INFO: task syz.1.6684:31585 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.6684      state:D stack:26312 pid:31585 tgid:31578 ppid:5592   task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x17d9/0x56c0
 schedule+0x164/0x2b0
 __lock_sock+0x162/0x2c0
 lock_sock_nested+0xc7/0x100
 do_tcp_setsockopt+0x1cc/0x1f80
 do_sock_setsockopt+0x17c/0x1b0
 __x64_sys_setsockopt+0x13d/0x1b0
 do_syscall_64+0x174/0x580
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f04bbf9e0d9
RSP: 002b:00007f04bcf0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007f04bc226090 RCX: 00007f04bbf9e0d9
RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000003
RBP: 00007f04bc035024 R08: 0000000000000005 R09: 0000000000000000
R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f04bc226128 R14: 00007f04bc226090 R15: 00007ffdaa3f6e78
 </TASK>
INFO: task syz.1.6684:31593 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.6684      state:D stack:25632 pid:31593 tgid:31578 ppid:5592   task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x17d9/0x56c0
 schedule+0x164/0x2b0
 __lock_sock+0x162/0x2c0
 lock_sock_nested+0xc7/0x100
 tcp_recvmsg+0x1df/0x7f0
 sock_recvmsg+0x166/0x1e0
 __sys_recvfrom+0x231/0x3a0
 __x64_sys_recvfrom+0xde/0x100
 do_syscall_64+0x174/0x580
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f04bbf9e0d9
RSP: 002b:00007f04bceea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
RAX: ffffffffffffffda RBX: 00007f04bc226180 RCX: 00007f04bbf9e0d9
RDX: ffffffffffffffa9 RSI: 0000200000000080 RDI: 0000000000000003
RBP: 00007f04bc035024 R08: 0000000000000000 R09: 0000000000001500
R10: 00000000c9100120 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f04bc226218 R14: 00007f04bc226180 R15: 00007ffdaa3f6e78
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/35:
 #0: ffffffff8eb95c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
3 locks held by kworker/0:3/987:
2 locks held by getty/5420:
 #0: ffff88816beea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc900034762e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
1 lock held by syz.1.6684/31579:
1 lock held by syz.1.6684/31585:
 #0: ffff888029336a60 (sk_lock-AF_INET){+.+.}-{0:0}, at: do_tcp_setsockopt+0x1cc/0x1f80
1 lock held by syz.1.6684/31593:
 #0: ffff888029336a60 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_recvmsg+0x1df/0x7f0

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150
 nmi_cpu_backtrace+0x274/0x2d0
 nmi_trigger_cpumask_backtrace+0x17a/0x380
 sys_info+0x135/0x170
 watchdog+0xfd7/0x1030
 kthread+0x388/0x470
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31579 Comm: syz.1.6684 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:lock_acquire+0x12e/0x350
Code: 00 00 48 83 c4 28 48 c7 c7 47 f4 4a 8e e8 4a 8e 2d 0a b8 ff ff ff ff 65 0f c1 05 0d 80 cd 11 83 f8 01 0f 85 ae 00 00 00 9c 58 <a9> 00 02 00 00 0f 85 c1 00 00 00 f7 44 24 08 00 02 00 00 0f 85 c6
RSP: 0018:ffffc90000006ea0 EFLAGS: 00000046
RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000080000102
RDX: 00000000c5cf204d RSI: ffffffff8e4af447 RDI: ffffffff8c4bb880
RBP: ffffffff8177827f R08: ffffffff8177827f R09: 0000000000000000
R10: 0000000000000000 R11: ffffffff8eb95c60 R12: 0000000000000002
R13: ffffffff8eb95c60 R14: 0000000000000000 R15: 0000000000000246
FS:  00007f04bcf2c6c0(0000) GS:ffff88818d921000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000e80000 CR3: 0000000026118000 CR4: 00000000000006f0
Call Trace:
 <IRQ>
 unwind_next_frame+0xac/0x2550
 arch_stack_walk+0x11b/0x150
 stack_trace_save+0xa9/0x100
 kasan_save_track+0x3e/0x80
 kasan_save_free_info+0x40/0x50
 __kasan_slab_free+0x5c/0x80
 kfree+0x1c5/0x640
 skb_release_data+0x85e/0xab0
 __kfree_skb+0x5d/0x210
 __pskb_pull_tail+0x8f0/0x1890
 skb_condense+0x1bc/0x350
 tcp_add_backlog+0x9b/0x1a50
 tcp_v4_rcv+0x2746/0x3170
 ip_protocol_deliver_rcu+0x21d/0x440
 ip_local_deliver_finish+0x3bb/0x6f0
 NF_HOOK+0x336/0x3c0
 NF_HOOK+0x336/0x3c0
 process_backlog+0xa34/0x1860
 __napi_poll+0xaa/0x330
 net_rx_action+0x61d/0xf50
 handle_softirqs+0x225/0x840
 do_softirq+0x76/0xd0
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0xf8/0x130
 __dev_queue_xmit+0x1edc/0x3820
 ip_finish_output2+0xbda/0x10b0
 ip_do_fragment+0x898/0x1770
 ip_output+0x29f/0x450
 __ip_queue_xmit+0x10df/0x1b10
 __tcp_transmit_skb+0x2d18/0x47c0
 tcp_write_xmit+0x1bfa/0x6400
 tcp_sendmsg_locked+0x2f07/0x55c0
 tcp_sendmsg+0x2f/0x50
 sock_sendmsg_nosec+0x10e/0x180
 __sys_sendto+0x408/0x5a0
 __x64_sys_sendto+0xde/0x100
 do_syscall_64+0x174/0x580
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f04bbf9e0d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f04bcf2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f04bc225fa0 RCX: 00007f04bbf9e0d9
RDX: 00000000ffffff5d RSI: 0000200000000900 RDI: 0000000000000003
RBP: 00007f04bc035024 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f04bc226038 R14: 00007f04bc225fa0 R15: 00007ffdaa3f6e78
 </TASK>
