binder: 8275:8277 unknown command 20152210 binder: 8275:8277 ioctl c0306201 20000140 returned -22 watchdog: BUG: soft lockup - CPU#0 stuck for 134s! [syz-executor7:4543] Modules linked in: irq event stamp: 72256238 hardirqs last enabled at (72256237): [] seqcount_lockdep_reader_access include/linux/seqlock.h:83 [inline] hardirqs last enabled at (72256237): [] read_seqcount_begin include/linux/seqlock.h:164 [inline] hardirqs last enabled at (72256237): [] read_seqbegin include/linux/seqlock.h:433 [inline] hardirqs last enabled at (72256237): [] read_seqbegin_or_lock include/linux/seqlock.h:529 [inline] hardirqs last enabled at (72256237): [] d_walk+0x80f/0xc80 fs/dcache.c:1248 hardirqs last disabled at (72256238): [] interrupt_entry+0xb5/0xf0 arch/x86/entry/entry_64.S:625 softirqs last enabled at (491114): [] __do_softirq+0x778/0xaf5 kernel/softirq.c:311 softirqs last disabled at (490699): [] invoke_softirq kernel/softirq.c:365 [inline] softirqs last disabled at (490699): [] irq_exit+0x1d1/0x200 kernel/softirq.c:405 CPU: 0 PID: 4543 Comm: syz-executor7 Not tainted 4.17.0-rc7+ #78 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:783 [inline] RIP: 0010:lock_release+0x4d4/0xa10 kernel/locking/lockdep.c:3942 RSP: 0018:ffff88018446f8a0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: dffffc0000000000 RBX: 1ffff1003088df19 RCX: 1ffff1003088c9ad RDX: 1ffffffff11a31ad RSI: 0000000000000005 RDI: 0000000000000286 RBP: ffff88018446f9d0 R08: 1ffff1003088df1d R09: ffffed003b48b580 R10: 0000000000000003 R11: 0000000000000004 R12: ffff880184464540 R13: ffff8801da45ac18 R14: ffff880184464540 R15: ffff88018446f8e8 FS: 000000000219f940(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffe7f882fc8 CR3: 0000000184b71000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __raw_spin_unlock include/linux/spinlock_api_smp.h:150 [inline] _raw_spin_unlock+0x1a/0x30 kernel/locking/spinlock.c:176 spin_unlock include/linux/spinlock.h:350 [inline] d_walk+0x451/0xc80 fs/dcache.c:1298 shrink_dcache_parent+0x179/0x230 fs/dcache.c:1486 vfs_rmdir+0x202/0x470 fs/namei.c:3850 do_rmdir+0x523/0x610 fs/namei.c:3911 __do_sys_rmdir fs/namei.c:3929 [inline] __se_sys_rmdir fs/namei.c:3927 [inline] __x64_sys_rmdir+0x36/0x40 fs/namei.c:3927 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455777 RSP: 002b:00007ffe7f883788 EFLAGS: 00000206 ORIG_RAX: 0000000000000054 RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 0000000000455777 RDX: 0000000000000000 RSI: 00007ffe7f885530 RDI: 00007ffe7f885530 RBP: 00007ffe7f885530 R08: 0000000000000000 R09: 0000000000000001 R10: 000000000000000a R11: 0000000000000206 R12: 00000000021a0940 R13: 0000000000000000 R14: 0000000000000185 R15: 000000000001b4ad Code: 00 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 a3 03 00 00 48 83 3d 13 75 74 07 00 0f 84 b8 02 00 00 48 8b bd e8 fe ff ff 57 9d <0f> 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 4541 Comm: syz-executor1 Not tainted 4.17.0-rc7+ #78 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:write_comp_data+0x6d/0x70 kernel/kcov.c:146 RSP: 0018:ffff8801863379b8 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81c66597 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 RBP: ffff8801863379e8 R08: ffff8801adec05c0 R09: ffffed00364b4ed0 R10: ffffed00364b4ed0 R11: ffff8801b25a7683 R12: ffffffff87d33ec0 R13: 0000000000000000 R14: 0000000000000005 R15: 0000000000000003 FS: 0000000001159940(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffefd50ef3c CR3: 0000000186047000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: d_walk+0x3d7/0xc80 fs/dcache.c:1277 shrink_dcache_parent+0x179/0x230 fs/dcache.c:1486 vfs_rmdir+0x202/0x470 fs/namei.c:3850 do_rmdir+0x523/0x610 fs/namei.c:3911 __do_sys_rmdir fs/namei.c:3929 [inline] __se_sys_rmdir fs/namei.c:3927 [inline] __x64_sys_rmdir+0x36/0x40 fs/namei.c:3927 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455777 RSP: 002b:00007ffefd50f648 EFLAGS: 00000206 ORIG_RAX: 0000000000000054 RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 0000000000455777 RDX: 0000000000000000 RSI: 00007ffefd5113f0 RDI: 00007ffefd5113f0 RBP: 00007ffefd5113f0 R08: 0000000000000000 R09: 0000000000000001 R10: 000000000000000a R11: 0000000000000206 R12: 000000000115a940 R13: 0000000000000000 R14: 0000000000000185 R15: 000000000001b3fb Code: 00 00 4e 8d 14 dd 28 00 00 00 4d 39 d0 72 1b 49 83 c1 01 4a 89 7c 10 e0 4a 89 74 10 e8 4a 89 54 10 f0 4a 89 4c d8 20 4c 89 08 5d 66 90 55 65 48 8b 04 25 40 ee 01 00 65 8b 15 5f ab 88 7e 48