INFO: task kworker/1:35:16050 blocked for more than 430 seconds. Not tainted 6.7.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:35 state:D stack:0 pid:16050 tgid:16050 ppid:2 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Backtrace: [<8185d0c4>] (__schedule) from [<8185dcfc>] (__schedule_loop kernel/sched/core.c:6802 [inline]) [<8185d0c4>] (__schedule) from [<8185dcfc>] (schedule+0x2c/0xb8 kernel/sched/core.c:6817) r10:82c16205 r9:00000000 r8:8270dd3c r7:00000002 r6:dfaf9da4 r5:85e1d400 r4:85e1d400 [<8185dcd0>] (schedule) from [<8185e2c8>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6874) r5:85e1d400 r4:8270dd38 [<8185e2b0>] (schedule_preempt_disabled) from [<81860bb0>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<8185e2b0>] (schedule_preempt_disabled) from [<81860bb0>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<818608c8>] (__mutex_lock.constprop.0) from [<8186147c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:82c16205 r9:dfaf9e30 r8:00000000 r7:ffffffff r6:00000000 r5:8ec3aec0 r4:00000000 [<81861468>] (__mutex_lock_slowpath) from [<818614bc>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<81861480>] (mutex_lock) from [<8048a59c>] (_vm_unmap_aliases+0x60/0x2e4 mm/vmalloc.c:2267) [<8048a53c>] (_vm_unmap_aliases) from [<8048e13c>] (vm_reset_perms mm/vmalloc.c:2753 [inline]) [<8048a53c>] (_vm_unmap_aliases) from [<8048e13c>] (vfree+0x170/0x1e0 mm/vmalloc.c:2832) r10:82c16205 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:8ec3aec0 r4:00000000 [<8048dfcc>] (vfree) from [<802e9fe4>] (module_memfree+0x30/0x50 kernel/module/main.c:1189) r9:85a83400 r8:00000000 r7:00000000 r6:82c16200 r5:00001000 r4:7f06d000 [<802e9fb4>] (module_memfree) from [<80387e38>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1023) r5:00001000 r4:dfe1f000 [<80387e28>] (bpf_jit_free_exec) from [<80387ff8>] (bpf_jit_binary_free kernel/bpf/core.c:1069 [inline]) [<80387e28>] (bpf_jit_free_exec) from [<80387ff8>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1194) [<80387f90>] (bpf_jit_free) from [<803881fc>] (bpf_prog_free_deferred+0x188/0x1a0 kernel/bpf/core.c:2744) r5:85a83750 r4:96124700 [<80388074>] (bpf_prog_free_deferred) from [<80266d50>] (process_one_work+0x19c/0x4a4 kernel/workqueue.c:2633) r9:85e1d400 r8:00000080 r7:ddde4280 r6:82c16200 r5:85a83750 r4:96124700 [<80266bb4>] (process_one_work) from [<80267298>] (process_scheduled_works kernel/workqueue.c:2706 [inline]) [<80266bb4>] (process_one_work) from [<80267298>] (worker_thread+0x240/0x48c kernel/workqueue.c:2787) r10:61c88647 r9:85e1d400 r8:ddde42a0 r7:82604d40 r6:ddde4280 r5:9612472c r4:96124700 [<80267058>] (worker_thread) from [<8026e574>] (kthread+0x104/0x134 kernel/kthread.c:388) r10:00000000 r9:dfdd1e90 r8:8ec35100 r7:96124700 r6:80267058 r5:85e1d400 r4:8ec35d80 [<8026e470>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134) Exception stack(0xdfaf9fb0 to 0xdfaf9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e470 r4:8ec35d80 INFO: task kworker/1:36:16051 blocked for more than 430 seconds. Not tainted 6.7.0-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:36 state:D stack:0 pid:16051 tgid:16051 ppid:2 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Backtrace: [<8185d0c4>] (__schedule) from [<8185dcfc>] (__schedule_loop kernel/sched/core.c:6802 [inline]) [<8185d0c4>] (__schedule) from [<8185dcfc>] (schedule+0x2c/0xb8 kernel/sched/core.c:6817) r10:82c16205 