syzbot

 sign-in | mailing list | source | docs
🐞 Open [1602]
≡ Subsystems
🐞 Fixed [6228]
🐞 Invalid [15761]
⬇ Missing Backports [184]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

INFO: task hung in rfkill_sync_work

Status: upstream: reported C repro on 2022/12/26 19:45
Subsystems: net nfc
[Documentation on labels]
Reported-by: syzbot+9ef743bba3a17c756174@syzkaller.appspotmail.com
First crash: 911d, last: 3d13h
Cause bisection: introduced by (bisect log) :
commit 3e3b5dfcd16a3e254aab61bd1e8c417dd4503102
Author: Lin Ma <linma@zju.edu.cn>
Date: Tue Nov 16 15:26:52 2021 +0000

  NFC: reorder the logic in nfc_{un,}register_device

Crash: INFO: task hung in rfkill_global_led_trigger_worker (log)
Repro: C syz .config
  
▶ ▼ Discussions (12)
Title Replies (including bot) Last reply
[syzbot] Monthly nfc report (Mar 2025) 0 (1) 2025/03/04 15:15
[syzbot] Monthly nfc report (Dec 2024) 0 (1) 2025/01/02 13:21
Re: [Bug] Deadlock between rfkill_fop_write() and nfc_unregister_device() 5 (5) 2024/12/17 12:38
[syzbot] Monthly nfc report (Sep 2024) 0 (1) 2024/09/17 21:51
[syzbot] Monthly nfc report (Aug 2024) 0 (1) 2024/08/19 07:39
[syzbot] Monthly nfc report (Apr 2024) 0 (1) 2024/04/15 09:23
[syzbot] Monthly nfc report (Feb 2024) 0 (1) 2024/02/12 10:26
[syzbot] Monthly nfc report (Oct 2023) 0 (1) 2023/10/09 12:45
[syzbot] Monthly nfc report (Sep 2023) 0 (1) 2023/09/06 08:12
[PATCH] drivers/core: Replace lockdep_set_novalidate_class() with unique class keys 47 (47) 2023/02/20 17:32
Converting dev->mutex into dev->spinlock ? 29 (29) 2023/02/08 00:34
[syzbot] INFO: task hung in rfkill_sync_work 1 (3) 2023/01/26 14:18
▶ ▼ Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 INFO: task hung in rfkill_sync_work 1 639d 639d 0/3 auto-obsoleted due to no activity on 2023/11/22 22:14
linux-6.1 INFO: task hung in rfkill_sync_work (3) origin:upstream syz 2 38d 52d 0/3 upstream: reported syz repro on 2025/03/23 22:31
linux-5.15 INFO: task hung in rfkill_sync_work 1 620d 620d 0/3 auto-obsoleted due to no activity on 2023/12/11 11:27
linux-6.1 INFO: task hung in rfkill_sync_work (2) 1 185d 185d 0/3 auto-obsoleted due to no activity on 2025/02/18 16:28
▶ ▼ Last patch testing requests (12)
Created Duration User Patch Repo Result
2025/04/14 02:24 18m retest repro upstream report log
2025/04/08 06:05 18m retest repro upstream report log
2025/04/08 04:20 35m retest repro upstream report log
2025/04/08 03:13 20m retest repro upstream report log
2025/03/19 10:01 20m retest repro upstream report log
2025/02/03 00:54 18m retest repro upstream report log
2025/01/16 03:47 36m retest repro upstream report log
2025/01/16 02:10 27m retest repro upstream report log
2025/01/16 00:46 18m retest repro upstream report log
2024/12/29 23:33 18m retest repro upstream report log
2023/07/30 11:56 48m hdanton@sina.com patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master OK log
2023/02/11 00:55 14m penguin-kernel@i-love.sakura.ne.jp patch upstream report log
▶ ▼ Fix bisection attempts (8)
Created Duration User Patch Repo Result
2024/10/28 21:02 3h43m bisect fix upstream OK (0) job log log
2024/08/06 09:29 2h26m bisect fix upstream OK (0) job log log
2024/07/06 21:44 3h52m bisect fix upstream OK (0) job log log
2023/12/19 18:26 1h55m bisect fix upstream OK (0) job log log
2023/11/19 02:07 3h10m bisect fix upstream OK (0) job log log
2023/05/31 06:11 32m bisect fix upstream OK (0) job log log
2023/04/23 17:30 32m bisect fix upstream OK (0) job log log
2023/03/15 12:10 42m bisect fix upstream OK (0) job log log

Sample crash report:
INFO: task kworker/0:6:5116 blocked for more than 143 seconds.
