DUID 00:04:7a:dc:29:a2:f4:b1:6d:28:30:de:a7:64:4f:eb:cd:90
forked to background, child pid 3175
[   26.982199][ T3176] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.992709][ T3176] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
syzkaller login: [   76.355061][   T25] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.5' (ECDSA) to the list of known hosts.
executing program
executing program
executing program
executing program
executing program
executing program
[ 1003.072767][   T27] INFO: task syz-executor408:3667 blocked for more than 143 seconds.
[ 1003.081028][   T27]       Not tainted 5.17.0-rc7-syzkaller #0
[ 1003.095576][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1003.106408][   T27] task:syz-executor408 state:D stack:28624 pid: 3667 ppid:  3646 flags:0x00004004
[ 1003.117818][   T27] Call Trace:
[ 1003.124346][   T27]  
[ 1003.130871][   T27]  __schedule+0x926/0x1080
[ 1003.142106][   T27]  ? release_firmware_map_entry+0x184/0x184
[ 1003.156593][   T27]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[ 1003.167661][   T27]  ? print_irqtrace_events+0x220/0x220
[ 1003.184231][   T27]  ? _raw_spin_lock_irq+0xdb/0x110
[ 1003.189420][   T27]  schedule+0x12b/0x1f0
[ 1003.196111][   T27]  rwsem_down_write_slowpath+0xdb7/0x1480
[ 1003.203885][   T27]  ? rwsem_mark_wake+0x810/0x810
[ 1003.208850][   T27]  ? read_lock_is_recursive+0x10/0x10
[ 1003.214660][   T27]  ? __lock_acquire+0x1382/0x2b00
[ 1003.222653][   T27]  ? do_syscall_64+0x44/0xd0
[ 1003.227364][   T27]  down_write+0x163/0x170
[ 1003.231720][   T27]  ? down_read_killable+0x80/0x80
[ 1003.238272][   T27]  chown_common+0x4fd/0x820
[ 1003.251101][   T27]  ? __ia32_sys_chmod+0x1c0/0x1c0
[ 1003.262944][   T27]  ? rcu_read_lock_any_held+0xb3/0x150
[ 1003.268969][   T27]  ? __mnt_want_write+0x1ee/0x270
[ 1003.274549][   T27]  do_fchownat+0x165/0x240
[ 1003.278993][   T27]  ? chown_common+0x820/0x820
[ 1003.283760][   T27]  ? lockdep_hardirqs_on+0x95/0x140
[ 1003.291764][   T27]  __x64_sys_chown+0x7e/0x90
[ 1003.303370][   T27]  do_syscall_64+0x44/0xd0
[ 1003.307847][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1003.318778][   T27] RIP: 0033:0x7fc93acb03b9
[ 1003.324372][   T27] RSP: 002b:00007fc93ac402f8 EFLAGS: 00000246 ORIG_RAX: 000000000000005c
[ 1003.339531][   T27] RAX: ffffffffffffffda RBX: 00007fc93ad394f0 RCX: 00007fc93acb03b9
[ 1003.347870][   T27] RDX: 000000000000ee00 RSI: 000000000000ee00 RDI: 0000000020000040
[ 1003.356255][   T27] RBP: 00007fc93ad394fc R08: 00007fc93ac40700 R09: 0000000000000000
[ 1003.364649][   T27] R10: 00007fc93ac40700 R11: 0000000000000246 R12: 00007fc93ad06090
[ 1003.373027][   T27] R13: 0030656c69662f2e R14: 64663d736e617274 R15: 00007fc93ad394f8
[ 1003.381033][   T27]  
[ 1003.384560][   T27] INFO: task syz-executor408:3671 blocked for more than 143 seconds.
