audit: type=1326 audit(2000000036.833:99): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=20691 comm=F2A9EAC4EB1848700C7DA799D0B682 exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x50000 audit: type=1326 audit(2000000036.833:100): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=20691 comm=F2A9EAC4EB1848700C7DA799D0B682 exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x50000 watchdog: BUG: soft lockup - CPU#1 stuck for 134s! [syz-executor4:10961] Modules linked in: irq event stamp: 77058178 hardirqs last enabled at (77058177): [] seqcount_lockdep_reader_access include/linux/seqlock.h:83 [inline] hardirqs last enabled at (77058177): [] read_seqcount_begin include/linux/seqlock.h:164 [inline] hardirqs last enabled at (77058177): [] read_seqbegin include/linux/seqlock.h:433 [inline] hardirqs last enabled at (77058177): [] read_seqbegin_or_lock include/linux/seqlock.h:529 [inline] hardirqs last enabled at (77058177): [] d_walk+0x80f/0xc80 fs/dcache.c:1248 hardirqs last disabled at (77058178): [] interrupt_entry+0xb5/0xf0 arch/x86/entry/entry_64.S:625 softirqs last enabled at (1726774): [] __do_softirq+0x778/0xaf5 kernel/softirq.c:311 softirqs last disabled at (1726587): [] invoke_softirq kernel/softirq.c:365 [inline] softirqs last disabled at (1726587): [] irq_exit+0x1d1/0x200 kernel/softirq.c:405 CPU: 1 PID: 10961 Comm: syz-executor4 Not tainted 4.17.0-rc7+ #74 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__preempt_count_sub arch/x86/include/asm/preempt.h:81 [inline] RIP: 0010:__raw_spin_unlock include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock+0x29/0x30 kernel/locking/spinlock.c:176 RSP: 0018:ffff8801876b79e0 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 RAX: dffffc0000000000 RBX: ffff88018623a1e0 RCX: ffffffff815e1a5e RDX: 1ffffffff11a31c9 RSI: 0000000000000004 RDI: ffff88018623a1e0 RBP: ffff8801876b79e8 R08: ffffed0030c4743d R09: ffffed0030c4743c R10: ffffed0030c4743c R11: ffff88018623a1e3 R12: ffff88018623a160 R13: dffffc0000000000 R14: ffff88018623a1e0 R15: ffff8801876b7b50 FS: 000000000117c940(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000004dc3b8 CR3: 000000018cff3000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: spin_unlock include/linux/spinlock.h:350 [inline] d_walk+0x451/0xc80 fs/dcache.c:1298 shrink_dcache_parent+0x179/0x230 fs/dcache.c:1486 vfs_rmdir+0x202/0x470 fs/namei.c:3850 do_rmdir+0x523/0x610 fs/namei.c:3911 __do_sys_rmdir fs/namei.c:3929 [inline] __se_sys_rmdir fs/namei.c:3927 [inline] __x64_sys_rmdir+0x36/0x40 fs/namei.c:3927 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455777 RSP: 002b:00007ffe0bc9c608 EFLAGS: 00000202 ORIG_RAX: 0000000000000054 RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 0000000000455777 RDX: 0000000000000000 RSI: 00007ffe0bc9e3b0 RDI: 00007ffe0bc9e3b0 RBP: 00007ffe0bc9e3b0 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000006 R11: 0000000000000202 R12: 000000000117d940 R13: 0000000000000000 R14: 00000000000003b7 R15: 0000000000048128 Code: c3 90 55 be 01 00 00 00 48 89 e5 53 48 89 fb 48 8d 7f 18 48 8b 55 08 e8 66 a8 ed f9 48 89 df e8 8e ae ee f9 65 ff 0d 97 82 92 78 <5b> 5d c3 0f 1f 40 00 55 be 01 00 00 00 48 89 e5 53 48 89 fb 48 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 16982 Comm: syz-executor7 Not tainted 4.17.0-rc7+ #74 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:debug_lockdep_rcu_enabled.part.1+0x2a/0x60 kernel/rcu/update.c:301 RSP: 0018:ffff8801ab2f7878 EFLAGS: 00000807 RAX: dffffc0000000000 RBX: ffff8801d918a740 RCX: ffffed003565ef62 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8801d918af74 RBP: ffff8801ab2f7880 R08: 0000000000000000 R09: ffffed0039339da4 R10: ffffed0039339da4 R11: ffff8801c99ced23 R12: ffff8801ab2f79a8 R13: ffff8801c99ced38 R14: ffff8801c99ced20 R15: ffff8801d918a740 FS: 00000000025fc940(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007eff2051e000 CR3: 00000001b5f7a000 CR4: 00000000001406f0 DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: debug_lockdep_rcu_enabled+0x77/0x90 kernel/rcu/update.c:300 trace_lock_release include/trace/events/lock.h:58 [inline] lock_release+0x6f2/0xa10 kernel/locking/lockdep.c:3938 __raw_spin_unlock include/linux/spinlock_api_smp.h:150 [inline] _raw_spin_unlock+0x1a/0x30 kernel/locking/spinlock.c:176 spin_unlock include/linux/spinlock.h:350 [inline] d_walk+0x451/0xc80 fs/dcache.c:1298 shrink_dcache_parent+0x179/0x230 fs/dcache.c:1486 vfs_rmdir+0x202/0x470 fs/namei.c:3850 do_rmdir+0x523/0x610 fs/namei.c:3911 __do_sys_rmdir fs/namei.c:3929 [inline] __se_sys_rmdir fs/namei.c:3927 [inline] __x64_sys_rmdir+0x36/0x40 fs/namei.c:3927 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455777 RSP: 002b:00007ffd9736be88 EFLAGS: 00000206 ORIG_RAX: 0000000000000054 RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 0000000000455777 RDX: 0000000000000000 RSI: 00007ffd9736dc30 RDI: 00007ffd9736dc30 RBP: 00007ffd9736dc30 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000006 R11: 0000000000000206 R12: 00000000025fd940 R13: 0000000000000000 R14: 00000000000001f8 R15: 000000000004812a Code: 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 53 65 48 8b 1c 25 40 ee 01 00 48 8d bb 34 08 00 00 48 89 fa 48 c1 ea 03 0f b6 14 02 <48> 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 10 8b 93 34 08