INFO: task syz-executor.2:5107 blocked for more than 141 seconds.
      Not tainted 6.9.0-next-20240513-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2  state:D
 stack:20056 pid:5107  tgid:5107  ppid:1      flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5408 [inline]
 __schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
 __schedule_loop kernel/sched/core.c:6822 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6837
 schedule_timeout+0xb0/0x310 kernel/time/timer.c:2557
 do_wait_for_common kernel/sched/completion.c:95 [inline]
 __wait_for_common kernel/sched/completion.c:116 [inline]
 wait_for_common kernel/sched/completion.c:127 [inline]
 wait_for_completion+0x355/0x620 kernel/sched/completion.c:148
 __flush_work+0xaa9/0xd00 kernel/workqueue.c:4211
 flush_all_cpus_locked+0x155/0x180 mm/slub.c:3185
 __kmem_cache_shutdown+0x29/0x3b0 mm/slub.c:5374
 shutdown_cache mm/slab_common.c:456 [inline]
 kmem_cache_destroy+0x72/0x1b0 mm/slab_common.c:496
 bio_put_slab block/bio.c:155 [inline]
 bioset_exit+0x555/0x650 block/bio.c:1740
 bch2_fs_fs_io_direct_exit+0x19/0x30 fs/bcachefs/fs-io-direct.c:668
 __bch2_fs_free fs/bcachefs/super.c:544 [inline]
 bch2_fs_release+0x179/0x6e0 fs/bcachefs/super.c:603
 kobject_cleanup lib/kobject.c:689 [inline]
 kobject_release lib/kobject.c:720 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x22f/0x480 lib/kobject.c:737
 deactivate_locked_super+0xc4/0x130 fs/super.c:473
 cleanup_mnt+0x426/0x4c0 fs/namespace.c:1267
 task_work_run+0x24f/0x310 kernel/task_work.c:180
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x168/0x370 kernel/entry/common.c:218
 do_syscall_64+0x102/0x240 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb04647f097
RSP: 002b:00007fff7f4060b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb04647f097
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7f406170
RBP: 00007fff7f406170 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7f407230
R13: 00007fb0464c9336 R14: 0000000000012873 R15: 0000000000000003
 </TASK>
INFO: task udevd:5119 blocked for more than 143 seconds.
      Not tainted 6.9.0-next-20240513-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:24152 pid:5119  tgid:5119  ppid:4549   flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5408 [inline]
 __schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
 __schedule_loop kernel/sched/core.c:6822 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6837
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
 btrfs_control_ioctl+0x150/0x3e0 fs/btrfs/super.c:2225
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f17a211ad49
RSP: 002b:00007ffc07f3c808 EFLAGS: 00000246
 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f17a211ad49
RDX: 00007ffc07f3c818 RSI: 0000000090009427 RDI: 0000000000000009
RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc07f3d858 R14: 0000558d9db8b960 R15: 00007ffc07f3e578
 </TASK>
INFO: task udevd:5125 blocked for more than 143 seconds.
      Not tainted 6.9.0-next-20240513-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:24920 pid:5125  tgid:5125  ppid:4549   flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5408 [inline]
 __schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
 __schedule_loop kernel/sched/core.c:6822 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6837
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
 btrfs_control_ioctl+0x150/0x3e0 fs/btrfs/super.c:2225
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f17a211ad49
RSP: 002b:00007ffc07f3c808 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f17a211ad49
RDX: 00007ffc07f3c818 RSI: 0000000090009427 RDI: 0000000000000009
RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc07f3d858 R14: 0000558d9db8fd00 R15: 00007ffc07f3e578
 </TASK>
INFO: task udevd:5328 blocked for more than 144 seconds.
      Not tainted 6.9.0-next-20240513-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:24720 pid:5328  tgid:5328  ppid:4549   flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5408 [inline]
 __schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
 __schedule_loop kernel/sched/core.c:6822 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6837
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
 btrfs_control_ioctl+0x150/0x3e0 fs/btrfs/super.c:2225
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f17a211ad49
RSP: 002b:00007ffc07f3c808 EFLAGS: 00000246
 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f17a211ad49
RDX: 00007ffc07f3c818 RSI: 0000000090009427 RDI: 0000000000000009
RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc07f3d858 R14: 0000558d9db8b960 R15: 00007ffc07f3e578
 </TASK>
INFO: task syz-executor.3:5506 blocked for more than 145 seconds.
