INFO: task khidpd_15c30040:10276 blocked for more than 143 seconds.
      Not tainted 6.13.0-rc1-syzkaller-00230-g15bfb14727bc #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:khidpd_15c30040 state:D
 stack:27800 pid:10276 tgid:10276 ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x1850/0x4c30 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6848
 schedule_timeout+0xb0/0x290 kernel/time/sleep_timeout.c:75
 do_wait_for_common kernel/sched/completion.c:95 [inline]
 __wait_for_common kernel/sched/completion.c:116 [inline]
 wait_for_common kernel/sched/completion.c:127 [inline]
 wait_for_completion+0x355/0x620 kernel/sched/completion.c:148
 __flush_work+0xa37/0xc50 kernel/workqueue.c:4231
 __cancel_work_sync+0xbc/0x110 kernel/workqueue.c:4351
 hidp_session_remove+0x64/0x260 net/bluetooth/hidp/core.c:1169
 l2cap_unregister_user+0x19c/0x1c0 net/bluetooth/l2cap_core.c:1732
 hidp_session_thread+0x450/0x490 net/bluetooth/hidp/core.c:1304
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

Showing all locks held in the system:
8 locks held by kworker/0:1/9:
1 lock held by khungtaskd/30:
 #0: 
ffffffff8e937aa0
 (
rcu_read_lock
){....}-{1:3}
, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6744
2 locks held by getty/5590:
 #0: 
ffff88814d3fd0a0
 (
&tty->ldisc_sem
){++++}-{0:0}
, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: 
ffffc90002fd62f0
 (
&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 drivers/tty/n_tty.c:2211
3 locks held by kworker/1:4/5878:
 #0: ffff88801ac80948
 (
(wq_completion)events
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3204 [inline]
, at: process_scheduled_works+0x93b/0x1840 kernel/workqueue.c:3310
 #1: 
ffffc9000419fd00
 (
deferred_process_work){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3205 [inline]
, at: process_scheduled_works+0x976/0x1840 kernel/workqueue.c:3310
 #2: 
ffffffff8fcaf488
 (
rtnl_mutex
){+.+.}-{4:4}
, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104
2 locks held by syz-executor/10218:
 #0: 
ffff88805f748d80
 (
&hdev->req_lock
){+.+.}-{4:4}
, at: hci_dev_do_close net/bluetooth/hci_core.c:481 [inline]
, at: hci_unregister_dev+0x203/0x510 net/bluetooth/hci_core.c:2698
 #1: 
ffff88805f748078
 (
&hdev->lock
){+.+.}-{4:4}
, at: hci_dev_close_sync+0x5c8/0x11c0 net/bluetooth/hci_sync.c:5200
2 locks held by khidpd_15c30040/10276:
 #0: 
ffff88805f748078
 (
&hdev->lock
){+.+.}-{4:4}
, at: l2cap_unregister_user+0x6a/0x1c0 net/bluetooth/l2cap_core.c:1726
 #1: 
ffffffff8fe380b0
 (
hidp_session_sem
){++++}-{4:4}
, at: hidp_session_remove+0x2d/0x260 net/bluetooth/hidp/core.c:1165
1 lock held by syz-executor/11285:
 #0: 
ffffffff8fcaf488
 (
rtnl_mutex
){+.+.}-{4:4}
, at: rtnl_net_lock include/linux/rtnetlink.h:128 [inline]
, at: inet_rtm_newaddr+0x47e/0x1bd0 net/ipv4/devinet.c:987
1 lock held by syz-executor/11288:
 #0: ffffffff8fcaf488 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:79 [inline]
 #0: ffffffff8fcaf488 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 net/core/rtnetlink.c:6927
5 locks held by kworker/u8:32/11435:
5 locks held by kworker/u8:33/11436:
 #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3204 [inline]
 #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 kernel/workqueue.c:3310
 #1: 
ffffc9000360fd00
 (
net_cleanup_work
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3205 [inline]
, at: process_scheduled_works+0x976/0x1840 kernel/workqueue.c:3310
 #2: 
ffffffff8fca2fd0
 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xd50 net/core/net_namespace.c:602
 #3: 
ffffffff8fcaf488
 (
rtnl_mutex
){+.+.}-{4:4}
, at: cleanup_net+0x6af/0xd50 net/core/net_namespace.c:638
 #4: 
ffffffff8e93cfb8
 (rcu_state.exp_mutex
){+.+.}-{4:4}
, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline]
, at: synchronize_rcu_expedited+0x381/0x830 kernel/rcu/tree_exp.h:976
3 locks held by kworker/u8:35/11438:
 #0: 
ffff88802fe7e148
 (
(wq_completion)ipv6_addrconf
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3204 [inline]
, at: process_scheduled_works+0x93b/0x1840 kernel/workqueue.c:3310
 #1: 
ffffc9000362fd00
 (
(work_completion)(&(&ifa->dad_work)->work)
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3205 [inline]
, at: process_scheduled_works+0x976/0x1840 kernel/workqueue.c:3310
 #2: 
ffffffff8fcaf488
 (
rtnl_mutex
){+.+.}-{4:4}
, at: addrconf_dad_work+0xd0/0x16f0 net/ipv6/addrconf.c:4215
3 locks held by kworker/u8:36/11439:
 #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3204 [inline]
 #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 kernel/workqueue.c:3310
 #1: 
ffffc90003d6fd00
 (
(linkwatch_work).work
){+.+.}-{0:0}
, at: process_one_work kernel/workqueue.c:3205 [inline]
, at: process_scheduled_works+0x976/0x1840 kernel/workqueue.c:3310
 #2: 
ffffffff8fcaf488
 (
rtnl_mutex
){+.+.}-{4:4}
, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:281
2 locks held by syz-executor/11681:
 #0: 
ffffffff901b2dd8
 (
&ops->srcu
#2
){.+.+}-{0:0}
, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
, at: rtnl_link_ops_get+0x22/0x250 net/core/rtnetlink.c:555
 #1: 
ffffffff8fcaf488
 (
rtnl_mutex){+.+.}-{4:4}
, at: rtnl_lock net/core/rtnetlink.c:79 [inline]
, at: rtnl_nets_lock net/core/rtnetlink.c:326 [inline]
, at: rtnl_newlink+0xbcb/0x2150 net/core/rtnetlink.c:4010
2 locks held by syz.0.1549/11705:
 #0: 
ffffffff90198450
 (
&ops->srcu
#2
){.+.+}-{0:0}
, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
, at: rtnl_link_ops_get+0x22/0x250 net/core/rtnetlink.c:555
 #1: