INFO: task kworker/u4:0:9 blocked for more than 143 seconds.
Not tainted 6.2.0-rc7-syzkaller-00002-gd2d11f342b17 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:0 state:D stack:20960 pid:9 ppid:2 flags:0x00004000
Workqueue: btrfs-flush_delalloc btrfs_work_helper
Call Trace:
__schedule+0x13ca/0x43c0
schedule+0xc3/0x190
btrfs_start_ordered_extent+0x4cd/0x760
btrfs_run_ordered_extent_work+0x1e/0x30
btrfs_work_helper+0x43a/0xe90
process_one_work+0x96c/0x13e0
worker_thread+0xa63/0x1210
kthread+0x270/0x300
ret_from_fork+0x1f/0x30
INFO: task kworker/u4:2:39 blocked for more than 143 seconds.
Not tainted 6.2.0-rc7-syzkaller-00002-gd2d11f342b17 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:2 state:D stack:20864 pid:39 ppid:2 flags:0x00004000
Workqueue: btrfs-endio-write btrfs_work_helper
Call Trace:
__schedule+0x13ca/0x43c0
schedule+0xc3/0x190
wait_extent_bit+0x50c/0x6a0
lock_extent+0x1bb/0x270
btrfs_finish_ordered_io+0x5de/0x1c50
btrfs_work_helper+0x43a/0xe90
process_one_work+0x96c/0x13e0
worker_thread+0xa63/0x1210
kthread+0x270/0x300
ret_from_fork+0x1f/0x30
INFO: task kworker/u4:8:5390 blocked for more than 143 seconds.
Not tainted 6.2.0-rc7-syzkaller-00002-gd2d11f342b17 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:8 state:D stack:20352 pid:5390 ppid:2 flags:0x00004000
Workqueue: btrfs-endio-write btrfs_work_helper
Call Trace:
__schedule+0x13ca/0x43c0
schedule+0xc3/0x190
wait_extent_bit+0x50c/0x6a0
lock_extent+0x1bb/0x270
btrfs_finish_ordered_io+0x5de/0x1c50
btrfs_work_helper+0x43a/0xe90
process_one_work+0x96c/0x13e0
worker_thread+0xa63/0x1210
kthread+0x270/0x300
ret_from_fork+0x1f/0x30
INFO: task syz-executor.2:8243 blocked for more than 144 seconds.
Not tainted 6.2.0-rc7-syzkaller-00002-gd2d11f342b17 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2 state:D stack:23288 pid:8243 ppid:5104 flags:0x00004004
Call Trace:
__schedule+0x13ca/0x43c0
schedule+0xc3/0x190
wait_extent_bit+0x50c/0x6a0
lock_extent+0x1bb/0x270
btrfs_page_mkwrite+0x536/0xc90
do_page_mkwrite+0x1a1/0x600
do_wp_page+0x506/0x3270
handle_mm_fault+0x2388/0x51c0
exc_page_fault+0x66a/0x880
asm_exc_page_fault+0x26/0x30
RIP: 0010:copy_user_short_string+0xd/0x40
Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 0f 1f 80 00 00 00 00 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a
RSP: 0018:ffffc900055873b0 EFLAGS: 00050202
RAX: ffffffff8435f301 RBX: 00007fffffffefc8 RCX: 0000000000000007
RDX: 0000000000000000 RSI: ffffc90005587460 RDI: 0000000020000120
RBP: ffffc90005587510 R08: 0000000000000000 R09: fffff52000ab0e93
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000038
R13: ffffc90005587460 R14: 0000000020000120 R15: ffffc90005587460
_copy_to_user+0xed/0x130
fiemap_fill_next_extent+0x235/0x410
fiemap_process_hole+0x5d6/0xb40
extent_fiemap+0xe42/0x2100
btrfs_fiemap+0x178/0x1e0
do_vfs_ioctl+0x194f/0x2a40
__se_sys_ioctl+0x81/0x160
do_syscall_64+0x41/0xc0
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f063308c0c9
RSP: 002b:00007f0633e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f06331abf80 RCX: 00007f063308c0c9
RDX: 0000000020000100 RSI: 00000000c020660b RDI: 0000000000000005
RBP: 00007f06330e7ae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffefbf5272f R14: 00007f0633e42300 R15: 0000000000022000
INFO: task syz-executor.0:8282 blocked for more than 144 seconds.
