INFO: task kworker/0:0:7 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:0 state:D stack:0 pid:7 ppid:2 flags:0x00000008
Workqueue: events vmstat_shepherd
Call trace:
__switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
context_switch kernel/sched/core.c:5246 [inline]
__schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
schedule+0xc4/0x170 kernel/sched/core.c:6639
percpu_rwsem_wait+0x1f4/0x338 kernel/locking/percpu-rwsem.c:162
__percpu_down_read+0x7c/0xac kernel/locking/percpu-rwsem.c:177
percpu_down_read include/linux/percpu-rwsem.h:65 [inline]
cpus_read_lock+0x230/0x274 kernel/cpu.c:310
vmstat_shepherd+0x2c/0x1d4 mm/vmstat.c:2012
process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
kthread+0x254/0x2e0 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
INFO: task kworker/u4:1:11 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:1 state:D stack:0 pid:11 ppid:2 flags:0x00000008
Workqueue: netns cleanup_net
Call trace:
__switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
context_switch kernel/sched/core.c:5246 [inline]
__schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
schedule+0xc4/0x170 kernel/sched/core.c:6639
percpu_rwsem_wait+0x1f4/0x338 kernel/locking/percpu-rwsem.c:162
__percpu_down_read+0x7c/0xac kernel/locking/percpu-rwsem.c:177
percpu_down_read include/linux/percpu-rwsem.h:65 [inline]
cpus_read_lock+0x230/0x274 kernel/cpu.c:310
flush_all_backlogs net/core/dev.c:5977 [inline]
unregister_netdevice_many_notify+0x4dc/0x1900 net/core/dev.c:11006
unregister_netdevice_many+0x28/0x38 net/core/dev.c:11077
ieee80211_remove_interfaces+0x3ac/0x614 net/mac80211/iface.c:2396
ieee80211_unregister_hw+0x60/0x26c net/mac80211/main.c:1484
mac80211_hwsim_del_radio+0x224/0x3bc drivers/net/wireless/mac80211_hwsim.c:4688
hwsim_exit_net+0x4b0/0x574 drivers/net/wireless/mac80211_hwsim.c:5475
ops_exit_list net/core/net_namespace.c:172 [inline]
cleanup_net+0x5d0/0xa90 net/core/net_namespace.c:640
process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
kthread+0x254/0x2e0 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
INFO: task kworker/u4:2:39 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:2 state:D stack:0 pid:39 ppid:2 flags:0x00000008
Workqueue: cfg80211 cfg80211_dfs_channels_update_work
Call trace:
__switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
context_switch kernel/sched/core.c:5246 [inline]
__schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
schedule+0xc4/0x170 kernel/sched/core.c:6639
schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698
__mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679
__mutex_lock kernel/locking/mutex.c:747 [inline]
mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799
rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
cfg80211_dfs_channels_update_work+0xa0/0x51c net/wireless/mlme.c:889
process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
kthread+0x254/0x2e0 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
INFO: task kworker/u4:4:1663 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:4 state:D stack:0 pid:1663 ppid:2 flags:0x00000008
Workqueue: events_unbound linkwatch_event
Call trace:
__switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
context_switch kernel/sched/core.c:5246 [inline]
__schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
schedule+0xc4/0x170 kernel/sched/core.c:6639
schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698
__mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679
__mutex_lock kernel/locking/mutex.c:747 [inline]
mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799
rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
linkwatch_event+0x14/0x68 net/core/link_watch.c:263
process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
kthread+0x254/0x2e0 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
INFO: task kworker/0:2:3432 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:2 state:D stack:0 pid:3432 ppid:2 flags:0x00000008
Workqueue: events request_firmware_work_func
Call trace:
__switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
context_switch kernel/sched/core.c:5246 [inline]
__schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
schedule+0xc4/0x170 kernel/sched/core.c:6639
schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698
__mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679
__mutex_lock kernel/locking/mutex.c:747 [inline]
mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799
rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
regdb_fw_cb+0x84/0x1a8 net/wireless/reg.c:1054
request_firmware_work_func+0xe8/0x19c drivers/base/firmware_loader/main.c:1137
process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
kthread+0x254/0x2e0 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
INFO: task kworker/0:3:3902 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:3 state:D stack:0 pid:3902 ppid:2 flags:0x00000008
Workqueue: ipv6_addrconf addrconf_dad_work
Call trace:
__switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
context_switch kernel/sched/core.c:5246 [inline]
__schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
schedule+0xc4/0x170 kernel/sched/core.c:6639
schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698
__mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679
__mutex_lock kernel/locking/mutex.c:747 [inline]
mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799
rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
addrconf_dad_work+0xc0/0x10a0 net/ipv6/addrconf.c:4138
process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
kthread+0x254/0x2e0 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
INFO: task dhcpcd:3995 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:dhcpcd state:D stack:0 pid:3995 ppid:3994 flags:0x00000004
Call trace:
__switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
context_switch kernel/sched/core.c:5246 [inline]
__schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
schedule+0xc4/0x170 kernel/sched/core.c:6639
schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6698
__mutex_lock_common+0xb20/0x1f3c kernel/locking/mutex.c:679
__mutex_lock kernel/locking/mutex.c:747 [inline]
mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799
rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
devinet_ioctl+0x2b4/0x18e8 net/ipv4/devinet.c:1080
inet_ioctl+0x328/0x518 net/ipv4/af_inet.c:1008
sock_do_ioctl+0x100/0x258 net/socket.c:1202
sock_ioctl+0x234/0x828 net/socket.c:1321
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:870 [inline]
__se_sys_ioctl fs/ioctl.c:856 [inline]
__arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:856
__invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
INFO: task kworker/0:5:4380 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:5 state:D stack:0 pid:4380 ppid:2 flags:0x00000008
Workqueue: events work_for_cpu_fn
Call trace:
__switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
context_switch kernel/sched/core.c:5246 [inline]
__schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
schedule+0xc4/0x170 kernel/sched/core.c:6639
schedule_timeout+0xc8/0x2f4 kernel/time/timer.c:2144
do_wait_for_common+0x28c/0x3ec kernel/sched/completion.c:85
__wait_for_common kernel/sched/completion.c:106 [inline]
wait_for_common kernel/sched/completion.c:117 [inline]
wait_for_completion+0x44/0x5c kernel/sched/completion.c:138
wait_for_ap_thread kernel/cpu.c:262 [inline]
__cpuhp_kick_ap kernel/cpu.c:564 [inline]
cpuhp_kick_ap+0x2fc/0x6c8 kernel/cpu.c:574
cpuhp_kick_ap_work+0xe8/0x1b0 kernel/cpu.c:923
_cpu_down+0x35c/0xb10 kernel/cpu.c:1197
__cpu_down_maps_locked+0x48/0x9c kernel/cpu.c:1249
work_for_cpu_fn+0x60/0x94 kernel/workqueue.c:5184
process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
kthread+0x254/0x2e0 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
INFO: task kworker/1:14:4495 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:14 state:D stack:0 pid:4495 ppid:2 flags:0x00000008
Workqueue: events cpuset_hotplug_workfn
Call trace:
__switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
context_switch kernel/sched/core.c:5246 [inline]
__schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
schedule+0xc4/0x170 kernel/sched/core.c:6639
percpu_rwsem_wait+0x1f4/0x338 kernel/locking/percpu-rwsem.c:162
__percpu_down_read+0x7c/0xac kernel/locking/percpu-rwsem.c:177
percpu_down_read include/linux/percpu-rwsem.h:65 [inline]
cpus_read_lock+0x230/0x274 kernel/cpu.c:310
rebuild_sched_domains kernel/cgroup/cpuset.c:1244 [inline]
cpuset_hotplug_workfn+0x1f64/0x2280 kernel/cgroup/cpuset.c:3840
process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
kthread+0x254/0x2e0 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
INFO: task kworker/u4:6:4632 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:6 state:D stack:0 pid:4632 ppid:2 flags:0x00000008
Workqueue: events_unbound toggle_allocation_gate
Call trace:
__switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555
context_switch kernel/sched/core.c:5246 [inline]
__schedule+0xdb4/0x1a6c kernel/sched/core.c:6563
schedule+0xc4/0x170 kernel/sched/core.c:6639
percpu_rwsem_wait+0x1f4/0x338 kernel/locking/percpu-rwsem.c:162
__percpu_down_read+0x7c/0xac kernel/locking/percpu-rwsem.c:177
percpu_down_read include/linux/percpu-rwsem.h:65 [inline]
cpus_read_lock+0x230/0x274 kernel/cpu.c:310
static_key_enable+0x1c/0x38 kernel/jump_label.c:219
toggle_allocation_gate+0xc8/0x42c mm/kfence/core.c:821
process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
kthread+0x254/0x2e0 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
Showing all locks held in the system:
3 locks held by kworker/0:0/7:
#0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
#1: ffff80001cb57c40 ((shepherd).work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
#2: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: vmstat_shepherd+0x2c/0x1d4 mm/vmstat.c:2012
3 locks held by kworker/u4:0/9:
#0: ffff0000c002a138 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
#1: ffff80001cb77c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
