syzbot

 sign-in | mailing list | source | docs
🐞 Open [993] ≡ Subsystems 🐞 Fixed [5244] 🐞 Invalid [12515] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

INFO: task hung in _vm_unmap_aliases (3)

Status: upstream: reported C repro on 2024/01/09 18:18
Subsystems: modules
[Documentation on labels]
Reported-by: syzbot+fe8f8efd070d727de971@syzkaller.appspotmail.com
First crash: 207d, last: 10d
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [modules?] INFO: task hung in _vm_unmap_aliases (3) 0 (1) 2024/01/09 18:18
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in _vm_unmap_aliases kernel 1 1346d 1346d 0/26 auto-closed as invalid on 2020/11/17 05:59
upstream INFO: task hung in _vm_unmap_aliases (2) modules 1 496d 496d 0/26 auto-obsoleted due to no activity on 2023/04/08 08:01
▶ ▼ Last patch testing requests (5)
Created Duration User Patch Repo Result
2024/04/16 20:03 14m retest repro upstream report log
2024/04/16 20:03 14m retest repro upstream report log
2024/04/16 20:03 14m retest repro upstream report log
2024/04/16 20:03 14m retest repro upstream report log
2024/04/16 20:03 14m retest repro upstream report log

Sample crash report:
INFO: task kworker/0:2:710 blocked for more than 450 seconds.
      Not tainted 6.9.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:2     state:D stack:0     pid:710   tgid:710   ppid:2      flags:0x00000000
Workqueue: events bpf_prog_free_deferred
Call trace: 
[<8189b700>] (__schedule) from [<8189c33c>] (__schedule_loop kernel/sched/core.c:6823 [inline])
[<8189b700>] (__schedule) from [<8189c33c>] (schedule+0x2c/0xfc kernel/sched/core.c:6838)
 r10:82c16005 r9:00000000 r8:82714be8 r7:00000002 r6:dff41d94 r5:835d3c00
 r4:835d3c00
[<8189c310>] (schedule) from [<8189c94c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6895)
 r5:835d3c00 r4:82714be4
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline])
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752)
[<8189ef44>] (__mutex_lock.constprop.0) from [<8189faf8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040)
 r10:82c16005 r9:dff41e20 r8:00000000 r7:ffffffff r6:00000000 r5:84b15280
 r4:00000000
[<8189fae4>] (__mutex_lock_slowpath) from [<8189fb38>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286)
[<8189fafc>] (mutex_lock) from [<8049c4e4>] (_vm_unmap_aliases+0x60/0x2e8 mm/vmalloc.c:2788)
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vm_reset_perms mm/vmalloc.c:3235 [inline])
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vfree+0x170/0x1e4 mm/vmalloc.c:3314)
 r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84b15280
 r4:00000000
[<804a01f8>] (vfree) from [<802ed9bc>] (module_memfree+0x30/0x50 kernel/module/main.c:1189)
 r9:835d3c00 r8:00000080 r7:00000000 r6:82c16000 r5:00001000 r4:7f06d000
[<802ed98c>] (module_memfree) from [<80391560>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1058)
 r5:00001000 r4:dfc51000
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_binary_free kernel/bpf/core.c:1104 [inline])
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1228)
[<803916b8>] (bpf_jit_free) from [<80392808>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2783)
 r5:84a59354 r4:84a59000
[<803926bc>] (bpf_prog_free_deferred) from [<8026660c>] (process_one_work+0x1b8/0x508 kernel/workqueue.c:3254)
 r7:dddd00c0 r6:82c16000 r5:84a59354 r4:82f57200
[<80266454>] (process_one_work) from [<80267330>] (process_scheduled_works kernel/workqueue.c:3335 [inline])
[<80266454>] (process_one_work) from [<80267330>] (worker_thread+0x1ec/0x418 kernel/workqueue.c:3416)
 r10:835d3c00 r9:82f5722c r8:61c88647 r7:dddd00e0 r6:82604d40 r5:dddd00c0
 r4:82f57200
[<80267144>] (worker_thread) from [<80270044>] (kthread+0x104/0x134 kernel/kthread.c:388)
 r10:00000000 r9:df839e90 r8:8386ec00 r7:82f57200 r6:80267144 r5:835d3c00
 r4:82f4ef40
[<8026ff40>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134)
Exception stack(0xdff41fb0 to 0xdff41ff8)
1fa0:                                     00000000 00000000 00000000 00000000
1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
1fe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026ff40 r4:82f4ef40
INFO: task kworker/0:3:1738 blocked for more than 450 seconds.
      Not tainted 6.9.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:3     state:D stack:0     pid:1738  tgid:1738  ppid:2      flags:0x00000000
Workqueue: events bpf_prog_free_deferred
Call trace: 
[<8189b700>] (__schedule) from [<8189c33c>] (__schedule_loop kernel/sched/core.c:6823 [inline])
[<8189b700>] (__schedule) from [<8189c33c>] (schedule+0x2c/0xfc kernel/sched/core.c:6838)
 r10:82c16005 r9:00000000 r8:82714be8 r7:00000002 r6:eb241d94 r5:8364ec00
 r4:8364ec00
[<8189c310>] (schedule) from [<8189c94c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6895)
 r5:8364ec00 r4:82714be4
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline])
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752)
[<8189ef44>] (__mutex_lock.constprop.0) from [<8189faf8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040)
 r10:82c16005 r9:eb241e20 r8:00000000 r7:ffffffff r6:00000000 r5:84addec0
 r4:00000000
[<8189fae4>] (__mutex_lock_slowpath) from [<8189fb38>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286)
[<8189fafc>] (mutex_lock) from [<8049c4e4>] (_vm_unmap_aliases+0x60/0x2e8 mm/vmalloc.c:2788)
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vm_reset_perms mm/vmalloc.c:3235 [inline])
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vfree+0x170/0x1e4 mm/vmalloc.c:3314)
 r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84addec0
 r4:00000000
[<804a01f8>] (vfree) from [<802ed9bc>] (module_memfree+0x30/0x50 kernel/module/main.c:1189)
 r9:8364ec00 r8:00000080 r7:00000000 r6:82c16000 r5:00001000 r4:7f04f000
[<802ed98c>] (module_memfree) from [<80391560>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1058)
 r5:00001000 r4:dfb29000
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_binary_free kernel/bpf/core.c:1104 [inline])
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1228)
[<803916b8>] (bpf_jit_free) from [<80392808>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2783)
 r5:845cb354 r4:845cb000
[<803926bc>] (bpf_prog_free_deferred) from [<8026660c>] (process_one_work+0x1b8/0x508 kernel/workqueue.c:3254)
 r7:dddd00c0 r6:82c16000 r5:845cb354 r4:83f6bc80
[<80266454>] (process_one_work) from [<80267330>] (process_scheduled_works kernel/workqueue.c:3335 [inline])
[<80266454>] (process_one_work) from [<80267330>] (worker_thread+0x1ec/0x418 kernel/workqueue.c:3416)
 r10:8364ec00 r9:83f6bcac r8:61c88647 r7:dddd00e0 r6:82604d40 r5:dddd00c0
 r4:83f6bc80
[<80267144>] (worker_thread) from [<80270044>] (kthread+0x104/0x134 kernel/kthread.c:388)
 r10:00000000 r9:df839e90 r8:83e3e0c0 r7:83f6bc80 r6:80267144 r5:8364ec00
 r4:83e3e600
[<8026ff40>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134)
Exception stack(0xeb241fb0 to 0xeb241ff8)
1fa0:                                     00000000 00000000 00000000 00000000
1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
1fe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026ff40 r4:83e3e600
INFO: task kworker/0:0:3008 blocked for more than 450 seconds.
      Not tainted 6.9.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:0     state:D stack:0     pid:3008  tgid:3008  ppid:2      flags:0x00000000
Workqueue: events bpf_prog_free_deferred
Call trace: 
[<8189b700>] (__schedule) from [<8189c33c>] (__schedule_loop kernel/sched/core.c:6823 [inline])
[<8189b700>] (__schedule) from [<8189c33c>] (schedule+0x2c/0xfc kernel/sched/core.c:6838)
 r10:82c16005 r9:00000000 r8:82714be8 r7:00000002 r6:df97dd94 r5:8367c800
 r4:8367c800
[<8189c310>] (schedule) from [<8189c94c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6895)
 r5:8367c800 r4:82714be4
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline])
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752)
[<8189ef44>] (__mutex_lock.constprop.0) from [<8189faf8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040)
 r10:82c16005 r9:df97de20 r8:00000000 r7:ffffffff r6:00000000 r5:84add580
 r4:00000000
[<8189fae4>] (__mutex_lock_slowpath) from [<8189fb38>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286)
[<8189fafc>] (mutex_lock) from [<8049c4e4>] (_vm_unmap_aliases+0x60/0x2e8 mm/vmalloc.c:2788)
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vm_reset_perms mm/vmalloc.c:3235 [inline])
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vfree+0x170/0x1e4 mm/vmalloc.c:3314)
 r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84add580
 r4:00000000
[<804a01f8>] (vfree) from [<802ed9bc>] (module_memfree+0x30/0x50 kernel/module/main.c:1189)
 r9:8367c800 r8:00000080 r7:00000000 r6:82c16000 r5:00001000 r4:7f041000
[<802ed98c>] (module_memfree) from [<80391560>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1058)
 r5:00001000 r4:dfa85000
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_binary_free kernel/bpf/core.c:1104 [inline])
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1228)
[<803916b8>] (bpf_jit_free) from [<80392808>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2783)
 r5:845c9b54 r4:845c9800
[<803926bc>] (bpf_prog_free_deferred) from [<8026660c>] (process_one_work+0x1b8/0x508 kernel/workqueue.c:3254)
 r7:dddd00c0 r6:82c16000 r5:845c9b54 r4:8421c480
[<80266454>] (process_one_work) from [<80267330>] (process_scheduled_works kernel/workqueue.c:3335 [inline])
[<80266454>] (process_one_work) from [<80267330>] (worker_thread+0x1ec/0x418 kernel/workqueue.c:3416)
 r10:8367c800 r9:8421c4ac r8:61c88647 r7:dddd00e0 r6:82604d40 r5:dddd00c0
 r4:8421c480
[<80267144>] (worker_thread) from [<80270044>] (kthread+0x104/0x134 kernel/kthread.c:388)
 r10:00000000 r9:eb241e90 r8:83a81540 r7:8421c480 r6:80267144 r5:8367c800
 r4:8463f440
[<8026ff40>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134)
Exception stack(0xdf97dfb0 to 0xdf97dff8)
dfa0:                                     00000000 00000000 00000000 00000000
dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
dfe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026ff40 r4:8463f440
INFO: task kworker/0:1:3009 blocked for more than 450 seconds.
