INFO: task kworker/u8:5:76 blocked for more than 143 seconds.
      Not tainted 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:5    state:D stack:23008 pid:76    tgid:76    ppid:2      flags:0x00004000
Workqueue: netns cleanup_net
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5408 [inline]
 __schedule+0xf15/0x5d00 kernel/sched/core.c:6745
 __schedule_loop kernel/sched/core.c:6822 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6837
 schedule_timeout+0x258/0x2a0 kernel/time/timer.c:2557
 do_wait_for_common kernel/sched/completion.c:95 [inline]
 __wait_for_common+0x3de/0x5f0 kernel/sched/completion.c:116
 __flush_workqueue+0x39e/0x1200 kernel/workqueue.c:3972
 peer_remove_after_dead+0xb8/0x2d0 drivers/net/wireguard/peer.c:116
 wg_peer_remove_all+0x27c/0x3a0 drivers/net/wireguard/peer.c:183
 wg_destruct+0x1c3/0x3d0 drivers/net/wireguard/device.c:254
 netdev_run_todo+0x775/0x1250 net/core/dev.c:10692
 default_device_exit_batch+0x860/0xae0 net/core/dev.c:11760
 ops_exit_list+0x128/0x180 net/core/net_namespace.c:178
 cleanup_net+0x5b7/0xbf0 net/core/net_namespace.c:640
 process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task jbd2/sda1-8:4497 blocked for more than 143 seconds.
      Not tainted 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:jbd2/sda1-8     state:D stack:25312 pid:4497  tgid:4497  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5408 [inline]
 __schedule+0xf15/0x5d00 kernel/sched/core.c:6745
 __schedule_loop kernel/sched/core.c:6822 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6837
 io_schedule+0xbf/0x130 kernel/sched/core.c:9043
 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:209
 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49
 out_of_line_wait_on_bit+0xda/0x110 kernel/sched/wait_bit.c:64
 wait_on_bit_io include/linux/wait_bit.h:101 [inline]
 __wait_on_buffer+0x64/0x70 fs/buffer.c:123
 wait_on_buffer include/linux/buffer_head.h:415 [inline]
 journal_wait_on_commit_record fs/jbd2/commit.c:171 [inline]
 jbd2_journal_commit_transaction+0x4827/0x65d0 fs/jbd2/commit.c:887
 kjournald2+0x1f8/0x8f0 fs/jbd2/journal.c:201
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task syz-executor.2:8805 blocked for more than 144 seconds.
      Not tainted 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2  state:D stack:27168 pid:8805  tgid:8804  ppid:7906   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5408 [inline]
 __schedule+0xf15/0x5d00 kernel/sched/core.c:6745
 __schedule_loop kernel/sched/core.c:6822 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6837
 schedule_timeout+0x258/0x2a0 kernel/time/timer.c:2557
 do_wait_for_common kernel/sched/completion.c:95 [inline]
 __wait_for_common+0x3de/0x5f0 kernel/sched/completion.c:116
 __flush_work+0x5bd/0xc60 kernel/workqueue.c:4211
 __lru_add_drain_all+0x52c/0x740 mm/swap.c:902
 invalidate_bdev+0x77/0xa0 block/bdev.c:100
 btrfs_get_bdev_and_sb fs/btrfs/volumes.c:492 [inline]
 btrfs_open_one_device fs/btrfs/volumes.c:657 [inline]
 open_fs_devices+0x683/0x1220 fs/btrfs/volumes.c:1196
 btrfs_open_devices+0x122/0x160 fs/btrfs/volumes.c:1258
 btrfs_get_tree_super fs/btrfs/super.c:1826 [inline]
 btrfs_get_tree+0x482/0x1b90 fs/btrfs/super.c:2089
 vfs_get_tree+0x8f/0x380 fs/super.c:1780
 fc_mount+0x16/0xc0 fs/namespace.c:1125
 btrfs_get_tree_subvol fs/btrfs/super.c:2052 [inline]
 btrfs_get_tree+0xa53/0x1b90 fs/btrfs/super.c:2090
 vfs_get_tree+0x8f/0x380 fs/super.c:1780
 do_new_mount fs/namespace.c:3352 [inline]
