INFO: task kworker/0:3:6233 blocked for more than 143 seconds. Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:3 state:D stack:0 pid:6233 tgid:6233 ppid:2 flags:0x00000008 Workqueue: events rfkill_sync_work Call trace: __switch_to+0x314/0x560 arch/arm64/kernel/process.c:553 context_switch kernel/sched/core.c:5400 [inline] __schedule+0x1498/0x24b4 kernel/sched/core.c:6727 __schedule_loop kernel/sched/core.c:6802 [inline] schedule+0xb8/0x19c kernel/sched/core.c:6817 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6874 __mutex_lock_common+0xbd8/0x21a0 kernel/locking/mutex.c:684 __mutex_lock kernel/locking/mutex.c:752 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:804 device_lock include/linux/device.h:990 [inline] nfc_dev_down net/nfc/core.c:143 [inline] nfc_rfkill_set_block+0x50/0x2d0 net/nfc/core.c:179 rfkill_set_block+0x18c/0x37c net/rfkill/core.c:346 rfkill_sync net/rfkill/core.c:379 [inline] rfkill_sync_work+0x124/0x20c net/rfkill/core.c:1060 process_one_work+0x694/0x1204 kernel/workqueue.c:2633 process_scheduled_works kernel/workqueue.c:2706 [inline] worker_thread+0x938/0xef4 kernel/workqueue.c:2787 kthread+0x288/0x310 kernel/kthread.c:388 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860 INFO: task syz-executor.2:7806 blocked for more than 143 seconds. Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:0 pid:7806 tgid:7806 ppid:6181 flags:0x0000000d Call trace: __switch_to+0x314/0x560 arch/arm64/kernel/process.c:553 context_switch kernel/sched/core.c:5400 [inline] __schedule+0x1498/0x24b4 kernel/sched/core.c:6727 __schedule_loop kernel/sched/core.c:6802 [inline] schedule+0xb8/0x19c kernel/sched/core.c:6817 schedule_timeout+0xb8/0x348 kernel/time/timer.c:2159 do_wait_for_common+0x30c/0x468 kernel/sched/completion.c:95 __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common kernel/sched/completion.c:127 [inline] wait_for_completion+0x48/0x60 kernel/sched/completion.c:148 __flush_work+0x12c/0x1c0 kernel/workqueue.c:3410 __cancel_work_timer+0x3e4/0x540 kernel/workqueue.c:3497 cancel_work_sync+0x24/0x38 kernel/workqueue.c:3533 rfkill_unregister+0x8c/0x210 net/rfkill/core.c:1143 nfc_unregister_device+0x98/0x290 net/nfc/core.c:1167 nci_unregister_device+0x1dc/0x21c net/nfc/nci/core.c:1312 virtual_ncidev_close+0x5c/0xa0 drivers/nfc/virtual_ncidev.c:168 __fput+0x30c/0x738 fs/file_table.c:376 __fput_sync+0x60/0x9c fs/file_table.c:461 __do_sys_close fs/open.c:1554 [inline] __se_sys_close fs/open.c:1539 [inline] __arm64_sys_close+0x150/0x1e0 fs/open.c:1539 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:48 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:133 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:152 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 Showing all locks held in the system: 1 lock held by khungtaskd/30: #0: ffff80008ee74ac0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:297 3 locks held by kworker/u4:3/41: 2 locks held by getty/5926: #0: ffff0000d1e090a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff800094f722f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41c/0x1228 drivers/tty/n_tty.c:2201 4 locks held by kworker/0:3/6233: #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x560/0x1204 kernel/workqueue.c:2606 #1: ffff800097ea7c20 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x5a0/0x1204 kernel/workqueue.c:2608 #2: ffff800091c0e588 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_sync_work+0x30/0x20c net/rfkill/core.c:1059 #3: ffff0000eea31100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:990 [inline] #3: ffff0000eea31100 (&dev->mutex){....}-{3:3}, at: nfc_dev_down net/nfc/core.c:143 [inline] #3: ffff0000eea31100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x2d0 net/nfc/core.c:179 1 lock held by syz-executor.0/7747: #0: ffff800091c0e588 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xb8/0x210 net/rfkill/core.c:1149 1 lock held by syz-executor.2/7806: #0: ffff0000eea31100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:990 [inline] #0: ffff0000eea31100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x6c/0x290 net/nfc/core.c:1165 2 locks held by syz-executor.2/8031: #0: ffff0000d9328118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x44/0x700 drivers/bluetooth/hci_vhci.c:479 #1: ffff800091c0e588 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x7d4 net/rfkill/core.c:1075 2 locks held by syz-executor.0/9092: #0: ffff0000ed81c918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x44/0x700 drivers/bluetooth/hci_vhci.c:479 #1: ffff800091c0e588 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x7d4 net/rfkill/core.c:1075 1 lock held by syz-executor.1/9341: #0: ffff800091c0e588 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xb8/0x210 net/rfkill/core.c:1149 2 locks held by syz-executor.1/10516: #0: ffff0000eefb6918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x44/0x700 drivers/bluetooth/hci_vhci.c:479 #1: ffff800091c0e588 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x7d4 net/rfkill/core.c:1075 2 locks held by syz-executor.2/10751: #0: ffff0000edfc5918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x44/0x700 drivers/bluetooth/hci_vhci.c:479 #1: ffff800091c0e588 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x7d4 net/rfkill/core.c:1075 2 locks held by syz-executor.4/10792: #0: ffff0000d9efb118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x44/0x700 drivers/bluetooth/hci_vhci.c:479 #1: ffff800091c0e588 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x7d4 net/rfkill/core.c:1075 2 locks held by syz-executor.0/10829: #0: ffff0000c5fa8918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x44/0x700 drivers/bluetooth/hci_vhci.c:479 #1: ffff800091c0e588 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x7d4 net/rfkill/core.c:1075 2 locks held by syz-executor.1/11589: #0: ffff0000c9b9c118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x44/0x700 drivers/bluetooth/hci_vhci.c:479 #1: ffff800091c0e588 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x7d4 net/rfkill/core.c:1075 3 locks held by syz-executor.3/11599: #0: ffff800090537008 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 drivers/char/misc.c:129 #1: ffff0000e9225100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:990 [inline] #1: ffff0000e9225100 (&dev->mutex){....}-{3:3}, at: nfc_register_device+0xb4/0x310 net/nfc/core.c:1128 #2: ffff800091c0e588 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x7d4 net/rfkill/core.c:1075 =============================================