Extracting prog: 20m6.826388662s Minimizing prog: 3h34m41.748360537s Simplifying prog options: 29m17.33613051s Extracting C: 2m0.742684707s Simplifying C: 0s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 45s testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$BPF_GET_PROG_INFO detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) program did not crash program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 5m0s testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$BPF_GET_PROG_INFO detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 16m0s testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$BPF_GET_PROG_INFO detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) program crashed: INFO: task hung in _vm_unmap_aliases single: successfully extracted reproducer found reproducer with 4 syscalls minimizing guilty program testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) program crashed: INFO: task hung in _vm_unmap_aliases testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD detailed listing: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-bpf$PROG_LOAD detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD detailed listing: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD detailed listing: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD detailed listing: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program did not crash extracting C reproducer testing compiled C program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD program did not crash simplifying guilty program options testing program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) program crashed: INFO: task hung in _vm_unmap_aliases extracting C reproducer testing compiled C program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD program did not crash testing program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) program did not crash testing program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) program crashed: INFO: task hung in _vm_unmap_aliases validation run: crashed=true testing program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) program crashed: INFO: task hung in _vm_unmap_aliases validation run: crashed=true testing program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) program crashed: INFO: task hung in _vm_unmap_aliases validation run: crashed=true reproducing took 5h1m26.524040902s repro crashed as (corrupted=false): INFO: task kworker/0:13:4416 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:13 state:D stack:0 pid:4416 tgid:4416 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:ea961da4 r9:ea961dac r8:00000002 r7:60000113 r6:82cd9e0c r5:848e9880 r4:848e9880 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:848e9880 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:ea961e28 r4:86570640 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86570640 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:848e9880 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f055000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfa83000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866b6798 r4:866b6798 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866b6798 r4:865f1880 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:865f18b0 r8:848e9880 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:865f1880 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df83de88 r8:865f1900 r7:865f1880 r6:80277df8 r5:848e9880 r4:865db780 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xea961fb0 to 0xea961ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:865db780 INFO: task kworker/0:13:4416 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 896f9000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 INFO: task kworker/0:296:5007 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:296 state:D stack:0 pid:5007 tgid:5007 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:eac29da4 r9:eac29dac r8:00000002 r7:60000013 r6:82cd9e0c r5:86a13d40 r4:86a13d40 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a13d40 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:eac29e28 r4:869e0f40 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:869e0f40 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13d40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f085000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eacc3000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:869e4398 r4:869e4398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:869e4398 r4:867e6480 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:867e64b0 r8:86a13d40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6480 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac1de88 r8:867e6400 r7:867e6480 r6:80277df8 r5:86a13d40 r4:8680cb40 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac29fb0 to 0xeac29ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:8680cb40 INFO: task kworker/0:296:5007 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 89cec000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 INFO: task kworker/0:298:5011 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:298 state:D stack:0 pid:5011 tgid:5011 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:eaccdda4 r9:eaccddac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a124c0 r4:86a124c0 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a124c0 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:eaccde28 r4:86a45d00 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a45d00 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a124c0 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f087000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eb10d000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866a5798 r4:866a5798 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866a5798 r4:867e6100 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:867e6130 r8:86a124c0 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6100 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6180 r7:867e6100 r6:80277df8 r5:86a124c0 r4:8653be00 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeaccdfb0 to 0xeaccdff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:8653be00 INFO: task kworker/0:298:5011 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 89cec000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 INFO: task kworker/0:299:5012 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:299 state:D stack:0 pid:5012 tgid:5012 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:eb0d9da4 r9:eb0d9dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a11880 r4:86a11880 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a11880 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:eb0d9e28 r4:869e0ac0 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:869e0ac0 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a11880 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f057000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfaa3000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866b5f98 r4:866b5f98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866b5f98 r4:867e6000 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:867e6030 r8:86a11880 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6000 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eaccde88 r8:86913f80 r7:867e6000 r6:80277df8 r5:86a11880 r4:868410c0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeb0d9fb0 to 0xeb0d9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:868410c0 INFO: task kworker/0:299:5012 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8a0e5000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 