INFO: task kworker/1:25:5872 blocked for more than 430 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:25 state:D stack:0 pid:5872 tgid:5872 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81bbad48>] (__schedule) from [<81bbc258>] (__schedule_loop kernel/sched/core.c:7459 [inline]) [<81bbad48>] (__schedule) from [<81bbc258>] (schedule+0x2c/0xec kernel/sched/core.c:7474) r10:dfc4ddac r9:dfc4ddb4 r8:00000002 r7:600f0113 r6:834d804c r5:848a7080 r4:848a7080 [<81bbc22c>] (schedule) from [<81bbc39c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7531) r5:848a7080 r4:834d8048 [<81bbc384>] (schedule_preempt_disabled) from [<81bbebd8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81bbc384>] (schedule_preempt_disabled) from [<81bbebd8>] (__mutex_lock.constprop.0+0x50c/0xa58 kernel/locking/mutex.c:821) [<81bbe6cc>] (__mutex_lock.constprop.0) from [<81bbf1f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:8320b48c r9:01800000 r8:00000000 r7:ffffffff r6:00000000 r5:dfc4de30 r4:87068f80 [<81bbf1e4>] (__mutex_lock_slowpath) from [<81bbf238>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81bbf1fc>] (mutex_lock) from [<80533e04>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<80533da8>] (_vm_unmap_aliases) from [<80537cd8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<80533da8>] (_vm_unmap_aliases) from [<80537cd8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8382ae05 r9:01800000 r8:ffffffff r7:00000001 r6:00000000 r5:00000000 r4:87068f80 [<80537bc8>] (vfree) from [<805b2860>] (execmem_free+0x34/0x54 mm/execmem.c:507) r8:848a7080 r7:00000000 r6:8382ae00 r5:00001000 r4:7f2b4000 [<805b282c>] (execmem_free) from [<803e3e30>] (bpf_jit_free_exec kernel/bpf/core.c:1134 [inline]) [<805b282c>] (execmem_free) from [<803e3e30>] (bpf_jit_binary_free kernel/bpf/core.c:1180 [inline]) [<805b282c>] (execmem_free) from [<803e3e30>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1304) r5:00001000 r4:e0215000 [<803e3dcc>] (bpf_jit_free) from [<803e4f98>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3113) r5:876e8398 r4:876e8398 [<803e4e50>] (bpf_prog_free_deferred) from [<80277284>] (process_one_work+0x1f8/0x5cc kernel/workqueue.c:3396) r7:ddde5180 r6:8382ae00 r5:876e8398 r4:86fa3a00 [<8027708c>] (process_one_work) from [<80277fac>] (process_scheduled_works kernel/workqueue.c:3479 [inline]) [<8027708c>] (process_one_work) from [<80277fac>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3560) r10:ddde5180 r9:86fa3a30 r8:848a7080 r7:83203d80 r6:ddde51a0 r5:ddde5180 r4:86fa3a00 [<80277e40>] (worker_thread) from [<80282a08>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:dfc3de88 r8:87435080 r7:86fa3a00 r6:80277e40 r5:848a7080 r4:86f97080 [<802828ec>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfc4dfb0 to 0xdfc4dff8) dfa0: 00000000 00000000 00000000 00000000 dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802828ec r4:86f97080 INFO: task kworker/1:25:5872 is blocked on a mutex likely owned by task kworker/1:2:10146. task:kworker/1:2 state:R running task stack:0 pid:10146 tgid:10146 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81bbad48>] (__schedule) from [<81bbc648>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7662) r10:8320b4e0 r9:85ce9900 r8:80200c04 r7:e0109d84 r6:ffffffff