ci starts bisection 2023-05-23 22:50:01.907484436 +0000 UTC m=+308724.249379504 bisecting cause commit starting from ae8373a5add4ea39f032563cf12a02946d1e3546 building syzkaller on 4bce1a3e705a8b62de8194bdb28f5eef89c8feec ensuring issue is reproducible on original commit ae8373a5add4ea39f032563cf12a02946d1e3546 testing commit ae8373a5add4ea39f032563cf12a02946d1e3546 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 53329c92afe105e46c319c20da2f6f9f7fdf121998830d38aecda0fa85cec122 run #0: crashed: INFO: task hung in nfc_rfkill_set_block run #1: crashed: INFO: task hung in nfc_rfkill_set_block run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: crashed: INFO: task hung in rfkill_global_led_trigger_worker run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK reproducer seems to be flaky testing release v6.3 testing commit 457391b0380335d5e9a5babdec90ac53928b23b4 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 1635dec4a80770be233c5e7f63dcfee46951452b9b091287066d9780bf8778db run #0: crashed: INFO: task hung in rfkill_global_led_trigger_worker run #1: crashed: INFO: task hung in rfkill_global_led_trigger_worker run #2: crashed: INFO: task hung in nfc_rfkill_set_block run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing release v6.2 testing commit c9c3395d5e3dcc6daee66c6908354d47bf98cb0c gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9fca8ac37ee5d40c08aa0e910dd918ebff773e1820fd30523948eb5f9c80016a run #0: crashed: INFO: task hung in rfkill_global_led_trigger_worker run #1: crashed: INFO: task hung in rfkill_global_led_trigger_worker run #2: crashed: INFO: task hung in nfc_rfkill_set_block run #3: crashed: INFO: task hung in rfkill_global_led_trigger_worker run #4: crashed: INFO: task hung in rfkill_global_led_trigger_worker run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing release v6.1 testing commit 830b3c68c1fb1e9176028d02ef86f3cf76aa2476 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 65b0e21bf66da96fc56beaf116e65ffb17af8fff4df953b1732c8c32f68e8726 run #0: crashed: INFO: task hung in nfc_rfkill_set_block run #1: crashed: INFO: task hung in nfc_rfkill_set_block run #2: crashed: INFO: task hung in rfkill_global_led_trigger_worker run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing release v6.0 testing commit 4fe89d07dcc2804c8b562f6c7896a45643d34b2f gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 36ed949cdd2968c13619aea77cfc3da2e944d32d7f3ed7b44d89c9745373575c all runs: OK # git bisect start 830b3c68c1fb1e9176028d02ef86f3cf76aa2476 4fe89d07dcc2804c8b562f6c7896a45643d34b2f Bisecting: 7514 revisions left to test after this (roughly 13 steps) [33e591dee915832c618cf68bb1058c8e7d296128] Merge tag 'phy-for-6.1' of git://git.kernel.org/pub/scm/linux/kernel/git/phy/linux-phy testing commit 33e591dee915832c618cf68bb1058c8e7d296128 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 2c1af286e60b12d279dd63f626848fd4863c604f90f74ccc5d4bbefdc4f97187 run #0: crashed: INFO: task hung in nfc_rfkill_set_block run #1: crashed: INFO: task hung in nfc_rfkill_set_block run #2: crashed: INFO: task hung in nfc_rfkill_set_block run #3: crashed: INFO: task hung in nfc_rfkill_set_block run #4: crashed: INFO: task hung in rfkill_global_led_trigger_worker run #5: crashed: INFO: task hung in nfc_rfkill_set_block run #6: crashed: INFO: task hung in nfc_rfkill_set_block run #7: crashed: INFO: task hung in nfc_rfkill_set_block run #8: crashed: INFO: task hung in nfc_rfkill_set_block run #9: crashed: INFO: task hung in rfkill_global_led_trigger_worker run #10: crashed: INFO: task hung in nfc_rfkill_set_block run #11: crashed: INFO: task hung in nfc_rfkill_set_block run #12: crashed: INFO: task hung in nfc_rfkill_set_block run #13: crashed: INFO: task hung in rfkill_global_led_trigger_worker run #14: crashed: INFO: task hung in nfc_rfkill_set_block run #15: crashed: INFO: task hung in nfc_rfkill_set_block run #16: crashed: INFO: task hung in nfc_rfkill_set_block run #17: crashed: INFO: task hung in nfc_rfkill_set_block run #18: crashed: INFO: task hung in nfc_rfkill_set_block run #19: crashed: INFO: task hung in nfc_rfkill_set_block # git bisect bad 33e591dee915832c618cf68bb1058c8e7d296128 Bisecting: 4354 revisions left to test after