      Not tainted 6.9.0-next-20240513-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3  state:D
 stack:25360 pid:5506  tgid:5504  ppid:5105   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5408 [inline]
 __schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
 __schedule_loop kernel/sched/core.c:6822 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6837
 schedule_timeout+0xb0/0x310 kernel/time/timer.c:2557
 do_wait_for_common kernel/sched/completion.c:95 [inline]
 __wait_for_common kernel/sched/completion.c:116 [inline]
 wait_for_common kernel/sched/completion.c:127 [inline]
 wait_for_completion+0x355/0x620 kernel/sched/completion.c:148
 __flush_work+0xaa9/0xd00 kernel/workqueue.c:4211
 __lru_add_drain_all+0x504/0x570 mm/swap.c:902
 invalidate_bdev+0x76/0xa0 block/bdev.c:100
 btrfs_get_bdev_and_sb+0x11a/0x1c0 fs/btrfs/volumes.c:492
 btrfs_open_one_device fs/btrfs/volumes.c:657 [inline]
 open_fs_devices+0x2b4/0x1290 fs/btrfs/volumes.c:1196
 btrfs_get_tree_super fs/btrfs/super.c:1818 [inline]
 btrfs_get_tree+0x504/0x1920 fs/btrfs/super.c:2081
 vfs_get_tree+0x90/0x2a0 fs/super.c:1780
 fc_mount+0x1b/0xb0 fs/namespace.c:1125
 btrfs_get_tree_subvol fs/btrfs/super.c:2044 [inline]
 btrfs_get_tree+0x652/0x1920 fs/btrfs/super.c:2082
 vfs_get_tree+0x90/0x2a0 fs/super.c:1780
 do_new_mount+0x2be/0xb40 fs/namespace.c:3352
 do_mount fs/namespace.c:3692 [inline]
 __do_sys_mount fs/namespace.c:3898 [inline]
 __se_sys_mount+0x2d9/0x3c0 fs/namespace.c:3875
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd17f67f46a
RSP: 002b:00007fd17f1feef8 EFLAGS: 00000202
 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fd17f1fef80 RCX: 00007fd17f67f46a
RDX: 0000000020005100 RSI: 0000000020005140 RDI: 00007fd17f1fef40
RBP: 0000000020005100 R08: 00007fd17f1fef80 R09: 0000000000000012
R10: 0000000000000012 R11: 0000000000000202 R12: 0000000020005140
R13: 00007fd17f1fef40 R14: 000000000000510c R15: 0000000020000140
 </TASK>
INFO: task syz-executor.4:5508 blocked for more than 147 seconds.
      Not tainted 6.9.0-next-20240513-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.4  state:D stack:25360 pid:5508  tgid:5507  ppid:5117   flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5408 [inline]
 __schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
 __schedule_loop kernel/sched/core.c:6822 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6837
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
 btrfs_get_tree_super fs/btrfs/super.c:1802 [inline]
 btrfs_get_tree+0x2dc/0x1920 fs/btrfs/super.c:2081
 vfs_get_tree+0x90/0x2a0 fs/super.c:1780
 fc_mount+0x1b/0xb0 fs/namespace.c:1125
 btrfs_get_tree_subvol fs/btrfs/super.c:2044 [inline]
 btrfs_get_tree+0x652/0x1920 fs/btrfs/super.c:2082
 vfs_get_tree+0x90/0x2a0 fs/super.c:1780
 do_new_mount+0x2be/0xb40 fs/namespace.c:3352
 do_mount fs/namespace.c:3692 [inline]
 __do_sys_mount fs/namespace.c:3898 [inline]
 __se_sys_mount+0x2d9/0x3c0 fs/namespace.c:3875
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa97fa7f46a
RSP: 002b:00007fa980784ef8 EFLAGS: 00000202
 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fa980784f80 RCX: 00007fa97fa7f46a
RDX: 0000000020005100 RSI: 0000000020000000 RDI: 00007fa980784f40
RBP: 0000000020005100 R08: 00007fa980784f80 R09: 0000000000000810
R10: 0000000000000810 R11: 0000000000000202 R12: 0000000020000000
R13: 00007fa980784f40 R14: 00000000000050f3 R15: 0000000020000480
 </TASK>
INFO: task syz-executor.0:5510 blocked for more than 148 seconds.
