INFO: task kworker/0:5:5828 blocked for more than 143 seconds.
      Tainted: G             L      syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:5     state:D stack:21736 pid:5828  tgid:5828  ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: events drm_fb_helper_damage_work
Call Trace:
 <TASK>
 __schedule+0x17db/0x58f0
 schedule+0x164/0x2b0
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x7c1/0x1550
 drm_fb_helper_damage_work+0x15b/0xf20
 process_scheduled_works+0xc3d/0x1630
 worker_thread+0xa47/0xfb0
 kthread+0x38b/0x480
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>

Showing all locks held in the system:
locks held by kworker/u9:1/29: 3, last CPU#0:
 #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: raw_spin_rq_lock_nested+0x2d/0x160
 #1: ffff888120e24408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0
 #2: ffff88811c9a07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
locks held by khungtaskd/35: 1, last CPU#0:
 #0: ffffffff8fd5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
locks held by kworker/u9:4/146: 3, last CPU#0:
 #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc900030c7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff8881b21007a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
locks held by kworker/u9:5/1106: 3, last CPU#0:
 #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc9000729fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff888171120258 (&devlink->lock_key#6
){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
locks held by kworker/u9:6/1110: 3, last CPU#0:
 #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc900072dfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff8881bf7c2258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
locks held by kworker/u9:7/1111: 2, on CPU#0:
 #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc9000730fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
locks held by kworker/u9:9/1113: 3, last CPU#0:
 #0: ffff888120e3bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
 #1: ffff888120e24408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0
 #2: ffff88811c9907a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
locks held by getty/5423: 2, on CPU#0:
 #0: ffff8881720ca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc9000348b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
locks held by kworker/u8:2/5431: 2, last CPU#0:
 #0: ffff88816ee0d940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc900040f7c40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
locks held by kworker/0:5/5828: 3, on CPU#0:
 #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc9000717fc40 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #2: ffff888104ffda70 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_damage_work+0x15b/0xf20
locks held by syz.4.1209/8850: 10, last CPU#0:
 #0: ffff8880238080a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffff888023808128 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write+0x1e2/0x9f0
 #2: ffff8880238082c8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_write+0x1f5/0x11e0
 #3: ffffc90003593370 (&ldata->output_lock){+.+.}-{4:4}, at: n_tty_write+0x66d/0x11e0
 #4: ffffffff8fd4ea20 (console_lock){+.+.}-{0:0}, at: do_con_write+0x12e/0x5500
 #5: ffff888104ffda70 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_pan_display+0xbe/0xbe0
 #6: ffff888168768128 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_internal_acquire+0x20/0x80
 #7: ffff888104ffd890 (&client->modeset_mutex){+.+.}-{4:4}, at: drm_client_modeset_commit_locked+0x4c/0x4d0
 #8: ffffc90004227150 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_client_modeset_commit_atomic+0x11a/0x7e0
 #9: ffffc90004227178 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_client_modeset_commit_atomic+0x11a/0x7e0
locks held by syz-executor/9160: 3, on CPU#0:
 #0: ffff8881190e8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
 #1: ffff8881190e80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10c0
 #2: ffffffff8fd62aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
locks held by kworker/0:6/9224: 2, last CPU#0:
 #0: ffff8881147e8540 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc9000b10fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
locks held by kworker/0:7/9225: 2, last CPU#0:
 #0: ffff888100069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
 #1: ffffc9000e57fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
locks held by syz-executor/9534: 4, on CPU#0:
 #0: ffff8880246a0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
 #1: ffff8880246a00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10c0
 #2: ffffffff913d8bc0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260
 #3: ffff888023df52f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550
locks held by syz.0.1508/9675: 1, on CPU#0:
 #0: ffff888168768128 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_open+0x6e/0x170
locks held by syz-executor/9754: 1, last CPU#0:
 #0: ffffffff8fd5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
locks held by syz-executor/9762: 1, on CPU#0:
 #0: ffffffff8fd62aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
locks held by syz-executor/9775: 2, last CPU#0:
 #0: ffff88810c4e1d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
 #1: ffffffff8fd5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
locks held by syz-executor/9779: 1, last CPU#0:
 #0: ffffffff8fd5c6e0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x2e/0x4a0
locks held by syz-executor/9783: 1, last CPU#0:
 #0: ffffffff8fd5c6e0 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x116/0x500
