INFO: task syz-executor.0:11577 blocked for more than 140 seconds.
      Not tainted 4.9.186+ #10
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.0  D28744 11577   2198 0x80000000
 0000000000000083 ffff8801c6c417c0 ffff8801d1299b80 ffff8801db621000
 ffff8801c6be5f00 ffff8801db621018 ffff8801c5e37ba0 ffffffff8280c5ee
 0000000041b58ab3 ffff8801c6c417c0 00ff8801c5e37af0 ffff8801db6218f0
Call Trace:
 [<000000008787818e>] schedule+0x92/0x1c0 kernel/sched/core.c:3546
 [<0000000088d01563>] rwsem_down_read_failed+0x258/0x3e0 kernel/locking/rwsem-xadd.c:283
 [<00000000697fe56f>] call_rwsem_down_read_failed+0x18/0x30 arch/x86/lib/rwsem.S:94
 [<00000000f729870e>] __down_read arch/x86/include/asm/rwsem.h:65 [inline]
 [<00000000f729870e>] down_read+0x52/0xb0 kernel/locking/rwsem.c:24
 [<000000002beb08d2>] exit_mm kernel/exit.c:480 [inline]
 [<000000002beb08d2>] do_exit+0x3b7/0x2aa0 kernel/exit.c:828
 [<00000000cabd901d>] do_group_exit+0x111/0x300 kernel/exit.c:945
 [<00000000dd5ad8a7>] SYSC_exit_group kernel/exit.c:956 [inline]
 [<00000000dd5ad8a7>] SyS_exit_group+0x1d/0x20 kernel/exit.c:954
 [<00000000af9cb371>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288
 [<00000000e416033a>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb

Showing all locks held in the system:
2 locks held by khungtaskd/24:
 #0:  (rcu_read_lock){......}, at: [<00000000bee967c5>] check_hung_uninterruptible_tasks kernel/hung_task.c:169 [inline]
 #0:  (rcu_read_lock){......}, at: [<00000000bee967c5>] watchdog+0x14b/0xaf0 kernel/hung_task.c:263
 #1:  (tasklist_lock){.+.+..}, at: [<00000000bbf574ea>] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4336
2 locks held by getty/2022:
 #0:  (&tty->ldisc_sem){++++++}, at: [<00000000454b30be>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
 #1:  (&ldata->atomic_read_lock){+.+...}, at: [<00000000c9402087>] n_tty_read+0x1fe/0x1820 drivers/tty/n_tty.c:2156
1 lock held by syz-executor.0/11577:
 #0:  (&mm->mmap_sem){++++++}, at: [<000000002beb08d2>] exit_mm kernel/exit.c:480 [inline]
 #0:  (&mm->mmap_sem){++++++}, at: [<000000002beb08d2>] do_exit+0x3b7/0x2aa0 kernel/exit.c:828
1 lock held by syz-executor.0/11581:
 #0:  (&mm->mmap_sem){++++++}, at: [<000000002beb08d2>] exit_mm kernel/exit.c:480 [inline]
 #0:  (&mm->mmap_sem){++++++}, at: [<000000002beb08d2>] do_exit+0x3b7/0x2aa0 kernel/exit.c:828

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.186+ #10
 ffff8801d98d7cc8 ffffffff81b5a0b1 0000000000000000 0000000000000000
 0000000000000000 ffffffff81099a01 dffffc0000000000 ffff8801d98d7d00
 ffffffff81b6534c 0000000000000000 0000000000000000 0000000000000000
Call Trace:
 [<0000000069b0ac99>] __dump_stack lib/dump_stack.c:15 [inline]
 [<0000000069b0ac99>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
 [<000000004e4d89e5>] nmi_cpu_backtrace.cold+0x47/0x87 lib/nmi_backtrace.c:99
