INFO: task kworker/1:5:5055 blocked for more than 430 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:5 state:D stack:0 pid:5055 tgid:5055 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81ae742c>] (__schedule) from [<81ae8840>] (__schedule_loop kernel/sched/core.c:6990 [inline]) [<81ae742c>] (__schedule) from [<81ae8840>] (schedule+0x2c/0x134 kernel/sched/core.c:7005) r10:dfb15da4 r9:00000002 r8:60000013 r7:dfb15dac r6:82917cc4 r5:83fba400 r4:83fba400 [<81ae8814>] (schedule) from [<81ae89cc>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7062) r5:83fba400 r4:82917cc0 [<81ae89b4>] (schedule_preempt_disabled) from [<81aeb914>] (__mutex_lock_common kernel/locking/mutex.c:692 [inline]) [<81ae89b4>] (schedule_preempt_disabled) from [<81aeb914>] (__mutex_lock.constprop.0+0x480/0x9cc kernel/locking/mutex.c:776) [<81aeb494>] (__mutex_lock.constprop.0) from [<81aebf34>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1065) r10:8280c82c r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:dfb15e28 r4:00000000 [<81aebf20>] (__mutex_lock_slowpath) from [<81aebf74>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:290) [<81aebf38>] (mutex_lock) from [<804fcfdc>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2957) [<804fcf80>] (_vm_unmap_aliases) from [<80500dd4>] (vm_reset_perms mm/vmalloc.c:3388 [inline]) [<804fcf80>] (_vm_unmap_aliases) from [<80500dd4>] (vfree+0x16c/0x210 mm/vmalloc.c:3467) r10:8302ae05 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:86314b80 r4:00000000 [<80500c68>] (vfree) from [<8056edd4>] (execmem_free+0x30/0x50 mm/execmem.c:503) r9:83fba400 r8:01800000 r7:00000000 r6:8302ae00 r5:00001000 r4:7f24e000 [<8056eda4>] (execmem_free) from [<803cee20>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1071) r5:00001000 r4:ea5b7000 [<803cee10>] (bpf_jit_free_exec) from [<803cf200>] (bpf_jit_binary_free kernel/bpf/core.c:1117 [inline]) [<803cee10>] (bpf_jit_free_exec) from [<803cf200>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1240) [<803cf19c>] (bpf_jit_free) from [<803d0134>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:2941) r5:84f30b94 r4:84f30b94 [<803cffec>] (bpf_prog_free_deferred) from [<8027666c>] (process_one_work+0x1b8/0x58c kernel/workqueue.c:3275) r7:ddde4d80 r6:8302ae00 r5:84f30b94 r4:85b89b80 [<802764b4>] (process_one_work) from [<80277430>] (process_scheduled_works kernel/workqueue.c:3358 [inline]) [<802764b4>] (process_one_work) from [<80277430>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3439) r10:00000000 r9:85b89bac r8:83fba400 r7:82804d80 r6:ddde4da0 r5:ddde4d80 r4:85b89b80 [<802772c4>] (worker_thread) from [<802813f4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df9a1e88 r8:85b8ae00 r7:85b89b80 r6:802772c4 r5:83fba400 r4:86101b80 [<802812d8>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfb15fb0 to 0xdfb15ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802812d8 r4:86101b80 INFO: task kworker/1:5:5055 is blocked on a mutex likely owned by task kworker/1:8:7672. task:kworker/1:8 state:R running task stack:0 pid:7672 tgid:7672 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81ae742c>] (__schedule) from [<81ae8c78>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7235) r10:8280c880 r9:84795400 r8:80200c04 r7:dfa85d7c r6:ffffffff r5:84795400 r4:00000000 [<81ae8c38>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xdfa85d48 to 0xdfa85d90) 5d40: b7ec8000 ea561000 00000000 802387d0 82ad3620 82ad4264 5d60: 7f24a000 ea561000 00000000 00000001 8280c880 dfa85dbc ea561000 dfa85d98 5d80: 8022f700 802387e8 80000013 ffffffff