INFO: task dhcpcd:5341 blocked for more than 150 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:dhcpcd          state:D stack:21384 pid:5341  tgid:5341  ppid:5340   task_flags:0x400140 flags:0x00080000
Call Trace:
 <TASK>
 __schedule+0x17db/0x58f0
 schedule+0x164/0x2b0
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x7c1/0x1550
 inet_rtm_newaddr+0x470/0x19f0
 rtnetlink_rcv_msg+0x802/0xc00
 netlink_rcv_skb+0x226/0x4a0
 netlink_unicast+0x7bd/0x940
 netlink_sendmsg+0x813/0xb40
 sock_sendmsg_nosec+0x13a/0x180
 ____sys_sendmsg+0x54e/0x850
 ___sys_sendmsg+0x2a5/0x360
 __x64_sys_sendmsg+0x1b1/0x290
 do_syscall_64+0x166/0x520
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fed4ce18a4b
RSP: 002b:00007fffa8109e68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fed4cd406c0 RCX: 00007fed4ce18a4b
RDX: 0000000000000000 RSI: 00007fffa811e018 RDI: 000000000000001a
RBP: 000000000000001a R08: 0000000000000000 R09: 00007fffa811e018
R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff
R13: 00007fffa811e018 R14: 0000000000000044 R15: 0000000000000001
 </TASK>

Showing all locks held in the system:
locks held by kworker/0:0/9: 2, last CPU#0:
 #0: ffff888117973d40 ((wq_completion)wg-crypt-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc900000e7c40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
locks held by kworker/u8:1/13: 3, on CPU#1:
 #0: ffff88816fca4940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90000127c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffffffff902527c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
locks held by kworker/1:0/25: 2, last CPU#1:
 #0: ffff8881190f6540 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
locks held by kworker/u9:0/27: 2, last CPU#1:
 #0: ffff8881000ab940 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90000a27c40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
locks held by kworker/u10:0/28: 3, last CPU#1:
 #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90000a37c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff888168f407a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
locks held by kworker/1:1/33: 2, last CPU#1:
 #0: ffff888100069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90000a97c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
locks held by khungtaskd/35: 1, last CPU#1:
 #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
locks held by kworker/u10:1/37: 2, last CPU#1:
 #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90000ad7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
locks held by kworker/0:2/53: 4, last CPU#0:
 #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90000bf7c40 ((work_completion)(&(&chan->chan_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff8881047cdaf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_chan_timeout+0xb1/0x470
 #3: ffff8880250b2510 (&chan->lock/1){+.+.}-{4:4}, at: l2cap_chan_timeout+0xf8/0x470
locks held by kworker/u10:4/587: 3, last CPU#1:
 #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc900047ffc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff8881bdd107a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
locks held by kworker/1:2/808: 3, last CPU#1:
 #0: ffff888100069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90005497c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890
locks held by kworker/u9:5/1011: 3, last CPU#1:
 #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90005fefc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff888171d107a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
locks held by kworker/0:3/2247: 5, last CPU#0:
 #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc900093afc40 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffffc900093af770 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_atomic_helper_dirtyfb+0x106/0xfd0
 #3: ffffc900093af798 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_atomic_helper_dirtyfb+0x106/0xfd0
 #4: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
locks held by krfcommd/3270: 2, on CPU#1:
 #0: ffffffff903fd620 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_process_sessions+0x2c6/0x9690
 #1: ffff8880250b2510 (&chan->lock/1){+.+.}-{4:4}, at: l2cap_sock_shutdown+0xa33/0x1250
locks held by kworker/u10:5/3400: 3, last CPU#1:
 #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc9002093fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff8881bed007a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
locks held by kworker/u11:1/4994: 4, on CPU#0:
 #0: ffff888170e04140 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc900234cfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff888020e98ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430
 #3: ffff888020e980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
locks held by syslogd/5027: 3, last CPU#1:
 #0: ffffffff8f4f0f78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560
 #1: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
 #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
locks held by udevd/5045: 2, last CPU#1:
 #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
 #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
locks held by dhcpcd/5341: 1, on CPU#1:
 #0: ffffffff902527c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
locks held by getty/5423: 2, on CPU#1:
 #0: ffff8881737550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
locks held by sshd/5580: 1, last CPU#1:
 #0: ffff888118dadd60 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_recvmsg+0x1df/0x7f0
