watchdog: BUG: soft lockup - CPU#1 stuck for 134s! [syz-executor1:4513] Modules linked in: irq event stamp: 56477254 hardirqs last enabled at (56477253): [] seqcount_lockdep_reader_access include/linux/seqlock.h:83 [inline] hardirqs last enabled at (56477253): [] read_seqcount_begin include/linux/seqlock.h:164 [inline] hardirqs last enabled at (56477253): [] read_seqbegin include/linux/seqlock.h:433 [inline] hardirqs last enabled at (56477253): [] read_seqbegin_or_lock include/linux/seqlock.h:529 [inline] hardirqs last enabled at (56477253): [] d_walk+0x80f/0xc80 fs/dcache.c:1248 hardirqs last disabled at (56477254): [] interrupt_entry+0xb5/0xf0 arch/x86/entry/entry_64.S:625 softirqs last enabled at (1433438): [] __do_softirq+0x778/0xaf5 kernel/softirq.c:311 softirqs last disabled at (1433327): [] invoke_softirq kernel/softirq.c:365 [inline] softirqs last disabled at (1433327): [] irq_exit+0x1d1/0x200 kernel/softirq.c:405 CPU: 1 PID: 4513 Comm: syz-executor1 Not tainted 4.17.0-rc7+ #74 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:783 [inline] RIP: 0010:lock_acquire+0x257/0x520 kernel/locking/lockdep.c:3923 RSP: 0018:ffff8801aca1f8d8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: dffffc0000000000 RBX: 1ffff10035943f20 RCX: 0000000000000000 RDX: 1ffffffff11a31ad RSI: ffff8801aca10ef8 RDI: 0000000000000286 RBP: ffff8801aca1f9c8 R08: 00000000000053f0 R09: 0000000000000004 R10: ffff8801aca10f98 R11: ffff8801aca106c0 R12: ffff8801aca106c0 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 FS: 0000000002326940(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc9a3e5fe8 CR3: 00000001ac858000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: _raw_spin_lock_nested+0x28/0x40 kernel/locking/spinlock.c:354 d_walk+0x3ad/0xc80 fs/dcache.c:1274 shrink_dcache_parent+0x179/0x230 fs/dcache.c:1486 vfs_rmdir+0x202/0x470 fs/namei.c:3850 do_rmdir+0x523/0x610 fs/namei.c:3911 __do_sys_rmdir fs/namei.c:3929 [inline] __se_sys_rmdir fs/namei.c:3927 [inline] __x64_sys_rmdir+0x36/0x40 fs/namei.c:3927 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455777 RSP: 002b:00007ffc9a3e67a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000054 RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 0000000000455777 RDX: 0000000000000000 RSI: 00007ffc9a3e8550 RDI: 00007ffc9a3e8550 RBP: 00007ffc9a3e8550 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000006 R11: 0000000000000202 R12: 0000000002327940 R13: 0000000000000000 R14: 000000000000024d R15: 00000000000279da Code: 00 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 5e 02 00 00 48 83 3d 80 6d 74 07 00 0f 84 c8 01 00 00 48 8b bd 20 ff ff ff 57 9d <0f> 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 4516 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #74 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:lock_is_held_type+0x4a/0x210 kernel/locking/lockdep.c:3951 RSP: 0018:ffff8801dae077f8 EFLAGS: 00000046 RAX: 0000000000000007 RBX: ffff88018ea34780 RCX: ffff8801b88a6480 RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff88018ea34fb4 RBP: ffff8801dae07818 R08: ffffed003b5c46d3 R09: ffffed003b5c46d2 R10: ffffed003b5c46d2 R11: ffff8801dae23693 R12: 1ffff1003b5c0f09 R13: ffffffff88dad840 R14: dffffc0000000000 R15: ffff8801b340f540 FS: 0000000001d2f940(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000001d38978 CR3: 000000018ea24000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000020000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: lock_is_held include/linux/lockdep.h:344 [inline] task_css_set include/linux/cgroup.h:464 [inline] task_dfl_cgroup include/linux/cgroup.h:527 [inline] cgroup_account_cputime include/linux/cgroup.h:719 [inline] update_curr+0x7f0/0xbe0 kernel/sched/fair.c:832 entity_tick kernel/sched/fair.c:4458 [inline] task_tick_fair+0xdb/0x320 kernel/sched/fair.c:9893 scheduler_tick+0x183/0x420 kernel/sched/core.c:3084 update_process_times+0x51/0x70 kernel/time/timer.c:1641 tick_sched_handle+0x9f/0x180 kernel/time/tick-sched.c:164 tick_sched_timer+0x45/0x130 kernel/time/tick-sched.c:1274 __run_hrtimer kernel/time/hrtimer.c:1398 [inline] __hrtimer_run_queues+0x3e3/0x10a0 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x2f3/0x750 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1025 [inline] smp_apic_timer_interrupt+0x15d/0x710 arch/x86/kernel/apic/apic.c:1050 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:863 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:783 [inline] RIP: 0010:lock_release+0x4d4/0xa10 kernel/locking/lockdep.c:3942 RSP: 0018:ffff88018ea3f8a0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: dffffc0000000000 RBX: 1ffff10031d47f19 RCX: 1ffff10031d469f5 RDX: 1ffffffff11a31ad RSI: 0000000000000005 RDI: 0000000000000286 RBP: ffff88018ea3f9d0 R08: 1ffff10031d47f1d R09: ffff88018ea3f728 R10: 0000000000000003 R11: 0000000000000004 R12: ffff88018ea34780 R13: ffff8801ce989d78 R14: ffff88018ea34780 R15: ffff88018ea3f8e8 __raw_spin_unlock include/linux/spinlock_api_smp.h:150 [inline] _raw_spin_unlock+0x1a/0x30 kernel/locking/spinlock.c:176 spin_unlock include/linux/spinlock.h:350 [inline] d_walk+0x451/0xc80 fs/dcache.c:1298 shrink_dcache_parent+0x179/0x230 fs/dcache.c:1486 vfs_rmdir+0x202/0x470 fs/namei.c:3850 do_rmdir+0x523/0x610 fs/namei.c:3911 __do_sys_rmdir fs/namei.c:3929 [inline] __se_sys_rmdir fs/namei.c:3927 [inline] __x64_sys_rmdir+0x36/0x40 fs/namei.c:3927 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455777 RSP: 002b:00007ffd65c93da8 EFLAGS: 00000202 ORIG_RAX: 0000000000000054 RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 0000000000455777 RDX: 0000000000000000 RSI: 00007ffd65c95b50 RDI: 00007ffd65c95b50 RBP: 00007ffd65c95b50 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000006 R11: 0000000000000202 R12: 0000000001d30940 R13: 0000000000000000 R14: 0000000000000258 R15: 00000000000279d8 Code: 48 8d bb 34 08 00 00 48 89 fa 48 83 ec 08 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 6e 01 00 00 <8b> 83 34 08 00 00 85 c0 0f 85 46 01 00 00 48 c7 c7 60 8d d1 88