INFO: task dhcpcd:4760 blocked for more than 143 seconds. Not tainted 6.9.0-next-20240520-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:dhcpcd state:D stack:20632 pid:4760 tgid:4760 ppid:4759 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x17e8/0x4a50 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 devinet_ioctl+0x2ce/0x1bc0 net/ipv4/devinet.c:1101 inet_ioctl+0x3d7/0x4f0 net/ipv4/af_inet.c:1001 sock_do_ioctl+0x158/0x460 net/socket.c:1222 sock_ioctl+0x629/0x8e0 net/socket.c:1341 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f58d1fc9d49 RSP: 002b:00007ffc0db55098 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f58d1efb6c0 RCX: 00007f58d1fc9d49 RDX: 00007ffc0db65288 RSI: 0000000000008914 RDI: 0000000000000018 RBP: 00007ffc0db75448 R08: 00007ffc0db65248 R09: 00007ffc0db651f8 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc0db65288 R14: 0000000000000028 R15: 0000000000008914 INFO: task kworker/0:6:5191 blocked for more than 144 seconds. Not tainted 6.9.0-next-20240520-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:6 state:D stack:19000 pid:5191 tgid:5191 ppid:2 flags:0x00004000 Workqueue: events switchdev_deferred_process_work Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x17e8/0x4a50 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd70 kernel/workqueue.c:3393 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task udevd:6343 blocked for more than 144 seconds. Not tainted 6.9.0-next-20240520-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:23920 pid:6343 tgid:6343 ppid:4546 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x17e8/0x4a50 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 btrfs_control_ioctl+0x150/0x3e0 fs/btrfs/super.c:2225 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe93091ad49 RSP: 002b:00007ffeb6127768 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe93091ad49 RDX: 00007ffeb6127778 RSI: 0000000090009427 RDI: 0000000000000009 RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffeb61287b8 R14: 0000560ffef6f4d0 R15: 00007ffeb61294d8 INFO: task syz-executor.4:9269 blocked for more than 145 seconds. Not tainted 6.9.0-next-20240520-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:20240 pid:9269 tgid:9269 ppid:1 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x17e8/0x4a50 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 __lru_add_drain_all+0x66/0x570 mm/swap.c:857 invalidate_bdev+0x76/0xa0 block/bdev.c:100 ext4_put_super+0x609/0xcd0 fs/ext4/super.c:1345 generic_shutdown_super+0x136/0x2d0 fs/super.c:642 kill_block_super+0x44/0x90 fs/super.c:1676 ext4_kill_sb+0x68/0xa0 fs/ext4/super.c:7301 deactivate_locked_super+0xc4/0x130 fs/super.c:473 cleanup_mnt+0x426/0x4c0 fs/namespace.c:1267 task_work_run+0x24f/0x310 kernel/task_work.c:180 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x168/0x370 kernel/entry/common.c:218 do_syscall_64+0x102/0x240 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f17fc47e217 RSP: 002b:00007ffe3dd9a838 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f17fc47e217 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe3dd9a8f0 RBP: 00007ffe3dd9a8f0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe3dd9b9b0 R13: 00007f17fc4c8336 R14: 00007f17fc4dc840 R15: 0000000000000010 INFO: task syz-executor.1:9537 blocked for more than 146 seconds. Not tainted 6.9.0-next-20240520-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:20048 pid:9537 tgid:9537 ppid:1 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x17e8/0x4a50 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_timeout+0xb0/0x310 kernel/time/timer.c:2557 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common kernel/sched/completion.c:127 [inline] wait_for_completion+0x355/0x620 kernel/sched/completion.c:148 __flush_work+0xaa9/0xd00 kernel/workqueue.c:4211 flush_all_cpus_locked+0x155/0x180 mm/slub.c:3185 __kmem_cache_shutdown+0x29/0x3b0 mm/slub.c:5374 shutdown_cache mm/slab_common.c:456 [inline] kmem_cache_destroy+0x72/0x1b0 mm/slab_common.c:496 bio_put_slab block/bio.c:155 [inline] bioset_exit+0x555/0x650 block/bio.c:1740 __bch2_fs_free fs/bcachefs/super.c:574 [inline] bch2_fs_release+0x49a/0x6e0 fs/bcachefs/super.c:603 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x22f/0x480 lib/kobject.c:737 deactivate_locked_super+0xc4/0x130 fs/super.c:473 cleanup_mnt+0x426/0x4c0 fs/namespace.c:1267 task_work_run+0x24f/0x310 kernel/task_work.c:180 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x168/0x370 kernel/entry/common.c:218 do_syscall_64+0x102/0x240 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcf7ba7e217 RSP: 002b:00007ffd7be461f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fcf7ba7e217 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7be462b0 RBP: 00007ffd7be462b0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd7be47370 R13: 00007fcf7bac8336 R14: 000000000005ad96 R15: 0000000000000016 INFO: task syz-executor.0:10375 blocked for more than 147 seconds. Not tainted 6.9.0-next-20240520-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:25360 pid:10375 tgid:10373 ppid:9990 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x17e8/0x4a50 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_timeout+0xb0/0x310 kernel/time/timer.c:2557 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common kernel/sched/completion.c:127 [inline] wait_for_completion+0x355/0x620 kernel/sched/completion.c:148 __flush_work+0xaa9/0xd00 kernel/workqueue.c:4211 __lru_add_drain_all+0x504/0x570 mm/swap.c:902 invalidate_bdev+0x76/0xa0 block/bdev.c:100 btrfs_get_bdev_and_sb+0x11a/0x1c0 fs/btrfs/volumes.c:492 btrfs_open_one_device fs/btrfs/volumes.c:657 [inline] open_fs_devices+0x2b4/0x1290 fs/btrfs/volumes.c:1196 btrfs_get_tree_super fs/btrfs/super.c:1818 [inline] btrfs_get_tree+0x504/0x1920 fs/btrfs/super.c:2081 vfs_get_tree+0x90/0x2a0 fs/super.c:1780 fc_mount+0x1b/0xb0 fs/namespace.c:1125 btrfs_get_tree_subvol fs/btrfs/super.c:2044 [inline] btrfs_get_tree+0x652/0x1920 fs/btrfs/super.c:2082 vfs_get_tree+0x90/0x2a0 fs/super.c:1780 do_new_mount+0x2be/0xb40 fs/namespace.c:3352 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount+0x2d9/0x3c0 fs/namespace.c:3875 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4feda7e5ea RSP: 002b:00007f4fee830ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f4fee830f80 RCX: 00007f4feda7e5ea RDX: 0000000020000000 RSI: 0000000020005600 RDI: 00007f4fee830f40 RBP: 0000000020000000 R08: 00007f4fee830f80 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020005600 R13: 00007f4fee830f40 R14: 000000000000559d R15: 0000000020000080 INFO: task syz-executor.2:10376 blocked for more than 149 seconds. Not tainted 6.9.0-next-20240520-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:24088 pid:10376 tgid:10374 ppid:9596 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x17e8/0x4a50 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752 bio_find_or_create_slab block/bio.c:122 [inline] bioset_init+0x1f1/0x6e0 block/bio.c:1781 bch2_fs_alloc+0x14ba/0x2040 fs/bcachefs/super.c:890 bch2_fs_open+0x8cc/0xdf0 fs/bcachefs/super.c:2102 bch2_mount+0x71d/0x1320 fs/bcachefs/fs.c:1918 legacy_get_tree+0xee/0x190 fs/fs_context.c:662 vfs_get_tree+0x90/0x2a0 fs/super.c:1780 do_new_mount+0x2be/0xb40 fs/namespace.c:3352 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount+0x2d9/0x3c0 fs/namespace.c:3875 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4e45c7e5ea RSP: 002b:00007f4e457feef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f4e457fef80 RCX: 00007f4e45c7e5ea RDX: 0000000020005b00 RSI: 0000000020005b40 RDI: 00007f4e457fef40 RBP: 0000000020005b00 R08: 00007f4e457fef80 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020005b40 R13: 00007f4e457fef40 R14: 0000000000005b41 R15: 0000000020002180 Showing all locks held in the system: 4 locks held by kworker/u8:0/11: #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90000107d00 ( net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 #2: ffffffff8f5da550 (pernet_ops_rwsem){++++}-{3:3} , at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594 #3: ffffffff8f5e6d88 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 net/mac80211/main.c:1645 2 locks held by migration/1/23: #0: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] #0: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline] #0: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: ieee80211_rx_napi+0xd6/0x3c0 net/mac80211/rx.c:5481 #1: ffffffff8e34df88 (tk_core.seq.seqcount){----}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] #1: ffffffff8e34df88 (tk_core.seq.seqcount){----}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline] #1: ffffffff8e34df88 (tk_core.seq.seqcount){----}-{0:0}, at: __ieee80211_beacon_get+0x36/0x15c0 net/mac80211/tx.c:5413 1 lock held by khungtaskd/30: #0: ffffffff8e333e60 ( rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline] rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6614 5 locks held by kworker/u8:2/35: 3 locks held by kworker/u8:5/750: 3 locks held by kworker/0:2/785: #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc9000405fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] ffffc9000405fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 #2: ffffffff8f5e6d88 (rtnl_mutex){+.