INFO: task kworker/u10:4:3794 blocked for more than 151 seconds.
      Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u10:4   state:D stack:24424 pid:3794  tgid:3794  ppid:2      task_flags:0x4208160 flags:0x00004000
Workqueue: events_unbound linkwatch_event
Call Trace:
 <TASK>
 __schedule+0x16f5/0x4d00
 schedule+0x165/0x360
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x724/0xe80
 linkwatch_event+0xe/0x60
 process_scheduled_works+0xae1/0x17b0
 worker_thread+0x8a0/0xda0
 kthread+0x711/0x8a0
 ret_from_fork+0x3fc/0x770
 ret_from_fork_asm+0x1a/0x30
 </TASK>
INFO: task kworker/1:6:5890 blocked for more than 156 seconds.
      Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:6     state:D stack:23816 pid:5890  tgid:5890  ppid:2      task_flags:0x4208060 flags:0x00004000
Workqueue: events switchdev_deferred_process_work
Call Trace:
 <TASK>
 __schedule+0x16f5/0x4d00
 schedule+0x165/0x360
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x724/0xe80
 switchdev_deferred_process_work+0xe/0x20
 process_scheduled_works+0xae1/0x17b0
 worker_thread+0x8a0/0xda0
 kthread+0x711/0x8a0
 ret_from_fork+0x3fc/0x770
 ret_from_fork_asm+0x1a/0x30
 </TASK>
INFO: task syz.0.80:6126 blocked for more than 156 seconds.
      Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.80        state:D stack:25688 pid:6126  tgid:6125  ppid:5833   task_flags:0x400140 flags:0x00004004
Call Trace:
 <TASK>
 __schedule+0x16f5/0x4d00
 schedule+0x165/0x360
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x724/0xe80
 rtnetlink_rcv_msg+0x71c/0xb70
 netlink_rcv_skb+0x208/0x470
 netlink_unicast+0x75c/0x8e0
 netlink_sendmsg+0x805/0xb30
 __sock_sendmsg+0x21c/0x270
 ____sys_sendmsg+0x505/0x830
 ___sys_sendmsg+0x21f/0x2a0
 __x64_sys_sendmsg+0x19b/0x260
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3060d8e929
RSP: 002b:00007f3061b3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f3060fb5fa0 RCX: 00007f3060d8e929
RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005
RBP: 00007f3060e10b39 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f3060fb5fa0 R15: 00007ffd00604a08
 </TASK>
INFO: task syz.0.80:6127 blocked for more than 156 seconds.
      Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.80        state:D stack:28248 pid:6127  tgid:6125  ppid:5833   task_flags:0x400040 flags:0x00004004
Call Trace:
 <TASK>
 __schedule+0x16f5/0x4d00
 schedule+0x165/0x360
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x724/0xe80
 __tun_chr_ioctl+0x37a/0x1df0
 __se_sys_ioctl+0xfc/0x170
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3060d8e929
RSP: 002b:00007f3061b1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f3060fb6080 RCX: 00007f3060d8e929
RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004
RBP: 00007f3060e10b39 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f3060fb6080 R15: 00007ffd00604a08
 </TASK>

Showing all locks held in the system:
3 locks held by kworker/u8:1/13:
 #0: ffff88810548d948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc90000107bc0 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xb6/0x630
1 lock held by khungtaskd/34:
 #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
3 locks held by kworker/u9:3/261:
 #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc9000174fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffff888110720768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x460
3 locks held by kworker/0:2/971:
 #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc900069c7bc0 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: regdb_fw_cb+0x7d/0x1c0
7 locks held by kworker/u9:8/1149:
3 locks held by kworker/u10:4/3794:
 #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc900239efbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
3 locks held by dhcpcd/5575:
2 locks held by getty/5658:
 #0: ffff8881079580a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
3 locks held by kworker/u8:2/5690:
 #0: ffff888021578948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc900025bfbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
2 locks held by syz-executor/5802:
5 locks held by syz-executor/5836:
 #0: ffff8881104d4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
 #1: ffff8881104d40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
 #2: ffffffff8f685a88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
 #3: ffff888011b6eb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
 #4: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
3 locks held by kworker/0:4/5889:
 #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc900036cfbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00
3 locks held by kworker/1:6/5890:
 #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc900036efbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
3 locks held by syz.1.78/6120:
 #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
 #1: ffff888110720768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_stop+0x126/0x220
 #2: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
1 lock held by syz.0.80/6126:
 #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70
1 lock held by syz.0.80/6127:
 #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0
1 lock held by syz-executor/6141:
2 locks held by syz-executor/6143:
2 locks held by dhcpcd/6144:

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250
 nmi_cpu_backtrace+0x39e/0x3d0
 nmi_trigger_cpumask_backtrace+0x17a/0x300
 watchdog+0xfee/0x1030
 kthread+0x711/0x8a0
 ret_from_fork+0x3fc/0x770
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 6131 Comm: kworker/1:7 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: events free_obj_work
RIP: 0010:stack_depot_save_flags+0x80/0x900
Code: 85 f4 03 00 00 43 8d 34 12 42 8d 2c d5 7b 71 f5 75 83 fe 04 72 6f 89 e8 89 e9 4c 89 f2 03 0a 03 42 04 03 6a 08 89 ef c1 c7 04 <29> e9 31 cf 01 c5 29 f8 41 89 f8 41 c1 c0 06 41 31 c0 01 ef 45 89
RSP: 0018:ffffc90003c7f678 EFLAGS: 00000287
RAX: 000000009f994591 RBX: 0000000000000000 RCX: 0000000019c832f5
RDX: ffffc90003c7f720 RSI: 0000000000000008 RDI: 000000006041e47d
RBP: 00000000d6041e47 R08: 00000000524eba71 R09: 0000000021aa3316
R10: 000000000000000a R11: ffffffff81ad03a0 R12: ffffea00047f4700
R13: 0000000000000000 R14: ffffc90003c7f6f0 R15: ffffc90003c7f600
FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9de62e56e8 CR3: 0000000027e06000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 kasan_save_track+0x4f/0x80
 kasan_save_free_info+0x46/0x50
 __kasan_slab_free+0x62/0x70
 kmem_cache_free+0x18f/0x400
 free_obj_work+0x342/0x480
 process_scheduled_works+0xae1/0x17b0
 worker_thread+0x8a0/0xda0
 kthread+0x711/0x8a0
 ret_from_fork+0x3fc/0x770
 ret_from_fork_asm+0x1a/0x30
 </TASK>