Not tainted 6.2.0-rc7-syzkaller-00002-gd2d11f342b17 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0 state:D stack:27224 pid:8282 ppid:5098 flags:0x00004004
Call Trace:
__schedule+0x13ca/0x43c0
schedule+0xc3/0x190
schedule_preempt_disabled+0x13/0x20
__mutex_lock_common+0xdb6/0x2630
mutex_lock_nested+0x1b/0x20
btrfs_wait_ordered_roots+0x104/0x950
btrfs_sync_fs+0x17e/0x780
iterate_supers+0x12b/0x1e0
ksys_sync+0xdb/0x1c0
__do_sys_sync+0xe/0x20
do_syscall_64+0x41/0xc0
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f254dc8c0c9
RSP: 002b:00007f25445dd168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
RAX: ffffffffffffffda RBX: 00007f254ddac120 RCX: 00007f254dc8c0c9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007f254dce7ae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe5ea1fe1f R14: 00007f25445dd300 R15: 0000000000022000
INFO: task syz-executor.4:8269 blocked for more than 144 seconds.
Not tainted 6.2.0-rc7-syzkaller-00002-gd2d11f342b17 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.4 state:D stack:24696 pid:8269 ppid:5111 flags:0x00004004
Call Trace:
__schedule+0x13ca/0x43c0
schedule+0xc3/0x190
schedule_timeout+0x9c/0x300
do_wait_for_common+0x449/0x5f0
wait_for_completion+0x4a/0x60
btrfs_wait_ordered_extents+0xd69/0xe20
btrfs_wait_ordered_roots+0x65c/0x950
btrfs_sync_fs+0x17e/0x780
iterate_supers+0x12b/0x1e0
ksys_sync+0xdb/0x1c0
__do_sys_sync+0xe/0x20
do_syscall_64+0x41/0xc0
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f8589a8c0c9
RSP: 002b:00007f858a7e1168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
RAX: ffffffffffffffda RBX: 00007f8589babf80 RCX: 00007f8589a8c0c9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007f8589ae7ae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd538051ef R14: 00007f858a7e1300 R15: 0000000000022000
Showing all locks held in the system:
2 locks held by kworker/u4:0/9:
#0: ffff88801ce40138 ((wq_completion)btrfs-flush_delalloc){+.+.}-{0:0}, at: process_one_work+0x7eb/0x13e0
#1: ffffc900000e7d20 ((work_completion)(&work->normal_work)){+.+.}-{0:0}, at: process_one_work+0x835/0x13e0
1 lock held by rcu_tasks_kthre/12:
#0: ffffffff8cf26e10 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xce0
1 lock held by rcu_tasks_trace/13:
#0: ffffffff8cf27610 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xce0
1 lock held by khungtaskd/28:
#0: ffffffff8cf26c40 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
3 locks held by kworker/u4:2/39:
#0: ffff88801df47938 ((wq_completion)btrfs-endio-write){+.+.}-{0:0}, at: process_one_work+0x7eb/0x13e0
#1: ffffc90000b07d20 ((work_completion)(&work->normal_work)){+.+.}-{0:0}, at: process_one_work+0x835/0x13e0
#2: ffff8880218a2430 (btrfs_ordered_extent){++++}-{0:0}, at: btrfs_finish_ordered_io+0x33b/0x1c50
2 locks held by kworker/u4:3/46:
2 locks held by getty/4753:
#0: ffff88802be3b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
#1: ffffc900015b02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x53b/0x1630
3 locks held by kworker/u4:8/5390:
#0: ffff88801df47938 ((wq_completion)btrfs-endio-write){+.+.}-{0:0}, at: process_one_work+0x7eb/0x13e0
#1: ffffc900051c7d20 ((work_completion)(&work->normal_work)){+.+.}-{0:0}, at: process_one_work+0x835/0x13e0
#2: ffff8880218a2430 (btrfs_ordered_extent){++++}-{0:0}, at: btrfs_finish_ordered_io+0x33b/0x1c50
3 locks held by syz-executor.2/8243:
#0: ffff8880204cc758 (&mm->mmap_lock){++++}-{3:3}, at: exc_page_fault+0x18d/0x880
#1: ffff888022164558 (sb_pagefaults#2){.+.+}-{0:0}, at: do_page_mkwrite+0x1a1/0x600
#2: ffff88807b0dc7c8 (&ei->i_mmap_lock){++++}-{3:3}, at: btrfs_page_mkwrite+0x416/0xc90
2 locks held by syz-executor.0/8282:
#0: ffff8880221640e0 (&type->s_umount_key#56){++++}-{3:3}, at: iterate_supers+0xb0/0x1e0
#1: ffff8880218a0a20 (&fs_info->ordered_operations_mutex){+.+.}-{3:3}, at: btrfs_wait_ordered_roots+0x104/0x950
3 locks held by syz-executor.4/8269:
#0: ffff8880221640e0 (&type->s_umount_key#56){++++}-{3:3}, at: iterate_supers+0xb0/0x1e0
#1: ffff8880218a0a20 (&fs_info->ordered_operations_mutex){+.+.}-{3:3}, at: btrfs_wait_ordered_roots+0x104/0x950
#2: ffff8880350d0850 (&root->ordered_extent_mutex){+.+.}-{3:3}, at: btrfs_wait_ordered_extents+0x1f3/0xe20
2 locks held by syz-executor.4/8482:
#0: ffff8880221640e0 (&type->s_umount_key#56){++++}-{3:3}, at: iterate_supers+0xb0/0x1e0
#1: ffff8880218a0a20 (&fs_info->ordered_operations_mutex){+.+.}-{3:3}, at: btrfs_wait_ordered_roots+0x104/0x950
2 locks held by syz-executor.1/9359:
#0: ffff8880221640e0 (&type->s_umount_key#56){++++}-{3:3}, at: iterate_supers+0xb0/0x1e0
#1: ffff8880218a0a20 (&fs_info->ordered_operations_mutex){+.+.}-{3:3}, at: btrfs_wait_ordered_roots+0x104/0x950
2 locks held by syz-executor.1/9360:
#0: ffff8880221640e0 (&type->s_umount_key#56){++++}-{3:3}, at: iterate_supers+0xb0/0x1e0
#1: ffff8880218a0a20 (&fs_info->ordered_operations_mutex){+.+.}-{3:3}, at: btrfs_wait_ordered_roots+0x104/0x950
2 locks held by syz-executor.1/9362:
#0: ffff8880221640e0 (&type->s_umount_key#56){++++}-{3:3}, at: iterate_supers+0xb0/0x1e0
#1: ffff8880218a0a20 (&fs_info->ordered_operations_mutex){+.+.}-{3:3}, at: btrfs_wait_ordered_roots+0x104/0x950
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc7-syzkaller-00002-gd2d11f342b17 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Call Trace:
dump_stack_lvl+0x1b5/0x2a0
nmi_cpu_backtrace+0x47b/0x500
nmi_trigger_cpumask_backtrace+0x1d3/0x430
watchdog+0xf70/0xfb0
kthread+0x270/0x300
ret_from_fork+0x1f/0x30
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 8472 Comm: kworker/u4:10 Not tainted 6.2.0-rc7-syzkaller-00002-gd2d11f342b17 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Workqueue: phy8 ieee80211_iface_work
RIP: 0010:__sanitizer_cov_trace_switch+0x7e/0x110
Code: 00 4d 85 d2 75 24 e9 a9 00 00 00 41 b8 01 00 00 00 4d 85 d2 75 14 e9 99 00 00 00 41 b8 05 00 00 00 4d 85 d2 0f 84 8a 00 00 00 <4c> 8b 4c 24 20 65 4c 8b 1d e5 6b 79 7e 31 d2 eb 08 48 ff c2 49 39
RSP: 0018:ffffc900142df018 EFLAGS: 00000202
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888032473a80
RDX: ffff888032473a80 RSI: ffffffff8e32c2b0 RDI: 0000000000000000
RBP: ffffc900142df410 R08: 0000000000000001 R09: ffffffff8a206ed6
R10: 0000000000000002 R11: ffff888032473a80 R12: dffffc0000000000
R13: ffff88802d7ffc94 R14: 00000000000000dd R15: ffff88802d7ffc99
FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005592c257c018 CR3: 0000000018885000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
_ieee802_11_parse_elems_full+0x2bed/0x3d90
ieee802_11_parse_elems_full+0xdcb/0x2490
ieee80211_bss_info_update+0x9fd/0x1090
ieee80211_ibss_rx_queued_mgmt+0x1b25/0x2fb0
ieee80211_iface_work+0x7bd/0xd00
process_one_work+0x96c/0x13e0
worker_thread+0xa63/0x1210
kthread+0x270/0x300
ret_from_fork+0x1f/0x30