INFO: task kworker/u8:0:11 blocked for more than 143 seconds.
Not tainted 6.12.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:0 state:D stack:23344 pid:11 tgid:11 ppid:2 flags:0x00004000
Workqueue: netns cleanup_net
Call Trace:
context_switch kernel/sched/core.c:5328 [inline]
__schedule+0xe55/0x5740 kernel/sched/core.c:6693
__schedule_loop kernel/sched/core.c:6770 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6785
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6842
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
rfkill_unregister+0xde/0x2c0 net/rfkill/core.c:1145
wiphy_unregister+0x134/0xc10 net/wireless/core.c:1098
ieee80211_unregister_hw+0x248/0x3a0 net/mac80211/main.c:1694
mac80211_hwsim_del_radio drivers/net/wireless/virtual/mac80211_hwsim.c:5625 [inline]
hwsim_exit_net+0x3ad/0x7d0 drivers/net/wireless/virtual/mac80211_hwsim.c:6505
ops_exit_list+0xb0/0x180 net/core/net_namespace.c:173
cleanup_net+0x5b7/0xb40 net/core/net_namespace.c:626
process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
process_scheduled_works kernel/workqueue.c:3310 [inline]
worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
INFO: task kworker/1:4:5876 blocked for more than 143 seconds.
Not tainted 6.12.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:4 state:D stack:23504 pid:5876 tgid:5876 ppid:2 flags:0x00004000
Workqueue: events rfkill_op_handler
Call Trace:
context_switch kernel/sched/core.c:5328 [inline]
__schedule+0xe55/0x5740 kernel/sched/core.c:6693
__schedule_loop kernel/sched/core.c:6770 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6785
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6842
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
device_lock include/linux/device.h:1014 [inline]
nfc_dev_down+0x2d/0x2e0 net/nfc/core.c:143
nfc_rfkill_set_block+0x39/0xe0 net/nfc/core.c:179
rfkill_set_block+0x203/0x560 net/rfkill/core.c:346
rfkill_epo+0x8e/0x1d0 net/rfkill/core.c:466
__rfkill_handle_global_op net/rfkill/input.c:60 [inline]
rfkill_op_handler+0x262/0x280 net/rfkill/input.c:108
process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
process_scheduled_works kernel/workqueue.c:3310 [inline]
worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
INFO: task kworker/1:5:5877 blocked for more than 143 seconds.
Not tainted 6.12.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:5 state:D stack:21744 pid:5877 tgid:5877 ppid:2 flags:0x00004000
Workqueue: events rfkill_global_led_trigger_worker
Call Trace:
context_switch kernel/sched/core.c:5328 [inline]
__schedule+0xe55/0x5740 kernel/sched/core.c:6693
__schedule_loop kernel/sched/core.c:6770 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6785
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6842
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
rfkill_global_led_trigger_worker+0x1b/0x160 net/rfkill/core.c:182
process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
process_scheduled_works kernel/workqueue.c:3310 [inline]
worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
INFO: task syz.1.667:8087 blocked for more than 144 seconds.
Not tainted 6.12.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.667 state:D stack:27232 pid:8087 tgid:8087 ppid:5824 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5328 [inline]
__schedule+0xe55/0x5740 kernel/sched/core.c:6693
__schedule_loop kernel/sched/core.c:6770 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6785
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6842
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
rfkill_unregister+0xde/0x2c0 net/rfkill/core.c:1145
hci_unregister_dev+0x323/0x620 net/bluetooth/hci_core.c:2715
vhci_release+0x79/0xf0 drivers/bluetooth/hci_vhci.c:664
__fput+0x3f6/0xb60 fs/file_table.c:431
task_work_run+0x14e/0x250 kernel/task_work.c:239
exit_task_work include/linux/task_work.h:43 [inline]
do_exit+0xadd/0x2d70 kernel/exit.c:939
do_group_exit+0xd3/0x2a0 kernel/exit.c:1088
get_signal+0x25fb/0x2770 kernel/signal.c:2918
arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
__syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fbe11bb0845
RSP: 002b:00007fbe12925f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
RAX: fffffffffffffdfc RBX: 00007fbe11d35f80 RCX: 00007fbe11bb0845
RDX: 00007fbe12925fc0 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007fbe11bf175e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
R13: 0000000000000001 R14: 00007fbe11d35f80 R15: 00007ffc66be1428
INFO: task syz.1.2251:20857 blocked for more than 144 seconds.
Not tainted 6.12.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.2251 state:D stack:25808 pid:20857 tgid:20856 ppid:5824 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5328 [inline]
__schedule+0xe55/0x5740 kernel/sched/core.c:6693
__schedule_loop kernel/sched/core.c:6770 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6785
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6842
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
rfkill_unregister+0xde/0x2c0 net/rfkill/core.c:1145
nfc_unregister_device+0x94/0x330 net/nfc/core.c:1167
virtual_ncidev_close+0x4b/0xa0 drivers/nfc/virtual_ncidev.c:172
__fput+0x3f6/0xb60 fs/file_table.c:431
task_work_run+0x14e/0x250 kernel/task_work.c:239
exit_task_work include/linux/task_work.h:43 [inline]
do_exit+0xadd/0x2d70 kernel/exit.c:939
do_group_exit+0xd3/0x2a0 kernel/exit.c:1088
get_signal+0x25fb/0x2770 kernel/signal.c:2918
arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
__syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fbe11b7e759
RSP: 002b:00007fbe12926038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: 000000000000001c RBX: 00007fbe11d35f80 RCX: 00007fbe11b7e759
RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006
RBP: 00007fbe11bf175e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fbe11d35f80 R15: 00007ffc66be1428
INFO: task syz-executor:20906 blocked for more than 144 seconds.
Not tainted 6.12.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor state:D stack:22912 pid:20906 tgid:20906 ppid:1 flags:0x00000004
Call Trace:
context_switch kernel/sched/core.c:5328 [inline]
__schedule+0xe55/0x5740 kernel/sched/core.c:6693
__schedule_loop kernel/sched/core.c:6770 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6785
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6842
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
rfkill_fop_open+0x13b/0x750 net/rfkill/core.c:1178
misc_open+0x35a/0x420 drivers/char/misc.c:165
chrdev_open+0x237/0x6a0 fs/char_dev.c:414
do_dentry_open+0x6ca/0x1530 fs/open.c:958
vfs_open+0x82/0x3f0 fs/open.c:1088
do_open fs/namei.c:3774 [inline]
path_openat+0x1e6a/0x2d60 fs/namei.c:3933
do_filp_open+0x1dc/0x430 fs/namei.c:3960
do_sys_openat2+0x17a/0x1e0 fs/open.c:1415
do_sys_open fs/open.c:1430 [inline]
__do_sys_openat fs/open.c:1446 [inline]
__se_sys_openat fs/open.c:1441 [inline]
__x64_sys_openat+0x175/0x210 fs/open.c:1441
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f034717d0f0
RSP: 002b:00007ffd8f7adb10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f034717d0f0
RDX: 0000000000000002 RSI: 00007f03471f20af RDI: 00000000ffffff9c
RBP: 00007f03471f20af R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c
R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
INFO: task syz-executor:21206 blocked for more than 145 seconds.