r5:80000013 r4:802387e8 [<8022f6a0>] (flush_tlb_kernel_range) from [<804fcd8c>] (__purge_vmap_area_lazy+0x298/0x48c mm/vmalloc.c:2382) [<804fcaf4>] (__purge_vmap_area_lazy) from [<804fd168>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:2996) r10:00000000 r9:dfa85de0 r8:00000000 r7:ffffffff r6:00000008 r5:dfa85e28 r4:dfa85de0 [<804fcf80>] (_vm_unmap_aliases) from [<80500dd4>] (vm_reset_perms mm/vmalloc.c:3388 [inline]) [<804fcf80>] (_vm_unmap_aliases) from [<80500dd4>] (vfree+0x16c/0x210 mm/vmalloc.c:3467) r10:8302ae05 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:876cdac0 r4:00000000 [<80500c68>] (vfree) from [<8056edd4>] (execmem_free+0x30/0x50 mm/execmem.c:503) r9:84795400 r8:01800000 r7:00000000 r6:8302ae00 r5:00001000 r4:7f24c000 [<8056eda4>] (execmem_free) from [<803cee20>] (bpf_jit_free_exec+0x10/0x14 kernel/bpf/core.c:1071) r5:00001000 r4:e0353000 [<803cee10>] (bpf_jit_free_exec) from [<803cf200>] (bpf_jit_binary_free kernel/bpf/core.c:1117 [inline]) [<803cee10>] (bpf_jit_free_exec) from [<803cf200>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1240) [<803cf19c>] (bpf_jit_free) from [<803d0134>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:2941) r5:85ca4b94 r4:85ca4b94 [<803cffec>] (bpf_prog_free_deferred) from [<8027666c>] (process_one_work+0x1b8/0x58c kernel/workqueue.c:3275) r7:ddde4d80 r6:8302ae00 r5:85ca4b94 r4:86095480 [<802764b4>] (process_one_work) from [<80277430>] (process_scheduled_works kernel/workqueue.c:3358 [inline]) [<802764b4>] (process_one_work) from [<80277430>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3439) r10:00000000 r9:860954ac r8:84795400 r7:82804d80 r6:ddde4da0 r5:ddde4d80 r4:86095480 [<802772c4>] (worker_thread) from [<802813f4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e00fde88 r8:863bbe80 r7:86095480 r6:802772c4 r5:84795400 r4:85fd3a00 [<802812d8>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfa85fb0 to 0xdfa85ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802812d8 r4:85fd3a00 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Call trace: [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:60000193 r6:60000193 r5:822a7e2c r4:00000000 [<80201af0>] (show_stack) from [<8021e444>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201af0>] (show_stack) from [<8021e444>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120) [<8021e3e8>] (dump_stack_lvl) from [<8021e470>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r7:00000000 r6:00000113 r5:00000001 r4:00000001 [<8021e458>] (dump_stack) from [<81ad0e5c>] (nmi_cpu_backtrace+0x150/0x170 lib/nmi_backtrace.c:113) [<81ad0d0c>] (nmi_cpu_backtrace) from [<81ad0fac>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62) r7:00000001 r6:8280c550 r5:8281afb8 r4:ffffffff [<81ad0e7c>] (nmi_trigger_cpumask_backtrace) from [<8022f124>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:852) r9:8281bca0 r8:8280c6d8 r7:82804d80 r6:00007f1f r5:82ac7834 r4:00000048 [<8022f10c>] (arch_trigger_cpumask_backtrace) from [<81ad8a9c>] (trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline]) [<8022f10c>] (arch_trigger_cpumask_backtrace) from [<81ad8a9c>] (__sys_info lib/sys_info.c:157 [inline]) [<8022f10c>] (arch_trigger_cpumask_backtrace) from [<81ad8a9c>] (sys_info+0x68/0xa8 lib/sys_info.c:165) [<81ad8a34>] (sys_info) from [<80384f44>] (check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]) [<81ad8a34>] (sys_info) from [<80384f44>] (watchdog+0x598/0x8d4 kernel/hung_task.c:515) r5:82ac7834 r4:845b0b14 [<803849ac>] (watchdog) from [<802813f4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df819e60 