      Not tainted 6.9.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:1     state:D stack:0     pid:3009  tgid:3009  ppid:2      flags:0x00000000
Workqueue: events bpf_prog_free_deferred
Call trace: 
[<8189b700>] (__schedule) from [<8189c33c>] (__schedule_loop kernel/sched/core.c:6823 [inline])
[<8189b700>] (__schedule) from [<8189c33c>] (schedule+0x2c/0xfc kernel/sched/core.c:6838)
 r10:82c16005 r9:00000000 r8:82714be8 r7:00000002 r6:df981d94 r5:83678000
 r4:83678000
[<8189c310>] (schedule) from [<8189c94c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6895)
 r5:83678000 r4:82714be4
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline])
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752)
[<8189ef44>] (__mutex_lock.constprop.0) from [<8189faf8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040)
 r10:82c16005 r9:df981e20 r8:00000000 r7:ffffffff r6:00000000 r5:84add040
 r4:00000000
[<8189fae4>] (__mutex_lock_slowpath) from [<8189fb38>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286)
[<8189fafc>] (mutex_lock) from [<8049c4e4>] (_vm_unmap_aliases+0x60/0x2e8 mm/vmalloc.c:2788)
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vm_reset_perms mm/vmalloc.c:3235 [inline])
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vfree+0x170/0x1e4 mm/vmalloc.c:3314)
 r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84add040
 r4:00000000
[<804a01f8>] (vfree) from [<802ed9bc>] (module_memfree+0x30/0x50 kernel/module/main.c:1189)
 r9:83678000 r8:00000080 r7:00000000 r6:82c16000 r5:00001000 r4:7f037000
[<802ed98c>] (module_memfree) from [<80391560>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1058)
 r5:00001000 r4:dfa31000
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_binary_free kernel/bpf/core.c:1104 [inline])
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1228)
[<803916b8>] (bpf_jit_free) from [<80392808>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2783)
 r5:845c8b54 r4:845c8800
[<803926bc>] (bpf_prog_free_deferred) from [<8026660c>] (process_one_work+0x1b8/0x508 kernel/workqueue.c:3254)
 r7:dddd00c0 r6:82c16000 r5:845c8b54 r4:8421c500
[<80266454>] (process_one_work) from [<80267330>] (process_scheduled_works kernel/workqueue.c:3335 [inline])
[<80266454>] (process_one_work) from [<80267330>] (worker_thread+0x1ec/0x418 kernel/workqueue.c:3416)
 r10:83678000 r9:8421c52c r8:61c88647 r7:dddd00e0 r6:82604d40 r5:dddd00c0
 r4:8421c500
[<80267144>] (worker_thread) from [<80270044>] (kthread+0x104/0x134 kernel/kthread.c:388)
 r10:00000000 r9:df97de90 r8:83ff8680 r7:8421c500 r6:80267144 r5:83678000
 r4:8463f800
[<8026ff40>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134)
Exception stack(0xdf981fb0 to 0xdf981ff8)
1fa0:                                     00000000 00000000 00000000 00000000
1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
1fe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026ff40 r4:8463f800
INFO: task kworker/0:4:3010 blocked for more than 450 seconds.
      Not tainted 6.9.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:4     state:D stack:0     pid:3010  tgid:3010  ppid:2      flags:0x00000000
Workqueue: events bpf_prog_free_deferred
Call trace: 
[<8189b700>] (__schedule) from [<8189c33c>] (__schedule_loop kernel/sched/core.c:6823 [inline])
[<8189b700>] (__schedule) from [<8189c33c>] (schedule+0x2c/0xfc kernel/sched/core.c:6838)
 r10:82c16005 r9:00000000 r8:82714be8 r7:00000002 r6:df995d94 r5:82ef8c00
 r4:82ef8c00
[<8189c310>] (schedule) from [<8189c94c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6895)
 r5:82ef8c00 r4:82714be4
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline])
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752)
[<8189ef44>] (__mutex_lock.constprop.0) from [<8189faf8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040)
 r10:82c16005 r9:df995e20 r8:00000000 r7:ffffffff r6:00000000 r5:845d8240
 r4:00000000
[<8189fae4>] (__mutex_lock_slowpath) from [<8189fb38>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286)
[<8189fafc>] (mutex_lock) from [<8049c4e4>] (_vm_unmap_aliases+0x60/0x2e8 mm/vmalloc.c:2788)
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vm_reset_perms mm/vmalloc.c:3235 [inline])
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vfree+0x170/0x1e4 mm/vmalloc.c:3314)
 r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:845d8240
 r4:00000000
[<804a01f8>] (vfree) from [<802ed9bc>] (module_memfree+0x30/0x50 kernel/module/main.c:1189)
 r9:82ef8c00 r8:00000080 r7:00000000 r6:82c16000 r5:00001000 r4:7f19d000
[<802ed98c>] (module_memfree) from [<80391560>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1058)
 r5:00001000 r4:eaeed000
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_binary_free kernel/bpf/core.c:1104 [inline])
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1228)
[<803916b8>] (bpf_jit_free) from [<80392808>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2783)
 r5:845cdf54 r4:845cdc00
[<803926bc>] (bpf_prog_free_deferred) from [<8026660c>] (process_one_work+0x1b8/0x508 kernel/workqueue.c:3254)
 r7:dddd00c0 r6:82c16000 r5:845cdf54 r4:8421c580
[<80266454>] (process_one_work) from [<80267330>] (process_scheduled_works kernel/workqueue.c:3335 [inline])
[<80266454>] (process_one_work) from [<80267330>] (worker_thread+0x1ec/0x418 kernel/workqueue.c:3416)
 r10:82ef8c00 r9:8421c5ac r8:61c88647 r7:dddd00e0 r6:82604d40 r5:dddd00c0
 r4:8421c580
[<80267144>] (worker_thread) from [<80270044>] (kthread+0x104/0x134 kernel/kthread.c:388)
 r10:00000000 r9:df981e90 r8:82cad680 r7:8421c580 r6:80267144 r5:82ef8c00
 r4:8463f800
[<8026ff40>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134)
Exception stack(0xdf995fb0 to 0xdf995ff8)
5fa0:                                     00000000 00000000 00000000 00000000
5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
5fe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026ff40 r4:8463f800
INFO: task kworker/0:5:3013 blocked for more than 450 seconds.
