INFO: task kworker/u4:0:5084 blocked for more than 143 seconds.
      Not tainted 6.2.0-rc2-syzkaller-00010-g69b41ac87e4a #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:0    state:D stack:20648 pid:5084  ppid:2      flags:0x00004000
Workqueue: writeback wb_workfn (flush-7:1)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x9d1/0xe40 kernel/sched/core.c:6555
 schedule+0xcb/0x190 kernel/sched/core.c:6631
 io_schedule+0x83/0x100 kernel/sched/core.c:8811
 folio_wait_bit_common+0x8ca/0x1390 mm/filemap.c:1297
 write_cache_pages+0x48a/0x1350 mm/page-writeback.c:2439
 generic_writepages mm/page-writeback.c:2563 [inline]
 do_writepages+0x438/0x690 mm/page-writeback.c:2583
 __writeback_single_inode+0xd1/0x670 fs/fs-writeback.c:1598
 writeback_sb_inodes+0x831/0x1010 fs/fs-writeback.c:1889
 __writeback_inodes_wb+0x11d/0x260 fs/fs-writeback.c:1960
 wb_writeback+0x450/0x7a0 fs/fs-writeback.c:2065
 wb_check_background_flush fs/fs-writeback.c:2131 [inline]
 wb_do_writeback fs/fs-writeback.c:2219 [inline]
 wb_workfn+0xb5f/0xf10 fs/fs-writeback.c:2246
 process_one_work+0x81c/0xd10 kernel/workqueue.c:2289
 worker_thread+0xb14/0x1330 kernel/workqueue.c:2436
 kthread+0x266/0x300 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>
INFO: task syz-executor.4:6345 blocked for more than 143 seconds.
      Not tainted 6.2.0-rc2-syzkaller-00010-g69b41ac87e4a #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.4  state:D stack:23008 pid:6345  ppid:5107   flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x9d1/0xe40 kernel/sched/core.c:6555
 schedule+0xcb/0x190 kernel/sched/core.c:6631
 io_schedule+0x83/0x100 kernel/sched/core.c:8811
 bit_wait_io+0xe/0xc0 kernel/sched/wait_bit.c:209
 __wait_on_bit_lock+0xbb/0x1a0 kernel/sched/wait_bit.c:90
 out_of_line_wait_on_bit_lock+0x1d4/0x250 kernel/sched/wait_bit.c:117
 wait_on_bit_lock_io include/linux/wait_bit.h:208 [inline]
 __lock_buffer fs/buffer.c:69 [inline]
 lock_buffer include/linux/buffer_head.h:397 [inline]
 __block_write_full_page+0x61e/0x1710 fs/buffer.c:1770
 __writepage+0x60/0x120 mm/page-writeback.c:2537
 write_cache_pages+0x7dd/0x1350 mm/page-writeback.c:2472
 generic_writepages mm/page-writeback.c:2563 [inline]
 do_writepages+0x438/0x690 mm/page-writeback.c:2583
 filemap_fdatawrite_wbc+0x11e/0x170 mm/filemap.c:388
 __filemap_fdatawrite_range mm/filemap.c:421 [inline]
 __filemap_fdatawrite mm/filemap.c:427 [inline]
 filemap_fdatawrite+0x15d/0x1e0 mm/filemap.c:432
 sync_bdevs+0x242/0x320 block/bdev.c:1064
 ksys_sync+0xdc/0x1c0 fs/sync.c:105
 __do_sys_sync+0xa/0x10 fs/sync.c:113
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fd49868c0c9
RSP: 002b:00007fd499479168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
RAX: ffffffffffffffda RBX: 00007fd4987abf80 RCX: 00007fd49868c0c9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007fd4986e7ae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc0bafb2cf R14: 00007fd499479300 R15: 0000000000022000
 </TASK>
INFO: task syz-executor.1:6344 blocked for more than 144 seconds.
