INFO: task kworker/0:0:9 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:0 state:D stack:25432 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events rfkill_global_led_trigger_worker Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083 __mutex_lock_common kernel/locking/mutex.c:676 [inline] __mutex_lock+0x818/0x1060 kernel/locking/mutex.c:760 rfkill_global_led_trigger_worker+0x1b/0x160 net/rfkill/core.c:182 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427 kthread+0x3c2/0x780 kernel/kthread.c:463 ret_from_fork+0x672/0x7d0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task syz-executor.5:6209 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.5 state:D stack:26696 pid:6209 tgid:6209 ppid:6032 task_flags:0x400040 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083 __mutex_lock_common kernel/locking/mutex.c:676 [inline] __mutex_lock+0x818/0x1060 kernel/locking/mutex.c:760 rfkill_unregister+0xec/0x2c0 net/rfkill/core.c:1145 nfc_unregister_device+0x94/0x330 net/nfc/core.c:1167 virtual_ncidev_close+0x4b/0xa0 drivers/nfc/virtual_ncidev.c:172 __fput+0x3ff/0xb70 fs/file_table.c:468 fput_close_sync+0x118/0x210 fs/file_table.c:573 __do_sys_close fs/open.c:1589 [inline] __se_sys_close fs/open.c:1574 [inline] __x64_sys_close+0x8b/0x120 fs/open.c:1574 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa224e7b9da RSP: 002b:00007ffe326e2f30 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fa224e7b9da RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007fa224f9d980 R08: 0000001b33760000 R09: 00007fa225c6b000 R10: 0000000000000001 R11: 0000000000000293 R12: 00000000000175d5 R13: ffffffffffffffff R14: 00007fa224a00000 R15: 0000000000017294 INFO: task syz-executor.5:6211 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.5 state:D stack:25272 pid:6211 tgid:6209 ppid:6032 task_flags:0x400040 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083 __mutex_lock_common kernel/locking/mutex.c:676 [inline] __mutex_lock+0x818/0x1060 kernel/locking/mutex.c:760 device_lock include/linux/device.h:914 [inline] nfc_dev_down+0x2d/0x2e0 net/nfc/core.c:143 nfc_rfkill_set_block+0x39/0xe0 net/nfc/core.c:179 rfkill_set_block+0x1fe/0x550 net/rfkill/core.c:346 rfkill_fop_write+0x2c0/0x580 net/rfkill/core.c:1301 vfs_write+0x2a0/0x11d0 fs/read_write.c:684 ksys_write+0x1f8/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa224e7cae9 RSP: 002b:00007fa225c6a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fa224f9bf80 RCX: 00007fa224e7cae9 RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000004 RBP: 00007fa224ec847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007fa224f9bf80 R15: 00007ffe326e2e68 INFO: task syz-executor.1:6223 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:27304 pid:6223 tgid:6220 ppid:6031 task_flags:0x400040 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083 __mutex_lock_common kernel/locking/mutex.c:676 [inline] __mutex_lock+0x818/0x1060 kernel/locking/mutex.c:760 rfkill_register+0x3a/0xb40 net/rfkill/core.c:1071 nfc_register_device+0x11f/0x3c0 net/nfc/core.c:1132 nci_register_device+0x7f1/0xb80 net/nfc/nci/core.c:1277 virtual_ncidev_open+0x141/0x220 drivers/nfc/virtual_ncidev.c:157 misc_open+0x26a/0x450 drivers/char/misc.c:163 chrdev_open+0x234/0x6a0 fs/char_dev.c:414 do_dentry_open+0x97f/0x1530 fs/open.c:965 vfs_open+0x82/0x3f0 fs/open.c:1097 do_open fs/namei.c:3975 [inline] path_openat+0x1de4/0x2cb0 fs/namei.c:4134 do_filp_open+0x20b/0x470 fs/namei.c:4161 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __x64_sys_openat+0x174/0x210 fs/open.c:1463 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f55d247cae9 RSP: 002b:00007f55d32ba0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f55d259bf80 RCX: 00007f55d247cae9 RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c RBP: 00007f55d24c847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f55d259bf80 R15: 00007fff155a0b28 INFO: task syz-executor.1:6227 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:27688 pid:6227 tgid:6220 ppid:6031 task_flags:0x400040 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083 __mutex_lock_common kernel/locking/mutex.c:676 [inline] __mutex_lock+0x818/0x1060 kernel/locking/mutex.c:760 misc_open+0x63/0x450 drivers/char/misc.c:125 chrdev_open+0x234/0x6a0 fs/char_dev.c:414 do_dentry_open+0x97f/0x1530 fs/open.c:965 vfs_open+0x82/0x3f0 fs/open.c:1097 do_open fs/namei.c:3975 [inline] path_openat+0x1de4/0x2cb0 fs/namei.c:4134 do_filp_open+0x20b/0x470 fs/namei.c:4161 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __x64_sys_openat+0x174/0x210 fs/open.c:1463 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f55d247cae9 RSP: 002b:00007f55d32990c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f55d259c050 RCX: 00007f55d247cae9 RDX: 0000000000000801 RSI: 0000000020000040 RDI: ffffffffffffff9c RBP: 00007f55d24c847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f55d259c050 R15: 00007fff155a0b28 INFO: task syz-executor.0:6242 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:26760 pid:6242 tgid:6241 ppid:6019 task_flags:0x400040 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083 __mutex_lock_common kernel/locking/mutex.c:676 [inline] __mutex_lock+0x818/0x1060 kernel/locking/mutex.c:760 misc_open+0x63/0x450 drivers/char/misc.c:125 chrdev_open+0x234/0x6a0 fs/char_dev.c:414 do_dentry_open+0x97f/0x1530 fs/open.c:965 vfs_open+0x82/0x3f0 fs/open.c:1097 do_open fs/namei.c:3975 [inline] path_openat+0x1de4/0x2cb0 fs/namei.c:4134 do_filp_open+0x20b/0x470 fs/namei.c:4161 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __x64_sys_openat+0x174/0x210 fs/open.c:1463 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f75ca27cae9 RSP: 002b:00007f75caf910c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f75ca39bf80 RCX: 00007f75ca27cae9 RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c RBP: 00007f75ca2c847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f75ca39bf80 R15: 00007ffc6367ecd8 INFO: task syz-executor.0:6244 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:28840 pid:6244 tgid:6241 ppid:6019 task_flags:0x400040 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083 __mutex_lock_common kernel/locking/mutex.c:676 [inline] __mutex_lock+0x818/0x1060 kernel/locking/mutex.c:760 misc_open+0x63/0x450 drivers/char/misc.c:125 chrdev_open+0x234/0x6a0 fs/char_dev.c:414 do_dentry_open+0x97f/0x1530 fs/open.c:965 vfs_open+0x82/0x3f0 fs/open.c:1097 do_open fs/namei.c:3975 [inline] path_openat+0x1de4/0x2cb0 fs/namei.c:4134 do_filp_open+0x20b/0x470 fs/namei.c:4161 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __x64_sys_openat+0x174/0x210 fs/open.c:1463 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f75ca27cae9 RSP: 002b:00007f75caf700c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f75ca39c050 RCX: 00007f75ca27cae9 RDX: 0000000000000801 RSI: 0000000020000040 RDI: ffffffffffffff9c RBP: 00007f75ca2c847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f75ca39c050 R15: 00007ffc6367ecd8 INFO: task syz-executor.2:6257 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:27688 pid:6257 tgid:6256 ppid:6020 task_flags:0x400040 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083 __mutex_lock_common kernel/locking/mutex.c:676 [inline] __mutex_lock+0x818/0x1060 kernel/locking/mutex.c:760 misc_open+0x63/0x450 drivers/char/misc.c:125 chrdev_open+0x234/0x6a0 fs/char_dev.c:414 do_dentry_open+0x97f/0x1530 fs/open.c:965 vfs_open+0x82/0x3f0 fs/open.c:1097 do_open fs/namei.c:3975 [inline] path_openat+0x1de4/0x2cb0 fs/namei.c:4134 do_filp_open+0x20b/0x470 fs/namei.c:4161 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __x64_sys_openat+0x174/0x210 fs/open.c:1463 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7efda7a7cae9 RSP: 002b:00007efda888e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007efda7b9bf80 RCX: 00007efda7a7cae9 RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c RBP: 00007efda7ac847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007efda7b9bf80 R15: 00007ffdc365d6d8 INFO: task syz-executor.2:6260 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:26840 pid:6260 tgid:6256 ppid:6020 task_flags:0x400040 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083 __mutex_lock_common kernel/locking/mutex.c:676 [inline] __mutex_lock+0x818/0x1060 kernel/locking/mutex.c:760 misc_open+0x63/0x450 drivers/char/misc.c:125 chrdev_open+0x234/0x6a0 fs/char_dev.c:414 do_dentry_open+0x97f/0x1530 fs/open.c:965 vfs_open+0x82/0x3f0 fs/open.c:1097 do_open fs/namei.c:3975 [inline] path_openat+0x1de4/0x2cb0 fs/namei.c:4134 do_filp_open+0x20b/0x470 fs/namei.c:4161 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __x64_sys_openat+0x174/0x210 fs/open.c:1463 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7efda7a7cae9 RSP: 002b:00007efda886d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007efda7b9c050 