INFO: task kworker/1:0:23 blocked for more than 432 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:0 state:D stack:0 pid:23 tgid:23 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81ae452c>] (__schedule) from [<81ae5938>] (__schedule_loop kernel/sched/core.c:6989 [inline]) [<81ae452c>] (__schedule) from [<81ae5938>] (schedule+0x2c/0x134 kernel/sched/core.c:7004) r10:df879da4 r9:00000002 r8:60000013 r7:df879dac r6:82917c84 r5:8316a400 r4:8316a400 [<81ae590c>] (schedule) from [<81ae5ac4>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7061) r5:8316a400 r4:82917c80 [<81ae5aac>] (schedule_preempt_disabled) from [<81ae8a0c>] (__mutex_lock_common kernel/locking/mutex.c:692 [inline]) [<81ae5aac>] (schedule_preempt_disabled) from [<81ae8a0c>] (__mutex_lock.constprop.0+0x480/0x9cc kernel/locking/mutex.c:776) [<81ae858c>] (__mutex_lock.constprop.0) from [<81ae902c>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1065) r10:8280c82c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:df879e28 r4:00000000 [<81ae9018>] (__mutex_lock_slowpath) from [<81ae906c>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:290) [<81ae9030>] (mutex_lock) from [<804fc3b8>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2957) [<804fc35c>] (_vm_unmap_aliases) from [<8050020c>] (vm_reset_perms mm/vmalloc.c:3388 [inline]) [<804fc35c>] (_vm_unmap_aliases) from [<8050020c>] (vfree+0x16c/0x210 mm/vmalloc.c:3467) r10:8302ae05 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:86281bc0 r4:00000000 [<805000a0>] (vfree) from [<8056e134>] (execmem_free+0x30/0x50 mm/execmem.c:503) r9:8316a400 r8:01800000 r7:00000000 r6:8302ae00 r5:00001000 r4:7f26c000 [<8056e104>] (execmem_free) from [<803ce4e4>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1072) r5:00001000 r4:eae43000 [<803ce4d4>] (bpf_jit_free_exec) from [<803ce8c4>] (bpf_jit_binary_free kernel/bpf/core.c:1118 [inline]) [<803ce4d4>] (bpf_jit_free_exec) from [<803ce8c4>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1241) [<803ce860>] (bpf_jit_free) from [<803cf7f8>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:2942) r5:859e8394 r4:859e8394 [<803cf6b0>] (bpf_prog_free_deferred) from [<8027664c>] (process_one_work+0x1b8/0x58c kernel/workqueue.c:3275) r7:ddde4d80 r6:8302ae00 r5:859e8394 r4:830f1000 [<80276494>] (process_one_work) from [<80277410>] (process_scheduled_works kernel/workqueue.c:3358 [inline]) [<80276494>] (process_one_work) from [<80277410>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3439) r10:ddde4d80 r9:830f102c r8:8316a400 r7:82804d80 r6:ddde4da0 r5:ddde4d80 r4:830f1000 [<802772a4>] (worker_thread) from [<8027f6d8>] (kthread+0x118/0x138 kernel/kthread.c:467) r10:00000000 r9:830f1000 r8:802772a4 r7:df819d20 r6:8316a400 r5:830f0f80 r4:830fb680 [<8027f5c0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf879fb0 to 0xdf879ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8027f5c0 r4:830fb680 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:600e0193 r6:600e0193 r5:822a7808 r4:00000000 [<80201af0>] (show_stack) from [<8021e45c>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201af0>] (show_stack) from [<8021e45c>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120) [<8021e400>] (dump_stack_lvl) from [<8021e488>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r7:00000000 r6:000e0113 r5:00000001 r4:00000001 [<8021e470>] (dump_stack) from [<81acdf5c>] (nmi_cpu_backtrace+0x150/0x170 lib/nmi_backtrace.c:113) [<81acde0c>] (nmi_cpu_backtrace) from [<81ace0ac>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:8280c550 r5:8281afb8 r4:ffffffff [<81acdf7c>] (nmi_trigger_cpumask_backtrace) from [<8022f124>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852) r9:8281bca0 