      Not tainted 6.5.0-rc4-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:6     state:D stack:28064 pid:5116  ppid:2      flags:0x00004000
Workqueue: events rfkill_sync_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5381 [inline]
 __schedule+0xee1/0x59f0 kernel/sched/core.c:6710
 schedule+0xe7/0x1b0 kernel/sched/core.c:6786
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6845
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x967/0x1340 kernel/locking/mutex.c:747
 rfkill_sync_work+0x1c/0xc0 net/rfkill/core.c:1040
 process_one_work+0xaa2/0x16f0 kernel/workqueue.c:2597
 worker_thread+0x687/0x1110 kernel/workqueue.c:2748
 kthread+0x33a/0x430 kernel/kthread.c:389
 ret_from_fork+0x2c/0x70 arch/x86/kernel/process.c:145
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304
 </TASK>
INFO: task kworker/0:7:5167 blocked for more than 143 seconds.
      Not tainted 6.5.0-rc4-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:7     state:D stack:28288 pid:5167  ppid:2      flags:0x00004000
Workqueue: events rfkill_global_led_trigger_worker
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5381 [inline]
 __schedule+0xee1/0x59f0 kernel/sched/core.c:6710
 schedule+0xe7/0x1b0 kernel/sched/core.c:6786
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6845
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x967/0x1340 kernel/locking/mutex.c:747
 rfkill_global_led_trigger_worker+0x1b/0x160 net/rfkill/core.c:181
 process_one_work+0xaa2/0x16f0 kernel/workqueue.c:2597
 worker_thread+0x687/0x1110 kernel/workqueue.c:2748
 kthread+0x33a/0x430 kernel/kthread.c:389
 ret_from_fork+0x2c/0x70 arch/x86/kernel/process.c:145
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304
 </TASK>
INFO: task syz-executor555:5770 blocked for more than 143 seconds.
      Not tainted 6.5.0-rc4-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor555 state:D stack:27792 pid:5770  ppid:5041   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5381 [inline]
 __schedule+0xee1/0x59f0 kernel/sched/core.c:6710
 schedule+0xe7/0x1b0 kernel/sched/core.c:6786
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6845
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x967/0x1340 kernel/locking/mutex.c:747
 rfkill_fop_open+0x13c/0x750 net/rfkill/core.c:1163
 misc_open+0x3da/0x4c0 drivers/char/misc.c:165
 chrdev_open+0x277/0x700 fs/char_dev.c:414
 do_dentry_open+0x88b/0x1780 fs/open.c:914
 do_open fs/namei.c:3636 [inline]
 path_openat+0x19af/0x29c0 fs/namei.c:3793
 do_filp_open+0x1de/0x430 fs/namei.c:3820
 do_sys_openat2+0x176/0x1e0 fs/open.c:1407
 do_sys_open fs/open.c:1422 [inline]
 __do_sys_openat fs/open.c:1438 [inline]
 __se_sys_openat fs/open.c:1433 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1433
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f4af4a11b69
RSP: 002b:00007fff00e038e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4af4a11b69
RDX: 0000000000000801 RSI: 0000000020000040 RDI: ffffffffffffff9c
RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000004bfa7
R13: 00007fff00e038fc R14: 00007fff00e03910 R15: 00007fff00e03900
 </TASK>
INFO: task syz-executor555:5774 blocked for more than 144 seconds.