RCX: 00007efda7a7cae9 RDX: 0000000000000801 RSI: 0000000020000040 RDI: ffffffffffffff9c RBP: 00007efda7ac847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007efda7b9c050 R15: 00007ffdc365d6d8 INFO: task syz-executor.4:6268 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:27528 pid:6268 tgid:6265 ppid:6021 task_flags:0x400040 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083 __mutex_lock_common kernel/locking/mutex.c:676 [inline] __mutex_lock+0x818/0x1060 kernel/locking/mutex.c:760 misc_open+0x63/0x450 drivers/char/misc.c:125 chrdev_open+0x234/0x6a0 fs/char_dev.c:414 do_dentry_open+0x97f/0x1530 fs/open.c:965 vfs_open+0x82/0x3f0 fs/open.c:1097 do_open fs/namei.c:3975 [inline] path_openat+0x1de4/0x2cb0 fs/namei.c:4134 do_filp_open+0x20b/0x470 fs/namei.c:4161 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __x64_sys_openat+0x174/0x210 fs/open.c:1463 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7febf3e7cae9 RSP: 002b:00007febf4ca60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007febf3f9bf80 RCX: 00007febf3e7cae9 RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c RBP: 00007febf3ec847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007febf3f9bf80 R15: 00007ffd67927be8 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task syz-executor.4:6269 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:26840 pid:6269 tgid:6265 ppid:6021 task_flags:0x400040 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083 __mutex_lock_common kernel/locking/mutex.c:676 [inline] __mutex_lock+0x818/0x1060 kernel/locking/mutex.c:760 misc_open+0x63/0x450 drivers/char/misc.c:125 chrdev_open+0x234/0x6a0 fs/char_dev.c:414 do_dentry_open+0x97f/0x1530 fs/open.c:965 vfs_open+0x82/0x3f0 fs/open.c:1097 do_open fs/namei.c:3975 [inline] path_openat+0x1de4/0x2cb0 fs/namei.c:4134 do_filp_open+0x20b/0x470 fs/namei.c:4161 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __x64_sys_openat+0x174/0x210 fs/open.c:1463 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7febf3e7cae9 RSP: 002b:00007febf4c850c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007febf3f9c050 RCX: 00007febf3e7cae9 RDX: 0000000000000801 RSI: 0000000020000040 RDI: ffffffffffffff9c RBP: 00007febf3ec847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007febf3f9c050 R15: 00007ffd67927be8 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task syz-executor.3:6277 blocked for more than 146 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:27688 pid:6277 tgid:6275 ppid:6024 task_flags:0x400040 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083 __mutex_lock_common kernel/locking/mutex.c:676 [inline] __mutex_lock+0x818/0x1060 kernel/locking/mutex.c:760 misc_open+0x63/0x450 drivers/char/misc.c:125 chrdev_open+0x234/0x6a0 fs/char_dev.c:414 do_dentry_open+0x97f/0x1530 fs/open.c:965 vfs_open+0x82/0x3f0 fs/open.c:1097 do_open fs/namei.c:3975 [inline] path_openat+0x1de4/0x2cb0 fs/namei.c:4134 do_filp_open+0x20b/0x470 fs/namei.c:4161 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __x64_sys_openat+0x174/0x210 fs/open.c:1463 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb3b347cae9 RSP: 002b:00007fb3b417f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fb3b359bf80 RCX: 00007fb3b347cae9 RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c RBP: 00007fb3b34c847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007fb3b359bf80 R15: 00007ffc1a4b3cb8 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task syz-executor.3:6279 blocked for more than 146 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:27688 pid:6279 tgid:6275 ppid:6024 task_flags:0x400040 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083 __mutex_lock_common kernel/locking/mutex.c:676 [inline] __mutex_lock+0x818/0x1060 kernel/locking/mutex.c:760 misc_open+0x63/0x450 drivers/char/misc.c:125 chrdev_open+0x234/0x6a0 fs/char_dev.c:414 do_dentry_open+0x97f/0x1530 fs/open.c:965 vfs_open+0x82/0x3f0 fs/open.c:1097 do_open fs/namei.c:3975 [inline] path_openat+0x1de4/0x2cb0 fs/namei.c:4134 do_filp_open+0x20b/0x470 fs/namei.c:4161 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __x64_sys_openat+0x174/0x210 fs/open.c:1463 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb3b347cae9 RSP: 002b:00007fb3b415e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fb3b359c050 RCX: 00007fb3b347cae9 RDX: 0000000000000801 RSI: 0000000020000040 RDI: ffffffffffffff9c RBP: 