r8:83103500 r7:00000000 r6:803849ac r5:831f8000 r4:8333dc00 [<802812d8>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8d5fb0 to 0xdf8d5ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802812d8 r4:8333dc00 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 2805 Comm: pr/ttyAMA-1 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at ipt_do_table+0x3c8/0x80c net/ipv4/netfilter/ip_tables.c:305 LR is at debug_smp_processor_id+0x20/0x24 lib/smp_processor_id.c:58 pc : [<8185e200>] lr : [<81ae4794>] psr: a0070113 sp : df801978 ip : df801968 fp : df801a44 r10: 833cb300 r9 : 81e7a3f4 r8 : 85da48d8 r7 : 86a35240 r6 : 87b91c00 r5 : 87b91de0 r4 : 87b91d70 r3 : 828183ac r2 : 00000000 r1 : 00000028 r0 : 00000000 Flags: NzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 87817fc0 DAC: fffffffd Call trace: frame pointer underflow [<8185de38>] (ipt_do_table) from [<817211bc>] (nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]) [<8185de38>] (ipt_do_table) from [<817211bc>] (nf_hook_slow+0x44/0x104 net/netfilter/core.c:623) r10:81e6d632 r9:86d35230 r8:df801a7c r7:86a35240 r6:86d35200 r5:00000006 r4:00000001 [<81721178>] (nf_hook_slow) from [<817beaac>] (nf_hook include/linux/netfilter.h:273 [inline]) [<81721178>] (nf_hook_slow) from [<817beaac>] (__ip_local_out+0x164/0x1ac net/ipv4/ip_output.c:120) r10:861c4580 r9:861c4594 r8:df801b60 r7:85da4800 r6:00000000 r5:84f02080 r4:86a35240 r3:00000000 [<817be948>] (__ip_local_out) from [<817beb10>] (ip_local_out+0x1c/0x44 net/ipv4/ip_output.c:129) r7:852cea01 r6:00000000 r5:84f02080 r4:86a35240 [<817beaf4>] (ip_local_out) from [<81757818>] (synproxy_send_tcp+0x120/0x18c net/netfilter/nf_synproxy_core.c:440) r7:852cea01 r6:84f02080 r5:86a12400 r4:86a35240 [<817576f8>] (synproxy_send_tcp) from [<817580fc>] (synproxy_send_client_synack+0x1a0/0x1f8 net/netfilter/nf_synproxy_core.c:485) r7:853e9840 r6:833cb314 r5:00000005 r4:86a35240 [<81757f5c>] (synproxy_send_client_synack) from [<81793a60>] (nft_synproxy_eval_v4 net/netfilter/nft_synproxy.c:60 [inline]) [<81757f5c>] (synproxy_send_client_synack) from [<81793a60>] (nft_synproxy_do_eval+0x2bc/0x37c net/netfilter/nft_synproxy.c:142) r10:81e73180 r9:861c4594 r8:86106300 r7:8600e0d8 r6:df801c2c r5:84f02080 r4:853e9840 [<817937a4>] (nft_synproxy_do_eval) from [<81793b4c>] (nft_synproxy_eval+0x14/0x18 net/netfilter/nft_synproxy.c:248) r9:8600e0c8 r8:81e73440 r7:81e7313c r6:8600e0e0 r5:81e73294 r4:8600e0d0 [<81793b38>] (nft_synproxy_eval) from [<8175b12c>] (expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline]) [<81793b38>] (nft_synproxy_eval) from [<8175b12c>] (nft_do_chain+0x130/0x57c net/netfilter/nf_tables_core.c:285) [<8175affc>] (nft_do_chain) from [<8177516c>] (nft_do_chain_inet+0x54/0x124 net/netfilter/nft_chain_filter.c:161) r10:81e6d632 r9:862d7f20 r8:df801d2c r7:853e9840 r6:862d7f00 r5:00000004 r4:83882100 [<81775118>] (nft_do_chain_inet) from [<817211bc>] (nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]) [<81775118>] (nft_do_chain_inet) from [<817211bc>] (nf_hook_slow+0x44/0x104 net/netfilter/core.c:623) r4:00000001 [<81721178>] (nf_hook_slow) from [<817b8488>] (nf_hook include/linux/netfilter.h:273 [inline]) [<81721178>] (nf_hook_slow) from [<817b8488>] (NF_HOOK include/linux/netfilter.h:316 [inline]) [<81721178>] (nf_hook_slow) from [<817b8488>] (ip_local_deliver+0xcc/0x10c net/ipv4/ip_input.c:262) r10:dddd2360 r9:dddd2248 r8:00000040 r7:00000000 r6:84f02080 r5:85da4800 r4:853e9840 r3:00000000 [<817b83bc>] (ip_local_deliver) from [<817b7548>] (dst_input include/net/dst.h:480 [inline]) [<817b83bc>] (ip_local_deliver) from [<817b7548>] (ip_rcv_finish+0x98/0xb0 net/ipv4/ip_input.c:453) r6:85da4800 r5:84f02080 r4:853e9840 [<817b74b0>] (ip_rcv_finish) from [<817b8518>] (NF_HOOK include/linux/netfilter.h:318 [inline]) [<817b74b0>] (ip_rcv_finish) from [<817b8518>] (NF_HOOK include/linux/netfilter.h:312 [inline]) [<817b74b0>] (ip_rcv_finish) from [<817b8518>] (ip_rcv+0x50/0xec net/ipv4/ip_input.c:573) r7:00000000 r6:84f02080 r5:85da4800 r4:853e9840 [<817b84c8>] (ip_rcv) from [<815fddf4>] (__netif_receive_skb_one_core+0x60/0x84 net/core/dev.c:6164) r6:00000000 r5:817b84c8 r4:85da4800 [<815fdd94>] (__netif_receive_skb_one_core) from [<815fde60>] (__netif_receive_skb+0x18/0x5c net/core/dev.c:6277) r5:00000007 r4:853e9840 [<815fde48>] (__netif_receive_skb) from [<815fe1bc>] (process_backlog+0xa0/0x17c net/core/dev.c:6628) r5:00000007 r4:853e9840 [<815fe11c>] (process_backlog) from [<815fe9b0>] (__napi_poll+0x34/0x270 net/core/dev.c:7692) r10:df801ea0 r9:00000000 r8:0000012c r7:00000040 r6:df801e9b r5:dddd2360 r4:00000001 [<815fe97c>] (__napi_poll) from [<815fef48>] (napi_poll net/core/dev.c:7755 [inline]) [<815fe97c>] (__napi_poll) from [<815fef48>] (net_rx_action+0x35c/0x3e8 net/core/dev.c:7912) r9:00000000 r8:0000012c r7:dddd2360 r6:dddd2364 r5:dddd2240 r4:ffffffff [<815febec>] (net_rx_action) from [<8025a18c>] (handle_softirqs+0x15c/0x4ec kernel/softirq.c:622) r10:00000101 r9:847a8c00 r8:0000000c r7:00000003 r6:00000004 r5:00000008 r4:8280408c [<8025a030>] (handle_softirqs) from [<8025a6b8>] (__do_softirq kernel/softirq.c:656 [inline]) [<8025a030>] (handle_softirqs) from [<8025a6b8>] (invoke_softirq kernel/softirq.c:496 [inline]) [<8025a030>] (handle_softirqs) from [<8025a6b8>] (__irq_exit_rcu+0x150/0x1d0 kernel/softirq.c:723) r10:8295b7a4 r9:847a8c00 r8:00000000 r7:eb249e78 r6:82455e44 r5:82490b30 r4:847a8c00 [<8025a568>] (__irq_exit_rcu) from [<8025a9f0>] (irq_exit+0x10/0x18 kernel/softirq.c:751) r5:82490b30 r4:826cbcdc [<8025a9e0>] (irq_exit) from [<81ae3ad0>] (generic_handle_arch_irq+0x7c/0x80 kernel/irq/handle.c:293) [<81ae3a54>] (generic_handle_arch_irq) from [<81ab2b80>] (call_with_stack+0x1c/0x20 arch/arm/lib/call_with_stack.S:40) r9:847a8c00 r8:00000000 r7:eb249eac r6:ffffffff r5:60070113 r4:81af190c [<81ab2b64>] (call_with_stack) from [<80200bec>] (__irq_svc+0x8c/0xbc arch/arm/kernel/entry-armv.S:228) Exception stack(0xeb249e78 to 0xeb249ec0) 9e60: 850aa040 60070113 9e80: 00000000 00000d8e 00000001 00000000 8295b708 00000117 00000000 00000000 9ea0: 8295b7a4 eb249ed4 eb249ed8 eb249ec8 80acb5c8 81af190c 60070113 ffffffff [<81af18e4>] (_raw_spin_unlock_irqrestore) from [<80acb5c8>] (spin_unlock_irqrestore include/linux/spinlock.h:407 [inline]) [<81af18e4>] (_raw_spin_unlock_irqrestore) from [<80acb5c8>] (__uart_port_unlock_irqrestore include/linux/serial_core.h:616 [inline]) [<81af18e4>] (_raw_spin_unlock_irqrestore) from [<80acb5c8>] (pl011_console_device_unlock+0x20/0x24 drivers/tty/serial/amba-pl011.c:2603) [<80acb5a8>] (pl011_console_device_unlock) from [<802e6888>] (nbcon_emit_one+0x88/0x100 kernel/printk/nbcon.c:1165) [<802e6800>] (nbcon_emit_one) from [<802e6b08>] (nbcon_kthread_func+0x208/0x2ec kernel/printk/nbcon.c:1271) r6:82ac410c r5:8295b708 r4:847a8c00 [<802e6900>] (nbcon_kthread_func) from [<802813f4>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df8d9b48 r8:84cca500 r7:8295b708 r6:802e6900 r5:847a8c00 r4:84cf3980 [<802812d8>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xeb249fb0 to 0xeb249ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802812d8 r4:84cf3980