syzbot


INFO: task hung in do_tcp_setsockopt

Status: auto-obsoleted due to no activity on 2025/11/19 18:22
Subsystems: net
[Documentation on labels]
First crash: 165d, last: 165d

Sample crash report:
INFO: task syz.8.71611:26541 blocked for more than 430 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.8.71611     state:D stack:0     pid:26541 tgid:26538 ppid:10514  task_flags:0x400040 flags:0x00000001
Call trace: 
[<81a3c05c>] (__schedule) from [<81a3cff0>] (__schedule_loop kernel/sched/core.c:7043 [inline])
[<81a3c05c>] (__schedule) from [<81a3cff0>] (schedule+0x2c/0x130 kernel/sched/core.c:7058)
 r10:dfdf1ecc r9:dfdf1e50 r8:849cac40 r7:84ed9740 r6:84ed9834 r5:84ed9740
 r4:862f6c00
[<81a3cfc4>] (schedule) from [<8154b540>] (__lock_sock+0x68/0xac net/core/sock.c:3170)
 r5:84ed9740 r4:84ed982c
[<8154b4d8>] (__lock_sock) from [<8154b668>] (lock_sock_nested net/core/sock.c:3738 [inline])
[<8154b4d8>] (__lock_sock) from [<8154b668>] (lock_sock include/net/sock.h:1667 [inline])
[<8154b4d8>] (__lock_sock) from [<8154b668>] (sockopt_lock_sock net/core/sock.c:1146 [inline])
[<8154b4d8>] (__lock_sock) from [<8154b668>] (sockopt_lock_sock+0x54/0x58 net/core/sock.c:1137)
 r6:00000000 r5:84ed982c r4:84ed9740
[<8154b614>] (sockopt_lock_sock) from [<81744f6c>] (do_tcp_setsockopt+0x398/0xc5c net/ipv4/tcp.c:3895)
 r5:00000004 r4:00000014
[<81744bd8>] (do_tcp_setsockopt) from [<81745880>] (tcp_setsockopt+0x50/0x58 net/ipv4/tcp.c:4112)
 r10:00000126 r9:862f6c00 r8:00000004 r7:837e3400 r6:00000014 r5:00000006
 r4:81745830
[<81745834>] (tcp_setsockopt) from [<81546ee8>] (sock_common_setsockopt+0x38/0x40 net/core/sock.c:3925)
 r4:81745830
[<81546eb4>] (sock_common_setsockopt) from [<81542588>] (do_sock_setsockopt+0x70/0xc8 net/socket.c:2344)
 r4:81546eb0
[<81542518>] (do_sock_setsockopt) from [<81545b40>] (__sys_setsockopt+0x7c/0xc4 net/socket.c:2369)
 r8:00000000 r7:869cbb40 r6:869cbb41 r5:00000014 r4:00000006
[<81545ac4>] (__sys_setsockopt) from [<81545ba4>] (__do_sys_setsockopt net/socket.c:2375 [inline])
[<81545ac4>] (__sys_setsockopt) from [<81545ba4>] (sys_setsockopt+0x1c/0x24 net/socket.c:2372)
 r8:8020029c r7:00000126 r6:002f63b0 r5:00000000 r4:00000004
[<81545b88>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67)
Exception stack(0xdfdf1fa8 to 0xdfdf1ff0)
1fa0:                   00000004 00000000 00000003 00000006 00000014 20000100
1fc0: 00000004 00000000 002f63b0 00000126 002e0000 00000000 00006364 76f430bc
1fe0: 76f42ec0 76f42eb0 0001948c 001322c0
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
Hardware name: ARM-Versatile Express
Call trace: 
[<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257)
 r7:00000000 r6:000e0013 r5:600e0093 r4:8226023c
[<80201b08>] (show_stack) from [<8021fb90>] (__dump_stack lib/dump_stack.c:94 [inline])
[<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:120)
[<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c lib/dump_stack.c:129)
 r5:00000000 r4:00000001
[<8021fb9c>] (dump_stack) from [<81a25c70>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113)
[<81a25b10>] (nmi_cpu_backtrace) from [<81a25dbc>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62)
