INFO: task kworker/0:40:5420 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:40 state:D stack:0 pid:5420 tgid:5420 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b5537c>] (__schedule) from [<81b56814>] (__schedule_loop kernel/sched/core.c:7307 [inline]) [<81b5537c>] (__schedule) from [<81b56814>] (schedule+0x2c/0x134 kernel/sched/core.c:7322) r10:e013dda4 r9:e013ddac r8:00000002 r7:60000013 r6:82cd7e0c r5:85453100 r4:85453100 [<81b567e8>] (schedule) from [<81b569a0>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7379) r5:85453100 r4:82cd7e08 [<81b56988>] (schedule_preempt_disabled) from [<81b59b18>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b56988>] (schedule_preempt_disabled) from [<81b59b18>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b5960c>] (__mutex_lock.constprop.0) from [<81b5a128>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:e013de28 r4:85ee16c0 [<81b5a114>] (__mutex_lock_slowpath) from [<81b5a168>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b5a12c>] (mutex_lock) from [<8051e2c4>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2951) [<8051e268>] (_vm_unmap_aliases) from [<80522054>] (vm_reset_perms mm/vmalloc.c:3382 [inline]) [<8051e268>] (_vm_unmap_aliases) from [<80522054>] (vfree+0x110/0x17c mm/vmalloc.c:3486) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:85ee16c0 [<80521f44>] (vfree) from [<80598910>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:85453100 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f04d000 [<805988e0>] (execmem_free) from [<803dc870>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1070) r5:00001000 r4:dfbcf000 [<803dc860>] (bpf_jit_free_exec) from [<803dcc50>] (bpf_jit_binary_free kernel/bpf/core.c:1116 [inline]) [<803dc860>] (bpf_jit_free_exec) from [<803dcc50>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1239) [<803dcbec>] (bpf_jit_free) from [<803ddd28>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3050) r5:84ed9398 r4:84ed9398 [<803ddbe0>] (bpf_prog_free_deferred) from [<802761d0>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd0f00 r6:8302b000 r5:84ed9398 r4:85c22100 [<80276008>] (process_one_work) from [<80276e7c>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<80276008>] (process_one_work) from [<80276e7c>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:85c22130 r8:85453100 r7:82a03d80 r6:dddd0f20 r5:dddd0f00 r4:85c22100 [<80276d10>] (worker_thread) from [<802816f8>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfcd9e88 r8:85d14180 r7:85c22100 r6:80276d10 r5:85453100 r4:85c31300 [<802815dc>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe013dfb0 to 0xe013dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802815dc r4:85c31300 INFO: task kworker/0:40:5420 is blocked on a mutex likely owned by task kworker/0:228:6697. task:kworker/0:228 state:R running task stack:0 pid:6697 tgid:6697 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b5537c>] (__schedule) from [<81b56c4c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7552) r10:82a0b498 r9:862424c0 r8:80200c04 r7:eaa31d7c r6:ffffffff r5:862424c0 r4:00000000 [<81b56c0c>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeaa31d48 to 0xeaa31d90) 1d40: a5bb6000 edc6b000 00000000 80238790 82cd71a0 82cd7de4 1d60: 7f08f000 edc6b000 00000000 00000001 82a0b498 eaa31dbc edc6b000 eaa31d98 1d80: 8022f6d0 802387a8 80000113 ffffffff r5:80000113 r4:802387a8 [<8022f670>] (flush_tlb_kernel_range) from [<8051e078>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2376) [<8051ddec>] (__purge_vmap_area_lazy) from [<8051e450>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:2990) r10:00000000 r9:eaa31de0 r8:00000000 r7:ffffffff r6:00000008 r5:eaa31e28 r4:eaa31de0 [<8051e268>] (_vm_unmap_aliases) from [<80522054>] (vm_reset_perms mm/vmalloc.c:3382 [inline]) [<8051e268>] (_vm_unmap_aliases) from [<80522054>] (vfree+0x110/0x17c mm/vmalloc.c:3486) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:861c3f00 [<80521f44>] (vfree) from [<80598910>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:862424c0 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f04b000 [<805988e0>] (execmem_free) from [<803dc870>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1070) r5:00001000 r4:dfb51000 [<803dc860>] (bpf_jit_free_exec) from [<803dcc50>] (bpf_jit_binary_free kernel/bpf/core.c:1116 [inline]) [<803dc860>] (bpf_jit_free_exec) from [<803dcc50>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1239) [<803dcbec>] (bpf_jit_free) from [<803ddd28>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3050) r5:864b1f98 r4:864b1f98 [<803ddbe0>] (bpf_prog_free_deferred) from [<802761d0>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd0f00 r6:8302b000 r5:864b1f98 r4:865a9f00 [<80276008>] (process_one_work) from [<80276e7c>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<80276008>] (process_one_work) from [<80276e7c>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd0f00 r9:865a9f30 r8:862424c0 r7:82a03d80 r6:dddd0f20 r5:dddd0f00 r4:865a9f00 [<80276d10>] (worker_thread) from [<802816f8>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eaaa1e88 r8:865a9e80 r7:865a9f00 r6:80276d10 r5:862424c0 r4:8555e980 [<802815dc>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeaa31fb0 to 0xeaa31ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802815dc r4:8555e980 INFO: task kworker/0:231:6718 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:231 state:D stack:0 pid:6718 tgid:6718 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b5537c>] (__schedule) from [<81b56814>] (__schedule_loop kernel/sched/core.c:7307 [inline]) [<81b5537c>] (__schedule) from [<81b56814>] (schedule+0x2c/0x134 kernel/sched/core.c:7322) r10:eaa79da4 r9:eaa79dac r8:00000002 r7:60000013 r6:82cd7e0c r5:86249880 r4:86249880 [<81b567e8>] (schedule) from [<81b569a0>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7379) r5:86249880 r4:82cd7e08 [<81b56988>] (schedule_preempt_disabled) from [<81b59b18>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81b56988>] (schedule_preempt_disabled) from [<81b59b18>] (__mutex_lock.constprop.0+0x50c/0xa48 kernel/locking/mutex.c:821) [<81b5960c>] (__mutex_lock.constprop.0) from [<81b5a128>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:82a0b444 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:eaa79e28 r4:865baec0 [<81b5a114>] (__mutex_lock_slowpath) from [<81b5a168>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81b5a12c>] (mutex_lock) from [<8051e2c4>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2951) [<8051e268>] (_vm_unmap_aliases) from [<80522054>] (vm_reset_perms mm/vmalloc.c:3382 [inline]) [<8051e268>] (_vm_unmap_aliases) from [<80522054>] (vfree+0x110/0x17c mm/vmalloc.c:3486) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:865baec0 [<80521f44>] (vfree) from [<80598910>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:86249880 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f04f000 [<805988e0>] (execmem_free) from [<803dc870>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1070) r5:00001000 r4:dfd2f000 [<803dc860>] (bpf_jit_free_exec) from [<803dcc50>] (bpf_jit_binary_free kernel/bpf/core.c:1116 [inline]) [<803dc860>] (bpf_jit_free_exec) from [<803dcc50>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1239) [<803dcbec>] (bpf_jit_free) from [<803ddd28>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3050) r5:8620db98 r4:8620db98 [<803ddbe0>] (bpf_prog_free_deferred) from [<802761d0>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd0f00 r6:8302b000 r5:8620db98 r4:865a9d80 [<80276008>] (process_one_work) from [<80276e7c>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<80276008>] (process_one_work) from [<80276e7c>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:00000000 r9:865a9db0 r8:86249880 r7:82a03d80 r6:dddd0f20 r5:dddd0f00 r4:865a9d80 [<80276d10>] (worker_thread) from [<802816f8>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eaa39e88 r8:831dfd80 r7:865a9d80 r6:80276d10 r5:86249880 r4:865baa00 [<802815dc>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeaa79fb0 to 0xeaa79ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802815dc r4:865baa00 INFO: task kworker/0:231:6718 is blocked on a mutex likely owned by task kworker/0:228:6697. task:kworker/0:228 state:R running task stack:0 pid:6697 tgid:6697 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81b5537c>] (__schedule) from [<81b56c4c>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7552) r10:82a0b498 r9:862424c0 r8:80200c04 r7:eaa31d7c r6:ffffffff r5:862424c0 r4:00000000 [<81b56c0c>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xeaa31d48 to 0xeaa31d90) 1d40: a5bb6000 edc6b000 00000000 80238790 82cd71a0 82cd7de4 1d60: 7f08f000 edc6b000 00000000 00000001 82a0b498 eaa31dbc edc6b000 eaa31d98 1d80: 8022f6d0 802387a8 80000113 ffffffff r5:80000113 r4:802387a8 [<8022f670>] (flush_tlb_kernel_range) from [<8051e078>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2376) [<8051ddec>] (__purge_vmap_area_lazy) from [<8051e450>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:2990) r10:00000000 r9:eaa31de0 r8:00000000 r7:ffffffff r6:00000008 r5:eaa31e28 r4:eaa31de0 [<8051e268>] (_vm_unmap_aliases) from [<80522054>] (vm_reset_perms mm/vmalloc.c:3382 [inline]) [<8051e268>] (_vm_unmap_aliases) from [<80522054>] (vfree+0x110/0x17c mm/vmalloc.c:3486) r10:8302b005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:00000000 r4:861c3f00 [<80521f44>] (vfree) from [<80598910>] (execmem_free+0x30/0x50 mm/execmem.c:506) r9:862424c0 r8:00800000 r7:00000000 r6:8302b000 r5:00001000 