 [<0000000086e56cba>] nmi_trigger_cpumask_backtrace+0x124/0x155 lib/nmi_backtrace.c:60
 [<00000000700895a6>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37
 [<000000000b0b8c28>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline]
 [<000000000b0b8c28>] check_hung_task kernel/hung_task.c:126 [inline]
 [<000000000b0b8c28>] check_hung_uninterruptible_tasks kernel/hung_task.c:183 [inline]
 [<000000000b0b8c28>] watchdog+0x670/0xaf0 kernel/hung_task.c:263
 [<00000000b9e85c09>] kthread+0x278/0x310 kernel/kthread.c:211
 [<0000000024fa6aec>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:375
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 11588 Comm: syz-executor.0 Not tainted 4.9.186+ #10
task: 0000000051699f1e task.stack: 000000000da51cd0
RIP: 0010:[<ffffffff81202ef2>] 
c [<000000006300c0de>] debug_mutex_unlock+0x72/0x540 kernel/locking/mutex-debug.c:75
RSP: 0018:ffff8801c5f5fb50  EFLAGS: 00000046
RAX: 0000000000000000 RBX: ffff8801c61bb5e0 RCX: 1ffffffff063fb70
RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffff8801c61bb5e0
RBP: ffff8801c5f5fb70 R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff841f7ac0
R13: ffff8801c61bb630 R14: 1ffff10038bebf72 R15: 0000000000000246
FS:  00007f66f8ae7700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000001760000 CR3: 00000001c59d1000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 0000000000000003
c ffff8801c61bb5e0
c ffff8801c5f5fbb0
c 1ffff10038bebf72
c
 ffff8801c5f5fc18
c ffffffff828155f6
c 0000000041b58ab3
c ffff8801c61bb5e8
c
 0000000041b58ab3
c ffffffff82e34357
c ffffffff82815490
c ffff8801c724e7f8
c
Call Trace:
 [<000000001a3bf77e>] __mutex_unlock_common_slowpath kernel/locking/mutex.c:741 [inline]
 [<000000001a3bf77e>] __mutex_unlock_slowpath+0x166/0x3e0 kernel/locking/mutex.c:765
 [<00000000f1246069>] mutex_unlock+0x9/0x10 kernel/locking/mutex.c:437
 [<000000001a746db4>] perf_mmap+0x620/0x1580 kernel/events/core.c:5291
 [<00000000e9d283d8>] mmap_region+0x7e7/0xfa0 mm/mmap.c:1726
 [<000000003fb56dc6>] do_mmap+0x539/0xbc0 mm/mmap.c:1505
 [<0000000067ae731c>] do_mmap_pgoff include/linux/mm.h:2047 [inline]
 [<0000000067ae731c>] vm_mmap_pgoff+0x179/0x1c0 mm/util.c:329
 [<0000000075b9a417>] SYSC_mmap_pgoff mm/mmap.c:1555 [inline]
 [<0000000075b9a417>] SyS_mmap_pgoff+0xfa/0x1b0 mm/mmap.c:1513
 [<00000000e9e1a76c>] SYSC_mmap arch/x86/kernel/sys_x86_64.c:96 [inline]
 [<00000000e9e1a76c>] SyS_mmap+0x16/0x20 arch/x86/kernel/sys_x86_64.c:87
 [<00000000af9cb371>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288
 [<00000000e416033a>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: 
c45 
c85 
cc9 
c0f 
c84 
cd2 
c00 
c00 
c00 
c49 
cc7 
cc4 
cc0 
c7a 
c1f 
c84 
c48 
cb8 
c00 
c00 
c00 
c00 
c00 
cfc 
cff 
cdf 
c4c 
c89 
ce2 
c48 
cc1 
cea 
c03 
c0f 
cb6 
c14 
c02 
c4c 
c89 
ce0 
c83 
ce0 
c07 
c<83> 
cc0 
c03 
c38 
cd0 
c7c 
c08 
c84 
cd2 
c0f 
c85 
c80 
c02 
c00 
c00 
c44 
c8b 
c05 
cb8 
c4b 
cff 
c