audit: backlog limit exceeded
audit: audit_backlog=65 > audit_backlog_limit=64
audit: audit_lost=148045 audit_rate_limit=0 audit_backlog_limit=64
audit: backlog limit exceeded
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10246/1:b..l
rcu: (detected by 0, t=10502 jiffies, g=36489, q=209 ncpus=2)
task:syz.3.1057 state:R running task stack:24384 pid:10246 tgid:10245 ppid:5832 task_flags:0x400140 flags:0x00004002
Call Trace:
context_switch kernel/sched/core.c:5378 [inline]
__schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6944
preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6968
preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12
__raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
_raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186
spin_unlock include/linux/spinlock.h:391 [inline]
do_anonymous_page mm/memory.c:4947 [inline]
do_pte_missing mm/memory.c:4056 [inline]
handle_pte_fault mm/memory.c:5900 [inline]
__handle_mm_fault+0x5ca8/0x70f0 mm/memory.c:6043
handle_mm_fault+0x2c1/0x7e0 mm/memory.c:6212
do_user_addr_fault arch/x86/mm/fault.c:1388 [inline]
handle_page_fault arch/x86/mm/fault.c:1480 [inline]
exc_page_fault+0x2b9/0x8b0 arch/x86/mm/fault.c:1538
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0010:rep_movs_alternative+0x33/0x70 arch/x86/lib/copy_user_64.S:58
Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb
RSP: 0018:ffffc9000f857bc8 EFLAGS: 00050246
RAX: 0000000000000000 RBX: 000040000001b008 RCX: 0000000000000008
RDX: 0000000000000000 RSI: ffffc9000f857c40 RDI: 000040000001b000
RBP: ffffc9000f857cb0 R08: ffffc9000f857c47 R09: 1ffff92001f0af88
R10: dffffc0000000000 R11: fffff52001f0af89 R12: 0000000000000008
R13: 00007ffffffff000 R14: ffffc9000f857c40 R15: 000040000001b000
copy_user_generic arch/x86/include/asm/uaccess_64.h:126 [inline]
raw_copy_to_user arch/x86/include/asm/uaccess_64.h:147 [inline]
_inline_copy_to_user include/linux/uaccess.h:197 [inline]
_copy_to_user+0x8b/0xb0 lib/usercopy.c:26
copy_to_user include/linux/uaccess.h:225 [inline]
msr_read+0x184/0x260 arch/x86/kernel/msr.c:69
vfs_read+0x1f8/0xb40 fs/read_write.c:563
ksys_read+0x18f/0x2b0 fs/read_write.c:708
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7faf5dd8d169
RSP: 002b:00007faf5ec11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007faf5dfa5fa0 RCX: 00007faf5dd8d169
RDX: 0000000000018ff8 RSI: 0000400000019680 RDI: 0000000000000006
RBP: 00007faf5de0e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007faf5dfa5fa0 R15: 00007ffd018cae28
rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g36489 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: Possible timer handling issue on cpu=1 timer-softirq=25534
rcu: rcu_preempt kthread starved for 10502 jiffies! g36489 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:I stack:26104 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5378 [inline]
__schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
__schedule_loop kernel/sched/core.c:6842 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6857
schedule_timeout+0x15a/0x290 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2024
rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2226
kthread+0x7a9/0x920 kernel/kthread.c:464
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 10251 Comm: syz.4.1059 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:lock_acquire+0x2a4/0x550 kernel/locking/lockdep.c:5855
Code: 11 00 00 00 00 66 43 c7 44 25 15 00 00 43 c6 44 25 17 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 00 01 00 00 0f 85 95 02 00 00 <48> 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 65 8b 05
RSP: 0018:ffffc90000a18b00 EFLAGS: 00000046
RAX: 182cf2b2246df300 RBX: 1ffff9200014316c RCX: ffff888065c046e8
RDX: dffffc0000000000 RSI: ffffffff8c2ab700 RDI: ffffffff8c801c20
RBP: ffffc90000a18c58 R08: ffffffff94514847 R09: 1ffffffff28a2908
R10: dffffc0000000000 R11: fffffbfff28a2909 R12: 1ffff92000143168
R13: dffffc0000000000 R14: ffffc90000a18b60 R15: 0000000000000046
FS: 00007f36939b26c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000400000003c80 CR3: 000000006e3a2000 CR4: 00000000003526f0
DR0: 0000000000006f86 DR1: 0000000000000097 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
rcu_read_lock include/linux/rcupdate.h:849 [inline]
advance_sched+0xa1e/0xca0 net/sched/sch_taprio.c:985
__run_hrtimer kernel/time/hrtimer.c:1801 [inline]
__hrtimer_run_queues+0x59b/0xd30 kernel/time/hrtimer.c:1865
hrtimer_interrupt+0x403/0xa40 kernel/time/hrtimer.c:1927
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline]
__sysvec_apic_timer_interrupt+0x110/0x420 arch/x86/kernel/apic/apic.c:1055
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1049
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 kernel/locking/spinlock.c:194
Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 ae 1d 23 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 43 0d 8c f5 65 8b 05 94 7f 00 74 85 c0 74 43 48 c7 04 24 0e 36
RSP: 0018:ffffc9000faa7ba0 EFLAGS: 00000206
RAX: 182cf2b2246df300 RBX: 1ffff92001f54f78 RCX: ffffffff819d2a9a
RDX: dffffc0000000000 RSI: ffffffff8c2aa4a0 RDI: 0000000000000001
RBP: ffffc9000faa7c30 R08: ffffffff94514847 R09: 1ffffffff28a2908
R10: dffffc0000000000 R11: fffffbfff28a2909 R12: dffffc0000000000
R13: 1ffff92001f54f74 R14: ffffc9000faa7bc0 R15: 0000000000000246
clock_was_set+0x686/0x810 kernel/time/hrtimer.c:984
do_settimeofday64+0x343/0x5e0 kernel/time/timekeeping.c:1381
__do_sys_clock_settime kernel/time/posix-timers.c:1135 [inline]
__se_sys_clock_settime kernel/time/posix-timers.c:1119 [inline]
__x64_sys_clock_settime+0x23a/0x280 kernel/time/posix-timers.c:1119
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3692b8d169
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f36939b2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3
RAX: ffffffffffffffda RBX: 00007f3692da5fa0 RCX: 00007f3692b8d169
RDX: 0000000000000000 RSI: 0000400000003c80 RDI: 0000000000000000
RBP: 00007f3692c0e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f3692da5fa0 R15: 00007ffd2cce1eb8
audit: audit_backlog=65 > audit_backlog_limit=64
audit: audit_lost=148046 audit_rate_limit=0 audit_backlog_limit=64
audit: backlog limit exceeded
audit: audit_backlog=65 > audit_backlog_limit=64