this (roughly 12 steps) [a47e60729d9624e931f988709ab76e043e2ee8b9] Merge tag 'backlight-next-6.1' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/backlight testing commit a47e60729d9624e931f988709ab76e043e2ee8b9 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 314b5d4a1d2c4d18d5048737100121ab1fd90086046a5b196c0e483a19c38a36 run #0: crashed: INFO: task hung in rfkill_global_led_trigger_worker run #1: OK run #2: crashed: INFO: task hung in rfkill_global_led_trigger_worker run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad a47e60729d9624e931f988709ab76e043e2ee8b9 Bisecting: 1573 revisions left to test after this (roughly 11 steps) [915b96c52763e2988e6368b538b487a7138b8fa4] Merge tag 'wireless-next-2022-09-30' of git://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless-next testing commit 915b96c52763e2988e6368b538b487a7138b8fa4 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9d8c9f0c87265a8fc7405699b62f5ab461310a985fcb738ecd9cd5c3c080115e all runs: OK # git bisect good 915b96c52763e2988e6368b538b487a7138b8fa4 Bisecting: 894 revisions left to test after this (roughly 10 steps) [522667b24f08009591c90e75bfe2ffb67f555498] Merge tag 'landlock-6.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux testing commit 522667b24f08009591c90e75bfe2ffb67f555498 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: bedd362471165ecc417121927e518bb3838bb1f1c0389f1b2d9124e108b8f188 run #0: boot failed: WARNING in netlink_ack run #1: boot failed: WARNING in corrupted run #2: boot failed: WARNING in corrupted run #3: boot failed: WARNING in corrupted run #4: boot failed: WARNING in corrupted run #5: boot failed: WARNING in netlink_ack run #6: boot failed: WARNING in corrupted run #7: boot failed: WARNING in corrupted run #8: boot failed: WARNING in corrupted run #9: boot failed: WARNING in netlink_ack run #10: boot failed: WARNING in corrupted run #11: boot failed: WARNING in netlink_ack run #12: boot failed: WARNING in netlink_ack run #13: boot failed: WARNING in corrupted run #14: boot failed: WARNING in corrupted run #15: boot failed: WARNING in corrupted run #16: boot failed: WARNING in corrupted run #17: boot failed: WARNING in corrupted run #18: boot failed: WARNING in corrupted run #19: boot failed: WARNING in netlink_ack # git bisect skip 522667b24f08009591c90e75bfe2ffb67f555498 Bisecting: 894 revisions left to test after this (roughly 10 steps) [3db4c85cde7a514a5277070b32e776dbefcaa838] net/mlx5e: xsk: Use queue indices starting from 0 for XSK queues testing commit 3db4c85cde7a514a5277070b32e776dbefcaa838 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 98590ba9edb7fd7caf78a3ae3a7f2cc1a7f1e55bccdd63851b3f619f35762ea3 run #0: crashed: INFO: task hung in nfc_rfkill_set_block run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 3db4c85cde7a514a5277070b32e776dbefcaa838 Bisecting: 41 revisions left to test after this (roughly 5 steps) [448a496f760664d3e2e79466aa1787e6abc922b5] Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times testing commit 448a496f760664d3e2e79466aa1787e6abc922b5 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 48b25d334f2e6de02b03d1917ff0fbf2bf0873c48baf0fb75019bfb2213f573b run #0: crashed: INFO: task hung in nfc_rfkill_set_block run #1: OK run #2: OK run #3: OK run #4: crashed: INFO: task hung in nfc_rfkill_set_block run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 448a496f760664d3e2e79466aa1787e6abc922b5 Bisecting: 20 revisions left to test after this (roughly 4 steps) [c4ba5800217b9efa710b27fbe638930830a95d19] Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3592 testing commit c4ba5800217b9efa710b27fbe638930830a95d19 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 62b81fcf095d2be3fdb3d58a1f7d1d800938feefc39a35d84fd182b395e706cc run #0: crashed: INFO: task hung in nfc_rfkill_set_block run #1: crashed: INFO: task hung in nfc_rfkill_set_block run #2: crashed: INFO: task hung in nfc_rfkill_set_block run #3: crashed: INFO: task hung in nfc_rfkill_set_block run #4: crashed: INFO: task hung in nfc_rfkill_set_block run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad c4ba5800217b9efa710b27fbe638930830a95d19 Bisecting: 9 revisions left to test after this (roughly 3 