INFO: task kworker/0:300:5019 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:300 state:D stack:0 pid:5019 tgid:5019 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:eab65da4 r9:eab65dac r8:00000002 r7:60000013 r6:82cd9e0c r5:86709880 r4:86709880 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86709880 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:eab65e28 r4:86a45b40 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a45b40 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86709880 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f013000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:df9b9000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866e4b98 r4:866e4b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866e4b98 r4:85f79a80 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:85f79ab0 r8:86709880 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:85f79a80 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eb0d9e88 r8:85f79f00 r7:85f79a80 r6:80277df8 r5:86709880 r4:86a2ec40 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeab65fb0 to 0xeab65ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a2ec40 INFO: task kworker/0:300:5019 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8a4d3000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 INFO: task kworker/0:301:5021 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:301 state:D stack:0 pid:5021 tgid:5021 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfb71da4 r9:dfb71dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a10c40 r4:86a10c40 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a10c40 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfb71e28 r4:869e0e00 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:869e0e00 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a10c40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f053000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:df9dd000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866b6b98 r4:866b6b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866b6b98 r4:86913d80 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:86913db0 r8:86a10c40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86913d80 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eb0d9e88 r8:86913d00 r7:86913d80 r6:80277df8 r5:86a10c40 r4:86664240 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfb71fb0 to 0xdfb71ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86664240 INFO: task kworker/0:301:5021 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8a4d3000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 INFO: task kworker/0:302:5022 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:302 state:D stack:0 pid:5022 tgid:5022 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfb99da4 r9:dfb99dac r8:00000002 r7:60000013 r6:82cd9e0c r5:8670c980 r4:8670c980 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:8670c980 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfb99e28 r4:869e03c0 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:869e03c0 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:8670c980 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f05f000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfcbb000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866b4f98 r4:866b4f98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866b4f98 r4:85f79b00 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:85f79b30 r8:8670c980 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:85f79b00 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eb0d9e88 r8:86913c00 r7:85f79b00 r6:80277df8 r5:8670c980 r4:869046c0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfb99fb0 to 0xdfb99ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869046c0 INFO: task kworker/0:302:5022 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8a4d3000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 INFO: task kworker/0:303:5023 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:303 state:D stack:0 pid:5023 tgid:5023 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfbd1da4 r9:dfbd1dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a10000 r4:86a10000 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a10000 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfbd1e28 r4:86a45a00 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a45a00 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a10000 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f059000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfb59000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:8674f398 r4:8674f398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:8674f398 r4:86913a00 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:86913a30 r8:86a10000 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86913a00 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfb99e88 r8:86913980 r7:86913a00 r6:80277df8 r5:86a10000 r4:869046c0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfbd1fb0 to 0xdfbd1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869046c0 INFO: task kworker/0:303:5023 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8a5fb000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 INFO: task kworker/0:304:5024 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:304 state:D stack:0 pid:5024 tgid:5024 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfbd9da4 r9:dfbd9dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a0ee40 r4:86a0ee40 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a0ee40 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfbd9e28 r4:869e0840 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:869e0840 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a0ee40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f05b000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfb6a000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866b5798 r4:866b5798 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866b5798 r4:86913880 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:869138b0 r8:86a0ee40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86913880 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfb99e88 r8:86913800 r7:86913880 r6:80277df8 r5:86a0ee40 r4:86a45c80 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfbd9fb0 to 0xdfbd9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a45c80 INFO: task kworker/0:304:5024 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8ab63000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 INFO: task kworker/0:305:5026 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:305 state:D stack:0 pid:5026 tgid:5026 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:eacc1da4 r9:eacc1dac r8:00000002 r7:60000013 r6:82cd9e0c r5:86a0e200 r4:86a0e200 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a0e200 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:eacc1e28 r4:869e0640 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:869e0640 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a0e200 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f05d000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfc15000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866b5398 r4:866b5398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866b5398 r4:86913a80 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:86913ab0 r8:86a0e200 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86913a80 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfb99e88 r8:86913b00 r7:86913a80 r6:80277df8 r5:86a0e200 r4:86651e80 