Extracting prog: 18m59.167010047s Minimizing prog: 1h18m17.758715266s Simplifying prog options: 29m8.340817781s Extracting C: 1m56.539919961s Simplifying C: 0s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 45s testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-bpf$BPF_LINK_CREATE_XDP detailed listing: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 5m0s testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-bpf$BPF_LINK_CREATE_XDP detailed listing: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 16m0s testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-bpf$BPF_LINK_CREATE_XDP detailed listing: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) program crashed: INFO: task hung in _vm_unmap_aliases single: successfully extracted reproducer found reproducer with 2 syscalls minimizing guilty program testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) program crashed: INFO: task hung in _vm_unmap_aliases testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD detailed listing: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) program did not crash extracting C reproducer testing compiled C program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD program did not crash simplifying guilty program options testing program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) program crashed: INFO: task hung in _vm_unmap_aliases extracting C reproducer testing compiled C program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD program did not crash testing program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) program did not crash testing program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) program crashed: INFO: task hung in _vm_unmap_aliases validation run: crashed=true testing program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) program crashed: INFO: task hung in _vm_unmap_aliases validation run: crashed=true testing program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) program crashed: INFO: task hung in _vm_unmap_aliases validation run: crashed=true reproducing took 2h39m41.2003575s repro crashed as (corrupted=false): INFO: task kworker/0:33:4522 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:33 state:D stack:0 pid:4522 tgid:4522 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfd0dda4 r9:dfd0ddac r8:00000002 r7:60000013 r6:82cd9e0c r5:849a3d40 r4:849a3d40 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:849a3d40 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfd0de28 r4:86a2df80 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a2df80 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:849a3d40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f00f000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:df8dd000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:867fab98 r4:867fab98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:867fab98 r4:869cf080 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:869cf0b0 r8:849a3d40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:869cf080 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfbfde88 r8:869cf200 r7:869cf080 r6:80277df8 r5:849a3d40 r4:868f7e00 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfd0dfb0 to 0xdfd0dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:868f7e00 INFO: task kworker/0:33:4522 is blocked on a mutex likely owned by task kworker/0:1025:9261. task:kworker/0:1025 state:R running task stack:0 pid:9261 tgid:9261 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:87850c40 r8:80200c04 r7:ed8ddd7c r6:ffffffff r5:87850c40 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xed8ddd48 to 0xed8ddd90) dd40: e37a9000 e4383000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f05b000 e4383000 00000000 00000001 82a0b498 ed8dddbc e4383000 ed8ddd98 dd80: 802306b0 80239788 80000113 ffffffff r5:80000113 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:ed8ddde0 r8:00000000 r7:ffffffff r6:00000008 r5:ed8dde28 r4:ed8ddde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:877c9600 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:87850c40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f05b000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ed917000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:878b5398 r4:878b5398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:878b5398 r4:877c7880 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:877c78b0 r8:87850c40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:877c7880 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:ed8fde88 r8:877c6280 r7:877c7880 r6:80277df8 r5:87850c40 r4:877baac0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xed8ddfb0 to 0xed8ddff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:877baac0 INFO: task kworker/1:56:4567 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:56 state:D stack:0 pid:4567 tgid:4567 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:e02b9da4 r9:e02b9dac r8:00000002 r7:60000013 r6:82cd9e0c r5:86a0a4c0 r4:86a0a4c0 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a0a4c0 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e02b9e28 r4:86a30e40 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302ae05 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a30e40 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a0a4c0 r8:01800000 r7:00000000 r6:8302ae00 r5:00001000 r4:7f077000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ea64f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86a61398 r4:86a61398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:ddde5000 r6:8302ae00 r5:86a61398 r4:86a34580 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:ddde5000 r9:86a345b0 r8:86a0a4c0 r7:82a03d80 r6:ddde5020 r5:ddde5000 r4:86a34580 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e0225e88 r8:86a34500 r7:86a34580 r6:80277df8 r5:86a0a4c0 r4:86a35980 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe02b9fb0 to 0xe02b9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a35980 INFO: task kworker/1:56:4567 is blocked on a mutex likely owned by task kworker/0:1025:9261. task:kworker/0:1025 state:R running task stack:0 pid:9261 tgid:9261 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:87850c40 r8:80200c04 r7:ed8ddd7c r6:ffffffff r5:87850c40 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xed8ddd48 to 0xed8ddd90) dd40: e37a9000 e4383000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f05b000 e4383000 00000000 00000001 82a0b498 ed8dddbc e4383000 ed8ddd98 dd80: 802306b0 80239788 80000113 ffffffff r5:80000113 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:ed8ddde0 r8:00000000 r7:ffffffff r6:00000008 r5:ed8dde28 r4:ed8ddde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:877c9600 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:87850c40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f05b000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ed917000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:878b5398 r4:878b5398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:878b5398 r4:877c7880 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:877c78b0 r8:87850c40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:877c7880 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:ed8fde88 r8:877c6280 r7:877c7880 r6:80277df8 r5:87850c40 r4:877baac0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xed8ddfb0 to 0xed8ddff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:877baac0 INFO: task kworker/0:42:4572 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:42 state:D stack:0 pid:4572 tgid:4572 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:e43a9da4 r9:e43a9dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a06e40 r4:86a06e40 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a06e40 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e43a9e28 r4:86a29f80 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a29f80 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a06e40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f06f000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e43ef000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:867fbf98 r4:867fbf98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:867fbf98 r4:869ca600 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:869ca630 r8:86a06e40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:869ca600 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfd0de88 r8:86a34100 r7:869ca600 r6:80277df8 r5:86a06e40 r4:86a36840 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe43a9fb0 to 0xe43a9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a36840 INFO: task kworker/0:42:4572 is blocked on a mutex likely owned by task kworker/0:1025:9261. task:kworker/0:1025 state:R running task stack:0 pid:9261 tgid:9261 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:87850c40 r8:80200c04 r7:ed8ddd7c r6:ffffffff r5:87850c40 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xed8ddd48 to 0xed8ddd90) dd40: e42ea000 e4383000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f05b000 e4383000 00000000 00000001 82a0b498 ed8dddbc e4383000 ed8ddd98 dd80: 802306b0 80239788 80000113 ffffffff r5:80000113 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:ed8ddde0 r8:00000000 r7:ffffffff r6:00000008 r5:ed8dde28 r4:ed8ddde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:877c9600 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:87850c40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f05b000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ed917000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:878b5398 r4:878b5398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:878b5398 r4:877c7880 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:877c78b0 r8:87850c40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:877c7880 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:ed8fde88 r8:877c6280 r7:877c7880 r6:80277df8 r5:87850c40 r4:877baac0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xed8ddfb0 to 0xed8ddff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:877baac0 INFO: task kworker/0:43:4573 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:43 state:D stack:0 pid:4573 tgid:4573 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:e026dda4 r9:e026ddac r8:00000002 r7:60000113 r6:82cd9e0c r5:83fd8000 r4:83fd8000 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:83fd8000 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e026de28 r4:86a35240 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a35240 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:83fd8000 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f073000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e844d000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:867fbb98 r4:867fbb98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:867fbb98 r4:869c9600 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:869c9630 r8:83fd8000 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:869c9600 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e43a9e88 r8:869c9580 r7:869c9600 r6:80277df8 r5:83fd8000 r4:86a35680 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe026dfb0 to 0xe026dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a35680 INFO: task kworker/0:43:4573 is blocked on a mutex likely owned by task kworker/0:1025:9261. task:kworker/0:1025 state:R running task stack:0 pid:9261 tgid:9261 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:87850c40 r8:80200c04 r7:ed8ddd7c r6:ffffffff r5:87850c40 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xed8ddd48 to 0xed8ddd90) dd40: e42ea000 e4383000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f05b000 e4383000 00000000 00000001 82a0b498 ed8dddbc e4383000 ed8ddd98 dd80: 802306b0 80239788 80000113 ffffffff r5:80000113 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:ed8ddde0 r8:00000000 r7:ffffffff r6:00000008 r5:ed8dde28 r4:ed8ddde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:877c9600 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:87850c40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f05b000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ed917000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:878b5398 r4:878b5398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:878b5398 r4:877c7880 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:877c78b0 r8:87850c40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:877c7880 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:ed8fde88 r8:877c6280 r7:877c7880 r6:80277df8 r5:87850c40 r4:877baac0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xed8ddfb0 to 0xed8ddff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:877baac0 INFO: task kworker/1:58:4576 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:58 state:D stack:0 pid:4576 tgid:4576 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:e0331da4 r9:e0331dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a09880 r4:86a09880 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a09880 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e0331e28 r4:86a35080 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302ae05 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a35080 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a09880 r8:01800000 r7:00000000 r6:8302ae00 r5:00001000 r4:7f071000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e843d000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86a61798 r4:86a61798 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:ddde5000 r6:8302ae00 r5:86a61798 r4:86a34400 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:86a34430 r8:86a09880 r7:82a03d80 r6:ddde5020 r5:ddde5000 r4:86a34400 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e02b9e88 r8:86a34000 r7:86a34400 r6:80277df8 r5:86a09880 r4:86a355c0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe0331fb0 to 0xe0331ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a355c0 INFO: task kworker/1:58:4576 is blocked on a mutex likely owned by task kworker/1:54:4559. task:kworker/1:54 state:R running task stack:0 pid:4559 tgid:4559 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:849a6200 r8:80200c04 r7:e0225d7c r6:ffffffff r5:849a6200 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xe0225d48 to 0xe0225d90) 5d40: e002f000 ed9a1000 00000000 80239770 82cd91a0 82cd9de4 5d60: dfc51000 ed9a1000 00000000 00000001 82a0b498 e0225dbc ed9a1000 e0225d98 5d80: 802306b0 80239788 80000113 ffffffff r5:80000113 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:e0225de0 r8:00000000 r7:ffffffff r6:00000008 r5:e0225e28 r4:e0225de0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302ae05 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a35340 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:849a6200 r8:01800000 r7:00000000 r6:8302ae00 r5:00001000 r4:7f06d000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e43e3000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86a61b98 r4:86a61b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:ddde5000 r6:8302ae00 r5:86a61b98 r4:869ca280 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:ddde5000 r9:869ca2b0 r8:849a6200 r7:82a03d80 r6:ddde5020 r5:ddde5000 r4:869ca280 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e0201e88 r8:869ca200 r7:869ca280 r6:80277df8 r5:849a6200 r4:869c5380 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe0225fb0 to 0xe0225ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869c5380 INFO: task kworker/0:44:4580 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:44 state:D stack:0 pid:4580 tgid:4580 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:e8419da4 r9:e8419dac r8:00000002 r7:60000013 r6:82cd9e0c r5:84e44980 r4:84e44980 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:84e44980 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e8419e28 r4:86a2e0c0 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a2e0c0 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:84e44980 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f075000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ea647000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:867fb798 r4:867fb798 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:867fb798 r4:869c9300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:869c9330 r8:84e44980 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:869c9300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfd0de88 r8:869c9680 r7:869c9300 r6:80277df8 r5:84e44980 r4:86a1e600 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe8419fb0 to 0xe8419ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a1e600 INFO: task kworker/0:44:4580 is blocked on a mutex likely owned by task kworker/1:54:4559. task:kworker/1:54 state:R running task stack:0 pid:4559 tgid:4559 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:849a6200 r8:80200c04 r7:e0225d7c r6:ffffffff r5:849a6200 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xe0225d48 to 0xe0225d90) 5d40: e002f000 ed9a1000 00000000 80239770 82cd91a0 82cd9de4 5d60: dfc51000 ed9a1000 00000000 00000001 82a0b498 e0225dbc ed9a1000 e0225d98 5d80: 802306b0 80239788 80000113 ffffffff r5:80000113 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:e0225de0 r8:00000000 r7:ffffffff r6:00000008 r5:e0225e28 r4:e0225de0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302ae05 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a35340 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:849a6200 r8:01800000 r7:00000000 r6:8302ae00 r5:00001000 r4:7f06d000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e43e3000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86a61b98 r4:86a61b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:ddde5000 r6:8302ae00 r5:86a61b98 r4:869ca280 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:ddde5000 r9:869ca2b0 r8:849a6200 r7:82a03d80 r6:ddde5020 r5:ddde5000 r4:869ca280 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e0201e88 r8:869ca200 r7:869ca280 r6:80277df8 r5:849a6200 r4:869c5380 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe0225fb0 to 0xe0225ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869c5380 INFO: task kworker/0:45:4583 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:45 state:D stack:0 pid:4583 tgid:4583 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:ea641da4 r9:ea641dac r8:00000002 r7:60000013 r6:82cd9e0c r5:84e455c0 r4:84e455c0 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:84e455c0 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:ea641e28 r4:86a36540 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a36540 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:84e455c0 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f079000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ea67b000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:867fb398 r4:867fb398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:867fb398 r4:869c9380 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:869c93b0 r8:84e455c0 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:869c9380 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfd0de88 r8:86a34600 r7:869c9380 r6:80277df8 r5:84e455c0 r4:86a36600 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xea641fb0 to 0xea641ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a36600 INFO: task kworker/0:45:4583 is blocked on a mutex likely owned by task kworker/1:54:4559. task:kworker/1:54 state:R running task stack:0 pid:4559 tgid:4559 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:849a6200 r8:80200c04 r7:e0225d7c r6:ffffffff r5:849a6200 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xe0225d48 to 0xe0225d90) 5d40: e002f000 ed9a1000 00000000 80239770 82cd91a0 82cd9de4 5d60: dfc51000 ed9a1000 00000000 00000001 82a0b498 e0225dbc ed9a1000 e0225d98 5d80: 802306b0 80239788 80000113 ffffffff r5:80000113 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:e0225de0 r8:00000000 r7:ffffffff r6:00000008 r5:e0225e28 r4:e0225de0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302ae05 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a35340 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:849a6200 r8:01800000 r7:00000000 r6:8302ae00 r5:00001000 r4:7f06d000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e43e3000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86a61b98 r4:86a61b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:ddde5000 r6:8302ae00 r5:86a61b98 r4:869ca280 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:ddde5000 r9:869ca2b0 r8:849a6200 r7:82a03d80 r6:ddde5020 r5:ddde5000 r4:869ca280 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e0201e88 r8:869ca200 r7:869ca280 r6:80277df8 r5:849a6200 r4:869c5380 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe0225fb0 to 0xe0225ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869c5380 INFO: task kworker/0:46:4586 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:46 state:D stack:0 pid:4586 tgid:4586 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:ea695da4 r9:ea695dac r8:00000002 r7:60000013 r6:82cd9e0c r5:86a06200 r4:86a06200 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a06200 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:ea695e28 r4:86a36400 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a36400 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a06200 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f07b000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ea6af000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:867faf98 r4:867faf98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:867faf98 r4:869c9280 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:869c92b0 r8:86a06200 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:869c9280 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfd0de88 r8:86a32e80 r7:869c9280 r6:80277df8 r5:86a06200 r4:86a366c0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xea695fb0 to 0xea695ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a366c0 INFO: task kworker/0:46:4586 is blocked on a mutex likely owned by task kworker/1:54:4559. task:kworker/1:54 state:R running task stack:0 pid:4559 tgid:4559 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:849a6200 r8:80200c04 r7:e0225d7c r6:ffffffff r5:849a6200 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xe0225d48 to 0xe0225d90) 5d40: e002f000 ed9a1000 00000000 80239770 82cd91a0 82cd9de4 5d60: dfc51000 ed9a1000 00000000 00000001 82a0b498 e0225dbc ed9a1000 e0225d98 5d80: 802306b0 80239788 80000113 ffffffff r5:80000113 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:e0225de0 r8:00000000 r7:ffffffff r6:00000008 r5:e0225e28 r4:e0225de0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302ae05 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a35340 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:849a6200 r8:01800000 r7:00000000 r6:8302ae00 r5:00001000 r4:7f06d000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e43e3000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86a61b98 r4:86a61b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:ddde5000 r6:8302ae00 r5:86a61b98 r4:869ca280 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:ddde5000 r9:869ca2b0 r8:849a6200 r7:82a03d80 r6:ddde5020 r5:ddde5000 r4:869ca280 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e0201e88 r8:869ca200 r7:869ca280 r6:80277df8 r5:849a6200 r4:869c5380 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe0225fb0 to 0xe0225ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869c5380 INFO: task kworker/0:47:4589 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:47 state:D stack:0 pid:4589 tgid:4589 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:ea6c9da4 r9:ea6c9dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a03100 r4:86a03100 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a03100 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:ea6c9e28 r4:86a36200 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a36200 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a03100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f08b000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ea6bd000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:8692df98 r4:8692df98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:8692df98 r4:869c9200 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:869c9230 r8:86a03100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:869c9200 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfd0de88 r8:86a32980 r7:869c9200 r6:80277df8 r5:86a03100 r4:86a36580 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xea6c9fb0 to 0xea6c9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a36580 INFO: task kworker/0:47:4589 is blocked on a mutex likely owned by task kworker/1:54:4559. task:kworker/1:54 state:R running task stack:0 pid:4559 tgid:4559 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:849a6200 r8:80200c04 r7:e0225d7c r6:ffffffff r5:849a6200 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xe0225d48 to 0xe0225d90) 5d40: e002f000 ed9a1000 00000000 80239770 82cd91a0 82cd9de4 5d60: dfc51000 ed9a1000 00000000 00000001 82a0b498 e0225dbc ed9a1000 e0225d98 5d80: 802306b0 80239788 80000113 ffffffff r5:80000113 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:e0225de0 r8:00000000 r7:ffffffff r6:00000008 r5:e0225e28 r4:e0225de0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302ae05 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a35340 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:849a6200 r8:01800000 r7:00000000 r6:8302ae00 r5:00001000 r4:7f06d000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e43e3000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86a61b98 r4:86a61b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:ddde5000 r6:8302ae00 r5:86a61b98 r4:869ca280 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:ddde5000 r9:869ca2b0 r8:849a6200 r7:82a03d80 r6:ddde5020 r5:ddde5000 r4:869ca280 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e0201e88 r8:869ca200 r7:869ca280 r6:80277df8 r5:849a6200 r4:869c5380 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe0225fb0 to 0xe0225ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869c5380 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:60000193 r6:60000193 r5:82336570 r4:00000000 [<80201a74>] (show_stack) from [<8021ec68>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120) [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r7:00000000 r6:00000113 r5:00000000 r4:00000001 [<8021ec7c>] (dump_stack) from [<81b5aefc>] (nmi_cpu_backtrace+0x150/0x170 lib/nmi_backtrace.c:122) [<81b5adac>] (nmi_cpu_backtrace) from [<81b5b050>] (nmi_trigger_cpumask_backtrace+0x134/0x208 lib/nmi_backtrace.c:65) r7:82a0b150 r6:83320c40 r5:82a1c7b8 r4:ffffffff [<81b5af1c>] (nmi_trigger_cpumask_backtrace) from [<802300d4>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:82a0b2f0 r8:00000009 r7:82a1ce80 r6:82ccce2c r5:00007743 r4:00000048 [<802300bc>] (arch_trigger_cpumask_backtrace) from [<81b62b8c>] (trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]) [<802300bc>] (arch_trigger_cpumask_backtrace) from [<81b62b8c>] (__sys_info lib/sys_info.c:157 [inline]) [<802300bc>] (arch_trigger_cpumask_backtrace) from [<81b62b8c>] (sys_info+0x68/0xa8 lib/sys_info.c:165) [<81b62b24>] (sys_info) from [<80390a60>] (check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]) [<81b62b24>] (sys_info) from [<80390a60>] (watchdog+0x3a0/0x848 kernel/hung_task.c:561) r5:00007743 r4:0000000a [<803906c0>] (watchdog) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df819e60 r8:831d5600 r7:00000000 r6:803906c0 r5:83320c40 r4:833dd080 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8d5fb0 to 0xdf8d5ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:833dd080 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 2825 Comm: pr/ttyAMA-1 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline] PC is at _raw_spin_unlock_irqrestore+0x28/0x54 kernel/locking/spinlock.c:198 LR is at spin_unlock_irqrestore include/linux/spinlock.h:408 [inline] LR is at __uart_port_unlock_irqrestore include/linux/serial_core.h:618 [inline] LR is at pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2720 pc : [<81b7c1f4>] lr : [<80b0d95c>] psr: 60000113 sp : eb155ec8 ip : eb155ed8 fp : eb155ed4 r10: 82b5e31c r9 : 00000001 r8 : 00000000 r7 : 00000117 r6 : 82b5e280 r5 : 00000000 r4 : 00000001 r3 : 00000877 r2 : 00000000 