INFO: task syz.0.520:10217 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.520       state:D stack:28832 pid:10217 tgid:10197 ppid:9234   task_flags:0x400040 flags:0x00004004
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 schedule+0x165/0x360
 schedule_preempt_disabled+0x13/0x30
 rwsem_down_read_slowpath+0x5fd/0x8f0
 down_read+0x98/0x2e0
 lookup_slow+0x46/0x70
 walk_component+0x2d2/0x400
 path_lookupat+0x163/0x430
 filename_lookup+0x212/0x570
 user_path_at+0x3a/0x60
 do_sys_truncate+0xa3/0x190
 __x64_sys_truncate+0x5b/0x70
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa190b8ec29
RSP: 002b:00007fa191972038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
RAX: ffffffffffffffda RBX: 00007fa190dd6090 RCX: 00007fa190b8ec29
RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000040
RBP: 00007fa190c11e41 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fa190dd6128 R14: 00007fa190dd6090 R15: 00007fff8c93aed8
 </TASK>
INFO: task syz.0.520:10219 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.520       state:D stack:26568 pid:10219 tgid:10197 ppid:9234   task_flags:0x400040 flags:0x00004004
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 schedule+0x165/0x360
 schedule_preempt_disabled+0x13/0x30
 rwsem_down_write_slowpath+0x872/0xfe0
 down_write+0x1ab/0x1f0
 path_openat+0x8da/0x3830
 do_filp_open+0x1fa/0x410
 do_sys_openat2+0x121/0x1c0
 __x64_sys_openat+0x138/0x170
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa190b8ec29
RSP: 002b:00007fa191951038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fa190dd6180 RCX: 00007fa190b8ec29
RDX: 0000000000143042 RSI: 0000200000000040 RDI: ffffffffffffff9c
RBP: 00007fa190c11e41 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fa190dd6218 R14: 00007fa190dd6180 R15: 00007fff8c93aed8
 </TASK>
INFO: task syz.0.520:10233 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.520       state:D stack:27112 pid:10233 tgid:10197 ppid:9234   task_flags:0x400040 flags:0x00004004
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 schedule+0x165/0x360
 schedule_preempt_disabled+0x13/0x30
 rwsem_down_write_slowpath+0x872/0xfe0
 down_write+0x1ab/0x1f0
 path_openat+0x8da/0x3830
 do_filp_open+0x1fa/0x410
 do_sys_openat2+0x121/0x1c0
 __x64_sys_openat+0x138/0x170
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa190b8ec29
RSP: 002b:00007fa191930038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fa190dd6270 RCX: 00007fa190b8ec29
RDX: 0000000000101142 RSI: 0000200000000080 RDI: ffffffffffffff9c
RBP: 00007fa190c11e41 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fa190dd6308 R14: 00007fa190dd6270 R15: 00007fff8c93aed8
 </TASK>
INFO: task syz.0.520:10236 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.520       state:D stack:27976 pid:10236 tgid:10197 ppid:9234   task_flags:0x400040 flags:0x00004004
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 schedule+0x165/0x360
 schedule_preempt_disabled+0x13/0x30
 rwsem_down_write_slowpath+0x872/0xfe0
 down_write_nested+0x1b5/0x200
 do_unlinkat+0x1c7/0x560
 __x64_sys_unlinkat+0xd3/0xf0
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa190b8ec29
RSP: 002b:00007fa18e5f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
RAX: ffffffffffffffda RBX: 00007fa190dd6360 RCX: 00007fa190b8ec29
RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c
RBP: 00007fa190c11e41 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fa190dd63f8 R14: 00007fa190dd6360 R15: 00007fff8c93aed8
 </TASK>
INFO: task syz.0.520:10238 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.520       state:D stack:28936 pid:10238 tgid:10197 ppid:9234   task_flags:0x400040 flags:0x00004004
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 schedule+0x165/0x360
 schedule_preempt_disabled+0x13/0x30
 rwsem_down_read_slowpath+0x5fd/0x8f0
 down_read+0x98/0x2e0
 path_openat+0x8cb/0x3830
 do_filp_open+0x1fa/0x410
 do_sys_openat2+0x121/0x1c0
 __x64_sys_openat+0x138/0x170
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa190b8ec29
RSP: 002b:00007fa18e1cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fa190dd6450 RCX: 00007fa190b8ec29
RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c
RBP: 00007fa190c11e41 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fa190dd64e8 R14: 00007fa190dd6450 R15: 00007fff8c93aed8
 </TASK>
INFO: task syz.0.520:10239 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.520       state:D stack:24648 pid:10239 tgid:10197 ppid:9234   task_flags:0x400040 flags:0x00004004
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 schedule+0x165/0x360
 schedule_preempt_disabled+0x13/0x30
 rwsem_down_write_slowpath+0x872/0xfe0
 down_write+0x1ab/0x1f0
 path_openat+0x8da/0x3830
 do_filp_open+0x1fa/0x410
 do_sys_openat2+0x121/0x1c0
 __x64_sys_openat+0x138/0x170
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa190b8ec29
RSP: 002b:00007fa18ddac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fa190dd6540 RCX: 00007fa190b8ec29
RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c
RBP: 00007fa190c11e41 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fa190dd65d8 R14: 00007fa190dd6540 R15: 00007fff8c93aed8
 </TASK>
INFO: task syz.0.520:10240 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.520       state:D stack:28328 pid:10240 tgid:10197 ppid:9234   task_flags:0x400040 flags:0x00004004
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 schedule+0x165/0x360
 schedule_preempt_disabled+0x13/0x30
 rwsem_down_write_slowpath+0x872/0xfe0
 down_write_nested+0x1b5/0x200
 filename_create+0x1f8/0x3c0
 do_mkdirat+0xa0/0x590
 __x64_sys_mkdirat+0x87/0xa0
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa190b8d497
RSP: 002b:00007fa18d988e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
RAX: ffffffffffffffda RBX: 00007fa18d988ef0 RCX: 00007fa190b8d497
RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c
RBP: 0000200000000040 R08: 0000000000000000 R09: 0000000000000000
R10: 0000200000000040 R11: 0000000000000246 R12: 0000200000000000
R13: 00007fa18d988eb0 R14: 0000000000000000 R15: 0000200000002300
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/34:
 #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
1 lock held by dhcpcd/5591:
 #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
2 locks held by getty/5672:
 #0: ffff88810dd180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
3 locks held by kworker/0:7/8067:
 #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc90002a0fbc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffff88811ea46240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180
3 locks held by kworker/1:6/8135:
 #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc900032bfbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
5 locks held by kworker/u8:5/8203:
 #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc9000290fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffffffff8f52d310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
 #3: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990
 #4: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
2 locks held by kworker/u9:5/9135:
 #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc90003eafbc0 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
5 locks held by syz.0.520/10198:
 #0: ffff8881078aa428 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
 #1: ffff888113226b98 (&sb->s_type->i_mutex_key#20){++++}-{4:4}, at: path_openat+0x8da/0x3830
 #2: ffff888113226f80 (&inode->ei_update_lock){+.+.}-{4:4}, at: __bch2_create+0x2f2/0xb90
 #3: ffff88812fb84398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: bch2_trans_srcu_lock+0xaf/0x220
 #4: ffff88812fba6710 (&c->gc_lock){++++}-{4:4}, at: bch2_btree_update_start+0x542/0x1de0
1 lock held by syz.0.520/10217:
 #0: ffff888113226b98 (&sb->s_type->i_mutex_key#20){++++}-{4:4}, at: lookup_slow+0x46/0x70
2 locks held by syz.0.520/10219:
 #0: ffff8881078aa428 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
 #1: ffff888113226b98 (&sb->s_type->i_mutex_key#20){++++}-{4:4}, at: path_openat+0x8da/0x3830
2 locks held by syz.0.520/10233:
 #0: ffff8881078aa428 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
 #1: ffff888113226b98 (&sb->s_type->i_mutex_key#20){++++}-{4:4}, at: path_openat+0x8da/0x3830
2 locks held by syz.0.520/10236:
 #0: ffff8881078aa428 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
 #1: ffff888113226b98 (&sb->s_type->i_mutex_key#20/1){+.+.}-{4:4}, at: do_unlinkat+0x1c7/0x560
1 lock held by syz.0.520/10238:
 #0: ffff888113226b98 (&sb->s_type->i_mutex_key#20){++++}-{4:4}, at: path_openat+0x8cb/0x3830
2 locks held by syz.0.520/10239:
 #0: ffff8881078aa428 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
 #1: ffff888113226b98 (&sb->s_type->i_mutex_key#20){++++}-{4:4}, at: path_openat+0x8da/0x3830
2 locks held by syz.0.520/10240:
 #0: ffff8881078aa428 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
 #1: ffff888113226b98 (&sb->s_type->i_mutex_key#20/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0
3 locks held by kworker/u9:6/13156:
 #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc900032dfbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
7 locks held by syz-executor/14372:
 #0: ffff88810dee0428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30
 #1: ffff88803f900488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540
 #2: ffff88801fc30f08 (kn->active#48){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540
 #3: ffffffff8edb0408 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
 #4: ffff888111c410e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800
 #5: ffff888111c44250 (&devlink->lock_key#17){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
 #6: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x721/0xea0
4 locks held by syz-executor/14374:
 #0: ffff88810dee0428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30
 #1: ffff88810efce888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540
 #2: ffff88801fc30f08 (kn->active#48){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540
 #3: ffffffff8edb0408 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
3 locks held by syz.2.915/14479:
 #0: ffff8881334540e0 (&type->s_umount_key#50){++++}-{4:4}, at: path_mount+0xcd2/0xfe0
 #1: ffff888045a80278 (&c->state_lock){++++}-{4:4}, at: bch2_fs_reconfigure+0x17e/0x400
 #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250
 nmi_cpu_backtrace+0x39e/0x3d0
 nmi_trigger_cpumask_backtrace+0x17a/0x300
 watchdog+0xf93/0xfe0
 kthread+0x711/0x8a0
 ret_from_fork+0x439/0x7d0
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 14479 Comm: syz.2.915 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:asm_sysvec_apic_timer_interrupt+0x0/0x20
Code: 56 3c 7a 0a e9 61 06 00 00 90 f3 0f 1e fa 0f 1f 00 fc 6a ff e8 11 05 00 00 48 89 c4 48 89 e7 e8 66 3b 7a 0a e9 41 06 00 00 90 <f3> 0f 1e fa 0f 1f 00 fc 6a ff e8 f1 04 00 00 48 89 c4 48 89 e7 e8
RSP: 0018:ffffc9000285f898 EFLAGS: 00000087
RAX: ffffffff81a02757 RBX: ffffffff81a02614 RCX: 0000000000080000
RDX: ffffc90025113000 RSI: 000000000000d1f8 RDI: ffffffff8e12e380
RBP: ffffc9000285f9d0 R08: ffffffff8fa3a737 R09: 1ffffffff1f474e6
R10: dffffc0000000000 R11: fffffbfff1f474e7 R12: dffffc0000000000
R13: 1ffff9200050bf1c R14: 0000000000000200 R15: 000000000000004a
FS:  00007fe164ad76c0(0000) GS:ffff8880b8612000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b31b22ff8 CR3: 00000000267ce000 CR4: 00000000000006f0
Call Trace:
 <TASK>
RIP: 0010:vprintk_emit+0x58f/0x7a0
Code: 85 32 01 00 00 e8 51 86 1f 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 40 86 1f 00 eb 06 e8 39 86 1f 00 fb 48 c7 c7 80 e3 12 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 35
RSP: 0018:ffffc9000285f8c0 EFLAGS: 00000287
 __bch2_print+0x176/0x220
 __bch2_fs_read_only+0xe4/0x5b0
 bch2_fs_read_only+0x42a/0xb00
 bch2_fs_reconfigure+0x1ba/0x400
 reconfigure_super+0x227/0x890
 path_mount+0xd18/0xfe0
 __se_sys_mount+0x317/0x410
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe163b8ec29
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe164ad7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fe163dd5fa0 RCX: 00007fe163b8ec29
RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000
RBP: 00007fe163c11e41 R08: 0000200000000340 R09: 0000000000000000
R10: 000000000100002b R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe163dd6038 R14: 00007fe163dd5fa0 R15: 00007ffc59038888
 </TASK>