 r7:00000000 r6:8280c690 r5:8281ac94 r4:ffffffff
[<81a25c8c>] (nmi_trigger_cpumask_backtrace) from [<802304fc>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852)
 r9:82abd564 r8:82804d40 r7:000fac40 r6:00007eef r5:8281b248 r4:8606ec0c
[<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037d980>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline])
[<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037d980>] (check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline])
[<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037d980>] (watchdog+0x4d4/0x81c kernel/hung_task.c:491)
[<8037d4ac>] (watchdog) from [<80281fc8>] (kthread+0x12c/0x280 kernel/kthread.c:463)
 r10:00000000 r9:00000000 r8:8037d4ac r7:832a0300 r6:832a0300 r5:832e4800
 r4:00000001
[<80281e9c>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137)
Exception stack(0xdf8e1fb0 to 0xdf8e1ff8)
1fa0:                                     00000000 00000000 00000000 00000000
1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
1fe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281e9c
 r4:833c1800
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 29049 Comm: syz.5.72657 Not tainted syzkaller #0 PREEMPT 
Hardware name: ARM-Versatile Express
PC is at mas_is_start lib/maple_tree.c:279 [inline]
PC is at mas_walk+0x324/0x3bc lib/maple_tree.c:4940
LR is at 0x8604f400
pc : [<81a179fc>]    lr : [<8604f400>]    psr: 60000113
sp : dff49e70  ip : dff49eb0  fp : dff49eac
r10: 860dce0c  r9 : 10c1b9c1  r8 : 860dce80
r7 : 0000000a  r6 : 860dce00  r5 : 20003000  r4 : 00000019
r3 : 20000000  r2 : 00000000  r1 : 20ffffff  r0 : 85eabf00
Flags: nZCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment none
Control: 30c5387d  Table: 855acdc0  DAC: 00000000
Call trace: 
[<81a176d8>] (mas_walk) from [<804bd5a8>] (lock_vma_under_rcu+0x68/0x148 mm/mmap_lock.c:143)
 r10:00000002 r9:8604f400 r8:00000255 r7:855f5400 r6:8604f400 r5:20003000
 r4:dff49fb0
[<804bd540>] (lock_vma_under_rcu) from [<802342c8>] (do_page_fault+0x1a0/0x49c arch/arm/mm/fault.c:317)
 r6:00000a06 r5:20003000 r4:dff49fb0
[<80234128>] (do_page_fault) from [<80234744>] (do_translation_fault+0xfc/0x12c arch/arm/mm/fault.c:475)
 r10:fffffffe r9:002f62dc r8:80234648 r7:dff49fb0 r6:20003000 r5:00000a06
 r4:8281cee0
[<80234648>] (do_translation_fault) from [<802347ac>] (do_DataAbort+0x38/0xa8 arch/arm/mm/fault.c:596)
 r9:002f62dc r8:80234648 r7:dff49fb0 r6:20003000 r5:00000a06 r4:8281cee0
[<80234774>] (do_DataAbort) from [<80200edc>] (__dabt_usr+0x5c/0x60 arch/arm/kernel/entry-armv.S:434)
Exception stack(0xdff49fb0 to 0xdff49ff8)
9fa0:                                     00000000 00000000 00000001 20003000
9fc0: 01b92540 00000000 00000000 00000000 00000000 002f62dc fffffffe 00000000
9fe0: 01b925b8 7ef157d0 00020bf8 00020f88 40000010 ffffffff
 r8:826b7044 r7:855f5400 r6:ffffffff r5:40000010 r4:00020f88

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/08/21 18:14 upstream 32b7144f806e 3e79b825 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in do_tcp_setsockopt
* Struck through repros no longer work on HEAD.