watchdog: BUG: soft lockup - CPU#1 stuck for 134s! [syz-executor1:4604] Modules linked in: irq event stamp: 59171446 hardirqs last enabled at (59171445): [] seqcount_lockdep_reader_access include/linux/seqlock.h:83 [inline] hardirqs last enabled at (59171445): [] read_seqcount_begin include/linux/seqlock.h:164 [inline] hardirqs last enabled at (59171445): [] read_seqbegin include/linux/seqlock.h:433 [inline] hardirqs last enabled at (59171445): [] read_seqbegin_or_lock include/linux/seqlock.h:529 [inline] hardirqs last enabled at (59171445): [] d_walk+0x80f/0xc80 fs/dcache.c:1248 hardirqs last disabled at (59171446): [] interrupt_entry+0xb5/0xf0 arch/x86/entry/entry_64.S:625 softirqs last enabled at (2672568): [] __do_softirq+0x778/0xaf5 kernel/softirq.c:311 softirqs last disabled at (2672197): [] invoke_softirq kernel/softirq.c:365 [inline] softirqs last disabled at (2672197): [] irq_exit+0x1d1/0x200 kernel/softirq.c:405 CPU: 1 PID: 4604 Comm: syz-executor1 Not tainted 4.17.0-rc4+ #22 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:do_raw_spin_unlock+0x20e/0x2e0 kernel/locking/spinlock_debug.c:133 RSP: 0018:ffff8801a089f948 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 RAX: dffffc0000000000 RBX: ffff8801da47d0c0 RCX: ffffffff815e08fe RDX: 1ffffffff11a3189 RSI: 0000000000000004 RDI: ffff8801da47d0c0 RBP: ffff8801a089f9d0 R08: ffffed003b48fa19 R09: ffffed003b48fa18 R10: ffffed003b48fa18 R11: ffff8801da47d0c3 R12: ffffed0034113f29 R13: ffff8801da47d0d0 R14: ffff8801da47d0c8 R15: 0000000000000001 FS: 0000000001fef940(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc4067bc3c CR3: 00000001a0ea6000 CR4: 00000000001406e0 DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: __raw_spin_unlock include/linux/spinlock_api_smp.h:151 [inline] _raw_spin_unlock+0x22/0x30 kernel/locking/spinlock.c:176 spin_unlock include/linux/spinlock.h:350 [inline] d_walk+0x451/0xc80 fs/dcache.c:1298 shrink_dcache_parent+0x179/0x230 fs/dcache.c:1486 vfs_rmdir+0x202/0x470 fs/namei.c:3850 do_rmdir+0x523/0x610 fs/namei.c:3911 __do_sys_rmdir fs/namei.c:3929 [inline] __se_sys_rmdir fs/namei.c:3927 [inline] __x64_sys_rmdir+0x36/0x40 fs/namei.c:3927 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455777 RSP: 002b:00007ffc4067c348 EFLAGS: 00000206 ORIG_RAX: 0000000000000054 RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 0000000000455777 RDX: 0000000000000000 RSI: 00007ffc4067e0f0 RDI: 00007ffc4067e0f0 RBP: 00007ffc4067e0f0 R08: 0000000000000000 R09: 0000000000000001 R10: 000000000000000a R11: 0000000000000206 R12: 0000000001ff0940 R13: 0000000000000000 R14: 000000000000024d R15: 00000000000214bb Code: 00 00 48 83 3d fb 81 73 07 00 74 7f 48 89 df c6 07 00 0f 1f 40 00 48 b8 00 00 00 00 00 fc ff df 49 01 c4 49 c7 04 24 00 00 00 00 <41> c7 44 24 08 00 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 4611 Comm: syz-executor6 Not tainted 4.17.0-rc4+ #22 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:hlock_class kernel/locking/lockdep.c:145 [inline] RIP: 0010:lookup_chain_cache_add kernel/locking/lockdep.c:2333 [inline] RIP: 0010:validate_chain kernel/locking/lockdep.c:2388 [inline] RIP: 0010:__lock_acquire+0xde7/0x5140 kernel/locking/lockdep.c:3431 RSP: 0018:ffff88019ca1f520 EFLAGS: 00000046 RAX: 0000000000040000 RBX: 0000000087f43b9a RCX: 00000000c13dc698 RDX: ffff88019ca12c10 RSI: ffff88019ca12b78 RDI: ffff88019ca12c11 RBP: ffff88019ca1f8a8 R08: 0000000000000008 R09: 0000000000000003 R10: ffff88019ca12bf0 R11: ffff88019ca12340 R12: 000000004fc9cdd1 R13: 0000000000000000 R14: 3da11b8ce8c59dd4 R15: 0000000000000000 FS: 0000000002964940(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000004666a0 CR3: 000000019c9cb000 CR4: 00000000001406f0 DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: lock_acquire+0x1dc/0x520 kernel/locking/lockdep.c:3920 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:144 spin_lock include/linux/spinlock.h:310 [inline] d_walk+0x261/0xc80 fs/dcache.c:1250 shrink_dcache_parent+0x179/0x230 fs/dcache.c:1486 vfs_rmdir+0x202/0x470 fs/namei.c:3850 do_rmdir+0x523/0x610 fs/namei.c:3911 __do_sys_rmdir fs/namei.c:3929 [inline] __se_sys_rmdir fs/namei.c:3927 [inline] __x64_sys_rmdir+0x36/0x40 fs/namei.c:3927 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455777 RSP: 002b:00007ffeaa075698 EFLAGS: 00000202 ORIG_RAX: 0000000000000054 RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 0000000000455777 RDX: 0000000000000000 RSI: 00007ffeaa077440 RDI: 00007ffeaa077440 RBP: 00007ffeaa077440 R08: 0000000000000000 R09: 0000000000000001 R10: 000000000000000a R11: 0000000000000202 R12: 0000000002965940 R13: 0000000000000000 R14: 0000000000000260 R15: 0000000000021101 Code: 4c 89 54 24 70 44 89 4c 24 78 e8 85 87 59 00 4c 8b 5c 24 68 4c 8b 54 24 70 44 8b 4c 24 78 e9 d3 f8 ff ff 48 8b 94 24 80 00 00 00 <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74