[ 1003.393220][   T27]       Not tainted 5.17.0-rc7-syzkaller #0
[ 1003.399187][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1003.410312][   T27] task:syz-executor408 state:D stack:28624 pid: 3671 ppid:  3647 flags:0x00004004
[ 1003.420073][   T27] Call Trace:
[ 1003.423916][   T27]  
[ 1003.426867][   T27]  __schedule+0x926/0x1080
[ 1003.431312][   T27]  ? release_firmware_map_entry+0x184/0x184
[ 1003.437755][   T27]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[ 1003.444055][   T27]  ? print_irqtrace_events+0x220/0x220
[ 1003.449531][   T27]  ? _raw_spin_lock_irq+0xdb/0x110
[ 1003.455141][   T27]  schedule+0x12b/0x1f0
[ 1003.459322][   T27]  rwsem_down_write_slowpath+0xdb7/0x1480
[ 1003.465518][   T27]  ? rwsem_mark_wake+0x810/0x810
[ 1003.470510][   T27]  ? read_lock_is_recursive+0x10/0x10
[ 1003.476374][   T27]  ? __lock_acquire+0x1382/0x2b00
[ 1003.481431][   T27]  ? do_syscall_64+0x44/0xd0
[ 1003.487295][   T27]  down_write+0x163/0x170
[ 1003.492002][   T27]  ? down_read_killable+0x80/0x80
[ 1003.497616][   T27]  chown_common+0x4fd/0x820
[ 1003.502161][   T27]  ? __ia32_sys_chmod+0x1c0/0x1c0
[ 1003.507605][   T27]  ? rcu_read_lock_any_held+0xb3/0x150
[ 1003.513471][   T27]  ? __mnt_want_write+0x1ee/0x270
[ 1003.518518][   T27]  do_fchownat+0x165/0x240
[ 1003.523402][   T27]  ? chown_common+0x820/0x820
[ 1003.528112][   T27]  ? lockdep_hardirqs_on+0x95/0x140
[ 1003.534208][   T27]  __x64_sys_chown+0x7e/0x90
[ 1003.538825][   T27]  do_syscall_64+0x44/0xd0
[ 1003.543679][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1003.549597][   T27] RIP: 0033:0x7fc93acb03b9
[ 1003.554523][   T27] RSP: 002b:00007fc93ac402f8 EFLAGS: 00000246 ORIG_RAX: 000000000000005c
[ 1003.563784][   T27] RAX: ffffffffffffffda RBX: 00007fc93ad394f0 RCX: 00007fc93acb03b9
[ 1003.571773][   T27] RDX: 000000000000ee00 RSI: 000000000000ee00 RDI: 0000000020000040
[ 1003.580284][   T27] RBP: 00007fc93ad394fc R08: 00007fc93ac40700 R09: 0000000000000000
[ 1003.588626][   T27] R10: 00007fc93ac40700 R11: 0000000000000246 R12: 00007fc93ad06090
[ 1003.597069][   T27] R13: 0030656c69662f2e R14: 64663d736e617274 R15: 00007fc93ad394f8
[ 1003.605856][   T27]  
[ 1003.608979][   T27] INFO: task syz-executor408:3668 blocked for more than 143 seconds.
[ 1003.617522][   T27]       Not tainted 5.17.0-rc7-syzkaller #0
[ 1003.624004][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1003.633065][   T27] task:syz-executor408 state:D stack:28152 pid: 3668 ppid:  3648 flags:0x00004004
[ 1003.642304][   T27] Call Trace:
[ 1003.646436][   T27]  
[ 1003.649412][   T27]  __schedule+0x926/0x1080
[ 1003.654369][   T27]  ? release_firmware_map_entry+0x184/0x184
[ 1003.660286][   T27]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[ 1003.666746][   T27]  ? print_irqtrace_events+0x220/0x220
[ 1003.672228][   T27]  ? _raw_spin_lock_irq+0xdb/0x110
[ 1003.677880][   T27]  schedule+0x12b/0x1f0
[ 1003.682058][   T27]  rwsem_down_write_slowpath+0xdb7/0x1480
[ 1003.689122][   T27]  ? rwsem_mark_wake+0x810/0x810
[ 1003.694482][   T27]  ? read_lock_is_recursive+0x10/0x10
[ 1003.699894][   T27]  ? __lock_acquire+0x1382/0x2b00
[ 1003.705355][   T27]  ? do_syscall_64+0x44/0xd0
[ 1003.709992][   T27]  down_write+0x163/0x170
[ 1003.714856][   T27]  ? down_read_killable+0x80/0x80
[ 1003.719924][   T27]  chown_common+0x4fd/0x820
[ 1003.724862][   T27]  ? __ia32_sys_chmod+0x1c0/0x1c0
