INFO: task dhcpcd:5355 blocked for more than 152 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:dhcpcd          state:D stack:21416 pid:5355  tgid:5355  ppid:5354   task_flags:0x400140 flags:0x00080000
Call Trace:
 <TASK>
 __schedule+0x17dd/0x5830
 schedule+0x164/0x2b0
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x7c4/0x15a0
 inet6_rtm_deladdr+0x249/0x390
 rtnetlink_rcv_msg+0x802/0xc00
 netlink_rcv_skb+0x226/0x4a0
 ?
 netlink_unicast+0x8ef/0xa80
 netlink_sendmsg+0x7f0/0xb20
 sock_sendmsg_nosec+0x14e/0x190
 ____sys_sendmsg+0x54e/0x850
 ___sys_sendmsg+0x2a5/0x360
 __x64_sys_sendmsg+0x1b1/0x290
 do_syscall_64+0x166/0x520
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f22552c6a4b
RSP: 002b:00007ffdd8363c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f22551ee6c0 RCX: 00007f22552c6a4b
RDX: 0000000000000000 RSI: 00007ffdd8377e18 RDI: 000000000000001c
RBP: 000000000000001c R08: 0000000000000000 R09: 00007ffdd8377e18
R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff
R13: 00007ffdd8377e18 R14: 000000000000002c R15: 0000000000000001
 </TASK>
INFO: task kworker/u8:12:24613 blocked for more than 152 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:12   state:D stack:24136 pid:24613 tgid:24613 ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: ipv6_addrconf addrconf_verify_work
Call Trace:
 <TASK>
 __schedule+0x17dd/0x5830
 schedule+0x164/0x2b0
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x7c4/0x15a0
 addrconf_verify_work+0x19/0x30
 process_scheduled_works+0xc3d/0x1630
 worker_thread+0xa47/0xfb0
 kthread+0x38b/0x480
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
INFO: task syz-executor:16699 blocked for more than 152 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:26360 pid:16699 tgid:16699 ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x17dd/0x5830
 schedule+0x164/0x2b0
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x7c4/0x15a0
 rtnl_newlink+0xc1d/0x1c30
 rtnetlink_rcv_msg+0x802/0xc00
 netlink_rcv_skb+0x226/0x4a0
 netlink_unicast+0x8ef/0xa80
 netlink_sendmsg+0x7f0/0xb20
 sock_sendmsg_nosec+0x14e/0x190
 __sys_sendto+0x408/0x5a0
 __x64_sys_sendto+0xde/0x100
 do_syscall_64+0x166/0x520
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe77615fd8e
RSP: 002b:00007ffee4fa1dc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000555563a18500 RCX: 00007fe77615fd8e
RDX: 000000000000002c RSI: 00007fe776f54670 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00007ffee4fa1e44 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
R13: 0000000000000000 R14: 00007fe776f54670 R15: 0000000000000000
 </TASK>

Showing all locks held in the system:
locks held by pool_workqueue_/3: 1, last CPU#1:
 #0: ffffffff8ff609a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760
locks held by kworker/u8:0/12: 4, last CPU#1:
 #0: ffff8881ac261948 ((wq_completion)krds_cp_wq#7/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90000117c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff8881ab4b2180 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
 #3: ffff88802eddf260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30
locks held by kworker/u8:1/13: 2, last CPU#1:
 #0: ffff88810ffa5148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90000127c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
locks held by pr/ttyS0/34: 2, last CPU#0:
 #0: ffffffff8fe33dd8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
 #1: ffffffff9bfee6d8 (&port_lock_key){-...}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0
locks held by khungtaskd/35: 1, last CPU#1:
 #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
locks held by kworker/u11:0/56: 3, on CPU#0:
 #0: ffff888169a86148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc9000142fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff88819931cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430
locks held by dhcpcd/5355: 1, on CPU#0:
 #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_deladdr+0x249/0x390
locks held by getty/5438: 2, on CPU#0:
 #0: ffff8881137630a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc900034932e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
locks held by syz-executor/5607: 1, on CPU#0:
 #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
locks held by kworker/0:5/5721: 3, on CPU#0:
 #0: ffff8881007be148 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc9000626fc40 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x8e0
locks held by kworker/u9:9/7742: 3, on CPU#0:
 #0: ffff8881000ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc9000ddf7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
locks held by kworker/u9:25/10427: 2, last CPU#0:
 #0: ffff8881000ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc9000f077c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
locks held by kworker/u9:26/10428: 2, last CPU#1:
 #0: ffff88810b94d148 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc9000ede7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
locks held by kworker/u8:3/11193: 4, last CPU#1:
 #0: ffff8881ac8c3948 ((wq_completion)krds_cp_wq#7/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc9000f60fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff8881ab4b1580 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
 #3: ffff88805a317260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30
locks held by kworker/u8:8/24610: 3, last CPU#0:
 #0: ffff8881ac8c4948 ((wq_completion)krds_cp_wq#7/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90009e17c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff8881ab4b0c80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
locks held by kworker/u8:12/24613: 3, on CPU#1:
 #0: ffff8881023e1148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90008aa7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
locks held by kworker/u8:13/24614: 4, last CPU#0:
 #0: ffff8881ac8c6948 ((wq_completion)krds_cp_wq#7/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90003b7fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff8881ab4b1e80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
