INFO: task kworker/u4:0:24922 blocked for more than 143 seconds.
      Not tainted 5.11.0-rc6-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:0    state:D stack:27992 pid:24922 ppid:     2 flags:0x00004000
Workqueue: events_unbound io_ring_exit_work
Call Trace:
 context_switch kernel/sched/core.c:4327 [inline]
 __schedule+0x999/0xe70 kernel/sched/core.c:5078
 schedule+0x14b/0x200 kernel/sched/core.c:5157
 schedule_timeout+0x43/0x250 kernel/time/timer.c:1854
 do_wait_for_common+0x266/0x3a0 kernel/sched/completion.c:85
 __wait_for_common kernel/sched/completion.c:106 [inline]
 wait_for_common kernel/sched/completion.c:117 [inline]
 wait_for_completion+0x43/0x50 kernel/sched/completion.c:138
 kthread_park+0x10d/0x1c0 kernel/kthread.c:582
 io_sq_thread_park fs/io_uring.c:7469 [inline]
 io_sq_thread_stop fs/io_uring.c:7487 [inline]
 io_finish_async+0xd7/0x460 fs/io_uring.c:7505
 io_ring_ctx_free fs/io_uring.c:8670 [inline]
 io_ring_exit_work+0x55/0x4c0 fs/io_uring.c:8763
 process_one_work+0x789/0xfc0 kernel/workqueue.c:2275
 worker_thread+0xac1/0x1300 kernel/workqueue.c:2421
 kthread+0x39a/0x3c0 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296

Showing all locks held in the system:
1 lock held by khungtaskd/1648:
 #0: ffffffff8bd11740 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 arch/x86/pci/mmconfig_64.c:151
1 lock held by in:imklog/8119:
 #0: ffff888013bfcff0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x2f0 fs/file.c:947
1 lock held by syz-executor.0/8421:
 #0: ffff8881479ccd88 (&xt[i].mutex){+.+.}-{3:3}, at: xt_find_table_lock+0x37/0x410 net/netfilter/x_tables.c:1206
1 lock held by syz-executor.3/8427:
 #0: ffff8881479ccd88 (&xt[i].mutex){+.+.}-{3:3}, at: xt_find_target+0x77/0x230 net/netfilter/x_tables.c:234
1 lock held by syz-executor.4/8429:
 #0: ffff8881479ccd88 (&xt[i].mutex){+.+.}-{3:3}, at: xt_find_target+0x77/0x230 net/netfilter/x_tables.c:234
5 locks held by kworker/0:2/688:
 #0: ffff8880b9c34758 (&rq->lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1320 [inline]
 #0: ffff8880b9c34758 (&rq->lock){-.-.}-{2:2}, at: __schedule+0xd8/0xe70 kernel/sched/core.c:4995
 #1: ffff8880b9c1ff48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x224/0x5c0 kernel/sched/psi.c:833
 #2: ffff8880b9c3bc58 (&ACCESS_PRIVATE(sdp, lock)){....}-{2:2}, at: spin_lock_irq include/linux/spinlock.h:379 [inline]
 #2: ffff8880b9c3bc58 (&ACCESS_PRIVATE(sdp, lock)){....}-{2:2}, at: srcu_invoke_callbacks+0x1c0/0x310 kernel/rcu/srcutree.c:1198
 #3: ffff8880b9c246d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x12a/0x270 kernel/time/timer.c:944
 #4: ffffffff8f799d80 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x97/0x6a0 lib/debugobjects.c:656
3 locks held by kworker/u4:0/24922:
 #0: ffff888010469138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6f4/0xfc0 kernel/workqueue.c:2248
 #1: ffffc9001764fd78 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x733/0xfc0 kernel/workqueue.c:2250
 #2: ffff88801833c070 (&sqd->lock){+.+.}-{3:3}, at: io_sq_thread_park fs/io_uring.c:7468 [inline]
 #2: ffff88801833c070 (&sqd->lock){+.+.}-{3:3}, at: io_sq_thread_stop fs/io_uring.c:7487 [inline]
 #2: ffff88801833c070 (&sqd->lock){+.+.}-{3:3}, at: io_finish_async+0xbb/0x460 fs/io_uring.c:7505
2 locks held by syz-executor.5/24967:
 #0: ffff8881479ccd88 (&xt[i].mutex){+.+.}-{3:3}, at: xt_find_table_lock+0x37/0x410 net/netfilter/x_tables.c:1206
 #1: ffffffff8bd15ae8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:290 [inline]
 #1: ffffffff8bd15ae8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x1e8/0x600 kernel/rcu/tree_exp.h:836
2 locks held by kworker/0:1/25082:
 #0: ffff88801047c538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x6f4/0xfc0 kernel/workqueue.c:2248
 #1: ffffc900029bfd78 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x733/0xfc0 kernel/workqueue.c:2250

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 1648 Comm: khungtaskd Not tainted 5.11.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x137/0x1be lib/dump_stack.c:120
 nmi_cpu_backtrace+0x16c/0x190 lib/nmi_backtrace.c:105
 nmi_trigger_cpumask_backtrace+0x191/0x2f0 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:209 [inline]
 watchdog+0xce9/0xd30 kernel/hung_task.c:294
 kthread+0x39a/0x3c0 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 217 Comm: kworker/u4:5 Not tainted 5.11.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: phy8 ieee80211_iface_work
RIP: 0010:ieee80211_sta_get_rates+0x3b4/0x6c0 net/mac80211/util.c:2106
Code: 48 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28 84 c0 0f 85 04 01 00 00 0f b7 03 03 44 24 2c 99 f7 7c 24 68 <89> c3 89 c7 8b 6c 24 30 89 ee e8 9d 84 8c f8 39 eb 4d 89 f4 75 66
RSP: 0018:ffffc900011cf8a0 EFLAGS: 00000202
RAX: 0000000000000037 RBX: ffff888051b9cdec RCX: dffffc0000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff88eb43bd R09: fffffbfff1a272ce
R10: fffffbfff1a272ce R11: 0000000000000000 R12: 0000000000000006
R13: dffffc0000000000 R14: ffff888051b9b190 R15: 0000000000000002
FS:  0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3223fb9db8 CR3: 000000003a518000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ieee80211_update_sta_info net/mac80211/ibss.c:1010 [inline]
 ieee80211_rx_bss_info net/mac80211/ibss.c:1124 [inline]
 ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1615 [inline]
 ieee80211_ibss_rx_queued_mgmt+0xfc5/0x2930 net/mac80211/ibss.c:1642
 ieee80211_iface_work+0x71a/0xb10 net/mac80211/iface.c:1423
 process_one_work+0x789/0xfc0 kernel/workqueue.c:2275
 worker_thread+0xac1/0x1300 kernel/workqueue.c:2421
 kthread+0x39a/0x3c0 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296