[ 1003.729909][   T27]  ? rcu_read_lock_any_held+0xb3/0x150
[ 1003.735852][   T27]  ? __mnt_want_write+0x1ee/0x270
[ 1003.740904][   T27]  do_fchownat+0x165/0x240
[ 1003.745734][   T27]  ? chown_common+0x820/0x820
[ 1003.750436][   T27]  ? lockdep_hardirqs_on+0x95/0x140
[ 1003.756475][   T27]  __x64_sys_chown+0x7e/0x90
[ 1003.761085][   T27]  do_syscall_64+0x44/0xd0
[ 1003.765936][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1003.771931][   T27] RIP: 0033:0x7fc93acb03b9
[ 1003.776816][   T27] RSP: 002b:00007fc93ac402f8 EFLAGS: 00000246 ORIG_RAX: 000000000000005c
[ 1003.785761][   T27] RAX: ffffffffffffffda RBX: 00007fc93ad394f0 RCX: 00007fc93acb03b9
[ 1003.794146][   T27] RDX: 000000000000ee00 RSI: 000000000000ee00 RDI: 0000000020000040
[ 1003.802149][   T27] RBP: 00007fc93ad394fc R08: 00007fc93ac40700 R09: 0000000000000000
[ 1003.810560][   T27] R10: 00007fc93ac40700 R11: 0000000000000246 R12: 00007fc93ad06090
[ 1003.818968][   T27] R13: 0030656c69662f2e R14: 64663d736e617274 R15: 00007fc93ad394f8
[ 1003.827322][   T27]  
[ 1003.830427][   T27] INFO: task syz-executor408:3670 blocked for more than 144 seconds.
[ 1003.839003][   T27]       Not tainted 5.17.0-rc7-syzkaller #0
[ 1003.845234][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1003.855074][   T27] task:syz-executor408 state:D stack:28624 pid: 3670 ppid:  3651 flags:0x00004004
[ 1003.865041][   T27] Call Trace:
[ 1003.868338][   T27]  
[ 1003.871277][   T27]  __schedule+0x926/0x1080
[ 1003.876347][   T27]  ? release_firmware_map_entry+0x184/0x184
[ 1003.882262][   T27]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[ 1003.888682][   T27]  ? print_irqtrace_events+0x220/0x220
[ 1003.894520][   T27]  ? _raw_spin_lock_irq+0xdb/0x110
[ 1003.899670][   T27]  schedule+0x12b/0x1f0
[ 1003.904340][   T27]  rwsem_down_write_slowpath+0xdb7/0x1480
[ 1003.910115][   T27]  ? rwsem_mark_wake+0x810/0x810
[ 1003.915567][   T27]  ? read_lock_is_recursive+0x10/0x10
[ 1003.920953][   T27]  ? __lock_acquire+0x1382/0x2b00
[ 1003.926421][   T27]  ? do_syscall_64+0x44/0xd0
[ 1003.931112][   T27]  down_write+0x163/0x170
[ 1003.935967][   T27]  ? down_read_killable+0x80/0x80
[ 1003.941019][   T27]  chown_common+0x4fd/0x820
[ 1003.945987][   T27]  ? __ia32_sys_chmod+0x1c0/0x1c0
[ 1003.951037][   T27]  ? rcu_read_lock_any_held+0xb3/0x150
[ 1003.956999][   T27]  ? __mnt_want_write+0x1ee/0x270
[ 1003.962063][   T27]  do_fchownat+0x165/0x240
[ 1003.966970][   T27]  ? chown_common+0x820/0x820
[ 1003.971668][   T27]  ? lockdep_hardirqs_on+0x95/0x140
[ 1003.977736][   T27]  __x64_sys_chown+0x7e/0x90
[ 1003.982345][   T27]  do_syscall_64+0x44/0xd0
[ 1003.987171][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1003.993466][   T27] RIP: 0033:0x7fc93acb03b9
[ 1003.997896][   T27] RSP: 002b:00007fc93ac402f8 EFLAGS: 00000246 ORIG_RAX: 000000000000005c
[ 1004.006757][   T27] RAX: ffffffffffffffda RBX: 00007fc93ad394f0 RCX: 00007fc93acb03b9
[ 1004.015141][   T27] RDX: 000000000000ee00 RSI: 000000000000ee00 RDI: 0000000020000040
[ 1004.023464][   T27] RBP: 00007fc93ad394fc R08: 00007fc93ac40700 R09: 0000000000000000
[ 1004.031452][   T27] R10: 00007fc93ac40700 R11: 0000000000000246 R12: 00007fc93ad06090
[ 1004.039913][   T27] R13: 0030656c69662f2e R14: 64663d736e617274 R15: 00007fc93ad394f8
[ 1004.048799][   T27]  
[ 1004.051924][   T27] INFO: task syz-executor408:3672 blocked for more than 144 seconds.