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeacc1fb0 to 0xeacc1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86651e80 INFO: task kworker/0:305:5026 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8ab63000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/0:306:5029 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:306 state:D stack:0 pid:5029 tgid:5029 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:df9c9da4 r9:df9c9dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86708000 r4:86708000 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86708000 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:df9c9e28 r4:8683bec0 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:8683bec0 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86708000 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f063000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfd27000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866b5b98 r4:866b5b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866b5b98 r4:867e6680 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:867e66b0 r8:86708000 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6680 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfb99e88 r8:86913600 r7:867e6680 r6:80277df8 r5:86708000 r4:869e07c0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf9c9fb0 to 0xdf9c9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e07c0 INFO: task kworker/0:306:5029 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8adcc000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/0:307:5030 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:307 state:D stack:0 pid:5030 tgid:5030 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfd1dda4 r9:dfd1ddac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a0d5c0 r4:86a0d5c0 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a0d5c0 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfd1de28 r4:869e0140 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:869e0140 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a0d5c0 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f061000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfcc9000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866a5b98 r4:866a5b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866a5b98 r4:86913500 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:86913530 r8:86a0d5c0 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86913500 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df9c9e88 r8:86913480 r7:86913500 r6:80277df8 r5:86a0d5c0 r4:86904ec0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfd1dfb0 to 0xdfd1dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86904ec0 INFO: task kworker/0:307:5030 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8b21f000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/0:308:5031 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:308 state:D stack:0 pid:5031 tgid:5031 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfd71da4 r9:dfd71dac r8:00000002 r7:60000113 r6:82cd9e0c r5:8670b100 r4:8670b100 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:8670b100 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfd71e28 r4:869e0940 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:869e0940 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:8670b100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f067000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfde7000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86971798 r4:86971798 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86971798 r4:86913e80 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:86913eb0 r8:8670b100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86913e80 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfd1de88 r8:86913380 r7:86913e80 r6:80277df8 r5:8670b100 r4:86651cc0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfd71fb0 to 0xdfd71ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86651cc0 INFO: task kworker/0:308:5031 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8b276000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/0:309:5033 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:309 state:D stack:0 pid:5033 tgid:5033 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfdb1da4 r9:dfdb1dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a0c980 r4:86a0c980 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a0c980 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfdb1e28 r4:8683be00 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:8683be00 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a0c980 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f065000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfddf000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866b4b98 r4:866b4b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866b4b98 r4:86913280 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:869132b0 r8:86a0c980 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86913280 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfd71e88 r8:86913200 r7:86913280 r6:80277df8 r5:86a0c980 r4:8683bf40 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfdb1fb0 to 0xdfdb1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:8683bf40 INFO: task kworker/0:309:5033 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8b276000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/0:310:5036 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:310 state:D stack:0 pid:5036 tgid:5036 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfca1da4 r9:dfca1dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a0bd40 r4:86a0bd40 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a0bd40 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfca1e28 r4:8683bd00 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:8683bd00 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a0bd40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f069000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e01b7000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86973f98 r4:86973f98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86973f98 r4:86913100 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:86913130 r8:86a0bd40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86913100 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfd71e88 r8:86913080 r7:86913100 r6:80277df8 r5:86a0bd40 r4:86665ac0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfca1fb0 to 0xdfca1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86665ac0 INFO: task kworker/0:310:5036 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8b66d000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/0:311:5037 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:311 state:D stack:0 pid:5037 tgid:5037 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfe1dda4 r9:dfe1ddac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a0b100 r4:86a0b100 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a0b100 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfe1de28 r4:86904ec0 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86904ec0 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a0b100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f06b000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ea71d000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86971b98 r4:86971b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86971b98 r4:86912f80 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:86912fb0 r8:86a0b100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86912f80 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfca1e88 