      Not tainted 6.5.0-rc4-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor555 state:D stack:27712 pid:5774  ppid:5039   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5381 [inline]
 __schedule+0xee1/0x59f0 kernel/sched/core.c:6710
 schedule+0xe7/0x1b0 kernel/sched/core.c:6786
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6845
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x967/0x1340 kernel/locking/mutex.c:747
 rfkill_unregister+0xde/0x2c0 net/rfkill/core.c:1130
 nfc_unregister_device+0x94/0x330 net/nfc/core.c:1167
 virtual_ncidev_close+0x51/0xa0 drivers/nfc/virtual_ncidev.c:163
 __fput+0x3fd/0xac0 fs/file_table.c:384
 task_work_run+0x14d/0x240 kernel/task_work.c:179
 exit_task_work include/linux/task_work.h:38 [inline]
 do_exit+0xa99/0x2a20 kernel/exit.c:874
 do_group_exit+0xd4/0x2a0 kernel/exit.c:1024
 __do_sys_exit_group kernel/exit.c:1035 [inline]
 __se_sys_exit_group kernel/exit.c:1033 [inline]
 __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1033
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f4af4a0fcb9
RSP: 002b:00007fff00e03888 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4af4a0fcb9
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 00007f4af4a8a290 R08: ffffffffffffffb8 R09: 00000000000000a0
R10: 00000000000000a0 R11: 0000000000000246 R12: 00007f4af4a8a290
R13: 0000000000000000 R14: 00007f4af4a8ad00 R15: 00007f4af49e0e50
 </TASK>
INFO: task syz-executor555:5777 blocked for more than 144 seconds.
      Not tainted 6.5.0-rc4-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor555 state:D stack:27680 pid:5777  ppid:5035   flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5381 [inline]
 __schedule+0xee1/0x59f0 kernel/sched/core.c:6710
 schedule+0xe7/0x1b0 kernel/sched/core.c:6786
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6845
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x967/0x1340 kernel/locking/mutex.c:747
 device_lock include/linux/device.h:958 [inline]
 nfc_dev_down+0x2d/0x2d0 net/nfc/core.c:143
 nfc_rfkill_set_block+0x39/0xd0 net/nfc/core.c:179
 rfkill_set_block+0x200/0x550 net/rfkill/core.c:345
 rfkill_fop_write+0x2d4/0x570 net/rfkill/core.c:1286
 vfs_write+0x2a4/0xe40 fs/read_write.c:582
 ksys_write+0x1f0/0x250 fs/read_write.c:637
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f4af4a11b69
RSP: 002b:00007fff00e038e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4af4a11b69
RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000004
RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0
R10: 00000000000000a0 R11: 0000000000000246 R12: 000000000004bf51
R13: 00007fff00e038fc R14: 00007fff00e03910 R15: 00007fff00e03900
 </TASK>
INFO: task syz-executor555:5788 blocked for more than 144 seconds.
      Not tainted 6.5.0-rc4-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor555 state:D stack:28400 pid:5788  ppid:5036   flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5381 [inline]
 __schedule+0xee1/0x59f0 kernel/sched/core.c:6710
 schedule+0xe7/0x1b0 kernel/sched/core.c:6786
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6845
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x967/0x1340 kernel/locking/mutex.c:747
 misc_open+0x59/0x4c0 drivers/char/misc.c:129
 chrdev_open+0x277/0x700 fs/char_dev.c:414
 do_dentry_open+0x88b/0x1780 fs/open.c:914
 do_open fs/namei.c:3636 [inline]
 path_openat+0x19af/0x29c0 fs/namei.c:3793
 do_filp_open+0x1de/0x430 fs/namei.c:3820
 do_sys_openat2+0x176/0x1e0 fs/open.c:1407
 do_sys_open fs/open.c:1422 [inline]
 __do_sys_openat fs/open.c:1438 [inline]
 __se_sys_openat fs/open.c:1433 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1433
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f4af4a11b69
RSP: 002b:00007fff00e038e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4af4a11b69
RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c
RBP: 00000000000f4240 R08: 0000000000000000 R09: 00000000000000a0
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000004bfec
R13: 00007fff00e038fc R14: 00007fff00e03910 R15: 00007fff00e03900
 </TASK>
INFO: task syz-executor555:5791 blocked for more than 144 seconds.
      Not tainted 6.5.0-rc4-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor555 state:D stack:28416 pid:5791  ppid:5040   flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5381 [inline]
 __schedule+0xee1/0x59f0 kernel/sched/core.c:6710
 schedule+0xe7/0x1b0 kernel/sched/core.c:6786
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6845
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x967/0x1340 kernel/locking/mutex.c:747
 misc_open+0x59/0x4c0 drivers/char/misc.c:129
 chrdev_open+0x277/0x700 fs/char_dev.c:414
 do_dentry_open+0x88b/0x1780 fs/open.c:914
 do_open fs/namei.c:3636 [inline]
 path_openat+0x19af/0x29c0 fs/namei.c:3793
 do_filp_open+0x1de/0x430 fs/namei.c:3820
 do_sys_openat2+0x176/0x1e0 fs/open.c:1407
 do_sys_open fs/open.c:1422 [inline]
 __do_sys_openat fs/open.c:1438 [inline]
 __se_sys_openat fs/open.c:1433 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1433
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f4af4a11b69
RSP: 002b:00007fff00e038e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4af4a11b69
RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c
RBP: 00000000000f4240 R08: 0000000000000000 R09: 00000000000000a0
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000004c016
R13: 00007fff00e038fc R14: 00007fff00e03910 R15: 00007fff00e03900
 </TASK>
INFO: task syz-executor555:5795 blocked for more than 145 seconds.