r1 : 60000113 r0 : 84920c40 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 8794f580 DAC: 00000000 Call trace: [<81b7c1cc>] (_raw_spin_unlock_irqrestore) from [<80b0d95c>] (spin_unlock_irqrestore include/linux/spinlock.h:408 [inline]) [<81b7c1cc>] (_raw_spin_unlock_irqrestore) from [<80b0d95c>] (__uart_port_unlock_irqrestore include/linux/serial_core.h:618 [inline]) [<81b7c1cc>] (_raw_spin_unlock_irqrestore) from [<80b0d95c>] (pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2720) [<80b0d93c>] (pl011_console_device_unlock) from [<802ed2c8>] (nbcon_emit_one+0x88/0x100 kernel/printk/nbcon.c:1165) [<802ed240>] (nbcon_emit_one) from [<802ed548>] (nbcon_kthread_func+0x208/0x2ec kernel/printk/nbcon.c:1271) r6:82cc92ec r5:82b5e280 r4:83989880 [<802ed340>] (nbcon_kthread_func) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eaf11b38 r8:84813580 r7:82b5e280 r6:802ed340 r5:83989880 r4:838c2100 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeb155fb0 to 0xeb155ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:838c2100 final repro crashed as (corrupted=false): INFO: task kworker/0:33:4522 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:33 state:D stack:0 pid:4522 tgid:4522 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfd0dda4 r9:dfd0ddac r8:00000002 r7:60000013 r6:82cd9e0c r5:849a3d40 r4:849a3d40 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:849a3d40 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfd0de28 r4:86a2df80 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a2df80 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:849a3d40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f00f000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:df8dd000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:867fab98 r4:867fab98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:867fab98 r4:869cf080 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:869cf0b0 r8:849a3d40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:869cf080 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfbfde88 r8:869cf200 r7:869cf080 r6:80277df8 r5:849a3d40 r4:868f7e00 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfd0dfb0 to 0xdfd0dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:868f7e00 INFO: task kworker/0:33:4522 is blocked on a mutex likely owned by task kworker/0:1025:9261. task:kworker/0:1025 state:R running task stack:0 pid:9261 tgid:9261 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:87850c40 r8:80200c04 r7:ed8ddd7c r6:ffffffff r5:87850c40 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xed8ddd48 to 0xed8ddd90) dd40: e37a9000 e4383000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f05b000 e4383000 00000000 00000001 82a0b498 ed8dddbc e4383000 ed8ddd98 dd80: 802306b0 80239788 80000113 ffffffff r5:80000113 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:ed8ddde0 r8:00000000 r7:ffffffff r6:00000008 r5:ed8dde28 r4:ed8ddde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:877c9600 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:87850c40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f05b000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ed917000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:878b5398 r4:878b5398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:878b5398 r4:877c7880 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:877c78b0 r8:87850c40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:877c7880 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:ed8fde88 r8:877c6280 r7:877c7880 r6:80277df8 r5:87850c40 r4:877baac0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xed8ddfb0 to 0xed8ddff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:877baac0 INFO: task kworker/1:56:4567 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:56 state:D stack:0 pid:4567 tgid:4567 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:e02b9da4 r9:e02b9dac r8:00000002 r7:60000013 r6:82cd9e0c r5:86a0a4c0 r4:86a0a4c0 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a0a4c0 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e02b9e28 r4:86a30e40 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302ae05 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a30e40 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a0a4c0 r8:01800000 r7:00000000 r6:8302ae00 r5:00001000 r4:7f077000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ea64f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86a61398 r4:86a61398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:ddde5000 r6:8302ae00 r5:86a61398 r4:86a34580 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:ddde5000 r9:86a345b0 r8:86a0a4c0 r7:82a03d80 r6:ddde5020 r5:ddde5000 r4:86a34580 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e0225e88 r8:86a34500 r7:86a34580 r6:80277df8 r5:86a0a4c0 r4:86a35980 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe02b9fb0 to 0xe02b9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a35980 INFO: task kworker/1:56:4567 is blocked on a mutex likely owned by task kworker/0:1025:9261. task:kworker/0:1025 state:R running task stack:0 pid:9261 tgid:9261 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:87850c40 r8:80200c04 r7:ed8ddd7c r6:ffffffff r5:87850c40 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xed8ddd48 to 0xed8ddd90) dd40: e37a9000 e4383000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f05b000 e4383000 00000000 00000001 82a0b498 ed8dddbc e4383000 ed8ddd98 dd80: 802306b0 80239788 80000113 ffffffff r5:80000113 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:ed8ddde0 r8:00000000 r7:ffffffff r6:00000008 r5:ed8dde28 r4:ed8ddde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:877c9600 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:87850c40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f05b000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ed917000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:878b5398 r4:878b5398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:878b5398 r4:877c7880 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:877c78b0 r8:87850c40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:877c7880 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:ed8fde88 r8:877c6280 r7:877c7880 r6:80277df8 r5:87850c40 r4:877baac0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xed8ddfb0 to 0xed8ddff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:877baac0 INFO: task kworker/0:42:4572 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:42 state:D stack:0 pid:4572 tgid:4572 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:e43a9da4 r9:e43a9dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a06e40 r4:86a06e40 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a06e40 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e43a9e28 r4:86a29f80 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a29f80 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a06e40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f06f000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e43ef000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:867fbf98 