r4:7f04b000 [<805988e0>] (execmem_free) from [<803dc870>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1070) r5:00001000 r4:dfb51000 [<803dc860>] (bpf_jit_free_exec) from [<803dcc50>] (bpf_jit_binary_free kernel/bpf/core.c:1116 [inline]) [<803dc860>] (bpf_jit_free_exec) from [<803dcc50>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1239) [<803dcbec>] (bpf_jit_free) from [<803ddd28>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3050) r5:864b1f98 r4:864b1f98 [<803ddbe0>] (bpf_prog_free_deferred) from [<802761d0>] (process_one_work+0x1c8/0x580 kernel/workqueue.c:3322) r7:dddd0f00 r6:8302b000 r5:864b1f98 r4:865a9f00 [<80276008>] (process_one_work) from [<80276e7c>] (process_scheduled_works kernel/workqueue.c:3405 [inline]) [<80276008>] (process_one_work) from [<80276e7c>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3486) r10:dddd0f00 r9:865a9f30 r8:862424c0 r7:82a03d80 r6:dddd0f20 r5:dddd0f00 r4:865a9f00 [<80276d10>] (worker_thread) from [<802816f8>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:eaaa1e88 r8:865a9e80 r7:865a9f00 r6:80276d10 r5:862424c0 r4:8555e980 [<802815dc>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeaa31fb0 to 0xeaa31ff8) 1fa0: 00000000 00000000 00000000 00000000 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802815dc r4:8555e980 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:600f0093 r6:600f0093 r5:82331c70 r4:00000000 [<80201a74>] (show_stack) from [<8021e5d4>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201a74>] (show_stack) from [<8021e5d4>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120) [<8021e578>] (dump_stack_lvl) from [<8021e600>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r7:00000000 r6:000f0013 r5:00000001 r4:00000001 [<8021e5e8>] (dump_stack) from [<81b3ea1c>] (nmi_cpu_backtrace+0x150/0x170 lib/nmi_backtrace.c:122) [<81b3e8cc>] (nmi_cpu_backtrace) from [<81b3eb70>] (nmi_trigger_cpumask_backtrace+0x134/0x208 lib/nmi_backtrace.c:65) r7:82a0b150 r6:833f1880 r5:82a1c7b8 r4:ffffffff [<81b3ea3c>] (nmi_trigger_cpumask_backtrace) from [<8022f0f4>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:82a0b2f0 r8:00000002 r7:82a1ce80 r6:82ccae2c r5:00007752 r4:00000048 [<8022f0dc>] (arch_trigger_cpumask_backtrace) from [<81b466ac>] (trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]) [<8022f0dc>] (arch_trigger_cpumask_backtrace) from [<81b466ac>] (__sys_info lib/sys_info.c:157 [inline]) [<8022f0dc>] (arch_trigger_cpumask_backtrace) from [<81b466ac>] (sys_info+0x68/0xa8 lib/sys_info.c:165) [<81b46644>] (sys_info) from [<8038f884>] (check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]) [<81b46644>] (sys_info) from [<8038f884>] (watchdog+0x3a0/0x848 kernel/hung_task.c:561) r5:00007752 r4:0000000a [<8038f4e4>] (watchdog) from [<802816f8>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df819e60 r8:831e0880 r7:00000000 r6:8038f4e4 r5:833f1880 r4:83328ec0 [<802815dc>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8d5fb0 to 0xdf8d5ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802815dc r4:83328ec0 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 2824 Comm: pr/ttyAMA-1 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline] PC is at _raw_spin_unlock_irqrestore+0x28/0x54 kernel/locking/spinlock.c:198 LR is at spin_unlock_irqrestore include/linux/spinlock.h:408 [inline] LR is at __uart_port_unlock_irqrestore include/linux/serial_core.h:618 [inline] LR is at pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2700 pc : [<81b5fd24>] lr : [<80afe724>] psr: 60000113 sp : eb455ec8 ip : eb455ed8 fp : eb455ed4 r10: 82b5cd1c r9 : 00000000 r8 : 00000000 r7 : 00000117 r6 : 82b5cc80 r5 : 00000000 r4 : 00000001 r3 : 00000862 r2 : 00000000 r1 : 60000113 r0 : 8470fc40 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 85c8e600 DAC: fffffffd Call trace: [<81b5fcfc>] (_raw_spin_unlock_irqrestore) from [<80afe724>] (spin_unlock_irqrestore include/linux/spinlock.h:408 [inline]) [<81b5fcfc>] (_raw_spin_unlock_irqrestore) from [<80afe724>] (__uart_port_unlock_irqrestore include/linux/serial_core.h:618 [inline]) [<81b5fcfc>] (_raw_spin_unlock_irqrestore) from [<80afe724>] (pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2700) [<80afe704>] (pl011_console_device_unlock) from [<802ec168>] (nbcon_emit_one+0x88/0x100 kernel/printk/nbcon.c:1165) [<802ec0e0>] (nbcon_emit_one) from [<802ec3e8>] (nbcon_kthread_func+0x208/0x2ec kernel/printk/nbcon.c:1271) r6:82cc72ec r5:82b5cc80 r4:8548b100 [<802ec1e0>] (nbcon_kthread_func) from [<802816f8>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df931b38 r8:84692d80 r7:82b5cc80 r6:802ec1e0 r5:8548b100 r4:83aaf5c0 [<802815dc>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeb455fb0 to 0xeb455ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802815dc r4:83aaf5c0