INFO: task kworker/1:1:26 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:1 state:D stack:0 pid:26 tgid:26 ppid:2 task_flags:0x4208060 flags:0x00000010 Workqueue: events rfkill_sync_work Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5325 [inline] __schedule+0x13b0/0x2864 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xb4/0x230 kernel/sched/core.c:7026 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7083 __mutex_lock_common+0xd04/0x2678 kernel/locking/mutex.c:676 __mutex_lock kernel/locking/mutex.c:760 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:812 device_lock include/linux/device.h:914 [inline] nfc_dev_down net/nfc/core.c:143 [inline] nfc_rfkill_set_block+0x4c/0x2a8 net/nfc/core.c:179 rfkill_set_block+0x18c/0x374 net/rfkill/core.c:346 rfkill_sync net/rfkill/core.c:379 [inline] rfkill_sync_work+0x100/0x1e8 net/rfkill/core.c:1056 process_one_work+0x7e8/0x155c kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3427 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 INFO: task kworker/u8:5:949 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:5 state:D stack:0 pid:949 tgid:949 ppid:2 task_flags:0x4208060 flags:0x00000010 Workqueue: netns cleanup_net Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5325 [inline] __schedule+0x13b0/0x2864 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xb4/0x230 kernel/sched/core.c:7026 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7083 __mutex_lock_common+0xd04/0x2678 kernel/locking/mutex.c:676 __mutex_lock kernel/locking/mutex.c:760 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:812 rfkill_unregister+0xb8/0x208 net/rfkill/core.c:1145 wiphy_unregister+0x1f0/0x9b0 net/wireless/core.c:1163 ieee80211_unregister_hw+0x1b8/0x29c net/mac80211/main.c:1704 mac80211_hwsim_del_radio+0x214/0x3b4 drivers/net/wireless/virtual/mac80211_hwsim.c:5915 hwsim_exit_net+0xd1c/0xdd8 drivers/net/wireless/virtual/mac80211_hwsim.c:6806 ops_exit_list net/core/net_namespace.c:199 [inline] ops_undo_list+0x3c0/0x7ec net/core/net_namespace.c:252 cleanup_net+0x3f8/0x6dc net/core/net_namespace.c:695 process_one_work+0x7e8/0x155c kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3427 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 INFO: task syz-executor:6552 blocked for more than 143 seconds. Not tainted syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:6552 tgid:6552 ppid:1 task_flags:0x40054c flags:0x00000019 Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5325 [inline] __schedule+0x13b0/0x2864 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xb4/0x230 kernel/sched/core.c:7026 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7083 __mutex_lock_common+0xd04/0x2678 kernel/locking/mutex.c:676 __mutex_lock kernel/locking/mutex.c:760 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:812 rfkill_unregister+0xb8/0x208 net/rfkill/core.c:1145 hci_unregister_dev+0x320/0x4c0 net/bluetooth/hci_core.c:2732 vhci_release+0x12c/0x17c drivers/bluetooth/hci_vhci.c:690 __fput+0x340/0x75c fs/file_table.c:468 ____fput+0x20/0x58 fs/file_table.c:496 task_work_run+0x1dc/0x260 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x524/0x1a14 kernel/exit.c:966 do_group_exit+0x194/0x22c kernel/exit.c:1107 get_signal+0x11dc/0x12f8 kernel/signal.c:3034 arch_do_signal_or_restart+0x274/0x4414 arch/arm64/kernel/signal.c:1619 exit_to_user_mode_loop+0x7c/0x178 kernel/entry/common.c:40 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 INFO: task syz.1.136:7225 blocked for more than 143 seconds. Not tainted syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.136 state:D stack:0 pid:7225 tgid:7224 ppid:6552 task_flags:0x40044c flags:0x00000018 Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5325 [inline] __schedule+0x13b0/0x2864 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xb4/0x230 kernel/sched/core.c:7026 schedule_timeout+0xac/0x270 kernel/time/sleep_timeout.c:75 do_wait_for_common+0x288/0x3f8 kernel/sched/completion.c:100 __wait_for_common kernel/sched/completion.c:121 [inline] wait_for_common kernel/sched/completion.c:132 [inline] wait_for_completion+0x44/0x5c kernel/sched/completion.c:153 __flush_work+0x714/0x8c0 kernel/workqueue.c:4273 __cancel_work_sync kernel/workqueue.c:4393 [inline] cancel_work_sync+0xc4/0x120 kernel/workqueue.c:4430 rfkill_unregister+0x8c/0x208 net/rfkill/core.c:1139 nfc_unregister_device+0x94/0x288 net/nfc/core.c:1167 nci_unregister_device+0x1dc/0x21c net/nfc/nci/core.c:1323 virtual_ncidev_close+0x5c/0xa0 drivers/nfc/virtual_ncidev.c:172 __fput+0x340/0x75c fs/file_table.c:468 ____fput+0x20/0x58 fs/file_table.c:496 task_work_run+0x1dc/0x260 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x524/0x1a14 kernel/exit.c:966 do_group_exit+0x194/0x22c kernel/exit.c:1107 get_signal+0x11dc/0x12f8 kernel/signal.c:3034 arch_do_signal_or_restart+0x274/0x4414 arch/arm64/kernel/signal.c:1619 exit_to_user_mode_loop+0x7c/0x178 kernel/entry/common.c:40 