[ 1004.060520][   T27]       Not tainted 5.17.0-rc7-syzkaller #0
[ 1004.066896][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1004.075946][   T27] task:syz-executor408 state:D stack:28624 pid: 3672 ppid:  3649 flags:0x00004004
[ 1004.085880][   T27] Call Trace:
[ 1004.089188][   T27]  
[ 1004.092129][   T27]  __schedule+0x926/0x1080
[ 1004.097426][   T27]  ? release_firmware_map_entry+0x184/0x184
[ 1004.103680][   T27]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[ 1004.109681][   T27]  ? print_irqtrace_events+0x220/0x220
[ 1004.115650][   T27]  ? _raw_spin_lock_irq+0xdb/0x110
[ 1004.120810][   T27]  schedule+0x12b/0x1f0
[ 1004.125407][   T27]  rwsem_down_write_slowpath+0xdb7/0x1480
[ 1004.131273][   T27]  ? rwsem_mark_wake+0x810/0x810
[ 1004.136694][   T27]  ? read_lock_is_recursive+0x10/0x10
[ 1004.142190][   T27]  ? __lock_acquire+0x1382/0x2b00
[ 1004.147638][   T27]  ? do_syscall_64+0x44/0xd0
[ 1004.152277][   T27]  down_write+0x163/0x170
[ 1004.157489][   T27]  ? down_read_killable+0x80/0x80
[ 1004.163249][   T27]  chown_common+0x4fd/0x820
[ 1004.167796][   T27]  ? __ia32_sys_chmod+0x1c0/0x1c0
[ 1004.173303][   T27]  ? rcu_read_lock_any_held+0xb3/0x150
[ 1004.178796][   T27]  ? __mnt_want_write+0x1ee/0x270
[ 1004.184240][   T27]  do_fchownat+0x165/0x240
[ 1004.188680][   T27]  ? chown_common+0x820/0x820
[ 1004.194996][   T27]  ? lockdep_hardirqs_on+0x95/0x140
[ 1004.200219][   T27]  __x64_sys_chown+0x7e/0x90
[ 1004.205246][   T27]  do_syscall_64+0x44/0xd0
[ 1004.209680][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1004.216069][   T27] RIP: 0033:0x7fc93acb03b9
[ 1004.220496][   T27] RSP: 002b:00007fc93ac402f8 EFLAGS: 00000246 ORIG_RAX: 000000000000005c
[ 1004.229339][   T27] RAX: ffffffffffffffda RBX: 00007fc93ad394f0 RCX: 00007fc93acb03b9
[ 1004.237757][   T27] RDX: 000000000000ee00 RSI: 000000000000ee00 RDI: 0000000020000040
[ 1004.246063][   T27] RBP: 00007fc93ad394fc R08: 00007fc93ac40700 R09: 0000000000000000
[ 1004.254458][   T27] R10: 00007fc93ac40700 R11: 0000000000000246 R12: 00007fc93ad06090
[ 1004.262443][   T27] R13: 0030656c69662f2e R14: 64663d736e617274 R15: 00007fc93ad394f8
[ 1004.270877][   T27]  
[ 1004.274322][   T27] INFO: task syz-executor408:3669 blocked for more than 144 seconds.
