#0: ffff88805bdf0540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 fs/seq_file.c:182 #1: ffff88805f23a888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 fs/kernfs/file.c:172 #2: ffff88806c480c38 (kn->active#19){++++}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline] #2: ffff88806c480c38 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 fs/kernfs/file.c:173 #3: ffff888033aa2198 (&dev->mutex){....}-{4:4}, at: device_lock_interruptible include/linux/device.h:919 [inline] #3: ffff888033aa2198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142 ============================================= rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 0-...!: (2 ticks this GP) idle=eb44/1/0x4000000000000000 softirq=93432/93432 fqs=4 rcu: (detected by 1, t=14642 jiffies, g=92365, q=3 ncpus=2) rcu: rcu_preempt kthread starved for 14634 jiffies! g92365 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0x165/0x360 kernel/sched/core.c:7026 schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2083 rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2285 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 1 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 kernel/locking/spinlock.c:194 Code: 74 05 e8 ab 83 7f f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 33 b2 47 f6 65 8b 05 dc 08 47 07 85 c0 74 40 48 c7 04 24 0e 36 RSP: 0018:ffffc90000a08920 EFLAGS: 00000206 RAX: 353eefdc83db5600 RBX: 0000000000000a06 RCX: 353eefdc83db5600 RDX: 0000000000000002 RSI: ffffffff8d7f6884 RDI: 0000000000000001 RBP: ffffc90000a089b0 R08: ffffffff8f9dcc77 R09: 1ffffffff1f3b98e R10: dffffc0000000000 R11: fffffbfff1f3b98f R12: dffffc0000000000 R13: ffff88807e05e110 R14: ffff88807e05e218 R15: 1ffff92000141124 FS: 0000000000000000(0000) GS:ffff888125e26000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00002000001859c0 CR3: 000000000df38000 CR4: 00000000003526f0 Call Trace: call_timer_fn+0x17e/0x5f0 kernel/time/timer.c:1747 expire_timers kernel/time/timer.c:1798 [inline] __run_timers kernel/time/timer.c:2372 [inline] __run_timer_base+0x61a/0x860 kernel/time/timer.c:2384 tmigr_handle_remote_cpu kernel/time/timer_migration.c:944 [inline] tmigr_handle_remote_up kernel/time/timer_migration.c:1035 [inline] __walk_groups kernel/time/timer_migration.c:533 [inline] tmigr_handle_remote+0xa32/0x13d0 kernel/time/timer_migration.c:1094 handle_softirqs+0x286/0x870 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:723 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1052 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1052 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x70 kernel/kcov.c:217 Code: cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 a0 8f 92 65 8b 15 a8 44 cf 10 <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 7c 16 00 00 RSP: 0018:ffffc90000bb7638 EFLAGS: 00000202 RAX: ffffffff81b4ec2b RBX: 1ffff110170c8441 RCX: ffff88801b3b0000 RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc90000bb77c0 R08: ffffffff8f9dcc77 R09: 1ffffffff1f3b98e R10: dffffc0000000000 R11: fffffbfff1f3b98f R12: ffff8880b8642208 R13: dffffc0000000000 R14: ffff8880b873b240 R15: 0000000000000000 csd_lock_wait kernel/smp.c:342 [inline] smp_call_function_many_cond+0xd4b/0x12d0 kernel/smp.c:877 on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1043 on_each_cpu include/linux/smp.h:71 [inline] smp_text_poke_sync_each_cpu arch/x86/kernel/alternative.c:2713 [inline] smp_text_poke_batch_finish+0x5f9/0x1130 arch/x86/kernel/alternative.c:2923 arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146 static_key_enable_cpuslocked+0x128/0x250 kernel/jump_label.c:210 static_key_enable+0x1a/0x20 kernel/jump_label.c:223 toggle_allocation_gate+0xad/0x240 mm/kfence/core.c:852 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245