INFO: task syz-executor:5851 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:15736 pid:5851  tgid:5851  ppid:1      task_flags:0x400140 flags:0x00004006
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 schedule+0x165/0x360
 __closure_sync+0x163/0x220
 bch2_journal_flush_pins+0x18e/0x250
 __bch2_fs_read_only+0x144/0x5b0
 bch2_fs_read_only+0x42a/0xb00
 __bch2_fs_stop+0x100/0x900
 generic_shutdown_super+0x135/0x2c0
 bch2_kill_sb+0x41/0x50
 deactivate_locked_super+0xbc/0x130
 cleanup_mnt+0x425/0x4c0
 task_work_run+0x1d4/0x260
 exit_to_user_mode_loop+0xec/0x110
 do_syscall_64+0x2bd/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f0f7a78ff17
RSP: 002b:00007fff7356aa88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 00007f0f7a811c05 RCX: 00007f0f7a78ff17
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7356ab40
RBP: 00007fff7356ab40 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7356bbd0
R13: 00007f0f7a811c05 R14: 0000000000016475 R15: 00007fff7356bc10
 </TASK>

Showing all locks held in the system:
4 locks held by kworker/u8:1/13:
1 lock held by khungtaskd/34:
 #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
3 locks held by kworker/0:3/2293:
 #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc9000a0d7bc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffff88802e942240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180
3 locks held by kworker/1:3/5314:
 #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc9000269fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffffffff8f538c48 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
2 locks held by dhcpcd/5593:
 #0: ffff88802e3ae6d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
 #1: ffffffff8f538c48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200
2 locks held by getty/5675:
 #0: ffff88801ebe60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
2 locks held by syz-executor/5851:
 #0: ffff8881250740e0 (&type->s_umount_key#75){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0
 #1: ffff888128980278 (&c->state_lock){++++}-{4:4}, at: __bch2_fs_stop+0xf8/0x900
4 locks held by kworker/0:2H/6160:
 #0: ffff888124a08548 ((wq_completion)bcachefs_btree_write_complete){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc90006487bc0 ((work_completion)(&wb->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffff888128984398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x7f4/0xd80
 #3: ffff8881289a6710 (&c->gc_lock){++++}-{4:4}, at: bch2_btree_update_start+0x542/0x1de0
3 locks held by kworker/u9:4/6217:
 #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc90004667bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffffffff8f538c48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
1 lock held by syz.4.474/8205:
 #0: ffffffff8f538c48 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x721/0xea0
1 lock held by syz-executor/9567:
 #0: ffffffff8e13f9b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
2 locks held by syz-executor/10301:
 #0: ffffffff8eca89e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
 #1: ffffffff8f538c48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
2 locks held by syz.8.991/10312:
 #0: ffff888115b05008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
 #1: ffffffff8f538c48 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1bb/0x960
1 lock held by syz.7.992/10319:
 #0: ffffffff8e13f9b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250
 nmi_cpu_backtrace+0x39e/0x3d0
 nmi_trigger_cpumask_backtrace+0x17a/0x300
 watchdog+0xf93/0xfe0
 kthread+0x711/0x8a0
 ret_from_fork+0x3fc/0x770
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: events drain_vmap_area_work
RIP: 0010:lock_release+0x46/0x3e0
Code: e0 11 03 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 e3 11 03 11 83 f8 08 0f 83 9a 02 00 00 89 c0 48 0f a3 05 cc 21 06 0e 73 16 <e8> 45 f1 08 00 84 c0 75 0d f6 05 b0 06 f0 0d 01 0f 84 ad 02 00 00
RSP: 0018:ffffc9000075f4b8 EFLAGS: 00000097
RAX: 0000000000000001 RBX: 0000000000000a02 RCX: dffffc0000000001
RDX: 0000000000000001 RSI: ffffffff84d05b01 RDI: ffffffff99d41600
RBP: ffffc9000075f5b0 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff520000ebe94 R12: dffffc0000000000
R13: ffffffff84d05b01 R14: ffffffff99d41600 R15: 1ffff920000ebea4
FS:  0000000000000000(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000010cad6000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 _raw_spin_unlock_irqrestore+0x70/0x110
 debug_check_no_obj_freed+0x451/0x470
 __free_frozen_pages+0x4dd/0xd30
 kasan_depopulate_vmalloc_pte+0x74/0xa0
 __apply_to_page_range+0xb92/0x1380
 kasan_release_vmalloc+0xa2/0xd0
 purge_vmap_node+0x214/0x8f0
 __purge_vmap_area_lazy+0x7a4/0xb40
 drain_vmap_area_work+0x27/0x40
 process_scheduled_works+0xae1/0x17b0
 worker_thread+0x8a0/0xda0
 kthread+0x711/0x8a0
 ret_from_fork+0x3fc/0x770
 ret_from_fork_asm+0x1a/0x30
 </TASK>
