INFO: task kworker/u4:4:1275 blocked for more than 143 seconds. Not tainted 5.15.175-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:4 state:D stack:22712 pid: 1275 ppid: 2 flags:0x00004000 Workqueue: nfc2_nci_cmd_wq nci_cmd_work Call Trace: context_switch kernel/sched/core.c:5027 [inline] __schedule+0x12c4/0x45b0 kernel/sched/core.c:6373 schedule+0x11b/0x1f0 kernel/sched/core.c:6456 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6515 __mutex_lock_common+0xe34/0x25a0 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 virtual_nci_send+0x1c/0xd0 drivers/nfc/virtual_ncidev.c:54 nci_cmd_work+0xa4/0x2a0 net/nfc/nci/core.c:1593 process_one_work+0x8a1/0x10c0 kernel/workqueue.c:2310 worker_thread+0xaca/0x1280 kernel/workqueue.c:2457 kthread+0x3f6/0x4f0 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 INFO: task syz.1.634:6271 blocked for more than 143 seconds. Not tainted 5.15.175-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.634 state:D stack:23160 pid: 6271 ppid: 4165 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5027 [inline] __schedule+0x12c4/0x45b0 kernel/sched/core.c:6373 schedule+0x11b/0x1f0 kernel/sched/core.c:6456 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6515 __mutex_lock_common+0xe34/0x25a0 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 device_lock include/linux/device.h:760 [inline] nfc_register_device+0x98/0x310 net/nfc/core.c:1128 nci_register_device+0x7be/0x900 net/nfc/nci/core.c:1269 virtual_ncidev_open+0x55/0xc0 drivers/nfc/virtual_ncidev.c:150 misc_open+0x304/0x380 drivers/char/misc.c:141 chrdev_open+0x54a/0x630 fs/char_dev.c:414 do_dentry_open+0x807/0xfb0 fs/open.c:826 do_open fs/namei.c:3608 [inline] path_openat+0x2705/0x2f20 fs/namei.c:3742 do_filp_open+0x21c/0x460 fs/namei.c:3769 do_sys_openat2+0x13b/0x4f0 fs/open.c:1253 do_sys_open fs/open.c:1269 [inline] __do_sys_openat fs/open.c:1285 [inline] __se_sys_openat fs/open.c:1280 [inline] __x64_sys_openat+0x243/0x290 fs/open.c:1280 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f6b22edfd29 RSP: 002b:00007f6b20d2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f6b230d0080 RCX: 00007f6b22edfd29 RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c RBP: 00007f6b22f5baa8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f6b230d0080 R15: 00007ffd9c519118 INFO: task syz.1.634:6276 blocked for more than 143 seconds. Not tainted 5.15.175-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.634 state:D stack:25144 pid: 6276 ppid: 4165 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5027 [inline] __schedule+0x12c4/0x45b0 kernel/sched/core.c:6373 schedule+0x11b/0x1f0 kernel/sched/core.c:6456 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6515 __mutex_lock_common+0xe34/0x25a0 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 genl_lock net/netlink/genetlink.c:33 [inline] genl_rcv_msg+0x124/0x14a0 net/netlink/genetlink.c:790 netlink_rcv_skb+0x1cf/0x410 net/netlink/af_netlink.c:2489 genl_rcv+0x24/0x40 net/netlink/genetlink.c:803 netlink_unicast_kernel net/netlink/af_netlink.c:1311 [inline] netlink_unicast+0x7b6/0x980 net/netlink/af_netlink.c:1337 netlink_sendmsg+0xa30/0xd60 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:704 [inline] __sock_sendmsg net/socket.c:716 [inline] __sys_sendto+0x564/0x720 net/socket.c:2063 __do_sys_sendto net/socket.c:2075 [inline] __se_sys_sendto net/socket.c:2071 [inline] __x64_sys_sendto+0xda/0xf0 net/socket.c:2071 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f6b22ee1bbc RSP: 002b:00007f6b20d0cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f6b20d0cfc0 RCX: 00007f6b22ee1bbc RDX: 000000000000001c RSI: 00007f6b20d0d010 RDI: 000000000000000b RBP: 0000000000000000 R08: 00007f6b20d0cf14 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b R13: 00007f6b20d0cf68 R14: 00007f6b20d0d010 