INFO: task kworker/0:6:28290 blocked for more than 430 seconds. Not tainted 6.6.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:6 state:D stack:0 pid:28290 ppid:2 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Backtrace: [<818405a0>] (__schedule) from [<81841208>] (schedule+0x5c/0xac kernel/sched/core.c:6771) r10:82c16005 r9:00000000 r8:8270d5f4 r7:00000002 r6:e0411da4 r5:8abbc680 r4:8abbc680 [<818411ac>] (schedule) from [<8184174c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6830) r5:8abbc680 r4:8270d5f0 [<81841734>] (schedule_preempt_disabled) from [<81844034>] (__mutex_lock_common kernel/locking/mutex.c:679 [inline]) [<81841734>] (schedule_preempt_disabled) from [<81844034>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:747) [<81843d4c>] (__mutex_lock.constprop.0) from [<81844900>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1035) r10:82c16005 r9:e0411e30 r8:00000000 r7:ffffffff r6:00000000 r5:8a827b00 r4:00000000 [<818448ec>] (__mutex_lock_slowpath) from [<81844940>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<81844904>] (mutex_lock) from [<804829dc>] (_vm_unmap_aliases+0x60/0x2e4 mm/vmalloc.c:2267) [<8048297c>] (_vm_unmap_aliases) from [<804865ac>] (vm_reset_perms mm/vmalloc.c:2753 [inline]) [<8048297c>] (_vm_unmap_aliases) from [<804865ac>] (vfree+0x180/0x1f0 mm/vmalloc.c:2832) r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:8a827b00 r4:00000000 [<8048642c>] (vfree) from [<802e83cc>] (module_memfree+0x40/0x60 kernel/module/main.c:1189) r9:87fd4400 r8:00000000 r7:00000000 r6:82c16000 r5:00001000 r4:7f23c000 [<802e838c>] (module_memfree) from [<80384434>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1015) r5:00001000 r4:ead25000 [<80384424>] (bpf_jit_free_exec) from [<803845f4>] (bpf_jit_binary_free kernel/bpf/core.c:1061 [inline]) [<80384424>] (bpf_jit_free_exec) from [<803845f4>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1186) [<8038458c>] (bpf_jit_free) from [<803847f8>] (bpf_prog_free_deferred+0x188/0x1a0 kernel/bpf/core.c:2736) r5:87fd4744 r4:8ab7b180 [<80384670>] (bpf_prog_free_deferred) from [<80265fdc>] (process_one_work+0x19c/0x4a8 kernel/workqueue.c:2630) r9:8abbc680 r8:00000000 r7:dddd22c0 r6:82c16000 r5:87fd4744 r4:8ab7b180 [<80265e40>] (process_one_work) from [<80266528>] (process_scheduled_works kernel/workqueue.c:2703 [inline]) [<80265e40>] (process_one_work) from [<80266528>] (worker_thread+0x240/0x48c kernel/workqueue.c:2784) r10:61c88647 r9:8abbc680 r8:dddd22e0 r7:82604d40 r6:dddd22c0 r5:8ab7b1ac r4:8ab7b180 [<802662e8>] (worker_thread) from [<8026d920>] (kthread+0x104/0x134 kernel/kthread.c:388) r10:00000000 r9:e037de90 r8:8ab7c880 r7:8ab7b180 r6:802662e8 r5:8abbc680 r4:887f1100 [<8026d81c>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134) Exception stack(0xe0411fb0 to 0xe0411ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026d81c r4:887f1100 INFO: task kworker/1:0:12522 blocked for more than 430 seconds. Not tainted 6.6.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:0 state:D stack:0 pid:12522 ppid:2 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Backtrace: [<818405a0>] (__schedule) from [<81841208>] (schedule+0x5c/0xac kernel/sched/core.c:6771) r10:82c16205 r9:00000000 r8:8270d5f4 r7:00000002 r6:ed6e9da4 r5:87f6de00 r4:87f6de00 [<818411ac>] (schedule) from [<8184174c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6830) r5:87f6de00 r4:8270d5f0 [<81841734>] (schedule_preempt_disabled) from [<81844034>] (__mutex_lock_common kernel/locking/mutex.c:679 [inline]) [<81841734>] (schedule_preempt_disabled) from [<81844034>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:747) [<81843d4c>] (__mutex_lock.constprop.0) from [<81844900>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1035) r10:82c16205 r9:ed6e9e30 r8:00000000 r7:ffffffff r6:00000000 r5:8a8015c0 r4:00000000 [<818448ec>] (__mutex_lock_slowpath) from [<81844940>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<81844904>] (mutex_lock) from [<804829dc>] (_vm_unmap_aliases+0x60/0x2e4 mm/vmalloc.c:2267) [<8048297c>] (_vm_unmap_aliases) from [<804865ac>] (vm_reset_perms mm/vmalloc.c:2753 [inline]) [<8048297c>] (_vm_unmap_aliases) from [<804865ac>] (vfree+0x180/0x1f0 mm/vmalloc.c:2832) r10:82c16205 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:8a8015c0 r4:00000000 [<8048642c>] (vfree) from [<802e83cc>] (module_memfree+0x40/0x60 kernel/module/main.c:1189) r9:8a9fac00 r8:00000000 r7:00000000 r6:82c16200 r5:00001000 r4:7f240000 [<802e838c>] (module_memfree) from [<80384434>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1015) r5:00001000 r4:eb053000 [<80384424>] (bpf_jit_free_exec) from [<803845f4>] (bpf_jit_binary_free kernel/bpf/core.c:1061 [inline]) [<80384424>] (bpf_jit_free_exec) from [<803845f4>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1186) [<8038458c>] (bpf_jit_free) from [<803847f8>] (bpf_prog_free_deferred+0x188/0x1a0 kernel/bpf/core.c:2736) r5:8a9faf44 r4:88985800 [<80384670>] (bpf_prog_free_deferred) from [<80265fdc>] (process_one_work+0x19c/0x4a8 kernel/workqueue.c:2630) r9:87f6de00 r8:00000080 r7:ddde52c0 r6:82c16200 r5:8a9faf44 r4:88985800 [<80265e40>] (process_one_work) from [<80266528>] (process_scheduled_works kernel/workqueue.c:2703 [inline]) [<80265e40>] (process_one_work) from [<80266528>] (worker_thread+0x240/0x48c kernel/workqueue.c:2784) r10:61c88647 r9:87f6de00 r8:ddde52e0 r7:82604d40 r6:ddde52c0 r5:8898582c r4:88985800 [<802662e8>] (worker_thread) from [<8026d920>] (kthread+0x104/0x134 kernel/kthread.c:388) r10:00000000 r9:ec231e90 r8:83fc9840 r7:88985800 r6:802662e8 r5:87f6de00 r4:88c1bc40 [<8026d81c>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134) Exception stack(0xed6e9fb0 to 0xed6e9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026d81c r4:88c1bc40 INFO: task kworker/0:4:31605 blocked for more than 430 seconds. Not tainted 6.6.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:4 state:D stack:0 pid:31605 ppid:2 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Backtrace: [<818405a0>] (__schedule) from [<81841208>] (schedule+0x5c/0xac kernel/sched/core.c:6771) r10:82c16005 r9:00000000 r8:8270d5f4 r7:00000002 r6:eabbdda4 r5:87f69780 r4:87f69780 [<818411ac>] (schedule) from [<8184174c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6830) r5:87f69780 r4:8270d5f0 [<81841734>] (schedule_preempt_disabled) from [<81844034>] (__mutex_lock_common kernel/locking/mutex.c:679 [inline]) [<81841734>] (schedule_preempt_disabled) from [<81844034>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:747) [<81843d4c>] (__mutex_lock.constprop.0) from [<81844900>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1035) r10:82c16005 r9:eabbde30 r8:00000000 r7:ffffffff r6:00000000 r5:87d1ac00 r4:00000000 [<818448ec>] (__mutex_lock_slowpath) from [<81844940>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<81844904>] (mutex_lock) from [<804829dc>] (_vm_unmap_aliases+0x60/0x2e4 mm/vmalloc.c:2267) [<8048297c>] (_vm_unmap_aliases) from [<804865ac>] (vm_reset_perms mm/vmalloc.c:2753 [inline]) [<8048297c>] (_vm_unmap_aliases) from [<804865ac>] (vfree+0x180/0x1f0 mm/vmalloc.c:2832) r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:87d1ac00 r4:00000000 [<8048642c>] (vfree) from [<802e83cc>] (module_memfree+0x40/0x60 kernel/module/main.c:1189) r9:87fd5c00 r8:00000000 r7:00000000 r6:82c16000 r5:00001000 r4:7f23a000 [<802e838c>] (module_memfree) from [<80384434>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1015) r5:00001000 r4:eac3f000 [<80384424>] (bpf_jit_free_exec) from [<803845f4>] (bpf_jit_binary_free kernel/bpf/core.c:1061 [inline]) [<80384424>] (bpf_jit_free_exec) from [<803845f4>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1186) [<8038458c>] (bpf_jit_free) from [<803847f8>] (bpf_prog_free_deferred+0x188/0x1a0 kernel/bpf/core.c:2736) r5:87fd5f44 r4:8ab74b80 [<80384670>] (bpf_prog_free_deferred) from [<80265fdc>] (process_one_work+0x19c/0x4a8 kernel/workqueue.c:2630) r9:87f69780 r8:00000000 r7:dddd22c0 r6:82c16000 r5:87fd5f44 r4:8ab74b80 [<80265e40>] (process_one_work) from [<80266528>] (process_scheduled_works kernel/workqueue.c:2703 [inline]) [<80265e40>] (process_one_work) from [<80266528>] (worker_thread+0x240/0x48c kernel/workqueue.c:2784) r10:61c88647 r9:87f69780 r8:dddd22e0 r7:82604d40 r6:dddd22c0 r5:8ab74bac r4:8ab74b80 [<802662e8>] (worker_thread) from [<8026d920>] (kthread+0x104/0x134 kernel/kthread.c:388) r10:00000000 r9:e0715e90 r8:8a801940 r7:8ab74b80 r6:802662e8 r5:87f69780 r4:8a801140 [<8026d81c>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134) Exception stack(0xeabbdfb0 to 0xeabbdff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026d81c r4:8a801140 INFO: task kworker/0:1:4227 blocked for more than 430 seconds. Not tainted 6.6.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:1 state:D stack:0 pid:4227 ppid:2 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Backtrace: [<818405a0>] (__schedule) from [<81841208>] (schedule+0x5c/0xac kernel/sched/core.c:6771) r10:82c16005 r9:00000000 r8:8270d5f4 r7:00000002 r6:ea9e1da4 r5:8463e9c0 r4:8463e9c0 [<818411ac>] (schedule) from [<8184174c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6830) r5:8463e9c0 r4:8270d5f0 [<81841734>] (schedule_preempt_disabled) from [<81844034>] (__mutex_lock_common kernel/locking/mutex.c:679 [inline]) [<81841734>] (schedule_preempt_disabled) from [<81844034>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:747) [<81843d4c>] (__mutex_lock.constprop.0) from [<81844900>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1035) r10:82c16005 r9:ea9e1e30 r8:00000000 r7:ffffffff r6:00000000 r5:83946700 r4:00000000 [<818448ec>] (__mutex_lock_slowpath) from [<81844940>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286) [<81844904>] (mutex_lock) from [<804829dc>] (_vm_unmap_aliases+0x60/0x2e4 mm/vmalloc.c:2267) [<8048297c>] (_vm_unmap_aliases) from [<804865ac>] (vm_reset_perms mm/vmalloc.c:2753 [inline]) [<8048297c>] (_vm_unmap_aliases) from [<804865ac>] (vfree+0x180/0x1f0 mm/vmalloc.c:2832) r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:83946700 r4:00000000 [<8048642c>] (vfree) from [<802e83cc>] (module_memfree+0x40/0x60 kernel/module/main.c:1189) r9:87fd5000 r8:00000000 r7:00000000 r6:82c16000 r5:00001000 r4:7f23e000 [<802e838c>] (module_memfree) from [<80384434>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1015) r5:00001000 r4:eb033000 [<80384424>] (bpf_jit_free_exec) from [<803845f4>] (bpf_jit_binary_free kernel/bpf/core.c:1061 [inline]) [<80384424>] (bpf_jit_free_exec) from [<803845f4>] (bpf_jit_free+0x68/0xe4 kernel/bpf/core.c:1186) [<8038458c>] (bpf_jit_free) from [<803847f8>] (bpf_prog_free_deferred+0x188/0x1a0 kernel/bpf/core.c:2736) r5:87fd5344 r4:88414000 [<80384670>] (bpf_prog_free_deferred) from [<80265fdc>] (process_one_work+0x19c/0x4a8 kernel/workqueue.c:2630) r9:8463e9c0 r8:00000000 r7:dddd22c0 r6:82c16000 r5:87fd5344 r4:88414000 [<80265e40>] (process_one_work) from [<80266528>] (process_scheduled_works kernel/workqueue.c:2703 [inline]) [<80265e40>] (process_one_work) from [<80266528>] (worker_thread+0x240/0x48c kernel/workqueue.c:2784) r10:61c88647 r9:8463e9c0 r8:dddd22e0 r7:82604d40 r6:dddd22c0 r5:8841402c r4:88414000 [<802662e8>] (worker_thread) from [<8026d920>] (kthread+0x104/0x134 kernel/kthread.c:388) r10:00000000 r9:eaedde90 r8:887f3200 r7:88414000 r6:802662e8 r5:8463e9c0 r4:8a8010c0 [<8026d81c>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134) Exception stack(0xea9e1fb0 to 0xea9e1ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026d81c r4:8a8010c0 NMI backtrace for cpu 0 CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.6.0-rc6-syzkaller #0 Hardware name: ARM-Versatile Express Backtrace: [<8181f400>] (dump_backtrace) from [<8181f4fc>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:256) r7:00000000 r6:00000013 r5:60000093 r4:81fb57a0 [<8181f4e4>] (show_stack) from [<8183c824>] (__dump_stack lib/dump_stack.c:88 [inline]) [<8181f4e4>] (show_stack) from [<8183c824>] (dump_stack_lvl+0x48/0x54 lib/dump_stack.c:106) [<8183c7dc>] (dump_stack_lvl) from [<8183c848>] (dump_stack+0x18/0x1c lib/dump_stack.c:113) r5:00000000 r4:00000001 [<8183c830>] (dump_stack) from [<8180ce44>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113) [<8180cce4>] (nmi_cpu_backtrace) from [<8180cf90>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000000 r6:8260c494 r5:8261a898 r4:ffffffff [<8180ce60>] (nmi_trigger_cpumask_backtrace) from [<802104b4>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:8260c60c r8:82899eac r7:8261b448 r6:00007f05 r5:83f10dc0 r4:838eff64 [<8021049c>] (arch_trigger_cpumask_backtrace) from [<803440e4>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]) [<8021049c>] (arch_trigger_cpumask_backtrace) from [<803440e4>] (check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline]) [<8021049c>] (arch_trigger_cpumask_backtrace) from [<803440e4>] (watchdog+0x488/0x59c kernel/hung_task.c:379) [<80343c5c>] (watchdog) from [<8026d920>] (kthread+0x104/0x134 kernel/kthread.c:388) r10:00000000 r9:df819e58 r8:82de73c0 r7:00000000 r6:80343c5c r5:82e68bc0 r4:82ec48c0 [<8026d81c>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30 arch/arm/kernel/entry-common.S:134) Exception stack(0xdf8d9fb0 to 0xdf8d9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026d81c r4:82ec48c0 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 25505 Comm: syz-executor.0 Not tainted 6.6.0-rc6-syzkaller #0 Hardware name: ARM-Versatile Express PC is at 0x16798 LR is at 0x16798 pc : [<00016798>] lr : [<00016798>] psr: 20000010 sp : 20000190 ip : 20000190 fp : 76bab0fc r10: 003d0f00 r9 : 7ed9632f r8 : 7ed9632e r7 : 00000000 r6 : 00000000 r5 : 001bccf5 r4 : 00000000 r3 : 00000000 r2 : 000001b0 r1 : 00000004 r0 : ffffffff Flags: nzCv IRQs on FIQs on Mode USER_32 ISA ARM Segment none Control: 30c5387d Table: 8896e0c0 DAC: 00000000 Backtrace: invalid frame pointer 0x76bab0fc