INFO: task kworker/0:1:10 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:1 state:D stack:0 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00000010 Workqueue: events rfkill_sync_work Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1250/0x2a7c kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6960 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7017 __mutex_lock_common+0xd04/0x2678 kernel/locking/mutex.c:692 __mutex_lock kernel/locking/mutex.c:776 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:828 device_lock include/linux/device.h:895 [inline] nfc_dev_down+0x3c/0x258 net/nfc/core.c:143 nfc_rfkill_set_block+0x38/0xfc net/nfc/core.c:179 rfkill_set_block+0x18c/0x374 net/rfkill/core.c:346 rfkill_sync net/rfkill/core.c:379 [inline] rfkill_sync_work+0x100/0x1e8 net/rfkill/core.c:1056 process_one_work+0x7c0/0x1558 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3421 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 INFO: task kworker/u8:5:384 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:5 state:D stack:0 pid:384 tgid:384 ppid:2 task_flags:0x4208060 flags:0x00000010 Workqueue: netns cleanup_net Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1250/0x2a7c kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6960 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7017 __mutex_lock_common+0xd04/0x2678 kernel/locking/mutex.c:692 __mutex_lock kernel/locking/mutex.c:776 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:828 rfkill_unregister+0xb8/0x208 net/rfkill/core.c:1145 wiphy_unregister+0x1f0/0x998 net/wireless/core.c:1178 ieee80211_unregister_hw+0x1b8/0x29c net/mac80211/main.c:1703 mac80211_hwsim_del_radio+0x214/0x3b4 drivers/net/wireless/virtual/mac80211_hwsim.c:5916 hwsim_exit_net+0xd1c/0xdd8 drivers/net/wireless/virtual/mac80211_hwsim.c:6807 ops_exit_list net/core/net_namespace.c:199 [inline] ops_undo_list+0x3c0/0x7ec net/core/net_namespace.c:252 cleanup_net+0x3fc/0x638 net/core/net_namespace.c:696 process_one_work+0x7c0/0x1558 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3421 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 INFO: task kworker/u8:15:3493 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:15 state:D stack:0 pid:3493 tgid:3493 ppid:2 task_flags:0x4208060 flags:0x00000010 Workqueue: writeback wb_workfn (flush-btrfs-20) Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1250/0x2a7c kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6960 wait_extent_bit fs/btrfs/extent-io-tree.c:814 [inline] btrfs_lock_extent_bits+0x4f4/0x664 fs/btrfs/extent-io-tree.c:1917 btrfs_lock_extent fs/btrfs/extent-io-tree.h:152 [inline] btrfs_invalidate_folio+0x338/0xac0 fs/btrfs/inode.c:7574 folio_invalidate+0x9c/0xbc mm/truncate.c:140 extent_writepage fs/btrfs/extent_io.c:1823 [inline] extent_write_cache_pages fs/btrfs/extent_io.c:2552 [inline] btrfs_writepages+0xdfc/0x2020 fs/btrfs/extent_io.c:2685 do_writepages+0x270/0x468 mm/page-writeback.c:2598 __writeback_single_inode+0x144/0x16b8 fs/fs-writeback.c:1737 writeback_sb_inodes+0x73c/0x16b4 fs/fs-writeback.c:2030 wb_writeback+0x3b4/0xd70 fs/fs-writeback.c:2216 wb_do_writeback fs/fs-writeback.c:2363 [inline] wb_workfn+0x320/0xdc0 fs/fs-writeback.c:2403 process_one_work+0x7c0/0x1558 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3421 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 INFO: task kworker/0:10:7395 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:10 state:D stack:0 pid:7395 tgid:7395 ppid:2 task_flags:0x4208060 flags:0x00000010 Workqueue: events rfkill_global_led_trigger_worker Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1250/0x2a7c kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6960 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7017 __mutex_lock_common+0xd04/0x2678 kernel/locking/mutex.c:692 __mutex_lock kernel/locking/mutex.c:776 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:828 rfkill_global_led_trigger_worker+0x30/0xe4 net/rfkill/core.c:182 process_one_work+0x7c0/0x1558 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3421 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 INFO: task syz-executor:8567 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:8567 tgid:8567 ppid:1 task_flags:0x400140 flags:0x00000001 Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1250/0x2a7c kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6960 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7017 __mutex_lock_common+0xd04/0x2678 kernel/locking/mutex.c:692 __mutex_lock kernel/locking/mutex.c:776 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:828 rfkill_fop_open+0x110/0x744 net/rfkill/core.c:1178 misc_open+0x2d0/0x33c drivers/char/misc.c:163 chrdev_open+0x1b0/0x4b0 fs/char_dev.c:414 do_dentry_open+0x68c/0x1154 fs/open.c:962 vfs_open+0x44/0x2d4 fs/open.c:1094 do_open fs/namei.c:4628 [inline] path_openat+0x2890/0x3114 fs/namei.c:4787 do_filp_open+0x18c/0x36c fs/namei.c:4814 do_sys_openat2+0x11c/0x1f0 fs/open.c:1430 do_sys_open fs/open.c:1436 [inline] __do_sys_openat fs/open.c:1452 [inline] __se_sys_openat fs/open.c:1447 [inline] __arm64_sys_openat+0x120/0x158 fs/open.c:1447 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x26c arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 INFO: task syz.1.313:8683 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.313 state:D stack:0 pid:8683 tgid:8682 ppid:6573 task_flags:0x400140 flags:0x00000019 Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1250/0x2a7c kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6960 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7017 __mutex_lock_common+0xd04/0x2678 kernel/locking/mutex.c:692 __mutex_lock kernel/locking/mutex.c:776 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:828 rfkill_unregister+0xb8/0x208 net/rfkill/core.c:1145 hci_unregister_dev+0x320/0x52c net/bluetooth/hci_core.c:2732 hci_uart_tty_close+0x178/0x2f4 drivers/bluetooth/hci_ldisc.c:557 tty_ldisc_close drivers/tty/tty_ldisc.c:455 [inline] tty_ldisc_kill+0x184/0x2ec drivers/tty/tty_ldisc.c:613 tty_ldisc_release+0x188/0x238 drivers/tty/tty_ldisc.c:781 tty_release_struct+0x34/0xd4 drivers/tty/tty_io.c:1681 tty_release+0xa0c/0x129c drivers/tty/tty_io.c:1852 __fput+0x340/0x75c fs/file_table.c:468 ____fput+0x20/0x58 fs/file_table.c:496 task_work_run+0x1dc/0x260 kernel/task_work.c:233 get_signal+0x112c/0x12f8 kernel/signal.c:2807 arch_do_signal_or_restart+0x268/0x46d4 arch/arm64/kernel/signal.c:1619 __exit_to_user_mode_loop kernel/entry/common.c:41 [inline] exit_to_user_mode_loop+0x88/0x18c kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:242 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x17c/0x26c arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 INFO: task syz.7.315:8707 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.7.315 state:D stack:0 pid:8707 tgid:8706 ppid:7874 task_flags:0x400140 flags:0x00000011 Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1250/0x2a7c kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6960 wb_wait_for_completion+0x328/0x5f0 fs/fs-writeback.c:226 __writeback_inodes_sb_nr+0x1c4/0x230 fs/fs-writeback.c:2808 try_to_writeback_inodes_sb+0x98/0xbc fs/fs-writeback.c:2856 btrfs_start_delalloc_flush fs/btrfs/transaction.c:2150 [inline] btrfs_commit_transaction+0x8b4/0x2d30 fs/btrfs/transaction.c:2339 btrfs_sync_file+0xa64/0xf78 fs/btrfs/file.c:1819 vfs_fsync_range+0x160/0x19c fs/sync.c:188 generic_write_sync include/linux/fs.h:2616 [inline] btrfs_do_write_iter+0x4a4/0x610 fs/btrfs/file.c:1470 btrfs_file_write_iter+0x2c/0x3c fs/btrfs/file.c:1480 do_iter_readv_writev+0x4bc/0x720 fs/read_write.c:-1 vfs_writev+0x29c/0x7cc