      Not tainted 6.9.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:5     state:D stack:0     pid:3013  tgid:3013  ppid:2      flags:0x00000000
Workqueue: events bpf_prog_free_deferred
Call trace: 
[<8189b700>] (__schedule) from [<8189c33c>] (__schedule_loop kernel/sched/core.c:6823 [inline])
[<8189b700>] (__schedule) from [<8189c33c>] (schedule+0x2c/0xfc kernel/sched/core.c:6838)
 r10:82c16005 r9:00000000 r8:82714be8 r7:00000002 r6:df9b1d94 r5:82e3c800
 r4:82e3c800
[<8189c310>] (schedule) from [<8189c94c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6895)
 r5:82e3c800 r4:82714be4
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline])
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752)
[<8189ef44>] (__mutex_lock.constprop.0) from [<8189faf8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040)
 r10:82c16005 r9:df9b1e20 r8:00000000 r7:ffffffff r6:00000000 r5:84ac8980
 r4:00000000
[<8189fae4>] (__mutex_lock_slowpath) from [<8189fb38>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286)
[<8189fafc>] (mutex_lock) from [<8049c4e4>] (_vm_unmap_aliases+0x60/0x2e8 mm/vmalloc.c:2788)
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vm_reset_perms mm/vmalloc.c:3235 [inline])
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vfree+0x170/0x1e4 mm/vmalloc.c:3314)
 r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84ac8980
 r4:00000000
[<804a01f8>] (vfree) from [<802ed9bc>] (module_memfree+0x30/0x50 kernel/module/main.c:1189)
 r9:82e3c800 r8:00000080 r7:00000000 r6:82c16000 r5:00001000 r4:7f143000
[<802ed98c>] (module_memfree) from [<80391560>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1058)
 r5:00001000 r4:eaab1000
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_binary_free kernel/bpf/core.c:1104 [inline])
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1228)
[<803916b8>] (bpf_jit_free) from [<80392808>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2783)
 r5:84a48754 r4:84a48400
[<803926bc>] (bpf_prog_free_deferred) from [<8026660c>] (process_one_work+0x1b8/0x508 kernel/workqueue.c:3254)
 r7:dddd00c0 r6:82c16000 r5:84a48754 r4:8421c600
[<80266454>] (process_one_work) from [<80267330>] (process_scheduled_works kernel/workqueue.c:3335 [inline])
[<80266454>] (process_one_work) from [<80267330>] (worker_thread+0x1ec/0x418 kernel/workqueue.c:3416)
 r10:82e3c800 r9:8421c62c r8:61c88647 r7:dddd00e0 r6:82604d40 r5:dddd00c0
 r4:8421c600
[<80267144>] (worker_thread) from [<80270044>] (kthread+0x104/0x134 kernel/kthread.c:388)
 r10:00000000 r9:df995e90 r8:8442d940 r7:8421c600 r6:80267144 r5:82e3c800
 r4:8463af80
[<8026ff40>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134)
Exception stack(0xdf9b1fb0 to 0xdf9b1ff8)
1fa0:                                     00000000 00000000 00000000 00000000
1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
1fe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026ff40 r4:8463af80
INFO: task kworker/0:6:3014 blocked for more than 450 seconds.
      Not tainted 6.9.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:6     state:D stack:0     pid:3014  tgid:3014  ppid:2      flags:0x00000000
Workqueue: events bpf_prog_free_deferred
Call trace: 
[<8189b700>] (__schedule) from [<8189c33c>] (__schedule_loop kernel/sched/core.c:6823 [inline])
[<8189b700>] (__schedule) from [<8189c33c>] (schedule+0x2c/0xfc kernel/sched/core.c:6838)
 r10:82c16005 r9:00000000 r8:82714be8 r7:00000002 r6:df9b5d94 r5:82efb000
 r4:82efb000
[<8189c310>] (schedule) from [<8189c94c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6895)
 r5:82efb000 r4:82714be4
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline])
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752)
[<8189ef44>] (__mutex_lock.constprop.0) from [<8189faf8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040)
 r10:82c16005 r9:df9b5e20 r8:00000000 r7:ffffffff r6:00000000 r5:84b5c7c0
 r4:00000000
[<8189fae4>] (__mutex_lock_slowpath) from [<8189fb38>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286)
[<8189fafc>] (mutex_lock) from [<8049c4e4>] (_vm_unmap_aliases+0x60/0x2e8 mm/vmalloc.c:2788)
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vm_reset_perms mm/vmalloc.c:3235 [inline])
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vfree+0x170/0x1e4 mm/vmalloc.c:3314)
 r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84b5c7c0
 r4:00000000
[<804a01f8>] (vfree) from [<802ed9bc>] (module_memfree+0x30/0x50 kernel/module/main.c:1189)
 r9:82efb000 r8:00000080 r7:00000000 r6:82c16000 r5:00001000 r4:7f191000
[<802ed98c>] (module_memfree) from [<80391560>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1058)
 r5:00001000 r4:eaeb5000
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_binary_free kernel/bpf/core.c:1104 [inline])
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1228)
[<803916b8>] (bpf_jit_free) from [<80392808>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2783)
 r5:845ccf54 r4:845ccc00
[<803926bc>] (bpf_prog_free_deferred) from [<8026660c>] (process_one_work+0x1b8/0x508 kernel/workqueue.c:3254)
 r7:dddd00c0 r6:82c16000 r5:845ccf54 r4:8421c680
[<80266454>] (process_one_work) from [<80267330>] (process_scheduled_works kernel/workqueue.c:3335 [inline])
[<80266454>] (process_one_work) from [<80267330>] (worker_thread+0x1ec/0x418 kernel/workqueue.c:3416)
 r10:82efb000 r9:8421c6ac r8:61c88647 r7:dddd00e0 r6:82604d40 r5:dddd00c0
 r4:8421c680
[<80267144>] (worker_thread) from [<80270044>] (kthread+0x104/0x134 kernel/kthread.c:388)
 r10:00000000 r9:df9b1e90 r8:84418640 r7:8421c680 r6:80267144 r5:82efb000
 r4:8463af80
[<8026ff40>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134)
Exception stack(0xdf9b5fb0 to 0xdf9b5ff8)
5fa0:                                     00000000 00000000 00000000 00000000
5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
5fe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026ff40 r4:8463af80
INFO: task kworker/0:7:3018 blocked for more than 450 seconds.
      Not tainted 6.9.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:7     state:D stack:0     pid:3018  tgid:3018  ppid:2      flags:0x00000000
Workqueue: events bpf_prog_free_deferred
Call trace: 
[<8189b700>] (__schedule) from [<8189c33c>] (__schedule_loop kernel/sched/core.c:6823 [inline])
[<8189b700>] (__schedule) from [<8189c33c>] (schedule+0x2c/0xfc kernel/sched/core.c:6838)
 r10:82c16005 r9:00000000 r8:82714be8 r7:00000002 r6:df9cdd94 r5:83605400
 r4:83605400
[<8189c310>] (schedule) from [<8189c94c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6895)
 r5:83605400 r4:82714be4
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline])
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752)
[<8189ef44>] (__mutex_lock.constprop.0) from [<8189faf8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040)
 r10:82c16005 r9:df9cde20 r8:00000000 r7:ffffffff r6:00000000 r5:84b5c400
 r4:00000000
[<8189fae4>] (__mutex_lock_slowpath) from [<8189fb38>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286)
[<8189fafc>] (mutex_lock) from [<8049c4e4>] (_vm_unmap_aliases+0x60/0x2e8 mm/vmalloc.c:2788)
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vm_reset_perms mm/vmalloc.c:3235 [inline])
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vfree+0x170/0x1e4 mm/vmalloc.c:3314)
 r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84b5c400
 r4:00000000
[<804a01f8>] (vfree) from [<802ed9bc>] (module_memfree+0x30/0x50 kernel/module/main.c:1189)
 r9:83605400 r8:00000080 r7:00000000 r6:82c16000 r5:00001000 r4:7f171000
[<802ed98c>] (module_memfree) from [<80391560>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1058)
 r5:00001000 r4:eada7000
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_binary_free kernel/bpf/core.c:1104 [inline])
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1228)
[<803916b8>] (bpf_jit_free) from [<80392808>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2783)
 r5:84beef54 r4:84beec00
[<803926bc>] (bpf_prog_free_deferred) from [<8026660c>] (process_one_work+0x1b8/0x508 kernel/workqueue.c:3254)
 r7:dddd00c0 r6:82c16000 r5:84beef54 r4:8421c700
[<80266454>] (process_one_work) from [<80267330>] (process_scheduled_works kernel/workqueue.c:3335 [inline])
[<80266454>] (process_one_work) from [<80267330>] (worker_thread+0x1ec/0x418 kernel/workqueue.c:3416)
 r10:83605400 r9:8421c72c r8:61c88647 r7:dddd00e0 r6:82604d40 r5:dddd00c0
 r4:8421c700
[<80267144>] (worker_thread) from [<80270044>] (kthread+0x104/0x134 kernel/kthread.c:388)
 r10:00000000 r9:df9b1e90 r8:84418480 r7:8421c700 r6:80267144 r5:83605400
 r4:83a7a780
[<8026ff40>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134)
Exception stack(0xdf9cdfb0 to 0xdf9cdff8)
dfa0:                                     00000000 00000000 00000000 00000000
dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
dfe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026ff40 r4:83a7a780
INFO: task kworker/0:8:3019 blocked for more than 450 seconds.