R15: 0000000000000000 INFO: task syz.4.635:6272 blocked for more than 144 seconds. Not tainted 5.15.175-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.635 state:D stack:27064 pid: 6272 ppid: 4174 flags:0x00004204 Call Trace: context_switch kernel/sched/core.c:5027 [inline] __schedule+0x12c4/0x45b0 kernel/sched/core.c:6373 schedule+0x11b/0x1f0 kernel/sched/core.c:6456 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6515 __mutex_lock_common+0xe34/0x25a0 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 misc_open+0x58/0x380 drivers/char/misc.c:107 chrdev_open+0x54a/0x630 fs/char_dev.c:414 do_dentry_open+0x807/0xfb0 fs/open.c:826 do_open fs/namei.c:3608 [inline] path_openat+0x2705/0x2f20 fs/namei.c:3742 do_filp_open+0x21c/0x460 fs/namei.c:3769 do_sys_openat2+0x13b/0x4f0 fs/open.c:1253 do_sys_open fs/open.c:1269 [inline] __do_sys_openat fs/open.c:1285 [inline] __se_sys_openat fs/open.c:1280 [inline] __x64_sys_openat+0x243/0x290 fs/open.c:1280 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f5619b91d29 RSP: 002b:00007f5617a02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f5619d81fa0 RCX: 00007f5619b91d29 RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c RBP: 00007f5619c0daa8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f5619d81fa0 R15: 00007ffd4d4ccc28 INFO: task syz.4.635:6277 blocked for more than 144 seconds. Not tainted 5.15.175-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.635 state:D stack:24912 pid: 6277 ppid: 4174 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5027 [inline] __schedule+0x12c4/0x45b0 kernel/sched/core.c:6373 schedule+0x11b/0x1f0 kernel/sched/core.c:6456 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6515 __mutex_lock_common+0xe34/0x25a0 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 virtual_nci_close+0x13/0x40 drivers/nfc/virtual_ncidev.c:44 nci_open_device net/nfc/nci/core.c:544 [inline] nci_dev_up+0x954/0xd40 net/nfc/nci/core.c:631 nfc_dev_up+0x185/0x330 net/nfc/core.c:118 nfc_genl_dev_up+0x80/0xd0 net/nfc/netlink.c:770 genl_family_rcv_msg_doit net/netlink/genetlink.c:731 [inline] genl_family_rcv_msg net/netlink/genetlink.c:775 [inline] genl_rcv_msg+0xfbd/0x14a0 net/netlink/genetlink.c:792 netlink_rcv_skb+0x1cf/0x410 net/netlink/af_netlink.c:2489 genl_rcv+0x24/0x40 net/netlink/genetlink.c:803 netlink_unicast_kernel net/netlink/af_netlink.c:1311 [inline] netlink_unicast+0x7b6/0x980 net/netlink/af_netlink.c:1337 netlink_sendmsg+0xa30/0xd60 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:704 [inline] __sock_sendmsg net/socket.c:716 [inline] ____sys_sendmsg+0x59e/0x8f0 net/socket.c:2436 ___sys_sendmsg+0x252/0x2e0 net/socket.c:2490 __sys_sendmsg net/socket.c:2519 [inline] __do_sys_sendmsg net/socket.c:2528 [inline] __se_sys_sendmsg+0x19a/0x260 net/socket.c:2526 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f5619b91d29 RSP: 002b:00007f56179e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f5619d82080 RCX: 00007f5619b91d29 RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000007 RBP: 00007f5619c0daa8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f5619d82080 R15: 00007ffd4d4ccc28 INFO: task syz.4.635:6278 blocked for more than 144 seconds. Not tainted 5.15.175-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.635 state:D stack:27768 pid: 6278 ppid: 4174 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5027 [inline] __schedule+0x12c4/0x45b0 kernel/sched/core.c:6373 schedule+0x11b/0x1f0 kernel/sched/core.c:6456 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6515 __mutex_lock_common+0xe34/0x25a0 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 genl_lock net/netlink/genetlink.c:33 [inline] genl_rcv_msg+0x124/0x14a0 net/netlink/genetlink.c:790 netlink_rcv_skb+0x1cf/0x410 net/netlink/af_netlink.c:2489 genl_rcv+0x24/0x40 