INFO: task kworker/0:0:6321 blocked for more than 430 seconds. Not tainted 6.12.0-rc5-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:0 state:D stack:0 pid:6321 tgid:6321 ppid:2 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<819bc9a4>] (__schedule) from [<819bd5f4>] (__schedule_loop kernel/sched/core.c:6767 [inline]) [<819bc9a4>] (__schedule) from [<819bd5f4>] (schedule+0x2c/0xfc kernel/sched/core.c:6782) r10:8260ca7c r9:00000000 r8:82717b64 r7:00000002 r6:e0539da4 r5:843c2400 r4:843c2400 [<819bd5c8>] (schedule) from [<819bd9a8>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6839) r5:843c2400 r4:82717b60 [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<819c0198>] (__mutex_lock.constprop.0) from [<819c0d4c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e0539e20 r4:00000000 [<819c0d38>] (__mutex_lock_slowpath) from [<819c0d8c>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<819c0d50>] (mutex_lock) from [<804add1c>] (_vm_unmap_aliases+0x68/0x240 mm/vmalloc.c:2844) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vm_reset_perms mm/vmalloc.c:3272 [inline]) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vfree+0x170/0x1e4 mm/vmalloc.c:3351) r10:82c18005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84ae5080 r4:00000000 [<804b1908>] (vfree) from [<8050fcb8>] (execmem_free+0x30/0x64 mm/execmem.c:69) r9:843c2400 r8:00800000 r7:00000000 r6:82c18000 r5:00001000 r4:7f22a000 [<8050fc88>] (execmem_free) from [<8039c55c>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1072) r5:00001000 r4:df837000 [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_binary_free kernel/bpf/core.c:1118 [inline]) [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1241) [<8039c8d4>] (bpf_jit_free) from [<8039da90>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2815) r5:85247f54 r4:85247c00 [<8039d944>] (bpf_prog_free_deferred) from [<80266034>] (process_one_work+0x1b4/0x4f4 kernel/workqueue.c:3229) r7:dddd00c0 r6:82c18000 r5:85247f54 r4:8526db80 [<80265e80>] (process_one_work) from [<80266c18>] (process_scheduled_works kernel/workqueue.c:3310 [inline]) [<80265e80>] (process_one_work) from [<80266c18>] (worker_thread+0x1ec/0x3bc kernel/workqueue.c:3391) r10:843c2400 r9:8526dbac r8:61c88647 r7:dddd00e0 r6:82604d40 r5:dddd00c0 r4:8526db80 [<80266a2c>] (worker_thread) from [<8026fc94>] (kthread+0x104/0x134 kernel/kthread.c:389) r10:00000000 r9:eb8b1e78 r8:842422c0 r7:8526db80 r6:80266a2c r5:843c2400 r4:85276a80 [<8026fb90>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe0539fb0 to 0xe0539ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fb90 r4:85276a80 INFO: task kworker/1:37:16012 blocked for more than 430 seconds. Not tainted 6.12.0-rc5-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:37 state:D stack:0 pid:16012 tgid:16012 ppid:2 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<819bc9a4>] (__schedule) from [<819bd5f4>] (__schedule_loop kernel/sched/core.c:6767 [inline]) [<819bc9a4>] (__schedule) from [<819bd5f4>] (schedule+0x2c/0xfc kernel/sched/core.c:6782) r10:8260ca7c r9:00000000 r8:82717b64 r7:00000002 r6:dfe71da4 r5:834a9800 r4:834a9800 [<819bd5c8>] (schedule) from [<819bd9a8>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6839) r5:834a9800 r4:82717b60 [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<819c0198>] (__mutex_lock.constprop.0) from [<819c0d4c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfe71e20 r4:00000000 [<819c0d38>] (__mutex_lock_slowpath) from [<819c0d8c>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<819c0d50>] (mutex_lock) from [<804add1c>] (_vm_unmap_aliases+0x68/0x240 mm/vmalloc.c:2844) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vm_reset_perms mm/vmalloc.c:3272 [inline]) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vfree+0x170/0x1e4 