r5:85ce9900 r4:00000000 [<81bbc608>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xe0109d50 to 0xe0109d98) 9d40: bc7c3000 ea9db000 00000000 80239830 9d60: 834d73e0 834d8024 7f2a0000 ea9db000 00000000 00000001 8320b4e0 e0109dc4 9d80: ea9db000 e0109da0 80230704 80239848 80000013 ffffffff r5:80000013 r4:80239848 [<802306a4>] (flush_tlb_kernel_range) from [<80533bb8>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8053392c>] (__purge_vmap_area_lazy) from [<80533f90>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:e0109de8 r8:00000000 r7:ffffffff r6:00000008 r5:e0109e30 r4:e0109de8 [<80533da8>] (_vm_unmap_aliases) from [<80537cd8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<80533da8>] (_vm_unmap_aliases) from [<80537cd8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8382ae05 r9:01800000 r8:ffffffff r7:00000001 r6:00000000 r5:00000000 r4:86b28000 [<80537bc8>] (vfree) from [<805b2860>] (execmem_free+0x34/0x54 mm/execmem.c:507) r8:85ce9900 r7:00000000 r6:8382ae00 r5:00001000 r4:7f2b8000 [<805b282c>] (execmem_free) from [<803e3e30>] (bpf_jit_free_exec kernel/bpf/core.c:1134 [inline]) [<805b282c>] (execmem_free) from [<803e3e30>] (bpf_jit_binary_free kernel/bpf/core.c:1180 [inline]) [<805b282c>] (execmem_free) from [<803e3e30>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1304) r5:00001000 r4:dfb53000 [<803e3dcc>] (bpf_jit_free) from [<803e4f98>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3113) r5:876f0398 r4:876f0398 [<803e4e50>] (bpf_prog_free_deferred) from [<80277284>] (process_one_work+0x1f8/0x5cc kernel/workqueue.c:3396) r7:ddde5180 r6:8382ae00 r5:876f0398 r4:86860480 [<8027708c>] (process_one_work) from [<80277fac>] (process_scheduled_works kernel/workqueue.c:3479 [inline]) [<8027708c>] (process_one_work) from [<80277fac>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3560) r10:ddde5180 r9:868604b0 r8:85ce9900 r7:83203d80 r6:ddde51a0 r5:ddde5180 r4:86860480 [<80277e40>] (worker_thread) from [<80282a08>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e02ade88 r8:851f7d00 r7:86860480 r6:80277e40 r5:85ce9900 r4:86d13fc0 [<802828ec>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe0109fb0 to 0xe0109ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802828ec r4:86d13fc0 INFO: task kworker/1:3:11935 blocked for more than 430 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:3 state:D stack:0 pid:11935 tgid:11935 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81bbad48>] (__schedule) from [<81bbc258>] (__schedule_loop kernel/sched/core.c:7459 [inline]) [<81bbad48>] (__schedule) from [<81bbc258>] (schedule+0x2c/0xec kernel/sched/core.c:7474) r10:dfce5dac r9:dfce5db4 r8:00000002 r7:60000113 r6:834d804c r5:85ddb200 r4:85ddb200 [<81bbc22c>] (schedule) from [<81bbc39c>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:7531) r5:85ddb200 r4:834d8048 [<81bbc384>] (schedule_preempt_disabled) from [<81bbebd8>] (__mutex_lock_common kernel/locking/mutex.c:726 [inline]) [<81bbc384>] (schedule_preempt_disabled) from [<81bbebd8>] (__mutex_lock.constprop.0+0x50c/0xa58 kernel/locking/mutex.c:821) [<81bbe6cc>] (__mutex_lock.constprop.0) from [<81bbf1f8>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1164) r10:8320b48c r9:01800000 r8:00000000 r7:ffffffff r6:00000000 r5:dfce5e30 