WARNING in rxrpc_recvmsg

Status: fixed on 2020/11/16 12:12
Subsystems: afs net
[Documentation on labels]
Fix commit: 65550098c1c4 rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
First crash: 1420d, last: 1419d
Cause bisection: failed (error log, bisect log)
Fix bisection: fixed by (bisect log) :
commit 65550098c1c4db528400c73acf3e46bfa78d9264
Author: David Howells <>
Date: Tue Jul 28 23:03:56 2020 +0000

  rxrpc: Fix race between recvmsg and sendmsg on immediate call failure

Discussions (1)
Title Replies (including bot) Last reply
WARNING in rxrpc_recvmsg 1 (3) 2020/11/11 11:24

Sample crash report:
------------[ cut here ]------------
DEBUG_LOCKS_WARN_ON(lock->magic != lock)
WARNING: CPU: 1 PID: 6876 at kernel/locking/mutex.c:1415 mutex_trylock+0x220/0x2c0 kernel/locking/mutex.c:1415
Kernel panic - not syncing: panic_on_warn set ...
CPU: 1 PID: 6876 Comm: syz-executor217 Not tainted 5.8.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x18f/0x20d lib/dump_stack.c:118
 panic+0x2e3/0x75c kernel/panic.c:231
 __warn.cold+0x20/0x45 kernel/panic.c:600
 report_bug+0x1bd/0x210 lib/bug.c:198
 handle_bug+0x38/0x90 arch/x86/kernel/traps.c:235
 exc_invalid_op+0x13/0x40 arch/x86/kernel/traps.c:255
 asm_exc_invalid_op+0x12/0x20 arch/x86/include/asm/idtentry.h:563
RIP: 0010:mutex_trylock+0x220/0x2c0 kernel/locking/mutex.c:1415
Code: 08 84 d2 0f 85 99 00 00 00 8b 3d cb 08 c8 02 85 ff 0f 85 6a fe ff ff 48 c7 c6 a0 9c 4b 88 48 c7 c7 60 9a 4b 88 e8 82 77 5e f9 <0f> 0b e9 50 fe ff ff ff 74 24 38 48 8d 7b 68 45 31 c9 31 c9 41 b8
RSP: 0018:ffffc900016a7818 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffff8880910603f8 RCX: 0000000000000000
RDX: ffff888097834140 RSI: ffffffff815d4f87 RDI: fffff520002d4ef5
RBP: ffff888091060080 R08: 0000000000000000 R09: ffffffff89bb5be3
R10: 000000000000059c R11: 0000000000000001 R12: ffffffff8c90d1a0
R13: ffff8880910603c0 R14: 0000000000000000 R15: ffff8880910605b8
 rxrpc_recvmsg+0x695/0x1a03 net/rxrpc/recvmsg.c:593
 sock_recvmsg_nosec net/socket.c:886 [inline]
 sock_recvmsg net/socket.c:904 [inline]
 sock_recvmsg net/socket.c:900 [inline]
 ____sys_recvmsg+0x2c4/0x640 net/socket.c:2575
 ___sys_recvmsg+0x127/0x200 net/socket.c:2617
 do_recvmmsg+0x24d/0x6d0 net/socket.c:2715
 __sys_recvmmsg net/socket.c:2794 [inline]
 __do_sys_recvmmsg net/socket.c:2817 [inline]
 __se_sys_recvmmsg net/socket.c:2810 [inline]
 __x64_sys_recvmmsg+0x20b/0x260 net/socket.c:2810
 do_syscall_64+0x60/0xe0 arch/x86/entry/common.c:359
RIP: 0033:0x446cd9
Code: Bad RIP value.
RSP: 002b:00007f42cfd77d98 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
RAX: ffffffffffffffda RBX: 00000000006dcc38 RCX: 0000000000446cd9
RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00000000006dcc30 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dcc3c
R13: 0000000000000007 R14: 0000000100000110 R15: 0000000000000018
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/07/04 09:15 upstream 7cc2a8ea1048 51095195 .config console log report syz C ci-upstream-kasan-gce-root
2020/07/03 14:25 upstream cd77006e01b3 bed10395 .config console log report syz C ci-upstream-kasan-gce-root
2020/07/03 13:25 upstream cd77006e01b3 bed10395 .config console log report syz C ci-upstream-kasan-gce
2020/07/03 12:29 upstream cd77006e01b3 bed10395 .config console log report syz C ci-upstream-kasan-gce-smack-root
2020/07/03 09:23 linux-next aab2003999e7 bed10395 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.