net/netlink/genetlink.c:803 netlink_unicast_kernel net/netlink/af_netlink.c:1311 [inline] netlink_unicast+0x7b6/0x980 net/netlink/af_netlink.c:1337 netlink_sendmsg+0xa30/0xd60 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:704 [inline] __sock_sendmsg net/socket.c:716 [inline] __sys_sendto+0x564/0x720 net/socket.c:2063 __do_sys_sendto net/socket.c:2075 [inline] __se_sys_sendto net/socket.c:2071 [inline] __x64_sys_sendto+0xda/0xf0 net/socket.c:2071 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f5619b93bbc RSP: 002b:00007f56179beec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f56179befc0 RCX: 00007f5619b93bbc RDX: 0000000000000024 RSI: 00007f56179bf010 RDI: 0000000000000007 RBP: 0000000000000000 R08: 00007f56179bef14 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 R13: 00007f56179bef68 R14: 00007f56179bf010 R15: 0000000000000000 INFO: task syz.3.640:6300 blocked for more than 145 seconds. Not tainted 5.15.175-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.640 state:D stack:25816 pid: 6300 ppid: 4166 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5027 [inline] __schedule+0x12c4/0x45b0 kernel/sched/core.c:6373 schedule+0x11b/0x1f0 kernel/sched/core.c:6456 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6515 __mutex_lock_common+0xe34/0x25a0 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 misc_open+0x58/0x380 drivers/char/misc.c:107 chrdev_open+0x54a/0x630 fs/char_dev.c:414 do_dentry_open+0x807/0xfb0 fs/open.c:826 do_open fs/namei.c:3608 [inline] path_openat+0x2705/0x2f20 fs/namei.c:3742 do_filp_open+0x21c/0x460 fs/namei.c:3769 do_sys_openat2+0x13b/0x4f0 fs/open.c:1253 do_sys_open fs/open.c:1269 [inline] __do_sys_openat fs/open.c:1285 [inline] __se_sys_openat fs/open.c:1280 [inline] __x64_sys_openat+0x243/0x290 fs/open.c:1280 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7efc4c3abd29 RSP: 002b:00007efc4a1da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007efc4c59c160 RCX: 00007efc4c3abd29 RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffffffffffffff9c RBP: 00007efc4c427aa8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007efc4c59c160 R15: 00007ffd57e67028 INFO: task syz.0.646:6315 blocked for more than 145 seconds. Not tainted 5.15.175-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.646 state:D stack:26424 pid: 6315 ppid: 4173 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5027 [inline] __schedule+0x12c4/0x45b0 kernel/sched/core.c:6373 schedule+0x11b/0x1f0 kernel/sched/core.c:6456 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6515 __mutex_lock_common+0xe34/0x25a0 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 misc_open+0x58/0x380 drivers/char/misc.c:107 chrdev_open+0x54a/0x630 fs/char_dev.c:414 do_dentry_open+0x807/0xfb0 fs/open.c:826 do_open fs/namei.c:3608 [inline] path_openat+0x2705/0x2f20 fs/namei.c:3742 do_filp_open+0x21c/0x460 fs/namei.c:3769 do_sys_openat2+0x13b/0x4f0 fs/open.c:1253 do_sys_open fs/open.c:1269 [inline] __do_sys_openat fs/open.c:1285 [inline] __se_sys_openat fs/open.c:1280 [inline] __x64_sys_openat+0x243/0x290 fs/open.c:1280 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7fe360833d29 RSP: 002b:00007fe35e683038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fe360a24080 RCX: 00007fe360833d29 RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffffffffffffff9c RBP: 00007fe3608afaa8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007fe360a24080 R15: 00007ffea9daba68 INFO: task syz.2.676:6387 blocked for more than 145 seconds. Not tainted 5.15.175-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.676 state:D stack:27768 pid: 6387 ppid: 4171 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5027 [inline] __schedule+0x12c4/0x45b0 kernel/sched/core.c:6373 schedule+0x11b/0x1f0 kernel/sched/core.c:6456 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6515 __mutex_lock_common+0xe34/0x25a0 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 genl_lock net/netlink/genetlink.c:33 [inline] genl_rcv_msg+0x124/0x14a0 net/netlink/genetlink.c:790 netlink_rcv_skb+0x1cf/0x410 net/netlink/af_netlink.c:2489 genl_rcv+0x24/0x40 net/netlink/genetlink.c:803 netlink_unicast_kernel net/netlink/af_netlink.c:1311 [inline] netlink_unicast+0x7b6/0x980 net/netlink/af_netlink.c:1337 netlink_sendmsg+0xa30/0xd60 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:704 [inline] __sock_sendmsg net/socket.c:716 [inline] __sys_sendto+0x564/0x720 net/socket.c:2063 __do_sys_sendto net/socket.c:2075 [inline] __se_sys_sendto net/socket.c:2071 [inline] __x64_sys_sendto+0xda/0xf0 net/socket.c:2071 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7fb1dec6dbbc RSP: 002b:00007fb1dcadaec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007fb1dcadafc0 RCX: 00007fb1dec6dbbc RDX: 0000000000000020 RSI: 00007fb1dcadb010 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007fb1dcadaf14 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 R13: 00007fb1dcadaf68 R14: 00007fb1dcadb010 R15: 0000000000000000 Showing all locks held in the system: 1 lock held by khungtaskd/27: #0: ffffffff8cb1fd20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 3 locks held by kworker/u4:4/1275: #0: ffff88807b0d2938 ((wq_completion)nfc2_nci_cmd_wq){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 kernel/workqueue.c:2283 #1: ffffc90004dd7d20 ((work_completion)(&ndev->cmd_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 kernel/workqueue.c:2285 #2: ffffffff8d359328 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_send+0x1c/0xd0 drivers/nfc/virtual_ncidev.c:54 2 locks held by getty/3923: #0: ffff88802c313098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252 #1: ffffc90002cd62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 drivers/tty/n_tty.c:2158 3 locks held by syz.1.634/6271: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 #1: ffffffff8d359328 (nci_mutex){+.+.}-{3:3}, at: virtual_ncidev_open+0x15/0xc0 drivers/nfc/virtual_ncidev.c:137 #2: ffff88807da7d190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:760 [inline] #2: ffff88807da7d190 (&dev->mutex){....}-{3:3}, at: nfc_register_device+0x98/0x310 net/nfc/core.c:1128 2 locks held by syz.1.634/6276: #0: ffffffff8dc9f0f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 net/netlink/genetlink.c:802 #1: ffffffff8dc9efa8 (genl_mutex){+.+.}-{3:3}, at: genl_lock net/netlink/genetlink.c:33 [inline] #1: ffffffff8dc9efa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x124/0x14a0 net/netlink/genetlink.c:790 1 lock held by syz.4.635/6272: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 5 locks held by syz.4.635/6277: #0: ffffffff8dc9f0f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 net/netlink/genetlink.c:802 #1: ffffffff8dc9efa8 (genl_mutex){+.+.}-{3:3}, at: genl_lock net/netlink/genetlink.c:33 [inline] #1: ffffffff8dc9efa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x124/0x14a0 net/netlink/genetlink.c:790 #2: ffff88807da7d190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:760 [inline] #2: ffff88807da7d190 (&dev->mutex){....}-{3:3}, at: nfc_dev_up+0x3b/0x330 net/nfc/core.c:95 #3: ffff88807da7a350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_open_device net/nfc/nci/core.c:477 [inline] #3: ffff88807da7a350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_dev_up+0xa0/0xd40 net/nfc/nci/core.c:631 #4: ffffffff8d359328 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_close+0x13/0x40 drivers/nfc/virtual_ncidev.c:44 2 locks held by syz.4.635/6278: #0: ffffffff8dc9f0f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 net/netlink/genetlink.c:802 #1: ffffffff8dc9efa8 (genl_mutex){+.+.