r8:86912f00 r7:86912f80 r6:80277df8 r5:86a0b100 r4:86a5d440 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfe1dfb0 to 0xdfe1dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a5d440 INFO: task kworker/0:311:5037 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8baeb000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/0:313:5041 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:313 state:D stack:0 pid:5041 tgid:5041 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:ea8e9da4 r9:ea8e9dac r8:00000002 r7:60000013 r6:82cd9e0c r5:86a08c40 r4:86a08c40 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a08c40 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:ea8e9e28 r4:8683b9c0 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:8683b9c0 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a08c40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f06f000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ea96d000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:860f1f98 r4:860f1f98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:860f1f98 r4:86912c00 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:86912c30 r8:86a08c40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86912c00 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfc9de88 r8:86912b80 r7:86912c00 r6:80277df8 r5:86a08c40 r4:86a456c0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xea8e9fb0 to 0xea8e9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a456c0 INFO: task kworker/0:313:5041 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8baeb000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/0:314:5044 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:314 state:D stack:0 pid:5044 tgid:5044 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:ea979da4 r9:ea979dac r8:00000002 r7:60000013 r6:82cd9e0c r5:86708c40 r4:86708c40 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86708c40 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:ea979e28 r4:8683bac0 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:8683bac0 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86708c40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f06d000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ea945000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86973b98 r4:86973b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86973b98 r4:85f79d80 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:85f79db0 r8:86708c40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:85f79d80 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfc9de88 r8:86912a00 r7:85f79d80 r6:80277df8 r5:86708c40 r4:868acd00 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xea979fb0 to 0xea979ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:868acd00 INFO: task kworker/0:314:5044 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8baeb000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/0:315:5046 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:315 state:D stack:0 pid:5046 tgid:5046 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:eaa25da4 r9:eaa25dac r8:00000002 r7:60000013 r6:82cd9e0c r5:86a0a4c0 r4:86a0a4c0 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a0a4c0 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:eaa25e28 r4:86a2a540 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a2a540 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a0a4c0 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f071000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ea9eb000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866b4398 r4:866b4398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866b4398 r4:86912e00 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:86912e30 r8:86a0a4c0 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86912e00 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfc9de88 r8:86912980 r7:86912e00 r6:80277df8 r5:86a0a4c0 r4:868acd00 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeaa25fb0 to 0xeaa25ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:868acd00 INFO: task kworker/0:315:5046 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8c060000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:600f0093 r6:600f0093 r5:82336570 r4:00000000 [<80201a74>] (show_stack) from [<8021ec68>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120) [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r7:00000000 r6:000f0013 r5:00000000 r4:00000001 [<8021ec7c>] (dump_stack) from [<81b5aefc>] (nmi_cpu_backtrace+0x150/0x170 lib/nmi_backtrace.c:122) [<81b5adac>] (nmi_cpu_backtrace) from [<81b5b050>] (nmi_trigger_cpumask_backtrace+0x134/0x208 lib/nmi_backtrace.c:65) r7:82a0b150 r6:83320c40 r5:82a1c7b8 r4:ffffffff [<81b5af1c>] (nmi_trigger_cpumask_backtrace) from [<802300d4>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:82a0b2f0 r8:00000013 r7:82a1ce80 r6:82ccce2c r5:00007b4e r4:00000048 [<802300bc>] (arch_trigger_cpumask_backtrace) from [<81b62b8c>] (trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]) [<802300bc>] (arch_trigger_cpumask_backtrace) from [<81b62b8c>] (__sys_info lib/sys_info.c:157 [inline]) [<802300bc>] (arch_trigger_cpumask_backtrace) from [<81b62b8c>] (sys_info+0x68/0xa8 lib/sys_info.c:165) [<81b62b24>] (sys_info) from [<80390a60>] (check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]) [<81b62b24>] (sys_info) from [<80390a60>] (watchdog+0x3a0/0x848 kernel/hung_task.c:561) r5:00007b4e r4:0000000a [<803906c0>] (watchdog) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df819e60 r8:831d5600 r7:00000000 r6:803906c0 r5:83320c40 r4:833dd0c0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8d5fb0 to 0xdf8d5ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:833dd0c0 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 2825 Comm: pr/ttyAMA-1 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline] PC is at _raw_spin_unlock_irqrestore+0x28/0x54 kernel/locking/spinlock.c:198 LR is at spin_unlock_irqrestore include/linux/spinlock.h:408 [inline] LR is at __uart_port_unlock_irqrestore include/linux/serial_core.h:618 [inline] LR is at pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2720 pc : [<81b7c1f4>] lr : [<80b0d95c>] psr: 60000013 sp : eb445ec8 ip : eb445ed8 fp : eb445ed4 r10: 82b5e31c r9 : 00000001 r8 : 00000000 r7 : 00000117 r6 : 82b5e280 r5 : 00000000 r4 : 00000001 r3 : 0000091b r2 : 00000000 r1 : 60000013 r0 : 841c9440 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 85c9e540 DAC: 00000000 Call trace: [<81b7c1cc>] (_raw_spin_unlock_irqrestore) from [<80b0d95c>] (spin_unlock_irqrestore include/linux/spinlock.h:408 [inline]) [<81b7c1cc>] (_raw_spin_unlock_irqrestore) from [<80b0d95c>] (__uart_port_unlock_irqrestore include/linux/serial_core.h:618 [inline]) [<81b7c1cc>] (_raw_spin_unlock_irqrestore) from [<80b0d95c>] (pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2720) [<80b0d93c>] (pl011_console_device_unlock) from [<802ed2c8>] (nbcon_emit_one+0x88/0x100 kernel/printk/nbcon.c:1165) [<802ed240>] (nbcon_emit_one) from [<802ed548>] (nbcon_kthread_func+0x208/0x2ec kernel/printk/nbcon.c:1271) r6:82cc92ec r5:82b5e280 r4:84091880 [<802ed340>] (nbcon_kthread_func) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df849b38 r8:84637980 r7:82b5e280 r6:802ed340 r5:84091880 r4:8462a940 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeb445fb0 to 0xeb445ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:8462a940 final repro crashed as (corrupted=false): INFO: task kworker/0:13:4416 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:13 state:D stack:0 pid:4416 tgid:4416 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:ea961da4 