INFO: task udevd:3560 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:25056 pid: 3560 ppid:     1 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11bb/0x4390 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6537
 __mutex_lock_common+0xc71/0x2390 kernel/locking/mutex.c:669
 __mutex_lock kernel/locking/mutex.c:729 [inline]
 mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743
 device_lock include/linux/device.h:764 [inline]
 uevent_show+0x17a/0x330 drivers/base/core.c:2408
 dev_attr_show+0x50/0xb0 drivers/base/core.c:2110
 sysfs_kf_seq_show+0x316/0x4c0 fs/sysfs/file.c:61
 seq_read_iter+0x49b/0xd50 fs/seq_file.c:230
 call_read_iter include/linux/fs.h:2167 [inline]
 new_sync_read fs/read_write.c:404 [inline]
 vfs_read+0x725/0xcf0 fs/read_write.c:485
 ksys_read+0x14d/0x250 fs/read_write.c:623
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fb5dd800407
RSP: 002b:00007fff84c54b30 EFLAGS: 00000202
 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007fb5dd712880 RCX: 00007fb5dd800407
RDX: 0000000000001000 RSI: 00005561815e0240 RDI: 000000000000000c
RBP: 00007fb5dd948ff0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
R13: 00007fb5dd948ea0 R14: 0000000000000000 R15: 00005561815d17a0
 </TASK>
INFO: task dhcpcd:3853 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:dhcpcd          state:D
 stack:22176 pid: 3853 ppid:  3852 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11bb/0x4390 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6537
 __mutex_lock_common+0xc71/0x2390 kernel/locking/mutex.c:669
 __mutex_lock kernel/locking/mutex.c:729 [inline]
 mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743
 rtnl_lock net/core/rtnetlink.c:72 [inline]
 rtnetlink_rcv_msg+0x7a5/0xe90 net/core/rtnetlink.c:5681
 netlink_rcv_skb+0x1e0/0x430 net/netlink/af_netlink.c:2507
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x774/0x920 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x8ab/0xbc0 net/netlink/af_netlink.c:1918
 sock_sendmsg_nosec net/socket.c:706 [inline]
 __sock_sendmsg net/socket.c:718 [inline]
 ____sys_sendmsg+0x5a2/0x8c0 net/socket.c:2446
 ___sys_sendmsg+0x1f0/0x260 net/socket.c:2500
 __sys_sendmsg net/socket.c:2529 [inline]
 __do_sys_sendmsg net/socket.c:2538 [inline]
 __se_sys_sendmsg+0x190/0x250 net/socket.c:2536
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f69b3736407
RSP: 002b:00007fff6a66e420 EFLAGS: 00000202
 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f69b36ac740 RCX: 00007f69b3736407
RDX: 0000000000000000 RSI: 00007fff6a682600 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff6a692830
R13: 00007f69b36ac6c8 R14: 0000000000000044 R15: 00007fff6a682600
 </TASK>
INFO: task kworker/0:3:4173 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:3     state:D
 stack:23936 pid: 4173 ppid:     2 flags:0x00004000
Workqueue: events_power_efficient crda_timeout_work

Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11bb/0x4390 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6537
 __mutex_lock_common+0xc71/0x2390 kernel/locking/mutex.c:669
 __mutex_lock kernel/locking/mutex.c:729 [inline]
 mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743
 crda_timeout_work+0x11/0x50 net/wireless/reg.c:538
 process_one_work+0x863/0x1000 kernel/workqueue.c:2310
 worker_thread+0xaa8/0x12a0 kernel/workqueue.c:2457
 kthread+0x436/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
INFO: task syz-executor:4184 blocked for more than 145 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D
 stack:21120 pid: 4184 ppid:     1 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11bb/0x4390 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 exp_funnel_lock kernel/rcu/tree_exp.h:313 [inline]
 synchronize_rcu_expedited+0x5fa/0x6b0 kernel/rcu/tree_exp.h:845
 namespace_unlock+0x1e3/0x3c0 fs/namespace.c:1459
 do_umount fs/namespace.c:1683 [inline]
 path_umount+0xf4a/0xfc0 fs/namespace.c:1766
 ksys_umount fs/namespace.c:1789 [inline]
 __do_sys_umount fs/namespace.c:1794 [inline]
 __se_sys_umount fs/namespace.c:1792 [inline]
 __x64_sys_umount+0x125/0x160 fs/namespace.c:1792
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f28295c6a77