mm/vmalloc.c:3351) r10:82c18205 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:852636c0 r4:00000000 [<804b1908>] (vfree) from [<8050fcb8>] (execmem_free+0x30/0x64 mm/execmem.c:69) r9:834a9800 r8:01800000 r7:00000000 r6:82c18200 r5:00001000 r4:7f230000 [<8050fc88>] (execmem_free) from [<8039c55c>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1072) r5:00001000 r4:dfa37000 [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_binary_free kernel/bpf/core.c:1118 [inline]) [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1241) [<8039c8d4>] (bpf_jit_free) from [<8039da90>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2815) r5:8437df54 r4:8437dc00 [<8039d944>] (bpf_prog_free_deferred) from [<80266034>] (process_one_work+0x1b4/0x4f4 kernel/workqueue.c:3229) r7:ddde40c0 r6:82c18200 r5:8437df54 r4:84715680 [<80265e80>] (process_one_work) from [<80266c18>] (process_scheduled_works kernel/workqueue.c:3310 [inline]) [<80265e80>] (process_one_work) from [<80266c18>] (worker_thread+0x1ec/0x3bc kernel/workqueue.c:3391) r10:834a9800 r9:847156ac r8:61c88647 r7:ddde40e0 r6:82604d40 r5:ddde40c0 r4:84715680 [<80266a2c>] (worker_thread) from [<8026fc94>] (kthread+0x104/0x134 kernel/kthread.c:389) r10:00000000 r9:dfd71e78 r8:85005600 r7:84715680 r6:80266a2c r5:834a9800 r4:845dda40 [<8026fb90>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfe71fb0 to 0xdfe71ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fb90 r4:845dda40 INFO: task kworker/0:40:16036 blocked for more than 430 seconds. Not tainted 6.12.0-rc5-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:40 state:D stack:0 pid:16036 tgid:16036 ppid:2 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<819bc9a4>] (__schedule) from [<819bd5f4>] (__schedule_loop kernel/sched/core.c:6767 [inline]) [<819bc9a4>] (__schedule) from [<819bd5f4>] (schedule+0x2c/0xfc kernel/sched/core.c:6782) r10:8260ca7c r9:00000000 r8:82717b64 r7:00000002 r6:e0439da4 r5:84860000 r4:84860000 [<819bd5c8>] (schedule) from [<819bd9a8>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6839) r5:84860000 r4:82717b60 [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<819c0198>] (__mutex_lock.constprop.0) from [<819c0d4c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e0439e20 r4:00000000 [<819c0d38>] (__mutex_lock_slowpath) from [<819c0d8c>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<819c0d50>] (mutex_lock) from [<804add1c>] (_vm_unmap_aliases+0x68/0x240 mm/vmalloc.c:2844) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vm_reset_perms mm/vmalloc.c:3272 [inline]) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vfree+0x170/0x1e4 mm/vmalloc.c:3351) r10:82c18005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:8450cc00 r4:00000000 [<804b1908>] (vfree) from [<8050fcb8>] (execmem_free+0x30/0x64 mm/execmem.c:69) r9:84860000 r8:00800000 r7:00000000 r6:82c18000 r5:00001000 r4:7f242000 [<8050fc88>] (execmem_free) from [<8039c55c>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1072) r5:00001000 r4:dfceb000 [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_binary_free kernel/bpf/core.c:1118 [inline]) [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1241) [<8039c8d4>] (bpf_jit_free) from [<8039da90>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2815) r5:850bef54 r4:850bec00 [<8039d944>] (bpf_prog_free_deferred) from [<80266034>] (process_one_work+0x1b4/0x4f4 kernel/workqueue.c:3229) r7:dddd00c0 r6:82c18000 r5:850bef54 r4:845b2800 [<80265e80>] (process_one_work) from [<80266c18>] (process_scheduled_works kernel/workqueue.c:3310 [inline]) [<80265e80>] (process_one_work) from [<80266c18>] (worker_thread+0x1ec/0x3bc kernel/workqueue.c:3391) r10:84860000 r9:845b282c r8:61c88647 r7:dddd00e0 r6:82604d40 r5:dddd00c0 r4:845b2800 [<80266a2c>] (worker_thread) from [<8026fc94>] (kthread+0x104/0x134 kernel/kthread.c:389) r10:00000000 r9:e042de78 r8:845d9e00 r7:845b2800 r6:80266a2c r5:84860000 r4:84a0ec40 [<8026fb90>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe0439fb0 to 0xe0439ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fb90 r4:84a0ec40 INFO: task kworker/1:40:16042 blocked for more than 430 seconds. Not tainted 6.12.0-rc5-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:40 state:D stack:0 pid:16042 tgid:16042 ppid:2 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<819bc9a4>] (__schedule) from [<819bd5f4>] (__schedule_loop kernel/sched/core.c:6767 [inline]) [<819bc9a4>] (__schedule) from [<819bd5f4>] (schedule+0x2c/0xfc kernel/sched/core.c:6782) r10:8260ca7c r9:00000000 r8:82717b64 r7:00000002 r6:dfdc5da4 r5:84863c00 r4:84863c00 [<819bd5c8>] (schedule) from [<819bd9a8>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6839) r5:84863c00 r4:82717b60 [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<819c0198>] (__mutex_lock.constprop.0) from [<819c0d4c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfdc5e20 r4:00000000 [<819c0d38>] (__mutex_lock_slowpath) from [<819c0d8c>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<819c0d50>] (mutex_lock) from [<804add1c>] (_vm_unmap_aliases+0x68/0x240 mm/vmalloc.c:2844) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vm_reset_perms mm/vmalloc.c:3272 [inline]) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vfree+0x170/0x1e4 mm/vmalloc.c:3351) r10:82c18205 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:897a8940 r4:00000000 [<804b1908>] (vfree) from [<8050fcb8>] (execmem_free+0x30/0x64 mm/execmem.c:69) r9:84863c00 r8:01800000 r7:00000000 r6:82c18200 r5:00001000 r4:7f22c000 [<8050fc88>] (execmem_free) from [<8039c55c>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1072) r5:00001000 r4:dfb01000 [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_binary_free kernel/bpf/core.c:1118 [inline]) [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1241) [<8039c8d4>] (bpf_jit_free) from [<8039da90>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2815) r5:845f3354 r4:845f3000 [<8039d944>] (bpf_prog_free_deferred) from [<80266034>] (process_one_work+0x1b4/0x4f4 kernel/workqueue.c:3229) r7:ddde40c0 r6:82c18200 r5:845f3354 r4:84715780 [<80265e80>] (process_one_work) from [<80266c18>] (process_scheduled_works kernel/workqueue.c:3310 [inline]) [<80265e80>] (process_one_work) from [<80266c18>] (worker_thread+0x1ec/0x3bc kernel/workqueue.c:3391) r10:84863c00 r9:847157ac r8:61c88647 r7:ddde40e0 r6:82604d40 r5:ddde40c0 r4:84715780 [<80266a2c>] (worker_thread) from [<8026fc94>] (kthread+0x104/0x134 kernel/kthread.c:389) r10:00000000 r9:e0349e78 r8:85013cc0 r7:84715780 r6:80266a2c r5:84863c00 r4:845d9bc0 [<8026fb90>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfdc5fb0 to 0xdfdc5ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fb90 r4:845d9bc0 INFO: task kworker/0:43:16061 blocked for more than 430 seconds. Not tainted 6.12.0-rc5-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:43 state:D stack:0 pid:16061 tgid:16061 ppid:2 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<819bc9a4>] (__schedule) from [<819bd5f4>] (__schedule_loop kernel/sched/core.c:6767 [inline]) [<819bc9a4>] (__schedule) from [<819bd5f4>] (schedule+0x2c/0xfc kernel/sched/core.c:6782) r10:8260ca7c r9:00000000 r8:82717b64 r7:00000002 r6:dfb5dda4 r5:84866000 r4:84866000 [<819bd5c8>] (schedule) from [<819bd9a8>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6839) r5:84866000 r4:82717b60 [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<819c0198>] (__mutex_lock.constprop.0) from [<819c0d4c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfb5de20 r4:00000000 [<819c0d38>] (__mutex_lock_slowpath) from [<819c0d8c>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<819c0d50>] (mutex_lock) from [<804add1c>] (_vm_unmap_aliases+0x68/0x240 mm/vmalloc.c:2844) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vm_reset_perms mm/vmalloc.c:3272 [inline]) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vfree+0x170/0x1e4 mm/vmalloc.c:3351) r10:82c18005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:838e44c0 r4:00000000 [<804b1908>] (vfree) from [<8050fcb8>] (execmem_free+0x30/0x64 mm/execmem.c:69) r9:84866000 r8:00800000 r7:00000000 r6:82c18000 r5:00001000 r4:7f23c000 [<8050fc88>] (execmem_free) from [<8039c55c>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1072) r5:00001000 r4:e03a0000 [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_binary_free kernel/bpf/core.c:1118 [inline]) [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1241) [<8039c8d4>] (bpf_jit_free) from [<8039da90>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2815) r5:84849b54 r4:84849800 [<8039d944>] (bpf_prog_free_deferred) from [<80266034>] (process_one_work+0x1b4/0x4f4 kernel/workqueue.c:3229) r7:dddd00c0 r6:82c18000 r5:84849b54 r4:845b2900 [<80265e80>] (process_one_work) from [<80266c18>] (process_scheduled_works kernel/workqueue.c:3310 [inline]) [<80265e80>] (process_one_work) from [<80266c18>] (worker_thread+0x1ec/0x3bc kernel/workqueue.c:3391) r10:84866000 r9:845b292c r8:61c88647 r7:dddd00e0 r6:82604d40 r5:dddd00c0 r4:845b2900 [<80266a2c>] (worker_thread) from [<8026fc94>] (kthread+0x104/0x134 kernel/kthread.c:389) r10:00000000 r9:e0439e78 r8:84bf5380 r7:845b2900 r6:80266a2c r5:84866000 r4:84bff340 [<8026fb90>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfb5dfb0 to 0xdfb5dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fb90 r4:84bff340 INFO: task kworker/0:44:16099 blocked for more than 430 seconds. Not tainted 6.12.0-rc5-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:44 state:D stack:0 pid:16099 tgid:16099 ppid:2 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<819bc9a4>] (__schedule) from [<819bd5f4>] (__schedule_loop kernel/sched/core.c:6767 [inline]) [<819bc9a4>] (__schedule) from [<819bd5f4>] (schedule+0x2c/0xfc kernel/sched/core.c:6782) r10:8260ca7c r9:00000000 r8:82717b64 r7:00000002 r6:e0369da4 r5:89708000 r4:89708000 [<819bd5c8>] (schedule) from [<819bd9a8>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6839) r5:89708000 r4:82717b60 [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<819c0198>] (__mutex_lock.constprop.0) from [<819c0d4c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e0369e20 r4:00000000 [<819c0d38>] (__mutex_lock_slowpath) from [<819c0d8c>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<819c0d50>] (mutex_lock) from [<804add1c>] (_vm_unmap_aliases+0x68/0x240 mm/vmalloc.c:2844) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vm_reset_perms mm/vmalloc.c:3272 [inline]) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vfree+0x170/0x1e4 mm/vmalloc.c:3351) r10:82c18005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:85035080 r4:00000000 [<804b1908>] (vfree) from [<8050fcb8>] (execmem_free+0x30/0x64 mm/execmem.c:69) r9:89708000 r8:00800000 r7:00000000 r6:82c18000 r5:00001000 r4:7f240000 [<8050fc88>] (execmem_free) from [<8039c55c>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1072) r5:00001000 r4:dfcc3000 [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_binary_free kernel/bpf/core.c:1118 [inline]) [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1241) [<8039c8d4>] (bpf_jit_free) from [<8039da90>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2815) r5:850bdf54 r4:850bdc00 [<8039d944>] (bpf_prog_free_deferred) from [<80266034>] (process_one_work+0x1b4/0x4f4 kernel/workqueue.c:3229) r7:dddd00c0 r6:82c18000 r5:850bdf54 r4:83ac6080 [<80265e80>] (process_one_work) from [<80266c18>] (process_scheduled_works kernel/workqueue.c:3310 [inline]) [<80265e80>] (process_one_work) from [<80266c18>] (worker_thread+0x1ec/0x3bc kernel/workqueue.c:3391) r10:89708000 r9:83ac60ac r8:61c88647 r7:dddd00e0 r6:82604d40 r5:dddd00c0 r4:83ac6080 [<80266a2c>] (worker_thread) from [<8026fc94>] (kthread+0x104/0x134 kernel/kthread.c:389) r10:00000000 r9:e0439e78 r8:84a0ee40 r7:83ac6080 r6:80266a2c r5:89708000 r4:85290840 [<8026fb90>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe0369fb0 to 0xe0369ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fb90 r4:85290840 INFO: task kworker/0:45:16103 blocked for more than 430 seconds. Not tainted 6.12.0-rc5-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:45 state:D stack:0 pid:16103 tgid:16103 ppid:2 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<819bc9a4>] (__schedule) from [<819bd5f4>] (__schedule_loop kernel/sched/core.c:6767 [inline]) [<819bc9a4>] (__schedule) from [<819bd5f4>] (schedule+0x2c/0xfc kernel/sched/core.c:6782) r10:8260ca7c r9:00000000 r8:82717b64 r7:00000002 r6:dffddda4 r5:8970c800 r4:8970c800 [<819bd5c8>] (schedule) from [<819bd9a8>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6839) r5:8970c800 r4:82717b60 [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<819c0198>] (__mutex_lock.constprop.0) from [<819c0d4c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dffdde20 r4:00000000 [<819c0d38>] (__mutex_lock_slowpath) from [<819c0d8c>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<819c0d50>] (mutex_lock) from [<804add1c>] (_vm_unmap_aliases+0x68/0x240 mm/vmalloc.c:2844) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vm_reset_perms mm/vmalloc.c:3272 [inline]) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vfree+0x170/0x1e4 mm/vmalloc.c:3351) r10:82c18005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:845dd000 r4:00000000 [<804b1908>] (vfree) from [<8050fcb8>] (execmem_free+0x30/0x64 mm/execmem.c:69) r9:8970c800 r8:00800000 r7:00000000 r6:82c18000 r5:00001000 r4:7f22e000 [<8050fc88>] (execmem_free) from [<8039c55c>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1072) r5:00001000 r4:df921000 [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_binary_free kernel/bpf/core.c:1118 [inline]) [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1241) [<8039c8d4>] (bpf_jit_free) from [<8039da90>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2815) r5:85245354 r4:85245000 [<8039d944>] (bpf_prog_free_deferred) from [<80266034>] (process_one_work+0x1b4/0x4f4 kernel/workqueue.c:3229) r7:dddd00c0 r6:82c18000 r5:85245354 r4:83ac6e00 [<80265e80>] (process_one_work) from [<80266c18>] (process_scheduled_works kernel/workqueue.c:3310 [inline]) [<80265e80>] (process_one_work) from [<80266c18>] (worker_thread+0x1ec/0x3bc kernel/workqueue.c:3391) r10:8970c800 r9:83ac6e2c r8:61c88647 r7:dddd00e0 r6:82604d40 r5:dddd00c0 r4:83ac6e00 [<80266a2c>] (worker_thread) from [<8026fc94>] (kthread+0x104/0x134 kernel/kthread.c:389) r10:00000000 r9:e0439e78 r8:84a0ed80 r7:83ac6e00 r6:80266a2c r5:8970c800 r4:85233c80 [<8026fb90>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdffddfb0 to 0xdffddff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fb90 r4:85233c80 INFO: task kworker/0:46:16122 blocked for more than 430 seconds. Not tainted 6.12.0-rc5-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:46 state:D stack:0 pid:16122 tgid:16122 ppid:2 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<819bc9a4>] (__schedule) from [<819bd5f4>] (__schedule_loop kernel/sched/core.c:6767 [inline]) [<819bc9a4>] (__schedule) from [<819bd5f4>] (schedule+0x2c/0xfc kernel/sched/core.c:6782) r10:8260ca7c r9:00000000 r8:82717b64 r7:00000002 r6:df98dda4 r5:8970e000 r4:8970e000 [<819bd5c8>] (schedule) from [<819bd9a8>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6839) r5:8970e000 r4:82717b60 [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<819c0198>] (__mutex_lock.constprop.0) from [<819c0d4c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:df98de20 r4:00000000 [<819c0d38>] (__mutex_lock_slowpath) from [<819c0d8c>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<819c0d50>] (mutex_lock) from [<804add1c>] (_vm_unmap_aliases+0x68/0x240 mm/vmalloc.c:2844) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vm_reset_perms mm/vmalloc.c:3272 [inline]) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vfree+0x170/0x1e4 mm/vmalloc.c:3351) r10:82c18005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84b0c380 r4:00000000 [<804b1908>] (vfree) from [<8050fcb8>] (execmem_free+0x30/0x64 mm/execmem.c:69) r9:8970e000 r8:00800000 r7:00000000 r6:82c18000 r5:00001000 r4:7f23e000 [<8050fc88>] (execmem_free) from [<8039c55c>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1072) r5:00001000 r4:dfcbf000 [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_binary_free kernel/bpf/core.c:1118 [inline]) [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1241) [<8039c8d4>] (bpf_jit_free) from [<8039da90>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2815) r5:847a1f54 r4:847a1c00 [<8039d944>] (bpf_prog_free_deferred) from [<80266034>] (process_one_work+0x1b4/0x4f4 kernel/workqueue.c:3229) r7:dddd00c0 r6:82c18000 r5:847a1f54 r4:83ac6400 [<80265e80>] (process_one_work) from [<80266c18>] (process_scheduled_works kernel/workqueue.c:3310 [inline]) [<80265e80>] (process_one_work) from [<80266c18>] (worker_thread+0x1ec/0x3bc kernel/workqueue.c:3391) r10:8970e000 r9:83ac642c r8:61c88647 r7:dddd00e0 r6:82604d40 r5:dddd00c0 r4:83ac6400 [<80266a2c>] (worker_thread) from [<8026fc94>] (kthread+0x104/0x134 kernel/kthread.c:389) r10:00000000 r9:e0369e78 r8:84a0e2c0 r7:83ac6400 r6:80266a2c r5:8970e000 r4:843a0240 [<8026fb90>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf98dfb0 to 0xdf98dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fb90 r4:843a0240 INFO: task kworker/0:47:16131 blocked for more than 430 seconds. Not tainted 6.12.0-rc5-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:47 state:D stack:0 pid:16131 tgid:16131 ppid:2 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<819bc9a4>] (__schedule) from [<819bd5f4>] (__schedule_loop kernel/sched/core.c:6767 [inline]) [<819bc9a4>] (__schedule) from [<819bd5f4>] (schedule+0x2c/0xfc kernel/sched/core.c:6782) r10:8260ca7c r9:00000000 r8:82717b64 r7:00000002 r6:dfa85da4 r5:8970ec00 r4:8970ec00 [<819bd5c8>] (schedule) from [<819bd9a8>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6839) r5:8970ec00 r4:82717b60 [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<819c0198>] (__mutex_lock.constprop.0) from [<819c0d4c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfa85e20 r4:00000000 [<819c0d38>] (__mutex_lock_slowpath) from [<819c0d8c>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<819c0d50>] (mutex_lock) from [<804add1c>] (_vm_unmap_aliases+0x68/0x240 mm/vmalloc.c:2844) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vm_reset_perms mm/vmalloc.c:3272 [inline]) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vfree+0x170/0x1e4 mm/vmalloc.c:3351) r10:82c18005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:8450c040 r4:00000000 [<804b1908>] (vfree) from [<8050fcb8>] (execmem_free+0x30/0x64 mm/execmem.c:69) r9:8970ec00 r8:00800000 r7:00000000 r6:82c18000 r5:00001000 r4:7f244000 [<8050fc88>] (execmem_free) from [<8039c55c>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1072) r5:00001000 r4:dfd11000 [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_binary_free kernel/bpf/core.c:1118 [inline]) [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1241) [<8039c8d4>] (bpf_jit_free) from [<8039da90>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2815) r5:85245b54 r4:85245800 [<8039d944>] (bpf_prog_free_deferred) from [<80266034>] (process_one_work+0x1b4/0x4f4 kernel/workqueue.c:3229) r7:dddd00c0 r6:82c18000 r5:85245b54 r4:83ac6a00 [<80265e80>] (process_one_work) from [<80266c18>] (process_scheduled_works kernel/workqueue.c:3310 [inline]) [<80265e80>] (process_one_work) from [<80266c18>] (worker_thread+0x1ec/0x3bc kernel/workqueue.c:3391) r10:8970ec00 r9:83ac6a2c r8:61c88647 r7:dddd00e0 r6:82604d40 r5:dddd00c0 r4:83ac6a00 [<80266a2c>] (worker_thread) from [<8026fc94>] (kthread+0x104/0x134 kernel/kthread.c:389) r10:00000000 r9:e0439e78 r8:84a0e100 r7:83ac6a00 r6:80266a2c r5:8970ec00 r4:8450cb40 [<8026fb90>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfa85fb0 to 0xdfa85ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fb90 r4:8450cb40 INFO: task kworker/1:43:16171 blocked for more than 430 seconds. Not tainted 6.12.0-rc5-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:43 state:D stack:0 pid:16171 tgid:16171 ppid:2 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<819bc9a4>] (__schedule) from [<819bd5f4>] (__schedule_loop kernel/sched/core.c:6767 [inline]) [<819bc9a4>] (__schedule) from [<819bd5f4>] (schedule+0x2c/0xfc kernel/sched/core.c:6782) r10:8260ca7c r9:00000000 r8:82717b64 r7:00000002 r6:dfe55da4 r5:85113000 r4:85113000 [<819bd5c8>] (schedule) from [<819bd9a8>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6839) r5:85113000 r4:82717b60 [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<819bd990>] (schedule_preempt_disabled) from [<819c0480>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<819c0198>] (__mutex_lock.constprop.0) from [<819c0d4c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:8260ca7c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfe55e20 r4:00000000 [<819c0d38>] (__mutex_lock_slowpath) from [<819c0d8c>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<819c0d50>] (mutex_lock) from [<804add1c>] (_vm_unmap_aliases+0x68/0x240 mm/vmalloc.c:2844) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vm_reset_perms mm/vmalloc.c:3272 [inline]) [<804adcb4>] (_vm_unmap_aliases) from [<804b1a78>] (vfree+0x170/0x1e4 mm/vmalloc.c:3351) r10:82c18205 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:897a8680 r4:00000000 [<804b1908>] (vfree) from [<8050fcb8>] (execmem_free+0x30/0x64 mm/execmem.c:69) r9:85113000 r8:01800000 r7:00000000 r6:82c18200 r5:00001000 r4:7f232000 [<8050fc88>] (execmem_free) from [<8039c55c>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1072) r5:00001000 r4:dfb47000 [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_binary_free kernel/bpf/core.c:1118 [inline]) [<8039c54c>] (bpf_jit_free_exec) from [<8039c93c>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1241) [<8039c8d4>] (bpf_jit_free) from [<8039da90>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2815) r5:845f3b54 r4:845f3800 [<8039d944>] (bpf_prog_free_deferred) from [<80266034>] (process_one_work+0x1b4/0x4f4 kernel/workqueue.c:3229) r7:ddde40c0 r6:82c18200 r5:845f3b54 r4:85145480 [<80265e80>] (process_one_work) from [<80266c18>] (process_scheduled_works kernel/workqueue.c:3310 [inline]) [<80265e80>] (process_one_work) from [<80266c18>] (worker_thread+0x1ec/0x3bc kernel/workqueue.c:3391) r10:85113000 r9:851454ac r8:61c88647 r7:ddde40e0 r6:82604d40 r5:ddde40c0 r4:85145480 [<80266a2c>] (worker_thread) from [<8026fc94>] (kthread+0x104/0x134 kernel/kthread.c:389) r10:00000000 r9:dfdc5e78 r8:897a8300 r7:85145480 r6:80266a2c r5:85113000 r4:897a8000 [<8026fb90>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfe55fb0 to 0xdfe55ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fb90 r4:897a8000 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.12.0-rc5-syzkaller #0 Hardware name: ARM-Versatile Express Call trace: [<8199a4d8>] (dump_backtrace) from [<8199a5d4>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:00000113 r5:60000193 r4:8203d914 [<8199a5bc>] (show_stack) from [<819b8a8c>] (__dump_stack lib/dump_stack.c:94 [inline]) [<8199a5bc>] (show_stack) from [<819b8a8c>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:120) [<819b8a1c>] (dump_stack_lvl) from [<819b8ab0>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r5:00000000 r4:00000001 [<819b8a98>] (dump_stack) from [<81987790>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<81987630>] (nmi_cpu_backtrace) from [<819878dc>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000000 r6:8260c5d0 r5:8261af0c r4:ffffffff [<819877ac>] (nmi_trigger_cpumask_backtrace) from [<802103e8>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:00029190 r8:828b6cf8 r7:8260c730 r6:00007df1 r5:8261b4c8 r4:8514c51c [<802103d0>] (arch_trigger_cpumask_backtrace) from [<80358228>] (trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]) [<802103d0>] (arch_trigger_cpumask_backtrace) from [<80358228>] (check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]) [<802103d0>] (arch_trigger_cpumask_backtrace) from [<80358228>] (watchdog+0x498/0x5b8 kernel/hung_task.c:379) [<80357d90>] (watchdog) from [<8026fc94>] (kthread+0x104/0x134 kernel/kthread.c:389) r10:00000000 r9:df819e58 r8:82f23ac0 r7:00000000 r6:80357d90 r5:82e59800 r4:82ec92c0 [<8026fb90>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8e1fb0 to 0xdf8e1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fb90 r4:82ec92c0 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 2900 Comm: syslogd Not tainted 6.12.0-rc5-syzkaller #0 Hardware name: ARM-Versatile Express PC is at __follow_mount_rcu fs/namei.c:1537 [inline] PC is at handle_mounts fs/namei.c:1562 [inline] PC is at step_into+0x234/0x6c8 fs/namei.c:1891 LR is at 0xfff pc : [<80528a34>] lr : [<00000fff>] psr: 60000013 sp : ec1f9d28 ip : 82238850 fp : ec1f9d74 r10: 00000002 r9 : 00290000 r8 : 834fe000 r7 : 00000000 r6 : 830202a8 r5 : 831d1000 r4 : ec1f9e58 r3 : 00000002 r2 : 82cae610 r1 : 831d1000 r0 : 82e9dc10 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 842e5c00 DAC: 00000000 Call trace: [<80528800>] (step_into) from [<80529324>] (walk_component+0x50/0x170 fs/namei.c:2059) r10:83183b66 r9:ec1f9ea4 r8:ec1f9ea4 r7:00000000 r6:ec1f9e58 r5:00000000 r4:831d1000 [<805292d4>] (walk_component) from [<80529620>] (link_path_walk.part.0.constprop.0+0x1dc/0x3c0 fs/namei.c:2415) r9:896b4019 r8:80808080 r7:2f2f2f2f r6:d0d0d0d0 r5:ec1f9e58 r4:fefefeff [<80529444>] (link_path_walk.part.0.constprop.0) from [<8052abec>] (link_path_walk fs/namei.c:2350 [inline]) [<80529444>] (link_path_walk.part.0.constprop.0) from [<8052abec>] (path_openat+0x98/0x11a4 fs/namei.c:3929) r10:00000142 r9:852f46c0 r8:ec1f9e58 r7:ec1f9e58 r6:ec1f9f20 r5:896b4010 r4:896b4000 [<8052ab54>] (path_openat) from [<8052bd94>] (do_filp_open+0x9c/0x138 fs/namei.c:3960) r10:00000142 r9:834fe000 r8:00000001 r7:ec1f9e58 r6:ec1f9f20 r5:834fe000 r4:896b4000 [<8052bcf8>] (do_filp_open) from [<80513040>] (do_sys_openat2+0xbc/0xe4 fs/open.c:1415) r8:8020029c r7:ffffff9c r6:00000003 r5:ec1f9f58 r4:896b4000 [<80512f84>] (do_sys_openat2) from [<80513448>] (do_sys_open fs/open.c:1430 [inline]) [<80512f84>] (do_sys_openat2) from [<80513448>] (__do_sys_openat fs/open.c:1446 [inline]) [<80512f84>] (do_sys_openat2) from [<80513448>] (sys_openat+0x98/0xd4 fs/open.c:1441) r7:00000142 r6:7735975c r5:76f8d482 r4:ffffff9c [<805133b0>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xec1f9fa8 to 0xec1f9ff0) 9fa0: 013d31a8 76fe85a0 ffffff9c 76f8d482 00020d41 000001b6 9fc0: 013d31a8 76fe85a0 7735975c 00000142 013d32e0 013d31c8 76fa854c 7eb56c74 9fe0: 76fa7bf4 7eb56b80 76f1cf90 76e2afec r5:76fe85a0 r4:013d31a8