steps) [123f6d3ae773f769695830518690ac3e4a477e82] Bluetooth: hci_sync: Fix suspend performance regression testing commit 123f6d3ae773f769695830518690ac3e4a477e82 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: fdfa06052462cead22a48a3f7342707832dcdf5750371546cc4487489705b0a8 run #0: crashed: INFO: task hung in rfkill_global_led_trigger_worker run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 123f6d3ae773f769695830518690ac3e4a477e82 Bisecting: 4 revisions left to test after this (roughly 3 steps) [c249ea9b4309cf3250c5bbb42a05d38d0ed9071c] Bluetooth: Move Adv Instance timer to hci_sync testing commit c249ea9b4309cf3250c5bbb42a05d38d0ed9071c gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: c91454b60d199f010825360a753c58d37b2368c3112d4a4f21ea716900657f6d run #0: crashed: INFO: task hung in nfc_rfkill_set_block run #1: crashed: INFO: task hung in rfkill_global_led_trigger_worker run #2: crashed: INFO: task hung in nfc_rfkill_set_block run #3: crashed: INFO: task hung in rfkill_global_led_trigger_worker run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad c249ea9b4309cf3250c5bbb42a05d38d0ed9071c Bisecting: 2 revisions left to test after this (roughly 2 steps) [27d54b778ad1fb32c2c108cfe97e861c3909a46f] Bluetooth: Rework le_scan_restart for hci_sync testing commit 27d54b778ad1fb32c2c108cfe97e861c3909a46f gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 4df8f474307f96f1070bcb6c687c9783c02fe4763b6080e765cc775b9574d5db run #0: crashed: INFO: task hung in rfkill_global_led_trigger_worker run #1: crashed: INFO: task hung in nfc_rfkill_set_block run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 27d54b778ad1fb32c2c108cfe97e861c3909a46f Bisecting: 1 revision left to test after this (roughly 1 step) [7ac7267fad5908476b357e7e9813d23516c2b0a1] Bluetooth: Add VID/PID 0489/e0e0 for MediaTek MT7921 testing commit 7ac7267fad5908476b357e7e9813d23516c2b0a1 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 355dd51a5b319702aa9887c03722af1832a72abb1eec119c7848100d766eb4f6 run #0: crashed: INFO: task hung in nfc_rfkill_set_block run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 7ac7267fad5908476b357e7e9813d23516c2b0a1 7ac7267fad5908476b357e7e9813d23516c2b0a1 is the first bad commit commit 7ac7267fad5908476b357e7e9813d23516c2b0a1 Author: Fae Date: Sun Jul 24 13:25:02 2022 -0500 Bluetooth: Add VID/PID 0489/e0e0 for MediaTek MT7921 Tested on HP Envy ey0xxx output from /sys/kernel/debug/usb/devices: T: Bus=01 Lev=01 Prnt=01 Port=02 Cnt=01 Dev#= 2 Spd=480 MxCh= 0 D: Ver= 2.10 Cls=ef(misc ) Sub=02 Prot=01 MxPS=64 #Cfgs= 1 P: Vendor=0489 ProdID=e0e0 Rev= 1.00 S: Manufacturer=MediaTek Inc. S: Product=Wireless_Device S: SerialNumber=000000000 C:* #Ifs= 3 Cfg#= 1 Atr=e0 MxPwr=100mA A: FirstIf#= 0 IfCount= 3 Cls=e0(wlcon) Sub=01 Prot=01 I:* If#= 0 Alt= 0 #EPs= 3 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb E: Ad=81(I) Atr=03(Int.) MxPS= 16 Ivl=125us E: Ad=82(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms E: Ad=02(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms I:* If#= 1 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb E: Ad=83(I) Atr=01(Isoc) MxPS= 0 Ivl=1ms E: Ad=03(O) Atr=01(Isoc) MxPS= 0 Ivl=1ms I: If#= 1 Alt= 1 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb E: Ad=83(I) Atr=01(Isoc) MxPS= 9 Ivl=1ms E: Ad=03(O) Atr=01(Isoc) MxPS= 9 Ivl=1ms I: If#= 1 Alt= 2 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb E: Ad=83(I) Atr=01(Isoc) MxPS= 17 Ivl=1ms E: Ad=03(O) Atr=01(Isoc) MxPS= 17 Ivl=1ms I: If#= 1 Alt= 3 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb E: Ad=83(I) Atr=01(Isoc) MxPS= 25 Ivl=1ms E: Ad=03(O) Atr=01(Isoc) MxPS= 25 Ivl=1ms I: If#= 1 Alt= 4 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb E: Ad=83(I) Atr=01(Isoc) MxPS= 33 Ivl=1ms E: Ad=03(O) Atr=01(Isoc) MxPS= 33 Ivl=1ms I: If#= 1 Alt= 5 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb E: Ad=83(I) Atr=01(Isoc) MxPS= 49 Ivl=1ms E: Ad=03(O) Atr=01(Isoc) MxPS= 49 Ivl=1ms I: If#= 1 Alt= 6 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb E: Ad=83(I) Atr=01(Isoc) MxPS= 63 Ivl=1ms E: Ad=03(O) Atr=01(Isoc) MxPS= 63 Ivl=1ms I:* If#= 2 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=(none) E: Ad=8a(I) Atr=03(Int.) MxPS= 64 Ivl=125us E: Ad=0a(O) Atr=03(Int.) MxPS= 64 Ivl=125us I: If#= 2 Alt= 1 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=(none) E: Ad=8a(I) Atr=03(Int.) MxPS= 512 Ivl=125us E: Ad=0a(O) Atr=03(Int.) MxPS= 512 Ivl=125us Signed-off-by: Fae Signed-off-by: Luiz Augusto von Dentz drivers/bluetooth/btusb.c | 3 +++ 1 file changed, 3 insertions(+) parent commit b9030780971b56c0c455c3b66244efd96608846d wasn't tested testing commit b9030780971b56c0c455c3b66244efd96608846d gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f16d944171622e21eb0e396b5fdcdf6572350beaab5430885f327c9154e8c990 culprit signature: 355dd51a5b319702aa9887c03722af1832a72abb1eec119c7848100d766eb4f6 parent signature: f16d944171622e21eb0e396b5fdcdf6572350beaab5430885f327c9154e8c990 Reproducer flagged being flaky revisions tested: 16, total time: 6h52m37.895833903s (build: 3h44m19.721867519s, test: 3h4m35.275210436s) first bad commit: 7ac7267fad5908476b357e7e9813d23516c2b0a1 Bluetooth: Add VID/PID 0489/e0e0 for MediaTek MT7921 recipients (to): ["faenkhauser@gmail.com" "luiz.von.dentz@intel.com"] recipients (cc): [] crash: INFO: task hung in nfc_rfkill_set_block INFO: task kworker/1:5:4033 blocked for more than 143 seconds. Not tainted 6.0.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:5 state:D stack:27184 pid: 4033 ppid: 2 flags:0x00004000 Workqueue: events rfkill_sync_work Call Trace: context_switch kernel/sched/core.c:5182 [inline] __schedule+0xa9f/0x5270 kernel/sched/core.c:6494 schedule+0xde/0x1b0 kernel/sched/core.c:6570 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6629 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0xa48/0x1360 kernel/locking/mutex.c:747 device_lock include/linux/device.h:835 [inline] nfc_dev_down+0x23/0x270 net/nfc/core.c:143 nfc_rfkill_set_block+0x19/0xa0 net/nfc/core.c:179 rfkill_set_block+0x191/0x440 net/rfkill/core.c:345 rfkill_sync_work+0x89/0xc0 net/rfkill/core.c:1042 process_one_work+0x865/0x13d0 kernel/workqueue.c:2289 worker_thread+0x59c/0xec0 kernel/workqueue.c:2436 kthread+0x29e/0x340 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 INFO: task syz-executor.0:15908 blocked for more than 143 seconds. Not tainted 6.0.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:28592 pid:15908 ppid: 3889 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5182 [inline] __schedule+0xa9f/0x5270 kernel/sched/core.c:6494 schedule+0xde/0x1b0 kernel/sched/core.c:6570 schedule_timeout+0x1a1/0x260 kernel/time/timer.c:1911 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x1c2/0x540 kernel/sched/completion.c:106 __flush_work+0x48f/0xa30 kernel/workqueue.c:3075 __cancel_work_timer+0x315/0x460 kernel/workqueue.c:3162 rfkill_unregister+0x81/0x290 net/rfkill/core.c:1124 nfc_unregister_device+0x6c/0x2d0 net/nfc/core.c:1167 virtual_ncidev_close+0x57/0x80 drivers/nfc/virtual_ncidev.c:163 __fput+0x1f5/0x8c0 fs/file_table.c:320 task_work_run+0xc4/0x160 kernel/task_work.c:177 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] exit_to_user_mode_loop kernel/entry/common.c:169 [inline] exit_to_user_mode_prepare+0x23c/0x250 kernel/entry/common.c:201 __syscall_exit_to_user_mode_work kernel/entry/common.c:283 [inline] syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:294 do_syscall_64+0x46/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f0a78a3e01b RSP: 002b:00007fffba8705c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f0a78a3e01b RDX: 00007f0a78600298 RSI: ffffffffffffffff RDI: 0000000000000003 RBP: 00007f0a78bad980 R08: 0000000000000000 R09: 00007f0a78600000 R10: 00007f0a786002a0 R11: 0000000000000293 R12: 00000000000230a2 R13: 00007fffba8706c0 R14: 00007f0a78babf80 R15: 0000000000000032 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffffffff8b780830 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507 1 lock held by rcu_tasks_trace/13: #0: ffffffff8b780530 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507 1 lock held by khungtaskd/28: #0: ffffffff8b781380 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x264 kernel/locking/lockdep.c:6492 2 locks held by getty/3290: #0: ffff88801d77c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x23/0x80 drivers/tty/tty_ldisc.c:244 #1: ffffc900020282f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xb73/0x1040 