 #3: ffff88802eddac60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30
locks held by kworker/u11:1/27289: 7, on CPU#0:
 #0: ffff88802e7a9948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc9000fc9fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff8880426a0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430
 #3: ffff8880426a00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170
 #4: ffffffff91607d60 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370
 #5: ffff8881bb690af8 (_T->lock#5){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x630
 #6: ffffffff8ff609a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760
locks held by kworker/u8:14/27503: 3, last CPU#1:
 #0: ffff888107298148 ((wq_completion)krds_cp_wq#26/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90029797c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff888116ac0980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
locks held by kworker/0:10/11124: 2, last CPU#0:
 #0: ffff888100069d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90008ab7c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
locks held by kworker/0:18/11130: 4, last CPU#0:
 #0: ffff88810006ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90008837c40 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffffc90008837770 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_atomic_helper_dirtyfb+0x106/0xfd0
 #3: ffffc90008837798 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_atomic_helper_dirtyfb+0x106/0xfd0
locks held by kworker/u8:4/16671: 4, last CPU#0:
 #0: ffff8881ac8c1948 ((wq_completion)krds_cp_wq#7/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc9000444fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff8881ab4b0f80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
 #3: ffff88803d6c3a60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30
locks held by kworker/u8:5/16672: 4, last CPU#1:
 #0: ffff8881ac8c0948 ((wq_completion)krds_cp_wq#7/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc9000443fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff8881ab4b1b80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
 #3: ffff88802ff87260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30
locks held by kworker/u8:6/16674: 3, last CPU#1:
 #0: ffff8881ac8c2148 ((wq_completion)krds_cp_wq#7/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90008357c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff8881ab4b1280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
locks held by kworker/u8:10/16676: 3, last CPU#0:
 #0: ffff8881a2fa4148 ((wq_completion)bond72){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc90003acfc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf0/0x1840
locks held by syz-executor/16699: 1, on CPU#0:
 #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30
locks held by kworker/u8:11/16705: 4, last CPU#0:
 #0: ffff88810a586948 ((wq_completion)krds_cp_wq#5/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc900044afc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff888116739280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
 #3: ffff888043409d60 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: __inet_bind+0x3b0/0xaa0
locks held by syz-executor/16723: 1, on CPU#0:
 #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
locks held by syz-executor/16724: 1, on CPU#1:
 #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
locks held by syz-executor/16732: 1, on CPU#0:
 #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
locks held by kworker/0:0/16741: 3, on CPU#0:
 #0: ffff88810006ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc9000fe87c40 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffffffff91795ec0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200
locks held by syz-executor/16742: 1, on CPU#0:
 #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
locks held by kworker/u8:15/16745: 3, last CPU#1:
 #0: ffff8881ac8c7148 ((wq_completion)krds_cp_wq#7/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc9000351fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff8881ab4b1880 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
locks held by kworker/0:1/16748: 3, on CPU#0:
 #0: ffff88810006ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc9000486fc40 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffffffff91795ec0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
locks held by syz-executor/16750: 1, on CPU#0:
 #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
locks held by udevd/16761: 1, last CPU#1:
 #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550
locks held by syz-executor/16767: 2, last CPU#0:
 #0: ffff8881be91e910 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x33/0x6f0
 #1: ffffffff91795ec0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x33/0x9b0

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150
 nmi_cpu_backtrace+0x274/0x2d0
 nmi_trigger_cpumask_backtrace+0x17d/0x390
 sys_info+0x135/0x170
 watchdog+0x1073/0x10f0
 kthread+0x38b/0x480
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 34 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:io_serial_out+0x7c/0xc0
Code: b1 45 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7c 8e bc fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1
RSP: 0018:ffffc90000aa7900 EFLAGS: 00000002
RAX: 000000000000005d RBX: 000000000000005d RCX: 0000000000000000
RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020
RBP: 00000000000003f8 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: ffffffff85836470 R12: dffffc0000000000
R13: 000000000000005d R14: ffffffff9bfee700 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff88818c020000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffde4b33db8 CR3: 0000000169722000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 __serial8250_console_fifo_write+0x1e6/0x3e0
 serial8250_console_write+0xa7e/0x1200
 nbcon_emit_next_record+0xef5/0x1a90
 nbcon_kthread_func+0x6d9/0x8d0
 kthread+0x38b/0x480
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