RSP: 002b:00007ffc4fe7f158 EFLAGS: 00000246
 ORIG_RAX: 00000000000000a6
RAX: ffffffffffffffda RBX: 00007f2829649d7d RCX: 00007f28295c6a77
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4fe7f210
RBP: 00007ffc4fe7f210 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4fe802a0
R13: 00007f2829649d7d R14: 0000000000018d1a R15: 00007ffc4fe802e0
 </TASK>
INFO: task syz-executor:4193 blocked for more than 145 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D
 stack:21568 pid: 4193 ppid:     1 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11bb/0x4390 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 exp_funnel_lock kernel/rcu/tree_exp.h:313 [inline]
 synchronize_rcu_expedited+0x5fa/0x6b0 kernel/rcu/tree_exp.h:845
 namespace_unlock+0x1e3/0x3c0 fs/namespace.c:1459
 do_umount fs/namespace.c:1683 [inline]
 path_umount+0xf4a/0xfc0 fs/namespace.c:1766
 ksys_umount fs/namespace.c:1789 [inline]
 __do_sys_umount fs/namespace.c:1794 [inline]
 __se_sys_umount fs/namespace.c:1792 [inline]
 __x64_sys_umount+0x125/0x160 fs/namespace.c:1792
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f87796b5a77
RSP: 002b:00007fff47d20fa8 EFLAGS: 00000246
 ORIG_RAX: 00000000000000a6
RAX: ffffffffffffffda RBX: 00007f8779738d7d RCX: 00007f87796b5a77
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff47d21060
RBP: 00007fff47d21060 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff47d220f0
R13: 00007f8779738d7d R14: 0000000000019033 R15: 00007fff47d22130
 </TASK>
INFO: task syz.2.152:5260 blocked for more than 146 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.152       state:D
 stack:27528 pid: 5260 ppid:  4185 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11bb/0x4390 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 schedule_timeout+0x97/0x280 kernel/time/timer.c:1890
 do_wait_for_common+0x29a/0x440 kernel/sched/completion.c:85
 __wait_for_common kernel/sched/completion.c:106 [inline]
 wait_for_common kernel/sched/completion.c:117 [inline]
 wait_for_completion+0x48/0x60 kernel/sched/completion.c:138
 __flush_work+0x120/0x1b0 kernel/workqueue.c:3094
 __cancel_work_timer+0x3ac/0x520 kernel/workqueue.c:3181
 hidp_session_remove+0x5e/0x260 net/bluetooth/hidp/core.c:1170
 l2cap_unregister_user+0x183/0x1a0 net/bluetooth/l2cap_core.c:1876
 hidp_connection_del+0xac/0x160 net/bluetooth/hidp/core.c:1410
 do_hidp_sock_ioctl net/bluetooth/hidp/sock.c:96 [inline]
 hidp_sock_ioctl+0x314/0x560 net/bluetooth/hidp/sock.c:127
 sock_do_ioctl+0xd3/0x2f0 net/socket.c:1150
 sock_ioctl+0x4ed/0x6e0 net/socket.c:1267
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:874 [inline]
 __se_sys_ioctl+0xfa/0x170 fs/ioctl.c:860
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f9d3a50f749
RSP: 002b:00007f9d38734038 EFLAGS: 00000246
 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f9d3a766180 RCX: 00007f9d3a50f749
RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000004
RBP: 00007f9d3a593f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f9d3a766218 R14: 00007f9d3a766180 R15: 00007ffd05d83b18
 </TASK>
INFO: task khidpd_16c05505:5261 blocked for more than 147 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:khidpd_16c05505 state:D
 stack:29320 pid: 5261 ppid:     2 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11bb/0x4390 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6537
 __mutex_lock_common+0xc71/0x2390 kernel/locking/mutex.c:669
 __mutex_lock kernel/locking/mutex.c:729 [inline]
 mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743
 l2cap_unregister_user+0x66/0x1a0 net/bluetooth/l2cap_core.c:1870
 hidp_session_thread+0x3c4/0x400 net/bluetooth/hidp/core.c:1305
 kthread+0x436/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
INFO: task dhcpcd:5263 blocked for more than 147 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:dhcpcd          state:D
 stack:28384 pid: 5263 ppid:  3853 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11bb/0x4390 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 synchronize_rcu_expedited+0x563/0x6b0 kernel/rcu/tree_exp.h:861