r4:86f8c5c0 [<81bbf1e4>] (__mutex_lock_slowpath) from [<81bbf238>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:319) [<81bbf1fc>] (mutex_lock) from [<80533e04>] (_vm_unmap_aliases+0x5c/0x238 mm/vmalloc.c:2973) [<80533da8>] (_vm_unmap_aliases) from [<80537cd8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<80533da8>] (_vm_unmap_aliases) from [<80537cd8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8382ae05 r9:01800000 r8:ffffffff r7:00000001 r6:00000000 r5:00000000 r4:86f8c5c0 [<80537bc8>] (vfree) from [<805b2860>] (execmem_free+0x34/0x54 mm/execmem.c:507) r8:85ddb200 r7:00000000 r6:8382ae00 r5:00001000 r4:7f2b2000 [<805b282c>] (execmem_free) from [<803e3e30>] (bpf_jit_free_exec kernel/bpf/core.c:1134 [inline]) [<805b282c>] (execmem_free) from [<803e3e30>] (bpf_jit_binary_free kernel/bpf/core.c:1180 [inline]) [<805b282c>] (execmem_free) from [<803e3e30>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1304) r5:00001000 r4:dfb3f000 [<803e3dcc>] (bpf_jit_free) from [<803e4f98>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3113) r5:876e6b98 r4:876e6b98 [<803e4e50>] (bpf_prog_free_deferred) from [<80277284>] (process_one_work+0x1f8/0x5cc kernel/workqueue.c:3396) r7:ddde5180 r6:8382ae00 r5:876e6b98 r4:876c6400 [<8027708c>] (process_one_work) from [<80277fac>] (process_scheduled_works kernel/workqueue.c:3479 [inline]) [<8027708c>] (process_one_work) from [<80277fac>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3560) r10:00000000 r9:876c6430 r8:85ddb200 r7:83203d80 r6:ddde51a0 r5:ddde5180 r4:876c6400 [<80277e40>] (worker_thread) from [<80282a08>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e0109e88 r8:876c6080 r7:876c6400 r6:80277e40 r5:85ddb200 r4:876cc400 [<802828ec>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdfce5fb0 to 0xdfce5ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802828ec r4:876cc400 INFO: task kworker/1:3:11935 is blocked on a mutex likely owned by task kworker/1:2:10146. task:kworker/1:2 state:R running task stack:0 pid:10146 tgid:10146 ppid:2 task_flags:0x4208060 flags:0x00000000 Workqueue: events bpf_prog_free_deferred Call trace: [<81bbad48>] (__schedule) from [<81bbc648>] (preempt_schedule_irq+0x40/0xa8 kernel/sched/core.c:7662) r10:8320b4e0 r9:85ce9900 r8:80200c04 r7:e0109d84 r6:ffffffff r5:85ce9900 r4:00000000 [<81bbc608>] (preempt_schedule_irq) from [<80200c24>] (svc_preempt+0x8/0x18) Exception stack(0xe0109d50 to 0xe0109d98) 9d40: bc7c3000 ea9db000 00000000 80239830 9d60: 834d73e0 834d8024 7f2a0000 ea9db000 00000000 00000001 8320b4e0 e0109dc4 9d80: ea9db000 e0109da0 80230704 80239848 80000013 ffffffff r5:80000013 r4:80239848 [<802306a4>] (flush_tlb_kernel_range) from [<80533bb8>] (__purge_vmap_area_lazy+0x28c/0x47c mm/vmalloc.c:2398) [<8053392c>] (__purge_vmap_area_lazy) from [<80533f90>] (_vm_unmap_aliases+0x1e8/0x238 mm/vmalloc.c:3012) r10:00000000 r9:e0109de8 r8:00000000 r7:ffffffff r6:00000008 r5:e0109e30 r4:e0109de8 [<80533da8>] (_vm_unmap_aliases) from [<80537cd8>] (vm_reset_perms mm/vmalloc.c:3404 [inline]) [<80533da8>] (_vm_unmap_aliases) from [<80537cd8>] (vfree+0x110/0x17c mm/vmalloc.c:3508) r10:8382ae05 r9:01800000 r8:ffffffff r7:00000001 r6:00000000 r5:00000000 r4:86b28000 [<80537bc8>] (vfree) from [<805b2860>] (execmem_free+0x34/0x54 