INFO: task kworker/0:0:9 blocked for more than 158 seconds.
      Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:0     state:D stack:25408 pid:9     tgid:9     ppid:2      task_flags:0x4208060 flags:0x00004000
Workqueue: events reg_todo
Call Trace:
 <TASK>
 __schedule+0x16f5/0x4d00
 schedule+0x165/0x360
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x724/0xe80
 reg_process_self_managed_hints+0xad/0x1b0
 reg_todo+0x78d/0x890
 process_scheduled_works+0xae1/0x17b0
 worker_thread+0x8a0/0xda0
 kthread+0x711/0x8a0
 ret_from_fork+0x3fc/0x770
 ret_from_fork_asm+0x1a/0x30
 </TASK>

Showing all locks held in the system:
5 locks held by kworker/u8:1/13:
2 locks held by kworker/1:0/24:
1 lock held by khungtaskd/34:
 #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
1 lock held by klogd/5251:
2 locks held by udevd/5262:
6 locks held by dhcpcd/5558:
2 locks held by getty/5639:
 #0: ffff88810f7810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
2 locks held by syz-executor/5809:
 #0: ffffffff8f50ffc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
 #1: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
2 locks held by udevd/5812:
1 lock held by syz-executor/5813:
 #0: ffffffff8f50ffc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
3 locks held by udevd/5815:
3 locks held by syz-executor/5817:
 #0: ffff8881127fcdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
 #1: ffff8881127fc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
 #2: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
3 locks held by kworker/0:4/5858:
 #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc900041d7bc0 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffffffff8f50ffc8 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0x890
1 lock held by udevd/5900:
1 lock held by syz-executor/5906:
2 locks held by syz-executor/5911:
4 locks held by syz-executor/5913:

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250
 nmi_cpu_backtrace+0x39e/0x3d0
 nmi_trigger_cpumask_backtrace+0x17a/0x300
 watchdog+0xfee/0x1030
 kthread+0x711/0x8a0
 ret_from_fork+0x3fc/0x770
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 942 Comm: kworker/u10:3 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:match_held_lock+0x7d/0xc0
Code: 30 b3 45 93 48 29 d0 48 c1 f8 03 48 ba 29 5c 8f c2 f5 28 5c 8f 48 0f af d0 bb 01 00 00 00 48 39 ca 74 02 31 db 89 d8 5b 41 5e <c3> cc cc cc cc cc 90 e8 d7 62 57 f9 85 c0 74 22 83 3d e0 7e 3a 04
RSP: 0018:ffffc900001df640 EFLAGS: 00000046
RAX: 0000000000000000 RBX: ffff888107298be0 RCX: 47bc4ce811fae400
RDX: 0000000000000100 RSI: ffffffff8f50ffc8 RDI: ffff888107298be0
RBP: 00000000ffffffff R08: ffffc900001df9a0 R09: ffffc900001df9b0
R10: ffffc900001df800 R11: fffff5200003bf02 R12: 0000000000000246
R13: ffff888107298000 R14: ffffffff8f50ffc8 R15: 0000000000000006
FS:  0000000000000000(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fad6dfe3ff8 CR3: 0000000029610000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 lock_is_held_type+0xa8/0x190
 lockdep_rtnl_is_held+0x1b/0x40
 find_match+0xd0/0xc90
 __find_rr_leaf+0x23a/0x6d0
 fib6_table_lookup+0x39f/0xa80
 ip6_pol_route+0x222/0x1180
 fib6_rule_lookup+0x52f/0x6f0
 ip6_route_input+0x6ce/0xa50
 ip6_rcv_finish+0x141/0x2d0
 ip_sabotage_in+0x1e1/0x270
 nf_hook_slow+0xc5/0x220
 NF_HOOK+0x206/0x3a0
 __netif_receive_skb+0xd3/0x380
 netif_receive_skb+0x1cb/0x790
 NF_HOOK+0xa0/0x390
 br_handle_frame_finish+0x14d1/0x19b0
 br_nf_hook_thresh+0x3c6/0x4a0
 br_nf_pre_routing_finish_ipv6+0x948/0xd00
 br_nf_pre_routing_ipv6+0x37e/0x6b0
 br_handle_frame+0x982/0x14c0
 __netif_receive_skb_core+0x10e1/0x4180
 __netif_receive_skb+0x72/0x380
 process_backlog+0x60e/0x14f0
 __napi_poll+0xc7/0x480
 net_rx_action+0x707/0xe30
 handle_softirqs+0x286/0x870
 do_softirq+0xec/0x180
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0x17d/0x1c0
 ieee80211_ibss_rx_queued_mgmt+0x11e5/0x2ae0
 ieee80211_iface_work+0x806/0xfe0
 cfg80211_wiphy_work+0x2df/0x460
 process_scheduled_works+0xae1/0x17b0
 worker_thread+0x8a0/0xda0
 kthread+0x711/0x8a0
 ret_from_fork+0x3fc/0x770
 ret_from_fork_asm+0x1a/0x30
 </TASK>
