EXT4-fs (loop0): mount failed
ieee802154 phy0 wpan0: encryption failed: -22
ieee802154 phy1 wpan1: encryption failed: -22
ieee802154 phy0 wpan0: encryption failed: -22
ieee802154 phy1 wpan1: encryption failed: -22
INFO: task syz-executor.4:32550 blocked for more than 140 seconds.
Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.4 D28992 32550 8135 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
request_wait_answer+0x3dc/0x750 fs/fuse/dev.c:485
__fuse_request_send+0x123/0x1c0 fs/fuse/dev.c:505
fuse_simple_request+0x2e6/0x820 fs/fuse/dev.c:576
fuse_setxattr+0x1e8/0x340 fs/fuse/xattr.c:37
fuse_xattr_set+0x38/0x70 fs/fuse/xattr.c:192
__vfs_setxattr+0x10e/0x170 fs/xattr.c:149
__vfs_setxattr_noperm+0x11a/0x420 fs/xattr.c:180
__vfs_setxattr_locked+0x176/0x250 fs/xattr.c:238
vfs_setxattr+0xe5/0x270 fs/xattr.c:255
setxattr+0x23d/0x330 fs/xattr.c:520
path_setxattr+0x170/0x190 fs/xattr.c:539
__do_sys_lsetxattr fs/xattr.c:561 [inline]
__se_sys_lsetxattr fs/xattr.c:557 [inline]
__x64_sys_lsetxattr+0xbd/0x150 fs/xattr.c:557
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fea095cb0e9
Code: Bad RIP value.
RSP: 002b:00007fea07f1f168 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
RAX: ffffffffffffffda RBX: 00007fea096de030 RCX: 00007fea095cb0e9
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000040
RBP: 00007fea0962508d R08: 0000000000000002 R09: 0000000000000000
R10: 000000000000003c R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff7a4fb86f R14: 00007fea07f1f300 R15: 0000000000022000
Showing all locks held in the system:
1 lock held by khungtaskd/1569:
#0: 00000000dd9fe0dc (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4441
1 lock held by in:imklog/7811:
#0: 000000005d09b782 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 fs/file.c:767
2 locks held by syz-executor.4/32550:
#0: 0000000090a6d1c6 (sb_writers#23){.+.+}, at: sb_start_write include/linux/fs.h:1579 [inline]
#0: 0000000090a6d1c6 (sb_writers#23){.+.+}, at: mnt_want_write+0x3a/0xb0 fs/namespace.c:360
#1: 000000006a2a6c82 (&type->i_mutex_dir_key#9){++++}, at: inode_lock include/linux/fs.h:748 [inline]
#1: 000000006a2a6c82 (&type->i_mutex_dir_key#9){++++}, at: vfs_setxattr+0xc7/0x270 fs/xattr.c:254
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 1569 Comm: khungtaskd Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101
nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline]
watchdog+0x991/0xe60 kernel/hung_task.c:287
kthread+0x33f/0x460 kernel/kthread.c:259
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__lock_release kernel/locking/lockdep.c:3686 [inline]
RIP: 0010:lock_release+0x2b0/0x8b0 kernel/locking/lockdep.c:3927
Code: 00 00 48 8d 78 22 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 0c 11 48 89 fa 83 e2 07 83 c2 01 38 ca 7c 08 84 c9 <0f> 85 41 05 00 00 66 f7 40 22 f0 ff 74 37 48 8d 78 20 48 ba 00 00
RSP: 0018:ffff8880ba007b78 EFLAGS: 00000046
RAX: ffffffff89e78930 RBX: ffffffff8d243760 RCX: 0000000000000000
RDX: 0000000000000003 RSI: ffff8880ba022b58 RDI: ffffffff89e78952
RBP: ffff8880ba022b58 R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff11017400f72
R13: ffffffff8153c5ca R14: ffffffff89e78080 R15: 0000000000000002
FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe43a333000 CR3: 00000000927a1000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000001000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:158 [inline]
_raw_spin_unlock_irqrestore+0x1b/0xe0 kernel/locking/spinlock.c:184
__mod_timer kernel/time/timer.c:1071 [inline]
mod_timer+0x4ea/0x1010 kernel/time/timer.c:1114
call_timer_fn+0x177/0x700 kernel/time/timer.c:1338
expire_timers+0x243/0x4e0 kernel/time/timer.c:1375
__run_timers kernel/time/timer.c:1696 [inline]
run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709
__do_softirq+0x265/0x980 kernel/softirq.c:292
invoke_softirq kernel/softirq.c:372 [inline]
irq_exit+0x215/0x260 kernel/softirq.c:412
exiting_irq arch/x86/include/asm/apic.h:536 [inline]
smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098
apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
RIP: 0010:native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:61
Code: 48 89 df e8 f4 20 7f f9 e9 2e ff ff ff 48 89 df e8 e7 20 7f f9 eb 82 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 14 43 4e 00 fb f4 90 e9 07 00 00 00 0f 00 2d 04 43 4e 00 f4 c3 90 90 41 56 41 55
RSP: 0018:ffffffff89e07d40 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff13e3054 RBX: dffffc0000000000 RCX: 0000000000000000
RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff89e78904
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff89f18290
R13: 1ffffffff13c0fb2 R14: 0000000000000000 R15: 0000000000000000
arch_safe_halt arch/x86/include/asm/paravirt.h:94 [inline]
default_idle+0x49/0x310 arch/x86/kernel/process.c:557
cpuidle_idle_call kernel/sched/idle.c:153 [inline]
do_idle+0x2ec/0x4b0 kernel/sched/idle.c:263
cpu_startup_entry+0xc5/0xe0 kernel/sched/idle.c:369
start_kernel+0x8d6/0x911 init/main.c:736
secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:243
----------------
Code disassembly (best guess):
0: 00 00 add %al,(%rax)
2: 48 8d 78 22 lea 0x22(%rax),%rdi
6: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx
d: fc ff df
10: 48 89 f9 mov %rdi,%rcx
13: 48 c1 e9 03 shr $0x3,%rcx
17: 0f b6 0c 11 movzbl (%rcx,%rdx,1),%ecx
1b: 48 89 fa mov %rdi,%rdx
1e: 83 e2 07 and $0x7,%edx
21: 83 c2 01 add $0x1,%edx
24: 38 ca cmp %cl,%dl
26: 7c 08 jl 0x30
28: 84 c9 test %cl,%cl
* 2a: 0f 85 41 05 00 00 jne 0x571 <-- trapping instruction
30: 66 f7 40 22 f0 ff testw $0xfff0,0x22(%rax)
36: 74 37 je 0x6f
38: 48 8d 78 20 lea 0x20(%rax),%rdi
3c: 48 rex.W
3d: ba .byte 0xba