INFO: task kworker/u4:1:144 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:1    state:D
 stack:21680 pid:  144 ppid:     2 flags:0x00004000
Workqueue: events_unbound fsnotify_connector_destroy_workfn
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 schedule_timeout+0xbd/0x2d0 kernel/time/timer.c:2093
 do_wait_for_common+0x295/0x460 kernel/sched/completion.c:85
 __wait_for_common kernel/sched/completion.c:106 [inline]
 wait_for_common kernel/sched/completion.c:117 [inline]
 wait_for_completion+0x48/0x60 kernel/sched/completion.c:138
 __synchronize_srcu+0x2b5/0x350 kernel/rcu/srcutree.c:930
 fsnotify_connector_destroy_workfn+0x40/0xa0 fs/notify/mark.c:234
 process_one_work+0x867/0xff0 kernel/workqueue.c:2310
 worker_thread+0xad7/0x12a0 kernel/workqueue.c:2457
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
INFO: task dhcpcd:3852 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:dhcpcd          state:D
 stack:21424 pid: 3852 ppid:  3851 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6537
 __mutex_lock_common+0xdf5/0x2400 kernel/locking/mutex.c:669
 __mutex_lock kernel/locking/mutex.c:729 [inline]
 mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743
 devinet_ioctl+0x256/0x1ba0 net/ipv4/devinet.c:1076
 inet_ioctl+0x2fa/0x460 net/ipv4/af_inet.c:987
 sock_do_ioctl+0xfb/0x320 net/socket.c:1148
 sock_ioctl+0x48a/0x700 net/socket.c:1267
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:874 [inline]
 __se_sys_ioctl+0xfa/0x170 fs/ioctl.c:860
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f17027f4378
RSP: 002b:00007ffd15685878 EFLAGS: 00000246
 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000049 RCX: 00007f17027f4378
RDX: 00007ffd15695a70 RSI: 0000000000008914 RDI: 0000000000000049
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd156a5c10
R13: 00007f17026f46c8 R14: 0000000000000028 R15: 0000000000008914
 </TASK>
INFO: task kworker/u4:11:4370 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:11   state:D
 stack:21856 pid: 4370 ppid:     2 flags:0x00004000
Workqueue: events_unbound fsnotify_mark_destroy_workfn

Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 schedule_timeout+0xbd/0x2d0 kernel/time/timer.c:2093
 do_wait_for_common+0x295/0x460 kernel/sched/completion.c:85
 __wait_for_common kernel/sched/completion.c:106 [inline]
 wait_for_common kernel/sched/completion.c:117 [inline]
 wait_for_completion+0x48/0x60 kernel/sched/completion.c:138
 __synchronize_srcu+0x2b5/0x350 kernel/rcu/srcutree.c:930
 fsnotify_mark_destroy_workfn+0x106/0x2e0 fs/notify/mark.c:928
 process_one_work+0x867/0xff0 kernel/workqueue.c:2310
 worker_thread+0xad7/0x12a0 kernel/workqueue.c:2457
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
INFO: task syz-executor:8205 blocked for more than 145 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D
 stack:22192 pid: 8205 ppid:     1 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 synchronize_rcu_expedited+0x5c1/0x750 kernel/rcu/tree_exp.h:861
 namespace_unlock+0x23f/0x440 fs/namespace.c:1459
 do_umount fs/namespace.c:1683 [inline]
 path_umount+0xf38/0xfe0 fs/namespace.c:1766
 ksys_umount fs/namespace.c:1789 [inline]
 __do_sys_umount fs/namespace.c:1794 [inline]
 __se_sys_umount fs/namespace.c:1792 [inline]
 __x64_sys_umount+0x12d/0x170 fs/namespace.c:1792
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f3e94b5a397
RSP: 002b:00007ffe82a429d8 EFLAGS: 00000246
 ORIG_RAX: 00000000000000a6
RAX: ffffffffffffffda RBX: 00007f3e94bef4bb RCX: 00007f3e94b5a397
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe82a42a90
RBP: 00007ffe82a42a90 R08: 00007ffe82a43a90 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe82a43b20
R13: 00007f3e94bef4bb R14: 000000000004e582 R15: 00007ffe82a43b60
 </TASK>
INFO: task syz.8.1125:9171 blocked for more than 145 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.8.1125      state:D
 stack:25296 pid: 9171 ppid:  6566 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6537
 __mutex_lock_common+0xdf5/0x2400 kernel/locking/mutex.c:669
 __mutex_lock kernel/locking/mutex.c:729 [inline]
 mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743
 exp_funnel_lock kernel/rcu/tree_exp.h:322 [inline]
 synchronize_rcu_expedited+0x3a5/0x750 kernel/rcu/tree_exp.h:845
 namespace_unlock+0x23f/0x440 fs/namespace.c:1459
 drop_collected_mounts fs/namespace.c:1948 [inline]
 put_mnt_ns+0xdb/0x120 fs/namespace.c:4431
 free_nsproxy+0x49/0x3c0 kernel/nsproxy.c:191
 do_exit+0x630/0x2110 kernel/exit.c:889
 do_group_exit+0x12c/0x2f0 kernel/exit.c:1004
 get_signal+0x7eb/0x12e0 kernel/signal.c:2913
 arch_do_signal_or_restart+0xe6/0x12a0 arch/x86/kernel/signal.c:867
 handle_signal_work kernel/entry/common.c:157 [inline]
 exit_to_user_mode_loop+0x9e/0x130 kernel/entry/common.c:181
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:217
 __syscall_exit_to_user_mode_work kernel/entry/common.c:299 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:310
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f516737c159
RSP: 002b:00007f51655d40e8 EFLAGS: 00000246
 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f5167603fa8 RCX: 00007f516737c159
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5167603fa8
RBP: 00007f5167603fa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f5167604038 R14: 00007fff3bb219a0 R15: 00007fff3bb21a88
 </TASK>
INFO: task khidpd_04f31009:9230 blocked for more than 146 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:khidpd_04f31009 state:D
 stack:28496 pid: 9230 ppid:     2 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 schedule_timeout+0xbd/0x2d0 kernel/time/timer.c:2093
 do_wait_for_common+0x295/0x460 kernel/sched/completion.c:85
 __wait_for_common kernel/sched/completion.c:106 [inline]
 wait_for_common kernel/sched/completion.c:117 [inline]
 wait_for_completion+0x48/0x60 kernel/sched/completion.c:138
 __flush_work+0x15a/0x210 kernel/workqueue.c:3094
 __cancel_work_timer+0x3f4/0x560 kernel/workqueue.c:3181
 hidp_session_remove+0xaa/0x2a0 net/bluetooth/hidp/core.c:1199
 l2cap_unregister_user+0x180/0x1a0 net/bluetooth/l2cap_core.c:1898
 hidp_session_thread+0x1807/0x1890 net/bluetooth/hidp/core.c:1335
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
INFO: task dhcpcd:9276 blocked for more than 147 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:dhcpcd          state:D stack:28336 pid: 9276 ppid:  3852 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 exp_funnel_lock kernel/rcu/tree_exp.h:313 [inline]
 synchronize_rcu_expedited+0x680/0x750 kernel/rcu/tree_exp.h:845
 synchronize_rcu+0x119/0x1e0 kernel/rcu/tree.c:3802
 __unregister_prot_hook+0x41e/0x5b0 net/packet/af_packet.c:347
 packet_do_bind+0x539/0xd60 net/packet/af_packet.c:3283
 __sys_bind+0x2e9/0x3e0 net/socket.c:1730
 __do_sys_bind net/socket.c:1741 [inline]
 __se_sys_bind net/socket.c:1739 [inline]
 __x64_sys_bind+0x76/0x80 net/socket.c:1739
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f17027f92d7