locks held by syz-executor/5582: 1, last CPU#1:
 #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
locks held by syz-executor/5603: 1, last CPU#1:
 #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
locks held by kworker/u8:2/5630: 2, last CPU#1:
 #0: ffff88817040a940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc900058d7c40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
locks held by kworker/0:5/5660: 2, last CPU#0:
 #0: ffff8881190f6140 ((wq_completion)wg-crypt-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90005a97c40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
locks held by kworker/1:4/5667: 3, last CPU#1:
 #0: ffff8881190e5d40 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90005b37c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff8881bd5fb4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
locks held by kworker/1:6/5705: 3, on CPU#1:
 #0: ffff888100069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90005cf7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffffffff902527c0 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110
locks held by kworker/u9:13/6758: 3, last CPU#1:
 #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90005f17c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff888118c007a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
locks held by kworker/u9:14/6760: 6, last CPU#0:
 #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90005f07c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff8881beab07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
 #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0
 #4: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: atomic_notifier_call_chain+0x26/0x180
 #5: ffff888121028298 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_rearm_deferred+0x99/0x4b0
locks held by syz.1.878/8874: 2, on CPU#0:
 #0: ffffffff902527c0 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0xa6/0x130
 #1: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
locks held by kworker/u10:7/8887: 2, last CPU#1:
 #0: ffff888170409940 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc900032efc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
locks held by kworker/u10:8/8888: 3, last CPU#1:
 #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc900093f7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff888113c3d258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
locks held by syz-executor/8890: 2, last CPU#1:
 #0: ffff8881736c7678 (&mm->mmap_lock){++++}-{4:4}, at: map_vdso+0x69/0x6a0
 #1: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
locks held by kworker/u10:10/8891: 4, last CPU#1:
 #0: ffff888106f83940 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc900093d7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff8881152bd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
 #3: ffff8881bd5f9700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150
 nmi_cpu_backtrace+0x274/0x2d0
 nmi_trigger_cpumask_backtrace+0x17d/0x390
 sys_info+0x135/0x170
 watchdog+0xfd7/0x1030
 kthread+0x38b/0x480
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 6760 Comm: kworker/u9:14 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:__lock_acquire+0x914/0x2de0
Code: 29 d3 89 d0 c1 c0 06 31 d8 01 ca 29 c1 89 c6 c1 c6 08 31 ce 01 d0 29 f2 89 f3 c1 c3 10 31 d3 01 c6 29 d8 89 dd c1 c5 13 31 c5 <01> f3 29 ee 01 eb c1 c5 04 31 f5 48 c1 e5 20 83 3d aa 30 d7 0e 00
RSP: 0018:ffffc90000006ab8 EFLAGS: 00000086
RAX: 00000000a42637f2 RBX: 000000004b336740 RCX: 00000000d7bb2776
RDX: 00000000071bee9f RSI: 000000007938eb5a RDI: ffff88810d6dda00
RBP: 000000009e246e69 R08: ffffffff8177f1df R09: 0000000000000000
R10: ffffc90000006d98 R11: ffffffff81b285f0 R12: 0000000000004000
R13: 0000000000000000 R14: ffff88810d6de678 R15: 0000000000000005
FS:  0000000000000000(0000) GS:ffff88818d6d1000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2e247ed158 CR3: 0000000118cf6000 CR4: 00000000000006f0
Call Trace:
 <IRQ>
 lock_acquire+0x115/0x350
 unwind_next_frame+0xac/0x2550
 arch_stack_walk+0x11b/0x150
 stack_trace_save+0xa9/0x100
 kasan_save_track+0x3e/0x80
 __kasan_slab_alloc+0x6c/0x80
 kmem_cache_alloc_noprof+0x2b9/0x600
 skb_ext_add+0x1b6/0x8e0
 br_nf_forward_ip+0xc3/0xa30
 nf_hook_slow+0xc5/0x220
 NF_HOOK+0x23e/0x3f0
 __br_forward+0x397/0x540
 br_handle_frame_finish+0x1119/0x1950
 br_nf_hook_thresh+0x3dd/0x4c0
 br_nf_pre_routing_finish_ipv6+0x90c/0xc40
 br_nf_pre_routing_ipv6+0x382/0x6f0
 br_handle_frame+0x1329/0x1600
 __netif_receive_skb_core+0x989/0x30c0
 process_backlog+0x727/0x18b0
 __napi_poll+0xaa/0x330
 net_rx_action+0x61d/0xf50
 handle_softirqs+0x226/0x860
 __irq_exit_rcu+0xcb/0x220
 irq_exit_rcu+0x9/0x30
 sysvec_apic_timer_interrupt+0xa6/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:ieee80211_iface_work+0x271/0x1010
Code: 89 df 48 89 ee e8 4f 2b 1f 00 48 89 ef e8 c7 9f 54 fe e8 a2 d7 72 f6 48 8b 7c 24 40 e8 38 44 56 fe 48 85 c0 0f 84 98 0a 00 00 <48> 89 c5 e8 17 c3 72 f6 e9 43 ff ff ff 4c 8d b5 d8 00 00 00 4c 89
RSP: 0018:ffffc90005f07a10 EFLAGS: 00000282
RAX: ffff888012905380 RBX: ffff8881bdab8ec0 RCX: ffffffff9a9e3501
RDX: 0000000000000001 RSI: ffffffff8e476b04 RDI: 00000000ffffffff
RBP: ffff888025855200 R08: ffffffff907a357f R09: 1ffffffff20f46af
R10: dffffc0000000000 R11: fffffbfff20f46b0 R12: dffffc0000000000
R13: ffff8881bdab9b78 R14: 0000000000000001 R15: 0000000000000080
 cfg80211_wiphy_work+0x29e/0x420
 process_scheduled_works+0xc3d/0x1630
 worker_thread+0xa47/0xfb0
 kthread+0x38b/0x480
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