      Not tainted 6.9.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:8     state:D stack:0     pid:3019  tgid:3019  ppid:2      flags:0x00000000
Workqueue: events bpf_prog_free_deferred
Call trace: 
[<8189b700>] (__schedule) from [<8189c33c>] (__schedule_loop kernel/sched/core.c:6823 [inline])
[<8189b700>] (__schedule) from [<8189c33c>] (schedule+0x2c/0xfc kernel/sched/core.c:6838)
 r10:82c16005 r9:00000000 r8:82714be8 r7:00000002 r6:df9add94 r5:84233000
 r4:84233000
[<8189c310>] (schedule) from [<8189c94c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6895)
 r5:84233000 r4:82714be4
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline])
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752)
[<8189ef44>] (__mutex_lock.constprop.0) from [<8189faf8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040)
 r10:82c16005 r9:df9ade20 r8:00000000 r7:ffffffff r6:00000000 r5:84b5cac0
 r4:00000000
[<8189fae4>] (__mutex_lock_slowpath) from [<8189fb38>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286)
[<8189fafc>] (mutex_lock) from [<8049c4e4>] (_vm_unmap_aliases+0x60/0x2e8 mm/vmalloc.c:2788)
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vm_reset_perms mm/vmalloc.c:3235 [inline])
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vfree+0x170/0x1e4 mm/vmalloc.c:3314)
 r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84b5cac0
 r4:00000000
[<804a01f8>] (vfree) from [<802ed9bc>] (module_memfree+0x30/0x50 kernel/module/main.c:1189)
 r9:84233000 r8:00000080 r7:00000000 r6:82c16000 r5:00001000 r4:7f169000
[<802ed98c>] (module_memfree) from [<80391560>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1058)
 r5:00001000 r4:eac6d000
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_binary_free kernel/bpf/core.c:1104 [inline])
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1228)
[<803916b8>] (bpf_jit_free) from [<80392808>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2783)
 r5:84b7f754 r4:84b7f400
[<803926bc>] (bpf_prog_free_deferred) from [<8026660c>] (process_one_work+0x1b8/0x508 kernel/workqueue.c:3254)
 r7:dddd00c0 r6:82c16000 r5:84b7f754 r4:8421c780
[<80266454>] (process_one_work) from [<80267330>] (process_scheduled_works kernel/workqueue.c:3335 [inline])
[<80266454>] (process_one_work) from [<80267330>] (worker_thread+0x1ec/0x418 kernel/workqueue.c:3416)
 r10:84233000 r9:8421c7ac r8:61c88647 r7:dddd00e0 r6:82604d40 r5:dddd00c0
 r4:8421c780
[<80267144>] (worker_thread) from [<80270044>] (kthread+0x104/0x134 kernel/kthread.c:388)
 r10:00000000 r9:df9b1e90 r8:8386e540 r7:8421c780 r6:80267144 r5:84233000
 r4:8386ed80
[<8026ff40>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134)
Exception stack(0xdf9adfb0 to 0xdf9adff8)
dfa0:                                     00000000 00000000 00000000 00000000
dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
dfe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026ff40 r4:8386ed80
INFO: task kworker/0:9:3022 blocked for more than 450 seconds.
      Not tainted 6.9.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:9     state:D stack:0     pid:3022  tgid:3022  ppid:2      flags:0x00000000
Workqueue: events bpf_prog_free_deferred
Call trace: 
[<8189b700>] (__schedule) from [<8189c33c>] (__schedule_loop kernel/sched/core.c:6823 [inline])
[<8189b700>] (__schedule) from [<8189c33c>] (schedule+0x2c/0xfc kernel/sched/core.c:6838)
 r10:82c16005 r9:00000000 r8:82714be8 r7:00000002 r6:df9d5d94 r5:84233c00
 r4:84233c00
[<8189c310>] (schedule) from [<8189c94c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6895)
 r5:84233c00 r4:82714be4
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline])
[<8189c934>] (schedule_preempt_disabled) from [<8189f22c>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752)
[<8189ef44>] (__mutex_lock.constprop.0) from [<8189faf8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040)
 r10:82c16005 r9:df9d5e20 r8:00000000 r7:ffffffff r6:00000000 r5:84b5cfc0
 r4:00000000
[<8189fae4>] (__mutex_lock_slowpath) from [<8189fb38>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286)
[<8189fafc>] (mutex_lock) from [<8049c4e4>] (_vm_unmap_aliases+0x60/0x2e8 mm/vmalloc.c:2788)
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vm_reset_perms mm/vmalloc.c:3235 [inline])
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vfree+0x170/0x1e4 mm/vmalloc.c:3314)
 r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84b5cfc0
 r4:00000000
[<804a01f8>] (vfree) from [<802ed9bc>] (module_memfree+0x30/0x50 kernel/module/main.c:1189)
 r9:84233c00 r8:00000080 r7:00000000 r6:82c16000 r5:00001000 r4:7f165000
[<802ed98c>] (module_memfree) from [<80391560>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1058)
 r5:00001000 r4:eac41000
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_binary_free kernel/bpf/core.c:1104 [inline])
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1228)
[<803916b8>] (bpf_jit_free) from [<80392808>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2783)
 r5:84ace754 r4:84ace400
[<803926bc>] (bpf_prog_free_deferred) from [<8026660c>] (process_one_work+0x1b8/0x508 kernel/workqueue.c:3254)
 r7:dddd00c0 r6:82c16000 r5:84ace754 r4:8421c800
[<80266454>] (process_one_work) from [<80267330>] (process_scheduled_works kernel/workqueue.c:3335 [inline])
[<80266454>] (process_one_work) from [<80267330>] (worker_thread+0x1ec/0x418 kernel/workqueue.c:3416)
 r10:84233c00 r9:8421c82c r8:61c88647 r7:dddd00e0 r6:82604d40 r5:dddd00c0
 r4:8421c800
[<80267144>] (worker_thread) from [<80270044>] (kthread+0x104/0x134 kernel/kthread.c:388)
 r10:00000000 r9:df9b1e90 r8:8421a800 r7:8421c800 r6:80267144 r5:84233c00