#2: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
5 locks held by kworker/u4:1/11:
#0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
#1: ffff80001cb97c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
#2: ffff800017a32350 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x144/0xa90 net/core/net_namespace.c:594
#3: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
#4: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: flush_all_backlogs net/core/dev.c:5977 [inline]
#4: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x4dc/0x1900 net/core/dev.c:11006
1 lock held by rcu_tasks_kthre/12:
#0: ffff800015597db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517
1 lock held by rcu_tasks_trace/13:
#0: ffff8000155985d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517
2 locks held by cpuhp/1/19:
#0: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: lockdep_acquire_cpus_lock+0x10/0x4c kernel/cpu.c:358
#1: ffff800015437220 (cpuhp_state-down){+.+.}-{0:0}, at: cpuhp_lock_acquire+0x18/0x68 kernel/cpu.c:100
1 lock held by khungtaskd/28:
#0: ffff800015597440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349
3 locks held by kworker/u4:2/39:
#0: ffff0000c4ff6938 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
#1: ffff80001e007c40 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
#2: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
3 locks held by kworker/u4:4/1663:
#0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
#1: ffff800025ab7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
#2: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
3 locks held by kworker/0:2/3432:
#0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
#1: ffff8000223b7c40 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
#2: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
3 locks held by kworker/0:3/3902:
#0: ffff0000d6c19d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
#1: ffff800023197c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
#2: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
1 lock held by dhcpcd/3995:
#0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
2 locks held by getty/4085:
#0: ffff0000d6f5e098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340
#1: ffff80001ea232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 drivers/tty/n_tty.c:2198
3 locks held by kworker/0:5/4380:
#0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
#1: ffff800021337c40 ((work_completion)(&wfc.work)#2){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
#2: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: cpus_write_lock kernel/cpu.c:328 [inline]
#2: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: _cpu_down+0x144/0xb10 kernel/cpu.c:1186
3 locks held by kworker/1:14/4495:
#0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
#1: ffff800021447c40 (cpuset_hotplug_work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
#2: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: rebuild_sched_domains kernel/cgroup/cpuset.c:1244 [inline]
#2: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: cpuset_hotplug_workfn+0x1f64/0x2280 kernel/cgroup/cpuset.c:3840
3 locks held by kworker/1:18/4565:
#0: ffff0000d6c19d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
#1: ffff800021597c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
#2: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
3 locks held by kworker/u4:6/4632:
#0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1
#1: ffff800021557c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267
#2: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x1c/0x38 kernel/jump_label.c:219
1 lock held by syz.4.185/5010:
#0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
1 lock held by syz-executor/5373:
#0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
#0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz-executor/5516:
#0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
#0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6163
1 lock held by syz.4.360/5550:
#0: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: __cpuhp_state_remove_instance+0x88/0x33c kernel/cpu.c:2209
7 locks held by syz.0.362/5553:
#0: ffff0000c3a9c5e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c fs/file.c:1038
#1: ffff0000ce574460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 fs/read_write.c:580
#2: ffff0000d9201088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1b8/0x4b4 fs/kernfs/file.c:343
#3: ffff0000c2f5f830 (kn->active#60){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
#3: ffff0000c2f5f830 (kn->active#60){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f8/0x4b4 fs/kernfs/file.c:344
#4: ffff8000169faf28 (device_hotplug_lock){+.+.}-{3:3}, at: lock_device_hotplug_sysfs drivers/base/core.c:2300 [inline]
#4: ffff8000169faf28 (device_hotplug_lock){+.+.}-{3:3}, at: online_store+0xb8/0x2f4 drivers/base/core.c:2721
#5: ffff00019f36c410 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:885 [inline]
