ieee802154 phy0 wpan0: encryption failed: -22 ieee802154 phy1 wpan1: encryption failed: -22 watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor.0:30294] Modules linked in: irq event stamp: 7175683 hardirqs last enabled at (7175682): [] trace_hardirqs_on_thunk+0x1a/0x1c hardirqs last disabled at (7175683): [] trace_hardirqs_off_thunk+0x1a/0x1c softirqs last enabled at (0): [] copy_process.part.0+0x15b9/0x8260 kernel/fork.c:1856 softirqs last disabled at (6051): [] invoke_softirq kernel/softirq.c:372 [inline] softirqs last disabled at (6051): [] irq_exit+0x215/0x260 kernel/softirq.c:412 CPU: 0 PID: 30294 Comm: syz-executor.0 Not tainted 4.19.208-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:23 [inline] RIP: 0010:preempt_count_sub+0x42/0x150 kernel/sched/core.c:3262 Code: e0 07 48 c1 e9 03 83 c0 03 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 ef 00 00 00 8b 0d 59 cb e2 0b 85 c9 75 18 65 8b 05 3e 73 c0 7e <25> ff ff ff 7f 39 c3 7f 1a 81 fb fe 00 00 00 76 6a 65 8b 05 26 73 RSP: 0018:ffff8880ba007c18 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000101 RBX: 0000000000000001 RCX: 0000000000000000 RDX: 0000000000000004 RSI: ffff8882207a6b88 RDI: 0000000000000001 RBP: ffff8880ba022b40 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000022b40 R14: 0000000000000000 R15: ffff8880ba022b40 FS: 000055555741a400(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2908696718 CR3: 0000000225d5f000 CR4: 00000000003426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline] _raw_spin_unlock_irqrestore+0x66/0xe0 kernel/locking/spinlock.c:184 __mod_timer kernel/time/timer.c:1071 [inline] mod_timer+0x4ea/0x1010 kernel/time/timer.c:1114 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:copy_namespaces+0x1b1/0x3c0 kernel/nsproxy.c:148 Code: 31 ff 48 89 ee e8 2f cc 22 00 48 85 ed 0f 85 01 01 00 00 e8 91 ca 22 00 be 04 00 00 00 4c 89 ef e8 04 92 58 00 f0 41 ff 45 00 <45> 31 e4 e8 77 ca 22 00 44 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 RSP: 0018:ffff88820d227ba0 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13 RAX: ffffed1012375e59 RBX: ffff88820dcc0500 RCX: ffffffff813fb99c RDX: ffffed1012375e59 RSI: 0000000000000004 RDI: ffff888091baf2c0 RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1012375e58 R10: ffff888091baf2c3 R11: 000000001a772be7 R12: 00000000003d0f00 R13: ffff888091baf2c0 R14: ffff88820dcc0bf8 R15: ffffffff89f50400 copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f290b162d01 Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 RSP: 002b:00007ffc5bf86ef8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007f2908696700 RCX: 00007f290b162d01 RDX: 00007f29086969d0 RSI: 00007f29086962f0 RDI: 00000000003d0f00 RBP: 00007ffc5bf87130 R08: 00007f2908696700 R09: 00007f2908696700 R10: 00007f29086969d0 R11: 0000000000000206 R12: 00007ffc5bf86fae R13: 00007ffc5bf86faf R14: 00007f2908696300 R15: 0000000000022000 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:60 ---------------- Code disassembly (best guess): 0: e0 07 loopne 0x9 2: 48 c1 e9 03 shr $0x3,%rcx 6: 83 c0 03 add $0x3,%eax 9: 0f b6 14 11 movzbl (%rcx,%rdx,1),%edx d: 38 d0 cmp %dl,%al f: 7c 08 jl 0x19 11: 84 d2 test %dl,%dl 13: 0f 85 ef 00 00 00 jne 0x108 19: 8b 0d 59 cb e2 0b mov 0xbe2cb59(%rip),%ecx # 0xbe2cb78 1f: 85 c9 test %ecx,%ecx 21: 75 18 jne 0x3b 23: 65 8b 05 3e 73 c0 7e mov %gs:0x7ec0733e(%rip),%eax # 0x7ec07368 * 2a: 25 ff ff ff 7f and $0x7fffffff,%eax <-- trapping instruction 2f: 39 c3 cmp %eax,%ebx 31: 7f 1a jg 0x4d 33: 81 fb fe 00 00 00 cmp $0xfe,%ebx 39: 76 6a jbe 0xa5 3b: 65 gs 3c: 8b .byte 0x8b 3d: 05 .byte 0x5 3e: 26 es 3f: 73 .byte 0x73