 path_mount+0x14e6/0x1f20 fs/namespace.c:3679
 do_mount fs/namespace.c:3692 [inline]
 __do_sys_mount fs/namespace.c:3898 [inline]
 __se_sys_mount fs/namespace.c:3875 [inline]
 __x64_sys_mount+0x297/0x320 fs/namespace.c:3875
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f821907e5ea
RSP: 002b:00007f8219e41ef8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f8219e41f80 RCX: 00007f821907e5ea
RDX: 0000000020000000 RSI: 0000000020005600 RDI: 00007f8219e41f40
RBP: 0000000020000000 R08: 00007f8219e41f80 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020005600
R13: 00007f8219e41f40 R14: 000000000000559d R15: 0000000020000100
 </TASK>

Showing all locks held in the system:
6 locks held by kworker/u8:0/11:
 #0: ffff888019a82948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 kernel/workqueue.c:3206
 #1: ffffc90000107d80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 kernel/workqueue.c:3207
 #2: ffff88805e1ee0e0 (&type->s_umount_key#111){++++}-{3:3}, at: super_trylock_shared+0x1e/0xf0 fs/super.c:562
 #3: ffff88802a85bac8 (&nm_i->build_lock){+.+.}-{3:3}, at: f2fs_build_free_nids+0x4a/0xb0 fs/f2fs/node.c:2564
 #4: ffff88802a85b930 (&nm_i->nat_tree_lock){++++}-{3:3}, at: f2fs_down_read fs/f2fs/f2fs.h:2154 [inline]
 #4: ffff88802a85b930 (&nm_i->nat_tree_lock){++++}-{3:3}, at: scan_free_nid_bits fs/f2fs/node.c:2452 [inline]
 #4: ffff88802a85b930 (&nm_i->nat_tree_lock){++++}-{3:3}, at: __f2fs_build_free_nids+0x749/0xe70 fs/f2fs/node.c:2500
 #5: ffff88807d204088 (&sbi->sb_lock){++++}-{3:3}, at: f2fs_down_write fs/f2fs/f2fs.h:2170 [inline]
 #5: ffff88807d204088 (&sbi->sb_lock){++++}-{3:3}, at: f2fs_record_errors fs/f2fs/super.c:4105 [inline]
 #5: ffff88807d204088 (&sbi->sb_lock){++++}-{3:3}, at: f2fs_handle_error+0x3d/0x1a0 fs/f2fs/super.c:4122
1 lock held by khungtaskd/30:
 #0: ffffffff8dbb18e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline]
 #0: ffffffff8dbb18e0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline]
 #0: ffffffff8dbb18e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 kernel/locking/lockdep.c:6614
4 locks held by kworker/u8:5/76:
 #0: ffff8880162d3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 kernel/workqueue.c:3206
 #1: ffffc900015c7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 kernel/workqueue.c:3207
 #2: ffffffff8f735dd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 net/core/net_namespace.c:594
 #3: ffff88807a841408 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x151/0x3d0 drivers/net/wireguard/device.c:249
2 locks held by getty/4840:
 #0: ffff88802a9620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 drivers/tty/n_tty.c:2201
3 locks held by syz-fuzzer/5081:
 #0: ffff88802290dc48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xeb/0x180 fs/file.c:1191
 #1: ffff88805f235e00 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: iterate_dir+0x430/0xb60 fs/readdir.c:103
 #2: ffff888029426420 (sb_writers#5){.+.+}-{0:0}, at: file_accessed include/linux/fs.h:2458 [inline]
 #2: ffff888029426420 (sb_writers#5){.+.+}-{0:0}, at: iterate_dir+0x922/0xb60 fs/readdir.c:113
3 locks held by syz-fuzzer/5094:
 #0: ffff88807f747748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xeb/0x180 fs/file.c:1191
 #1: ffff88805f0d4000 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: iterate_dir+0x430/0xb60 fs/readdir.c:103
 #2: ffff888029426420 (sb_writers#5){.+.+}-{0:0}, at: file_accessed include/linux/fs.h:2458 [inline]
