rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P2972/2:b..l
	(detected by 0, t=10502 jiffies, g=22869, q=39)
task:udevd           state:R  running task     stack:26624 pid: 2972 ppid:     1 flags:0x00000000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4972 [inline]
 __schedule+0xa9a/0x4900 kernel/sched/core.c:6253
 preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:6668
 irqentry_exit+0x31/0x80 kernel/entry/common.c:425
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:27 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:166 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 kernel/kcov.c:200
Code: 48 89 ef 5d e9 d1 c0 45 00 5d be 03 00 00 00 e9 b6 35 64 02 66 0f 1f 44 00 00 48 8b be b0 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 <65> 8b 05 f9 a7 8b 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b
RSP: 0018:ffffc90001b17880 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000000
RDX: ffff88807bf9a240 RSI: ffffffff81d7627e RDI: 0000000000000003
RBP: ffffc90001b17990 R08: 0000000000000000 R09: 0000000000000001
R10: ffffffff81d76274 R11: 0000000000000001 R12: 0000000000000000
R13: ffffc90001b17d78 R14: dffffc0000000000 R15: dffffc0000000000
 __seqprop_spinlock_sequence include/linux/seqlock.h:277 [inline]
 read_seqbegin include/linux/seqlock.h:840 [inline]
 read_seqbegin_or_lock include/linux/seqlock.h:1144 [inline]
 prepend_path+0x3b4/0xea0 fs/d_path.c:170
 d_absolute_path+0xef/0x1a0 fs/d_path.c:233
 tomoyo_get_absolute_path security/tomoyo/realpath.c:101 [inline]
 tomoyo_realpath_from_path+0x288/0x620 security/tomoyo/realpath.c:276
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_path_perm+0x21b/0x400 security/tomoyo/file.c:822
 security_inode_getattr+0xcf/0x140 security/security.c:1334
 vfs_getattr fs/stat.c:157 [inline]
 vfs_statx+0x164/0x390 fs/stat.c:225
 vfs_fstatat fs/stat.c:243 [inline]
 __do_sys_newfstatat+0x96/0x120 fs/stat.c:412
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f34d1e8a1da
RSP: 002b:00007fffa69b4988 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f34d1e8a1da
RDX: 00007fffa69b4998 RSI: 00007fffa69b4e28 RDI: 00000000ffffff9c
RBP: 00007fffa69b4a28 R08: 0000000000000000 R09: 00007f34d1f5aa60
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa69b4e28
R13: 00007fffa69b4998 R14: 000055eb767892c0 R15: 0000000000000000
 </TASK>
rcu: rcu_preempt kthread timer wakeup didn't happen for 9161 jiffies! g22869 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: 	Possible timer handling issue on cpu=1 timer-softirq=14293
rcu: rcu_preempt kthread starved for 9162 jiffies! g22869 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:I stack:28936 pid:   14 ppid:     2 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4972 [inline]
 __schedule+0xa9a/0x4900 kernel/sched/core.c:6253
 schedule+0xd2/0x260 kernel/sched/core.c:6326
 schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1881
 rcu_gp_fqs_loop+0x186/0x810 kernel/rcu/tree.c:1955
 rcu_gp_kthread+0x1de/0x320 kernel/rcu/tree.c:2128
 kthread+0x405/0x4f0 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 10119 Comm: syz-executor.3 Not tainted 5.16.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:lock_acquire+0x229/0x510 kernel/locking/lockdep.c:5641
Code: 00 00 48 8b 84 24 a8 00 00 00 65 48 2b 04 25 28 00 00 00 0f 85 a3 02 00 00 48 81 c4 b0 00 00 00 5b 5d 41 5c 41 5d 41 5e 41 5f <c3> 65 8b 05 9f 95 a6 7e 85 c0 75 b0 65 8b 05 14 8b a6 7e a9 00 00
RSP: 0018:ffffc90000fd8d30 EFLAGS: 00000086
RAX: 0000000000000000 RBX: 000000000007be40 RCX: 000000000000c199
RDX: 1ffff11005c9cd9b RSI: 0000000000010002 RDI: 0000000000000000