      Not tainted 6.2.0-rc2-syzkaller-00010-g69b41ac87e4a #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1  state:D stack:23824 pid:6344  ppid:5096   flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x9d1/0xe40 kernel/sched/core.c:6555
 schedule+0xcb/0x190 kernel/sched/core.c:6631
 io_schedule+0x83/0x100 kernel/sched/core.c:8811
 bit_wait_io+0xe/0xc0 kernel/sched/wait_bit.c:209
 __wait_on_bit_lock+0xbb/0x1a0 kernel/sched/wait_bit.c:90
 out_of_line_wait_on_bit_lock+0x1d4/0x250 kernel/sched/wait_bit.c:117
 wait_on_bit_lock_io include/linux/wait_bit.h:208 [inline]
 __lock_buffer fs/buffer.c:69 [inline]
 lock_buffer include/linux/buffer_head.h:397 [inline]
 __sync_dirty_buffer+0x107/0x330 fs/buffer.c:2732
 __ext4_handle_dirty_metadata+0x29a/0x810 fs/ext4/ext4_jbd2.c:387
 ext4_convert_inline_data_nolock+0xb6e/0xe10 fs/ext4/inline.c:1255
 ext4_convert_inline_data+0x4d9/0x620 fs/ext4/inline.c:2066
 ext4_page_mkwrite+0x1e2/0x1130 fs/ext4/inode.c:6232
 do_page_mkwrite+0x19e/0x5e0 mm/memory.c:2947
 do_shared_fault mm/memory.c:4579 [inline]
 do_fault mm/memory.c:4647 [inline]
 handle_pte_fault mm/memory.c:4931 [inline]
 __handle_mm_fault mm/memory.c:5073 [inline]
 handle_mm_fault+0x1962/0x26c0 mm/memory.c:5219
 do_user_addr_fault+0x69b/0xcb0 arch/x86/mm/fault.c:1428
 handle_page_fault arch/x86/mm/fault.c:1519 [inline]
 exc_page_fault+0x7a/0x120 arch/x86/mm/fault.c:1575
 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0033:0x7f5e9f42bc9b
RSP: 002b:00007ffe0931df40 EFLAGS: 00010246
RAX: 0000000020000280 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000055555600e2e8
RBP: 00007ffe0931e038 R08: 0000000000000000 R09: 0000000000000000
R10: 00007f5e9f0017e0 R11: 0000000000000246 R12: 000000000005c7ef
R13: 00007ffe0931e060 R14: 00007f5e9f5ac120 R15: 0000000000000032
 </TASK>

Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
 #0: ffffffff8d5239d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 kernel/rcu/tasks.h:507
1 lock held by rcu_tasks_trace/13:
 #0: ffffffff8d5241d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 kernel/rcu/tasks.h:507
1 lock held by khungtaskd/28:
 #0: ffffffff8d523800 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
1 lock held by syslogd/4404:
 #0: ffff8880b993a1d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x110 kernel/sched/core.c:537
2 locks held by getty/4743:
 #0: ffff88802c263098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:244
 #1: ffffc900015b02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6e8/0x1e50 drivers/tty/n_tty.c:2177
3 locks held by kworker/u4:0/5084:
 #0: ffff8881451dd138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x796/0xd10 kernel/workqueue.c:2262
 #1: ffffc90003d2fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0xd10 kernel/workqueue.c:2264
 #2: ffff88813fe600e0 (&type->s_umount_key#41){.+.+}-{3:3}, at: trylock_super+0x1b/0xf0 fs/super.c:415
1 lock held by syz-executor.4/6345:
 #0: ffff888146b674c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1b0/0x320 block/bdev.c:1052
4 locks held by syz-executor.1/6344:
 #0: ffff88807a346a58 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:136 [inline]
 #0: ffff88807a346a58 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2e2/0xcb0 arch/x86/mm/fault.c:1369
 #1: ffff88808e878558 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1811 [inline]
 #1: ffff88808e878558 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs.h:1915 [inline]