 #2: ffff888029426420 (sb_writers#5){.+.+}-{0:0}, at: iterate_dir+0x922/0xb60 fs/readdir.c:113
7 locks held by syz-executor.4/8743:
2 locks held by syz-executor.3/8768:
 #0: ffff888029426420 (sb_writers#5){.+.+}-{0:0}, at: filename_create+0x10d/0x530 fs/namei.c:3893
 #1: ffff88805f231800 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:826 [inline]
 #1: ffff88805f231800 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x1c2/0x530 fs/namei.c:3900
2 locks held by syz-executor.2/8805:
 #0: ffffffff8e367f28 (uuid_mutex){+.+.}-{3:3}, at: btrfs_get_tree_super fs/btrfs/super.c:1810 [inline]
 #0: ffffffff8e367f28 (uuid_mutex){+.+.}-{3:3}, at: btrfs_get_tree+0x3b9/0x1b90 fs/btrfs/super.c:2089
 #1: ffffffff8dcd16e8 (lock#3){+.+.}-{3:3}, at: __lru_add_drain_all+0x69/0x740 mm/swap.c:857
2 locks held by syz-executor.1/8846:
 #0: ffff888029426420 (sb_writers#5){.+.+}-{0:0}, at: __ext4_ioctl+0x1686/0x4580 fs/ext4/ioctl.c:1311
 #1: ffff888029432160 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x15d/0x340 fs/jbd2/transaction.c:904

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
 watchdog+0xf86/0x1240 kernel/hung_task.c:379
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 8783 Comm: syz-executor.0 Not tainted 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
RIP: 0010:__this_cpu_preempt_check+0x0/0x20 lib/smp_processor_id.c:65
Code: c6 40 ff 8f 8b 48 c7 c7 80 ff 8f 8b e9 f9 fe ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 89 fe 48 c7 c7 c0 ff 8f 8b e9 cd fe ff ff 66 2e 0f
RSP: 0018:ffffc9000358f8a0 EFLAGS: 00000046
RAX: 0000000000000002 RBX: e16e609a976d2f2e RCX: ffffc9000358f8f8
RDX: 1ffff110052ff8da RSI: ffffffff8dbde7c8 RDI: ffffffff8b2cb0e0
RBP: 1ffff920006b1f17 R08: 0000000000000000 R09: fffffbfff1fc8c0a
R10: ffffffff8fe46057 R11: 0000000000000002 R12: 0000000000000002
R13: 0000000000000003 R14: ffff8880297fc6d8 R15: ffff8880297fbc00
FS:  00007fa1abdd46c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa1abdd3f00 CR3: 000000005895e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 lockdep_recursion_finish kernel/locking/lockdep.c:467 [inline]
 lock_release+0x384/0x6c0 kernel/locking/lockdep.c:5776
 seqcount_lockdep_reader_access include/linux/seqlock.h:73 [inline]
 timekeeping_debug_get_ns+0x97/0x5b0 kernel/time/timekeeping.c:256
 timekeeping_get_ns kernel/time/timekeeping.c:401 [inline]
 ktime_get+0xd9/0x1a0 kernel/time/timekeeping.c:850
 clockevents_program_min_delta+0x82/0x3a0 kernel/time/clockevents.c:241
 clockevents_program_event+0x2a6/0x380 kernel/time/clockevents.c:336
 tick_program_event+0xa9/0x140 kernel/time/tick-oneshot.c:44
 __hrtimer_reprogram kernel/time/hrtimer.c:679 [inline]
 __hrtimer_reprogram kernel/time/hrtimer.c:653 [inline]
 hrtimer_reprogram+0x283/0x460 kernel/time/hrtimer.c:864
 hrtimer_start_range_ns+0x7ea/0xe10 kernel/time/hrtimer.c:1301
 posixtimer_rearm+0x1ee/0x360 kernel/time/posix-timers.c:267
 dequeue_signal+0x2ac/0x660 kernel/signal.c:696
 get_signal+0x5fb/0x2710 kernel/signal.c:2788
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:310
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x14a/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa1ab07cee9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fa1abdd40c8 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 00007fa1ab1b4070 RCX: 00007fa1ab07cee9
RDX: 000000002006b000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007fa1ab0c947f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007fa1ab1b4070 R15: 00007ffc1ec92a28
 </TASK>