r9:00000000 r8:8270dd3c r7:00000002 r6:dfafdda4 r5:85e1e000 r4:85e1e000 [<8185dcd0>] (schedule) from [<8185e2c8>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6874) r5:85e1e000 r4:8270dd38 [<8185e2b0>] (schedule_preempt_disabled) from [<81860bb0>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline]) [<8185e2b0>] (schedule_preempt_disabled) from [<81860bb0>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752) [<818608c8>] (__mutex_lock.constprop.0) from [<8186147c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040) r10:82c16205 r9:dfafde30 r8:00000000 r7:ffffffff r6:00000000 r5:8ec3df80 r4:00000000 [<81861468>] (__mutex_lock_slowpath) from [<818614bc>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<81861480>] (mutex_lock) from [<8048a59c>] (_vm_unmap_aliases+0x60/0x2e4 mm/vmalloc.c:2267) [<8048a53c>] (_vm_unmap_aliases) from [<8048e13c>] (vm_reset_perms mm/vmalloc.c:2753 [inline]) [<8048a53c>] (_vm_unmap_aliases) from [<8048e13c>] (vfree+0x170/0x1e0 mm/vmalloc.c:2832) r10:82c16205 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:8ec3df80 r4:00000000 [<8048dfcc>] (vfree) from [<802e9fe4>] (module_memfree+0x30/0x50 kernel/module/main.c:1189) r9:90271000 r8:00000000 r7:00000000 r6:82c16200 r5:00001000 r4:7f057000 [<802e9fb4>] (module_memfree) from [<80387e38>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1023) r5:00001000 r4:dfbe3000 [<80387e28>] (bpf_jit_free_exec) from [<80387ff8>] (bpf_jit_binary_free kernel/bpf/core.c:1069 [inline]) [<80387e28>] (bpf_jit_free_exec) from [<80387ff8>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1194) [<80387f90>] (bpf_jit_free) from [<803881fc>] (bpf_prog_free_deferred+0x188/0x1a0 kernel/bpf/core.c:2744) r5:90271350 r4:96124780 [<80388074>] (bpf_prog_free_deferred) from [<80266d50>] (process_one_work+0x19c/0x4a4 kernel/workqueue.c:2633) r9:85e1e000 r8:00000080 r7:ddde4280 r6:82c16200 r5:90271350 r4:96124780 [<80266bb4>] (process_one_work) from [<80267298>] (process_scheduled_works kernel/workqueue.c:2706 [inline]) [<80266bb4>] (process_one_work) from [<80267298>] (worker_thread+0x240/0x48c kernel/workqueue.c:2787) r10:61c88647 r9:85e1e000 r8:ddde42a0 r7:82604d40 r6:ddde4280 r5:961247ac r4:96124780 [<80267058>] (worker_thread) from [<8026e574>] (kthread+0x104/0x134 kernel/kthread.c:388) r10:00000000 r9:dfaf9e90 r8:8ec35a40 r7:96124780 r6:80267058 r5:85e1e000 r4:8ec35d80 [<8026e470>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134) Exception stack(0xdfafdfb0 to 0xdfafdff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e470 r4:8ec35d80 NMI backtrace for cpu 1 CPU: 1 PID: 31 Comm: khungtaskd Not tainted 6.7.0-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<8183bc04>] (dump_backtrace) from [<8183bd00>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:256) r7:00000000 r6:00000113 r5:60000193 r4:81fc1c80 [<8183bce8>] (show_stack) from [<81859260>] (__dump_stack lib/dump_stack.c:88 [inline]) [<8183bce8>] (show_stack) from [<81859260>] (dump_stack_lvl+0x48/0x54 lib/dump_stack.c:106) [<81859218>] (dump_stack_lvl) from [<81859284>] (dump_stack+0x18/0x1c lib/dump_stack.c:113) r5:00000001 r4:00000001 [<8185926c>] (dump_stack) from [<81828fb8>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<81828e58>] (nmi_cpu_backtrace) from [<81829104>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:8260c494 r5:8261a7d8 r4:ffffffff [<81828fd4>] (nmi_trigger_cpumask_backtrace) from [<802104f4>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:00000001 r8:8289ceb8 r7:8260c5e4 r6:00007e07 r5:8261adc8 r4:960c8b2c [<802104dc>] (arch_trigger_cpumask_backtrace) from [<80347a18>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]) [<802104dc>] (arch_trigger_cpumask_backtrace) from [<80347a18>] (check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline]) [<802104dc>] (arch_trigger_cpumask_backtrace) from [<80347a18>] (watchdog+0x48c/0x59c kernel/hung_task.c:379) [<8034758c>] (watchdog) from [<8026e574>] (kthread+0x104/0x134 kernel/kthread.c:388) r10:00000000 r9:df819e58 r8:82f246c0 r7:00000000 r6:8034758c r5:82e90c00 r4:82ec9780 [<8026e470>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134) Exception stack(0xdf8ddfb0 to 0xdf8ddff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e470 r4:82ec9780 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 14638 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller #0 Hardware name: ARM-Versatile Express PC is at __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] PC is at _raw_spin_unlock_irqrestore+0x28/0x54 kernel/locking/spinlock.c:194 LR is at spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] LR is at __wake_up_common_lock kernel/sched/wait.c:108 [inline] LR is at __wake_up+0x50/0x5c kernel/sched/wait.c:127 pc : [<818662c4>] lr : [<802a3120>] psr: 60000113 sp : ead8dea8 ip : ead8deb8 fp : ead8deb4 r10: 00000000 r9 : 851c8600 r8 : 00000100 r7 : 20000113 r6 : 00000000 r5 : 85392950 r4 : 00000000 r3 : 00002f80 r2 : 00000000 r1 : 20000113 r0 : 85392950 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 84ffdcc0 DAC: fffffffd Backtrace: [<8186629c>] (_raw_spin_unlock_irqrestore) from [<802a3120>] (spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]) [<8186629c>] (_raw_spin_unlock_irqrestore) from [<802a3120>] (__wake_up_common_lock kernel/sched/wait.c:108 [inline]) [<8186629c>] (_raw_spin_unlock_irqrestore) from [<802a3120>] (__wake_up+0x50/0x5c kernel/sched/wait.c:127) [<802a30d0>] (__wake_up) from [<807c80b8>] (io_cqring_wake io_uring/io_uring.h:251 [inline]) [<802a30d0>] (__wake_up) from [<807c80b8>] (io_cqring_wake io_uring/io_uring.h:238 [inline]) [<802a30d0>] (__wake_up) from [<807c80b8>] (io_cq_unlock_post+0x50/0x68 io_uring/io_uring.c:681) r7:00000122 r6:00000010 r5:85392ad8 r4:85392800 [<807c8068>] (io_cq_unlock_post) from [<807c83cc>] (__io_cqring_overflow_flush+0x104/0x138 io_uring/io_uring.c:731) r5:85392ad8 r4:85392800 [<807c82c8>] (__io_cqring_overflow_flush) from [<807cc154>] (io_cqring_do_overflow_flush io_uring/io_uring.c:739 [inline]) [<807c82c8>] (__io_cqring_overflow_flush) from [<807cc154>] (io_cqring_wait io_uring/io_uring.c:2651 [inline]) [<807c82c8>] (__io_cqring_overflow_flush) from [<807cc154>] (__do_sys_io_uring_enter io_uring/io_uring.c:3757 [inline]) [<807c82c8>] (__io_cqring_overflow_flush) from [<807cc154>] (sys_io_uring_enter+0xa00/0xc3c io_uring/io_uring.c:3647) r9:851c8600 r8:85392950 r7:00000001 r6:00000001 r5:84d5ec00 r4:85392800 [<807cb754>] (sys_io_uring_enter) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:66) Exception stack(0xead8dfa8 to 0xead8dff0) dfa0: 00000000 00000000 00000003 00000000 0000d47a 00000001 dfc0: 00000000 00000000 0014c2d4 000001aa 7e89432e 7e89432f 003d0f00 76b720fc dfe0: 76b71f08 76b71ef8 000167d0 00050b40 r10:000001aa r9:84d5ec00 r8:80200288 r7:000001aa r6:0014c2d4 r5:00000000 r4:00000000