 #1: ffff88808e878558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ab/0x1130 fs/ext4/inode.c:6227
 #2: ffff888093bf73f8 (mapping.invalidate_lock){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:811 [inline]
 #2: ffff888093bf73f8 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_page_mkwrite+0x1d5/0x1130 fs/ext4/inode.c:6230
 #3: ffff888093bf6f20 (&ei->xattr_sem){++++}-{3:3}, at: ext4_write_lock_xattr fs/ext4/xattr.h:155 [inline]
 #3: ffff888093bf6f20 (&ei->xattr_sem){++++}-{3:3}, at: ext4_convert_inline_data+0x3b5/0x620 fs/ext4/inline.c:2064
2 locks held by syz-executor.0/6479:
 #0: ffff88808e8780e0 (&type->s_umount_key#31){++++}-{3:3}, at: iterate_supers+0xb0/0x1f0 fs/super.c:722
 #1: ffff88801eb6a7d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:364 [inline]
 #1: ffff88801eb6a7d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x279/0xaa0 fs/fs-writeback.c:2723
2 locks held by kworker/u4:19/6522:
2 locks held by kworker/u4:38/6598:
1 lock held by syz-executor.1/6621:
 #0: ffff888146b674c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfe/0xa60 block/bdev.c:813

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc2-syzkaller-00010-g69b41ac87e4a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x1e3/0x2d0 lib/dump_stack.c:106
 nmi_cpu_backtrace+0x4e3/0x560 lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x19b/0x3e0 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline]
 watchdog+0xcd5/0xd20 kernel/hung_task.c:377
 kthread+0x266/0x300 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 6598 Comm: kworker/u4:38 Not tainted 6.2.0-rc2-syzkaller-00010-g69b41ac87e4a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Workqueue: phy10 ieee80211_iface_work
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:40 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:75 [inline]
RIP: 0010:arch_local_irq_save arch/x86/include/asm/irqflags.h:107 [inline]
RIP: 0010:lock_is_held_type+0x6a/0x190 kernel/locking/lockdep.c:5707
Code: 2c 25 40 98 03 00 41 83 bd 34 0a 00 00 00 0f 85 e7 00 00 00 41 89 f6 49 89 ff 48 c7 04 24 00 00 00 00 9c 8f 04 24 4c 8b 24 24 <fa> 48 c7 c7 40 a6 0d 8b e8 09 15 00 00 65 ff 05 e2 af 3c 75 41 83
RSP: 0018:ffffc90005757a18 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 1ffff92000aeaf4c RCX: 0000000080000001
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8d523780
RBP: 00000000ffffffff R08: ffffffff88ad2212 R09: fffffbfff1d6043e
R10: fffffbfff1d6043e R11: 1ffffffff1d6043d R12: 0000000000000246
R13: ffff88808dd357c0 R14: 00000000ffffffff R15: ffffffff8d523780
FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005633cdbd0488 CR3: 000000000d28e000 CR4: 00000000003526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 lock_is_held include/linux/lockdep.h:283 [inline]
 rcu_read_lock_sched_held+0x89/0x130 kernel/rcu/update.c:125
 trace_kfree+0x30/0xe0 include/trace/events/kmem.h:94
 kfree+0x16/0xe0 mm/slab_common.c:1007
 skb_free_head net/core/skbuff.c:822 [inline]
 skb_release_data+0x4f6/0x710 net/core/skbuff.c:851
 skb_release_all net/core/skbuff.c:916 [inline]
 __kfree_skb net/core/skbuff.c:930 [inline]
 kfree_skb_reason+0xfa/0x2c0 net/core/skbuff.c:956
 kfree_skb include/linux/skbuff.h:1218 [inline]
 ieee80211_iface_work+0x26a/0xcf0 net/mac80211/iface.c:1637
 process_one_work+0x81c/0xd10 kernel/workqueue.c:2289
 worker_thread+0xb14/0x1330 kernel/workqueue.c:2436
 kthread+0x266/0x300 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>