[ 1004.282397][   T27]       Not tainted 5.17.0-rc7-syzkaller #0
[ 1004.288793][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1004.297997][   T27] task:syz-executor408 state:D stack:28624 pid: 3669 ppid:  3650 flags:0x00004004
[ 1004.308003][   T27] Call Trace:
[ 1004.311298][   T27]  
[ 1004.314638][   T27]  __schedule+0x926/0x1080
[ 1004.319091][   T27]  ? release_firmware_map_entry+0x184/0x184
[ 1004.325478][   T27]  ? lockdep_hardirqs_on_prepare+0x412/0x780
[ 1004.331496][   T27]  ? print_irqtrace_events+0x220/0x220
[ 1004.337400][   T27]  ? _raw_spin_lock_irq+0xdb/0x110
[ 1004.342867][   T27]  schedule+0x12b/0x1f0
[ 1004.347038][   T27]  rwsem_down_write_slowpath+0xdb7/0x1480
[ 1004.353217][   T27]  ? rwsem_mark_wake+0x810/0x810
[ 1004.358175][   T27]  ? read_lock_is_recursive+0x10/0x10
[ 1004.364832][   T27]  ? __lock_acquire+0x1382/0x2b00
[ 1004.369887][   T27]  ? do_syscall_64+0x44/0xd0
[ 1004.374946][   T27]  down_write+0x163/0x170
[ 1004.379291][   T27]  ? down_read_killable+0x80/0x80
[ 1004.384803][   T27]  chown_common+0x4fd/0x820
[ 1004.389333][   T27]  ? __ia32_sys_chmod+0x1c0/0x1c0
[ 1004.394855][   T27]  ? rcu_read_lock_any_held+0xb3/0x150
[ 1004.400357][   T27]  ? __mnt_want_write+0x1ee/0x270
[ 1004.405873][   T27]  do_fchownat+0x165/0x240
[ 1004.410417][   T27]  ? chown_common+0x820/0x820
[ 1004.415886][   T27]  ? lockdep_hardirqs_on+0x95/0x140
[ 1004.421114][   T27]  __x64_sys_chown+0x7e/0x90
[ 1004.426169][   T27]  do_syscall_64+0x44/0xd0
[ 1004.430616][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1004.436930][   T27] RIP: 0033:0x7fc93acb03b9
[ 1004.441353][   T27] RSP: 002b:00007fc93ac402f8 EFLAGS: 00000246 ORIG_RAX: 000000000000005c
[ 1004.450241][   T27] RAX: ffffffffffffffda RBX: 00007fc93ad394f0 RCX: 00007fc93acb03b9
[ 1004.458574][   T27] RDX: 000000000000ee00 RSI: 000000000000ee00 RDI: 0000000020000040
[ 1004.466939][   T27] RBP: 00007fc93ad394fc R08: 00007fc93ac40700 R09: 0000000000000000
[ 1004.475253][   T27] R10: 00007fc93ac40700 R11: 0000000000000246 R12: 00007fc93ad06090
[ 1004.483613][   T27] R13: 0030656c69662f2e R14: 64663d736e617274 R15: 00007fc93ad394f8
[ 1004.491618][   T27]  
[ 1004.495541][   T27] 
[ 1004.495541][   T27] Showing all locks held in the system:
[ 1004.503700][   T27] 1 lock held by khungtaskd/27:
[ 1004.508560][   T27]  #0: ffffffff8cb1d460 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[ 1004.518798][   T27] 2 locks held by kworker/0:3/1133:
[ 1004.524619][   T27] 2 locks held by getty/3285:
[ 1004.529508][   T27]  #0: ffff888024476098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[ 1004.539862][   T27]  #1: ffffc90002b662e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6c5/0x1c60
[ 1004.550395][   T27] 2 locks held by syz-executor408/3656:
[ 1004.556273][   T27]  #0: ffff888078d820f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x2f0
[ 1004.565957][   T27]  #1: ffff8880725a8208 (&sb->s_type->i_mutex_key#14){++++}-{3:3}, at: iterate_dir+0x124/0x640
[ 1004.576782][   T27] 2 locks held by syz-executor408/3667:
[ 1004.582334][   T27]  #0: ffff888075a9e460 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[ 1004.591990][   T27]  #1: ffff8880725a8208 (&sb->s_type->i_mutex_key#14){++++}-{3:3}, at: chown_common+0x4fd/0x820
[ 1004.602962][   T27] 2 locks held by syz-executor408/3660:
[ 1004.608539][   T27]  #0: ffff88801a17f9f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x2f0