RSP: 002b:00007ffd156856e8 EFLAGS: 00000213 ORIG_RAX: 0000000000000031
RAX: ffffffffffffffda RBX: 0000556654250300 RCX: 00007f17027f92d7
RDX: 0000000000000014 RSI: 00007ffd15685700 RDI: 0000000000000003
RBP: 00005566492a74a0 R08: 00007f17028c8ac0 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000213 R12: 000055665424ac3c
R13: 000055665424ace0 R14: 0000000000000000 R15: 00005566492bcac0
 </TASK>
INFO: task dhcpcd:9277 blocked for more than 147 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:dhcpcd          state:D
 stack:28336 pid: 9277 ppid:  3852 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 exp_funnel_lock kernel/rcu/tree_exp.h:313 [inline]
 synchronize_rcu_expedited+0x680/0x750 kernel/rcu/tree_exp.h:845
 synchronize_rcu+0x119/0x1e0 kernel/rcu/tree.c:3802
 __unregister_prot_hook+0x41e/0x5b0 net/packet/af_packet.c:347
 packet_do_bind+0x539/0xd60 net/packet/af_packet.c:3283
 __sys_bind+0x2e9/0x3e0 net/socket.c:1730
 __do_sys_bind net/socket.c:1741 [inline]
 __se_sys_bind net/socket.c:1739 [inline]
 __x64_sys_bind+0x76/0x80 net/socket.c:1739
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f17027f92d7
RSP: 002b:00007ffd156856e8 EFLAGS: 00000213
 ORIG_RAX: 0000000000000031
RAX: ffffffffffffffda RBX: 0000556654250300 RCX: 00007f17027f92d7
RDX: 0000000000000014 RSI: 00007ffd15685700 RDI: 0000000000000003
RBP: 00005566492a74b0 R08: 00007f17028c8ac0 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000213 R12: 0000000000000000
R13: 0000556654249380 R14: 0000000000000000 R15: 00005566492bcac0
 </TASK>
INFO: task dhcpcd:9278 blocked for more than 148 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:dhcpcd          state:D
 stack:28336 pid: 9278 ppid:  3852 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 exp_funnel_lock kernel/rcu/tree_exp.h:313 [inline]
 synchronize_rcu_expedited+0x680/0x750 kernel/rcu/tree_exp.h:845
 synchronize_rcu+0x119/0x1e0 kernel/rcu/tree.c:3802
 __unregister_prot_hook+0x41e/0x5b0 net/packet/af_packet.c:347
 packet_do_bind+0x539/0xd60 net/packet/af_packet.c:3283
 __sys_bind+0x2e9/0x3e0 net/socket.c:1730
 __do_sys_bind net/socket.c:1741 [inline]
 __se_sys_bind net/socket.c:1739 [inline]
 __x64_sys_bind+0x76/0x80 net/socket.c:1739
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f17027f92d7
RSP: 002b:00007ffd156856e8 EFLAGS: 00000213
 ORIG_RAX: 0000000000000031
RAX: ffffffffffffffda RBX: 0000556654250300 RCX: 00007f17027f92d7
RDX: 0000000000000014 RSI: 00007ffd15685700 RDI: 0000000000000003
RBP: 00005566492a74b0 R08: 00007f17028c8ac0 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000213 R12: 0000000000000000
R13: 000055665424a200 R14: 0000000000000000 R15: 00005566492bcac0
 </TASK>
INFO: task dhcpcd:9279 blocked for more than 149 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:dhcpcd          state:D
 stack:28336 pid: 9279 ppid:  3852 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 exp_funnel_lock kernel/rcu/tree_exp.h:313 [inline]
 synchronize_rcu_expedited+0x680/0x750 kernel/rcu/tree_exp.h:845
 synchronize_rcu+0x119/0x1e0 kernel/rcu/tree.c:3802
 __unregister_prot_hook+0x41e/0x5b0 net/packet/af_packet.c:347
 packet_do_bind+0x539/0xd60 net/packet/af_packet.c:3283
 __sys_bind+0x2e9/0x3e0 net/socket.c:1730
 __do_sys_bind net/socket.c:1741 [inline]
 __se_sys_bind net/socket.c:1739 [inline]
 __x64_sys_bind+0x76/0x80 net/socket.c:1739
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f17027f92d7
RSP: 002b:00007ffd156856e8 EFLAGS: 00000213
 ORIG_RAX: 0000000000000031
RAX: ffffffffffffffda RBX: 0000556654250300 RCX: 00007f17027f92d7
RDX: 0000000000000014 RSI: 00007ffd15685700 RDI: 0000000000000003
RBP: 00005566492a74b0 R08: 00007f17028c8ac0 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000213 R12: 0000000000000000
R13: 000055665424d140 R14: 0000000000000000 R15: 00005566492bcac0
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/27:
 #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
2 locks held by kworker/u4:1/144:
 #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 kernel/workqueue.c:-1
 #1: ffffc9000167fd00 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 kernel/workqueue.c:2285
1 lock held by dhcpcd/3852:
 #0: 
ffffffff8d44d548
 (
rtnl_mutex
){+.+.}-{3:3}
, at: devinet_ioctl+0x256/0x1ba0 net/ipv4/devinet.c:1076
2 locks held by getty/3945:
 #0: 
ffff88814d368098
 (
&tty->ldisc_sem
){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252
 #1: 
ffffc90002cf62e8
 (&ldata->atomic_read_lock
){+.+.}-{3:3}
, at: n_tty_read+0x594/0x1a50 drivers/tty/n_tty.c:2158
3 locks held by kworker/1:4/4228:
 #0: 
ffff888016c71938
 (
(wq_completion)events_power_efficient
){+.+.}-{0:0}
, at: process_one_work+0x75c/0xff0 kernel/workqueue.c:-1
 #1: 
ffffc9000309fd00
 (
(reg_check_chans).work
){+.+.}-{0:0}
, at: process_one_work+0x79e/0xff0 kernel/workqueue.c:2285
 #2: 
ffffffff8d44d548
 (
rtnl_mutex
){+.+.}-{3:3}
, at: reg_check_chans_work+0x82/0xa90 net/wireless/reg.c:2437
4 locks held by kworker/0:8/4281:
5 locks held by kworker/u4:8/4348:
 #0: 
ffff888016c79138
 (
(wq_completion)events_unbound
){+.+.}-{0:0}
, at: process_one_work+0x75c/0xff0 kernel/workqueue.c:-1
 #1: 
ffffc900034bfd00
 (
(work_completion)(&rdev->wiphy_work)
){+.+.}-{0:0}
, at: process_one_work+0x79e/0xff0 kernel/workqueue.c:2285
 #2: 
ffff888060260688
 (
&rdev->wiphy.mtx
){+.+.}-{3:3}
, at: wiphy_lock include/net/cfg80211.h:5319 [inline]
, at: cfg80211_wiphy_work+0x31/0x260 net/wireless/core.c:420
 #3: 
ffff888025190d40
 (&wdev->mtx
){+.+.}-{3:3}
, at: sdata_lock net/mac80211/ieee80211_i.h:1036 [inline]
, at: ieee80211_ibss_work+0xa8/0x10f0 net/mac80211/ibss.c:1685
 #4: 
ffff888060261810
 (
&local->sta_mtx){+.+.}-{3:3}
, at: ieee80211_ibss_sta_expire net/mac80211/ibss.c:1259 [inline]
, at: ieee80211_sta_merge_ibss net/mac80211/ibss.c:1302 [inline]
, at: ieee80211_ibss_work+0x572/0x10f0 net/mac80211/ibss.c:1713
2 locks held by kworker/u4:11/4370:
 #0: 
ffff888016c79138
 (
(wq_completion)events_unbound
){+.+.}-{0:0}
, at: process_one_work+0x75c/0xff0 kernel/workqueue.c:-1
 #1: 
ffffc90003d8fd00
 (
(reaper_work).work){+.+.}-{0:0}
, at: process_one_work+0x79e/0xff0 kernel/workqueue.c:2285
3 locks held by kworker/1:8/5059:
 #0: 
ffff88802ac6f538
 (
(wq_completion)ipv6_addrconf
){+.+.}-{0:0}
, at: process_one_work+0x75c/0xff0 kernel/workqueue.c:-1
 #1: 
ffffc9000396fd00 ((addr_chk_work).work
){+.+.}-{0:0}
, at: process_one_work+0x79e/0xff0 kernel/workqueue.c:2285
 #2: 
ffffffff8d44d548
 (
rtnl_mutex
){+.+.}-{3:3}
, at: addrconf_verify_work+0xa/0x20 net/ipv6/addrconf.c:4664
1 lock held by syz.4.493/6651:
 #0: 
ffffffff8d44d548
 (
rtnl_mutex
){+.+.}-{3:3}
, at: tun_detach drivers/net/tun.c:699 [inline]
, at: tun_chr_close+0x3d/0x1b0 drivers/net/tun.c:3454
1 lock held by syz-executor/8205:
 #0: 
ffffffff8c3239e8
 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:290 [inline]
 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 kernel/rcu/tree_exp.h:845
1 lock held by syz.8.1125/9171:
 #0: ffffffff8c3239e8 (
rcu_state.exp_mutex
){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:322 [inline]
){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750 kernel/rcu/tree_exp.h:845
2 locks held by khidpd_04f31009/9230:
 #0: ffff88804c65c478 (
&hdev->lock
){+.+.}-{3:3}
, at: l2cap_unregister_user+0x67/0x1a0 net/bluetooth/l2cap_core.c:1892
 #1: 
ffffffff8d5bbc30
 (
hidp_session_sem){++++}-{3:3}, at: hidp_session_remove+0x28/0x2a0 net/bluetooth/hidp/core.c:1186
1 lock held by dhcpcd/9276:
 #0: 
ffff888061e84120
 (
sk_lock-AF_PACKET
){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1744 [inline]
, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
1 lock held by dhcpcd/9277:
 #0: 
ffff88807c0c6120
 (
sk_lock-AF_PACKET
){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1744 [inline]
, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
1 lock held by dhcpcd/9278:
 #0: 
ffff8880759de120
 (
sk_lock-AF_PACKET
){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1744 [inline]
, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
1 lock held by dhcpcd/9279:
 #0: 
ffff888060954120
 (sk_lock-AF_PACKET
){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1744 [inline]
, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
1 lock held by dhcpcd/9280:
 #0: 
ffff88801f158120
 (
sk_lock-AF_PACKET
){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1744 [inline]
, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
1 lock held by dhcpcd/9281:
 #0: 
ffff888060956120
 (
sk_lock-AF_PACKET
){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1744 [inline]
, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
1 lock held by dhcpcd/9282:
 #0: 
ffff8880609d4120
 (
sk_lock-AF_PACKET
){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1744 [inline]
, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
1 lock held by dhcpcd/9283:
 #0: 
ffff888060596120
 (
sk_lock-AF_PACKET
){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1744 [inline]
, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
1 lock held by dhcpcd/9284:
 #0: 
ffff88801a5fe120
 (
sk_lock-AF_PACKET
){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1744 [inline]
, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
1 lock held by dhcpcd/9285:
 #0: 
ffff88801fb44120
 (
sk_lock-AF_PACKET
){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1744 [inline]
, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
1 lock held by dhcpcd/9286:
 #0: 
ffff88801f9f2120
 (
sk_lock-AF_PACKET
){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1744 [inline]
, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
1 lock held by dhcpcd/9287:
 #0: 
ffff8880609fc120
 (
sk_lock-AF_PACKET
){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1744 [inline]
, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
1 lock held by syz.5.1145/9292:
 #0: 
ffff8880539744b8
 (
&nft_net->commit_mutex
){+.+.}-{3:3}
, at: nf_tables_valid_genid+0x37/0x100 net/netfilter/nf_tables_api.c:10035
1 lock held by dhcpcd/9291:
 #0: 
ffff888079ce2120
 (
sk_lock-AF_PACKET
){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1744 [inline]
, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
