INFO: task syz-executor:6499 blocked for more than 143 seconds. Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:6499 tgid:6499 ppid:1 task_flags:0x40014c flags:0x00000018 Call trace: __switch_to+0x414/0x834 arch/arm64/kernel/process.c:735 (T) context_switch kernel/sched/core.c:5382 [inline] __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6860 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6917 __mutex_lock_common+0xbd0/0x2190 kernel/locking/mutex.c:678 __mutex_lock kernel/locking/mutex.c:746 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:798 rfkill_unregister+0xb8/0x208 net/rfkill/core.c:1145 hci_unregister_dev+0x308/0x4a8 net/bluetooth/hci_core.c:2695 vhci_release+0x7c/0xd0 drivers/bluetooth/hci_vhci.c:665 __fput+0x340/0x75c fs/file_table.c:465 ____fput+0x20/0x58 fs/file_table.c:493 task_work_run+0x1dc/0x260 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x4e8/0x1998 kernel/exit.c:953 do_group_exit+0x194/0x22c kernel/exit.c:1102 __do_sys_exit_group kernel/exit.c:1113 [inline] __se_sys_exit_group kernel/exit.c:1111 [inline] pid_child_should_wake+0x0/0x1dc kernel/exit.c:1111 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x17c arch/arm64/kernel/entry-common.c:767 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:786 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 INFO: task kworker/1:4:6544 blocked for more than 143 seconds. Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:4 state:D stack:0 pid:6544 tgid:6544 ppid:2 task_flags:0x4208060 flags:0x00000010 Workqueue: events rfkill_global_led_trigger_worker Call trace: __switch_to+0x414/0x834 arch/arm64/kernel/process.c:735 (T) context_switch kernel/sched/core.c:5382 [inline] __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6860 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6917 __mutex_lock_common+0xbd0/0x2190 kernel/locking/mutex.c:678 __mutex_lock kernel/locking/mutex.c:746 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:798 rfkill_global_led_trigger_worker+0x30/0xe4 net/rfkill/core.c:182 process_one_work+0x7e8/0x156c kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3400 kthread+0x5fc/0x75c kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847 INFO: task syz.2.102:6891 blocked for more than 143 seconds. Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.102 state:D stack:0 pid:6891 tgid:6891 ppid:6491 task_flags:0x400040 flags:0x00000011 Call trace: __switch_to+0x414/0x834 arch/arm64/kernel/process.c:735 (T) context_switch kernel/sched/core.c:5382 [inline] __schedule+0x13b0/0x28d4 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6860 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6917 __mutex_lock_common+0xbd0/0x2190 kernel/locking/mutex.c:678 __mutex_lock kernel/locking/mutex.c:746 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:798 rfkill_unregister+0xb8/0x208 net/rfkill/core.c:1145 nfc_unregister_device+0x94/0x288 net/nfc/core.c:1167 nci_unregister_device+0x1dc/0x21c net/nfc/nci/core.c:1323 virtual_ncidev_close+0x5c/0xa0 drivers/nfc/virtual_ncidev.c:172 __fput+0x340/0x75c fs/file_table.c:465 ____fput+0x20/0x58 fs/file_table.c:493 task_work_run+0x1dc/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] do_notify_resume+0x16c/0x1ec arch/arm64/kernel/entry-common.c:151 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:169 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:178 [inline] el0_svc+0xb4/0x17c arch/arm64/kernel/entry-common.c:768 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:786 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 Showing all locks held in the system: 3 locks held by kworker/u8:1/14: 4 locks held by kworker/1:1/26: #0: ffff0000c0028d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff800097747bc0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 #2: ffff80009276a6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x58/0x158 net/rfkill/core.c:462 #3: ffff0000dc688100 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:922 [inline] #3: ffff0000dc688100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down net/nfc/core.c:143 [inline] #3: ffff0000dc688100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x4c/0x2a8 net/nfc/core.c:179 1 lock held by khungtaskd/32: #0: ffff80008f508920 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 include/linux/rcupdate.h:330 2 locks held by pr/ttyAMA0/46: 2 locks held by getty/6259: #0: ffff0000cd72e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80009b5eb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa0 drivers/tty/n_tty.c:2222 1 lock held by syz-executor/6493: #0: ffff80009276a6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xb8/0x208 net/rfkill/core.c:1145 1 lock held by syz-executor/6499: #0: ffff80009276a6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xb8/0x208 net/rfkill/core.c:1145 3 locks held by kworker/1:4/6544: #0: ffff0000c0028d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x658/0x156c kernel/workqueue.c:3212 #1: ffff8000a3717bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c kernel/workqueue.c:3212 #2: ffff80009276a6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x30/0xe4 net/rfkill/core.c:182 2 locks held by syz.2.102/6891: #0: ffff0000dc688100 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:922 [inline] #0: ffff0000dc688100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x68/0x288 net/nfc/core.c:1165 #1: ffff80009276a6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xb8/0x208 net/rfkill/core.c:1145 3 locks held by syz.1.318/7502: #0: ffff8000924f25b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x28/0x50 net/netlink/genetlink.c:1218 #1: ffff8000924f23c8 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffff8000924f23c8 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffff8000924f23c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0xf4/0x624 net/netlink/genetlink.c:1209 #2: ffff80009276a6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 3 locks held by syz.0.326/7518: #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 #1: ffff0000f267e100 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:922 [inline] #1: ffff0000f267e100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xac/0x304 net/nfc/core.c:1128 #2: ffff80009276a6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 2 locks held by syz.0.326/7522: #0: ffff8000924f25b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x28/0x50 net/netlink/genetlink.c:1218 #1: ffff8000924f23c8 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffff8000924f23c8 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffff8000924f23c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0xf4/0x624 net/netlink/genetlink.c:1209 1 lock held by syz-executor/7535: #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 2 locks held by syz.3.333/7539: #0: ffff0000c25230a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80009276a6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 1 lock held by syz-executor/7542: #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz-executor/7552: #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz-executor/7553: #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz-executor/7556: #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz-executor/7563: #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz-executor/7565: #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz-executor/7570: #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz-executor/7571: #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz-executor/7575: #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz-executor/7577: #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz-executor/7579: #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 =============================================