syzbot


INFO: rcu detected stall in sys_recvmmsg

Status: upstream: reported on 2025/07/18 08:32
Reported-by: syzbot+426bd78d8547d0759eee@syzkaller.appspotmail.com
First crash: 101d, last: 8d08h
Similar bugs (9)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in sys_recvmmsg (3) mm net 1 195 3d19h 678d 0/29 upstream: reported on 2023/12/19 09:31
linux-6.1 INFO: rcu detected stall in sys_recvmmsg (3) 1 14 58d 335d 0/3 upstream: reported on 2024/11/26 05:10
linux-4.19 INFO: rcu detected stall in sys_recvmmsg 1 C error 1 1039d 1039d 0/1 upstream: reported C repro on 2022/12/23 04:58
linux-5.15 INFO: rcu detected stall in sys_recvmmsg missing-backport origin:upstream 1 C done 58 5d13h 935d 0/3 upstream: reported C repro on 2023/04/06 01:32
linux-6.1 INFO: rcu detected stall in sys_recvmmsg (2) 1 5 439d 570d 0/3 auto-obsoleted due to no activity on 2024/11/22 11:58
upstream INFO: rcu detected stall in sys_recvmmsg mptcp 1 C done 52 1365d 1496d 20/29 fixed on 2022/03/08 16:11
linux-6.1 INFO: rcu detected stall in sys_recvmmsg 1 5 816d 948d 0/3 auto-obsoleted due to no activity on 2023/11/11 06:06
upstream INFO: rcu detected stall in sys_recvmmsg (2) net 1 4 1126d 1156d 0/29 auto-obsoleted due to no activity on 2023/01/03 09:53
android-5-15 BUG: soft lockup in sys_recvmmsg 1 5 459d 552d 0/2 auto-obsoleted due to no activity on 2024/10/23 09:30