Not tainted 6.12.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor state:D stack:23136 pid:21206 tgid:21206 ppid:1 flags:0x00000004
Call Trace:
context_switch kernel/sched/core.c:5328 [inline]
__schedule+0xe55/0x5740 kernel/sched/core.c:6693
__schedule_loop kernel/sched/core.c:6770 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6785
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6842
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
misc_open+0x63/0x420 drivers/char/misc.c:129
chrdev_open+0x237/0x6a0 fs/char_dev.c:414
do_dentry_open+0x6ca/0x1530 fs/open.c:958
vfs_open+0x82/0x3f0 fs/open.c:1088
do_open fs/namei.c:3774 [inline]
path_openat+0x1e6a/0x2d60 fs/namei.c:3933
do_filp_open+0x1dc/0x430 fs/namei.c:3960
do_sys_openat2+0x17a/0x1e0 fs/open.c:1415
do_sys_open fs/open.c:1430 [inline]
__do_sys_openat fs/open.c:1446 [inline]
__se_sys_openat fs/open.c:1441 [inline]
__x64_sys_openat+0x175/0x210 fs/open.c:1441
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe7ec37d0f0
RSP: 002b:00007fff2cde7830 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe7ec37d0f0
RDX: 0000000000000002 RSI: 00007fe7ec3f20af RDI: 00000000ffffff9c
RBP: 00007fe7ec3f20af R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c
R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
INFO: task syz.4.2264:21700 blocked for more than 145 seconds.
Not tainted 6.12.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.2264 state:D stack:28384 pid:21700 tgid:21699 ppid:5833 flags:0x00000004
Call Trace:
context_switch kernel/sched/core.c:5328 [inline]
__schedule+0xe55/0x5740 kernel/sched/core.c:6693
__schedule_loop kernel/sched/core.c:6770 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6785
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6842
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
misc_open+0x63/0x420 drivers/char/misc.c:129
chrdev_open+0x237/0x6a0 fs/char_dev.c:414
do_dentry_open+0x6ca/0x1530 fs/open.c:958
vfs_open+0x82/0x3f0 fs/open.c:1088
do_open fs/namei.c:3774 [inline]
path_openat+0x1e6a/0x2d60 fs/namei.c:3933
do_filp_open+0x1dc/0x430 fs/namei.c:3960
do_sys_openat2+0x17a/0x1e0 fs/open.c:1415
do_sys_open fs/open.c:1430 [inline]
__do_sys_openat fs/open.c:1446 [inline]
__se_sys_openat fs/open.c:1441 [inline]
__x64_sys_openat+0x175/0x210 fs/open.c:1441
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f811397e759
RSP: 002b:00007f8114733038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f8113b35f80 RCX: 00007f811397e759
RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c
RBP: 00007f81139f175e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f8113b35f80 R15: 00007ffce4287668
INFO: task syz.0.2265:21716 blocked for more than 145 seconds.
Not tainted 6.12.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.2265 state:D stack:28384 pid:21716 tgid:21715 ppid:5835 flags:0x00000004
Call Trace:
context_switch kernel/sched/core.c:5328 [inline]
__schedule+0xe55/0x5740 kernel/sched/core.c:6693
__schedule_loop kernel/sched/core.c:6770 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6785
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6842
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
misc_open+0x63/0x420 drivers/char/misc.c:129
chrdev_open+0x237/0x6a0 fs/char_dev.c:414
do_dentry_open+0x6ca/0x1530 fs/open.c:958
vfs_open+0x82/0x3f0 fs/open.c:1088
do_open fs/namei.c:3774 [inline]
path_openat+0x1e6a/0x2d60 fs/namei.c:3933
do_filp_open+0x1dc/0x430 fs/namei.c:3960
do_sys_openat2+0x17a/0x1e0 fs/open.c:1415
do_sys_open fs/open.c:1430 [inline]
__do_sys_openat fs/open.c:1446 [inline]
__se_sys_openat fs/open.c:1441 [inline]
__x64_sys_openat+0x175/0x210 fs/open.c:1441
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe46b57e759
RSP: 002b:00007fe46c42e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fe46b735f80 RCX: 00007fe46b57e759
RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffffffffffffff9c
RBP: 00007fe46b5f175e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007fe46b735f80 R15: 00007fffeb6cbb58
INFO: task syz-executor:21733 blocked for more than 146 seconds.