RBP: ffffffff906d9228 R08: 0000000000000000 R09: ffffffff8ff7aa07
R10: fffffbfff1fef540 R11: 0000000000000001 R12: 0000000000000002
R13: ffffffff89adee60 R14: 1ffff920001fb1ad R15: ffff888026de23a8
FS:  00007f1fae344700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c01a15c180 CR3: 000000001a682000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
 _raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:162
 debug_object_deactivate lib/debugobjects.c:735 [inline]
 debug_object_deactivate+0x101/0x300 lib/debugobjects.c:723
 debug_hrtimer_deactivate kernel/time/hrtimer.c:425 [inline]
 debug_deactivate kernel/time/hrtimer.c:481 [inline]
 __run_hrtimer kernel/time/hrtimer.c:1653 [inline]
 __hrtimer_run_queues+0x3f8/0xe50 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
 __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:__sanitizer_cov_trace_pc+0x5c/0x60 kernel/kcov.c:210
Code: 82 80 15 00 00 83 f8 02 75 20 48 8b 8a 88 15 00 00 8b 92 84 15 00 00 48 8b 01 48 83 c0 01 48 39 c2 76 07 48 89 34 c1 48 89 01 <c3> 0f 1f 00 41 55 41 54 49 89 fc 55 48 bd eb 83 b5 80 46 86 c8 61
RSP: 0018:ffffc9000e3ef888 EFLAGS: 00000246
RAX: 0000000000040000 RBX: 0000000000000003 RCX: ffffc90004a79000
RDX: 0000000000040000 RSI: ffffffff8438dc3b RDI: 0000000000000003
RBP: ffff88801a80b904 R08: 0000000000000000 R09: ffff88801a80b907
R10: ffffffff8438dc2e R11: 0000000000400043 R12: ffff88801a80b900
R13: ffffc9000e3ef930 R14: dffffc0000000000 R15: 0000000000400060
 __refcount_add include/linux/refcount.h:200 [inline]
 __refcount_inc include/linux/refcount.h:250 [inline]
 refcount_inc include/linux/refcount.h:267 [inline]
 kref_get include/linux/kref.h:45 [inline]
 tty_driver_kref_get include/linux/tty_driver.h:342 [inline]
 get_tty_driver drivers/tty/tty_io.c:326 [inline]
 tty_lookup_driver+0x17b/0x550 drivers/tty/tty_io.c:1961
 tty_open_by_driver drivers/tty/tty_io.c:2063 [inline]
 tty_open+0x56d/0x1000 drivers/tty/tty_io.c:2146
 chrdev_open+0x266/0x770 fs/char_dev.c:414
 do_dentry_open+0x4b9/0x1240 fs/open.c:822
 do_open fs/namei.c:3426 [inline]
 path_openat+0x1cad/0x2750 fs/namei.c:3559
 do_filp_open+0x1aa/0x400 fs/namei.c:3586
 do_sys_openat2+0x16d/0x4d0 fs/open.c:1212
 do_sys_open fs/open.c:1228 [inline]
 __do_sys_openat fs/open.c:1244 [inline]
 __se_sys_openat fs/open.c:1239 [inline]
 __x64_sys_openat+0x13f/0x1f0 fs/open.c:1239
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f1faf9cee99
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f1fae344168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f1fafae1f60 RCX: 00007f1faf9cee99
RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c
RBP: 00007f1fafa28ff1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc8d1abd9f R14: 00007f1fae344300 R15: 0000000000022000
 </TASK>
----------------
Code disassembly (best guess):
   0:	48 89 ef             	mov    %rbp,%rdi
   3:	5d                   	pop    %rbp
   4:	e9 d1 c0 45 00       	jmpq   0x45c0da
   9:	5d                   	pop    %rbp
   a:	be 03 00 00 00       	mov    $0x3,%esi
   f:	e9 b6 35 64 02       	jmpq   0x26435ca
  14:	66 0f 1f 44 00 00    	nopw   0x0(%rax,%rax,1)
  1a:	48 8b be b0 01 00 00 	mov    0x1b0(%rsi),%rdi
  21:	e8 b4 ff ff ff       	callq  0xffffffda
  26:	31 c0                	xor    %eax,%eax
  28:	c3                   	retq
  29:	90                   	nop
* 2a:	65 8b 05 f9 a7 8b 7e 	mov    %gs:0x7e8ba7f9(%rip),%eax        # 0x7e8ba82a <-- trapping instruction
  31:	89 c1                	mov    %eax,%ecx
  33:	48 8b 34 24          	mov    (%rsp),%rsi
  37:	81 e1 00 01 00 00    	and    $0x100,%ecx
  3d:	65                   	gs
  3e:	48                   	rex.W
  3f:	8b                   	.byte 0x8b