00007fb3b34c847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007fb3b359c050 R15: 00007ffc1a4b3cb8 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings Showing all locks held in the system: 3 locks held by kworker/0:0/9: #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3238 #1: ffffc900000e7d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3239 #2: ffffffff905a3da8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 net/rfkill/core.c:182 1 lock held by khungtaskd/31: #0: ffffffff8e3c44a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8e3c44a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline] #0: ffffffff8e3c44a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6775 2 locks held by getty/5571: #0: ffff888035c840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 drivers/tty/n_tty.c:2222 2 locks held by syz-executor.5/6209: #0: ffff888025602100 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:914 [inline] #0: ffff888025602100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 net/nfc/core.c:1165 #1: ffffffff905a3da8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 net/rfkill/core.c:1145 2 locks held by syz-executor.5/6211: #0: ffffffff905a3da8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x166/0x580 net/rfkill/core.c:1293 #1: ffff888025602100 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:914 [inline] #1: ffff888025602100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 net/nfc/core.c:143 3 locks held by syz-executor.1/6223: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 #1: ffff888065518100 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:914 [inline] #1: ffff888065518100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9a/0x3c0 net/nfc/core.c:1128 #2: ffffffff905a3da8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 net/rfkill/core.c:1071 1 lock held by syz-executor.1/6227: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.0/6242: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.0/6244: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.2/6257: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.2/6260: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.4/6268: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.4/6269: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.3/6277: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.3/6279: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.5/6446: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.1/6448: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.0/6450: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.2/6452: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.4/6454: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.3/6456: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.1/6463: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.5/6464: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.0/6466: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.2/6468: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.4/6470: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 1 lock held by syz-executor.3/6472: #0: ffffffff8f089c28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 drivers/char/misc.c:125 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:332 [inline] watchdog+0xf3f/0x1170 kernel/hung_task.c:495 kthread+0x3c2/0x780 kernel/kthread.c:463 ret_from_fork+0x672/0x7d0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:82 Code: b7 75 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 c6 24 00 fb f4 0c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c2 RAX: 0000000000134cfd RBX: 0000000000000000 RCX: ffffffff8b6552d9 RDX: 0000000000000000 RSI: ffffffff8db02bed RDI: ffffffff8bf1d3c0 RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 R13: ffffffff8e097a00 R14: ffffffff90832cd0 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8881249dc000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000562a52f6b660 CR3: 000000000e182000 CR4: 00000000003526f0 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:767 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:190 [inline] do_idle+0x38d/0x500 kernel/sched/idle.c:330 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:428 rest_init+0x16b/0x2b0 init/main.c:757 start_kernel+0x3f3/0x4e0 init/main.c:1111 x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x130/0x190 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x148