INFO: task syz.1.2:3791 blocked for more than 430 seconds. Not tainted 6.11.0-rc7-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.2 state:D stack:0 pid:3791 tgid:3786 ppid:3106 flags:0x00400001 Call trace: [<8197ed48>] (__schedule) from [<8197f8e0>] (__schedule_loop kernel/sched/core.c:6606 [inline]) [<8197ed48>] (__schedule) from [<8197f8e0>] (schedule+0x2c/0xfc kernel/sched/core.c:6621) r10:dfe69e64 r9:dfe69d90 r8:00000000 r7:845e9740 r6:845e9834 r5:845e9740 r4:84f7ec00 [<8197f8b4>] (schedule) from [<81457c8c>] (__lock_sock+0x68/0xac net/core/sock.c:2980) r5:845e9740 r4:845e982c [<81457c24>] (__lock_sock) from [<81457db4>] (lock_sock_nested net/core/sock.c:3548 [inline]) [<81457c24>] (__lock_sock) from [<81457db4>] (lock_sock include/net/sock.h:1607 [inline]) [<81457c24>] (__lock_sock) from [<81457db4>] (sockopt_lock_sock net/core/sock.c:1061 [inline]) [<81457c24>] (__lock_sock) from [<81457db4>] (sockopt_lock_sock+0x54/0x58 net/core/sock.c:1052) r6:00000000 r5:845e982c r4:845e9740 [<81457d60>] (sockopt_lock_sock) from [<8162bfd4>] (do_ip_getsockopt+0x204/0xbb0 net/ipv4/ip_sockglue.c:1703) r5:00000000 r4:00000010 [<8162bdd4>] (do_ip_getsockopt) from [<8162c9e4>] (ip_getsockopt+0x64/0x134 net/ipv4/ip_sockglue.c:1765) r10:00000127 r9:20000180 r8:00000000 r7:20000180 r6:00000000 r5:845e9740 r4:00000010 [<8162c980>] (ip_getsockopt) from [<8163ce10>] (tcp_getsockopt+0x34/0x6c net/ipv4/tcp.c:4409) r9:20000180 r8:00000000 r7:833e8f00 r6:00000010 r5:00000000 r4:8162c980 [<8163cddc>] (tcp_getsockopt) from [<81453dd4>] (sock_common_getsockopt+0x28/0x30 net/core/sock.c:3708) r4:8163cddc [<81453dac>] (sock_common_getsockopt) from [<81450bbc>] (do_sock_getsockopt+0x10c/0x298 net/socket.c:2386) r4:81453dac [<81450ab0>] (do_sock_getsockopt) from [<81452b4c>] (__sys_getsockopt net/socket.c:2415 [inline]) [<81450ab0>] (do_sock_getsockopt) from [<81452b4c>] (__do_sys_getsockopt net/socket.c:2425 [inline]) [<81450ab0>] (do_sock_getsockopt) from [<81452b4c>] (sys_getsockopt+0x90/0xd4 net/socket.c:2422) r9:84f7ec00 r8:833e8f00 r7:00000000 r6:00000010 r5:00000000 r4:00000000 [<81452abc>] (sys_getsockopt) from [<8020028c>] (__sys_trace_return+0x0/0x10) Exception stack(0xdfe69fa8 to 0xdfe69ff0) 9fa0: 20000180 00000000 00000003 00000000 00000010 00000000 9fc0: 20000180 00000000 00286388 00000127 00000000 00006364 003d0f00 76bc80bc 9fe0: 76bc7ec0 76bc7eb0 000189d0 00132da0 r8:8020029c r7:00000127 r6:00286388 r5:00000000 r4:20000180 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller #0 Hardware name: ARM-Versatile Express Call trace: [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:00000113 r5:60000193 r4:8200ca20 [<8195d25c>] (show_stack) from [<8197afb0>] (__dump_stack lib/dump_stack.c:93 [inline]) [<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:119) [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c lib/dump_stack.c:128) r5:00000001 r4:00000001 [<8197afbc>] (dump_stack) from [<8194a468>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<8194a308>] (nmi_cpu_backtrace) from [<8194a5b4>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:8260c5d0 r5:8261a88c r4:ffffffff [<8194a484>] (nmi_trigger_cpumask_backtrace) from [<802103c8>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:000055c1 r8:828b3130 r7:8260c734 r6:00007f56 r5:8261ae48 r4:84109d1c [<802103b0>] (arch_trigger_cpumask_backtrace) from [<80350e30>] (trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]) [<802103b0>] (arch_trigger_cpumask_backtrace) from [<80350e30>] (check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]) [<802103b0>] (arch_trigger_cpumask_backtrace) from [<80350e30>] (watchdog+0x498/0x5b8 kernel/hung_task.c:379) [<80350998>] (watchdog) from [<8026fb04>] (kthread+0x104/0x134 kernel/kthread.c:389) r10:00000000 r9:df819e58 r8:82ccfc40 r7:00000000 r6:80350998 r5:82e49800 r4:82fa4540 [<8026fa00>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fa00 r4:82fa4540 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 3100 Comm: syz-executor Not tainted 6.11.0-rc7-syzkaller #0 Hardware name: ARM-Versatile Express PC is at uaccess_save_and_enable arch/arm/include/asm/uaccess.h:59 [inline] PC is at raw_copy_to_user arch/arm/include/asm/uaccess.h:557 [inline] PC is at __copy_to_user include/linux/uaccess.h:139 [inline] PC is at setup_sigframe+0x140/0x1c4 arch/arm/kernel/signal.c:284 LR is at 0x83e1ec00 pc : [<8020b820>] lr : [<83e1ec00>] psr: 60000013 sp : df97dea8 ip : 00000000 fp : df97df34 r10: 0000014f r9 : 7ef9d7fc r8 : 00000013 r7 : b5403587 r6 : 00000000 r5 : 83e1f420 r4 : 7ef9d3c8 r3 : b5003500 r2 : 00000000 r1 : 00000001 r0 : 00000000 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 843c6d40 DAC: fffffffd Call trace: [<8020b6e0>] (setup_sigframe) from [<8020bc6c>] (setup_frame arch/arm/kernel/signal.c:460 [inline]) [<8020b6e0>] (setup_sigframe) from [<8020bc6c>] (handle_signal arch/arm/kernel/signal.c:518 [inline]) [<8020b6e0>] (setup_sigframe) from [<8020bc6c>] (do_signal arch/arm/kernel/signal.c:589 [inline]) [<8020b6e0>] (setup_sigframe) from [<8020bc6c>] (do_work_pending+0x2f4/0x4f8 arch/arm/kernel/signal.c:618) r10:00000077 r9:b5403587 r8:00000000 r7:83e1f420 r6:7ef9d3c8 r5:df97dfb0 r4:83e1ec00 [<8020b978>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) Exception stack(0xdf97dfb0 to 0xdf97dff8) dfa0: fffffffc 7ef9d7fc 00000000 00000000 dfc0: 7ef9d6c4 7ef9d6cc 00000000 0000014f 7ef9d7fc 00000013 00000000 00e00000 dfe0: 00000008 7ef9d6c0 001329f4 0013448c 20000010 00000011 r10:00000077 r9:83e1ec00 r8:00000000 r7:00000077 r6:00000000 r5:7ef9d6cc r4:7ef9d6c4