 synchronize_rcu+0x107/0x190 kernel/rcu/tree.c:3802
 __unregister_prot_hook+0x3f7/0x570 net/packet/af_packet.c:347
 packet_do_bind+0x5ef/0xce0 net/packet/af_packet.c:3252
 __sys_bind+0x2f4/0x3f0 net/socket.c:1730
 __do_sys_bind net/socket.c:1741 [inline]
 __se_sys_bind net/socket.c:1739 [inline]
 __x64_sys_bind+0x76/0x80 net/socket.c:1739
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f69b37b12d7
RSP: 002b:00007fff6a672308 EFLAGS: 00000213
 ORIG_RAX: 0000000000000031
RAX: ffffffffffffffda RBX: 000055edcab67d90 RCX: 00007f69b37b12d7
RDX: 0000000000000014 RSI: 00007fff6a672320 RDI: 0000000000000003
RBP: 000055edbbb574b0 R08: 00007f69b3880ac0 R09: 0000000000000000
R10: 0000000000000003 R11: 0000000000000213 R12: 0000000000000000
R13: 000055edcab65e80 R14: 0000000000000000 R15: 000055edbbb6cac0
 </TASK>
INFO: task syz.5.153:5265 blocked for more than 148 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.153       state:D
 stack:28352 pid: 5265 ppid:  4817 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11bb/0x4390 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6537
 __mutex_lock_common+0xc71/0x2390 kernel/locking/mutex.c:669
 __mutex_lock kernel/locking/mutex.c:729 [inline]
 mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743
 exp_funnel_lock kernel/rcu/tree_exp.h:322 [inline]
 synchronize_rcu_expedited+0x320/0x6b0 kernel/rcu/tree_exp.h:845
 synchronize_rcu+0x107/0x190 kernel/rcu/tree.c:3802
 __unregister_prot_hook+0x3f7/0x570 net/packet/af_packet.c:347
 packet_do_bind+0x5ef/0xce0 net/packet/af_packet.c:3252
 __sys_bind+0x2f4/0x3f0 net/socket.c:1730
 __do_sys_bind net/socket.c:1741 [inline]
 __se_sys_bind net/socket.c:1739 [inline]
 __x64_sys_bind+0x76/0x80 net/socket.c:1739
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f86feb23749
RSP: 002b:00007f86fcd8a038 EFLAGS: 00000246
 ORIG_RAX: 0000000000000031
RAX: ffffffffffffffda RBX: 00007f86fed79fa0 RCX: 00007f86feb23749
RDX: 0000000000000023 RSI: 0000200000000080 RDI: 0000000000000003
RBP: 00007f86feba7f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f86fed7a038 R14: 00007f86fed79fa0 R15: 00007ffe179fc078
 </TASK>
INFO: task syz.5.153:5268 blocked for more than 149 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.153       state:D stack:27392 pid: 5268 ppid:  4817 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11bb/0x4390 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 schedule_timeout+0x97/0x280 kernel/time/timer.c:1890
 do_wait_for_common+0x29a/0x440 kernel/sched/completion.c:85
 __wait_for_common kernel/sched/completion.c:106 [inline]
 wait_for_common kernel/sched/completion.c:117 [inline]
 wait_for_completion+0x48/0x60 kernel/sched/completion.c:138
 __synchronize_srcu+0x285/0x310 kernel/rcu/srcutree.c:930
 install_new_memslots+0x2b5/0x430 virt/kvm/kvm_main.c:1534
 kvm_set_memslot+0x1285/0x19c0 virt/kvm/kvm_main.c:1688
 __kvm_set_memory_region+0xaf6/0xd40 virt/kvm/kvm_main.c:1843
 kvm_set_memory_region virt/kvm/kvm_main.c:1864 [inline]
 kvm_vm_ioctl_set_memory_region+0x6f/0xa0 virt/kvm/kvm_main.c:1876
 kvm_vm_ioctl+0x8c4/0xa80 virt/kvm/kvm_main.c:4493
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:874 [inline]
 __se_sys_ioctl+0xfa/0x170 fs/ioctl.c:860
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f86feb23749
RSP: 002b:00007f86fcd69038 EFLAGS: 00000246
 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f86fed7a090 RCX: 00007f86feb23749
RDX: 0000200000000840 RSI: 000000004020ae46 RDI: 0000000000000005
RBP: 00007f86feba7f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f86fed7a128 R14: 00007f86fed7a090 R15: 00007ffe179fc078
 </TASK>

Showing all locks held in the system:
4 locks held by kworker/u4:0/9:
 #0: 
ffff888077f37138
 (
(wq_completion)phy9
){+.+.}-{0:0}
, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
 #1: 
ffffc90000ce7d00
 (
(work_completion)(&sdata->work)
){+.+.}-{0:0}
, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
 #2: 
ffff888060734d40