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 INFO: task syz-executor:7267 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:7267 tgid:7267 ppid:1 task_flags:0x400040 flags:0x00000000 Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5325 [inline] __schedule+0x13b0/0x2864 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xb4/0x230 kernel/sched/core.c:7026 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7083 __mutex_lock_common+0xd04/0x2678 kernel/locking/mutex.c:676 __mutex_lock kernel/locking/mutex.c:760 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:812 rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 hci_register_dev+0x388/0x8a0 net/bluetooth/hci_core.c:2631 __vhci_create_device drivers/bluetooth/hci_vhci.c:451 [inline] vhci_create_device+0x34c/0x638 drivers/bluetooth/hci_vhci.c:479 vhci_get_user drivers/bluetooth/hci_vhci.c:536 [inline] vhci_write+0x314/0x3d4 drivers/bluetooth/hci_vhci.c:616 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x540/0xa3c fs/read_write.c:686 ksys_write+0x120/0x210 fs/read_write.c:738 __do_sys_write fs/read_write.c:749 [inline] __se_sys_write fs/read_write.c:746 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:746 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x254 arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 INFO: task syz-executor:7594 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:7594 tgid:7594 ppid:1 task_flags:0x400040 flags:0x00000000 Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5325 [inline] __schedule+0x13b0/0x2864 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xb4/0x230 kernel/sched/core.c:7026 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7083 __mutex_lock_common+0xd04/0x2678 kernel/locking/mutex.c:676 __mutex_lock kernel/locking/mutex.c:760 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:812 rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 hci_register_dev+0x388/0x8a0 net/bluetooth/hci_core.c:2631 __vhci_create_device drivers/bluetooth/hci_vhci.c:451 [inline] vhci_create_device+0x34c/0x638 drivers/bluetooth/hci_vhci.c:479 vhci_get_user drivers/bluetooth/hci_vhci.c:536 [inline] vhci_write+0x314/0x3d4 drivers/bluetooth/hci_vhci.c:616 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x540/0xa3c fs/read_write.c:686 ksys_write+0x120/0x210 fs/read_write.c:738 __do_sys_write fs/read_write.c:749 [inline] __se_sys_write fs/read_write.c:746 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:746 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x254 arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 INFO: task syz.2.261:7757 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.261 state:D stack:0 pid:7757 tgid:7754 ppid:6554 task_flags:0x400140 flags:0x00000011 Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5325 [inline] __schedule+0x13b0/0x2864 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xb4/0x230 kernel/sched/core.c:7026 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7083 __mutex_lock_common+0xd04/0x2678 kernel/locking/mutex.c:676 __mutex_lock kernel/locking/mutex.c:760 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:812 rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 hci_register_dev+0x388/0x8a0 net/bluetooth/hci_core.c:2631 hci_uart_register_dev drivers/bluetooth/hci_ldisc.c:691 [inline] hci_uart_set_proto drivers/bluetooth/hci_ldisc.c:717 [inline] hci_uart_tty_ioctl+0x72c/0xa54 drivers/bluetooth/hci_ldisc.c:771 tty_ioctl+0x8f4/0xd8c drivers/tty/tty_io.c:2801 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __arm64_sys_ioctl+0x14c/0x1c4 fs/ioctl.c:583 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x254 arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 Showing all locks held in the system: 2 locks held by kworker/u8:0/12: #0: ffff0000c0031148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c kernel/workqueue.c:3237 #1: ffff800097a87be0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c kernel/workqueue.c:3237 4 locks held by kworker/1:1/26: #0: ffff0000c0029948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c kernel/workqueue.c:3237 #1: ffff800097b77be0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c kernel/workqueue.c:3237 #2: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x38/0x1e8 net/rfkill/core.c:1055 #3: ffff0000cf56e100 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:914 [inline] #3: ffff0000cf56e100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down net/nfc/core.c:143 [inline] #3: ffff0000cf56e100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x4c/0x2a8 net/nfc/core.c:179 1 lock held by khungtaskd/32: #0: ffff80008f79b760 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 include/linux/rcupdate.h:330 2 locks held by pr/ttyAMA-1/43: 4 locks held by kworker/u8:5/949: #0: ffff0000c1843148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c kernel/workqueue.c:3237 #1: ffff80009d7d7be0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c