      Not tainted 6.5.0-rc4-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor555 state:D stack:28400 pid:5795  ppid:5038   flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5381 [inline]
 __schedule+0xee1/0x59f0 kernel/sched/core.c:6710
 schedule+0xe7/0x1b0 kernel/sched/core.c:6786
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6845
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x967/0x1340 kernel/locking/mutex.c:747
 misc_open+0x59/0x4c0 drivers/char/misc.c:129
 chrdev_open+0x277/0x700 fs/char_dev.c:414
 do_dentry_open+0x88b/0x1780 fs/open.c:914
 do_open fs/namei.c:3636 [inline]
 path_openat+0x19af/0x29c0 fs/namei.c:3793
 do_filp_open+0x1de/0x430 fs/namei.c:3820
 do_sys_openat2+0x176/0x1e0 fs/open.c:1407
 do_sys_open fs/open.c:1422 [inline]
 __do_sys_openat fs/open.c:1438 [inline]
 __se_sys_openat fs/open.c:1433 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1433
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f4af4a11b69
RSP: 002b:00007fff00e038e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4af4a11b69
RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c
RBP: 00000000000f4240 R08: 0000000000000000 R09: 00000000000000a0
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000004bfd6
R13: 00007fff00e038fc R14: 00007fff00e03910 R15: 00007fff00e03900
 </TASK>

Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
 #0: ffffffff8c9a2730 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x2c/0xe20 kernel/rcu/tasks.h:522
1 lock held by rcu_tasks_trace/13:
 #0: ffffffff8c9a2430 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x2c/0xe20 kernel/rcu/tasks.h:522
1 lock held by khungtaskd/27:
 #0: ffffffff8c9a3340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 kernel/locking/lockdep.c:6615
2 locks held by getty/4772:
 #0: ffff88802a655098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc900020482f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfcb/0x1480 drivers/tty/n_tty.c:2187
3 locks held by kworker/0:6/5116:
 #0: ffff888012869d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:20 [inline]
 #0: ffff888012869d38 ((wq_completion)events){+.+.}-{0:0}, at: raw_atomic64_set include/linux/atomic/atomic-arch-fallback.h:2608 [inline]
 #0: ffff888012869d38 ((wq_completion)events){+.+.}-{0:0}, at: raw_atomic_long_set include/linux/atomic/atomic-long.h:79 [inline]
 #0: ffff888012869d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:3196 [inline]
 #0: ffff888012869d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:675 [inline]
 #0: ffff888012869d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:702 [inline]
 #0: ffff888012869d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x96a/0x16f0 kernel/workqueue.c:2567
 #1: ffffc9000370fd80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x99e/0x16f0 kernel/workqueue.c:2571
 #2: ffffffff8e84d088 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_sync_work+0x1c/0xc0 net/rfkill/core.c:1040
3 locks held by kworker/0:7/5167:
 #0: ffff888012869d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:20 [inline]
 #0: ffff888012869d38 ((wq_completion)events){+.+.}-{0:0}, at: raw_atomic64_set include/linux/atomic/atomic-arch-fallback.h:2608 [inline]
 #0: ffff888012869d38 ((wq_completion)events){+.+.}-{0:0}, at: raw_atomic_long_set include/linux/atomic/atomic-long.h:79 [inline]
 #0: ffff888012869d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:3196 [inline]
 #0: ffff888012869d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:675 [inline]
 #0: ffff888012869d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:702 [inline]
 #0: ffff888012869d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x96a/0x16f0 kernel/workqueue.c:2567
 #1: ffffc900037cfd80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x99e/0x16f0 kernel/workqueue.c:2571
 #2: ffffffff8e84d088 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x1b/0x160 net/rfkill/core.c:181
2 locks held by syz-executor555/5770:
 #0: ffffffff8d4d6c28 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 drivers/char/misc.c:129
 #1: ffffffff8e84d088 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x13c/0x750 net/rfkill/core.c:1163
2 locks held by syz-executor555/5774:
 #0: ffff88807da70100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:958 [inline]
 #0: ffff88807da70100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x60/0x330 net/nfc/core.c:1165
 #1: ffffffff8e84d088 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xde/0x2c0 net/rfkill/core.c:1130
2 locks held by syz-executor555/5777:
 #0: ffffffff8e84d088 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x16e/0x570 net/rfkill/core.c:1278
 #1: ffff88807da70100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:958 [inline]
 #1: ffff88807da70100 (&dev->mutex){....}-{3:3}, at: nfc_dev_down+0x2d/0x2d0 net/nfc/core.c:143
1 lock held by syz-executor555/5788:
 #0: ffffffff8d4d6c28 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 drivers/char/misc.c:129
1 lock held by syz-executor555/5791:
 #0: ffffffff8d4d6c28 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 drivers/char/misc.c:129
1 lock held by syz-executor555/5795:
 #0: ffffffff8d4d6c28 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 drivers/char/misc.c:129

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.5.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xd9/0x1b0 lib/dump_stack.c:106
 nmi_cpu_backtrace+0x277/0x380 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x2ac/0x310 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline]
 watchdog+0xf29/0x11b0 kernel/hung_task.c:379
 kthread+0x33a/0x430 kernel/kthread.c:389
 ret_from_fork+0x2c/0x70 arch/x86/kernel/process.c:145
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 47 Comm: kworker/u4:3 Not tainted 6.5.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:__sanitizer_cov_trace_pc+0x60/0x70 kernel/kcov.c:225
Code: 82 e0 15 00 00 83 f8 02 75 20 48 8b 8a e8 15 00 00 8b 92 e4 15 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 <c3> 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 f3 0f 1e fa 41 57
RSP: 0018:ffffc90000d8f988 EFLAGS: 00000293
RAX: 0000000000000000 RBX: ffffc90000d8fa70 RCX: 0000000000000000
RDX: ffff8880142f0080 RSI: ffffffff8a262619 RDI: ffffc90000d8fad0
RBP: ffffffff8a6672ae R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8a6672af
R13: 000000000000000f R14: 0000000000000000 R15: ffffffff8a6672aa
FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005594fb609e98 CR3: 000000000c776000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 insn_get_displacement+0x2a9/0x680 arch/x86/lib/insn.c:494
 insn_get_immediate+0x550/0x1c50 arch/x86/lib/insn.c:632
 insn_get_length arch/x86/lib/insn.c:707 [inline]
 insn_decode+0x2ae/0x340 arch/x86/lib/insn.c:747
 text_poke_loc_init+0xc2/0x4d0 arch/x86/kernel/alternative.c:2315
 arch_jump_label_transform_queue+0x97/0x100 arch/x86/kernel/jump_label.c:138
 __jump_label_update+0x125/0x420 kernel/jump_label.c:475
 jump_label_update+0x32e/0x410 kernel/jump_label.c:829
 static_key_disable_cpuslocked+0x154/0x1b0 kernel/jump_label.c:235
 static_key_disable+0x1a/0x20 kernel/jump_label.c:243
 toggle_allocation_gate mm/kfence/core.c:836 [inline]
 toggle_allocation_gate+0x13f/0x250 mm/kfence/core.c:823
 process_one_work+0xaa2/0x16f0 kernel/workqueue.c:2597
 worker_thread+0x687/0x1110 kernel/workqueue.c:2748
 kthread+0x33a/0x430 kernel/kthread.c:389
 ret_from_fork+0x2c/0x70 arch/x86/kernel/process.c:145
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304
 </TASK>
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.524 msecs

Crashes (47):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/07/31 19:39 upstream 5d0c230f1de8 2a0d0f29 .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in rfkill_sync_work
2023/07/01 17:59 upstream b25f62ccb490 af3053d2 .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in rfkill_sync_work
2023/01/30 08:23 upstream ab072681eabe 9dfcf09c .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: task hung in rfkill_sync_work
2023/06/05 04:37 upstream 6f64a5ebe1dc a4ae4f42 .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in rfkill_sync_work
2022/12/22 19:27 upstream 9d2f6060fe4c c692fab1 .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in rfkill_sync_work
2025/05/11 12:11 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in rfkill_sync_work
2025/03/25 02:32 upstream 38fec10eb60d 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in rfkill_sync_work
2025/03/05 06:12 upstream 48a5eed9ad58 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in rfkill_sync_work
2025/02/20 02:03 upstream 6537cfb395f3 cbd8edab .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in rfkill_sync_work
2025/02/17 17:46 upstream 0ad2507d5d93 9be4ace3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in rfkill_sync_work
2025/01/19 13:25 upstream fda5e3f28400 f2cb035c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in rfkill_sync_work
2025/01/01 14:05 upstream ccb98ccef0e5 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in rfkill_sync_work