[ 1004.618213][   T27]  #1: ffff888072540208 (&sb->s_type->i_mutex_key#14){++++}-{3:3}, at: iterate_dir+0x124/0x640
[ 1004.629429][   T27] 2 locks held by syz-executor408/3671:
[ 1004.636106][   T27]  #0: ffff8880770e4460 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[ 1004.645711][   T27]  #1: ffff888072540208 (&sb->s_type->i_mutex_key#14){++++}-{3:3}, at: chown_common+0x4fd/0x820
[ 1004.656567][   T27] 2 locks held by syz-executor408/3659:
[ 1004.662118][   T27]  #0: ffff888078d82d70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x2f0
[ 1004.671859][   T27]  #1: ffff8880725a87d0 (&sb->s_type->i_mutex_key#14){++++}-{3:3}, at: iterate_dir+0x124/0x640
[ 1004.682794][   T27] 2 locks held by syz-executor408/3668:
[ 1004.688354][   T27]  #0: ffff888079768460 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[ 1004.698370][   T27]  #1: ffff8880725a87d0 (&sb->s_type->i_mutex_key#14){++++}-{3:3}, at: chown_common+0x4fd/0x820
[ 1004.709249][   T27] 2 locks held by syz-executor408/3661:
[ 1004.715133][   T27]  #0: ffff88801a18b9f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x2f0
[ 1004.724763][   T27]  #1: ffff8880725407d0 (&sb->s_type->i_mutex_key#14){++++}-{3:3}, at: iterate_dir+0x124/0x640
[ 1004.735548][   T27] 2 locks held by syz-executor408/3670:
[ 1004.741105][   T27]  #0: ffff8880770ba460 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[ 1004.751165][   T27]  #1: ffff8880725407d0 (&sb->s_type->i_mutex_key#14){++++}-{3:3}, at: chown_common+0x4fd/0x820
[ 1004.762018][   T27] 2 locks held by syz-executor408/3663:
[ 1004.767972][   T27]  #0: ffff888078d83c70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x2f0
[ 1004.777590][   T27]  #1: ffff8880725a9360 (&sb->s_type->i_mutex_key#14){++++}-{3:3}, at: iterate_dir+0x124/0x640
[ 1004.788877][   T27] 2 locks held by syz-executor408/3672:
[ 1004.794751][   T27]  #0: ffff88807976e460 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[ 1004.804426][   T27]  #1: ffff8880725a9360 (&sb->s_type->i_mutex_key#14){++++}-{3:3}, at: chown_common+0x4fd/0x820
[ 1004.815275][   T27] 2 locks held by syz-executor408/3662:
[ 1004.820827][   T27]  #0: ffff888078d82af0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x2f0
[ 1004.830567][   T27]  #1: ffff8880725a8d98 (&sb->s_type->i_mutex_key#14){++++}-{3:3}, at: iterate_dir+0x124/0x640
[ 1004.841743][   T27] 2 locks held by syz-executor408/3669:
[ 1004.847780][   T27]  #0: ffff8880770a6460 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[ 1004.857645][   T27]  #1: ffff8880725a8d98 (&sb->s_type->i_mutex_key#14){++++}-{3:3}, at: chown_common+0x4fd/0x820
[ 1004.868622][   T27] 
[ 1004.870967][   T27] =============================================
[ 1004.870967][   T27] 
[ 1004.879882][   T27] NMI backtrace for cpu 1
[ 1004.884219][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.17.0-rc7-syzkaller #0
[ 1004.892384][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1004.902442][   T27] Call Trace:
[ 1004.905738][   T27]  
[ 1004.908674][   T27]  dump_stack_lvl+0x1dc/0x2d8
[ 1004.913464][   T27]  ? show_regs_print_info+0x12/0x12
[ 1004.918685][   T27]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 1004.924615][   T27]  nmi_cpu_backtrace+0x45f/0x490
[ 1004.929581][   T27]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[ 1004.935745][   T27]  ? wake_up_klogd+0xb2/0xf0
[ 1004.940349][   T27]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 1004.946089][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1004.952272][   T27]  nmi_trigger_cpumask_backtrace+0x16a/0x280
[ 1004.958269][   T27]  watchdog+0xc82/0xcd0
[ 1004.962541][   T27]  kthread+0x2a3/0x2d0
[ 1004.966721][   T27]  ? hungtask_pm_notify+0x50/0x50
[ 1004.971751][   T27]  ? kthread_blkcg+0xd0/0xd0
[ 1004.976348][   T27]  ret_from_fork+0x1f/0x30
[ 1004.980812][   T27]  
[ 1004.984001][   T27] Sending NMI from CPU 1 to CPUs 0:
[ 1004.989216][    C0] NMI backtrace for cpu 0
[ 1004.989227][    C0] CPU: 0 PID: 3659 Comm: syz-executor408 Not tainted 5.17.0-rc7-syzkaller #0
[ 1004.989242][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1004.989249][    C0] RIP: 0010:check_preemption_disabled+0x82/0x1c0
[ 1004.989272][    C0] Code: 00 00 48 3b 44 24 08 0f 85 52 01 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c 8f 04 24 <4c> 8b 24 24 bd 00 02 00 00 be 00 02 00 00 4c 21 e6 31 ff 0f 1f 44
[ 1004.989283][    C0] RSP: 0018:ffffc9000280f0f8 EFLAGS: 00000046
[ 1004.989296][    C0] RAX: 6857cdb758cb8a00 RBX: 0000000000000000 RCX: ffff8880759b0000
[ 1004.989306][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1004.989314][    C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ffbbdf
[ 1004.989323][    C0] R10: fffffbfff1ffbbdf R11: 0000000000000000 R12: 0000000000000246
[ 1004.989332][    C0] R13: 1ffff92000501e30 R14: ffffffff8a6f6440 R15: ffffffff8ad672a0
[ 1004.989342][    C0] FS:  00007fc93ac61700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 1004.989354][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1004.989363][    C0] CR2: 00007fc93ac619e0 CR3: 000000007aabd000 CR4: 00000000003506f0
[ 1004.989375][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1004.989383][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1004.989391][    C0] Call Trace:
[ 1004.989395][    C0]  
[ 1004.989401][    C0]  ? _raw_spin_lock_irqsave+0xac/0x120
[ 1004.989414][    C0]  lockdep_hardirqs_off+0x71/0x100
[ 1004.989429][    C0]  ? _raw_spin_lock_irqsave+0xac/0x120
[ 1004.989441][    C0]  trace_hardirqs_off+0x14/0x70
[ 1004.989517][    C0]  _raw_spin_lock_irqsave+0xac/0x120
[ 1004.989536][    C0]  ? _raw_spin_lock+0x40/0x40
[ 1004.989549][    C0]  ? p9_client_read_once+0x3e7/0x910
[ 1004.989596][    C0]  debug_check_no_obj_freed+0xa9/0x650
[ 1004.989653][    C0]  __free_pages_ok+0x3c0/0x1280
[ 1004.989699][    C0]  __unfreeze_partials+0x1ab/0x200
[ 1004.989720][    C0]  ? put_cpu_partial+0xe8/0x180
[ 1004.989736][    C0]  put_cpu_partial+0x116/0x180
[ 1004.989750][    C0]  ? qlink_free+0x37/0x80
[ 1004.989778][    C0]  ___cache_free+0x107/0x160
[ 1004.989792][    C0]  kasan_quarantine_reduce+0x169/0x1f0
[ 1004.989807][    C0]  __kasan_slab_alloc+0x2f/0xe0
[ 1004.989821][    C0]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1004.989836][    C0]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 1004.989862][    C0]  ? __might_sleep+0xe0/0xe0
[ 1004.989895][    C0]  ? mark_lock+0x191/0x1e00
[ 1004.989915][    C0]  kmem_cache_alloc+0x1c9/0x310
[ 1004.989928][    C0]  ? p9_client_prepare_req+0xb1/0x720
[ 1004.989943][    C0]  p9_client_prepare_req+0xb1/0x720
[ 1004.989956][    C0]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 1004.989973][    C0]  p9_client_rpc+0x154/0x12a0
[ 1004.989992][    C0]  ? p9_fid_create+0x310/0x310
[ 1004.990004][    C0]  ? print_irqtrace_events+0x220/0x220
[ 1004.990021][    C0]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[ 1004.990034][    C0]  ? lockdep_hardirqs_on+0x95/0x140
[ 1004.990049][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 1004.990061][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1004.990073][    C0]  ? radix_tree_delete_item+0x2e2/0x3e0
[ 1004.990091][    C0]  p9_client_read_once+0x3e7/0x910
[ 1004.990109][    C0]  ? p9_client_read+0x190/0x190
[ 1004.990124][    C0]  ? p9_client_read+0x122/0x190
[ 1004.990138][    C0]  p9_client_read+0xa6/0x190
[ 1004.990153][    C0]  v9fs_dir_readdir+0x2fa/0x930
[ 1004.990200][    C0]  ? v9fs_dir_release+0x410/0x410
[ 1004.990220][    C0]  ? __down_read_common+0x1b0/0x450
[ 1004.990233][    C0]  ? mutex_lock_io_nested+0x60/0x60
[ 1004.990252][    C0]  ? iterate_dir+0x124/0x640
[ 1004.990266][    C0]  iterate_dir+0x2aa/0x640
[ 1004.990280][    C0]  __se_sys_getdents64+0x1ea/0x4e0
[ 1004.990296][    C0]  ? __x64_sys_getdents64+0x80/0x80
[ 1004.990308][    C0]  ? vtime_user_exit+0x2b2/0x3e0
[ 1004.990334][    C0]  ? filldir+0x690/0x690
[ 1004.990347][    C0]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[ 1004.990362][    C0]  ? lockdep_hardirqs_on+0x95/0x140
[ 1004.990377][    C0]  ? syscall_enter_from_user_mode+0x2e/0x1b0
[ 1004.990393][    C0]  do_syscall_64+0x44/0xd0
[ 1004.990407][    C0]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1004.990421][    C0] RIP: 0033:0x7fc93acb03b9
[ 1004.990433][    C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1004.990443][    C0] RSP: 002b:00007fc93ac612f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 1004.990457][    C0] RAX: ffffffffffffffda RBX: 00007fc93ad394e0 RCX: 00007fc93acb03b9
[ 1004.990467][    C0] RDX: 0000000000000034 RSI: 0000000000000000 RDI: 0000000000000006
[ 1004.990475][    C0] RBP: 00007fc93ad394ec R08: 0000000000000000 R09: 0000000000000000
[ 1004.990483][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc93ad06090
[ 1004.990491][    C0] R13: 0030656c69662f2e R14: 64663d736e617274 R15: 00007fc93ad394e8
[ 1004.990508][    C0]  
[ 1004.990513][    C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.297 msecs
[ 1005.485834][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[ 1005.493229][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.17.0-rc7-syzkaller #0
[ 1005.501401][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1005.511471][   T27] Call Trace:
[ 1005.514760][   T27]  
[ 1005.517694][   T27]  dump_stack_lvl+0x1dc/0x2d8
[ 1005.522398][   T27]  ? show_regs_print_info+0x12/0x12
[ 1005.527610][   T27]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 1005.533356][   T27]  panic+0x2d6/0x810
[ 1005.537338][   T27]  ? schedule_preempt_disabled+0x20/0x20
[ 1005.542979][   T27]  ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 1005.549136][   T27]  ? nmi_panic+0x90/0x90
[ 1005.553399][   T27]  ? preempt_schedule_thunk+0x16/0x18
[ 1005.558778][   T27]  ? nmi_trigger_cpumask_backtrace+0x206/0x280
[ 1005.564931][   T27]  ? nmi_trigger_cpumask_backtrace+0x266/0x280
[ 1005.571108][   T27]  watchdog+0xcc2/0xcd0
[ 1005.575290][   T27]  kthread+0x2a3/0x2d0
[ 1005.579397][   T27]  ? hungtask_pm_notify+0x50/0x50
[ 1005.584433][   T27]  ? kthread_blkcg+0xd0/0xd0
[ 1005.589465][   T27]  ret_from_fork+0x1f/0x30
[ 1005.593906][   T27]  
[ 1005.597240][   T27] Kernel Offset: disabled
[ 1005.601563][   T27] Rebooting in 86400 seconds..