 r4:8421a840
[<8026ff40>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134)
Exception stack(0xdf9d5fb0 to 0xdf9d5ff8)
5fa0:                                     00000000 00000000 00000000 00000000
5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
5fe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026ff40 r4:8421a840
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
NMI backtrace for cpu 1
CPU: 1 PID: 31 Comm: khungtaskd Not tainted 6.9.0-rc2-syzkaller #0
Hardware name: ARM-Versatile Express
Call trace: 
[<81879f7c>] (dump_backtrace) from [<8187a078>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:256)
 r7:00000000 r6:00000013 r5:60000093 r4:81fc4844
[<8187a060>] (show_stack) from [<81897830>] (__dump_stack lib/dump_stack.c:88 [inline])
[<8187a060>] (show_stack) from [<81897830>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:114)
[<818977c0>] (dump_stack_lvl) from [<81897854>] (dump_stack+0x18/0x1c lib/dump_stack.c:123)
 r5:00000001 r4:00000001
[<8189783c>] (dump_stack) from [<81867354>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113)
[<818671f4>] (nmi_cpu_backtrace) from [<818674a0>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62)
 r7:00000001 r6:8260c590 r5:8261a88c r4:ffffffff
[<81867370>] (nmi_trigger_cpumask_backtrace) from [<802105b4>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851)
 r9:8260c6f4 r8:0002f031 r7:8289dfe0 r6:00007d6c r5:84a0b204 r4:84d39724
[<8021059c>] (arch_trigger_cpumask_backtrace) from [<8034eaf8>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline])
[<8021059c>] (arch_trigger_cpumask_backtrace) from [<8034eaf8>] (check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline])
[<8021059c>] (arch_trigger_cpumask_backtrace) from [<8034eaf8>] (watchdog+0x480/0x594 kernel/hung_task.c:380)
[<8034e678>] (watchdog) from [<80270044>] (kthread+0x104/0x134 kernel/kthread.c:388)
 r10:00000000 r9:df819e58 r8:82e983c0 r7:00000000 r6:8034e678 r5:82ee8c00
 r4:82f421c0
[<8026ff40>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134)
Exception stack(0xdf8ddfb0 to 0xdf8ddff8)
dfa0:                                     00000000 00000000 00000000 00000000
dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
dfe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026ff40 r4:82f421c0
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 4553 Comm: kworker/0:159 Not tainted 6.9.0-rc2-syzkaller #0
Hardware name: ARM-Versatile Express
Workqueue: events bpf_prog_free_deferred
PC is at v7wbi_flush_kern_tlb_range+0x18/0x4c arch/arm/mm/tlb-v7.S:83
LR is at flush_tlb_kernel_range+0x64/0xb8 arch/arm/kernel/smp_tlb.c:243
pc : [<8021b3cc>]    lr : [<80210b70>]    psr: 80000013
sp : eba2dd80  ip : eba2ddb0  fp : eba2ddac
r10: 828a9a0c  r9 : 8260ca94  r8 : e064f000
r7 : 7f0a5000  r6 : 828a8de8  r5 : 00000001  r4 : 7f0a5000
r3 : 8021b3b4  r2 : 00000000  r1 : e064f000  r0 : b163b000
Flags: Nzcv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
Control: 30c5387d  Table: 8440b080  DAC: fffffffd
Call trace: 
[<80210b0c>] (flush_tlb_kernel_range) from [<8049c2cc>] (__purge_vmap_area_lazy+0x210/0x3c8 mm/vmalloc.c:2232)
 r4:828a9a2c
[<8049c0bc>] (__purge_vmap_area_lazy) from [<8049c710>] (_vm_unmap_aliases+0x28c/0x2e8 mm/vmalloc.c:2827)
 r10:00000000 r9:eba2de20 r8:00000000 r7:eba2ddd8 r6:00000008 r5:ddde1c80
 r4:eba2ddd8
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vm_reset_perms mm/vmalloc.c:3235 [inline])
[<8049c484>] (_vm_unmap_aliases) from [<804a0368>] (vfree+0x170/0x1e4 mm/vmalloc.c:3314)
 r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84bc9840
 r4:00000000
[<804a01f8>] (vfree) from [<802ed9bc>] (module_memfree+0x30/0x50 kernel/module/main.c:1189)
 r9:848b6c00 r8:00000080 r7:00000000 r6:82c16000 r5:00001000 r4:7f0ef000
[<802ed98c>] (module_memfree) from [<80391560>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1058)
 r5:00001000 r4:e066b000
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_binary_free kernel/bpf/core.c:1104 [inline])
[<80391550>] (bpf_jit_free_exec) from [<80391720>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1228)
[<803916b8>] (bpf_jit_free) from [<80392808>] (bpf_prog_free_deferred+0x14c/0x164 kernel/bpf/core.c:2783)
 r5:84921f54 r4:84921c00
[<803926bc>] (bpf_prog_free_deferred) from [<8026660c>] (process_one_work+0x1b8/0x508 kernel/workqueue.c:3254)
 r7:dddd00c0 r6:82c16000 r5:84921f54 r4:849afc00
[<80266454>] (process_one_work) from [<80267330>] (process_scheduled_works kernel/workqueue.c:3335 [inline])
[<80266454>] (process_one_work) from [<80267330>] (worker_thread+0x1ec/0x418 kernel/workqueue.c:3416)
 r10:848b6c00 r9:849afc2c r8:61c88647 r7:dddd00e0 r6:82604d40 r5:dddd00c0
 r4:849afc00
[<80267144>] (worker_thread) from [<80270044>] (kthread+0x104/0x134 kernel/kthread.c:388)
 r10:00000000 r9:eba39e90 r8:84649380 r7:849afc00 r6:80267144 r5:848b6c00
 r4:84649140
[<8026ff40>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134)
Exception stack(0xeba2dfb0 to 0xeba2dff8)
dfa0:                                     00000000 00000000 00000000 00000000
dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
dfe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026ff40 r4:84649140

