INFO: task kworker/1:5:4072 blocked for more than 143 seconds. Not tainted 5.15.181-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:5 state:D stack: 0 pid: 4072 ppid: 2 flags:0x00000008 Workqueue: events rfkill_global_led_trigger_worker Call trace: __switch_to+0x2f4/0x558 arch/arm64/kernel/process.c:521 context_switch kernel/sched/core.c:5030 [inline] __schedule+0xe00/0x1c0c kernel/sched/core.c:6376 schedule+0x11c/0x1c8 kernel/sched/core.c:6459 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6518 __mutex_lock_common+0xa9c/0x1edc kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0xac/0x11c kernel/locking/mutex.c:743 rfkill_global_led_trigger_worker+0x30/0xe4 net/rfkill/core.c:181 process_one_work+0x79c/0x1140 kernel/workqueue.c:2310 worker_thread+0x8f4/0x101c kernel/workqueue.c:2457 kthread+0x374/0x454 kernel/kthread.c:334 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870 INFO: task udevd:4200 blocked for more than 143 seconds. Not tainted 5.15.181-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack: 0 pid: 4200 ppid: 3643 flags:0x0000000c Call trace: __switch_to+0x2f4/0x558 arch/arm64/kernel/process.c:521 context_switch kernel/sched/core.c:5030 [inline] __schedule+0xe00/0x1c0c kernel/sched/core.c:6376 schedule+0x11c/0x1c8 kernel/sched/core.c:6459 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6518 __mutex_lock_common+0xa9c/0x1edc kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0xac/0x11c kernel/locking/mutex.c:743 device_lock include/linux/device.h:760 [inline] uevent_show+0x170/0x334 drivers/base/core.c:2408 dev_attr_show+0x60/0xcc drivers/base/core.c:2110 sysfs_kf_seq_show+0x2ac/0x440 fs/sysfs/file.c:61 kernfs_seq_show+0x118/0x154 fs/kernfs/file.c:168 seq_read_iter+0x3ac/0xc00 fs/seq_file.c:230 kernfs_fop_read_iter+0x140/0x500 fs/kernfs/file.c:241 call_read_iter include/linux/fs.h:2166 [inline] new_sync_read fs/read_write.c:404 [inline] vfs_read+0x7c4/0xa10 fs/read_write.c:485 ksys_read+0x120/0x210 fs/read_write.c:623 __do_sys_read fs/read_write.c:633 [inline] __se_sys_read fs/read_write.c:631 [inline] __arm64_sys_read+0x7c/0x90 fs/read_write.c:631 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x78/0x1e0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 INFO: task kworker/1:8:4392 blocked for more than 143 seconds. Not tainted 5.15.181-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:8 state:D stack: 0 pid: 4392 ppid: 2 flags:0x00000008 Workqueue: events rfkill_sync_work Call trace: __switch_to+0x2f4/0x558 arch/arm64/kernel/process.c:521 context_switch kernel/sched/core.c:5030 [inline] __schedule+0xe00/0x1c0c kernel/sched/core.c:6376 schedule+0x11c/0x1c8 kernel/sched/core.c:6459 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6518 __mutex_lock_common+0xa9c/0x1edc kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0xac/0x11c kernel/locking/mutex.c:743 device_lock include/linux/device.h:760 [inline] nfc_dev_down net/nfc/core.c:143 [inline] nfc_rfkill_set_block+0x4c/0x2a8 net/nfc/core.c:179 rfkill_set_block+0x18c/0x374 net/rfkill/core.c:345 rfkill_sync_work+0x84/0xf8 net/rfkill/core.c:1030 process_one_work+0x79c/0x1140 kernel/workqueue.c:2310 worker_thread+0x8f4/0x101c kernel/workqueue.c:2457 kthread+0x374/0x454 kernel/kthread.c:334 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870 INFO: task syz.2.1142:7572 blocked for more than 143 seconds. Not tainted 5.15.181-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.1142 state:D stack: 0 pid: 7572 ppid: 4031 flags:0x00000001 Call trace: __switch_to+0x2f4/0x558 arch/arm64/kernel/process.c:521 context_switch kernel/sched/core.c:5030 [inline] __schedule+0xe00/0x1c0c kernel/sched/core.c:6376 schedule+0x11c/0x1c8 kernel/sched/core.c:6459 schedule_timeout+0xb4/0x2c8 kernel/time/timer.c:1890 do_wait_for_common+0x1fc/0x35c kernel/sched/completion.c:85 __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x48/0x60 kernel/sched/completion.c:138 __flush_work+0x128/0x1bc kernel/workqueue.c:3094 __cancel_work_timer+0x2ec/0x448 kernel/workqueue.c:3181 cancel_work_sync+0x24/0x38 kernel/workqueue.c:3217 rfkill_unregister+0x8c/0x208 net/rfkill/core.c:1112 nfc_unregister_device+0x94/0x288 net/nfc/core.c:1167 nci_unregister_device+0x1e0/0x22c net/nfc/nci/core.c:1315 virtual_ncidev_close+0x70/0xb0 drivers/nfc/virtual_ncidev.c:170 __fput+0x1c0/0x7f8 fs/file_table.c:311 ____fput+0x20/0x30 fs/file_table.c:339 task_work_run+0x12c/0x1e0 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x24b4/0x3128 arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1e0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 INFO: task syz.3.1158:7632 blocked for more than 143 seconds. Not tainted 5.15.181-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.1158 state:D stack: 0 pid: 7632 ppid: 4033 flags:0x00000001 Call trace: __switch_to+0x2f4/0x558 arch/arm64/kernel/process.c:521 context_switch kernel/sched/core.c:5030 [inline] __schedule+0xe00/0x1c0c kernel/sched/core.c:6376 schedule+0x11c/0x1c8 kernel/sched/core.c:6459 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6518 __mutex_lock_common+0xa9c/0x1edc kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0xac/0x11c kernel/locking/mutex.c:743 rfkill_fop_open+0x110/0x5b0 net/rfkill/core.c:1151 misc_open+0x2f0/0x368 drivers/char/misc.c:141 chrdev_open+0x26c/0x4f0 fs/char_dev.c:414 do_dentry_open+0x760/0xebc fs/open.c:826 vfs_open+0x7c/0x90 fs/open.c:956 do_open fs/namei.c:3608 [inline] path_openat+0x1f80/0x26e4 fs/namei.c:3742 do_filp_open+0x164/0x330 fs/namei.c:3769 do_sys_openat2+0x128/0x3d8 fs/open.c:1253 do_sys_open fs/open.c:1269 [inline] __do_sys_openat fs/open.c:1285 [inline] __se_sys_openat fs/open.c:1280 [inline] __arm64_sys_openat+0x120/0x154 fs/open.c:1280 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x78/0x1e0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 INFO: task syz.4.1162:7641 blocked for more than 143 seconds. Not tainted 5.15.181-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.1162 state:D stack: 0 pid: 7641 ppid: 4028 flags:0x00000001 Call trace: __switch_to+0x2f4/0x558 arch/arm64/kernel/process.c:521 context_switch kernel/sched/core.c:5030 [inline] __schedule+0xe00/0x1c0c kernel/sched/core.c:6376 schedule+0x11c/0x1c8 kernel/sched/core.c:6459 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6518 __mutex_lock_common+0xa9c/0x1edc kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0xac/0x11c kernel/locking/mutex.c:743 misc_open+0x6c/0x368 drivers/char/misc.c:107 chrdev_open+0x26c/0x4f0 fs/char_dev.c:414 do_dentry_open+0x760/0xebc fs/open.c:826 vfs_open+0x7c/0x90 fs/open.c:956 do_open fs/namei.c:3608 [inline] path_openat+0x1f80/0x26e4 fs/namei.c:3742 do_filp_open+0x164/0x330 fs/namei.c:3769 do_sys_openat2+0x128/0x3d8 fs/open.c:1253 do_sys_open fs/open.c:1269 [inline] __do_sys_openat fs/open.c:1285 [inline] __se_sys_openat fs/open.c:1280 [inline] __arm64_sys_openat+0x120/0x154 fs/open.c:1280 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x78/0x1e0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 Showing all locks held in the system: 1 lock held by khungtaskd/27: #0: ffff8000143211e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:311 2 locks held by getty/3783: #0: ffff0000d3994098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 drivers/tty/tty_ldsem.c:340 #1: ffff80001bd6c2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2f0/0xf6c drivers/tty/n_tty.c:2158 1 lock held by syz-executor/4031: #0: ffff8000164f7c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xb8/0x208 net/rfkill/core.c:1118 3 locks held by kworker/1:5/4072: #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001fa57c00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff8000164f7c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x30/0xe4 net/rfkill/core.c:181 4 locks held by udevd/4200: #0: ffff0000ceaebb08 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xa8/0xc00 fs/seq_file.c:182 #1: ffff0000e8822488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x58/0x390 fs/kernfs/file.c:112 #2: ffff0000f7d241d8 (kn->active#2){++++}-{0:0}, at: kernfs_seq_start+0x74/0x390 fs/kernfs/file.c:113 #3: ffff0000d0ab6190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:760 [inline] #3: ffff0000d0ab6190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x170/0x334 drivers/base/core.c:2408 4 locks held by kworker/1:8/4392: #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001fba7c00 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff8000164f7c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_sync_work+0x34/0xf8 net/rfkill/core.c:1028 #3: ffff0000d0ab6190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:760 [inline] #3: ffff0000d0ab6190 (&dev->mutex){....}-{3:3}, at: nfc_dev_down net/nfc/core.c:143 [inline] #3: ffff0000d0ab6190 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2a8 net/nfc/core.c:179 1 lock held by syz.2.1142/7572: #0: ffff0000d0ab6190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:760 [inline] #0: ffff0000d0ab6190 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x68/0x288 net/nfc/core.c:1165 2 locks held by syz.3.1158/7632: #0: ffff8000152d5288 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 drivers/char/misc.c:107 #1: ffff8000164f7c08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x110/0x5b0 net/rfkill/core.c:1151 1 lock held by syz.4.1162/7641: #0: ffff8000152d5288 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 drivers/char/misc.c:107 1 lock held by syz.0.1177/7704: #0: ffff8000152d5288 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 drivers/char/misc.c:107 1 lock held by syz-executor/7735: #0: ffff8000152d5288 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 drivers/char/misc.c:107 1 lock held by syz-executor/7758: #0: ffff8000152d5288 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 drivers/char/misc.c:107 1 lock held by syz-executor/7768: #0: ffff8000152d5288 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 drivers/char/misc.c:107 1 lock held by syz-executor/7804: #0: ffff8000152d5288 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 drivers/char/misc.c:107 1 lock held by syz-executor/8107: #0: ffff8000152d5288 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 drivers/char/misc.c:107 1 lock held by syz-executor/8122: #0: ffff8000152d5288 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 drivers/char/misc.c:107 1 lock held by syz-executor/8134: #0: ffff8000152d5288 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 drivers/char/misc.c:107 1 lock held by syz-executor/8159: #0: ffff8000152d5288 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 drivers/char/misc.c:107 1 lock held by syz-executor/8471: #0: ffff8000152d5288 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 drivers/char/misc.c:107 1 lock held by syz-executor/8487: #0: ffff8000152d5288 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 drivers/char/misc.c:107 1 lock held by syz-executor/8500: #0: ffff8000152d5288 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 drivers/char/misc.c:107 1 lock held by syz-executor/8552: #0: ffff8000152d5288 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 drivers/char/misc.c:107 2 locks held by syz.1.1480/8584: #0: ffff0000e5084ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x60/0x105c net/bluetooth/hci_core.c:1737 #1: ffff0000e5084078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x334/0x105c net/bluetooth/hci_core.c:1782 =============================================