r9:ea961dac r8:00000002 r7:60000113 r6:82cd9e0c r5:848e9880 r4:848e9880 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:848e9880 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:ea961e28 r4:86570640 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86570640 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:848e9880 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f055000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfa83000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866b6798 r4:866b6798 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866b6798 r4:865f1880 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:865f18b0 r8:848e9880 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:865f1880 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df83de88 r8:865f1900 r7:865f1880 r6:80277df8 r5:848e9880 r4:865db780 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xea961fb0 to 0xea961ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:865db780 INFO: task kworker/0:13:4416 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 896f9000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 INFO: task kworker/0:296:5007 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:296 state:D stack:0 pid:5007 tgid:5007 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:eac29da4 r9:eac29dac r8:00000002 r7:60000013 r6:82cd9e0c r5:86a13d40 r4:86a13d40 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a13d40 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:eac29e28 r4:869e0f40 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:869e0f40 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13d40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f085000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eacc3000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:869e4398 r4:869e4398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:869e4398 r4:867e6480 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:867e64b0 r8:86a13d40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6480 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac1de88 r8:867e6400 r7:867e6480 r6:80277df8 r5:86a13d40 r4:8680cb40 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac29fb0 to 0xeac29ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:8680cb40 INFO: task kworker/0:296:5007 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 89cec000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 INFO: task kworker/0:298:5011 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:298 state:D stack:0 pid:5011 tgid:5011 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:eaccdda4 r9:eaccddac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a124c0 r4:86a124c0 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a124c0 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:eaccde28 r4:86a45d00 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a45d00 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a124c0 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f087000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eb10d000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866a5798 r4:866a5798 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866a5798 r4:867e6100 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:867e6130 r8:86a124c0 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6100 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6180 r7:867e6100 r6:80277df8 r5:86a124c0 r4:8653be00 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeaccdfb0 to 0xeaccdff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:8653be00 INFO: task kworker/0:298:5011 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 89cec000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 INFO: task kworker/0:299:5012 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:299 state:D stack:0 pid:5012 tgid:5012 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:eb0d9da4 r9:eb0d9dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a11880 r4:86a11880 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a11880 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:eb0d9e28 r4:869e0ac0 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:869e0ac0 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a11880 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f057000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfaa3000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866b5f98 r4:866b5f98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866b5f98 r4:867e6000 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:867e6030 r8:86a11880 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6000 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eaccde88 r8:86913f80 r7:867e6000 r6:80277df8 r5:86a11880 r4:868410c0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeb0d9fb0 to 0xeb0d9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:868410c0 INFO: task kworker/0:299:5012 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8a0e5000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 INFO: task kworker/0:300:5019 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:300 state:D stack:0 pid:5019 tgid:5019 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:eab65da4 r9:eab65dac r8:00000002 r7:60000013 r6:82cd9e0c r5:86709880 r4:86709880 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86709880 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:eab65e28 r4:86a45b40 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a45b40 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86709880 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f013000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:df9b9000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866e4b98 r4:866e4b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866e4b98 r4:85f79a80 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:85f79ab0 r8:86709880 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:85f79a80 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eb0d9e88 r8:85f79f00 r7:85f79a80 r6:80277df8 r5:86709880 r4:86a2ec40 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeab65fb0 to 0xeab65ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a2ec40 INFO: task kworker/0:300:5019 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8a4d3000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 INFO: task kworker/0:301:5021 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:301 state:D stack:0 pid:5021 tgid:5021 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfb71da4 r9:dfb71dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a10c40 r4:86a10c40 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a10c40 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfb71e28 r4:869e0e00 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:869e0e00 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a10c40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f053000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:df9dd000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866b6b98 r4:866b6b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866b6b98 r4:86913d80 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:86913db0 r8:86a10c40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86913d80 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eb0d9e88 r8:86913d00 r7:86913d80 r6:80277df8 r5:86a10c40 r4:86664240 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfb71fb0 to 0xdfb71ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86664240 INFO: task kworker/0:301:5021 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8a4d3000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 