Not tainted 6.12.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor state:D stack:27696 pid:21733 tgid:21733 ppid:1 flags:0x00000000
Call Trace:
context_switch kernel/sched/core.c:5328 [inline]
__schedule+0xe55/0x5740 kernel/sched/core.c:6693
__schedule_loop kernel/sched/core.c:6770 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6785
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6842
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
misc_open+0x63/0x420 drivers/char/misc.c:129
chrdev_open+0x237/0x6a0 fs/char_dev.c:414
do_dentry_open+0x6ca/0x1530 fs/open.c:958
vfs_open+0x82/0x3f0 fs/open.c:1088
do_open fs/namei.c:3774 [inline]
path_openat+0x1e6a/0x2d60 fs/namei.c:3933
do_filp_open+0x1dc/0x430 fs/namei.c:3960
do_sys_openat2+0x17a/0x1e0 fs/open.c:1415
do_sys_open fs/open.c:1430 [inline]
__do_sys_openat fs/open.c:1446 [inline]
__se_sys_openat fs/open.c:1441 [inline]
__x64_sys_openat+0x175/0x210 fs/open.c:1441
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f41cd37d071
RSP: 002b:00007ffee16ee9c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f41cd37d071
RDX: 0000000000000002 RSI: 00007f41cd3f2004 RDI: 00000000ffffff9c
RBP: 00007f41cd3f2004 R08: 0000000000000000 R09: 00007f41ce06d6c0
R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c
R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
Showing all locks held in the system:
4 locks held by kworker/u8:0/11:
#0: ffff88801bee3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 kernel/workqueue.c:3204
#1: ffffc90000107d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205
#2: ffffffff8fecdf50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 net/core/net_namespace.c:580
#3: ffffffff90370cc8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xde/0x2c0 net/rfkill/core.c:1145
1 lock held by khungtaskd/30:
#0: ffffffff8e1b83c0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
#0: ffffffff8e1b83c0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
#0: ffffffff8e1b83c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 kernel/locking/lockdep.c:6720
1 lock held by klogd/5191:
#0: ffff8880b863eed8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:598
2 locks held by getty/5585:
#0: ffff888031a250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 drivers/tty/n_tty.c:2211
4 locks held by kworker/1:4/5876:
#0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 kernel/workqueue.c:3204
#1: ffffc900035efd80 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205
#2: ffffffff90370cc8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x55/0x1d0 net/rfkill/core.c:462
#3: ffff88804f161100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline]
#3: ffff88804f161100 (&dev->mutex){....}-{3:3}, at: nfc_dev_down+0x2d/0x2e0 net/nfc/core.c:143
3 locks held by kworker/1:5/5877:
#0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 kernel/workqueue.c:3204
#1: ffffc900035dfd80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205
#2: ffffffff90370cc8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x1b/0x160 net/rfkill/core.c:182
1 lock held by syz.1.667/8087:
#0: ffffffff90370cc8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xde/0x2c0 net/rfkill/core.c:1145
2 locks held by syz.1.2251/20857:
#0: ffff88804f161100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline]
#0: ffff88804f161100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x60/0x330 net/nfc/core.c:1165
#1: ffffffff90370cc8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xde/0x2c0 net/rfkill/core.c:1145
2 locks held by syz-executor/20906:
#0: ffffffff8eea5b48 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 drivers/char/misc.c:129
#1: ffffffff90370cc8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x13b/0x750 net/rfkill/core.c:1178
1 lock held by syz-executor/21206:
#0: ffffffff8eea5b48 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 drivers/char/misc.c:129
1 lock held by syz.4.2264/21700:
#0: ffffffff8eea5b48 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 drivers/char/misc.c:129
1 lock held by syz.0.2265/21716:
#0: ffffffff8eea5b48 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 drivers/char/misc.c:129
1 lock held by syz-executor/21733:
#0: ffffffff8eea5b48 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 drivers/char/misc.c:129
1 lock held by syz-executor/21737:
#0: ffffffff8eea5b48 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 drivers/char/misc.c:129
1 lock held by syz-executor/21739:
#0: ffffffff8eea5b48 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 drivers/char/misc.c:129
1 lock held by syz-executor/21741:
#0: ffffffff8eea5b48 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 drivers/char/misc.c:129
1 lock held by syz-executor/21743:
#0: ffffffff8eea5b48 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 drivers/char/misc.c:129
1 lock held by syz-executor/21745:
#0: ffffffff8eea5b48 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 drivers/char/misc.c:129
1 lock held by syz-executor/21747:
#0: ffffffff8eea5b48 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 drivers/char/misc.c:129
1 lock held by syz-executor/21749:
#0: ffffffff8eea5b48 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 drivers/char/misc.c:129
1 lock held by syz-executor/21751:
#0: ffffffff8eea5b48 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 drivers/char/misc.c:129
1 lock held by syz-executor/21753:
#0: ffffffff8eea5b48 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 drivers/char/misc.c:129
1 lock held by syz-executor/21759:
#0: ffffffff8eea5b48 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 drivers/char/misc.c:129
1 lock held by syz-executor/21761:
#0: ffffffff8eea5b48 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 drivers/char/misc.c:129
1 lock held by syz-executor/21763:
#0: ffffffff8eea5b48 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 drivers/char/misc.c:129
=============================================
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
watchdog+0xf0c/0x1240 kernel/hung_task.c:379
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.12.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
Workqueue: events_unbound nsim_dev_trap_report_work
RIP: 0010:__kasan_check_read+0x4/0x20 mm/kasan/shadow.c:31
Code: cc 48 83 c4 60 48 c7 c7 a8 8a 7b 8d 5b 5d 41 5c e9 51 f8 7d ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 0c 24 89 f6 31 d2 e9 2f f1 ff ff 66 66 2e 0f 1f 84 00 00 00
RSP: 0018:ffffc90000ab7978 EFLAGS: 00000006
RAX: 000000000000003a RBX: 0000000000000e9c RCX: 0000000000000006
RDX: 1ffff110041505f2 RSI: 0000000000000008 RDI: ffffffff96e2ee10
RBP: ffffc90000ab7ac8 R08: 0000000000000000 R09: fffffbfff2dc5da5
R10: ffffffff96e2ed2f R11: 0000000000000052 R12: ffff888020a82440
R13: 0000000000000040 R14: 0000000000000006 R15: 1ffff92000156f38
FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005634579c6d40 CR3: 000000000df7c000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
instrument_atomic_read include/linux/instrumented.h:68 [inline]
_test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
hlock_class+0x4e/0x130 kernel/locking/lockdep.c:228
mark_lock+0xb5/0xc60 kernel/locking/lockdep.c:4703
mark_held_locks+0x9f/0xe0 kernel/locking/lockdep.c:4321
__trace_hardirqs_on_caller kernel/locking/lockdep.c:4347 [inline]
lockdep_hardirqs_on_prepare+0x27a/0x420 kernel/locking/lockdep.c:4406
trace_hardirqs_on+0x36/0x40 kernel/trace/trace_preemptirq.c:61
kasan_quarantine_put+0x10a/0x240 mm/kasan/quarantine.c:234
kasan_slab_free include/linux/kasan.h:230 [inline]
slab_free_hook mm/slub.c:2342 [inline]
slab_free mm/slub.c:4579 [inline]
kmem_cache_free+0x152/0x4b0 mm/slub.c:4681
kfree_skbmem+0x1a4/0x1f0 net/core/skbuff.c:1148
__kfree_skb net/core/skbuff.c:1205 [inline]
consume_skb net/core/skbuff.c:1436 [inline]
consume_skb+0xcc/0x100 net/core/skbuff.c:1430
nsim_dev_trap_report drivers/net/netdevsim/dev.c:821 [inline]
nsim_dev_trap_report_work+0x878/0xc90 drivers/net/netdevsim/dev.c:851
process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
process_scheduled_works kernel/workqueue.c:3310 [inline]
worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244