kernel/workqueue.c:3237 #2: ffff80009287b3f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x6dc net/core/net_namespace.c:669 #3: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xb8/0x208 net/rfkill/core.c:1145 2 locks held by getty/6337: #0: ffff0000d38970a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80009baa72f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa4 drivers/tty/n_tty.c:2222 1 lock held by syz-executor/6552: #0: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xb8/0x208 net/rfkill/core.c:1145 1 lock held by syz.1.136/7225: #0: ffff0000cf56e100 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:914 [inline] #0: ffff0000cf56e100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x68/0x288 net/nfc/core.c:1165 2 locks held by syz-executor/7267: #0: ffff0000cdf73118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x3c/0x638 drivers/bluetooth/hci_vhci.c:478 #1: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 2 locks held by syz-executor/7594: #0: ffff0000ce4fd118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x3c/0x638 drivers/bluetooth/hci_vhci.c:478 #1: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 2 locks held by syz.2.261/7757: #0: ffff0000c9d630a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 3 locks held by syz.0.279/7801: #0: ffff8000928ed7d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x28/0x50 net/netlink/genetlink.c:1218 #1: ffff8000928ed5e8 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffff8000928ed5e8 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffff8000928ed5e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0xf4/0x624 net/netlink/genetlink.c:1209 #2: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 2 locks held by syz.4.282/7809: #0: ffff8000928ed7d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x28/0x50 net/netlink/genetlink.c:1218 #1: ffff8000928ed5e8 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffff8000928ed5e8 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffff8000928ed5e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0xf4/0x624 net/netlink/genetlink.c:1209 2 locks held by syz-executor/7820: #0: ffff0000d5cb3118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x3c/0x638 drivers/bluetooth/hci_vhci.c:478 #1: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 2 locks held by syz-executor/7823: #0: ffff0000c1f70118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x3c/0x638 drivers/bluetooth/hci_vhci.c:478 #1: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 2 locks held by syz-executor/7824: #0: ffff0000dd07f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x3c/0x638 drivers/bluetooth/hci_vhci.c:478 #1: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 2 locks held by syz-executor/7830: #0: ffff0000d21eb918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x3c/0x638 drivers/bluetooth/hci_vhci.c:478 #1: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 2 locks held by syz-executor/7833: #0: ffff0000cc064118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x3c/0x638 drivers/bluetooth/hci_vhci.c:478 #1: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 2 locks held by syz-executor/7839: #0: ffff0000c9873118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x3c/0x638 drivers/bluetooth/hci_vhci.c:478 #1: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 2 locks held by syz-executor/7843: #0: ffff0000cbaf7918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x3c/0x638 drivers/bluetooth/hci_vhci.c:478 #1: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 2 locks held by syz-executor/7844: #0: ffff0000d0b9d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x3c/0x638 drivers/bluetooth/hci_vhci.c:478 #1: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 2 locks held by syz-executor/7846: #0: ffff0000c2e42118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x3c/0x638 drivers/bluetooth/hci_vhci.c:478 #1: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 2 locks held by syz-executor/7849: #0: ffff0000dd317918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x3c/0x638 drivers/bluetooth/hci_vhci.c:478 #1: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 2 locks held by syz-executor/7855: #0: ffff0000d8957918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x3c/0x638 drivers/bluetooth/hci_vhci.c:478 #1: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 2 locks held by syz-executor/7859: #0: ffff0000daaa8118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x3c/0x638 drivers/bluetooth/hci_vhci.c:478 #1: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 2 locks held by syz-executor/7860: #0: ffff0000d2b76918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x3c/0x638 drivers/bluetooth/hci_vhci.c:478 #1: ffff800092b69988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac net/rfkill/core.c:1071 =============================================