INFO: task udevd:4695 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:0 pid:4695 tgid:4695 ppid:4338 task_flags:0x400140 flags:0x00000000 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:810 (T) context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1c04/0x2db8 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7283 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7340 rwsem_down_write_slowpath+0x6ec/0x1178 kernel/locking/rwsem.c:1215 __down_write_common kernel/locking/rwsem.c:1347 [inline] __down_write kernel/locking/rwsem.c:1356 [inline] down_write_nested+0xc0/0xcc kernel/locking/rwsem.c:1752 inode_lock_nested include/linux/fs.h:1074 [inline] lock_rename fs/namei.c:3787 [inline] __start_renaming+0x144/0x344 fs/namei.c:3880 filename_renameat2+0x500/0x72c fs/namei.c:6157 __do_sys_renameat fs/namei.c:6219 [inline] __se_sys_renameat fs/namei.c:6214 [inline] __arm64_sys_renameat+0xd0/0x100 fs/namei.c:6214 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:736 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 INFO: task udevd:4697 blocked for more than 145 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:0 pid:4697 tgid:4697 ppid:4338 task_flags:0x400140 flags:0x00800000 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:810 (T) context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1c04/0x2db8 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7283 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7340 rwsem_down_write_slowpath+0x6ec/0x1178 kernel/locking/rwsem.c:1215 __down_write_common kernel/locking/rwsem.c:1347 [inline] __down_write kernel/locking/rwsem.c:1356 [inline] down_write+0xb4/0xc0 kernel/locking/rwsem.c:1626 inode_lock include/linux/fs.h:1029 [inline] open_last_lookups fs/namei.c:4608 [inline] path_openat+0x890/0x2b88 fs/namei.c:4855 do_file_open+0x1c8/0x2e8 fs/namei.c:4887 do_sys_openat2+0x114/0x1e8 fs/open.c:1364 do_sys_open+0xac/0xdc fs/open.c:1370 __do_sys_openat fs/open.c:1386 [inline] __se_sys_openat fs/open.c:1381 [inline] __arm64_sys_openat+0xa0/0xbc fs/open.c:1381 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:736 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 INFO: task udevd:4699 blocked for more than 145 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:0 pid:4699 tgid:4699 ppid:4338 task_flags:0x400140 flags:0x00800000 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:810 (T) context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1c04/0x2db8 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7283 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7340 rwsem_down_write_slowpath+0x6ec/0x1178 kernel/locking/rwsem.c:1215 __down_write_common kernel/locking/rwsem.c:1347 [inline] __down_write kernel/locking/rwsem.c:1356 [inline] down_write+0xb4/0xc0 kernel/locking/rwsem.c:1626 inode_lock include/linux/fs.h:1029 [inline] open_last_lookups fs/namei.c:4608 [inline] path_openat+0x890/0x2b88 fs/namei.c:4855 do_file_open+0x1c8/0x2e8 fs/namei.c:4887 do_sys_openat2+0x114/0x1e8 fs/open.c:1364 do_sys_open+0xac/0xdc fs/open.c:1370 __do_sys_openat fs/open.c:1386 [inline] __se_sys_openat fs/open.c:1381 [inline] __arm64_sys_openat+0xa0/0xbc fs/open.c:1381 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:736 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 INFO: task udevd:5521 blocked for more than 145 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:0 pid:5521 tgid:5521 ppid:4338 task_flags:0x400140 flags:0x00800000 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:810 (T) context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1c04/0x2db8 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7283 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7340 rwsem_down_write_slowpath+0x6ec/0x1178 kernel/locking/rwsem.c:1215 __down_write_common kernel/locking/rwsem.c:1347 [inline] __down_write kernel/locking/rwsem.c:1356 [inline] down_write+0xb4/0xc0 kernel/locking/rwsem.c:1626 inode_lock include/linux/fs.h:1029 [inline] open_last_lookups fs/namei.c:4608 [inline] path_openat+0x890/0x2b88 fs/namei.c:4855 do_file_open+0x1c8/0x2e8 fs/namei.c:4887 do_sys_openat2+0x114/0x1e8 fs/open.c:1364 do_sys_open+0xac/0xdc fs/open.c:1370 __do_sys_openat fs/open.c:1386 [inline] __se_sys_openat fs/open.c:1381 [inline] __arm64_sys_openat+0xa0/0xbc fs/open.c:1381 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:736 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 INFO: task udevd:5615 blocked for more than 145 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:0 pid:5615 tgid:5615 ppid:4338 task_flags:0x400140 flags:0x00800000 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:810 (T) context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1c04/0x2db8 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7283 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7340 rwsem_down_write_slowpath+0x6ec/0x1178 kernel/locking/rwsem.c:1215 __down_write_common kernel/locking/rwsem.c:1347 [inline] __down_write kernel/locking/rwsem.c:1356 [inline] down_write+0xb4/0xc0 kernel/locking/rwsem.c:1626 inode_lock include/linux/fs.h:1029 [inline] open_last_lookups fs/namei.c:4608 [inline] path_openat+0x890/0x2b88 fs/namei.c:4855 do_file_open+0x1c8/0x2e8 fs/namei.c:4887 do_sys_openat2+0x114/0x1e8 fs/open.c:1364 do_sys_open+0xac/0xdc fs/open.c:1370 __do_sys_openat fs/open.c:1386 [inline] __se_sys_openat fs/open.c:1381 [inline] __arm64_sys_openat+0xa0/0xbc fs/open.c:1381 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:736 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 INFO: task udevd:6372 blocked for more than 145 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:0 pid:6372 tgid:6372 ppid:4338 task_flags:0x400140 flags:0x00800000 Call trace: __switch_to+0x2b0/0x6e0 arch/arm64/kernel/process.c:810 (T) context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1c04/0x2db8 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7283 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7340 rwsem_down_write_slowpath+0x6ec/0x1178 kernel/locking/rwsem.c:1215 __down_write_common kernel/locking/rwsem.c:1347 [inline] __down_write kernel/locking/rwsem.c:1356 [inline] down_write+0xb4/0xc0 kernel/locking/rwsem.c:1626 inode_lock include/linux/fs.h:1029 [inline] open_last_lookups fs/namei.c:4608 [inline] path_openat+0x890/0x2b88 fs/namei.c:4855 do_file_open+0x1c8/0x2e8 fs/namei.c:4887 do_sys_openat2+0x114/0x1e8 fs/open.c:1364 do_sys_open+0xac/0xdc fs/open.c:1370 __do_sys_openat fs/open.c:1386 [inline] __se_sys_openat fs/open.c:1381 [inline] __arm64_sys_openat+0xa0/0xbc fs/open.c:1381 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:736 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 Showing all locks held in the system: 1 lock held by kthreadd/2: 3 locks held by kworker/0:1/11: #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 kernel/workqueue.c:3397 #1: ffff80008eb37c40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #1: ffff80008eb37c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 kernel/workqueue.c:3397 #2: ffff800089cca300 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 3 locks held by kworker/u8:1/15: 2 locks held by kworker/1:0/24: 1 lock held by khungtaskd/31: #0: ffff800088bf70c0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffff800088bf70c0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #0: ffff800088bf70c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 kernel/locking/lockdep.c:6775 3 locks held by kworker/u8:2/39: 3 locks held by kworker/u8:3/40: 2 locks held by pr/ttyAMA-1/41: 3 locks held by kworker/u8:4/179: 2 locks held by kworker/u8:5/1059: #0: ffff0000c004c940 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #0: ffff0000c004c940 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 kernel/workqueue.c:3397 #1: ffff800095197c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #1: ffff800095197c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 kernel/workqueue.c:3397 2 locks held by kworker/u8:6/1467: #0: ffff0000c004c940 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #0: ffff0000c004c940 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 kernel/workqueue.c:3397 #1: ffff800095f87c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #1: ffff800095f87c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 kernel/workqueue.c:3397 3 locks held by kworker/R-ipv6_/2819: #0: ffff0000cedae940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #0: ffff0000cedae940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 kernel/workqueue.c:3397 #1: ffff8000995c7c60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #1: ffff8000995c7c60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 kernel/workqueue.c:3397 #2: ffff800089cca300 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 1 lock held by jbd2/nvme0n1p2-/4303: 1 lock held by klogd/4327: 2 locks held by udevd/4338: 2 locks held by getty/4487: #0: ffff0000d41130a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80009238e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf70 drivers/tty/n_tty.c:2211 2 locks held by udevd/4695: #0: ffff0000d49da410 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c fs/namespace.c:493 #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1074 [inline] #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: lock_rename fs/namei.c:3787 [inline] #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: __start_renaming+0x144/0x344 fs/namei.c:3880 2 locks held by udevd/4697: #0: ffff0000d49da410 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c fs/namespace.c:493 #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: inode_lock include/linux/fs.h:1029 [inline] #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: open_last_lookups fs/namei.c:4608 [inline] #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: path_openat+0x890/0x2b88 fs/namei.c:4855 2 locks held by udevd/4698: #0: ffff0000d49da410 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c fs/namespace.c:493 #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1074 [inline] #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: lock_rename fs/namei.c:3787 [inline] #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: __start_renaming+0x144/0x344 fs/namei.c:3880 2 locks held by udevd/4699: #0: ffff0000d49da410 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c fs/namespace.c:493 #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: inode_lock include/linux/fs.h:1029 [inline] #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: open_last_lookups fs/namei.c:4608 [inline] #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: path_openat+0x890/0x2b88 fs/namei.c:4855 1 lock held by syz-executor/4705: 2 locks held by syz-executor/4721: 1 lock held by syz-executor/4726: 2 locks held by kworker/1:3/4784: 3 locks held by kworker/u8:8/5202: 2 locks held by udevd/5521: #0: ffff0000d49da410 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c fs/namespace.c:493 #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: inode_lock include/linux/fs.h:1029 [inline] #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: open_last_lookups fs/namei.c:4608 [inline] #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: path_openat+0x890/0x2b88 fs/namei.c:4855 2 locks held by udevd/5522: #0: ffff0000d49da410 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c fs/namespace.c:493 #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1074 [inline] #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: lock_rename fs/namei.c:3787 [inline] #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: __start_renaming+0x144/0x344 fs/namei.c:3880 2 locks held by udevd/5615: #0: ffff0000d49da410 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c fs/namespace.c:493 #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: inode_lock include/linux/fs.h:1029 [inline] #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: open_last_lookups fs/namei.c:4608 [inline] #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: path_openat+0x890/0x2b88 fs/namei.c:4855 2 locks held by kworker/u8:9/5635: 3 locks held by kworker/u8:10/5636: 2 locks held by kworker/u8:11/6330: #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 kernel/workqueue.c:3397 #1: ffff8000962e7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #1: ffff8000962e7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 kernel/workqueue.c:3397 3 locks held by kworker/u8:12/6333: 2 locks held by kworker/u8:13/6334: 2 locks held by udevd/6363: 3 locks held by udevd/6370: 2 locks held by udevd/6371: #0: ffff0000d49da410 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c fs/namespace.c:493 #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: inode_lock include/linux/fs.h:1029 [inline] #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: open_last_lookups fs/namei.c:4608 [inline] #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: path_openat+0x890/0x2b88 fs/namei.c:4855 2 locks held by udevd/6372: #0: ffff0000d49da410 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c fs/namespace.c:493 #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: inode_lock include/linux/fs.h:1029 [inline] #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: open_last_lookups fs/namei.c:4608 [inline] #1: ffff0000cdde6880 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: path_openat+0x890/0x2b88 fs/namei.c:4855 2 locks held by udevd/6373: 1 lock held by syz-executor/7613: 1 lock held by syz.4.933/7820: 1 lock held by modprobe/7862: 2 locks held by rm/7863: 1 lock held by modprobe/7864: 3 locks held by kworker/u8:14/7866: #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 kernel/workqueue.c:3397 #1: ffff800092f97c40 ((work_completion)(&(&net->ipv4.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #1: ffff800092f97c40 ((work_completion)(&(&net->ipv4.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 kernel/workqueue.c:3397 #2: ffff800089cca300 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 4 locks held by kworker/u8:15/7867: #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 kernel/workqueue.c:3397 #1: ffff800092fa7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3289 [inline] #1: ffff800092fa7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 kernel/workqueue.c:3397 #2: ffff800089cca300 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80 #3: ffff0000d98e0780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6646 [inline] #3: ffff0000d98e0780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_leave_invalid_chans net/wireless/reg.c:2454 [inline] #3: ffff0000d98e0780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x144/0x10e8 net/wireless/reg.c:2469 2 locks held by syz-executor/7868: 3 locks held by kworker/u8:16/7869: 3 locks held by kworker/u8:17/7870: =============================================