INFO: task kworker/u4:3:1331 blocked for more than 143 seconds.
      Not tainted 5.15.180-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:3    state:D stack:12576 pid: 1331 ppid:     2 flags:0x00004000
Workqueue: nfc2_nci_cmd_wq nci_cmd_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5030 [inline]
 __schedule+0x38d/0x14b0 kernel/sched/core.c:6376
 schedule+0x56/0xe0 kernel/sched/core.c:6459
 schedule_preempt_disabled+0x28/0x40 kernel/sched/core.c:6518
 __mutex_lock_common kernel/locking/mutex.c:669 [inline]
 __mutex_lock+0x4b1/0x770 kernel/locking/mutex.c:729
 virtual_nci_send+0x1a/0xf0 drivers/nfc/virtual_ncidev.c:54
 nci_send_frame+0x75/0xe0 net/nfc/nci/core.c:1359
 nci_cmd_work+0x97/0x100 net/nfc/nci/core.c:1593
 process_one_work+0x32a/0x6c0 kernel/workqueue.c:2310
 worker_thread+0x5b/0x520 kernel/workqueue.c:2457
 kthread+0x174/0x1b0 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
INFO: task syz.4.142:6761 blocked for more than 143 seconds.
      Not tainted 5.15.180-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.142       state:D stack:14536 pid: 6761 ppid:  4107 flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5030 [inline]
 __schedule+0x38d/0x14b0 kernel/sched/core.c:6376
 schedule+0x56/0xe0 kernel/sched/core.c:6459
 schedule_preempt_disabled+0x28/0x40 kernel/sched/core.c:6518
 __mutex_lock_common kernel/locking/mutex.c:669 [inline]
 __mutex_lock+0x4b1/0x770 kernel/locking/mutex.c:729
 misc_open+0x25/0x1e0 drivers/char/misc.c:107
 chrdev_open+0x10d/0x340 fs/char_dev.c:414
 do_dentry_open+0x311/0x6c0 fs/open.c:826
 do_open fs/namei.c:3608 [inline]
 path_openat+0xe32/0x1370 fs/namei.c:3742
 do_filp_open+0xc1/0x1b0 fs/namei.c:3769
 do_sys_openat2+0xed/0x260 fs/open.c:1253
 do_sys_open fs/open.c:1269 [inline]
 __do_sys_openat fs/open.c:1285 [inline]
 __se_sys_openat fs/open.c:1280 [inline]
 __x64_sys_openat+0x7f/0xe0 fs/open.c:1280
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x33/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f1a243edda9
RSP: 002b:00007f1a2363e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f1a24607080 RCX: 00007f1a243edda9
RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c
RBP: 00007f1a2446f2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f1a24607080 R15: 00007ffd73f52758
 </TASK>
INFO: task syz.4.142:6766 blocked for more than 143 seconds.
      Not tainted 5.15.180-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.142       state:D stack:13432 pid: 6766 ppid:  4107 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5030 [inline]
 __schedule+0x38d/0x14b0 kernel/sched/core.c:6376
 schedule+0x56/0xe0 kernel/sched/core.c:6459
 schedule_preempt_disabled+0x28/0x40 kernel/sched/core.c:6518
 __mutex_lock_common kernel/locking/mutex.c:669 [inline]
 __mutex_lock+0x4b1/0x770 kernel/locking/mutex.c:729
 virtual_nci_close+0x13/0x40 drivers/nfc/virtual_ncidev.c:44
 nci_open_device net/nfc/nci/core.c:544 [inline]
 nci_dev_up+0x220/0x2b0 net/nfc/nci/core.c:631
 nfc_dev_up+0xd0/0x1c0 net/nfc/core.c:118
 nfc_genl_dev_up+0x3a/0x70 net/nfc/netlink.c:770
 genl_family_rcv_msg_doit+0x113/0x180 net/netlink/genetlink.c:731
 genl_family_rcv_msg net/netlink/genetlink.c:775 [inline]
 genl_rcv_msg+0x174/0x2c0 net/netlink/genetlink.c:792
 netlink_rcv_skb+0x87/0x1d0 net/netlink/af_netlink.c:2489
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:803
 netlink_unicast_kernel net/netlink/af_netlink.c:1311 [inline]
 netlink_unicast+0x2fe/0x430 net/netlink/af_netlink.c:1337
 netlink_sendmsg+0x39b/0x720 net/netlink/af_netlink.c:1905
 sock_sendmsg_nosec net/socket.c:704 [inline]
 __sock_sendmsg+0x56/0x80 net/socket.c:716
 ____sys_sendmsg+0x36f/0x390 net/socket.c:2436
 ___sys_sendmsg+0x8b/0xd0 net/socket.c:2490
 __sys_sendmsg+0x88/0x100 net/socket.c:2519
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x33/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f1a243edda9
RSP: 002b:00007f1a2361d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f1a24607160 RCX: 00007f1a243edda9
RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000007
RBP: 00007f1a2446f2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f1a24607160 R15: 00007ffd73f52758
 </TASK>
INFO: task syz.1.143:6759 blocked for more than 143 seconds.
      Not tainted 5.15.180-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.143       state:D stack:13816 pid: 6759 ppid:  4100 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5030 [inline]
 __schedule+0x38d/0x14b0 kernel/sched/core.c:6376
 schedule+0x56/0xe0 kernel/sched/core.c:6459
 schedule_preempt_disabled+0x28/0x40 kernel/sched/core.c:6518
 __mutex_lock_common kernel/locking/mutex.c:669 [inline]
 __mutex_lock+0x4b1/0x770 kernel/locking/mutex.c:729
 device_lock include/linux/device.h:760 [inline]
 nfc_register_device+0x98/0x200 net/nfc/core.c:1128
 nci_register_device+0x391/0x430 net/nfc/nci/core.c:1269
 virtual_ncidev_open+0x6d/0x110 drivers/nfc/virtual_ncidev.c:150
 misc_open+0x1a0/0x1e0 drivers/char/misc.c:141
 chrdev_open+0x10d/0x340 fs/char_dev.c:414
 do_dentry_open+0x311/0x6c0 fs/open.c:826
 do_open fs/namei.c:3608 [inline]
 path_openat+0xe32/0x1370 fs/namei.c:3742
 do_filp_open+0xc1/0x1b0 fs/namei.c:3769
 do_sys_openat2+0xed/0x260 fs/open.c:1253
 do_sys_open fs/open.c:1269 [inline]
 __do_sys_openat fs/open.c:1285 [inline]
 __se_sys_openat fs/open.c:1280 [inline]
 __x64_sys_openat+0x7f/0xe0 fs/open.c:1280
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x33/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fcdbd0b7da9
RSP: 002b:00007fcdbc308038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fcdbd2d1080 RCX: 00007fcdbd0b7da9
RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c
RBP: 00007fcdbd1392a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fcdbd2d1080 R15: 00007ffee5f1fe48
 </TASK>
INFO: task syz.5.144:6765 blocked for more than 144 seconds.
      Not tainted 5.15.180-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.144       state:D stack:14536 pid: 6765 ppid:  4094 flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5030 [inline]
 __schedule+0x38d/0x14b0 kernel/sched/core.c:6376
 schedule+0x56/0xe0 kernel/sched/core.c:6459
 schedule_preempt_disabled+0x28/0x40 kernel/sched/core.c:6518
 __mutex_lock_common kernel/locking/mutex.c:669 [inline]
 __mutex_lock+0x4b1/0x770 kernel/locking/mutex.c:729
 misc_open+0x25/0x1e0 drivers/char/misc.c:107
 chrdev_open+0x10d/0x340 fs/char_dev.c:414
 do_dentry_open+0x311/0x6c0 fs/open.c:826
 do_open fs/namei.c:3608 [inline]
 path_openat+0xe32/0x1370 fs/namei.c:3742
 do_filp_open+0xc1/0x1b0 fs/namei.c:3769
 do_sys_openat2+0xed/0x260 fs/open.c:1253
 do_sys_open fs/open.c:1269 [inline]
 __do_sys_openat fs/open.c:1285 [inline]
 __se_sys_openat fs/open.c:1280 [inline]
 __x64_sys_openat+0x7f/0xe0 fs/open.c:1280
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x33/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7effb34dfda9
RSP: 002b:00007effb2730038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007effb36f9080 RCX: 00007effb34dfda9
RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c
RBP: 00007effb35612a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007effb36f9080 R15: 00007ffd903df648
 </TASK>
INFO: task syz.5.144:6771 blocked for more than 144 seconds.
      Not tainted 5.15.180-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.144       state:D stack:13904 pid: 6771 ppid:  4094 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5030 [inline]
 __schedule+0x38d/0x14b0 kernel/sched/core.c:6376
 schedule+0x56/0xe0 kernel/sched/core.c:6459
 schedule_preempt_disabled+0x28/0x40 kernel/sched/core.c:6518
 __mutex_lock_common kernel/locking/mutex.c:669 [inline]
 __mutex_lock+0x4b1/0x770 kernel/locking/mutex.c:729
 genl_lock net/netlink/genetlink.c:33 [inline]
 genl_rcv_msg+0x1e9/0x2c0 net/netlink/genetlink.c:790
 netlink_rcv_skb+0x87/0x1d0 net/netlink/af_netlink.c:2489
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:803
 netlink_unicast_kernel net/netlink/af_netlink.c:1311 [inline]
 netlink_unicast+0x2fe/0x430 net/netlink/af_netlink.c:1337
 netlink_sendmsg+0x39b/0x720 net/netlink/af_netlink.c:1905
 sock_sendmsg_nosec net/socket.c:704 [inline]
 __sock_sendmsg+0x56/0x80 net/socket.c:716
 __sys_sendto+0x15f/0x210 net/socket.c:2063
 __do_sys_sendto net/socket.c:2075 [inline]
 __se_sys_sendto net/socket.c:2071 [inline]
 __x64_sys_sendto+0x26/0x30 net/socket.c:2071
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x33/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7effb34e1c3c
RSP: 002b:00007effb270dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007effb270dfc0 RCX: 00007effb34e1c3c
RDX: 000000000000001c RSI: 00007effb270e010 RDI: 0000000000000008
RBP: 0000000000000000 R08: 00007effb270df14 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008
R13: 00007effb270df68 R14: 00007effb270e010 R15: 0000000000000000
 </TASK>
INFO: task syz.2.146:6772 blocked for more than 144 seconds.
      Not tainted 5.15.180-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.146       state:D stack:14536 pid: 6772 ppid:  4102 flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5030 [inline]
 __schedule+0x38d/0x14b0 kernel/sched/core.c:6376
 schedule+0x56/0xe0 kernel/sched/core.c:6459
 schedule_preempt_disabled+0x28/0x40 kernel/sched/core.c:6518
 __mutex_lock_common kernel/locking/mutex.c:669 [inline]
 __mutex_lock+0x4b1/0x770 kernel/locking/mutex.c:729
 misc_open+0x25/0x1e0 drivers/char/misc.c:107
 chrdev_open+0x10d/0x340 fs/char_dev.c:414
 do_dentry_open+0x311/0x6c0 fs/open.c:826
 do_open fs/namei.c:3608 [inline]
 path_openat+0xe32/0x1370 fs/namei.c:3742
 do_filp_open+0xc1/0x1b0 fs/namei.c:3769
 do_sys_openat2+0xed/0x260 fs/open.c:1253
 do_sys_open fs/open.c:1269 [inline]
 __do_sys_openat fs/open.c:1285 [inline]
 __se_sys_openat fs/open.c:1280 [inline]
 __x64_sys_openat+0x7f/0xe0 fs/open.c:1280
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x33/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f656679ada9
RSP: 002b:00007f65659eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f65669b4080 RCX: 00007f656679ada9
RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c
RBP: 00007f656681c2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f65669b4080 R15: 00007ffd9da38248
 </TASK>
INFO: task syz.2.146:6775 blocked for more than 144 seconds.