INFO: task kworker/0:302:5022 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:302 state:D stack:0 pid:5022 tgid:5022 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfb99da4 r9:dfb99dac r8:00000002 r7:60000013 r6:82cd9e0c r5:8670c980 r4:8670c980 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:8670c980 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfb99e28 r4:869e03c0 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:869e03c0 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:8670c980 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f05f000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfcbb000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866b4f98 r4:866b4f98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866b4f98 r4:85f79b00 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:85f79b30 r8:8670c980 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:85f79b00 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eb0d9e88 r8:86913c00 r7:85f79b00 r6:80277df8 r5:8670c980 r4:869046c0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfb99fb0 to 0xdfb99ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869046c0 INFO: task kworker/0:302:5022 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8a4d3000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 INFO: task kworker/0:303:5023 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:303 state:D stack:0 pid:5023 tgid:5023 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfbd1da4 r9:dfbd1dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a10000 r4:86a10000 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a10000 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfbd1e28 r4:86a45a00 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a45a00 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a10000 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f059000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfb59000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:8674f398 r4:8674f398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:8674f398 r4:86913a00 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:86913a30 r8:86a10000 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86913a00 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfb99e88 r8:86913980 r7:86913a00 r6:80277df8 r5:86a10000 r4:869046c0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfbd1fb0 to 0xdfbd1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869046c0 INFO: task kworker/0:303:5023 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8a5fb000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 INFO: task kworker/0:304:5024 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:304 state:D stack:0 pid:5024 tgid:5024 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfbd9da4 r9:dfbd9dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a0ee40 r4:86a0ee40 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a0ee40 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfbd9e28 r4:869e0840 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:869e0840 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a0ee40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f05b000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfb6a000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866b5798 r4:866b5798 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866b5798 r4:86913880 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:869138b0 r8:86a0ee40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86913880 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfb99e88 r8:86913800 r7:86913880 r6:80277df8 r5:86a0ee40 r4:86a45c80 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfbd9fb0 to 0xdfbd9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a45c80 INFO: task kworker/0:304:5024 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8ab63000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 INFO: task kworker/0:305:5026 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:305 state:D stack:0 pid:5026 tgid:5026 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:eacc1da4 r9:eacc1dac r8:00000002 r7:60000013 r6:82cd9e0c r5:86a0e200 r4:86a0e200 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a0e200 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:eacc1e28 r4:869e0640 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:869e0640 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a0e200 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f05d000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfc15000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866b5398 r4:866b5398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866b5398 r4:86913a80 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:86913ab0 r8:86a0e200 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86913a80 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfb99e88 r8:86913b00 r7:86913a80 r6:80277df8 r5:86a0e200 r4:86651e80 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeacc1fb0 to 0xeacc1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86651e80 INFO: task kworker/0:305:5026 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8ab63000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/0:306:5029 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:306 state:D stack:0 pid:5029 tgid:5029 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:df9c9da4 r9:df9c9dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86708000 r4:86708000 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86708000 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:df9c9e28 r4:8683bec0 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:8683bec0 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86708000 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f063000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfd27000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866b5b98 r4:866b5b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866b5b98 r4:867e6680 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:867e66b0 r8:86708000 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6680 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfb99e88 r8:86913600 r7:867e6680 r6:80277df8 r5:86708000 r4:869e07c0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf9c9fb0 to 0xdf9c9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e07c0 INFO: task kworker/0:306:5029 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8adcc000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/0:307:5030 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:307 state:D stack:0 pid:5030 tgid:5030 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfd1dda4 r9:dfd1ddac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a0d5c0 r4:86a0d5c0 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a0d5c0 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfd1de28 r4:869e0140 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:869e0140 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a0d5c0 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f061000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfcc9000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866a5b98 r4:866a5b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866a5b98 r4:86913500 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:86913530 r8:86a0d5c0 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86913500 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df9c9e88 r8:86913480 r7:86913500 r6:80277df8 r5:86a0d5c0 r4:86904ec0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfd1dfb0 