INFO: task syz.0.1952:14220 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.1952      state:D stack:25816 pid:14220 tgid:14219 ppid:5805   task_flags:0x480140 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x15dd/0x52d0
 schedule+0x164/0x360
 blk_mq_freeze_queue_wait+0x101/0x180
 queue_limits_commit_update_frozen+0x55/0xd0
 nbd_set_size+0x454/0x680
 nbd_genl_reconfigure+0x7f5/0x1ea0
 genl_family_rcv_msg_doit+0x22a/0x330
 genl_rcv_msg+0x61c/0x7a0
 netlink_rcv_skb+0x232/0x4b0
 genl_rcv+0x28/0x40
 netlink_unicast+0x80f/0x9b0
 netlink_sendmsg+0x813/0xb40
 ____sys_sendmsg+0xa68/0xad0
 ___sys_sendmsg+0x2a5/0x360
 __x64_sys_sendmsg+0x1bd/0x2a0
 do_syscall_64+0x14d/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f568a39c799
RSP: 002b:00007f56885f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f568a615fa0 RCX: 00007f568a39c799
RDX: 0000000000004000 RSI: 0000200000000500 RDI: 0000000000000005
RBP: 00007f568a432bd9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f568a616038 R14: 00007f568a615fa0 R15: 00007ffe9f8ac138
 </TASK>
INFO: task syz.0.1952:14225 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.1952      state:D stack:27840 pid:14225 tgid:14219 ppid:5805   task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x15dd/0x52d0
 schedule+0x164/0x360
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x7fe/0x1300
 genl_rcv_msg+0x10b/0x7a0
 netlink_rcv_skb+0x232/0x4b0
 genl_rcv+0x28/0x40
 netlink_unicast+0x80f/0x9b0
 netlink_sendmsg+0x813/0xb40
 ____sys_sendmsg+0xa68/0xad0
 ___sys_sendmsg+0x2a5/0x360
 __x64_sys_sendmsg+0x1bd/0x2a0
 do_syscall_64+0x14d/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f568a39c799
RSP: 002b:00007f56885d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f568a616090 RCX: 00007f568a39c799
RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007
RBP: 00007f568a432bd9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f568a616128 R14: 00007f568a616090 R15: 00007ffe9f8ac138
 </TASK>
INFO: task syz.2.1953:14227 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.1953      state:D stack:26120 pid:14227 tgid:14226 ppid:5811   task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x15dd/0x52d0
 schedule+0x164/0x360
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x7fe/0x1300
 genl_rcv_msg+0x10b/0x7a0
 netlink_rcv_skb+0x232/0x4b0
 genl_rcv+0x28/0x40
 netlink_unicast+0x80f/0x9b0
 netlink_sendmsg+0x813/0xb40
 ____sys_sendmsg+0xa68/0xad0
 ___sys_sendmsg+0x2a5/0x360
 __x64_sys_sendmsg+0x1bd/0x2a0
 do_syscall_64+0x14d/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb264d9c799
RSP: 002b:00007fb265cf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fb265015fa0 RCX: 00007fb264d9c799
RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000009
RBP: 00007fb264e32bd9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fb265016038 R14: 00007fb265015fa0 R15: 00007ffcbb3e3f78
 </TASK>
INFO: task syz.1.1954:14233 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.1954      state:D stack:27608 pid:14233 tgid:14231 ppid:5809   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x15dd/0x52d0
 schedule+0x164/0x360
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x7fe/0x1300
 genl_rcv_msg+0x10b/0x7a0
 netlink_rcv_skb+0x232/0x4b0
 genl_rcv+0x28/0x40
 netlink_unicast+0x80f/0x9b0
 netlink_sendmsg+0x813/0xb40
 ____sys_sendmsg+0xa68/0xad0
 ___sys_sendmsg+0x2a5/0x360
 __x64_sys_sendmsg+0x1bd/0x2a0
 do_syscall_64+0x14d/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4b21f9c799
RSP: 002b:00007f4b201f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f4b22216090 RCX: 00007f4b21f9c799
RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
RBP: 00007f4b22032bd9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f4b22216128 R14: 00007f4b22216090 R15: 00007ffcb65a5a08
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/35:
 #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
3 locks held by klogd/5244:
 #0: ffff88812103ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150