      Not tainted 5.15.180-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.146       state:D stack:14032 pid: 6775 ppid:  4102 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5030 [inline]
 __schedule+0x38d/0x14b0 kernel/sched/core.c:6376
 schedule+0x56/0xe0 kernel/sched/core.c:6459
 schedule_preempt_disabled+0x28/0x40 kernel/sched/core.c:6518
 __mutex_lock_common kernel/locking/mutex.c:669 [inline]
 __mutex_lock+0x4b1/0x770 kernel/locking/mutex.c:729
 genl_lock net/netlink/genetlink.c:33 [inline]
 genl_rcv_msg+0x1e9/0x2c0 net/netlink/genetlink.c:790
 netlink_rcv_skb+0x87/0x1d0 net/netlink/af_netlink.c:2489
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:803
 netlink_unicast_kernel net/netlink/af_netlink.c:1311 [inline]
 netlink_unicast+0x2fe/0x430 net/netlink/af_netlink.c:1337
 netlink_sendmsg+0x39b/0x720 net/netlink/af_netlink.c:1905
 sock_sendmsg_nosec net/socket.c:704 [inline]
 __sock_sendmsg+0x56/0x80 net/socket.c:716
 __sys_sendto+0x15f/0x210 net/socket.c:2063
 __do_sys_sendto net/socket.c:2075 [inline]
 __se_sys_sendto net/socket.c:2071 [inline]
 __x64_sys_sendto+0x26/0x30 net/socket.c:2071
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x33/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f656679cc3c
RSP: 002b:00007f65659c8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f65659c8fc0 RCX: 00007f656679cc3c
RDX: 000000000000001c RSI: 00007f65659c9010 RDI: 0000000000000008
RBP: 0000000000000000 R08: 00007f65659c8f14 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008
R13: 00007f65659c8f68 R14: 00007f65659c9010 R15: 0000000000000000
 </TASK>
INFO: task syz.3.145:6773 blocked for more than 144 seconds.
      Not tainted 5.15.180-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.145       state:D stack:14256 pid: 6773 ppid:  4103 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5030 [inline]
 __schedule+0x38d/0x14b0 kernel/sched/core.c:6376
 schedule+0x56/0xe0 kernel/sched/core.c:6459
 schedule_preempt_disabled+0x28/0x40 kernel/sched/core.c:6518
 __mutex_lock_common kernel/locking/mutex.c:669 [inline]
 __mutex_lock+0x4b1/0x770 kernel/locking/mutex.c:729
 misc_open+0x25/0x1e0 drivers/char/misc.c:107
 chrdev_open+0x10d/0x340 fs/char_dev.c:414
 do_dentry_open+0x311/0x6c0 fs/open.c:826
 do_open fs/namei.c:3608 [inline]
 path_openat+0xe32/0x1370 fs/namei.c:3742
 do_filp_open+0xc1/0x1b0 fs/namei.c:3769
 do_sys_openat2+0xed/0x260 fs/open.c:1253
 do_sys_open fs/open.c:1269 [inline]
 __do_sys_openat fs/open.c:1285 [inline]
 __se_sys_openat fs/open.c:1280 [inline]
 __x64_sys_openat+0x7f/0xe0 fs/open.c:1280
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x33/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f233f330da9
RSP: 002b:00007f233e581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f233f54a080 RCX: 00007f233f330da9
RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c
RBP: 00007f233f3b22a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f233f54a080 R15: 00007ffdc3073ab8
 </TASK>
INFO: task syz.3.145:6776 blocked for more than 145 seconds.
      Not tainted 5.15.180-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.145       state:D stack:14224 pid: 6776 ppid:  4103 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5030 [inline]
 __schedule+0x38d/0x14b0 kernel/sched/core.c:6376
 schedule+0x56/0xe0 kernel/sched/core.c:6459
 schedule_preempt_disabled+0x28/0x40 kernel/sched/core.c:6518
 __mutex_lock_common kernel/locking/mutex.c:669 [inline]
 __mutex_lock+0x4b1/0x770 kernel/locking/mutex.c:729
 genl_lock net/netlink/genetlink.c:33 [inline]
 genl_rcv_msg+0x1e9/0x2c0 net/netlink/genetlink.c:790
 netlink_rcv_skb+0x87/0x1d0 net/netlink/af_netlink.c:2489
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:803
 netlink_unicast_kernel net/netlink/af_netlink.c:1311 [inline]
 netlink_unicast+0x2fe/0x430 net/netlink/af_netlink.c:1337
 netlink_sendmsg+0x39b/0x720 net/netlink/af_netlink.c:1905
 sock_sendmsg_nosec net/socket.c:704 [inline]
