vhci_hcd: disconnect device ieee802154 phy0 wpan0: encryption failed: -22 ieee802154 phy1 wpan1: encryption failed: -22 ieee802154 phy0 wpan0: encryption failed: -22 ieee802154 phy1 wpan1: encryption failed: -22 INFO: task syz-executor.5:29281 blocked for more than 140 seconds. Not tainted 4.19.190-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.5 D28648 29281 8150 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 exp_funnel_lock kernel/rcu/tree_exp.h:320 [inline] _synchronize_rcu_expedited+0x60c/0x6f0 kernel/rcu/tree_exp.h:667 synchronize_rcu+0xc6/0x160 kernel/rcu/tree_plugin.h:818 input_close_device+0x129/0x150 drivers/input/input.c:671 evdev_close_device drivers/input/evdev.c:436 [inline] evdev_release+0x322/0x3e0 drivers/input/evdev.c:478 __fput+0x2ce/0x890 fs/file_table.c:278 task_work_run+0x148/0x1c0 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x251/0x2a0 arch/x86/entry/common.c:167 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x41940b Code: Bad RIP value. RSP: 002b:00007fff05913a50 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 000000000041940b RDX: 00000000005705b0 RSI: 0000000008c9f4bf RDI: 0000000000000003 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b31121aa0 R10: 00007fff05913b40 R11: 0000000000000293 R12: 000000000009bd74 R13: 00000000000003e8 R14: 000000000056bf60 R15: 000000000009bd65 Showing all locks held in the system: 1 lock held by khungtaskd/1570: #0: 0000000050255181 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4441 1 lock held by in:imklog/7840: #0: 000000009b9c2f01 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 fs/file.c:767 2 locks held by syz-executor.5/29281: #0: 00000000d2430deb (&evdev->mutex){+.+.}, at: evdev_close_device drivers/input/evdev.c:433 [inline] #0: 00000000d2430deb (&evdev->mutex){+.+.}, at: evdev_release+0x26f/0x3e0 drivers/input/evdev.c:478 #1: 00000000db036c1d (&dev->mutex#2){+.+.}, at: input_close_device+0x42/0x150 drivers/input/input.c:658 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 1570 Comm: khungtaskd Not tainted 4.19.190-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline] watchdog+0x991/0xe60 kernel/hung_task.c:287 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 4691 Comm: systemd-journal Not tainted 4.19.190-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:update_sd_lb_stats kernel/sched/fair.c:8153 [inline] RIP: 0010:find_busiest_group+0x27f/0x25f0 kernel/sched/fair.c:8432 Code: 0f 85 a3 1c 00 00 48 8b 04 24 4c 8d 78 20 41 8b 45 14 83 f8 07 0f 87 07 0f 00 00 49 0f a3 07 0f 92 44 24 18 0f 83 34 0d 00 00 <48> 8b 04 24 48 8b 8c 24 80 00 00 00 48 89 84 24 40 01 00 00 48 89 RSP: 0018:ffff8880a0e1f578 EFLAGS: 00000097 RAX: 0000000000000000 RBX: ffff8880b59cb500 RCX: ffff8880a0e1f940 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880b59cb53c RBP: 0000000000000000 R08: ffff8880a0e1fa90 R09: 0000000000000000 R10: 0000000000000005 R11: ffffffff8c66301b R12: ffff8880b59e2700 R13: ffff8880a0e1f908 R14: dffffc0000000000 R15: ffff8880b59e2720 FS: 00007f76aa6988c0(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f76a7c01000 CR3: 00000000a13fd000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: load_balance+0x36d/0x2080 kernel/sched/fair.c:8697 idle_balance kernel/sched/fair.c:9679 [inline] pick_next_task_fair+0x487/0x1570 kernel/sched/fair.c:6840 pick_next_task kernel/sched/core.c:3363 [inline] __schedule+0x457/0x2040 kernel/sched/core.c:3491 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_hrtimeout_range_clock+0x33e/0x390 kernel/time/hrtimer.c:1956 ep_poll+0xabb/0xcb0 fs/eventpoll.c:1817 do_epoll_wait+0x1aa/0x200 fs/eventpoll.c:2190 __do_sys_epoll_wait fs/eventpoll.c:2200 [inline] __se_sys_epoll_wait fs/eventpoll.c:2197 [inline] __x64_sys_epoll_wait+0x93/0xf0 fs/eventpoll.c:2197 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f76a99612e3 Code: 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d 29 54 2b 00 00 75 13 49 89 ca b8 e8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 34 c3 48 83 ec 08 e8 0b c2 00 00 48 89 04 24 RSP: 002b:00007ffd464755b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 RAX: ffffffffffffffda RBX: 0000556f5a7b81e0 RCX: 00007f76a99612e3 RDX: 0000000000000013 RSI: 00007ffd464755c0 RDI: 0000000000000008 RBP: 00007ffd464757b0 R08: 00007ffd465f3000 R09: 000000d34c5efe3e R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd464755c0 R13: 0000000000000001 R14: ffffffffffffffff R15: 0005c1e7962a3ab7