INFO: task kworker/0:12:18669 blocked for more than 437 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:12 state:D stack:0 pid:18669 tgid:18669 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b1df3c>] (__schedule) from [<81b1f3d0>] (__schedule_loop kernel/sched/core.c:7268 [inline]) [<81b1df3c>] (__schedule) from [<81b1f3d0>] (schedule+0x2c/0x134 kernel/sched/core.c:7283) r10:dfb51da4 r9:dfb51dac r8:00000002 r7:60000113 r6:82ccfb8c r5:83e1d780 r4:83e1d780 [<81b1f3a4>] (schedule) from [<81b1f55c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7340) r5:83e1d780 r4:82ccfb88 [<81b1f544>] (schedule_preempt_disabled) from [<81b2263c>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b1f544>] (schedule_preempt_disabled) from [<81b2263c>] (__mutex_lock.constprop.0+0x530/0xa88 kernel/locking/mutex.c:820) [<81b2210c>] (__mutex_lock.constprop.0) from [<81b22c68>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1114) r10:82a0b82c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfb51e28 r4:00000000 [<81b22c54>] (__mutex_lock_slowpath) from [<81b22ca8>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b22c6c>] (mutex_lock) from [<8050c88c>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2951) [<8050c830>] (_vm_unmap_aliases) from [<80510684>] (vm_reset_perms mm/vmalloc.c:3382 [inline]) [<8050c830>] (_vm_unmap_aliases) from [<80510684>] (vfree+0x168/0x1d8 mm/vmalloc.c:3461) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:878b77c0 r4:00000000 [<8051051c>] (vfree) from [<805804a8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:83e1d780 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f2f8000 [<80580478>] (execmem_free) from [<803d5c5c>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1070) r5:00001000 r4:e0259000 [<803d5c4c>] (bpf_jit_free_exec) from [<803d603c>] (bpf_jit_binary_free kernel/bpf/core.c:1116 [inline]) [<803d5c4c>] (bpf_jit_free_exec) from [<803d603c>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1239) [<803d5fd8>] (bpf_jit_free) from [<803d70e4>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3040) r5:86ce7f8c r4:86ce7f8c [<803d6f9c>] (bpf_prog_free_deferred) from [<80276084>] (process_one_work+0x1c8/0x5a0 kernel/workqueue.c:3314) r7:dddd0f00 r6:8302b000 r5:86ce7f8c r4:875e5500 [<80275ebc>] (process_one_work) from [<80276d50>] (process_scheduled_works kernel/workqueue.c:3397 [inline]) [<80275ebc>] (process_one_work) from [<80276d50>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3478) r10:dddd0f00 r9:875e5530 r8:83e1d780 r7:82a03d80 r6:dddd0f20 r5:dddd0f00 r4:875e5500 [<80276be4>] (worker_thread) from [<80281590>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfaa5e88 r8:85f4c380 r7:875e5500 r6:80276be4 r5:83e1d780 r4:86a9f380 [<80281474>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfb51fb0 to 0xdfb51ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281474 r4:86a9f380 INFO: task kworker/0:12:18669 is blocked on a mutex likely owned by task kworker/0:1:16915. task:kworker/0:1 state:R running task stack:0 pid:16915 tgid:16915 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b1df3c>] (__schedule) from [<81b1f808>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7513) r10:82a0b880 r9:84705780 r8:80200c04 r7:e02f1d7c r6:ffffffff r5:84705780 r4:00000000 [<81b1f7c8>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xe02f1d48 to 0xe02f1d90) 1d40: cb6b2000 ebd07000 00000000 80238790 82ccef20 82ccfb64 1d60: 7f266000 ebd07000 00000000 00000001 82a0b880 e02f1dbc ebd07000 e02f1d98 1d80: 8022f6e0 802387a8 80000113 ffffffff r5:80000113 r4:802387a8 [<8022f680>] (flush_tlb_kernel_range) from [<8050c640>] (__purge_vmap_area_lazy+0x294/0x484 mm/vmalloc.c:2376) [<8050c3ac>] (__purge_vmap_area_lazy) from [<8050ca18>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:2990) r10:00000000 r9:e02f1de0 r8:00000000 r7:ffffffff r6:00000008 r5:e02f1e28 r4:e02f1de0 [<8050c830>] (_vm_unmap_aliases) from [<80510684>] (vm_reset_perms mm/vmalloc.c:3382 [inline]) [<8050c830>] (_vm_unmap_aliases) from [<80510684>] (vfree+0x168/0x1d8 mm/vmalloc.c:3461) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:878556c0 r4:00000000 [<8051051c>] (vfree) from [<805804a8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:84705780 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f266000 [<80580478>] (execmem_free) from [<803d5c5c>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1070) r5:00001000 r4:dfd03000 [<803d5c4c>] (bpf_jit_free_exec) from [<803d603c>] (bpf_jit_binary_free kernel/bpf/core.c:1116 [inline]) [<803d5c4c>] (bpf_jit_free_exec) from [<803d603c>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1239) [<803d5fd8>] (bpf_jit_free) from [<803d70e4>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3040) r5:86ff278c r4:86ff278c [<803d6f9c>] (bpf_prog_free_deferred) from [<80276084>] (process_one_work+0x1c8/0x5a0 kernel/workqueue.c:3314) r7:dddd0f00 r6:8302b000 r5:86ff278c r4:86875880 [<80275ebc>] (process_one_work) from [<80276d50>] (process_scheduled_works kernel/workqueue.c:3397 [inline]) [<80275ebc>] (process_one_work) from [<80276d50>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3478) r10:00000000 r9:868758b0 r8:84705780 r7:82a03d80 r6:dddd0f20 r5:dddd0f00 r4:86875880 [<80276be4>] (worker_thread) from [<80281590>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfaa5e88 r8:87049e00 r7:86875880 r6:80276be4 r5:84705780 r4:87055c40 [<80281474>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe02f1fb0 to 0xe02f1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281474 r4:87055c40 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 29 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express Call trace: [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:600f0093 r6:600f0093 r5:8231e144 r4:00000000 [<80201af0>] (show_stack) from [<8021e37c>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120) [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r7:00000000 r6:000f0013 r5:00000001 r4:00000001 [<8021e390>] (dump_stack) from [<81b07814>] (nmi_cpu_backtrace+0x150/0x170 lib/nmi_backtrace.c:113) [<81b076c4>] (nmi_cpu_backtrace) from [<81b07964>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:82a0b550 r5:82a1a2b8 r4:ffffffff [<81b07834>] (nmi_trigger_cpumask_backtrace) from [<8022f104>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852) r9:82a0b6d8 r8:00000048 r7:0000000a r6:82a03d80 r5:00007ef6 r4:00000048 [<8022f0ec>] (arch_trigger_cpumask_backtrace) from [<81b0f4b0>] (trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]) [<8022f0ec>] (arch_trigger_cpumask_backtrace) from [<81b0f4b0>] (__sys_info lib/sys_info.c:157 [inline]) [<8022f0ec>] (arch_trigger_cpumask_backtrace) from [<81b0f4b0>] (sys_info+0x68/0xa8 lib/sys_info.c:165) [<81b0f448>] (sys_info) from [<8038acf0>] (check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]) [<81b0f448>] (sys_info) from [<8038acf0>] (watchdog+0x3ac/0x858 kernel/hung_task.c:561) r5:00007ef6 r4:00000001 [<8038a944>] (watchdog) from [<80281590>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df819e58 r8:83113480 r7:00000000 r6:8038a944 r5:833f8000 r4:8330abc0 [<80281474>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8d5fb0 to 0xdf8d5ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281474 r4:8330abc0 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 2821 Comm: pr/ttyAMA-1 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express PC is at __skb_flow_dissect_ports net/core/flow_dissector.c:875 [inline] PC is at __skb_flow_dissect+0xf54/0x1ba0 net/core/flow_dissector.c:1662 LR is at 0x0 pc : [<816141cc>] lr : [<00000000>] psr: 40000113 sp : df8018b0 ip : 00000000 fp : df801964 r10: 81e5a32c r9 : 866b7540 r8 : 00000006 r7 : 00000004 r6 : 82537588 r5 : df801980 r4 : 00000000 r3 : 84041900 r2 : 00000000 r1 : 00000000 r0 : 214e214e Flags: nZcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 86848c00 DAC: fffffffd Call trace: frame pointer underflow [<81613278>] (__skb_flow_dissect) from [<818b5854>] (__xfrm_decode_session+0x74/0x224 net/xfrm/xfrm_policy.c:3508) r10:1b1414ac r9:00000001 r8:00000000 r7:00000002 r6:00000000 r5:866b7540 r4:df801a08 [<818b57e0>] (__xfrm_decode_session) from [<8188ad90>] (xfrm_decode_session include/net/xfrm.h:1338 [inline]) [<818b57e0>] (__xfrm_decode_session) from [<8188ad90>] (ip_route_me_harder+0x284/0x360 net/ipv4/netfilter.c:67) r9:00000001 r8:86c9ae80 r7:86199000 r6:00000000 r5:00000000 r4:866b7540 [<8188ab0c>] (ip_route_me_harder) from [<817883c4>] (synproxy_send_tcp+0xbc/0x18c net/netfilter/nf_synproxy_core.c:436) r10:86c9b300 r9:86c9b314 r8:df801b50 r7:83893401 r6:86199000 r5:86c1c200 r4:866b7540 [<81788308>] (synproxy_send_tcp) from [<81788d0c>] (synproxy_send_client_synack+0x1a0/0x1f8 net/netfilter/nf_synproxy_core.c:489) r7:8337b3c0 r6:86c9ae94 r5:00000005 r4:866b7540 [<81788b6c>] (synproxy_send_client_synack) from [<817c46a8>] (nft_synproxy_eval_v4 net/netfilter/nft_synproxy.c:60 [inline]) [<81788b6c>] (synproxy_send_client_synack) from [<817c46a8>] (nft_synproxy_do_eval+0x2bc/0x37c net/netfilter/nft_synproxy.c:142) r10:81e766ec r9:86c9b314 r8:87b27dc0 r7:87720558 r6:df801c1c r5:86199000 r4:8337b3c0 [<817c43ec>] (nft_synproxy_do_eval) from [<817c4794>] (nft_synproxy_eval+0x14/0x18 net/netfilter/nft_synproxy.c:248) r9:df801cb8 r8:87720548 r7:81e76990 r6:81e766ac r5:87720560 r4:87720550 [<817c4780>] (nft_synproxy_eval) from [<8178bd68>] (expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline]) [<817c4780>] (nft_synproxy_eval) from [<8178bd68>] (nft_do_chain+0x130/0x57c net/netfilter/nf_tables_core.c:285) [<8178bc38>] (nft_do_chain) from [<817a62c8>] (nft_do_chain_inet+0x5c/0x150 net/netfilter/nft_chain_filter.c:162) r10:81e70bda r9:830c6220 r8:df801d24 r7:8337b3c0 r6:830c6200 r5:838874c0 r4:00000000 [<817a626c>] (nft_do_chain_inet) from [<817511f4>] (nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]) [<817a626c>] (nft_do_chain_inet) from [<817511f4>] (nf_hook_slow+0x44/0x104 net/netfilter/core.c:619) r5:00000004 r4:00000001 [<817511b0>] (nf_hook_slow) from [<817e9e4c>] (nf_hook include/linux/netfilter.h:273 [inline]) [<817511b0>] (nf_hook_slow) from [<817e9e4c>] (NF_HOOK include/linux/netfilter.h:316 [inline]) [<817511b0>] (nf_hook_slow) from [<817e9e4c>] (ip_local_deliver+0xcc/0x10c net/ipv4/ip_input.c:262) r10:dddd2560 r9:dddd2448 r8:00000040 r7:00000000 r6:86199000 r5:87480800 r4:8337b3c0 r3:00000000 [<817e9d80>] (ip_local_deliver) from [<817e95ac>] (dst_input include/net/dst.h:480 [inline]) [<817e9d80>] (ip_local_deliver) from [<817e95ac>] (ip_rcv_finish+0x98/0xb0 net/ipv4/ip_input.c:492) r6:87480800 r5:86199000 r4:8337b3c0 [<817e9514>] (ip_rcv_finish) from [<817e9edc>] (NF_HOOK include/linux/netfilter.h:318 [inline]) [<817e9514>] (ip_rcv_finish) from [<817e9edc>] (NF_HOOK include/linux/netfilter.h:312 [inline]) [<817e9514>] (ip_rcv_finish) from [<817e9edc>] (ip_rcv+0x50/0xec net/ipv4/ip_input.c:612) r7:00000000 r6:86199000 r5:87480800 r4:8337b3c0 [<817e9e8c>] (ip_rcv) from [<8162869c>] (__netif_receive_skb_one_core+0x60/0x84 net/core/dev.c:6202) r6:00000000 r5:817e9e8c r4:87480800 [<8162863c>] (__netif_receive_skb_one_core) from [<81628708>] (__netif_receive_skb+0x18/0x5c net/core/dev.c:6315) r5:00000012 r4:8337b3c0 [<816286f0>] (__netif_receive_skb) from [<81628a64>] (process_backlog+0xa0/0x17c net/core/dev.c:6666) r5:00000012 r4:8337b3c0 [<816289c4>] (process_backlog) from [<81629250>] (__napi_poll+0x34/0x270 net/core/dev.c:7733) r10:df801e98 r9:00000000 r8:0000012c r7:00000040 r6:df801e93 r5:dddd2560 r4:00000001 [<8162921c>] (__napi_poll) from [<816297e8>] (napi_poll net/core/dev.c:7796 [inline]) [<8162921c>] (__napi_poll) from [<816297e8>] (net_rx_action+0x35c/0x3e8 net/core/dev.c:7953) r9:00000000 r8:0000012c r7:dddd2560 r6:dddd2564 r5:dddd2440 r4:ffffffff [<8162948c>] (net_rx_action) from [<80259fd0>] (handle_softirqs+0x160/0x4f4 kernel/softirq.c:622) r10:84041900 r9:00000011 r8:00000101 r7:0000000c r6:00000001 r5:00000003 r4:82a0308c [<80259e70>] (handle_softirqs) from [<8025a500>] (__do_softirq kernel/softirq.c:656 [inline]) [<80259e70>] (handle_softirqs) from [<8025a500>] (invoke_softirq kernel/softirq.c:496 [inline]) [<80259e70>] (handle_softirqs) from [<8025a500>] (__irq_exit_rcu+0x150/0x1d0 kernel/softirq.c:735) r10:82b58bf4 r9:84041900 r8:00000000 r7:eb3c1e78 r6:824cdfbc r5:825091e4 r4:84041900 [<8025a3b0>] (__irq_exit_rcu) from [<8025a838>] (irq_exit+0x10/0x18 kernel/softirq.c:764) r5:825091e4 r4:828d1e6c [<8025a828>] (irq_exit) from [<81b1a5c0>] (generic_handle_arch_irq+0x7c/0x80 kernel/irq/handle.c:293) [<81b1a544>] (generic_handle_arch_irq) from [<81ae7458>] (call_with_stack+0x1c/0x20 arch/arm/lib/call_with_stack.S:40) r9:84041900 r8:00000000 r7:eb3c1eac r6:ffffffff r5:60000113 r4:81b287d0 [<81ae743c>] (call_with_stack) from [<80200bec>] (__irq_svc+0x8c/0xbc arch/arm/kernel/entry-armv.S:228) Exception stack(0xeb3c1e78 to 0xeb3c1ec0) 1e60: 845e3040 60000113 1e80: 00000000 000022b9 00000001 00000000 82b58b58 00000117 00000000 00000000 1ea0: 82b58bf4 eb3c1ed4 eb3c1ed8 eb3c1ec8 80ae22ac 81b287d0 60000113 ffffffff [<81b287a8>] (_raw_spin_unlock_irqrestore) from [<80ae22ac>] (spin_unlock_irqrestore include/linux/spinlock.h:408 [inline]) [<81b287a8>] (_raw_spin_unlock_irqrestore) from [<80ae22ac>] (__uart_port_unlock_irqrestore include/linux/serial_core.h:616 [inline]) [<81b287a8>] (_raw_spin_unlock_irqrestore) from [<80ae22ac>] (pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2668) [<80ae228c>] (pl011_console_device_unlock) from [<802e8b28>] (nbcon_emit_one+0x88/0x100 kernel/printk/nbcon.c:1165) [<802e8aa0>] (nbcon_emit_one) from [<802e8da8>] (nbcon_kthread_func+0x208/0x2ec kernel/printk/nbcon.c:1271) r6:82cbf2d4 r5:82b58b58 r4:84041900 [<802e8ba0>] (nbcon_kthread_func) from [<80281590>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df931b38 r8:84685a00 r7:82b58b58 r6:802e8ba0 r5:84041900 r4:838bb240 [<80281474>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeb3c1fb0 to 0xeb3c1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281474 r4:838bb240