 #1: ffff888121024588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
 #2: ffff888115f4e250 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x66/0x1390
2 locks held by getty/5633:
 #0: ffff88811683b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc900035762f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
1 lock held by udevd/6681:
 #0: ffff88816a7d0358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
6 locks held by syz.0.1952/14220:
 #0: ffffffff8fc3b030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff8fc3ae48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
 #2: ffff88816a7c3a78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0
 #3: ffff88816a80c978 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
 #4: ffff88816a80c318 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
 #5: ffff88816a80c350 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
2 locks held by syz.0.1952/14225:
 #0: ffffffff8fc3b030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff8fc3ae48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz.2.1953/14227:
 #0: ffffffff8fc3b030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff8fc3ae48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz.1.1954/14233:
 #0: ffffffff8fc3b030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff8fc3ae48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/14238:
 #0: ffffffff8fc3b030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff8fc3ae48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/14242:
 #0: ffffffff8fc3b030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff8fc3ae48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/14243:
 #0: ffffffff8fc3b030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff8fc3ae48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/14267:
 #0: ffffffff8fc3b030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff8fc3ae48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/14269:
 #0: ffffffff8fc3b030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff8fc3ae48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/14270:
 #0: ffffffff8fc3b030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff8fc3ae48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/14298:
 #0: ffffffff8fc3b030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff8fc3ae48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/14309:
 #0: ffffffff8fc3b030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff8fc3ae48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/14311:
 #0: ffffffff8fc3b030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff8fc3ae48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150
 nmi_cpu_backtrace+0x274/0x2d0
 nmi_trigger_cpumask_backtrace+0x17a/0x300
 sys_info+0x135/0x170
 watchdog+0xfd9/0x1030
 kthread+0x388/0x470
 ret_from_fork+0x51e/0xb90
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 66 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:__pick_eevdf+0x5b4/0xc30
Code: 1f 0f 88 ac 05 00 00 31 db 4c 89 74 24 10 89 5c 24 5c 4d 85 e4 0f 84 86 01 00 00 49 83 c4 78 4c 89 e0 48 c1 e8 03 80 3c 28 00 <74> 08 4c 89 e7 e8 12 bf 96 00 4d 8b 34 24 48 8b 44 24 50 80 3c 28
RSP: 0018:ffffc9000178f4f0 EFLAGS: 00000046
RAX: 1ffff1102168001f RBX: 00000000f3e4b001 RCX: 0000000000000001
RDX: ffffc9000178f960 RSI: 0000000000000001 RDI: ffff88812103ae60
RBP: dffffc0000000000 R08: ffffffff901190b7 R09: 1ffffffff2023216
R10: dffffc0000000000 R11: fffffbfff2023217 R12: ffff88810b4000f8
R13: ffff88810b400090 R14: ffff8881001a3b00 R15: 1ffff1102003476f
FS:  0000000000000000(0000) GS:ffff88818de64000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f53fa087e20 CR3: 000000000e54c000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 pick_task_fair+0xcb/0x2a0
 pick_next_task_fair+0x182/0x1740
 __pick_next_task+0xe6/0x480
 __schedule+0x7f0/0x52d0
 schedule+0x164/0x360
 toggle_allocation_gate+0x17c/0x290
 process_scheduled_works+0xb02/0x1830
 worker_thread+0xa50/0xfc0
 kthread+0x388/0x470
 ret_from_fork+0x51e/0xb90
 ret_from_fork_asm+0x1a/0x30
 </TASK>