1 lock held by dhcpcd/9293:
 #0: 
ffff888056c00120
 (
sk_lock-AF_PACKET
){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1744 [inline]
, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
1 lock held by dhcpcd/9294:
 #0: 
ffff888061c5a120
 (
sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1744 [inline]
sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
1 lock held by dhcpcd/9295:
 #0: 
ffff888062400120
 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1744 [inline]
 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
1 lock held by dhcpcd/9296:
 #0: ffff88807a624120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1744 [inline]
 #0: ffff88807a624120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
1 lock held by dhcpcd/9297:
 #0: 
ffff888022104120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1744 [inline]
ffff888022104120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
1 lock held by dhcpcd/9298:
 #0: ffff888058e44120 (sk_lock-AF_PACKET){+.+.}-{0:0}
, at: lock_sock include/net/sock.h:1744 [inline]
, at: packet_do_bind+0x32/0xd60 net/packet/af_packet.c:3243
2 locks held by syz.4.1157/9328:
 #0: 
ffff88805a3b5010
 (
&sb->s_type->i_mutex_key
#11
){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:793 [inline]
){+.+.}-{3:3}, at: __sock_release net/socket.c:650 [inline]
){+.+.}-{3:3}, at: sock_close+0x82/0x210 net/socket.c:1346
 #1: ffff888060819120 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1744 [inline]
 #1: ffff888060819120 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_release+0x4d/0x330 net/l2tp/l2tp_ppp.c:424
1 lock held by syz.6.1168/9381:
 #0: ffff88805f8b1410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:793 [inline]
 #0: ffff88805f8b1410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: __sock_release net/socket.c:650 [inline]
 #0: ffff88805f8b1410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 net/socket.c:1346
1 lock held by syz.6.1168/9382:
 #0: ffffffff8d44d548 (rtnl_mutex){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
, at: rtnetlink_rcv_msg+0x79f/0xf10 net/core/rtnetlink.c:5695
1 lock held by syz-executor/9395:
 #0: 
ffffffff8d44d548
 (
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
, at: rtnetlink_rcv_msg+0x79f/0xf10 net/core/rtnetlink.c:5695
1 lock held by syz-executor/9400:
 #0: 
ffffffff8d44d548
 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 net/core/rtnetlink.c:5695
1 lock held by syz-executor/9403:
 #0: 
ffffffff8d44d548 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
ffffffff8d44d548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 net/core/rtnetlink.c:5695
1 lock held by syz-executor/9406:
 #0: ffffffff8d44d548
 (
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
, at: rtnetlink_rcv_msg+0x79f/0xf10 net/core/rtnetlink.c:5695
1 lock held by syz-executor/9409:
 #0: ffffffff8d44d548 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
 #0: ffffffff8d44d548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 net/core/rtnetlink.c:5695
1 lock held by syz-executor/9412:
 #0: 
ffffffff8d44d548
 (
rtnl_mutex
){+.+.}-{3:3}
, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
, at: rtnetlink_rcv_msg+0x79f/0xf10 net/core/rtnetlink.c:5695
1 lock held by syz-executor/9416:
 #0: ffffffff8d44d548 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
 #0: ffffffff8d44d548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 net/core/rtnetlink.c:5695