 __sock_sendmsg+0x56/0x80 net/socket.c:716
 __sys_sendto+0x15f/0x210 net/socket.c:2063
 __do_sys_sendto net/socket.c:2075 [inline]
 __se_sys_sendto net/socket.c:2071 [inline]
 __x64_sys_sendto+0x26/0x30 net/socket.c:2071
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x33/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f233f332c3c
RSP: 002b:00007f233e55eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f233e55efc0 RCX: 00007f233f332c3c
RDX: 000000000000001c RSI: 00007f233e55f010 RDI: 0000000000000008
RBP: 0000000000000000 R08: 00007f233e55ef14 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008
R13: 00007f233e55ef68 R14: 00007f233e55f010 R15: 0000000000000000
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/27:
 #0: ffffffff853ab300 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x15/0xf7 kernel/locking/lockdep.c:6469
3 locks held by kworker/u4:3/1331:
 #0: ffff88810a10b538 ((wq_completion)nfc2_nci_cmd_wq){....}-{0:0}, at: wake_up_worker kernel/workqueue.c:859 [inline]
 #0: ffff88810a10b538 ((wq_completion)nfc2_nci_cmd_wq){....}-{0:0}, at: process_one_work+0x26e/0x6c0 kernel/workqueue.c:2273
 #1: ffffc900040ffe68 ((work_completion)(&ndev->cmd_work)){....}-{0:0}, at: wake_up_worker kernel/workqueue.c:859 [inline]
 #1: ffffc900040ffe68 ((work_completion)(&ndev->cmd_work)){....}-{0:0}, at: process_one_work+0x26e/0x6c0 kernel/workqueue.c:2273
 #2: ffffffff854fbb48 (nci_mutex){....}-{3:3}, at: virtual_nci_send+0x1a/0xf0 drivers/nfc/virtual_ncidev.c:54
2 locks held by syslogd/2128:
 #0: ffff88813bc2df98 (&rq->__lock){....}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:483 [inline]
 #0: ffff88813bc2df98 (&rq->__lock){....}-{2:2}, at: raw_spin_rq_lock_nested+0x43/0x80 kernel/sched/core.c:468
 #1: ffff88813bd1b8c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){....}-{0:0}, at: psi_task_switch+0x1cc/0x1f0 kernel/sched/psi.c:891
2 locks held by getty/2250:
 #0: ffff8881081d1898 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x60 drivers/tty/tty_ldisc.c:252
 #1: ffffc90004b432e8 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x899/0xa20 drivers/tty/n_tty.c:2158
1 lock held by syz.4.142/6761:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
5 locks held by syz.4.142/6766:
 #0: ffffffff855e4450 (cb_lock){....}-{3:3}, at: genl_rcv+0x15/0x40 net/netlink/genetlink.c:802
 #1: ffffffff855e44e8 (genl_mutex){....}-{3:3}, at: genl_lock net/netlink/genetlink.c:33 [inline]
 #1: ffffffff855e44e8 (genl_mutex){....}-{3:3}, at: genl_rcv_msg+0x1e9/0x2c0 net/netlink/genetlink.c:790
 #2: ffff88811c7fe100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:760 [inline]
 #2: ffff88811c7fe100 (&dev->mutex){....}-{3:3}, at: nfc_dev_up+0x2e/0x1c0 net/nfc/core.c:95
 #3: ffff88811c7feb50 (&ndev->req_lock){....}-{3:3}, at: nci_open_device net/nfc/nci/core.c:477 [inline]
 #3: ffff88811c7feb50 (&ndev->req_lock){....}-{3:3}, at: nci_dev_up+0x38/0x2b0 net/nfc/nci/core.c:631
 #4: ffffffff854fbb48 (nci_mutex){....}-{3:3}, at: virtual_nci_close+0x13/0x40 drivers/nfc/virtual_ncidev.c:44
3 locks held by syz.1.143/6759:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
 #1: ffffffff854fbb48 (nci_mutex){....}-{3:3}, at: virtual_ncidev_open+0x15/0x110 drivers/nfc/virtual_ncidev.c:137
 #2: ffff88811c7fe100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:760 [inline]
 #2: ffff88811c7fe100 (&dev->mutex){....}-{3:3}, at: nfc_register_device+0x98/0x200 net/nfc/core.c:1128
1 lock held by syz.5.144/6765:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
2 locks held by syz.5.144/6771:
 #0: ffffffff855e4450 (cb_lock){....}-{3:3}, at: genl_rcv+0x15/0x40 net/netlink/genetlink.c:802
 #1: ffffffff855e44e8 (genl_mutex){....}-{3:3}, at: genl_lock net/netlink/genetlink.c:33 [inline]
 #1: ffffffff855e44e8 (genl_mutex){....}-{3:3}, at: genl_rcv_msg+0x1e9/0x2c0 net/netlink/genetlink.c:790
1 lock held by syz.2.146/6772:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
2 locks held by syz.2.146/6775:
 #0: ffffffff855e4450 (cb_lock){....}-{3:3}, at: genl_rcv+0x15/0x40 net/netlink/genetlink.c:802