2024/12/15 23:27 upstream 2d8308bf5b67 7cbfbb3a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in rfkill_sync_work
2024/12/11 10:54 upstream f92f4749861b cfc402b4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in rfkill_sync_work
2024/12/07 13:39 upstream b5f217084ab3 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in rfkill_sync_work
2024/11/27 05:10 upstream 7eef7e306d3c 52b38cc1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in rfkill_sync_work
2024/11/24 14:05 upstream 9f16d5e6f220 68da6d95 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in rfkill_sync_work
2024/10/31 19:37 upstream 0fc810ae3ae1 96eb609f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in rfkill_sync_work
2024/09/27 05:32 upstream 075dbe9f6e3c 9314348a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in rfkill_sync_work
2024/08/18 21:45 upstream c3f2d783a459 dbc93b08 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in rfkill_sync_work
2024/05/04 16:59 upstream 3d25a941ea50 610f2a54 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in rfkill_sync_work
2024/05/04 04:35 upstream 3d25a941ea50 610f2a54 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in rfkill_sync_work
2024/05/02 06:39 upstream 0106679839f7 3ba885bc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: task hung in rfkill_sync_work
2024/04/08 13:12 upstream 480e035fc4c7 ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in rfkill_sync_work
2024/03/30 17:23 upstream 480e035fc4c7 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in rfkill_sync_work
2024/03/28 13:42 upstream 480e035fc4c7 120789fd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in rfkill_sync_work
2023/10/19 16:40 upstream dd72f9c7e512 42e1d524 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs INFO: task hung in rfkill_sync_work
2023/10/15 01:48 upstream 70f8c6f8f880 6388bc36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: task hung in rfkill_sync_work
2023/09/28 16:37 upstream 633b47cb009d d265efd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs INFO: task hung in rfkill_sync_work
2023/09/26 16:03 upstream 6465e260f487 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in rfkill_sync_work
2023/08/30 16:04 upstream 6c1b980a7e79 84803932 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs INFO: task hung in rfkill_sync_work
2025/05/09 06:09 upstream 9c69f8884904 bb813bcc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in rfkill_sync_work
2025/04/21 04:34 upstream ac71fabf1567 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in rfkill_sync_work
2024/09/16 19:56 upstream adfc3ded5c33 49cf0773 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in rfkill_sync_work
2024/01/20 01:20 upstream 9d64bf433c53 21772ce4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in rfkill_sync_work
2023/06/05 17:56 upstream 9561de3a55be a4ae4f42 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in rfkill_sync_work
2023/02/12 20:41 upstream f339c2597ebb 93e26d60 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in rfkill_sync_work
2023/01/17 05:01 upstream d532dd102151 a63719e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: task hung in rfkill_sync_work
2022/12/29 21:26 upstream 2258c2dc850b 44712fbc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: task hung in rfkill_sync_work
2022/12/24 17:00 upstream 72a85e2b0a1e 9da18ae8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in rfkill_sync_work
2022/11/15 08:41 upstream e01d50cbd6ee 97de9cfc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs INFO: task hung in rfkill_sync_work
2023/03/22 00:45 upstream 2faac9a98f01 8b4eb097 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in rfkill_sync_work
2024/02/19 02:46 linux-next 2c3b09aac00d 578f7538 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root INFO: task hung in rfkill_sync_work
2023/08/31 02:07 linux-next 56585460cc2e 84803932 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root INFO: task hung in rfkill_sync_work
2024/01/18 05:13 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 0802e17d9aca 915053c7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 INFO: task hung in rfkill_sync_work
2023/05/01 06:11 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 14f8db1c0f9a 62df2017 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 INFO: task hung in rfkill_sync_work
2023/03/24 17:28 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci fe15c26ee26e 9700afae .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 INFO: task hung in rfkill_sync_work
* Struck through repros no longer work on HEAD.