INFO: task syz.2.12977:18014 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.12977     state:D stack:25480 pid:18014 tgid:18013 ppid:5612   task_flags:0x480140 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x17d9/0x56c0
 schedule+0x164/0x2b0
 blk_mq_freeze_queue_wait+0x101/0x180
 queue_limits_commit_update_frozen+0x55/0xd0
 nbd_set_size+0x454/0x680
 nbd_genl_reconfigure+0x7e9/0x1e80
 genl_family_rcv_msg_doit+0x233/0x340
 genl_rcv_msg+0x614/0x7a0
 netlink_rcv_skb+0x226/0x4a0
 genl_rcv+0x28/0x40
 netlink_unicast+0x7bb/0x940
 netlink_sendmsg+0x813/0xb40
 sock_sendmsg_nosec+0x13a/0x180
 ____sys_sendmsg+0x54e/0x850
 ___sys_sendmsg+0x2a5/0x360
 __x64_sys_sendmsg+0x1b1/0x290
 do_syscall_64+0x174/0x580
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fbdc759de99
RSP: 002b:00007fbdc83fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fbdc7825fa0 RCX: 00007fbdc759de99
RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 0000000000000007
RBP: 00007fbdc7633eaf R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fbdc7826038 R14: 00007fbdc7825fa0 R15: 00007ffea7bf8db8
 </TASK>
INFO: task syz.0.12978:18030 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.12978     state:D stack:28424 pid:18030 tgid:18016 ppid:5617   task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x17d9/0x56c0
 schedule+0x164/0x2b0
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x7bf/0x1550
 genl_rcv_msg+0x10b/0x7a0
 netlink_rcv_skb+0x226/0x4a0
 genl_rcv+0x28/0x40
 netlink_unicast+0x7bb/0x940
 netlink_sendmsg+0x813/0xb40
 sock_sendmsg_nosec+0x13a/0x180
 __sys_sendto+0x408/0x5a0
 __x64_sys_sendto+0xde/0x100
 do_syscall_64+0x174/0x580
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f342e35e6ce
RSP: 002b:00007f342f18ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f342f18c6c0 RCX: 00007f342e35e6ce
RDX: 0000000000000024 RSI: 00007f342f18b000 RDI: 000000000000000e
RBP: 0000000000000000 R08: 00007f342f18af04 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e
R13: 00007f342f18af58 R14: 00007f342f18b000 R15: 0000000000000000
 </TASK>
INFO: task syz.1.12980:18025 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.12980     state:D stack:26016 pid:18025 tgid:18024 ppid:5606   task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x17d9/0x56c0
 schedule+0x164/0x2b0
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x7bf/0x1550
 genl_rcv_msg+0x10b/0x7a0
 netlink_rcv_skb+0x226/0x4a0
 genl_rcv+0x28/0x40
 netlink_unicast+0x7bb/0x940
 netlink_sendmsg+0x813/0xb40
 sock_sendmsg_nosec+0x13a/0x180
 __sys_sendto+0x408/0x5a0
 __x64_sys_sendto+0xde/0x100
 do_syscall_64+0x174/0x580
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f91dbd5e6ce
RSP: 002b:00007f91dcd0ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f91dcd0c6c0 RCX: 00007f91dbd5e6ce
RDX: 0000000000000020 RSI: 00007f91dcd0b000 RDI: 0000000000000007
RBP: 0000000000000000 R08: 00007f91dcd0af04 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
R13: 00007f91dcd0af58 R14: 00007f91dcd0b000 R15: 0000000000000000
 </TASK>
INFO: task syz.1.12980:18026 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.12980     state:D stack:27200 pid:18026 tgid:18024 ppid:5606   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x17d9/0x56c0
 schedule+0x164/0x2b0
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x7bf/0x1550
 genl_rcv_msg+0x10b/0x7a0
 netlink_rcv_skb+0x226/0x4a0
 genl_rcv+0x28/0x40
 netlink_unicast+0x7bb/0x940
 netlink_sendmsg+0x813/0xb40
 sock_sendmsg_nosec+0x13a/0x180
 ____sys_sendmsg+0x54e/0x850
 ___sys_sendmsg+0x2a5/0x360
 __x64_sys_sendmsg+0x1b1/0x290
 do_syscall_64+0x174/0x580
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f91dbd9de99
RSP: 002b:00007f91dcceb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f91dc026090 RCX: 00007f91dbd9de99
RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000007
RBP: 00007f91dbe33eaf R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f91dc026128 R14: 00007f91dc026090 R15: 00007ffe7e1e64c8
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/35:
 #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
2 locks held by getty/5439:
 #0: ffff88810e10b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
4 locks held by kworker/u8:2/5642:
1 lock held by udevd/16910:
 #0: ffff8881afa79350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
6 locks held by syz.2.12977/18014:
 #0: ffffffff9009dae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff9009d920 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
 #2: ffff88816a66fa60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80
 #3: ffff88816d93d118 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
 #4: ffff88816d93cae0 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
 #5: ffff88816d93cb18 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
2 locks held by syz.0.12978/18030:
 #0: ffffffff9009dae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff9009d920 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz.1.12980/18025:
 #0: ffffffff9009dae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff9009d920 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz.1.12980/18026:
 #0: ffffffff9009dae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff9009d920 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/18035:
 #0: ffffffff9009dae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff9009d920 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/18038:
 #0: ffffffff9009dae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff9009d920 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/18042:
 #0: ffffffff9009dae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff9009d920 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/18100:
 #0: ffffffff9009dae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff9009d920 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/18119:
 #0: ffffffff9009dae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff9009d920 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/18124:
 #0: ffffffff9009dae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff9009d920 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/18160:
 #0: ffffffff9009dae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff9009d920 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/18182:
 #0: ffffffff9009dae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff9009d920 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/18183:
 #0: ffffffff9009dae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff9009d920 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150
 nmi_cpu_backtrace+0x274/0x2d0
 nmi_trigger_cpumask_backtrace+0x17a/0x380
 sys_info+0x135/0x170
 watchdog+0xfd7/0x1030
 kthread+0x388/0x470
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 5665 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: krdsd rds_tcp_accept_worker
RIP: 0010:__lock_acquire+0x34d/0x2cf0
Code: 09 cc 41 09 cc 41 09 dc 45 89 64 c7 20 41 89 7c c7 24 4c 89 7c 24 18 4d 8d 2c c7 41 81 e4 ff 1f 00 00 4c 0f a3 25 b3 0a d2 12 <73> 10 49 69 c4 c8 00 00 00 48 8d 80 10 c5 15 94 eb 32 83 3d 7a 9a
RSP: 0018:ffffc90004f0f118 EFLAGS: 00000003
RAX: 000000000000000f RBX: 0000000000020000 RCX: 0000000000000007
RDX: 0000000000020000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff8177827f R09: 0000000000000000
R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000007
R13: ffff888178bec798 R14: ffff888178bebb80 R15: ffff888178bec720
FS:  0000000000000000(0000) GS:ffff88818d950000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000562b463c7000 CR3: 000000016f0a8000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 lock_acquire+0x106/0x350
 unwind_next_frame+0xac/0x2550
 arch_stack_walk+0x11b/0x150
 stack_trace_save+0xa9/0x100
 kasan_save_stack+0x3e/0x60
 kasan_record_aux_stack+0xbd/0xd0
 call_rcu+0xee/0x8b0
 __destroy_inode+0x2a1/0x630
 evict+0x8d4/0xb50
 kernel_accept+0x3a2/0x480
 rds_tcp_accept_one+0x16f/0xd40
 rds_tcp_accept_worker+0x1d/0x70
 process_scheduled_works+0xa8e/0x14e0
 worker_thread+0xa47/0xfb0
 kthread+0x388/0x470
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