r4:867fbf98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:867fbf98 r4:869ca600 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:869ca630 r8:86a06e40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:869ca600 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfd0de88 r8:86a34100 r7:869ca600 r6:80277df8 r5:86a06e40 r4:86a36840 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe43a9fb0 to 0xe43a9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a36840 INFO: task kworker/0:42:4572 is blocked on a mutex likely owned by task kworker/0:1025:9261. task:kworker/0:1025 state:R running task stack:0 pid:9261 tgid:9261 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:87850c40 r8:80200c04 r7:ed8ddd7c r6:ffffffff r5:87850c40 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xed8ddd48 to 0xed8ddd90) dd40: e42ea000 e4383000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f05b000 e4383000 00000000 00000001 82a0b498 ed8dddbc e4383000 ed8ddd98 dd80: 802306b0 80239788 80000113 ffffffff r5:80000113 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:ed8ddde0 r8:00000000 r7:ffffffff r6:00000008 r5:ed8dde28 r4:ed8ddde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:877c9600 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:87850c40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f05b000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ed917000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:878b5398 r4:878b5398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:878b5398 r4:877c7880 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:877c78b0 r8:87850c40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:877c7880 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:ed8fde88 r8:877c6280 r7:877c7880 r6:80277df8 r5:87850c40 r4:877baac0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xed8ddfb0 to 0xed8ddff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:877baac0 INFO: task kworker/0:43:4573 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:43 state:D stack:0 pid:4573 tgid:4573 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:e026dda4 r9:e026ddac r8:00000002 r7:60000113 r6:82cd9e0c r5:83fd8000 r4:83fd8000 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:83fd8000 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e026de28 r4:86a35240 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a35240 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:83fd8000 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f073000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e844d000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:867fbb98 r4:867fbb98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:867fbb98 r4:869c9600 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:869c9630 r8:83fd8000 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:869c9600 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e43a9e88 r8:869c9580 r7:869c9600 r6:80277df8 r5:83fd8000 r4:86a35680 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe026dfb0 to 0xe026dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a35680 INFO: task kworker/0:43:4573 is blocked on a mutex likely owned by task kworker/0:1025:9261. task:kworker/0:1025 state:R running task stack:0 pid:9261 tgid:9261 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:87850c40 r8:80200c04 r7:ed8ddd7c r6:ffffffff r5:87850c40 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xed8ddd48 to 0xed8ddd90) dd40: e42ea000 e4383000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f05b000 e4383000 00000000 00000001 82a0b498 ed8dddbc e4383000 ed8ddd98 dd80: 802306b0 80239788 80000113 ffffffff r5:80000113 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:ed8ddde0 r8:00000000 r7:ffffffff r6:00000008 r5:ed8dde28 r4:ed8ddde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:877c9600 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:87850c40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f05b000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ed917000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:878b5398 r4:878b5398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:878b5398 r4:877c7880 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:877c78b0 r8:87850c40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:877c7880 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:ed8fde88 r8:877c6280 r7:877c7880 r6:80277df8 r5:87850c40 r4:877baac0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xed8ddfb0 to 0xed8ddff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:877baac0 INFO: task kworker/1:58:4576 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:58 state:D stack:0 pid:4576 tgid:4576 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:e0331da4 r9:e0331dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a09880 r4:86a09880 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a09880 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e0331e28 r4:86a35080 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302ae05 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a35080 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a09880 r8:01800000 r7:00000000 r6:8302ae00 r5:00001000 r4:7f071000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e843d000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86a61798 r4:86a61798 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:ddde5000 r6:8302ae00 r5:86a61798 r4:86a34400 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:86a34430 r8:86a09880 r7:82a03d80 r6:ddde5020 r5:ddde5000 r4:86a34400 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e02b9e88 r8:86a34000 r7:86a34400 r6:80277df8 r5:86a09880 r4:86a355c0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe0331fb0 to 0xe0331ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a355c0 INFO: task kworker/1:58:4576 is blocked on a mutex likely owned by task kworker/1:54:4559. task:kworker/1:54 state:R running task stack:0 pid:4559 tgid:4559 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:849a6200 r8:80200c04 r7:e0225d7c r6:ffffffff r5:849a6200 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xe0225d48 to 0xe0225d90) 5d40: e002f000 ed9a1000 00000000 80239770 82cd91a0 82cd9de4 5d60: dfc51000 ed9a1000 00000000 00000001 82a0b498 e0225dbc ed9a1000 e0225d98 5d80: 802306b0 80239788 80000113 ffffffff r5:80000113 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:e0225de0 r8:00000000 r7:ffffffff r6:00000008 r5:e0225e28 r4:e0225de0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302ae05 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a35340 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:849a6200 r8:01800000 r7:00000000 r6:8302ae00 r5:00001000 r4:7f06d000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e43e3000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86a61b98 r4:86a61b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:ddde5000 r6:8302ae00 r5:86a61b98 r4:869ca280 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:ddde5000 r9:869ca2b0 r8:849a6200 r7:82a03d80 r6:ddde5020 r5:ddde5000 r4:869ca280 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e0201e88 