syzbot


INFO: rcu detected stall in sys_recvmmsg

Status: upstream: reported on 2025/07/18 08:32
Reported-by: syzbot+426bd78d8547d0759eee@syzkaller.appspotmail.com
First crash: 119d, last: 17d
Similar bugs (9)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in sys_recvmmsg (3) mm net 1 199 1d05h 696d 0/29 upstream: reported on 2023/12/19 09:31
linux-6.1 INFO: rcu detected stall in sys_recvmmsg (3) 1 15 14d 353d 0/3 upstream: reported on 2024/11/26 05:10
linux-4.19 INFO: rcu detected stall in sys_recvmmsg 1 C error 1 1057d 1057d 0/1 upstream: reported C repro on 2022/12/23 04:58
linux-5.15 INFO: rcu detected stall in sys_recvmmsg missing-backport origin:upstream 1 C done 61 1d13h 953d 0/3 upstream: reported C repro on 2023/04/06 01:32
linux-6.1 INFO: rcu detected stall in sys_recvmmsg (2) 1 5 456d 588d 0/3 auto-obsoleted due to no activity on 2024/11/22 11:58
upstream INFO: rcu detected stall in sys_recvmmsg mptcp 1 C done 52 1383d 1514d 20/29 fixed on 2022/03/08 16:11
linux-6.1 INFO: rcu detected stall in sys_recvmmsg 1 5 834d 965d 0/3 auto-obsoleted due to no activity on 2023/11/11 06:06
upstream INFO: rcu detected stall in sys_recvmmsg (2) net 1 4 1143d 1173d 0/29 auto-obsoleted due to no activity on 2023/01/03 09:53
android-5-15 BUG: soft lockup in sys_recvmmsg 1 5 477d 569d 0/2 auto-obsoleted due to no activity on 2024/10/23 09:30