 (
&wdev->mtx
){+.+.}-{3:3}
, at: sdata_lock net/mac80211/ieee80211_i.h:1036 [inline]
, at: ieee80211_ibss_work+0xa0/0x10b0 net/mac80211/ibss.c:1685
 #3: 
ffff888077f117b0
 (
&local->sta_mtx
){+.+.}-{3:3}
, at: ieee80211_ibss_sta_expire net/mac80211/ibss.c:1259 [inline]
, at: ieee80211_sta_merge_ibss net/mac80211/ibss.c:1302 [inline]
, at: ieee80211_ibss_work+0x569/0x10b0 net/mac80211/ibss.c:1713
1 lock held by khungtaskd/27:
 #0: 
ffffffff8c11c760
 (
rcu_read_lock
){....}-{1:2}
, at: rcu_lock_acquire+0x0/0x30
4 locks held by udevd/3560:
 #0: 
ffff88805b2178b8
 (
&p->lock
){+.+.}-{3:3}
, at: seq_read_iter+0xad/0xd50 fs/seq_file.c:182
 #1: 
ffff888061adfc88
 (
&of->mutex
){+.+.}-{3:3}
, at: kernfs_seq_start+0x51/0x3c0 fs/kernfs/file.c:112
 #2: 
ffff88806347b1d8 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3c0 fs/kernfs/file.c:113
 #3: ffff888061eb9ab0 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:764 [inline]
 #3: ffff888061eb9ab0 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17a/0x330 drivers/base/core.c:2408
1 lock held by dhcpcd/3853:
 #0: 
ffffffff8d238988
 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7a5/0xe90 net/core/rtnetlink.c:5681
2 locks held by getty/3945:
 #0: ffff88807e852098
 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252
 #1: 
ffffc900026562e8
 (
&ldata->atomic_read_lock
){+.+.}-{3:3}
, at: n_tty_read+0x5ba/0x1a30 drivers/tty/n_tty.c:2158
3 locks held by kworker/0:3/4173:
 #0: ffff888016871938
 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
 #1: 
ffffc90002e0fd00
 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
 #2: ffffffff8d238988
 (
rtnl_mutex
){+.+.}-{3:3}
, at: crda_timeout_work+0x11/0x50 net/wireless/reg.c:538
2 locks held by kworker/0:14/4391:
 #0: 
ffff888016870938
 (
(wq_completion)events
){+.+.}-{0:0}
, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
 #1: 
ffffc9000306fd00
 (
xfrm_state_gc_work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
2 locks held by kworker/0:15/4392:
 #0: 
ffff888016870938
 (
(wq_completion)events
){+.+.}-{0:0}
, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
 #1: 
ffffc900031ffd00
 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
3 locks held by kworker/0:17/4396:
 #0: 
ffff888016871938
 ((wq_completion)events_power_efficient){+.+.}-{0:0}
, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
 #1: 
ffffc9000324fd00
 (
(reg_check_chans).work
){+.+.}-{0:0}
, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
 #2: 
ffffffff8d238988
 (rtnl_mutex
){+.+.}-{3:3}
, at: reg_check_chans_work+0x81/0xa50 net/wireless/reg.c:2437
3 locks held by kworker/1:9/4545:
2 locks held by syz.2.152/5260:
 #0: 
ffff88807aed8078 (&hdev->lock){+.+.}-{3:3}, at: l2cap_unregister_user+0x66/0x1a0 net/bluetooth/l2cap_core.c:1870
 #1: ffffffff8d3a6830 (hidp_session_sem){++++}-{3:3}, at: hidp_session_remove+0x28/0x260 net/bluetooth/hidp/core.c:1166
1 lock held by khidpd_16c05505/5261:
 #0: ffff88807aed8078 (&hdev->lock){+.+.}-{3:3}, at: l2cap_unregister_user+0x66/0x1a0 net/bluetooth/l2cap_core.c:1870
2 locks held by dhcpcd/5263:
 #0: ffff8880245fc120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1731 [inline]
 #0: ffff8880245fc120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xce0 net/packet/af_packet.c:3212
 #1: ffffffff8c1211e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:290 [inline]
 #1: ffffffff8c1211e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x347/0x6b0 kernel/rcu/tree_exp.h:845
2 locks held by syz.5.153/5265:
 #0: ffff8880786c0120 (sk_lock-AF_PACKET){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1731 [inline]
, at: packet_do_bind+0x35/0xce0 net/packet/af_packet.c:3212
 #1: ffffffff8c1211e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:322 [inline]
 #1: ffffffff8c1211e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x320/0x6b0 kernel/rcu/tree_exp.h:845
1 lock held by syz.5.153/5268:
 #0: 
ffffc900026610a8
 (
&kvm->slots_lock){+.+.}-{3:3}, at: kvm_set_memory_region virt/kvm/kvm_main.c:1863 [inline]