      Not tainted 6.9.0-next-20240513-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0  state:D
 stack:25360 pid:5510  tgid:5509  ppid:5106   flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5408 [inline]
 __schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
 __schedule_loop kernel/sched/core.c:6822 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6837
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
 btrfs_get_tree_super fs/btrfs/super.c:1802 [inline]
 btrfs_get_tree+0x2dc/0x1920 fs/btrfs/super.c:2081
 vfs_get_tree+0x90/0x2a0 fs/super.c:1780
 fc_mount+0x1b/0xb0 fs/namespace.c:1125
 btrfs_get_tree_subvol fs/btrfs/super.c:2044 [inline]
 btrfs_get_tree+0x652/0x1920 fs/btrfs/super.c:2082
 vfs_get_tree+0x90/0x2a0 fs/super.c:1780
 do_new_mount+0x2be/0xb40 fs/namespace.c:3352
 do_mount fs/namespace.c:3692 [inline]
 __do_sys_mount fs/namespace.c:3898 [inline]
 __se_sys_mount+0x2d9/0x3c0 fs/namespace.c:3875
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f237967f46a
RSP: 002b:00007f237a3f9ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f237a3f9f80 RCX: 00007f237967f46a
RDX: 0000000020005100 RSI: 0000000020000000 RDI: 00007f237a3f9f40
RBP: 0000000020005100 R08: 00007f237a3f9f80 R09: 0000000000000810
R10: 0000000000000810 R11: 0000000000000202 R12: 0000000020000000
R13: 00007f237a3f9f40 R14: 00000000000050f3 R15: 0000000020000480
 </TASK>
INFO: task syz-executor.1:5514 blocked for more than 150 seconds.
      Not tainted 6.9.0-next-20240513-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1  state:D stack:27216 pid:5514  tgid:5513  ppid:5108   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5408 [inline]
 __schedule+0x17e8/0x4a50 kernel/sched/core.c:6745
 __schedule_loop kernel/sched/core.c:6822 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6837
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
 kmem_cache_create_usercopy+0x50/0x320 mm/slab_common.c:297
 kmem_cache_create+0x13/0x20 mm/slab_common.c:390
 create_pid_cachep kernel/pid_namespace.c:56 [inline]
 create_pid_namespace kernel/pid_namespace.c:99 [inline]
 copy_pid_ns+0x445/0x9d0 kernel/pid_namespace.c:153
 create_new_namespaces+0x2c7/0x7b0 kernel/nsproxy.c:97
 unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228
 ksys_unshare+0x619/0xc10 kernel/fork.c:3323
 __do_sys_unshare kernel/fork.c:3394 [inline]
 __se_sys_unshare kernel/fork.c:3392 [inline]
 __x64_sys_unshare+0x38/0x40 kernel/fork.c:3392
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3eaea7dd69
RSP: 002b:00007f3eaf78a0c8 EFLAGS: 00000246
 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007f3eaebabf80 RCX: 00007f3eaea7dd69
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068060200
RBP: 00007f3eaeaca49e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f3eaebabf80 R15: 00007ffe7de89688
 </TASK>

Showing all locks held in the system:
10 locks held by ksoftirqd/1/24:
6 locks held by kworker/1:0/25:
1 lock held by khungtaskd/30:
 #0: 
ffffffff8e333e60
 (rcu_read_lock
){....}-{1:2}
, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:781 [inline]
, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6614
5 locks held by kworker/u8:2/35:
 #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
 #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
 #1: 
ffffc90000ab7d00
 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
 #2: ffffffff8f5da250 (pernet_ops_rwsem){++++}-{3:3}
, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:594
 #3: 
ffffffff8f5e6a88
 (
rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 net/core/dev.c:11754
 #4: 
ffffffff8e1ce470
 (
cpu_hotplug_lock
){++++}-{0:0}
, at: flush_all_backlogs net/core/dev.c:5984 [inline]
, at: unregister_netdevice_many_notify+0x607/0x16e0 net/core/dev.c:11209