drivers/tty/n_tty.c:2177 4 locks held by kworker/1:5/4033: #0: ffff888011467d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888011467d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888011467d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888011467d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff888011467d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff888011467d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x13d0 kernel/workqueue.c:2260 #1: ffffc9000318fdb8 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x7b7/0x13d0 kernel/workqueue.c:2264 #2: ffffffff8d39d408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_sync_work+0x1e/0xc0 net/rfkill/core.c:1040 #3: ffff8880759fc100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:835 [inline] #3: ffff8880759fc100 (&dev->mutex){....}-{3:3}, at: nfc_dev_down+0x23/0x270 net/nfc/core.c:143 1 lock held by syz-executor.0/15908: #0: ffff8880759fc100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:835 [inline] #0: ffff8880759fc100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x40/0x2d0 net/nfc/core.c:1165 2 locks held by syz-executor.0/15914: #0: ffff88801d9a0118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device drivers/bluetooth/hci_vhci.c:373 [inline] #0: ffff88801d9a0118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_get_user drivers/bluetooth/hci_vhci.c:431 [inline] #0: ffff88801d9a0118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_write+0x268/0x3f0 drivers/bluetooth/hci_vhci.c:511 #1: ffffffff8d39d408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x2c/0xa00 net/rfkill/core.c:1057 2 locks held by syz-executor.0/15921: #0: ffff88807367c918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device drivers/bluetooth/hci_vhci.c:373 [inline] #0: ffff88807367c918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_get_user drivers/bluetooth/hci_vhci.c:431 [inline] #0: ffff88807367c918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_write+0x268/0x3f0 drivers/bluetooth/hci_vhci.c:511 #1: ffffffff8d39d408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x2c/0xa00 net/rfkill/core.c:1057 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.0.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x5b/0x81 lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x30/0xca lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x158/0x190 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:212 [inline] watchdog+0x890/0xbf0 kernel/hung_task.c:369 kthread+0x29e/0x340 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted 6.0.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:hlock_class kernel/locking/lockdep.c:227 [inline] RIP: 0010:__lock_acquire+0xbcb/0x56d0 kernel/locking/lockdep.c:5050 Code: 20 66 81 e3 ff 1f 0f b7 db be 08 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 80 3a 16 90 e8 0d fa 5a 00 48 0f a3 1d 85 17 bf 0e <0f> 83 0c 0d 00 00 48 8d 1c 5b 48 c1 e3 06 48 81 c3 a0 3e 16 90 48 RSP: 0018:ffffc9000031f810 EFLAGS: 00000047 RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffffffff815722f3 RDX: fffffbfff202c751 RSI: 0000000000000008 RDI: ffffffff90163a80 RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff90163a87 R10: fffffbfff202c750 R11: 0000000000000000 R12: ffff8880117e4b18 R13: ffff8880117e4000 R14: ffff8880117e4a78 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055ee23038390 CR3: 000000000b48e000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire kernel/locking/lockdep.c:5666 [inline] lock_acquire+0x1af/0x570 kernel/locking/lockdep.c:5631 __mutex_lock_common kernel/locking/mutex.c:603 [inline] __mutex_lock+0x12f/0x1360 kernel/locking/mutex.c:747 arch_jump_label_transform_queue+0x5c/0x100 arch/x86/kernel/jump_label.c:136 __jump_label_update+0xea/0x330 kernel/jump_label.c:447 static_key_disable_cpuslocked+0x104/0x160 kernel/jump_label.c:207 static_key_disable+0x15/0x20 kernel/jump_label.c:215 toggle_allocation_gate mm/kfence/core.c:825 [inline] toggle_allocation_gate+0x158/0x310 mm/kfence/core.c:803 process_one_work+0x865/0x13d0 kernel/workqueue.c:2289 worker_thread+0x59c/0xec0 kernel/workqueue.c:2436 kthread+0x29e/0x340 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306