INFO: task kworker/0:68:6072 blocked for more than 426 seconds. Not tainted 6.17.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:68 state:D stack:0 pid:6072 tgid:6072 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81a3b41c>] (__schedule) from [<81a3c3b0>] (__schedule_loop kernel/sched/core.c:7043 [inline]) [<81a3b41c>] (__schedule) from [<81a3c3b0>] (schedule+0x2c/0x130 kernel/sched/core.c:7058) r10:dff39d84 r9:00000002 r8:60000013 r7:82916554 r6:dff39d8c r5:84c3a400 r4:84c3a400 [<81a3c384>] (schedule) from [<81a3c798>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7115) r5:84c3a400 r4:82916550 [<81a3c780>] (schedule_preempt_disabled) from [<81a3f4f0>] (__mutex_lock_common kernel/locking/mutex.c:676 [inline]) [<81a3c780>] (schedule_preempt_disabled) from [<81a3f4f0>] (__mutex_lock.constprop.0+0x378/0xaf8 kernel/locking/mutex.c:760) [<81a3f178>] (__mutex_lock.constprop.0) from [<81a3fd44>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1049) r10:8280c960 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dff39e08 r4:00000000 [<81a3fd30>] (__mutex_lock_slowpath) from [<81a3fd84>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:274) [<81a3fd48>] (mutex_lock) from [<804e0654>] (_vm_unmap_aliases+0x68/0x240 mm/vmalloc.c:2912) [<804e05ec>] (_vm_unmap_aliases) from [<804e4434>] (vm_reset_perms mm/vmalloc.c:3343 [inline]) [<804e05ec>] (_vm_unmap_aliases) from [<804e4434>] (vfree+0x16c/0x210 mm/vmalloc.c:3422) r10:83016070 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:8684f940 r4:00000000 [<804e42c8>] (vfree) from [<8054cfd4>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:83018005 r8:84c3a400 r7:00000000 r6:83018000 r5:00001000 r4:7f312000 [<8054cfa4>] (execmem_free) from [<803c33dc>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1084) r5:00001000 r4:df901000 [<803c33cc>] (bpf_jit_free_exec) from [<803c37bc>] (bpf_jit_binary_free kernel/bpf/core.c:1130 [inline]) [<803c33cc>] (bpf_jit_free_exec) from [<803c37bc>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1253) [<803c3754>] (bpf_jit_free) from [<803c4864>] (bpf_prog_free_deferred+0x140/0x158 kernel/bpf/core.c:2923) r5:85b1838c r4:85550780 [<803c4724>] (bpf_prog_free_deferred) from [<8027a3bc>] (process_one_work+0x1b4/0x4f4 kernel/workqueue.c:3236) r7:dddced40 r6:83018000 r5:85b1838c r4:85550780 [<8027a208>] (process_one_work) from [<8027b004>] (process_scheduled_works kernel/workqueue.c:3319 [inline]) [<8027a208>] (process_one_work) from [<8027b004>] (worker_thread+0x1fc/0x3d8 kernel/workqueue.c:3400) r10:61c88647 r9:84c3a400 r8:855507ac r7:82804d40 r6:dddced40 r5:dddced60 r4:85550780 [<8027ae08>] (worker_thread) from [<80281fec>] (kthread+0x12c/0x280 kernel/kthread.c:463) r10:00000000 r9:85550780 r8:8027ae08 r7:dfea9e60 r6:84d2f600 r5:84c3a400 r4:00000001 [<80281ec0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdff39fb0 to 0xdff39ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281ec0 r4:859ded40 INFO: task kworker/0:68:6072 is blocked on a mutex likely owned by task kworker/0:76:6400. task:kworker/0:76 state:R running task stack:0 pid:6400 tgid:6400 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81a3b41c>] (__schedule) from [<81a3c7e4>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7288) r10:8280c9b4 r9:85f6e000 r8:80200c04 r7:dfef5d54 r6:ffffffff r5:85f6e000 r4:00000000 [<81a3c7a4>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xdfef5d20 to 0xdfef5d68) 5d20: b23b4000 e035b000 00000001 80239bb8 7f310000 00000001 82ac8f44 82ac8320 5d40: 7f310000 e035b000 8280c9b4 dfef5d9c dfef5da0 dfef5d70 80230af0 80239bd0 5d60: 80000013 ffffffff r5:80000013 r4:80239bd0 [<80230a8c>] (flush_tlb_kernel_range) from [<804e0418>] (__purge_vmap_area_lazy+0x284/0x458 mm/vmalloc.c:2336) r4:82ac8f64 [<804e0194>] (__purge_vmap_area_lazy) from [<804e07d0>] (_vm_unmap_aliases+0x1e4/0x240 mm/vmalloc.c:2951) r10:00000000 r9:00000000 r8:00000000 r7:ffffffff r6:dfef5dc0 r5:dfef5e08 r4:dfef5dc0 [<804e05ec>] (_vm_unmap_aliases) from [<804e4434>] (vm_reset_perms mm/vmalloc.c:3343 [inline]) [<804e05ec>] (_vm_unmap_aliases) from [<804e4434>] (vfree+0x16c/0x210 mm/vmalloc.c:3422) r10:83016070 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84eaac40 r4:00000000 [<804e42c8>] (vfree) from [<8054cfd4>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:83018005 r8:85f6e000 r7:00000000 r6:83018000 r5:00001000 r4:7f310000 [<8054cfa4>] (execmem_free) from [<803c33dc>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1084) r5:00001000 r4:df877000 [<803c33cc>] (bpf_jit_free_exec) from [<803c37bc>] (bpf_jit_binary_free kernel/bpf/core.c:1130 [inline]) [<803c33cc>] (bpf_jit_free_exec) from [<803c37bc>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1253) [<803c3754>] (bpf_jit_free) from [<803c4864>] (bpf_prog_free_deferred+0x140/0x158 kernel/bpf/core.c:2923) r5:85b1878c r4:84b1cf00 [<803c4724>] (bpf_prog_free_deferred) from [<8027a3bc>] (process_one_work+0x1b4/0x4f4 kernel/workqueue.c:3236) r7:dddced40 r6:83018000 r5:85b1878c r4:84b1cf00 [<8027a208>] (process_one_work) from [<8027b004>] (process_scheduled_works kernel/workqueue.c:3319 [inline]) [<8027a208>] (process_one_work) from [<8027b004>] (worker_thread+0x1fc/0x3d8 kernel/workqueue.c:3400) r10:61c88647 r9:85f6e000 r8:84b1cf2c r7:82804d40 r6:dddced40 r5:dddced60 r4:84b1cf00 [<8027ae08>] (worker_thread) from [<80281fec>] (kthread+0x12c/0x280 kernel/kthread.c:463) r10:00000000 r9:84b1cf00 r8:8027ae08 r7:dfda5e60 r6:84b1cd00 r5:85f6e000 r4:00000001 [<80281ec0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfef5fb0 to 0xdfef5ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281ec0 r4:84f83780 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:00000113 r5:60000193 r4:822602a4 [<80201b08>] (show_stack) from [<8021fb90>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201b08>] (show_stack) from [<8021fb90>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:120) [<8021fb20>] (dump_stack_lvl) from [<8021fbb4>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r5:00000000 r4:00000001 [<8021fb9c>] (dump_stack) from [<81a25030>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<81a24ed0>] (nmi_cpu_backtrace) from [<81a2517c>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000000 r6:8280c690 r5:8281ac94 r4:ffffffff [<81a2504c>] (nmi_trigger_cpumask_backtrace) from [<802304fc>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852) r9:82abd564 r8:82804d40 r7:0001b20a r6:00007ef2 r5:8281b248 r4:858e660c [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037da20>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]) [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037da20>] (check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline]) [<802304e4>] (arch_trigger_cpumask_backtrace) from [<8037da20>] (watchdog+0x4d4/0x81c kernel/hung_task.c:491) [<8037d54c>] (watchdog) from [<80281fec>] (kthread+0x12c/0x280 kernel/kthread.c:463) r10:00000000 r9:00000000 r8:8037d54c r7:830cf580 r6:830cf580 r5:8321d400 r4:00000001 [<80281ec0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281ec0 r4:833a1f00 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 11102 Comm: modprobe Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at ip_finish_output2+0x54/0x6d4 net/ipv4/ip_output.c:209 LR is at __ip_finish_output.part.0+0x9c/0x150 net/ipv4/ip_output.c:313 pc : [<8172da78>] lr : [<8172efd4>] psr: 80000113 sp : df805a18 ip : df805a48 fp : df805a44 r10: 862a7554 r9 : aa1414ac r8 : 854b3b00 r7 : 85812000 r6 : 871d1f00 r5 : 861f5d80 r4 : 00000010 r3 : 00000002 r2 : 00000000 r1 : 00000000 r0 : 854b3b00 Flags: Nzcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 87138680 DAC: 00000000 Call trace: frame pointer underflow [<8172da24>] (ip_finish_output2) from [<8172efd4>] (__ip_finish_output.part.0+0x9c/0x150 net/ipv4/ip_output.c:313) r9:aa1414ac r8:85812000 r7:854b3b00 r6:0000ffff r5:00000000 r4:861f5d80 [<8172ef38>] (__ip_finish_output.part.0) from [<8172f0c4>] (__ip_finish_output+0x3c/0x40 net/ipv4/ip_output.c:303) r9:aa1414ac r8:85812000 r7:00000000 r6:00000001 r5:854b3b00 r4:861f5d80 [<8172f088>] (__ip_finish_output) from [<8172f130>] (ip_finish_output net/ipv4/ip_output.c:323 [inline]) [<8172f088>] (__ip_finish_output) from [<8172f130>] (NF_HOOK_COND include/linux/netfilter.h:307 [inline]) [<8172f088>] (__ip_finish_output) from [<8172f130>] (ip_output+0x68/0x104 net/ipv4/ip_output.c:436) [<8172f0c8>] (ip_output) from [<817305c0>] (dst_output include/net/dst.h:461 [inline]) [<8172f0c8>] (ip_output) from [<817305c0>] (ip_local_out+0x40/0x44 net/ipv4/ip_output.c:129) r8:aa1414ac r7:00000008 r6:00000000 r5:854b3b00 r4:861f5d80 [<81730580>] (ip_local_out) from [<816cdc18>] (synproxy_send_tcp+0x108/0x140 net/netfilter/nf_synproxy_core.c:439) r7:00000008 r6:854b3b00 r5:862e7100 r4:861f5d80 [<816cdb10>] (synproxy_send_tcp) from [<816ce4b0>] (synproxy_send_client_synack+0x190/0x1e8 net/netfilter/nf_synproxy_core.c:484) r9:862a7c00 r8:862a7c14 r7:df805b80 r6:861f5cc0 r5:00000014 r4:861f5d80 [<816ce320>] (synproxy_send_client_synack) from [<81708470>] (nft_synproxy_eval_v4 net/netfilter/nft_synproxy.c:59 [inline]) [<816ce320>] (synproxy_send_client_synack) from [<81708470>] (nft_synproxy_do_eval+0x25c/0x2b4 net/netfilter/nft_synproxy.c:141) r10:81e6fb48 r9:862a7c14 r8:858aaa40 r7:85e2a018 r6:df805c4c r5:854b3b00 r4:861f5cc0 [<81708214>] (nft_synproxy_do_eval) from [<817084f4>] (nft_synproxy_eval+0x14/0x18 net/netfilter/nft_synproxy.c:247) r9:df805ce4 r8:81e6fcd0 r7:81e6fa34 r6:81e6f9f0 r5:85e2a020 r4:85e2a010 [<817084e0>] (nft_synproxy_eval) from [<816d1158>] (expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline]) [<817084e0>] (nft_synproxy_eval) from [<816d1158>] (nft_do_chain+0x12c/0x570 net/netfilter/nf_tables_core.c:285) [<816d102c>] (nft_do_chain) from [<816ea418>] (nft_do_chain_inet+0xac/0x120 net/netfilter/nft_chain_filter.c:161) r10:ddde3e88 r9:85e2a100 r8:df805d3c r7:861f5cc0 r6:85e2a100 r5:00000000 r4:84fb1580 [<816ea36c>] (nft_do_chain_inet) from [<81698694>] (nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]) [<816ea36c>] (nft_do_chain_inet) from [<81698694>] (nf_hook_slow+0x40/0x104 net/netfilter/core.c:623) r4:861f5cc0 [<81698654>] (nf_hook_slow) from [<8172a0d4>] (nf_hook include/linux/netfilter.h:273 [inline]) [<81698654>] (nf_hook_slow) from [<8172a0d4>] (NF_HOOK include/linux/netfilter.h:316 [inline]) [<81698654>] (nf_hook_slow) from [<8172a0d4>] (ip_local_deliver+0xf0/0x110 net/ipv4/ip_input.c:260) r9:00000040 r8:00000026 r7:00000000 r6:854b3b00 r5:85812000 r4:861f5cc0 [<81729fe4>] (ip_local_deliver) from [<81729178>] (dst_input include/net/dst.h:471 [inline]) [<81729fe4>] (ip_local_deliver) from [<81729178>] (ip_rcv_finish+0x98/0xb0 net/ipv4/ip_input.c:454) r6:85812000 r5:854b3b00 r4:861f5cc0 [<817290e0>] (ip_rcv_finish) from [<8172a1c8>] (NF_HOOK include/linux/netfilter.h:318 [inline]) [<817290e0>] (ip_rcv_finish) from [<8172a1c8>] (NF_HOOK include/linux/netfilter.h:312 [inline]) [<817290e0>] (ip_rcv_finish) from [<8172a1c8>] (ip_rcv+0xd4/0xe0 net/ipv4/ip_input.c:574) r7:00000000 r6:854b3b00 r5:861f5cc0 r4:00000001 [<8172a0f4>] (ip_rcv) from [<8157b314>] (__netif_receive_skb_one_core+0x5c/0x80 net/core/dev.c:5979) r6:00000000 r5:8172a0f4 r4:85812000 [<8157b2b8>] (__netif_receive_skb_one_core) from [<8157b380>] (__netif_receive_skb+0x18/0x5c net/core/dev.c:6092) r5:ddde3f70 r4:861f5cc0 [<8157b368>] (__netif_receive_skb) from [<8157b688>] (process_backlog+0xa0/0x17c net/core/dev.c:6444) r5:ddde3f70 r4:861f5cc0 [<8157b5e8>] (process_backlog) from [<8157bee4>] (__napi_poll+0x34/0x240 net/core/dev.c:7489) r10:ddde3e80 r9:00000000 r8:df805ea8 r7:df805ea3 r6:00000040 r5:ddde3f70 r4:00000001 [<8157beb0>] (__napi_poll) from [<8157c7d0>] (napi_poll net/core/dev.c:7552 [inline]) [<8157beb0>] (__napi_poll) from [<8157c7d0>] (net_rx_action+0x3a0/0x430 net/core/dev.c:7679) r9:00000000 r8:df805ea8 r7:0000012c r6:00000000 r5:5b721000 r4:ddde3f70 [<8157c430>] (net_rx_action) from [<8025de30>] (handle_softirqs+0x140/0x458 kernel/softirq.c:579) r10:85f1c800 r9:82804d40 r8:00000101 r7:00000003 r6:00000002 r5:00000002 r4:8280408c [<8025dcf0>] (handle_softirqs) from [<8025e2a4>] (__do_softirq kernel/softirq.c:613 [inline]) [<8025dcf0>] (handle_softirqs) from [<8025e2a4>] (invoke_softirq kernel/softirq.c:453 [inline]) [<8025dcf0>] (handle_softirqs) from [<8025e2a4>] (__irq_exit_rcu+0x110/0x1d0 kernel/softirq.c:680) r10:868a9b00 r9:85f1c800 r8:00000000 r7:df985d58 r6:8240f7bc r5:8244d118 r4:85f1c800 [<8025e194>] (__irq_exit_rcu) from [<8025e61c>] (irq_exit+0x10/0x18 kernel/softirq.c:708) r5:8244d118 r4:826c195c [<8025e60c>] (irq_exit) from [<81a37c80>] (generic_handle_arch_irq+0x7c/0x80 kernel/irq/handle.c:240) [<81a37c04>] (generic_handle_arch_irq) from [<81a07164>] (call_with_stack+0x1c/0x20 arch/arm/lib/call_with_stack.S:40) r9:85f1c800 r8:860a3a80 r7:df985d8c r6:ffffffff r5:00000113 r4:802308a8 [<81a07148>] (call_with_stack) from [<80200bec>] (__irq_svc+0x8c/0xbc arch/arm/kernel/entry-armv.S:228) Exception stack(0xdf985d58 to 0xdf985da0) 5d40: fffff000 76fb7000 5d60: 90f00000 76fb7033 868a9b00 76fb7000 dfd17fdf 04600000 860a3a80 def89070 5d80: 868a9b00 df985dcc 868a9b00 df985da8 90f00000 802308a8 00000113 ffffffff [<80230814>] (flush_tlb_page) from [<804d78ec>] (ptep_clear_flush+0x74/0x78 mm/pgtable-generic.c:101) [<804d7878>] (ptep_clear_flush) from [<804c419c>] (wp_page_copy mm/memory.c:3618 [inline]) [<804d7878>] (ptep_clear_flush) from [<804c419c>] (do_wp_page+0x518/0x1248 mm/memory.c:4013) r9:def89070 r8:deb7273c r7:fce3c75f r6:00e00000 r5:00000000 r4:df985eb0 [<804c3c84>] (do_wp_page) from [<804c743c>] (handle_pte_fault mm/memory.c:6068 [inline]) [<804c3c84>] (do_wp_page) from [<804c743c>] (__handle_mm_fault mm/memory.c:6195 [inline]) [<804c3c84>] (do_wp_page) from [<804c743c>] (handle_mm_fault+0x9b8/0x14dc mm/memory.c:6364) r10:df985fb0 r9:04600000 r8:dfd17fdf r7:00000040 r6:76fb7848 r5:85f1c800 r4:00001255 [<804c6a84>] (handle_mm_fault) from [<802342f0>] (do_page_fault+0x1c8/0x49c arch/arm/mm/fault.c:328) r10:00000002 r9:860a3a80 r8:00000255 r7:85f1c800 r6:00000a0f r5:76fb7848 r4:df985fb0 [<80234128>] (do_page_fault) from [<802347ac>] (do_DataAbort+0x38/0xa8 arch/arm/mm/fault.c:596) r10:00000010 r9:76fb86f4 r8:80234128 r7:df985fb0 r6:76fb7848 r5:00000a0f r4:8281cf70 [<80234774>] (do_DataAbort) from [<80200edc>] (__dabt_usr+0x5c/0x60 arch/arm/kernel/entry-armv.S:434) Exception stack(0xdf985fb0 to 0xdf985ff8) 5fa0: 76ede000 76fb93b0 76ede0f4 76fb7844 5fc0: 76fb9390 6ffffdff 00000005 7e83e078 00000002 76fb86f4 00000010 7e83e21c 5fe0: 6fffffff 7e83e0f8 70000025 76fc1d40 20000010 ffffffff r8:826b7044 r7:85f1c800 r6:ffffffff r5:20000010 r4:76fc1d40