Crashes (62):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/02 19:56 upstream 026e680b0a08 f861ecca .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/27 15:06 upstream 7033999ecd7b 454571b6 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/27 06:52 upstream 7033999ecd7b 454571b6 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/25 04:41 upstream 5e74df2f8f15 0ea90952 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/05 10:51 upstream 90d35da658da 5fc53669 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/02/06 07:42 upstream 54be6c6c5ae8 6404acf9 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/01/29 16:08 upstream 41bccc98fb79 991a98f4 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/01/28 16:09 upstream 8a696a29c690 cc4a4020 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/01/28 11:47 upstream 8a696a29c690 cc4a4020 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/01/03 12:03 upstream 610a9b8f49fb fb427a07 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/25 20:57 upstream 4cece7649650 0ea90952 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/25 16:07 upstream 4cece7649650 0ea90952 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/25 14:34 upstream 4cece7649650 0ea90952 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/24 11:48 upstream 70293240c5ce 0ea90952 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/23 06:47 upstream bfa8f18691ed 0ea90952 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/23 02:54 upstream bfa8f18691ed 0ea90952 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/22 18:08 upstream 8e938e398669 4b6cdce6 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/22 17:01 upstream 8e938e398669 4b6cdce6 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/20 16:11 upstream a4145ce1e7bc 5b7d42ae .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/20 14:14 upstream a4145ce1e7bc 5b7d42ae .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/19 20:22 upstream d95fcdf4961d e104824c .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/19 14:22 upstream b3603fcb79b1 e104824c .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/13 05:42 upstream 1f440397665f db5b7ff0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/11 13:20 upstream e8f897f4afef 6ee49f2e .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/09 14:18 upstream 09e5c48fea17 6ee49f2e .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/08 15:27 upstream 3aaa8ce7a335 8e75c913 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/07 11:54 upstream 67be068d31d4 f39a7eed .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/06 16:52 upstream 5847c9777c30 f39a7eed .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/06 10:09 upstream 29cd507cbec2 f39a7eed .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/03/05 13:44 upstream 90d35da658da 9ed46f64 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/02/25 17:48 upstream ab0a97cffa0b 8d446f15 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/02/25 10:34 upstream ab0a97cffa0b 8d446f15 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/02/25 00:48 upstream f2e367d6ad3b 8d446f15 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/02/23 02:13 upstream 1c892cdd8fe0 bbb79582 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/02/21 01:28 upstream fca7526b7d89 3af7dd65 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/02/19 16:22 upstream b401b621758e 96e91f57 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/02/18 21:09 upstream c02197fc9076 578f7538 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/02/18 14:14 upstream c02197fc9076 578f7538 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/02/17 00:42 upstream 0f1dd5e91e2b 578f7538 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/02/10 12:46 upstream 4a7bbe7519b6 77b23aa1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/02/09 20:39 upstream e6f39a90de92 77b23aa1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/02/01 20:29 upstream 5c24e4e9e708 d61103fc .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/01/30 22:14 upstream 861c0981648f 7f400fcb .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/01/30 22:11 upstream 861c0981648f 7f400fcb .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/01/26 00:03 upstream 6098d87eaf31 cc4a4020 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/01/25 20:18 upstream 6098d87eaf31 cc4a4020 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/01/24 19:32 upstream 615d30064886 1e153dc8 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/01/19 15:49 upstream 9d1694dc91ce 9bd8dcda .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/01/18 15:01 upstream 296455ade1fd 239abf84 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/01/17 15:37 upstream 052d534373b7 c9a1c95b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/01/15 03:20 upstream 052d534373b7 551587c1 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/01/11 21:20 upstream de927f6c0b07 dda5a988 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2024/01/08 04:39 upstream 0dd3ee311255 d0304e9c .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2023/12/25 04:12 upstream 861deac3b092 fb427a07 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2023/12/11 17:41 upstream a39b6ac3781d 28b24332 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2023/12/05 10:13 upstream bee0e7762ad2 f819d6f7 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2023/10/19 04:15 upstream dd72f9c7e512 342b9c55 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2023/10/18 13:56 upstream 06dc10eae55b 342b9c55 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2023/10/16 23:46 upstream 58720809f527 342b9c55 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2023/10/09 11:51 upstream 94f6f0550c62 f3a9f550 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
2023/10/02 21:59 upstream 8a749fd1a872 50b20e75 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in _vm_unmap_aliases
* Struck through repros no longer work on HEAD.