mm/execmem.c:507) r8:85ce9900 r7:00000000 r6:8382ae00 r5:00001000 r4:7f2b8000 [<805b282c>] (execmem_free) from [<803e3e30>] (bpf_jit_free_exec kernel/bpf/core.c:1134 [inline]) [<805b282c>] (execmem_free) from [<803e3e30>] (bpf_jit_binary_free kernel/bpf/core.c:1180 [inline]) [<805b282c>] (execmem_free) from [<803e3e30>] (bpf_jit_free+0x64/0xe0 kernel/bpf/core.c:1304) r5:00001000 r4:dfb53000 [<803e3dcc>] (bpf_jit_free) from [<803e4f98>] (bpf_prog_free_deferred+0x148/0x160 kernel/bpf/core.c:3113) r5:876f0398 r4:876f0398 [<803e4e50>] (bpf_prog_free_deferred) from [<80277284>] (process_one_work+0x1f8/0x5cc kernel/workqueue.c:3396) r7:ddde5180 r6:8382ae00 r5:876f0398 r4:86860480 [<8027708c>] (process_one_work) from [<80277fac>] (process_scheduled_works kernel/workqueue.c:3479 [inline]) [<8027708c>] (process_one_work) from [<80277fac>] (worker_thread+0x16c/0x318 kernel/workqueue.c:3560) r10:ddde5180 r9:868604b0 r8:85ce9900 r7:83203d80 r6:ddde51a0 r5:ddde5180 r4:86860480 [<80277e40>] (worker_thread) from [<80282a08>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:e02ade88 r8:851f7d00 r7:86860480 r6:80277e40 r5:85ce9900 r4:86d13fc0 [<802828ec>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xe0109fb0 to 0xe0109ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802828ec r4:86d13fc0 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 29 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: ARM-Versatile Express Call trace: [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:60000093 r6:60000093 r5:82329988 r4:00000000 [<80201ae4>] (show_stack) from [<8021e88c>] (__dump_stack lib/dump_stack.c:94 [inline]) [<80201ae4>] (show_stack) from [<8021e88c>] (dump_stack_lvl+0x5c/0x70 lib/dump_stack.c:120) [<8021e830>] (dump_stack_lvl) from [<8021e8b8>] (dump_stack+0x18/0x1c lib/dump_stack.c:129) r7:00000000 r6:00000013 r5:00000000 r4:00000001 [<8021e8a0>] (dump_stack) from [<81ba6fe8>] (nmi_cpu_backtrace+0x150/0x170 lib/nmi_backtrace.c:123) [<81ba6e98>] (nmi_cpu_backtrace) from [<81ba713c>] (nmi_trigger_cpumask_backtrace+0x134/0x208 lib/nmi_backtrace.c:66) r7:8320b194 r6:83bb8c80 r5:83217cb8 r4:ffffffff [<81ba7008>] (nmi_trigger_cpumask_backtrace) from [<80230128>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851) r9:8320b33c r8:00000048 r7:0000000a r6:83203d80 r5:00007eef r4:00000048 [<80230110>] (arch_trigger_cpumask_backtrace) from [<81ba6e94>] (cpumask_backtrace+0x10/0x14 lib/nmi_backtrace.c:136) [<81ba6e84>] (cpumask_backtrace) from [<81babff8>] (trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline]) [<81ba6e84>] (cpumask_backtrace) from [<81babff8>] (__sys_info lib/sys_info.c:157 [inline]) [<81ba6e84>] (cpumask_backtrace) from [<81babff8>] (sys_info+0x68/0xa8 lib/sys_info.c:165) [<81babf90>] (sys_info) from [<80395cfc>] (check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]) [<81babf90>] (sys_info) from [<80395cfc>] (watchdog+0x3ac/0x850 kernel/hung_task.c:561) r5:00007eef r4:00000002 [<80395950>] (watchdog) from [<80282a08>] (kthread+0x11c/0x154 kernel/kthread.c:436) r10:00000000 r9:df819e60 r8:83b6c600 r7:00000000 r6:80395950 r5:83bb8c80 r4:83b07040 [<802828ec>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf8d5fb0 to 0xdf8d5ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802828ec r4:83b07040