rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5614/2:b..l.. P5757/1:b..l.. rcu: (detected by 1, t=10565 jiffies, g=25773, q=665 ncpus=2) task:kworker/0:8 state:R running task stack:21016 pid:5757 tgid:5757 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: usb_hub_wq hub_event Call Trace: context_switch kernel/sched/core.c:5583 [inline] __schedule+0x125e/0x6990 kernel/sched/core.c:7382 preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:7662 irqentry_exit_cond_resched arch/x86/include/asm/fred.h:105 [inline] irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:453 [inline] irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:543 [inline] irqentry_exit+0x33f/0xab0 kernel/entry/common.c:154 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:lock_acquire+0x5e/0x380 kernel/locking/lockdep.c:5947 Code: 05 4f 5e d1 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 5e 58 81 10 0f 82 c9 02 00 00 8b 35 3e 88 81 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ed 5d d1 13 0f 85 09 03 00 00 48 83 c4 RSP: 0018:ffffc90004076110 EFLAGS: 00000206 RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 RDX: 0000000000000000 RSI: ffffffff8e601eda RDI: ffffffff8c835980 RBP: ffffffff8ffeafe0 R08: 000000007d166366 R09: 0000000000000007 R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:309 [inline] rcu_read_lock include/linux/rcupdate.h:849 [inline] class_rcu_constructor include/linux/rcupdate.h:1216 [inline] unwind_next_frame+0xd1/0x2090 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57 kasan_save_track+0x14/0x30 mm/kasan/common.c:78 poison_kmalloc_redzone mm/kasan/common.c:409 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:426 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5531 [inline] __kmalloc_node_track_caller_noprof+0x33d/0x870 mm/slub.c:5662 kmemdup_noprof+0x29/0x60 mm/util.c:138 kmemdup_noprof include/linux/fortify-string.h:713 [inline] __joycon_hid_send+0x22/0xe0 drivers/hid/hid-nintendo.c:810 joycon_hid_send_sync+0xdd/0x510 drivers/hid/hid-nintendo.c:947 joycon_send_usb+0xef/0x1c0 drivers/hid/hid-nintendo.c:982 joycon_init+0x366/0x490 drivers/hid/hid-nintendo.c:2545 joycon_probe drivers/hid/hid-nintendo.c:2785 [inline] nintendo_hid_probe+0x48b/0xe60 drivers/hid/hid-nintendo.c:4527 __hid_device_probe drivers/hid/hid-core.c:2839 [inline] hid_device_probe+0x4fe/0x850 drivers/hid/hid-core.c:2878 call_driver_probe drivers/base/dd.c:629 [inline] really_probe+0x241/0xa60 drivers/base/dd.c:707 __driver_probe_device+0x210/0x460 drivers/base/dd.c:869 driver_probe_device+0x4a/0x140 drivers/base/dd.c:899 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1027 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500 __device_attach+0x1e4/0x4c0 drivers/base/dd.c:1131 device_initial_probe+0xaf/0xf0 drivers/base/dd.c:1190 __bus_probe_device+0x60/0x160 drivers/base/bus.c:614 device_add+0x121d/0x1970 drivers/base/core.c:3778 hid_add_device+0x2bf/0x440 drivers/hid/hid-core.c:3065 usbhid_probe+0xa64/0x10b0 drivers/hid/usbhid/hid-core.c:1459 usb_probe_interface+0x386/0x980 drivers/usb/core/driver.c:399 call_driver_probe drivers/base/dd.c:629 [inline] really_probe+0x241/0xa60 drivers/base/dd.c:707 __driver_probe_device+0x210/0x460 drivers/base/dd.c:869 driver_probe_device+0x4a/0x140 drivers/base/dd.c:899 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1027 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500 __device_attach+0x1e4/0x4c0 drivers/base/dd.c:1131 device_initial_probe+0xaf/0xf0 drivers/base/dd.c:1190 __bus_probe_device+0x60/0x160 drivers/base/bus.c:614 device_add+0x121d/0x1970 drivers/base/core.c:3778 usb_set_configuration+0xd97/0x1dc0 drivers/usb/core/message.c:2280 usb_generic_driver_probe+0xa1/0xe0 drivers/usb/core/generic.c:250 usb_probe_device+0xef/0x400 drivers/usb/core/driver.c:293 call_driver_probe drivers/base/dd.c:629 [inline] really_probe+0x241/0xa60 drivers/base/dd.c:707 __driver_probe_device+0x210/0x460 drivers/base/dd.c:869 driver_probe_device+0x4a/0x140 drivers/base/dd.c:899 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1027 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500 __device_attach+0x1e4/0x4c0 drivers/base/dd.c:1131 device_initial_probe+0xaf/0xf0 drivers/base/dd.c:1190 __bus_probe_device+0x60/0x160 drivers/base/bus.c:614 device_add+0x121d/0x1970 drivers/base/core.c:3778 usb_new_device.part.0+0xcc2/0x1686 drivers/usb/core/hub.c:2713 usb_new_device include/linux/workqueue.h:715 [inline] hub_port_connect drivers/usb/core/hub.c:5585 [inline] hub_port_connect_change drivers/usb/core/hub.c:5725 [inline] port_event drivers/usb/core/hub.c:5889 [inline] hub_event.cold+0x1e3/0xe90 drivers/usb/core/hub.c:5971 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3495 process_scheduled_works kernel/workqueue.c:3578 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3659 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 task:syz-executor state:R running task stack:21672 pid:5614 tgid:5614 ppid:5611 task_flags:0x440940 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5583 [inline] __schedule+0x125e/0x6990 kernel/sched/core.c:7382 preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:7662 irqentry_exit_cond_resched arch/x86/include/asm/fred.h:105 [inline] irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:453 [inline] irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:543 [inline] irqentry_exit+0x33f/0xab0 kernel/entry/common.c:154 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:lock_acquire+0x5e/0x380 kernel/locking/lockdep.c:5947 Code: 05 4f 5e d1 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 5e 58 81 10 0f 82 c9 02 00 00 8b 35 3e 88 81 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ed 5d d1 13 0f 85 09 03 00 00 48 83 c4 RSP: 0018:ffffc90003416f48 EFLAGS: 00000206 RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 RDX: 0000000000000000 RSI: ffffffff8e601eda RDI: ffffffff8c835980 RBP: ffffffff8ffeafe0 R08: 0000000021258080 R09: 0000000000000007 R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:309 [inline] rcu_read_lock include/linux/rcupdate.h:849 [inline] xa_load+0xcd/0x2c0 lib/xarray.c:1620 list_lru_from_memcg_idx mm/list_lru.c:78 [inline] list_lru_from_memcg_idx mm/list_lru.c:75 [inline] list_lru_count_one+0x1c0/0x320 mm/list_lru.c:316 list_lru_shrink_count include/linux/list_lru.h:260 [inline] count_shadow_nodes+0x7e/0x410 mm/workingset.c:658 do_shrink_slab+0x83/0x1200 mm/shrinker.c:398 shrink_slab_memcg mm/shrinker.c:569 [inline] shrink_slab+0xa78/0x12d0 mm/shrinker.c:647 shrink_node_memcgs mm/vmscan.c:6440 [inline] shrink_node+0x7c1/0x4410 mm/vmscan.c:6482 shrink_zones mm/vmscan.c:6701 [inline] do_try_to_free_pages+0x2da/0x1500 mm/vmscan.c:6763 try_to_free_mem_cgroup_pages+0x2bf/0x840 mm/vmscan.c:7044 try_charge_memcg+0x505/0xf30 mm/memcontrol.c:2776 charge_memcg+0x1ae/0x210 mm/memcontrol.c:5378 __mem_cgroup_charge+0x2b/0x1c0 mm/memcontrol.c:5395 mem_cgroup_charge include/linux/memcontrol.h:682 [inline] filemap_add_folio+0xe7/0x640 mm/filemap.c:963 page_cache_ra_unbounded+0x37a/0x990 mm/readahead.c:293 do_page_cache_ra+0x10f/0x160 mm/readahead.c:348 page_cache_ra_order+0xc05/0xed0 mm/readahead.c:558 page_cache_async_ra+0x7fc/0xdc0 mm/readahead.c:720 do_async_mmap_readahead mm/filemap.c:3501 [inline] filemap_fault+0xf77/0x3150 mm/filemap.c:3600 __do_fault+0x10b/0x440 mm/memory.c:5677 do_read_fault mm/memory.c:6112 [inline] do_fault+0xb3f/0x1890 mm/memory.c:6246 do_pte_missing mm/memory.c:4778 [inline] handle_pte_fault mm/memory.c:6665 [inline] __handle_mm_fault+0x1858/0x2f40 mm/memory.c:6817 handle_mm_fault+0x363/0xa30 mm/memory.c:6984 do_user_addr_fault+0x59c/0x12f0 arch/x86/mm/fault.c:1343 handle_page_fault arch/x86/mm/fault.c:1483 [inline] exc_page_fault+0x6f/0xd0 arch/x86/mm/fault.c:1536 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595 RIP: 0033:0x7f2b69c6cd31 RSP: 002b:00007ffecfcdbce0 EFLAGS: 00010206 RAX: 0000001b33724000 RBX: 0000000000000106 RCX: 0000000000040b28 RDX: 000000000e26a900 RSI: 00007ffecfcdbd70 RDI: 00007f2b6abb4010 RBP: 00007ffecfcdbd1c R08: 0035930d73eb4b8f R09: 0000000000000001 R10: 000000000000c760 R11: 0000000000000246 R12: 0000000000001388 R13: 00000000000927c0 R14: 0000000000040e3f R15: 00007ffecfcdbd70 rcu: rcu_preempt kthread starved for 10590 jiffies! g25773 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5583 [inline] __schedule+0x125e/0x6990 kernel/sched/core.c:7382 __schedule_loop kernel/sched/core.c:7459 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7474 schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x1a9/0x930 kernel/rcu/tree.c:2122 rcu_gp_kthread+0x179/0x260 kernel/rcu/tree.c:2330 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 7323 Comm: syz.3.345 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 RIP: 0010:get_current arch/x86/include/asm/current.h:23 [inline] RIP: 0010:write_comp_data+0x11/0xb0 kernel/kcov.c:251 Code: fd ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 50 4b ac 13 49 89 f0 49 89 d1 48 89 ce <65> 48 8b 0d 2f 4b ac 13 48 63 d0 a9 00 01 00 ff 74 1e f6 c4 01 74 RSP: 0000:ffffc90004946fc8 EFLAGS: 00000246 RAX: 8000000000000000 RBX: 00000000000ebaeb RCX: ffffffff825e6088 RDX: 0000000000000000 RSI: ffffffff825e6088 RDI: 0000000000000001 RBP: ffff888020b6bf40 R08: 000000000000000c R09: 0000000000000000 R10: ffffffff926aaa5f R11: 0000000000000001 R12: dffffc0000000000 R13: 0000000000000009 R14: ffffc900049476d0 R15: 00000000000ebaeb FS: 000055558d8eb500(0000) GS:ffff888122475000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b33cd6428 CR3: 00000000242fc000 CR4: 00000000003526f0 Call Trace: should_run_aging mm/vmscan.c:5174 [inline] try_to_shrink_lruvec+0x2e8/0x7b0 mm/vmscan.c:5264 lru_gen_shrink_lruvec mm/vmscan.c:5422 [inline] shrink_lruvec+0x313/0x22e0 mm/vmscan.c:6199 shrink_node_memcgs mm/vmscan.c:6438 [inline] shrink_node+0x74f/0x4410 mm/vmscan.c:6482 shrink_zones mm/vmscan.c:6701 [inline] do_try_to_free_pages+0x2da/0x1500 mm/vmscan.c:6763 try_to_free_mem_cgroup_pages+0x2bf/0x840 mm/vmscan.c:7044 try_charge_memcg+0x505/0xf30 mm/memcontrol.c:2776 charge_memcg+0x1ae/0x210 mm/memcontrol.c:5378 __mem_cgroup_charge+0x2b/0x1c0 mm/memcontrol.c:5395 mem_cgroup_charge include/linux/memcontrol.h:682 [inline] filemap_add_folio+0xe7/0x640 mm/filemap.c:963 __filemap_get_folio_mpol+0x57f/0x11d0 mm/filemap.c:2057 __filemap_get_folio include/linux/pagemap.h:758 [inline] filemap_fault+0x6cf/0x3150 mm/filemap.c:3624 __do_fault+0x10b/0x440 mm/memory.c:5677 do_shared_fault mm/memory.c:6176 [inline] do_fault+0x585/0x1890 mm/memory.c:6250 do_pte_missing mm/memory.c:4778 [inline] handle_pte_fault mm/memory.c:6665 [inline] __handle_mm_fault+0x1858/0x2f40 mm/memory.c:6817 handle_mm_fault+0x363/0xa30 mm/memory.c:6984 do_user_addr_fault+0x59c/0x12f0 arch/x86/mm/fault.c:1343 handle_page_fault arch/x86/mm/fault.c:1483 [inline] exc_page_fault+0x6f/0xd0 arch/x86/mm/fault.c:1536 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595 RIP: 0033:0x7f2b69c740b1 Code: 83 e6 07 0f 85 c0 00 00 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 a0 8b fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 <48> 89 58 f8 49 83 c5 01 45 3b 6c 24 04 0f 82 6c fe ff ff 41 80 7f RSP: 002b:00007ffecfcdba10 EFLAGS: 00010206 RAX: 0000001b33cd6430 RBX: ffffffff81bc538c RCX: 0000001b33cd6428 RDX: 0000001b33724224 RSI: 0000000000000008 RDI: 00007f2b6ab55720 RBP: 0000000000000001 R08: 00007f2b6a010000 R09: 00007f2b6a012000 R10: 0000000081bc5390 R11: 0000000000000000 R12: 00007f2b6a026038 R13: 0000000000000000 R14: ffffffff81bc5ae6 R15: 00007f2b6ab55720