fs/read_write.c:1057 do_pwritev fs/read_write.c:1153 [inline] __do_sys_pwritev2 fs/read_write.c:1211 [inline] __se_sys_pwritev2 fs/read_write.c:1202 [inline] __arm64_sys_pwritev2+0x1bc/0x2cc fs/read_write.c:1202 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x26c arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 INFO: task syz.7.315:8734 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.7.315 state:D stack:0 pid:8734 tgid:8706 ppid:7874 task_flags:0x400140 flags:0x00000011 Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1250/0x2a7c kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6960 wait_current_trans+0x2d0/0x468 fs/btrfs/transaction.c:534 start_transaction+0x764/0x1530 fs/btrfs/transaction.c:704 btrfs_start_transaction+0x34/0x44 fs/btrfs/transaction.c:818 clone_copy_inline_extent fs/btrfs/reflink.c:299 [inline] btrfs_clone+0xfb8/0x2000 fs/btrfs/reflink.c:529 btrfs_clone_files+0x228/0x330 fs/btrfs/reflink.c:751 btrfs_remap_file_range+0x550/0xf98 fs/btrfs/reflink.c:895 vfs_clone_file_range+0x62c/0xb68 fs/remap_range.c:403 ioctl_file_clone fs/ioctl.c:239 [inline] ioctl_file_clone_range fs/ioctl.c:257 [inline] do_vfs_ioctl+0xb84/0x1834 fs/ioctl.c:544 __do_sys_ioctl fs/ioctl.c:595 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __arm64_sys_ioctl+0xe4/0x1c4 fs/ioctl.c:583 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x26c arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 INFO: task syz.3.317:8730 blocked for more than 143 seconds. Tainted: G L syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.317 state:D stack:0 pid:8730 tgid:8729 ppid:6579 task_flags:0x40044c flags:0x00000018 Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1250/0x2a7c kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6960 schedule_timeout+0xac/0x270 kernel/time/sleep_timeout.c:75 do_wait_for_common+0x288/0x3f8 kernel/sched/completion.c:100 __wait_for_common kernel/sched/completion.c:121 [inline] wait_for_common kernel/sched/completion.c:132 [inline] wait_for_completion+0x44/0x5c kernel/sched/completion.c:153 __flush_work+0x714/0x8c0 kernel/workqueue.c:4277 __cancel_work_sync kernel/workqueue.c:4397 [inline] cancel_work_sync+0xc4/0x120 kernel/workqueue.c:4434 rfkill_unregister+0x8c/0x208 net/rfkill/core.c:1139 nfc_unregister_device+0x94/0x2d8 net/nfc/core.c:1167 nci_unregister_device+0x1dc/0x21c net/nfc/nci/core.c:1323 virtual_ncidev_close+0x5c/0xa0 drivers/nfc/virtual_ncidev.c:172 __fput+0x340/0x75c fs/file_table.c:468 ____fput+0x20/0x58 fs/file_table.c:496 task_work_run+0x1dc/0x260 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x52c/0x1a1c kernel/exit.c:971 do_group_exit+0x194/0x22c kernel/exit.c:1112 get_signal+0x11dc/0x12f8 kernel/signal.c:3034 arch_do_signal_or_restart+0x268/0x46d4 arch/arm64/kernel/signal.c:1619 __exit_to_user_mode_loop kernel/entry/common.c:41 [inline] exit_to_user_mode_loop+0x88/0x18c kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] exit_to_user_mode_prepare_legacy include/linux/irq-entry-common.h:242 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:81 [inline] el0_svc+0x17c/0x26c arch/arm64/kernel/entry-common.c:725 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 INFO: task syz.6.322:8916 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.6.322 state:D stack:0 pid:8916 tgid:8915 ppid:7116 task_flags:0x400040 flags:0x00000001 Call trace: __switch_to+0x418/0x87c arch/arm64/kernel/process.c:741 (T) context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1250/0x2a7c kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xb4/0x230 kernel/sched/core.c:6960 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7017 __mutex_lock_common+0xd04/0x2678 kernel/locking/mutex.c:692 __mutex_lock kernel/locking/mutex.c:776 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:828 