r8:8280c6d8 r7:82804d80 r6:00007f2d r5:82ac782c r4:00000048 [<8022f10c>] (arch_trigger_cpumask_backtrace) from [<81ad5b9c>] (trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline]) [<8022f10c>] (arch_trigger_cpumask_backtrace) from [<81ad5b9c>] (__sys_info lib/sys_info.c:157 [inline]) [<8022f10c>] (arch_trigger_cpumask_backtrace) from [<81ad5b9c>] (sys_info+0x68/0xa8 lib/sys_info.c:165) [<81ad5b34>] (sys_info) from [<80384770>] (check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]) [<81ad5b34>] (sys_info) from [<80384770>] (watchdog+0x598/0x8d4 kernel/hung_task.c:515) r5:82ac782c r4:83982614 [<803841d8>] (watchdog) from [<8027f6d8>] (kthread+0x118/0x138 kernel/kthread.c:467) r10:00000000 r9:00000000 r8:803841d8 r7:df819e60 r6:831e8000 r5:830ef580 r4:83329c00 [<8027f5c0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8d5fb0 to 0xdf8d5ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8027f5c0 r4:83329c00 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 8957 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Workqueue: wg-crypt-wg0 wg_packet_tx_worker PC is at kmem_cache_alloc_node_noprof+0x0/0x3c8 mm/slub.c:4881 LR is at kmalloc_reserve+0xc4/0x12c net/core/skbuff.c:613 pc : [<8052212c>] lr : [<815ce114>] psr: 600f0013 sp : df801ac8 ip : 00000140 fp : df801af4 r10: 00082820 r9 : 815d2d54 r8 : 868636c0 r7 : 82805f40 r6 : ffffffff r5 : 00000820 r4 : df801afc r3 : 00400010 r2 : ffffffff r1 : 00082820 r0 : 830d5800 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 84f697c0 DAC: fffffffd Call trace: frame pointer underflow [<815ce050>] (kmalloc_reserve) from [<815d2be0>] (__alloc_skb+0xb0/0x2c0 net/core/skbuff.c:713) r10:86b02480 r9:815d2d54 r8:00000820 r7:00000000 r6:830d5780 r5:ffffffff r4:868636c0 r3:868636c0 [<815d2b30>] (__alloc_skb) from [<81755610>] (alloc_skb include/linux/skbuff.h:1383 [inline]) [<815d2b30>] (__alloc_skb) from [<81755610>] (synproxy_send_client_synack+0x7c/0x1f8 net/netfilter/nf_synproxy_core.c:461) r9:86b025a2 r8:df801b90 r7:8686acc0 r6:0000010e r5:00000000 r4:8686acc0 [<81755594>] (synproxy_send_client_synack) from [<81790e68>] (nft_synproxy_eval_v4 net/netfilter/nft_synproxy.c:60 [inline]) [<81755594>] (synproxy_send_client_synack) from [<81790e68>] (nft_synproxy_do_eval+0x2bc/0x37c net/netfilter/nft_synproxy.c:142) r10:81e72fd0 r9:86b025a2 r8:86c80500 r7:865550d8 r6:df801c5c r5:85ec0000 r4:8686acc0 [<81790bac>] (nft_synproxy_do_eval) from [<81790f54>] (nft_synproxy_eval+0x14/0x18 net/netfilter/nft_synproxy.c:248) r9:865550c8 r8:81e73290 r7:81e72f8c r6:865550e0 r5:81e730e4 r4:865550d0 [<81790f40>] (nft_synproxy_eval) from [<81758764>] (expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline]) [<81790f40>] (nft_synproxy_eval) from [<81758764>] (nft_do_chain+0x130/0x57c net/netfilter/nf_tables_core.c:285) [<81758634>] (nft_do_chain) from [<817726dc>] (nft_do_chain_inet+0x54/0x124 net/netfilter/nft_chain_filter.c:161) r10:81e6d482 r9:84dd4520 r8:df801d5c r7:8686acc0 r6:84dd4500 r5:00000004 r4:8687e940 [<81772688>] (nft_do_chain_inet) from [<8171e7e4>] (nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]) [<81772688>] (nft_do_chain_inet) from [<8171e7e4>] (nf_hook_slow+0x44/0x104 net/netfilter/core.c:623) r4:00000001 [<8171e7a0>] (nf_hook_slow) from [<817b5940>] (nf_hook include/linux/netfilter.h:273 [inline]) [<8171e7a0>] (nf_hook_slow) from [<817b5940>] (NF_HOOK include/linux/netfilter.h:316 [inline]) [<8171e7a0>] (nf_hook_slow) from [<817b5940>] (ip_local_deliver+0xcc/0x10c net/ipv4/ip_input.c:262) r10:dddd2360 r9:dddd2248 r8:00000040 r7:00000000 r6:85ec0000 r5:85b7b800 r4:8686acc0 r3:00000000 [<817b5874>] (ip_local_deliver) from [<817b4a00>] (dst_input include/net/dst.h:480 [inline]) [<817b5874>] (ip_local_deliver) from [<817b4a00>] (ip_rcv_finish+0x98/0xb0 net/ipv4/ip_input.c:453) r6:85b7b800 r5:85ec0000 r4:8686acc0 [<817b4968>] (ip_rcv_finish) from [<817b59d0>] (NF_HOOK include/linux/netfilter.h:318 [inline]) [<817b4968>] (ip_rcv_finish) from [<817b59d0>] (NF_HOOK include/linux/netfilter.h:312 [inline]) [<817b4968>] (ip_rcv_finish) from [<817b59d0>] (ip_rcv+0x50/0xec net/ipv4/ip_input.c:573) r7:00000000 r6:85ec0000 r5:85b7b800 r4:8686acc0 [<817b5980>] (ip_rcv) from [<815fb6e4>] (__netif_receive_skb_one_core+0x60/0x84 net/core/dev.c:6156) r6:00000000 r5:817b5980 r4:85b7b800 [<815fb684>] (__netif_receive_skb_one_core) from [<815fb750>] (__netif_receive_skb+0x18/0x5c net/core/dev.c:6269) r5:00000022 r4:833d5540 [<815fb738>] (__netif_receive_skb) from [<815fbaac>] (process_backlog+0xa0/0x17c net/core/dev.c:6621) r5:00000022 r4:833d5540 [<815fba0c>] (process_backlog) from [<815fc2a0>] (__napi_poll+0x34/0x270 net/core/dev.c:7685) r10:df801ed0 r9:00000000 r8:0000012c r7:00000040 r6:df801ecb r5:dddd2360 r4:00000001 [<815fc26c>] (__napi_poll) from [<815fc838>] (napi_poll net/core/dev.c:7748 [inline]) [<815fc26c>] (__napi_poll) from [<815fc838>] (net_rx_action+0x35c/0x3e8 net/core/dev.c:7900) r9:00000000 r8:0000012c r7:dddd2360 r6:dddd2364 r5:dddd2240 r4:ffffffff [<815fc4dc>] (net_rx_action) from [<8025a184>] (handle_softirqs+0x15c/0x4ec kernel/softirq.c:622) r10:00000101 r9:85e4d400 r8:0000000c r7:00000003 r6:00000002 r5:00000022 r4:8280408c [<8025a028>] (handle_softirqs) from [<802012f0>] (__do_softirq+0x14/0x18 kernel/softirq.c:656) r10:00000000 r9:85e4d400 r8:850d9000 r7:860c2100 r6:860c1f10 r5:00000001 r4:600f0013 [<802012dc>] (__do_softirq) from [<802272b8>] (____do_softirq+0x10/0x14 arch/arm/kernel/irq.c:77) [<802272a8>] (____do_softirq) from [<81aafc84>] (call_with_stack+0x1c/0x20 arch/arm/lib/call_with_stack.S:40) [<81aafc68>] (call_with_stack) from [<802272f4>] (do_softirq_own_stack+0x38/0x3c arch/arm/kernel/irq.c:82) [<802272bc>] (do_softirq_own_stack) from [<8025a804>] (do_softirq kernel/softirq.c:523 [inline]) [<802272bc>] (do_softirq_own_stack) from [<8025a804>] (do_softirq+0x5c/0x64 kernel/softirq.c:510) [<8025a7a8>] (do_softirq) from [<8025a8d8>] (__local_bh_enable_ip+0xcc/0xd0 kernel/softirq.c:450) r5:00000001 r4:85e4d400 [<8025a80c>] (__local_bh_enable_ip) from [<80d61948>] (local_bh_enable include/linux/bottom_half.h:33 [inline]) [<8025a80c>] (__local_bh_enable_ip) from [<80d61948>] (rcu_read_unlock_bh include/linux/rcupdate.h:924 [inline]) [<8025a80c>] (__local_bh_enable_ip) from [<80d61948>] (keep_key_fresh drivers/net/wireguard/send.c:135 [inline]) [<8025a80c>] (__local_bh_enable_ip) from [<80d61948>] (wg_packet_create_data_done drivers/net/wireguard/send.c:259 [inline]) [<8025a80c>] (__local_bh_enable_ip) from [<80d61948>] (wg_packet_tx_worker+0xf8/0x1a4 drivers/net/wireguard/send.c:276) r5:7aae5400 r4:00000195 [<80d61850>] (wg_packet_tx_worker) from [<8027664c>] (process_one_work+0x1b8/0x58c kernel/workqueue.c:3275) r10:85362c05 r9:85e4d400 r8:00800000 r7:dddd0d80 r6:85362c00 r5:860c2100 r4:84f6e680 r3:80d61850 [<80276494>] (process_one_work) from [<80277410>] (process_scheduled_works kernel/workqueue.c:3358 [inline]) [<80276494>] (process_one_work) from [<80277410>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3439) r10:dddd0d80 r9:84f6e6ac r8:85e4d400 r7:82804d80 r6:dddd0da0 r5:dddd0d80 r4:84f6e680 [<802772a4>] (worker_thread) from [<8027f6d8>] (kthread+0x118/0x138 kernel/kthread.c:467) r10:00000000 r9:84f6e680 r8:802772a4 r7:ebb49e88 r6:85e4d400 r5:86130900 r4:84d3d380 [<8027f5c0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfa2dfb0 to 0xdfa2dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8027f5c0 r4:84d3d380