INFO: task kworker/u8:4:5879 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:4    state:D stack:22808 pid:5879  tgid:5879  ppid:2      task_flags:0x4208060 flags:0x00004000
Workqueue: btree_node_rewrite async_btree_node_rewrite_work
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 schedule+0x165/0x360
 __closure_sync+0x163/0x220
 bch2_btree_update_start+0x18dc/0x1de0
 bch2_btree_node_rewrite+0x17e/0x1120
 bch2_btree_node_rewrite_key+0x273/0x320
 async_btree_node_rewrite_work+0x110/0x4f0
 process_scheduled_works+0xae1/0x17b0
 worker_thread+0x8a0/0xda0
 kthread+0x711/0x8a0
 ret_from_fork+0x3fc/0x770
 ret_from_fork_asm+0x1a/0x30
 </TASK>
INFO: task syz.6.1723:13253 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.6.1723      state:D stack:18104 pid:13253 tgid:13252 ppid:7400   task_flags:0x400140 flags:0x00004006
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 schedule+0x165/0x360
 __closure_sync+0x163/0x220
 bch2_btree_update_start+0x18dc/0x1de0
 bch2_btree_split_leaf+0x14b/0x8e0
 bch2_trans_commit_error+0x1b7/0x1130
 __bch2_trans_commit+0x1bb5/0x8870
 bch2_journal_replay+0x1e85/0x2630
 __bch2_run_recovery_passes+0x3bd/0x1060
 bch2_run_recovery_passes+0x184/0x210
 bch2_fs_recovery+0x2690/0x3a50
 bch2_fs_start+0xaaf/0xda0
 bch2_fs_get_tree+0xb39/0x1520
 vfs_get_tree+0x92/0x2b0
 do_new_mount+0x2a2/0x9e0
 __se_sys_mount+0x317/0x410
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8174f9038a
RSP: 002b:00007f8175ec8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f8175ec8ef0 RCX: 00007f8174f9038a
RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 00007f8175ec8eb0
RBP: 00002000000000c0 R08: 00007f8175ec8ef0 R09: 0000000000808040
R10: 0000000000808040 R11: 0000000000000246 R12: 0000200000000040
R13: 00007f8175ec8eb0 R14: 0000000000005904 R15: 0000200000002380
 </TASK>
INFO: task bch-reclaim/loo:13261 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:bch-reclaim/loo state:D stack:23632 pid:13261 tgid:13261 ppid:2      task_flags:0x200840 flags:0x00004000
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 schedule+0x165/0x360
 __closure_sync+0x163/0x220
 bch2_btree_update_start+0x18dc/0x1de0
 bch2_btree_split_leaf+0x14b/0x8e0
 bch2_trans_commit_error+0x1b7/0x1130
 __bch2_trans_commit+0x1bb5/0x8870
 bch2_btree_write_buffer_flush_locked+0x451f/0x4dd0
 btree_write_buffer_flush_seq+0x18c7/0x1a40
 bch2_btree_write_buffer_journal_flush+0x69/0xb0
 journal_flush_pins+0x8e3/0xe90
 __bch2_journal_reclaim+0x910/0xed0
 bch2_journal_reclaim_thread+0x177/0x4f0
 kthread+0x711/0x8a0
 ret_from_fork+0x3fc/0x770
 ret_from_fork_asm+0x1a/0x30
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/34:
 #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
2 locks held by getty/5678:
 #0: ffff8880280890a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
3 locks held by kworker/u11:4/5857:
 #0: ffff888029917948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc900037afbc0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffff88804588cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1ac/0x680
4 locks held by kworker/u8:4/5879:
 #0: ffff8881267de148 ((wq_completion)btree_node_rewrite){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc900038cfbc0 ((work_completion)(&a->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffff88812ca04398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: bch2_trans_srcu_lock+0xaf/0x220
 #3: ffff88812ca26710 (&c->gc_lock){++++}-{4:4}, at: bch2_btree_update_start+0x542/0x1de0
2 locks held by syz.6.1723/13253:
 #0: ffff88812ca04398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: bch2_trans_srcu_lock+0xaf/0x220
 #1: ffff88812ca26710 (&c->gc_lock){++++}-{4:4}, at: bch2_btree_update_start+0x542/0x1de0
4 locks held by bch-reclaim/loo/13261:
 #0: ffff88812ca4af68 (&j->reclaim_lock){+.+.}-{4:4}, at: bch2_journal_reclaim_thread+0x16b/0x4f0
 #1: ffff88812ca04398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x7f4/0xd80
 #2: ffff88812ca04740 (&wb->flushing.lock){+.+.}-{4:4}, at: btree_write_buffer_flush_seq+0x18bd/0x1a40
 #3: ffff88812ca26710 (&c->gc_lock){++++}-{4:4}, at: bch2_btree_update_start+0x542/0x1de0
2 locks held by syz.5.2652/17185:
 #0: ffff88803ba800a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x5c/0x200
 #1: ffff88803ba830a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x80/0x200
3 locks held by syz.0.2662/17235:

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250
 nmi_cpu_backtrace+0x39e/0x3d0
 nmi_trigger_cpumask_backtrace+0x17a/0x300
 watchdog+0xf93/0xfe0
 kthread+0x711/0x8a0
 ret_from_fork+0x3fc/0x770
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 17235 Comm: syz.0.2662 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:rcu_is_watching+0x67/0xb0
Code: 89 f7 e8 3c bc 7c 00 48 c7 c3 98 af a1 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 19 20 fa 10 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f c3 cc cc cc cc cc e8 01 67
RSP: 0018:ffffc9000384f6d8 EFLAGS: 00000082
RAX: 0000000000314484 RBX: ffff888136632f98 RCX: 392cf3bd2a505500
RDX: 0000000000000000 RSI: ffffffff8be33860 RDI: ffffffff8be33820
RBP: 0000000000000016 R08: 0000000000000000 R09: ffffffff822aa779
R10: dffffc0000000000 R11: fffffbfff1f47207 R12: ffffea0004d10600
R13: 0000000000000001 R14: ffffffff8dbdfd18 R15: dffffc0000000000
FS:  00007fbe324516c0(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbe2b1ff000 CR3: 00000001232f8000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 __lruvec_stat_mod_folio+0xa7/0x2f0
 shmem_add_to_page_cache+0x8b3/0xba0
 shmem_alloc_and_add_folio+0x846/0xf60
 shmem_get_folio_gfp+0x59d/0x1660
 shmem_write_begin+0xf7/0x2b0
 generic_perform_write+0x2c5/0x900
 shmem_file_write_iter+0xf8/0x120
 vfs_write+0x5c9/0xb30
 ksys_write+0x145/0x250
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fbe3158d69f
Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
RSP: 002b:00007fbe32450df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000004000000 RCX: 00007fbe3158d69f
RDX: 0000000004000000 RSI: 00007fbe27200000 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000105a5
R10: 000020000003f382 R11: 0000000000000293 R12: 0000000000000004
R13: 00007fbe32450ef0 R14: 00007fbe32450eb0 R15: 00007fbe27200000
 </TASK>