to 0xdfd1dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86904ec0 INFO: task kworker/0:307:5030 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8b21f000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/0:308:5031 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:308 state:D stack:0 pid:5031 tgid:5031 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfd71da4 r9:dfd71dac r8:00000002 r7:60000113 r6:82cd9e0c r5:8670b100 r4:8670b100 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:8670b100 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfd71e28 r4:869e0940 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:869e0940 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:8670b100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f067000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfde7000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86971798 r4:86971798 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86971798 r4:86913e80 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:86913eb0 r8:8670b100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86913e80 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfd1de88 r8:86913380 r7:86913e80 r6:80277df8 r5:8670b100 r4:86651cc0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfd71fb0 to 0xdfd71ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86651cc0 INFO: task kworker/0:308:5031 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8b276000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/0:309:5033 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:309 state:D stack:0 pid:5033 tgid:5033 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfdb1da4 r9:dfdb1dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a0c980 r4:86a0c980 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a0c980 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfdb1e28 r4:8683be00 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:8683be00 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a0c980 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f065000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:dfddf000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866b4b98 r4:866b4b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866b4b98 r4:86913280 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:869132b0 r8:86a0c980 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86913280 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfd71e88 r8:86913200 r7:86913280 r6:80277df8 r5:86a0c980 r4:8683bf40 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfdb1fb0 to 0xdfdb1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:8683bf40 INFO: task kworker/0:309:5033 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8b276000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/0:310:5036 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:310 state:D stack:0 pid:5036 tgid:5036 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfca1da4 r9:dfca1dac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a0bd40 r4:86a0bd40 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a0bd40 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfca1e28 r4:8683bd00 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:8683bd00 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a0bd40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f069000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:e01b7000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86973f98 r4:86973f98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86973f98 r4:86913100 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:86913130 r8:86a0bd40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86913100 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfd71e88 r8:86913080 r7:86913100 r6:80277df8 r5:86a0bd40 r4:86665ac0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfca1fb0 to 0xdfca1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86665ac0 INFO: task kworker/0:310:5036 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8b66d000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/0:311:5037 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:311 state:D stack:0 pid:5037 tgid:5037 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:dfe1dda4 r9:dfe1ddac r8:00000002 r7:60000113 r6:82cd9e0c r5:86a0b100 r4:86a0b100 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a0b100 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfe1de28 r4:86904ec0 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86904ec0 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a0b100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f06b000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ea71d000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86971b98 r4:86971b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86971b98 r4:86912f80 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:86912fb0 r8:86a0b100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86912f80 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfca1e88 r8:86912f00 r7:86912f80 r6:80277df8 r5:86a0b100 r4:86a5d440 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfe1dfb0 to 0xdfe1dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a5d440 INFO: task kworker/0:311:5037 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8baeb000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/0:313:5041 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:313 state:D stack:0 pid:5041 tgid:5041 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:ea8e9da4 r9:ea8e9dac r8:00000002 r7:60000013 r6:82cd9e0c r5:86a08c40 r4:86a08c40 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a08c40 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:ea8e9e28 r4:8683b9c0 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:8683b9c0 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a08c40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f06f000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ea96d000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:860f1f98 r4:860f1f98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:860f1f98 r4:86912c00 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:86912c30 r8:86a08c40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86912c00 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfc9de88 r8:86912b80 r7:86912c00 r6:80277df8 r5:86a08c40 r4:86a456c0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xea8e9fb0 to 0xea8e9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:86a456c0 INFO: task kworker/0:313:5041 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8baeb000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/0:314:5044 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:314 state:D stack:0 pid:5044 tgid:5044 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:ea979da4 r9:ea979dac r8:00000002 r7:60000013 r6:82cd9e0c r5:86708c40 r4:86708c40 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86708c40 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:ea979e28 r4:8683bac0 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:8683bac0 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86708c40 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f06d000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ea945000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86973b98 r4:86973b98 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86973b98 r4:85f79d80 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:85f79db0 r8:86708c40 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:85f79d80 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfc9de88 r8:86912a00 r7:85f79d80 r6:80277df8 r5:86708c40 r4:868acd00 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xea979fb0 to 0xea979ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:868acd00 INFO: task kworker/0:314:5044 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8baeb000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task kworker/0:315:5046 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:315 state:D stack:0 pid:5046 tgid:5046 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b72d2c>] (__schedule_loop kernel/sched/core.c:7311 [inline]) [<81b71894>] (__schedule) from [<81b72d2c>] (schedule+0x2c/0xec kernel/sched/core.c:7326) r10:eaa25da4 r9:eaa25dac r8:00000002 r7:60000013 r6:82cd9e0c r5:86a0a4c0 r4:86a0a4c0 [<81b72d00>] (schedule) from [<81b72e70>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7383) r5:86a0a4c0 r4:82cd9e08 [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b72e58>] (schedule_preempt_disabled) from [<81b75fe8>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b75adc>] (__mutex_lock.constprop.0) from [<81b765f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:eaa25e28 r4:86a2a540 [<81b765e4>] (__mutex_lock_slowpath) from [<81b76638>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b765fc>] (mutex_lock) from [<8051fc48>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86a2a540 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a0a4c0 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f071000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:ea9eb000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:866b4398 r4:866b4398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:866b4398 r4:86912e00 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd1000 r9:86912e30 r8:86a0a4c0 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:86912e00 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfc9de88 r8:86912980 r7:86912e00 r6:80277df8 r5:86a0a4c0 r4:868acd00 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeaa25fb0 to 0xeaa25ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:868acd00 INFO: task kworker/0:315:5046 is blocked on a mutex likely owned by task kworker/0:297:5008. task:kworker/0:297 state:R running task stack:0 pid:5008 tgid:5008 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b71894>] (__schedule) from [<81b7311c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7556) r10:82a0b498 r9:86a13100 r8:80200c04 r7:eac4dd7c r6:ffffffff r5:86a13100 r4:00000000 [<81b730dc>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeac4dd48 to 0xeac4dd90) dd40: 8c060000 ec313000 00000000 80239770 82cd91a0 82cd9de4 dd60: 7f015000 ec313000 00000000 00000001 82a0b498 eac4ddbc ec313000 eac4dd98 dd80: 802306b0 80239788 80000013 ffffffff r5:80000013 r4:80239788 [<80230650>] (flush_tlb_kernel_range) from [<8051f9fc>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8051f770>] (__purge_vmap_area_lazy) from [<8051fdd4>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:eac4dde0 r8:00000000 r7:ffffffff r6:00000008 r5:eac4de28 r4:eac4dde0 [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<8051fbec>] (_vm_unmap_aliases) from [<805239d8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:86841300 [<805238c8>] (vfree) from [<8059a6e8>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86a13100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f083000 [<8059a6b8>] (execmem_free) from [<803dda98>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1125) r5:00001000 r4:eac9f000 [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_binary_free kernel/bpf/core.c:1171 [inline]) [<803dda88>] (bpf_jit_free_exec) from [<803ddf88>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1295) [<803ddf24>] (bpf_jit_free) from [<803df060>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3106) r5:86697398 r4:86697398 [<803def18>] (bpf_prog_free_deferred) from [<802772b8>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd1000 r6:8302b000 r5:86697398 r4:867e6300 [<802770f0>] (process_one_work) from [<80277f64>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:867e6330 r8:86a13100 r7:82a03d80 r6:dddd1020 r5:dddd1000 r4:867e6300 [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eac29e88 r8:867e6280 r7:867e6300 r6:80277df8 r5:86a13100 r4:869e1480 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeac4dfb0 to 0xeac4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:869e1480 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:600f0093 r6:600f0093 r5:82336570 r4:00000000 [<80201a74>] (show_stack) from [<8021ec68>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120) [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r7:00000000 r6:000f0013 r5:00000000 r4:00000001 [<8021ec7c>] (dump_stack) from [<81b5aefc>] (nmi_cpu_backtrace+0x150/0x170 lib/nmi_backtrace.c:122) [<81b5adac>] (nmi_cpu_backtrace) from [<81b5b050>] (nmi_trigger_cpumask_backtrace+0x134/0x208 lib/nmi_backtrace.c:65) r7:82a0b150 r6:83320c40 r5:82a1c7b8 r4:ffffffff [<81b5af1c>] (nmi_trigger_cpumask_backtrace) from [<802300d4>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:82a0b2f0 r8:00000013 r7:82a1ce80 r6:82ccce2c r5:00007b4e r4:00000048 [<802300bc>] (arch_trigger_cpumask_backtrace) from [<81b62b8c>] (trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]) [<802300bc>] (arch_trigger_cpumask_backtrace) from [<81b62b8c>] (__sys_info lib/sys_info.c:157 [inline]) [<802300bc>] (arch_trigger_cpumask_backtrace) from [<81b62b8c>] (sys_info+0x68/0xa8 lib/sys_info.c:165) [<81b62b24>] (sys_info) from [<80390a60>] (check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]) [<81b62b24>] (sys_info) from [<80390a60>] (watchdog+0x3a0/0x848 kernel/hung_task.c:561) r5:00007b4e r4:0000000a [<803906c0>] (watchdog) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df819e60 r8:831d5600 r7:00000000 r6:803906c0 r5:83320c40 r4:833dd0c0 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8d5fb0 to 0xdf8d5ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:833dd0c0 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 2825 Comm: pr/ttyAMA-1 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline] PC is at _raw_spin_unlock_irqrestore+0x28/0x54 kernel/locking/spinlock.c:198 LR is at spin_unlock_irqrestore include/linux/spinlock.h:408 [inline] LR is at __uart_port_unlock_irqrestore include/linux/serial_core.h:618 [inline] LR is at pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2720 pc : [<81b7c1f4>] lr : [<80b0d95c>] psr: 60000013 sp : eb445ec8 ip : eb445ed8 fp : eb445ed4 r10: 82b5e31c r9 : 00000001 r8 : 00000000 r7 : 00000117 r6 : 82b5e280 r5 : 00000000 r4 : 00000001 r3 : 0000091b r2 : 00000000 r1 : 60000013 r0 : 841c9440 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 85c9e540 DAC: 00000000 Call trace: [<81b7c1cc>] (_raw_spin_unlock_irqrestore) from [<80b0d95c>] (spin_unlock_irqrestore include/linux/spinlock.h:408 [inline]) [<81b7c1cc>] (_raw_spin_unlock_irqrestore) from [<80b0d95c>] (__uart_port_unlock_irqrestore include/linux/serial_core.h:618 [inline]) [<81b7c1cc>] (_raw_spin_unlock_irqrestore) from [<80b0d95c>] (pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2720) [<80b0d93c>] (pl011_console_device_unlock) from [<802ed2c8>] (nbcon_emit_one+0x88/0x100 kernel/printk/nbcon.c:1165) [<802ed240>] (nbcon_emit_one) from [<802ed548>] (nbcon_kthread_func+0x208/0x2ec kernel/printk/nbcon.c:1271) r6:82cc92ec r5:82b5e280 r4:84091880 [<802ed340>] (nbcon_kthread_func) from [<802827b4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df849b38 r8:84637980 r7:82b5e280 r6:802ed340 r5:84091880 r4:8462a940 [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeb445fb0 to 0xeb445ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:8462a940