue events_long: flags=0x0 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 pending: defense_work_handler, defense_work_handler workqueue events_unbound: flags=0x2 pwq 4: cpus=0-1 flags=0x4 nice=0 active=6/512 refcnt=9 in-flight: 4346:fsnotify_mark_destroy_workfn fsnotify_mark_destroy_workfn, 5391:fsnotify_connector_destroy_workfn fsnotify_connector_destroy_workfn, 4307:cfg80211_wiphy_work cfg80211_wiphy_work workqueue events_freezable: flags=0x4 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: update_balloon_stats_func workqueue events_power_efficient: flags=0x80 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 pending: wg_ratelimiter_gc_entries, neigh_periodic_work, neigh_periodic_work, do_cache_clean, reg_check_chans_work workqueue rcu_gp: flags=0x8 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 pending: process_srcu, wait_rcu_exp_gp workqueue mm_percpu_wq: flags=0x8 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=4 pending: lru_add_drain_per_cpu BAR(5581), vmstat_update workqueue usb_hub_wq: flags=0x4 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 in-flight: 4584:hub_event hub_event workqueue dm_bufio_cache: flags=0x8 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: work_fn workqueue ipv6_addrconf: flags=0x40008 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 pending: addrconf_verify_work workqueue krxrpcd: flags=0x0 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 pending: rxrpc_peer_keepalive_worker inactive: rxrpc_peer_keepalive_worker, rxrpc_peer_keepalive_worker workqueue wg-kex-wg0: flags=0x24 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg0: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker workqueue wg-kex-wg1: flags=0x24 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg1: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg2: flags=0x24 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg2: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg0: flags=0x24 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg0: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker workqueue wg-kex-wg1: flags=0x24 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg1: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg0: flags=0x24 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg0: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker workqueue wg-kex-wg2: flags=0x24 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg2: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg1: flags=0x24 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg1: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg0: flags=0x24 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg0: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker workqueue wg-kex-wg1: flags=0x24 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg1: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 pending: wg_packet_decrypt_worker, wg_packet_tx_worker, wg_packet_encrypt_worker workqueue wg-kex-wg2: flags=0x24 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg2: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg2: flags=0x24 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg2: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 pending: wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg0: flags=0x24 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg0: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker workqueue wg-kex-wg1: flags=0x24 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg1: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker workqueue wg-kex-wg2: flags=0x24 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: wg_packet_handshake_receive_worker workqueue wg-crypt-wg2: flags=0x28 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 pending: wg_packet_tx_worker, wg_packet_encrypt_worker pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=150s workers=21 idle: 4582 1111 4587 4237 7 4581 4585 4580 13 4589 4212 4286 4238 4269 4240 4239 4588 4280 4313 4241 pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=0s workers=22 idle: 5364 4849 4448 1108 4852 4283 21 4451 4848 4242 4438 23 4195 5221 4441 4445 4447 4851 4403 4452 4450 pool 4: cpus=0-1 flags=0x4 nice=0 hung=0s workers=14 idle: 1285 4319 4318 9 144 727 1269 4285 154 4282 NMI backtrace for cpu 0 CPU: 0 PID: 4584 Comm: kworker/0:16 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Workqueue: usb_hub_wq hub_event RIP: 0010:__snd_usb_parse_audio_interface+0x3637/0x4b00 sound/usb/stream.c:-1 Code: a9 f9 4c 89 b4 24 88 00 00 00 44 89 f7 44 8b 74 24 38 44 89 f6 e8 39 58 a9 f9 bf 03 00 00 00 44 89 fe 44 89 f3 e8 29 5a a9 f9 <48> 8b 84 24 a0 00 00 00 29 84 24 d8 00 00 00 4c 8b 74 24 50 0f 8e RSP: 0018:ffffc90002376b40 EFLAGS: 00000297 RAX: ffffffff87cfdf47 RBX: 0000000000000001 RCX: ffff88802676bb80 RDX: 0000000000000002 RSI: 00000000000007fb RDI: 0000000000000003 RBP: ffffc90002376d40 R08: ffffffff901d6227 R09: 1ffffffff203ac44 R10: dffffc0000000000 R11: fffffbfff203ac45 R12: dffffc0000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 00000000000007fb FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055dba8678000 CR3: 000000007de30000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: snd_usb_parse_audio_interface+0x36/0xb0 sound/usb/stream.c:1274 snd_usb_create_stream+0x3ec/0x610 sound/usb/card.c:209 snd_usb_create_streams sound/usb/card.c:330 [inline] usb_audio_probe+0x130b/0x1d90 sound/usb/card.c:892 usb_probe_interface+0x5c5/0xb20 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x284/0xc80 drivers/base/dd.c:595 __driver_probe_device+0x18c/0x330 drivers/base/dd.c:755 driver_probe_device+0x4f/0x420 drivers/base/dd.c:785 __device_attach_driver+0x2b0/0x500 drivers/base/dd.c:907 bus_for_each_drv+0x184/0x210 drivers/base/bus.c:429 __device_attach+0x2a8/0x480 drivers/base/dd.c:979 bus_probe_device+0xbc/0x1e0 drivers/base/bus.c:489 device_add+0xa00/0xfb0 drivers/base/core.c:3412 usb_set_configuration+0x1991/0x1fd0 drivers/usb/core/message.c:2223 usb_generic_driver_probe+0x89/0x150 drivers/usb/core/generic.c:238 usb_probe_device+0x139/0x270 drivers/usb/core/driver.c:293 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x284/0xc80 drivers/base/dd.c:595 __driver_probe_device+0x18c/0x330 drivers/base/dd.c:755 driver_probe_device+0x4f/0x420 drivers/base/dd.c:785 __device_attach_driver+0x2b0/0x500 drivers/base/dd.c:907 bus_for_each_drv+0x184/0x210 drivers/base/bus.c:429 __device_attach+0x2a8/0x480 drivers/base/dd.c:979 bus_probe_device+0xbc/0x1e0 drivers/base/bus.c:489 device_add+0xa00/0xfb0 drivers/base/core.c:3412 usb_new_device+0xd65/0x1660 drivers/usb/core/hub.c:2632 hub_port_connect drivers/usb/core/hub.c:5497 [inline] hub_port_connect_change drivers/usb/core/hub.c:5637 [inline] port_event drivers/usb/core/hub.c:5799 [inline] hub_event+0x2e4a/0x55e0 drivers/usb/core/hub.c:5881 process_one_work+0x85f/0x1010 kernel/workqueue.c:2310 worker_thread+0xaa6/0x1290 kernel/workqueue.c:2457 kthread+0x436/0x520 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 ---------------- Code disassembly (best guess): 0: a9 f9 4c 89 b4 test $0xb4894cf9,%eax 5: 24 88 and $0x88,%al 7: 00 00 add %al,(%rax) 9: 00 44 89 f7 add %al,-0x9(%rcx,%rcx,4) d: 44 8b 74 24 38 mov 0x38(%rsp),%r14d 12: 44 89 f6 mov %r14d,%esi 15: e8 39 58 a9 f9 call 0xf9a95853 1a: bf 03 00 00 00 mov $0x3,%edi 1f: 44 89 fe mov %r15d,%esi 22: 44 89 f3 mov %r14d,%ebx 25: e8 29 5a a9 f9 call 0xf9a95a53 * 2a: 48 8b 84 24 a0 00 00 mov 0xa0(%rsp),%rax <-- trapping instruction 31: 00 32: 29 84 24 d8 00 00 00 sub %eax,0xd8(%rsp) 39: 4c 8b 74 24 50 mov 0x50(%rsp),%r14 3e: 0f .byte 0xf 3f: 8e .byte 0x8e