misc_open+0x68/0x33c drivers/char/misc.c:125 chrdev_open+0x1b0/0x4b0 fs/char_dev.c:414 do_dentry_open+0x68c/0x1154 fs/open.c:962 vfs_open+0x44/0x2d4 fs/open.c:1094 do_open fs/namei.c:4628 [inline] path_openat+0x2890/0x3114 fs/namei.c:4787 do_filp_open+0x18c/0x36c fs/namei.c:4814 do_sys_openat2+0x11c/0x1f0 fs/open.c:1430 do_sys_open fs/open.c:1436 [inline] __do_sys_openat fs/open.c:1452 [inline] __se_sys_openat fs/open.c:1447 [inline] __arm64_sys_openat+0x120/0x158 fs/open.c:1447 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x26c arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings Showing all locks held in the system: 1 lock held by init/1: 4 locks held by kworker/0:1/10: #0: ffff0000c0029948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x63c/0x1558 kernel/workqueue.c:3231 #1: ffff800097cd7be0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x6d0/0x1558 kernel/workqueue.c:3231 #2: ffff800092dc6688 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x38/0x1e8 net/rfkill/core.c:1055 #3: ffff0000d62aa100 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline] #3: ffff0000d62aa100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3c/0x258 net/nfc/core.c:143 1 lock held by khungtaskd/32: #0: ffff80008fa5b520 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 include/linux/rcupdate.h:330 4 locks held by kworker/u8:5/384: #0: ffff0000c1843148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x63c/0x1558 kernel/workqueue.c:3231 #1: ffff80009cb37be0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6d0/0x1558 kernel/workqueue.c:3231 #2: ffff800092ad71f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf0/0x638 net/core/net_namespace.c:670 #3: ffff800092dc6688 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xb8/0x208 net/rfkill/core.c:1145 2 locks held by kworker/u8:15/3493: #0: ffff0000c1ff3148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x63c/0x1558 kernel/workqueue.c:3231 #1: ffff8000a2627be0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6d0/0x1558 kernel/workqueue.c:3231 1 lock held by klogd/6200: 2 locks held by getty/6353: #0: ffff0000c19cf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff800099f1e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfc8 drivers/tty/n_tty.c:2211 4 locks held by sshd-session/6558: 1 lock held by syz-executor/6579: #0: ffff800092dc6688 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xb8/0x208 net/rfkill/core.c:1145 3 locks held by kworker/0:10/7395: #0: ffff0000c0029948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x63c/0x1558 kernel/workqueue.c:3231 #1: ffff8000a3e37be0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x6d0/0x1558 kernel/workqueue.c:3231 #2: ffff800092dc6688 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x30/0xe4 net/rfkill/core.c:182 1 lock held by syz.1.217/8105: #0: ffff800092dc6688 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xb8/0x208 net/rfkill/core.c:1145 2 locks held by syz-executor/8567: #0: ffff8000914f3808 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x33c drivers/char/misc.c:125 #1: ffff800092dc6688 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x110/0x744 net/rfkill/core.c:1178 3 locks held by syz.1.313/8683: #0: ffff0000ce0c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_write+0x3c/0x4c drivers/tty/tty_ldsem.c:366 #1: ffff0000ce0c20a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: ldsem_down_write_nested+0x44/0x58 drivers/tty/tty_ldsem.c:410 #2: ffff800092dc6688 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xb8/0x208 net/rfkill/core.c:1145 5 locks held by syz.7.315/8707: #0: ffff0000cefd4420 (sb_writers#12){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2681 [inline] #0: ffff0000cefd4420 (sb_writers#12){.+.+}-{0:0}, at: vfs_writev+0x21c/0x7cc fs/read_write.c:1055 #1: ffff0000cefd4610 (sb_internal#3){.