}-{3:3}, at: genl_lock net/netlink/genetlink.c:33 [inline] #1: ffffffff8dc9efa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x124/0x14a0 net/netlink/genetlink.c:790 1 lock held by syz.3.640/6300: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 1 lock held by syz.0.646/6315: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 2 locks held by syz.2.676/6387: #0: ffffffff8dc9f0f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 net/netlink/genetlink.c:802 #1: ffffffff8dc9efa8 (genl_mutex){+.+.}-{3:3}, at: genl_lock net/netlink/genetlink.c:33 [inline] #1: ffffffff8dc9efa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x124/0x14a0 net/netlink/genetlink.c:790 1 lock held by syz-executor/6391: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 1 lock held by syz-executor/6392: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 1 lock held by syz-executor/6394: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 1 lock held by syz-executor/6396: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 1 lock held by syz-executor/6398: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 1 lock held by syz-executor/6407: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 1 lock held by syz-executor/6408: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 1 lock held by syz-executor/6410: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 1 lock held by syz-executor/6412: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 1 lock held by syz-executor/6414: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 1 lock held by syz-executor/6417: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 1 lock held by syz-executor/6418: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 1 lock held by syz-executor/6420: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 1 lock held by syz-executor/6422: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 1 lock held by syz-executor/6424: #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 drivers/char/misc.c:107 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.175-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e3/0x2d0 lib/dump_stack.c:106 nmi_cpu_backtrace+0x46a/0x4a0 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x181/0x2a0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline] watchdog+0xe72/0xeb0 kernel/hung_task.c:295 kthread+0x3f6/0x4f0 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 4260 Comm: kworker/u4:7 Not tainted 5.15.175-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: phy12 ieee80211_iface_work RIP: 0010:ieee80211_sta_get_rates+0x32d/0x6b0 net/mac80211/util.c:2130 Code: 84 db 0f 99 c0 44 08 f0 88 44 24 07 4c 8b 74 24 08 49 bd 00 00 00 00 00 fc ff df 45 31 ff 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 f7 e8 c9 c9 f1 f7 49 63 c7 4d 8b 36 4c 8d 2c 40 4b 8d RSP: 0018:ffffc9000320f910 EFLAGS: 00000246 RAX: 1ffff11003ffb66a RBX: 000000000000000a RCX: ffff8880270d3b80 RDX: 0000000000000000 RSI: 000000000000006e RDI: 000000000000000a RBP: 000000000000006e R08: ffffffff89d897b8 R09: fffffbfff1c14c0e R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 R13: dffffc0000000000 R14: ffff88801ffdb350 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffe5ed6dfe8 CR3: 00000000185eb000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ieee80211_update_sta_info net/mac80211/ibss.c:1007 [inline] ieee80211_rx_bss_info net/mac80211/ibss.c:1121 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1614 [inline] ieee80211_ibss_rx_queued_mgmt+0xf6f/0x2af0 net/mac80211/ibss.c:1643 ieee80211_iface_process_skb net/mac80211/iface.c:1456 [inline] ieee80211_iface_work+0x78f/0xcc0 net/mac80211/iface.c:1510 process_one_work+0x8a1/0x10c0 kernel/workqueue.c:2310 worker_thread+0xaca/0x1280 kernel/workqueue.c:2457 kthread+0x3f6/0x4f0 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287