&kvm->slots_lock){+.+.}-{3:3}, at: kvm_vm_ioctl_set_memory_region+0x64/0xa0 virt/kvm/kvm_main.c:1876
1 lock held by syz.5.153/5274:
 #0: 
ffffc900026610a8
 (
&kvm->slots_lock
){+.+.}-{3:3}, at: kvm_set_memory_region virt/kvm/kvm_main.c:1863 [inline]
){+.+.}-{3:3}, at: kvm_vm_ioctl_set_memory_region+0x64/0xa0 virt/kvm/kvm_main.c:1876
1 lock held by dhcpcd/5267:
 #0: 
ffff888147eb0120
 (
sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1731 [inline]
sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xce0 net/packet/af_packet.c:3212
1 lock held by dhcpcd/5276:
 #0: 
ffff8880245e4120
 (
sk_lock-AF_PACKET
){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1731 [inline]
, at: packet_do_bind+0x35/0xce0 net/packet/af_packet.c:3212
1 lock held by dhcpcd/5279:
 #0: 
ffff888075502120
 (
sk_lock-AF_PACKET
){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1731 [inline]
, at: packet_do_bind+0x35/0xce0 net/packet/af_packet.c:3212
1 lock held by syz.3.161/5289:
 #0: 
ffffffff8d238988 (rtnl_mutex){+.+.}-{3:3}, at: tun_detach drivers/net/tun.c:699 [inline]
ffffffff8d238988 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 drivers/net/tun.c:3440
1 lock held by dhcpcd/5294:
 #0: 
ffff88807547a120
 (
sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1731 [inline]
sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xce0 net/packet/af_packet.c:3212
1 lock held by dhcpcd/5295:
 #0: ffff888058d34120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1731 [inline]
 #0: ffff888058d34120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xce0 net/packet/af_packet.c:3212
1 lock held by syz-executor/5298:
 #0: ffffffff8d238988 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
 #0: ffffffff8d238988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7a5/0xe90 net/core/rtnetlink.c:5681
1 lock held by syz-executor/5300:
 #0: 
ffffffff8d238988
 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7a5/0xe90 net/core/rtnetlink.c:5681
1 lock held by syz-executor/5303:
 #0: 
ffffffff8d238988
 (
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
, at: rtnetlink_rcv_msg+0x7a5/0xe90 net/core/rtnetlink.c:5681
1 lock held by syz-executor/5307:
 #0: 
ffffffff8d238988
 (
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
, at: rtnetlink_rcv_msg+0x7a5/0xe90 net/core/rtnetlink.c:5681
1 lock held by syz-executor/5309:
 #0: 
ffffffff8d238988
 (
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
, at: rtnetlink_rcv_msg+0x7a5/0xe90 net/core/rtnetlink.c:5681
1 lock held by syz-executor/5313:
 #0: ffffffff8d238988
 (
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
, at: rtnetlink_rcv_msg+0x7a5/0xe90 net/core/rtnetlink.c:5681
1 lock held by syz-executor/5315:
 #0: 
ffffffff8d238988
 (
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
, at: rtnetlink_rcv_msg+0x7a5/0xe90 net/core/rtnetlink.c:5681
1 lock held by syz-executor/5318:
 #0: 
ffffffff8d238988
 (
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
, at: rtnetlink_rcv_msg+0x7a5/0xe90 net/core/rtnetlink.c:5681
1 lock held by syz-executor/5322:
 #0: 
ffffffff8d238988
 (
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
, at: rtnetlink_rcv_msg+0x7a5/0xe90 net/core/rtnetlink.c:5681
1 lock held by syz-executor/5324:
 #0: 
ffffffff8d238988
 (
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
, at: rtnetlink_rcv_msg+0x7a5/0xe90 net/core/rtnetlink.c:5681
1 lock held by syz-executor/5328:
 #0: 
ffffffff8d238988
 (
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
, at: rtnetlink_rcv_msg+0x7a5/0xe90 net/core/rtnetlink.c:5681
1 lock held by syz-executor/5330:
 #0: 
ffffffff8d238988
 (
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
, at: rtnetlink_rcv_msg+0x7a5/0xe90 net/core/rtnetlink.c:5681
1 lock held by syz-executor/5333:
 #0: 
ffffffff8d238988
 (
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
, at: rtnetlink_rcv_msg+0x7a5/0xe90 net/core/rtnetlink.c:5681
1 lock held by syz-executor/5337:
 #0: 
ffffffff8d238988
 (
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
, at: rtnetlink_rcv_msg+0x7a5/0xe90 net/core/rtnetlink.c:5681
1 lock held by syz-executor/5339: