rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	0-...!: (0 ticks this GP) idle=40d/1/0x4000000000000000 softirq=39061/39061 fqs=0 
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P2972/1:b..l
	(detected by 1, t=10502 jiffies, g=56653, q=76)
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 10159 Comm: syz-executor.3 Not tainted 5.16.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:match_held_lock+0x0/0xb0 kernel/locking/lockdep.c:5085
Code: db 48 c7 c7 60 ff 6e 8a 48 c7 c6 a0 ff 6e 8a 31 c0 e8 14 d7 43 f7 0f 0b eb 8b 0f 0b eb 87 e8 c7 fa ff ff 0f 1f 80 00 00 00 00 <55> 53 bd 01 00 00 00 48 39 77 10 74 67 48 89 fb 81 7f 20 00 00 10
RSP: 0018:ffffc90000007c10 EFLAGS: 00000087
RAX: 0000000000000003 RBX: ffff8880735b44b0 RCX: 0000000080010003
RDX: ffff8880735b3a00 RSI: ffffffff8cb1dd60 RDI: ffff8880735b44b0
RBP: 0000000000000002 R08: ffffffff8173b8c9 R09: fffffbfff1bfd5be
R10: fffffbfff1bfd5be R11: 0000000000000000 R12: 0000000000000046
R13: ffff8880735b3a00 R14: 00000000ffffffff R15: ffffffff8cb1dd60
FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2cb21000 CR3: 000000002cb84000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __lock_is_held kernel/locking/lockdep.c:5380 [inline]
 lock_is_held_type+0xb1/0x190 kernel/locking/lockdep.c:5680
 lock_is_held include/linux/lockdep.h:283 [inline]
 rcu_read_lock_sched_held+0x89/0x130 kernel/rcu/update.c:125
 trace_hrtimer_start+0xaf/0x270 include/trace/events/timer.h:195
 debug_activate kernel/time/hrtimer.c:476 [inline]
 enqueue_hrtimer kernel/time/hrtimer.c:1084 [inline]
 __run_hrtimer kernel/time/hrtimer.c:1702 [inline]
 __hrtimer_run_queues+0x59e/0xa60 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x3b3/0x1040 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
 __sysvec_apic_timer_interrupt+0xf9/0x270 arch/x86/kernel/apic/apic.c:1103
 sysvec_apic_timer_interrupt+0x8c/0xb0 arch/x86/kernel/apic/apic.c:1097
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x12/0x20
RIP: 0010:folio_memcg_unlock+0x9/0x1c0 mm/memcontrol.c:2072
Code: c9 75 09 48 89 df 5b e9 e5 fa ff ff 48 ff c8 48 89 c3 eb ef 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 41 57 41 56 41 55 41 54 <53> 50 49 89 fe 49 bd 00 00 00 00 00 fc ff df 48 8d 5f 08 48 89 d8
RSP: 0018:ffffc900050cf430 EFLAGS: 00000246
RAX: ffffea0001ff9688 RBX: ffffc900050cf600 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0001ff8940
RBP: ffffc900050cf670 R08: ffffffff81c215e8 R09: fffff940003ff12f
R10: fffff940003ff12f R11: 0000000000000000 R12: 0000000000000000
R13: ffffea0001ff8948 R14: ffffea0001ff8940 R15: dffffc0000000000
 zap_pte_range mm/memory.c:1357 [inline]
 zap_pmd_range mm/memory.c:1467 [inline]
 zap_pud_range mm/memory.c:1496 [inline]
 zap_p4d_range mm/memory.c:1517 [inline]
 unmap_page_range+0x12dd/0x23e0 mm/memory.c:1538
 unmap_vmas+0x202/0x390 mm/memory.c:1615
 exit_mmap+0x3c6/0x6f0 mm/mmap.c:3170
 __mmput+0x111/0x3a0 kernel/fork.c:1113
 exit_mm+0x211/0x2f0 kernel/exit.c:507
 do_exit+0x688/0x2340 kernel/exit.c:819
 do_group_exit+0x168/0x2d0 kernel/exit.c:929
 get_signal+0x1740/0x2120 kernel/signal.c:2852
 arch_do_signal_or_restart+0x9c/0x730 arch/x86/kernel/signal.c:868
 handle_signal_work kernel/entry/common.c:148 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
 exit_to_user_mode_prepare+0x191/0x220 kernel/entry/common.c:207
 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
 syscall_exit_to_user_mode+0x2e/0x70 kernel/entry/common.c:300
 do_syscall_64+0x53/0xd0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f7fbed65e99
Code: Unable to access opcode bytes at RIP 0x7f7fbed65e6f.
RSP: 002b:00007f7fbd6db218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000001 RBX: 00007f7fbee78f68 RCX: 00007f7fbed65e99
RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7fbee78f6c
RBP: 00007f7fbee78f60 R08: 000000000000000e R09: 0000000000000000
R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7fbee78f6c
R13: 00007ffc52dbdb2f R14: 00007f7fbd6db300 R15: 0000000000022000
 </TASK>
task:udevd           state:R  running task     stack:22192 pid: 2972 ppid:     1 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4972 [inline]
 __schedule+0xb72/0x1460 kernel/sched/core.c:6253
 preempt_schedule_irq+0xf7/0x1c0 kernel/sched/core.c:6668
 irqentry_exit+0x56/0x90 kernel/entry/common.c:425
 asm_sysvec_apic_timer_interrupt+0x12/0x20
RIP: 0010:lock_acquire+0x21f/0x4d0 kernel/locking/lockdep.c:5641
Code: 08 4c 89 f7 e8 32 08 69 00 f6 84 24 81 00 00 00 02 0f 85 13 02 00 00 41 f7 c4 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 43 c7 44 2f 09 00 00 00 00 43 c7 44 2f 11
RSP: 0018:ffffc90001d1f420 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 1ffff920003a3e94 RCX: ffff88807cd74458
RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90001d1f578 R08: dffffc0000000000 R09: fffffbfff1ff3ddd
R10: fffffbfff1ff3ddd R11: 0000000000000000 R12: 0000000000000246
R13: 1ffff920003a3e8c R14: ffffc90001d1f4a0 R15: dffffc0000000000
 rcu_lock_acquire+0x2a/0x30 include/linux/rcupdate.h:268
 rcu_read_lock include/linux/rcupdate.h:688 [inline]
 dput+0x56/0x6e0 fs/dcache.c:874
 step_into+0x409/0x1f90 fs/namei.c:1809
 walk_component+0x33a/0x790 fs/namei.c:1976
 link_path_walk+0x697/0xd00
 path_lookupat+0xab/0x6c0 fs/namei.c:2448
 filename_lookup+0x270/0x640 fs/namei.c:2478
 user_path_at_empty+0x40/0x1a0 fs/namei.c:2801
 user_path_at include/linux/namei.h:57 [inline]
 vfs_statx+0x10a/0x3f0 fs/stat.c:221
 vfs_fstatat fs/stat.c:243 [inline]
 __do_sys_newfstatat fs/stat.c:412 [inline]
 __se_sys_newfstatat+0xc8/0x760 fs/stat.c:406
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f774569e1da
RSP: 002b:00007ffeb124bba8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
RAX: ffffffffffffffda RBX: 000055c1624e94c0 RCX: 00007f774569e1da
RDX: 00007ffeb124bbb8 RSI: 00007ffeb124c048 RDI: 00000000ffffff9c
RBP: 00007ffeb124bc48 R08: 0000000000000000 R09: 000055c1624d1260
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb124c048
R13: 00007ffeb124bbb8 R14: 000055c1624bd910 R15: 0000000000000000
 </TASK>
rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g56653 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: 	Possible timer handling issue on cpu=0 timer-softirq=27128
rcu: rcu_preempt kthread starved for 10502 jiffies! g56653 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:I stack:26576 pid:   14 ppid:     2 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4972 [inline]
 __schedule+0xb72/0x1460 kernel/sched/core.c:6253
 schedule+0x12b/0x1f0 kernel/sched/core.c:6326
 schedule_timeout+0x1b9/0x300 kernel/time/timer.c:1881
 rcu_gp_fqs_loop+0x1fd/0x770 kernel/rcu/tree.c:1955
 rcu_gp_kthread+0xa5/0x350 kernel/rcu/tree.c:2128
 kthread+0x468/0x490 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 10159 Comm: syz-executor.3 Not tainted 5.16.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__kasan_check_read+0x6/0x10 mm/kasan/shadow.c:31
Code: 0c 31 db 48 c7 c7 aa 15 40 8c 4c 89 fe 31 c0 e8 38 d9 9a ff eb d3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 89 f6 48 8b 0c 24 <31> d2 e9 63 ee ff ff 0f 1f 00 89 f6 48 8b 0c 24 ba 01 00 00 00 e9
RSP: 0018:ffffc90000007938 EFLAGS: 00000002
RAX: 0000000000000001 RBX: 000000000000005b RCX: ffffffff8165f9af
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ff9eee8
RBP: ffffc90000007a90 R08: dffffc0000000000 R09: fffffbfff1ff3ddd
R10: fffffbfff1ff3ddd R11: 0000000000000000 R12: 0000000000000002
R13: 0000000000000002 R14: 0000000000000002 R15: ffff8880735b44d0
FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2cb21000 CR3: 000000002cb84000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 instrument_atomic_read include/linux/instrumented.h:71 [inline]
 test_bit include/asm-generic/bitops/instrumented-non-atomic.h:134 [inline]
 hlock_class kernel/locking/lockdep.c:199 [inline]
 check_wait_context kernel/locking/lockdep.c:4725 [inline]
 __lock_acquire+0x81f/0x2b00 kernel/locking/lockdep.c:4977
 lock_acquire+0x19f/0x4d0 kernel/locking/lockdep.c:5637
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
 _raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162
 debug_object_deactivate+0x61/0x400 lib/debugobjects.c:735
 debug_hrtimer_deactivate kernel/time/hrtimer.c:425 [inline]
 debug_deactivate kernel/time/hrtimer.c:481 [inline]
 __run_hrtimer kernel/time/hrtimer.c:1653 [inline]
 __hrtimer_run_queues+0x2f9/0xa60 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x3b3/0x1040 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
 __sysvec_apic_timer_interrupt+0xf9/0x270 arch/x86/kernel/apic/apic.c:1103
 sysvec_apic_timer_interrupt+0x8c/0xb0 arch/x86/kernel/apic/apic.c:1097
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x12/0x20
RIP: 0010:folio_memcg_unlock+0x9/0x1c0 mm/memcontrol.c:2072
Code: c9 75 09 48 89 df 5b e9 e5 fa ff ff 48 ff c8 48 89 c3 eb ef 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 41 57 41 56 41 55 41 54 <53> 50 49 89 fe 49 bd 00 00 00 00 00 fc ff df 48 8d 5f 08 48 89 d8
RSP: 0018:ffffc900050cf430 EFLAGS: 00000246
RAX: ffffea0001ff9688 RBX: ffffc900050cf600 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0001ff8940
RBP: ffffc900050cf670 R08: ffffffff81c215e8 R09: fffff940003ff12f
R10: fffff940003ff12f R11: 0000000000000000 R12: 0000000000000000
R13: ffffea0001ff8948 R14: ffffea0001ff8940 R15: dffffc0000000000
 zap_pte_range mm/memory.c:1357 [inline]
 zap_pmd_range mm/memory.c:1467 [inline]
 zap_pud_range mm/memory.c:1496 [inline]
 zap_p4d_range mm/memory.c:1517 [inline]
 unmap_page_range+0x12dd/0x23e0 mm/memory.c:1538
 unmap_vmas+0x202/0x390 mm/memory.c:1615
 exit_mmap+0x3c6/0x6f0 mm/mmap.c:3170
 __mmput+0x111/0x3a0 kernel/fork.c:1113
 exit_mm+0x211/0x2f0 kernel/exit.c:507
 do_exit+0x688/0x2340 kernel/exit.c:819
 do_group_exit+0x168/0x2d0 kernel/exit.c:929
 get_signal+0x1740/0x2120 kernel/signal.c:2852
 arch_do_signal_or_restart+0x9c/0x730 arch/x86/kernel/signal.c:868
 handle_signal_work kernel/entry/common.c:148 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
 exit_to_user_mode_prepare+0x191/0x220 kernel/entry/common.c:207
 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
 syscall_exit_to_user_mode+0x2e/0x70 kernel/entry/common.c:300
 do_syscall_64+0x53/0xd0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f7fbed65e99
Code: Unable to access opcode bytes at RIP 0x7f7fbed65e6f.
RSP: 002b:00007f7fbd6db218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000001 RBX: 00007f7fbee78f68 RCX: 00007f7fbed65e99
RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7fbee78f6c
RBP: 00007f7fbee78f60 R08: 000000000000000e R09: 0000000000000000
R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7fbee78f6c
R13: 00007ffc52dbdb2f R14: 00007f7fbd6db300 R15: 0000000000022000
 </TASK>
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	48 c7 c7 60 ff 6e 8a 	mov    $0xffffffff8a6eff60,%rdi
   7:	48 c7 c6 a0 ff 6e 8a 	mov    $0xffffffff8a6effa0,%rsi
   e:	31 c0                	xor    %eax,%eax
  10:	e8 14 d7 43 f7       	callq  0xf743d729
  15:	0f 0b                	ud2
  17:	eb 8b                	jmp    0xffffffa4
  19:	0f 0b                	ud2
  1b:	eb 87                	jmp    0xffffffa4
  1d:	e8 c7 fa ff ff       	callq  0xfffffae9
  22:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
* 29:	55                   	push   %rbp <-- trapping instruction
  2a:	53                   	push   %rbx
  2b:	bd 01 00 00 00       	mov    $0x1,%ebp
  30:	48 39 77 10          	cmp    %rsi,0x10(%rdi)
  34:	74 67                	je     0x9d
  36:	48 89 fb             	mov    %rdi,%rbx
  39:	81                   	.byte 0x81
  3a:	7f 20                	jg     0x5c
  3c:	00 00                	add    %al,(%rax)
  3e:	10                   	.byte 0x10