#5: ffff00019f36c410 (&dev->mutex){....}-{3:3}, at: device_offline+0x148/0x310 drivers/base/core.c:4226
#6: ffff800015436f68 (cpu_add_remove_lock){+.+.}-{3:3}, at: cpu_maps_update_begin kernel/cpu.c:290 [inline]
#6: ffff800015436f68 (cpu_add_remove_lock){+.+.}-{3:3}, at: cpu_down+0x90/0x208 kernel/cpu.c:1282
1 lock held by syz.0.362/5557:
#0: ffff0000c3a9c5e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c fs/file.c:1038
1 lock held by syz.3.363/5559:
#0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
2 locks held by syz-executor/5565:
#0: ffff0000d3ff5918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x684 drivers/bluetooth/hci_vhci.c:370
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_and_link_pwqs kernel/workqueue.c:4233 [inline]
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_workqueue+0x928/0xeec kernel/workqueue.c:4349
2 locks held by syz-executor/5566:
#0: ffff0000d3ff0918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x684 drivers/bluetooth/hci_vhci.c:370
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_and_link_pwqs kernel/workqueue.c:4233 [inline]
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_workqueue+0x928/0xeec kernel/workqueue.c:4349
2 locks held by syz-executor/5567:
#0: ffff0000d3ff3118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x684 drivers/bluetooth/hci_vhci.c:370
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_and_link_pwqs kernel/workqueue.c:4233 [inline]
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_workqueue+0x928/0xeec kernel/workqueue.c:4349
2 locks held by syz-executor/5572:
#0: ffff0000da1b1918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x684 drivers/bluetooth/hci_vhci.c:370
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_and_link_pwqs kernel/workqueue.c:4233 [inline]
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_workqueue+0x928/0xeec kernel/workqueue.c:4349
2 locks held by syz-executor/5574:
#0: ffff0000d47a6918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x684 drivers/bluetooth/hci_vhci.c:370
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_and_link_pwqs kernel/workqueue.c:4233 [inline]
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_workqueue+0x928/0xeec kernel/workqueue.c:4349
2 locks held by syz-executor/5577:
#0: ffff0000dc364918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x684 drivers/bluetooth/hci_vhci.c:370
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_and_link_pwqs kernel/workqueue.c:4233 [inline]
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_workqueue+0x928/0xeec kernel/workqueue.c:4349
2 locks held by syz-executor/5578:
#0: ffff0000dc363118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x684 drivers/bluetooth/hci_vhci.c:370
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_and_link_pwqs kernel/workqueue.c:4233 [inline]
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_workqueue+0x928/0xeec kernel/workqueue.c:4349
2 locks held by syz-executor/5580:
#0: ffff0000f5a87918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x684 drivers/bluetooth/hci_vhci.c:370
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_and_link_pwqs kernel/workqueue.c:4233 [inline]
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_workqueue+0x928/0xeec kernel/workqueue.c:4349
2 locks held by syz-executor/5582:
#0: ffff0000f629a118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x684 drivers/bluetooth/hci_vhci.c:370
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_and_link_pwqs kernel/workqueue.c:4233 [inline]
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_workqueue+0x928/0xeec kernel/workqueue.c:4349
2 locks held by syz-executor/5584:
#0: ffff000108679118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x684 drivers/bluetooth/hci_vhci.c:370
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_and_link_pwqs kernel/workqueue.c:4233 [inline]
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_workqueue+0x928/0xeec kernel/workqueue.c:4349
2 locks held by syz-executor/5587:
#0: ffff0000cc637118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x684 drivers/bluetooth/hci_vhci.c:370
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_and_link_pwqs kernel/workqueue.c:4233 [inline]
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_workqueue+0x928/0xeec kernel/workqueue.c:4349
2 locks held by syz-executor/5588:
#0: ffff0000cc636118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x684 drivers/bluetooth/hci_vhci.c:370
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_and_link_pwqs kernel/workqueue.c:4233 [inline]
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_workqueue+0x928/0xeec kernel/workqueue.c:4349
2 locks held by syz-executor/5590:
#0: ffff000108d7f918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x684 drivers/bluetooth/hci_vhci.c:370
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_and_link_pwqs kernel/workqueue.c:4233 [inline]
#1: ffff800015437090 (cpu_hotplug_lock){++++}-{0:0}, at: alloc_workqueue+0x928/0xeec kernel/workqueue.c:4349
=============================================