INFO: task kworker/0:10:14563 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:10 state:D stack:0 pid:14563 tgid:14563 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfcf1da4 r9:dfcf1dac r8:00000002 r7:60070013 r6:82cd9e0c r5:84671880 r4:84671880 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:84671880 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfcf1e28 r4:859ab840 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:859ab840 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:84671880 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f234000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e0365000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:863cdf98 r4:863cdf98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:863cdf98 r4:86740d00 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:86740d30 r8:84671880 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86740d00 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eb161e88 r8:84bda080 r7:86740d00 r6:80277df8 r5:84671880 r4:86861f00 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfcf1fb0 to 0xdfcf1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86861f00 INFO: task kworker/0:10:14563 is blocked on a mutex likely owned by task kworker/0:7:14211. task:kworker/0:7 state:R running task stack:0 pid:14211 tgid:14211 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:8400a4c0 r8:80200c04 r7:dfe9dd7c r6:ffffffff r5:8400a4c0 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xdfe9dd48 to 0xdfe9dd90) dd40: e8b37000 eb183000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f00f000 eb183000 00000000 00000001 82a0b498 dfe9ddbc eb183000 dfe9dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:dfe9dde0 r8:00000000 r7:ffffffff r6:00000008 r5:dfe9de28 r4:dfe9dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:875dfd80 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:8400a4c0 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f304000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eb18f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:85552798 r4:85552798 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:85552798 r4:86687e00 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:86687e30 r8:8400a4c0 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86687e00 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eb161e88 r8:859a6e00 r7:86687e00 r6:80277df8 r5:8400a4c0 r4:862f0d00 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfe9dfb0 to 0xdfe9dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:862f0d00 INFO: task kworker/0:0:16642 blocked for more than 431 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:0 state:D stack:0 pid:16642 tgid:16642 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:eb0a1da4 r9:eb0a1dac r8:00000002 r7:60070113 r6:82cd9e0c r5:840124c0 r4:840124c0 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:840124c0 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:eb0a1e28 r4:84bac780 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:84bac780 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:840124c0 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f236000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e036f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:863ce398 r4:863ce398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:863ce398 r4:840fbe00 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:840fbe30 r8:840124c0 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:840fbe00 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfda5e88 r8:871d4000 r7:840fbe00 r6:80277df8 r5:840124c0 r4:84c39000 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeb0a1fb0 to 0xeb0a1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:84c39000 INFO: task kworker/0:0:16642 is blocked on a mutex likely owned by task kworker/0:7:14211. task:kworker/0:7 state:R running task stack:0 pid:14211 tgid:14211 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:8400a4c0 r8:80200c04 r7:dfe9dd7c r6:ffffffff r5:8400a4c0 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xdfe9dd48 to 0xdfe9dd90) dd40: e9047000 eb183000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f00f000 eb183000 00000000 00000001 82a0b498 dfe9ddbc eb183000 dfe9dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:dfe9dde0 r8:00000000 r7:ffffffff r6:00000008 r5:dfe9de28 r4:dfe9dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:875dfd80 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:8400a4c0 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f304000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eb18f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:85552798 r4:85552798 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:85552798 r4:86687e00 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:86687e30 r8:8400a4c0 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86687e00 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eb161e88 r8:859a6e00 r7:86687e00 r6:80277df8 r5:8400a4c0 r4:862f0d00 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfe9dfb0 to 0xdfe9dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:862f0d00 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:60000193 r6:60000193 r5:82336570 r4:00000000 [<80201a74>] (show_stack) from [<8021ec68>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120) [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r7:00000000 r6:00000113 r5:00000000 r4:00000001 [<8021ec7c>] (dump_stack) from [<81b5aefc>] (nmi_cpu_backtrace+0x150/0x170 lib/nmi_backtrace.c:122) [<81b5adac>] (nmi_cpu_backtrace) from [<81b5b050>] (nmi_trigger_cpumask_backtrace+0x134/0x208 lib/nmi_backtrace.c:65) r7:82a0b150 r6:83320c40 r5:82a1c7b8 r4:ffffffff [<81b5af1c>] (nmi_trigger_cpumask_backtrace) from [<802300d4>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:82a0b2f0 r8:00000002 r7:82a1ce80 r6:82ccce2c r5:00007ee2 r4:00000048 [<802300bc>] (arch_trigger_cpumask_backtrace) from [<81b62b8c>] (trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]) [<802300bc>] (arch_trigger_cpumask_backtrace) from [<81b62b8c>] (__sys_info lib/sys_info.c:157 [inline]) [<802300bc>] (arch_trigger_cpumask_backtrace) from [<81b62b8c>] (sys_info+0x68/0xa8 lib/sys_info.c:165) [<81b62b24>] (sys_info) from [<80390a60>] (check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]) [<81b62b24>] (sys_info) from [<80390a60>] (watchdog+0x3a0/0x848 kernel/hung_task.c:561) r5:00007ee2 r4:0000000a [<803906c0>] (watchdog) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df819e60 r8:831d5600 r7:00000000 r6:803906c0 r5:83320c40 r4:833dd0c0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8d5fb0 to 0xdf8d5ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:833dd0c0