+.}-{3:3} , at: reg_check_chans_work+0x91/0xea0 net/wireless/reg.c:2478 3 locks held by kworker/u8:7/1104: #0: ffff88802a3cd148 ( (wq_completion)ipv6_addrconf ){+.+.}-{0:0} , at: process_one_work kernel/workqueue.c:3206 [inline] , at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90004e87d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] ffffc90004e87d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 #2: ffffffff8f5e6d88 ( rtnl_mutex ){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 net/ipv6/addrconf.c:4733 1 lock held by dhcpcd/4760: #0: ffffffff8f5e6d88 ( rtnl_mutex ){+.+.}-{3:3} , at: devinet_ioctl+0x2ce/0x1bc0 net/ipv4/devinet.c:1101 2 locks held by getty/4847: #0: ffff88801dcb00a0 ( &tty->ldisc_sem ){++++}-{0:0} , at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 drivers/tty/n_tty.c:2201 3 locks held by kworker/1:3/5160: 6 locks held by kworker/1:4/5161: 3 locks held by kworker/1:5/5162: 3 locks held by kworker/0:6/5191: #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc90003c3fd00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc90003c3fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 #2: ffffffff8f5e6d88 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104 1 lock held by udevd/6343: #0: ffffffff8e8a5228 (uuid_mutex){+.+.}-{3:3}, at: btrfs_control_ioctl+0x150/0x3e0 fs/btrfs/super.c:2225 4 locks held by udevd/6668: #0: ffff88805a930790 ( &p->lock ){+.+.}-{3:3} , at: seq_read_iter+0xb7/0xd60 fs/seq_file.c:182 #1: ffff888062714088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154 #2: ffff88804403ab48 (kn->active#18){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155 #3: ffff888044dbf190 (&dev->mutex){....}-{3:3}, at: device_lock_interruptible include/linux/device.h:1014 [inline] #3: ffff888044dbf190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 drivers/usb/core/sysfs.c:142 3 locks held by kworker/1:8/7413: 7 locks held by kworker/1:2H/7712: 2 locks held by syz-executor.4/9269: #0: ffff88805929c0e0 (&type->s_umount_key#32){++++}-{3:3}, at: __super_lock fs/super.c:56 [inline] #0: ffff88805929c0e0 (&type->s_umount_key#32){++++}-{3:3}, at: __super_lock_excl fs/super.c:71 [inline] #0: ffff88805929c0e0 (&type->s_umount_key#32){++++}-{3:3}, at: deactivate_super+0xb5/0xf0 fs/super.c:505 #1: ffffffff8e3ec9c8 (lock#3){+.+.}-{3:3}, at: __lru_add_drain_all+0x66/0x570 mm/swap.c:857 4 locks held by syz-executor.1/9537: #0: ffffffff8ea048e8 (bio_slab_lock){+.+.}-{3:3}, at: bio_put_slab block/bio.c:140 [inline] (bio_slab_lock){+.+.}-{3:3}, at: bioset_exit+0x436/0x650 block/bio.c:1740 #1: ffffffff8e1ce470 (cpu_hotplug_lock ){++++}-{0:0} , at: kmem_cache_destroy+0x32/0x1b0 mm/slab_common.c:487 #2: ffffffff8e413de8 ( slab_mutex ){+.+.}-{3:3} , at: kmem_cache_destroy+0x40/0x1b0 mm/slab_common.c:488 #3: ffffffff8e430ad8 (flush_lock){+.+.}-{3:3}, at: flush_all_cpus_locked+0x24/0x180 mm/slub.c:3167 1 lock held by syz-executor.3/10320: #0: ffffffff8f5e6d88 ( rtnl_mutex ){+.+.}-{3:3} , at: tun_detach drivers/net/tun.c:698 [inline] , at: tun_chr_close+0x3e/0x1b0 drivers/net/tun.c:3500 2 locks held by syz-executor.0/10375: #0: ffffffff8e8a5228 ( uuid_mutex ){+.+.}-{3:3} , at: btrfs_get_tree_super fs/btrfs/super.c:1802 [inline] , at: btrfs_get_tree+0x2dc/0x1920 fs/btrfs/super.c:2081 #1: ffffffff8e3ec9c8 (lock#3){+.+.}-{3:3}, at: __lru_add_drain_all+0x66/0x570 mm/swap.c:857 1 lock held by syz-executor.2/10376: #0: ffffffff8ea048e8 ( bio_slab_lock ){+.+.}-{3:3} , at: bio_find_or_create_slab block/bio.c:122 [inline] , at: bioset_init+0x1f1/0x6e0 block/bio.c:1781 1 lock held by syz-executor.2/10383: #0: ffffffff8f5e6d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x10d0 net/core/rtnetlink.c:6592 1 lock held by syz-executor.0/10385: