INFO: task syz.5.1016:14845 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.1016      state:D stack:28576 pid:14845 tgid:14808 ppid:14630  task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x14ef/0x4fb0
 schedule+0x164/0x360
 schedule_preempt_disabled+0x13/0x30
 rwsem_down_write_slowpath+0x8a1/0x1080
 down_write+0x1bc/0x200
 path_openat+0xb53/0x3e20
 do_filp_open+0x22d/0x490
 do_sys_openat2+0x12f/0x220
 __x64_sys_openat+0x138/0x170
 do_syscall_64+0xe2/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f102df9acb9
RSP: 002b:00007f102ee86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f102e216090 RCX: 00007f102df9acb9
RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c
RBP: 00007f102e008bf7 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f102e216128 R14: 00007f102e216090 R15: 00007ffc480fa228
 </TASK>
INFO: task syz.5.1016:14850 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.1016      state:D stack:28728 pid:14850 tgid:14808 ppid:14630  task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x14ef/0x4fb0
 schedule+0x164/0x360
 schedule_preempt_disabled+0x13/0x30
 rwsem_down_write_slowpath+0x8a1/0x1080
 down_write+0x1bc/0x200
 path_openat+0xb53/0x3e20
 do_filp_open+0x22d/0x490
 do_sys_openat2+0x12f/0x220
 __x64_sys_openat+0x138/0x170
 do_syscall_64+0xe2/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f102df9acb9
RSP: 002b:00007f102ee65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f102e216180 RCX: 00007f102df9acb9
RDX: 0000000000183042 RSI: 0000200000000740 RDI: ffffffffffffff9c
RBP: 00007f102e008bf7 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f102e216218 R14: 00007f102e216180 R15: 00007ffc480fa228
 </TASK>
INFO: task syz.5.1016:14855 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.1016      state:D stack:27896 pid:14855 tgid:14808 ppid:14630  task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x14ef/0x4fb0
 schedule+0x164/0x360
 schedule_preempt_disabled+0x13/0x30
 rwsem_down_write_slowpath+0x8a1/0x1080
 down_write_nested+0x1c6/0x210
 filename_create+0x200/0x370
 do_mkdirat+0xd2/0x4b0
 __x64_sys_mkdirat+0x87/0xa0
 do_syscall_64+0xe2/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f102df99b97
RSP: 002b:00007f102ee43e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
RAX: ffffffffffffffda RBX: 00007f102ee43ee0 RCX: 00007f102df99b97
RDX: 00000000000001ff RSI: 0000200000000140 RDI: 00000000ffffff9c
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000140
R13: 00007f102ee43ea0 R14: 0000000000000000 R15: 0000000000000000
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/35:
 #0: ffffffff8e341b60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
4 locks held by kworker/u10:4/186:
 #0: ffff888161ef8948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
 #1: ffffc900034d7bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
 #2: ffff88816b0e40e0 (&type->s_umount_key#82){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0
 #3: ffff8881af5a5430 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: jfs_commit_inode+0x1ca/0x530
2 locks held by getty/5652:
 #0: ffff8881137280a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc9000357b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
4 locks held by syz.5.1016/14809:
2 locks held by syz.5.1016/14845:
 #0: ffff88816b0e4420 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
 #1: ffff8881af5a57e0 (&type->i_mutex_dir_key#21){++++}-{4:4}, at: path_openat+0xb53/0x3e20
2 locks held by syz.5.1016/14850:
 #0: ffff88816b0e4420 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
 #1: ffff8881af5a57e0 (&type->i_mutex_dir_key#21){++++}-{4:4}, at: path_openat+0xb53/0x3e20
2 locks held by syz.5.1016/14855:
 #0: ffff88816b0e4420 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
 #1: ffff8881af5a57e0 (&type->i_mutex_dir_key#20/1){+.+.}-{4:4}, at: filename_create+0x200/0x370
2 locks held by syz.9.1384/17925:
 #0: ffff88816b0e40e0 (&type->s_umount_key#82){++++}-{4:4}, at: super_lock+0x2d6/0x3d0
 #1: ffff88816c6f8820 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x1c0/0xb80
1 lock held by syz.5.1403/18054:
 #0: ffff88816b0e40e0 (&type->s_umount_key#82){++++}-{4:4}, at: super_lock+0x289/0x3d0
1 lock held by syz.2.1463/18680:
 #0: ffff88811a452800 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x234/0x4f0
2 locks held by syz.2.1463/18681:

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150
 nmi_cpu_backtrace+0x274/0x2d0
 nmi_trigger_cpumask_backtrace+0x17a/0x300
 sys_info+0x135/0x170
 watchdog+0xf90/0xfe0
 kthread+0x726/0x8b0
 ret_from_fork+0x51b/0xa40
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 14809 Comm: syz.5.1016 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:native_apic_msr_write+0x39/0x50
Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 80 53 05 0a cc 89 f6 31 d2 e9 c6 55 5f 03 66 0f 1f 44 00
RSP: 0018:ffffc90000a08e50 EFLAGS: 00000046
RAX: 00000000000241e3 RBX: ffff88823c623e40 RCX: 0000000000000838
RDX: 0000000000000000 RSI: 00000000000241e3 RDI: 0000000000000838
RBP: 0000000000000000 R08: ffffffff81b01685 R09: ffffffff99d0d508
R10: 0000000000000003 R11: ffffffff8171f6c0 R12: 000000001000573d
R13: dffffc0000000000 R14: 00000000000241e3 R15: 0000000000000020
FS:  00007f102eea76c0(0000) GS:ffff8882a9a0b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1c177bd000 CR3: 000000010c1be000 CR4: 00000000000006f0
Call Trace:
 <IRQ>
 lapic_next_event+0x11/0x20
 clockevents_program_event+0x1c9/0x350
 hrtimer_interrupt+0x620/0xaa0
 __sysvec_apic_timer_interrupt+0x102/0x3d0
 sysvec_apic_timer_interrupt+0xa1/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:__sanitizer_cov_trace_pc+0x49/0x70
Code: 81 fa 00 01 00 00 75 35 83 b9 6c 16 00 00 00 74 2c 8b 91 48 16 00 00 83 fa 02 75 21 48 8b 91 50 16 00 00 48 8b 32 48 8d 7e 01 <8b> 89 4c 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 e9 0f ec
RSP: 0018:ffffc90004167680 EFLAGS: 00000246
RAX: ffffffff834f45bf RBX: 0000000000000004 RCX: ffff888109989d40
RDX: ffffc90028811000 RSI: 000000000007ffff RDI: 0000000000080000
RBP: 0000000000000000 R08: 00000000000001ff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: ffff8881b0a29000 R14: 0000000000000000 R15: 1ffff11036145202
 dtSplitRoot+0x77f/0x16c0
 dtInsert+0xedd/0x5de0
 jfs_mkdir+0x783/0xb00
 vfs_mkdir+0x511/0x5b0
 do_mkdirat+0x27d/0x4b0
 __x64_sys_mkdir+0x6c/0x80
 do_syscall_64+0xe2/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f102df9acb9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f102eea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
RAX: ffffffffffffffda RBX: 00007f102e215fa0 RCX: 00007f102df9acb9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000340
RBP: 00007f102e008bf7 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f102e216038 R14: 00007f102e215fa0 R15: 00007ffc480fa228
 </TASK>