r8:869ca200 r7:869ca280 r6:80277df8 r5:849a6200 r4:869c5380 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe0225fb0 to 0xe0225ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869c5380 INFO: task kworker/0:44:4580 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:44 state:D stack:0 pid:4580 tgid:4580 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:e8419da4 r9:e8419dac r8:00000002 r7:60000013 r6:82cd9e0c r5:84e44980 r4:84e44980 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:84e44980 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e8419e28 r4:86a2e0c0 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a2e0c0 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:84e44980 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f075000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ea647000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:867fb798 r4:867fb798 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:867fb798 r4:869c9300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:869c9330 r8:84e44980 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:869c9300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfd0de88 r8:869c9680 r7:869c9300 r6:80277df8 r5:84e44980 r4:86a1e600 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe8419fb0 to 0xe8419ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a1e600 INFO: task kworker/0:44:4580 is blocked on a mutex likely owned by task kworker/1:54:4559. task:kworker/1:54 state:R running task stack:0 pid:4559 tgid:4559 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:849a6200 r8:80200c04 r7:e0225d7c r6:ffffffff r5:849a6200 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xe0225d48 to 0xe0225d90) 5d40: e002f000 ed9a1000 00000000 80239770 82cd91a0 82cd9de4 5d60: dfc51000 ed9a1000 00000000 00000001 82a0b498 e0225dbc ed9a1000 e0225d98 5d80: 802306b0 80239788 80000113 ffffffff r5:80000113 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:e0225de0 r8:00000000 r7:ffffffff r6:00000008 r5:e0225e28 r4:e0225de0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302ae05 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a35340 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:849a6200 r8:01800000 r7:00000000 r6:8302ae00 r5:00001000 r4:7f06d000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e43e3000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86a61b98 r4:86a61b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:ddde5000 r6:8302ae00 r5:86a61b98 r4:869ca280 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:ddde5000 r9:869ca2b0 r8:849a6200 r7:82a03d80 r6:ddde5020 r5:ddde5000 r4:869ca280 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e0201e88 r8:869ca200 r7:869ca280 r6:80277df8 r5:849a6200 r4:869c5380 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe0225fb0 to 0xe0225ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869c5380 INFO: task kworker/0:45:4583 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:45 state:D stack:0 pid:4583 tgid:4583 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:ea641da4 r9:ea641dac r8:00000002 r7:60000013 r6:82cd9e0c r5:84e455c0 r4:84e455c0 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:84e455c0 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:ea641e28 r4:86a36540 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a36540 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:84e455c0 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f079000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ea67b000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:867fb398 r4:867fb398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:867fb398 r4:869c9380 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:869c93b0 r8:84e455c0 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:869c9380 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfd0de88 r8:86a34600 r7:869c9380 r6:80277df8 r5:84e455c0 r4:86a36600 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xea641fb0 to 0xea641ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a36600 INFO: task kworker/0:45:4583 is blocked on a mutex likely owned by task kworker/1:54:4559. task:kworker/1:54 state:R running task stack:0 pid:4559 tgid:4559 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:849a6200 r8:80200c04 r7:e0225d7c r6:ffffffff r5:849a6200 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xe0225d48 to 0xe0225d90) 5d40: e002f000 ed9a1000 00000000 80239770 82cd91a0 82cd9de4 5d60: dfc51000 ed9a1000 00000000 00000001 82a0b498 e0225dbc ed9a1000 e0225d98 5d80: 802306b0 80239788 80000113 ffffffff r5:80000113 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:e0225de0 r8:00000000 r7:ffffffff r6:00000008 r5:e0225e28 r4:e0225de0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302ae05 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a35340 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:849a6200 r8:01800000 r7:00000000 r6:8302ae00 r5:00001000 r4:7f06d000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e43e3000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86a61b98 r4:86a61b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:ddde5000 r6:8302ae00 r5:86a61b98 r4:869ca280 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:ddde5000 r9:869ca2b0 r8:849a6200 r7:82a03d80 r6:ddde5020 r5:ddde5000 r4:869ca280 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e0201e88 r8:869ca200 r7:869ca280 r6:80277df8 r5:849a6200 r4:869c5380 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe0225fb0 to 0xe0225ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869c5380 INFO: task kworker/0:46:4586 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:46 state:D stack:0 pid:4586 tgid:4586 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:ea695da4 r9:ea695dac r8:00000002 r7:60000013 r6:82cd9e0c r5:86a06200 r4:86a06200 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a06200 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:ea695e28 r4:86a36400 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a36400 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a06200 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f07b000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ea6af000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:867faf98 r4:867faf98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:867faf98 r4:869c9280 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:869c92b0 r8:86a06200 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:869c9280 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfd0de88 r8:86a32e80 r7:869c9280 r6:80277df8 r5:86a06200 r4:86a366c0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xea695fb0 to 0xea695ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a366c0 INFO: task kworker/0:46:4586 is blocked on a mutex likely owned by task kworker/1:54:4559. task:kworker/1:54 state:R running task stack:0 pid:4559 tgid:4559 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:849a6200 r8:80200c04 r7:e0225d7c r6:ffffffff r5:849a6200 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xe0225d48 to 0xe0225d90) 5d40: e002f000 ed9a1000 00000000 80239770 82cd91a0 82cd9de4 5d60: dfc51000 ed9a1000 00000000 00000001 82a0b498 e0225dbc ed9a1000 e0225d98 5d80: 802306b0 80239788 80000113 ffffffff r5:80000113 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:e0225de0 r8:00000000 r7:ffffffff r6:00000008 r5:e0225e28 r4:e0225de0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302ae05 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a35340 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:849a6200 r8:01800000 r7:00000000 r6:8302ae00 r5:00001000 r4:7f06d000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e43e3000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86a61b98 r4:86a61b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:ddde5000 r6:8302ae00 r5:86a61b98 r4:869ca280 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:ddde5000 r9:869ca2b0 r8:849a6200 r7:82a03d80 r6:ddde5020 r5:ddde5000 r4:869ca280 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e0201e88 r8:869ca200 r7:869ca280 r6:80277df8 r5:849a6200 r4:869c5380 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe0225fb0 to 0xe0225ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869c5380 INFO: task kworker/0:47:4589 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:47 state:D stack:0 pid:4589 tgid:4589 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:ea6c9da4 r9:ea6c9dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a03100 r4:86a03100 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a03100 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:ea6c9e28 r4:86a36200 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a36200 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a03100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f08b000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ea6bd000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:8692df98 r4:8692df98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:8692df98 r4:869c9200 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:869c9230 r8:86a03100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:869c9200 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfd0de88 r8:86a32980 r7:869c9200 r6:80277df8 r5:86a03100 r4:86a36580 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xea6c9fb0 to 0xea6c9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a36580 INFO: task kworker/0:47:4589 is blocked on a mutex likely owned by task kworker/1:54:4559. task:kworker/1:54 state:R running task stack:0 pid:4559 tgid:4559 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:849a6200 r8:80200c04 r7:e0225d7c r6:ffffffff r5:849a6200 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xe0225d48 to 0xe0225d90) 5d40: e002f000 ed9a1000 00000000 80239770 82cd91a0 82cd9de4 5d60: dfc51000 ed9a1000 00000000 00000001 82a0b498 e0225dbc ed9a1000 e0225d98 5d80: 802306b0 80239788 80000113 ffffffff r5:80000113 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:e0225de0 r8:00000000 r7:ffffffff r6:00000008 r5:e0225e28 r4:e0225de0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302ae05 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a35340 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:849a6200 r8:01800000 r7:00000000 r6:8302ae00 r5:00001000 r4:7f06d000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e43e3000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86a61b98 r4:86a61b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:ddde5000 r6:8302ae00 r5:86a61b98 r4:869ca280 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:ddde5000 r9:869ca2b0 r8:849a6200 r7:82a03d80 r6:ddde5020 r5:ddde5000 r4:869ca280 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e0201e88 r8:869ca200 r7:869ca280 r6:80277df8 r5:849a6200 r4:869c5380 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe0225fb0 to 0xe0225ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869c5380 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:60000193 r6:60000193 r5:82336570 r4:00000000 [<80201a74>] (show_stack) from [<8021ec68>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120) [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r7:00000000 r6:00000113 r5:00000000 r4:00000001 [<8021ec7c>] (dump_stack) from [<81b5aefc>] (nmi_cpu_backtrace+0x150/0x170 lib/nmi_backtrace.c:122) [<81b5adac>] (nmi_cpu_backtrace) from [<81b5b050>] (nmi_trigger_cpumask_backtrace+0x134/0x208 lib/nmi_backtrace.c:65) r7:82a0b150 r6:83320c40 r5:82a1c7b8 r4:ffffffff [<81b5af1c>] (nmi_trigger_cpumask_backtrace) from [<802300d4>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:82a0b2f0 r8:00000009 r7:82a1ce80 r6:82ccce2c r5:00007743 r4:00000048 [<802300bc>] (arch_trigger_cpumask_backtrace) from [<81b62b8c>] (trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]) [<802300bc>] (arch_trigger_cpumask_backtrace) from [<81b62b8c>] (__sys_info lib/sys_info.c:157 [inline]) [<802300bc>] (arch_trigger_cpumask_backtrace) from [<81b62b8c>] (sys_info+0x68/0xa8 lib/sys_info.c:165) [<81b62b24>] (sys_info) from [<80390a60>] (check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]) [<81b62b24>] (sys_info) from [<80390a60>] (watchdog+0x3a0/0x848 kernel/hung_task.c:561) r5:00007743 r4:0000000a [<803906c0>] (watchdog) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df819e60 r8:831d5600 r7:00000000 r6:803906c0 r5:83320c40 r4:833dd080 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8d5fb0 to 0xdf8d5ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:833dd080 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 2825 Comm: pr/ttyAMA-1 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline] PC is at _raw_spin_unlock_irqrestore+0x28/0x54 kernel/locking/spinlock.c:198 LR is at spin_unlock_irqrestore include/linux/spinlock.h:408 [inline] LR is at __uart_port_unlock_irqrestore include/linux/serial_core.h:618 [inline] LR is at pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2720 pc : [<81b7c1f4>] lr : [<80b0d95c>] psr: 60000113 sp : eb155ec8 ip : eb155ed8 fp : eb155ed4 r10: 82b5e31c r9 : 00000001 r8 : 00000000 r7 : 00000117 r6 : 82b5e280 r5 : 00000000 r4 : 00000001 r3 : 00000877 r2 : 00000000 r1 : 60000113 r0 : 84920c40 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 8794f580 DAC: 00000000 Call trace: [<81b7c1cc>] (_raw_spin_unlock_irqrestore) from [<80b0d95c>] (spin_unlock_irqrestore include/linux/spinlock.h:408 [inline]) [<81b7c1cc>] (_raw_spin_unlock_irqrestore) from [<80b0d95c>] (__uart_port_unlock_irqrestore include/linux/serial_core.h:618 [inline]) [<81b7c1cc>] (_raw_spin_unlock_irqrestore) from [<80b0d95c>] (pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2720) [<80b0d93c>] (pl011_console_device_unlock) from [<802ed2c8>] (nbcon_emit_one+0x88/0x100 kernel/printk/nbcon.c:1165) [<802ed240>] (nbcon_emit_one) from [<802ed548>] (nbcon_kthread_func+0x208/0x2ec kernel/printk/nbcon.c:1271) r6:82cc92ec r5:82b5e280 r4:83989880 [<802ed340>] (nbcon_kthread_func) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eaf11b38 r8:84813580 r7:82b5e280 r6:802ed340 r5:83989880 r4:838c2100 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeb155fb0 to 0xeb155ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:838c2100