 #1: ffffffff855e44e8 (genl_mutex){....}-{3:3}, at: genl_lock net/netlink/genetlink.c:33 [inline]
 #1: ffffffff855e44e8 (genl_mutex){....}-{3:3}, at: genl_rcv_msg+0x1e9/0x2c0 net/netlink/genetlink.c:790
1 lock held by syz.3.145/6773:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
2 locks held by syz.3.145/6776:
 #0: ffffffff855e4450 (cb_lock){....}-{3:3}, at: genl_rcv+0x15/0x40 net/netlink/genetlink.c:802
 #1: ffffffff855e44e8 (genl_mutex){....}-{3:3}, at: genl_lock net/netlink/genetlink.c:33 [inline]
 #1: ffffffff855e44e8 (genl_mutex){....}-{3:3}, at: genl_rcv_msg+0x1e9/0x2c0 net/netlink/genetlink.c:790
1 lock held by syz-executor/6786:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
1 lock held by syz-executor/6788:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
1 lock held by syz-executor/6790:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
1 lock held by syz-executor/6791:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
1 lock held by syz-executor/6792:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
1 lock held by syz-executor/6796:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
1 lock held by syz-executor/6798:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
1 lock held by syz-executor/6800:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
1 lock held by syz-executor/6801:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
1 lock held by syz-executor/6802:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
1 lock held by syz-executor/6813:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
1 lock held by syz-executor/6814:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
1 lock held by syz-executor/6817:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
1 lock held by syz-executor/6818:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107
1 lock held by syz-executor/6819:
 #0: ffffffff854e0fc8 (misc_mtx){....}-{3:3}, at: misc_open+0x25/0x1e0 drivers/char/misc.c:107

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.180-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x8e/0xdd lib/dump_stack.c:106
 nmi_cpu_backtrace.cold+0x46/0xdd lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x163/0x190 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:212 [inline]
 watchdog+0x7c6/0x810 kernel/hung_task.c:369
 kthread+0x174/0x1b0 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 5868 Comm: kworker/u4:9 Not tainted 5.15.180-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Workqueue: phy10 ieee80211_iface_work
RIP: 0010:get_current arch/x86/include/asm/current.h:15 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 kernel/kcov.c:205
Code: 89 0c ed c0 06 7c 8a 48 89 70 18 5b 5d 41 5c 41 5d c3 48 c7 c0 f4 ff ff ff eb 9a 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <65> 48 8b 14 25 c0 af 01 00 65 8b 05 90 f9 c9 7e a9 00 01 ff 00 48
RSP: 0018:ffffc9000127bc08 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffff88811d67c000 RCX: ffffffff83c0500b
RDX: 0000000000000000 RSI: ffff88811a96b880 RDI: 0000000000000001
RBP: ffff88811d014ac8 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000018 R12: 0000000000000001
R13: 0000000000000000 R14: ffff888108b4a928 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000557813fbb680 CR3: 00000001064e4000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ieee80211_update_bss_from_elems+0x69/0x670 net/mac80211/scan.c:79
 ieee80211_bss_info_update+0x294/0x450 net/mac80211/scan.c:223
 ieee80211_rx_bss_info net/mac80211/ibss.c:1123 [inline]
 ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1614 [inline]
 ieee80211_ibss_rx_queued_mgmt+0xc15/0x1320 net/mac80211/ibss.c:1643
 ieee80211_iface_process_skb net/mac80211/iface.c:1456 [inline]
 ieee80211_iface_work+0x5b5/0x6f0 net/mac80211/iface.c:1510
 process_one_work+0x32a/0x6c0 kernel/workqueue.c:2310
 worker_thread+0x5b/0x520 kernel/workqueue.c:2457
 kthread+0x174/0x1b0 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>