INFO: task syz.2.68:6235 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.68        state:D stack:28696 pid:6235  tgid:6221  ppid:5803   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x15dd/0x52d0
 schedule+0x164/0x360
 schedule_preempt_disabled+0x13/0x30
 rwsem_down_read_slowpath+0x61e/0x920
 down_read+0x99/0x2e0
 path_openat+0xb3d/0x3860
 do_file_open+0x23e/0x4a0
 do_sys_openat2+0x113/0x200
 __x64_sys_openat+0x138/0x170
 do_syscall_64+0x14d/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f714559c799
RSP: 002b:00007f71464d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f7145816180 RCX: 00007f714559c799
RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c
RBP: 00007f7145632c99 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f7145816218 R14: 00007f7145816180 R15: 00007ffdb1a13458
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/34:
 #0: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
4 locks held by kworker/u10:4/82:
 #0: ffff888162a88948 ((wq_completion)writeback
){+.+.}-{0:0}
, at: process_scheduled_works+0xa52/0x18c0
 #1: ffffc900017dfc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
 #2: 
ffff88816a84e0e0
 (
&type->s_umount_key
#62
){++++}-{4:4}
, at: super_trylock_shared+0x20/0xf0
 #3: 
ffff8881bf998af0
 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: jfs_commit_inode+0x1ca/0x530
5 locks held by kworker/0:2/886:
 #0: ffff888168528148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
 #1: ffffc90006977c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
 #2: ffff888109c49198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
 #3: ffff888112941198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
 #4: ffff888168ae3278 (&(&priv->bus_notifier)->rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90
2 locks held by getty/5635:
 #0: ffff888171fd40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc900032c02f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
4 locks held by syz.2.68/6234:
1 lock held by syz.2.68/6235:
 #0: ffff8881bf998ea0 (&type->i_mutex_dir_key#12){++++}-{4:4}, at: path_openat+0xb3d/0x3860
1 lock held by syz-executor/6366:
 #0: ffffffff8e7647b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
4 locks held by udevd/8085:
 #0: ffff888120fdf2f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10
 #1: ffff88801b56ec88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420
 #2: ffff88811a9ad4b8 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
 #3: ffff888112941198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150
 nmi_cpu_backtrace+0x274/0x2d0
 nmi_trigger_cpumask_backtrace+0x17a/0x300
 sys_info+0x135/0x170
 watchdog+0xfd9/0x1030
 kthread+0x388/0x470
 ret_from_fork+0x51e/0xb90
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 6366 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:__lock_acquire+0xa54/0x2cf0
Code: c7 c6 9a 42 01 8e 67 48 0f b9 3a 90 31 c0 48 83 78 40 00 0f 84 5f 1d 00 00 41 8b 45 20 25 ff 1f 00 00 48 0f a3 05 cc 3c 82 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 80 10 d4 c4 93 eb 32 83 3d 93 cc
RSP: 0018:ffffc90000007758 EFLAGS: 00000003
RAX: 0000000000000007 RBX: 000000003fe9602d RCX: 000000001352c670
RDX: 0000000073623caa RSI: 000000007cc36a22 RDI: ffff88816d660000
RBP: 7500564200000000 R08: ffffffff81767e95 R09: ffffffff8e75e520
R10: ffffc90000007a38 R11: ffffffff81b0c2f0 R12: ffff88816d660ba8
R13: ffff88816d660ba8 R14: ffff88816d660000 R15: 0000000000000002
FS:  0000555564532500(0000) GS:ffff88818de60000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffc924d8fe8 CR3: 00000001bdc14000 CR4: 00000000000006f0
Call Trace:
 <IRQ>
 lock_acquire+0xf0/0x2e0
 unwind_next_frame+0xc2/0x23c0
 arch_stack_walk+0x11b/0x150
 stack_trace_save+0xa9/0x100
 kasan_save_track+0x3e/0x80
 kasan_save_free_info+0x46/0x50
 __kasan_slab_free+0x5c/0x80
 slab_free_after_rcu_debug+0x126/0x220
 rcu_core+0x7cd/0x1070
 handle_softirqs+0x22a/0x870
 __irq_exit_rcu+0x5f/0x150
 irq_exit_rcu+0x9/0x30
 sysvec_apic_timer_interrupt+0xa6/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:vprintk_emit+0x45d/0x560
Code: 0f 84 44 ff ff ff e8 d2 2d 21 00 fb eb 44 e8 ca 2d 21 00 e8 c5 ce 09 0a 4d 85 f6 74 94 e8 bb 2d 21 00 fb 48 c7 c7 60 09 75 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 1b 16
RSP: 0018:ffffc9000868f980 EFLAGS: 00000293
RAX: ffffffff81a473d5 RBX: ffffffff81a4724f RCX: ffff88816d660000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e750960
RBP: ffffc9000868fa30 R08: ffffffff90119ab7 R09: 1ffffffff2023356
R10: dffffc0000000000 R11: fffffbfff2023357 R12: 0000000000000000
R13: 000000000000004c R14: 0000000000000200 R15: 1ffff920010d1f34
 _printk+0xdd/0x130
 __ext4_msg+0x2b9/0x2d0
 ext4_put_super+0xb8/0xc40
 generic_shutdown_super+0x13d/0x2d0
 kill_block_super+0x44/0x90
 ext4_kill_sb+0x68/0xb0
 deactivate_locked_super+0xbc/0x130
 cleanup_mnt+0x437/0x4d0
 task_work_run+0x1d9/0x270
 exit_to_user_mode_loop+0xed/0x480
 do_syscall_64+0x32d/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f980839d9d7
Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffc652f3748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 00007f9808432050 RCX: 00007f980839d9d7
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc652f3800
RBP: 00007ffc652f3800 R08: 00007ffc652f4800 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc652f4890
R13: 00007f9808432050 R14: 00000000000397da R15: 00007ffc652f48d0
 </TASK>