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P22689/1:b..l
rcu: 	(detected by 1, t=10502 jiffies, g=156217, q=66 ncpus=2)
task:syz.0.3601      state:R  running task     stack:25576 pid:22689 ppid:17643  flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5380 [inline]
 __schedule+0x14d2/0x44d0 kernel/sched/core.c:6699
 preempt_schedule_irq+0xb5/0x140 kernel/sched/core.c:7009
 irqentry_exit+0x67/0x70 kernel/entry/common.c:438
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687
RIP: 0010:get_current arch/x86/include/asm/current.h:41 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 kernel/kcov.c:215
Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d cc fc c4 0c 48 89 de 5b e9 53 88 56 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d e0 2c 7e 7e 65 8b 15 e1 2c 7e 7e 81 e2 00 01 ff 00 74
RSP: 0018:ffffc9000b24f000 EFLAGS: 00000246
RAX: ffffffff81e5fe9b RBX: dffffc0000000000 RCX: 0000000000000002
RDX: ffff88802206bc00 RSI: 0000000000000001 RDI: 0000000000000001
RBP: 0000000000000000 R08: ffff88801a55ee0f R09: 1ffff110034abdc1
R10: dffffc0000000000 R11: ffffed10034abdc2 R12: 0000000000000001
R13: 000000000000000b R14: 0000000000000001 R15: ffff88801a55ee50
 __set_page_owner_handle+0x37b/0x3c0 mm/page_owner.c:184
 __set_page_owner+0x45/0x60 mm/page_owner.c:197
 set_page_owner include/linux/page_owner.h:31 [inline]
 post_alloc_hook+0x1cd/0x210 mm/page_alloc.c:1554
 prep_new_page mm/page_alloc.c:1561 [inline]
 get_page_from_freelist+0x195c/0x19f0 mm/page_alloc.c:3191
 __alloc_pages+0x1e3/0x460 mm/page_alloc.c:4457
 __folio_alloc+0x10/0x20 mm/page_alloc.c:4489
 vma_alloc_folio+0x47a/0x8f0 mm/mempolicy.c:2242
 wp_page_copy mm/memory.c:3089 [inline]
 do_wp_page+0x128e/0x3630 mm/memory.c:3468
 handle_pte_fault mm/memory.c:5041 [inline]
 __handle_mm_fault mm/memory.c:5166 [inline]
 handle_mm_fault+0x12d4/0x4920 mm/memory.c:5331
 do_user_addr_fault+0x738/0x12e0 arch/x86/mm/fault.c:1373
 handle_page_fault arch/x86/mm/fault.c:1465 [inline]
 exc_page_fault+0x67/0x110 arch/x86/mm/fault.c:1521
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:608
RIP: 0010:__put_user_nocheck_4+0x7/0x10 arch/x86/lib/putuser.S:98
Code: 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09
RSP: 0018:ffffc9000b24f8d8 EFLAGS: 00050202
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000362030
RDX: ffff88802206bc00 RSI: 0000000000000002 RDI: 00000000ffffffff
RBP: ffffc9000b24fa70 R08: ffffc9000b24f687 R09: 1ffff92001649ed0
R10: dffffc0000000000 R11: fffff52001649ed1 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000002 R15: 0000200000362000
 ____sys_recvmsg+0x388/0x5b0 net/socket.c:2827
 ___sys_recvmsg+0x1b6/0x510 net/socket.c:2856
 do_recvmmsg+0x360/0x7d0 net/socket.c:2950
 __sys_recvmmsg net/socket.c:3029 [inline]
 __do_sys_recvmmsg net/socket.c:3052 [inline]
 __se_sys_recvmmsg net/socket.c:3045 [inline]
 __x64_sys_recvmmsg+0x191/0x240 net/socket.c:3045
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fb65218efc9
RSP: 002b:00007fb6503d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
RAX: ffffffffffffffda RBX: 00007fb6523e6090 RCX: 00007fb65218efc9
RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
RBP: 00007fb652211f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fb6523e6128 R14: 00007fb6523e6090 R15: 00007ffe20b55d88
 </TASK>
rcu: rcu_preempt kthread starved for 10375 jiffies! g156217 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:26320 pid:17    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5380 [inline]
 __schedule+0x14d2/0x44d0 kernel/sched/core.c:6699
 schedule+0xbd/0x170 kernel/sched/core.c:6773
 schedule_timeout+0x160/0x280 kernel/time/timer.c:2167
 rcu_gp_fqs_loop+0x302/0x1560 kernel/rcu/tree.c:1667
 rcu_gp_kthread+0x99/0x380 kernel/rcu/tree.c:1866
 kthread+0x2fa/0x390 kernel/kthread.c:388
 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:148
Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 43 b9 39 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56
RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2
RAX: a3bc44ab98cf7600 RBX: ffffffff8161858b RCX: a3bc44ab98cf7600
RDX: 0000000000000001 RSI: ffffffff8aaabce0 RDI: ffffffff8afc64c0
RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65
R10: dffffc0000000000 R11: ffffed10171e6d66 R12: ffffffff8e4a8568
R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100364e780
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555580dca5c8 CR3: 00000000307c4000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 arch_safe_halt arch/x86/include/asm/paravirt.h:108 [inline]
 default_idle+0x13/0x20 arch/x86/kernel/process.c:753
 default_idle_call+0x6c/0xa0 kernel/sched/idle.c:97
 cpuidle_idle_call kernel/sched/idle.c:170 [inline]
 do_idle+0x1eb/0x510 kernel/sched/idle.c:282
 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:380
 start_secondary+0xee/0xf0 arch/x86/kernel/smpboot.c:323
 secondary_startup_64_no_verify+0x179/0x17b
 </TASK>

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/10/19 13:47 linux-6.6.y 0bbbd97a442d 1c8c8cd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan INFO: rcu detected stall in sys_recvmmsg
2025/10/17 17:57 linux-6.6.y 0bbbd97a442d 7adf5298 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan INFO: rcu detected stall in sys_recvmmsg
2025/09/21 04:05 linux-6.6.y af1544b5d072 67c37560 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan INFO: rcu detected stall in sys_recvmmsg
2025/08/06 05:44 linux-6.6.y 3a8ababb8b6a ffe1dd46 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan INFO: rcu detected stall in sys_recvmmsg
2025/07/18 08:32 linux-6.6.y d96eb99e2f0e 88248e14 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan INFO: rcu detected stall in sys_recvmmsg
* Struck through repros no longer work on HEAD.