+.+}-{0:0}, at: btrfs_start_transaction+0x34/0x44 fs/btrfs/transaction.c:818 #2: ffff0000f9ec6530 (btrfs_trans_num_writers){++++}-{0:0}, at: spin_unlock include/linux/spinlock.h:391 [inline] #2: ffff0000f9ec6530 (btrfs_trans_num_writers){++++}-{0:0}, at: join_transaction+0x334/0xb5c fs/btrfs/transaction.c:297 #3: ffff0000f9ec6558 (btrfs_trans_num_extwriters){++++}-{0:0}, at: join_transaction+0x360/0xb5c fs/btrfs/transaction.c:298 #4: ffff0000cefd40e0 (&type->s_umount_key#52){++++}-{4:4}, at: try_to_writeback_inodes_sb+0x28/0xbc fs/fs-writeback.c:2853 4 locks held by syz.7.315/8734: #0: ffff0000cefd4420 (sb_writers#12){.+.+}-{0:0}, at: ioctl_file_clone fs/ioctl.c:239 [inline] #0: ffff0000cefd4420 (sb_writers#12){.+.+}-{0:0}, at: ioctl_file_clone_range fs/ioctl.c:257 [inline] #0: ffff0000cefd4420 (sb_writers#12){.+.+}-{0:0}, at: do_vfs_ioctl+0xb84/0x1834 fs/ioctl.c:544 #1: ffff0000f7f7c150 (&sb->s_type->i_mutex_key#23){++++}-{4:4}, at: inode_lock include/linux/fs.h:1027 [inline] #1: ffff0000f7f7c150 (&sb->s_type->i_mutex_key#23){++++}-{4:4}, at: btrfs_inode_lock+0x50/0xdc fs/btrfs/inode.c:367 #2: ffff0000f7f7bfd8 (&ei->i_mmap_lock){++++}-{4:4}, at: btrfs_inode_lock+0xc4/0xdc fs/btrfs/inode.c:370 #3: ffff0000cefd4610 (sb_internal#3){.+.+}-{0:0}, at: btrfs_start_transaction+0x34/0x44 fs/btrfs/transaction.c:818 1 lock held by btrfs-transacti/8724: #0: ffff0000f9ec4850 (&fs_info->transaction_kthread_mutex){+.+.}-{4:4}, at: transaction_kthread+0xc8/0x430 fs/btrfs/disk-io.c:1557 1 lock held by syz.3.317/8730: #0: ffff0000d62aa100 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline] #0: ffff0000d62aa100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x68/0x2d8 net/nfc/core.c:1165 1 lock held by syz.6.322/8916: #0: ffff8000914f3808 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x33c drivers/char/misc.c:125 1 lock held by syz-executor/8932: #0: ffff8000914f3808 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x33c drivers/char/misc.c:125 1 lock held by syz-executor/8978: #0: ffff8000914f3808 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x33c drivers/char/misc.c:125 1 lock held by syz-executor/8979: #0: ffff8000914f3808 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x33c drivers/char/misc.c:125 1 lock held by syz-executor/8995: #0: ffff8000914f3808 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x33c drivers/char/misc.c:125 1 lock held by syz-executor/9001: #0: ffff8000914f3808 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x33c drivers/char/misc.c:125 1 lock held by syz-executor/9003: #0: ffff8000914f3808 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x33c drivers/char/misc.c:125 1 lock held by syz-executor/9006: #0: ffff8000914f3808 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x33c drivers/char/misc.c:125 1 lock held by syz-executor/9007: #0: ffff8000914f3808 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x33c drivers/char/misc.c:125 1 lock held by syz-executor/9009: #0: ffff8000914f3808 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x33c drivers/char/misc.c:125 1 lock held by syz-executor/9012: #0: ffff8000914f3808 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x33c drivers/char/misc.c:125 1 lock held by syz-executor/9016: #0: ffff8000914f3808 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x33c drivers/char/misc.c:125 1 lock held by syz-executor/9019: #0: ffff8000914f3808 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x33c drivers/char/misc.c:125 1 lock held by syz-executor/9020: #0: ffff8000914f3808 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x33c drivers/char/misc.c:125 1 lock held by syz-executor/9022: #0: ffff8000914f3808 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x33c drivers/char/misc.c:125 =============================================