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P11565/1:b..l
rcu: 	(detected by 0, t=10502 jiffies, g=64929, q=328 ncpus=2)
task:syz.5.1241      state:R  running task     stack:25832 pid:11565 ppid:7939   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5380 [inline]
 __schedule+0x14d2/0x44d0 kernel/sched/core.c:6699
 preempt_schedule_irq+0xb5/0x140 kernel/sched/core.c:7009
 irqentry_exit+0x67/0x70 kernel/entry/common.c:438
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687
RIP: 0010:lock_acquire+0x1f2/0x410 kernel/locking/lockdep.c:5758
Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00
RSP: 0018:ffffc9000479ef40 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 0000000000000000 RCX: fa07e66fee81ad00
RDX: 0000000000000000 RSI: ffffffff8aaacee0 RDI: ffffffff8afc6a80
RBP: ffffc9000479f048 R08: dffffc0000000000 R09: 1ffffffff21b50a0
R10: dffffc0000000000 R11: fffffbfff21b50a1 R12: 1ffff920008f3df4
R13: ffffffff8cd2ff20 R14: 0000000000000246 R15: dffffc0000000000
 rcu_lock_acquire include/linux/rcupdate.h:334 [inline]
 rcu_read_lock include/linux/rcupdate.h:786 [inline]
 page_ext_get+0x3e/0x2b0 mm/page_ext.c:508
 __page_table_check_zero+0x138/0x4b0 mm/page_table_check.c:148
 prep_new_page mm/page_alloc.c:1561 [inline]
 get_page_from_freelist+0x195c/0x19f0 mm/page_alloc.c:3191
 __alloc_pages+0x1e3/0x460 mm/page_alloc.c:4457
 __folio_alloc+0x10/0x20 mm/page_alloc.c:4489
 vma_alloc_folio+0x47a/0x8f0 mm/mempolicy.c:2242
 wp_page_copy mm/memory.c:3089 [inline]
 do_wp_page+0x128e/0x3630 mm/memory.c:3468
 handle_pte_fault mm/memory.c:5041 [inline]
 __handle_mm_fault mm/memory.c:5166 [inline]
 handle_mm_fault+0x12d4/0x4920 mm/memory.c:5331
 do_user_addr_fault+0x738/0x12e0 arch/x86/mm/fault.c:1373
 handle_page_fault arch/x86/mm/fault.c:1465 [inline]
 exc_page_fault+0x67/0x110 arch/x86/mm/fault.c:1521
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:608
RIP: 0010:__put_user_nocheck_4+0x7/0x10 arch/x86/lib/putuser.S:98
Code: 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09
RSP: 0018:ffffc9000479f8d8 EFLAGS: 00050202
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000020000024a030
RDX: ffff8880246b9e00 RSI: 0000000000000002 RDI: 00000000ffffffff
RBP: ffffc9000479fa70 R08: ffffc9000479f687 R09: 1ffff920008f3ed0
R10: dffffc0000000000 R11: fffff520008f3ed1 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000002 R15: 000020000024a000
 ____sys_recvmsg+0x388/0x5b0 net/socket.c:2827
 ___sys_recvmsg+0x1b6/0x510 net/socket.c:2856
 do_recvmmsg+0x360/0x7d0 net/socket.c:2950
 __sys_recvmmsg net/socket.c:3029 [inline]
 __do_sys_recvmmsg net/socket.c:3052 [inline]
 __se_sys_recvmmsg net/socket.c:3045 [inline]
 __x64_sys_recvmmsg+0x191/0x240 net/socket.c:3045
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f4c0a98efc9
RSP: 002b:00007f4c0b8df038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
RAX: ffffffffffffffda RBX: 00007f4c0abe6090 RCX: 00007f4c0a98efc9
RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005
RBP: 00007f4c0aa11f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f4c0abe6128 R14: 00007f4c0abe6090 R15: 00007ffc537a54d8
 </TASK>
rcu: rcu_preempt kthread starved for 10508 jiffies! g64929 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27112 pid:17    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5380 [inline]
 __schedule+0x14d2/0x44d0 kernel/sched/core.c:6699
 schedule+0xbd/0x170 kernel/sched/core.c:6773
 schedule_timeout+0x160/0x280 kernel/time/timer.c:2167
 rcu_gp_fqs_loop+0x302/0x1560 kernel/rcu/tree.c:1667
 rcu_gp_kthread+0x99/0x380 kernel/rcu/tree.c:1866
 kthread+0x2fa/0x390 kernel/kthread.c:388
 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:148
Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 03 75 39 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56
RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2
RAX: f3fb2bb95b765900 RBX: ffffffff8161879b RCX: f3fb2bb95b765900
RDX: 0000000000000001 RSI: ffffffff8aaabd60 RDI: ffffffff8afc6a80
RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65
R10: dffffc0000000000 R11: ffffed10171e6d66 R12: ffffffff8e4a8b28
R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100374c780
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb2afc03311 CR3: 00000000667a3000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 arch_safe_halt arch/x86/include/asm/paravirt.h:108 [inline]
 default_idle+0x13/0x20 arch/x86/kernel/process.c:753
 default_idle_call+0x6c/0xa0 kernel/sched/idle.c:97
 cpuidle_idle_call kernel/sched/idle.c:170 [inline]
 do_idle+0x1eb/0x510 kernel/sched/idle.c:282
 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:380
 start_secondary+0xee/0xf0 arch/x86/kernel/smpboot.c:323
 secondary_startup_64_no_verify+0x179/0x17b
 </TASK>

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/10/27 23:55 linux-6.6.y 4a243110dc88 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan INFO: rcu detected stall in sys_recvmmsg
2025/10/19 13:47 linux-6.6.y 0bbbd97a442d 1c8c8cd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan INFO: rcu detected stall in sys_recvmmsg
2025/10/17 17:57 linux-6.6.y 0bbbd97a442d 7adf5298 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan INFO: rcu detected stall in sys_recvmmsg
2025/09/21 04:05 linux-6.6.y af1544b5d072 67c37560 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan INFO: rcu detected stall in sys_recvmmsg
2025/08/06 05:44 linux-6.6.y 3a8ababb8b6a ffe1dd46 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan INFO: rcu detected stall in sys_recvmmsg
2025/07/18 08:32 linux-6.6.y d96eb99e2f0e 88248e14 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan INFO: rcu detected stall in sys_recvmmsg
* Struck through repros no longer work on HEAD.