INFO: task kworker/0:4:6527 blocked for more than 143 seconds. Not tainted 6.14.0-syzkaller-gd6b13dbd03b7 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:4 state:D stack:0 pid:6527 tgid:6527 ppid:2 task_flags:0x4208060 flags:0x00000008 Workqueue: events rfkill_sync_work Call trace: __switch_to+0x414/0x788 arch/arm64/kernel/process.c:701 (T) context_switch kernel/sched/core.c:5378 [inline] __schedule+0x1360/0x257c kernel/sched/core.c:6765 __schedule_loop kernel/sched/core.c:6842 [inline] schedule+0xbc/0x238 kernel/sched/core.c:6857 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6914 __mutex_lock_common+0xd30/0x24b8 kernel/locking/mutex.c:662 __mutex_lock kernel/locking/mutex.c:730 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:782 device_lock include/linux/device.h:1030 [inline] nfc_dev_down net/nfc/core.c:143 [inline] nfc_rfkill_set_block+0x50/0x2d0 net/nfc/core.c:179 rfkill_set_block+0x18c/0x37c net/rfkill/core.c:346 rfkill_sync net/rfkill/core.c:379 [inline] rfkill_sync_work+0x124/0x20c net/rfkill/core.c:1056 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x97c/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 INFO: task syz.3.736:9355 blocked for more than 143 seconds. Not tainted 6.14.0-syzkaller-gd6b13dbd03b7 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.736 state:D stack:0 pid:9355 tgid:9355 ppid:6473 task_flags:0x400040 flags:0x00000009 Call trace: __switch_to+0x414/0x788 arch/arm64/kernel/process.c:701 (T) context_switch kernel/sched/core.c:5378 [inline] __schedule+0x1360/0x257c kernel/sched/core.c:6765 __schedule_loop kernel/sched/core.c:6842 [inline] schedule+0xbc/0x238 kernel/sched/core.c:6857 schedule_timeout+0xb4/0x290 kernel/time/sleep_timeout.c:75 do_wait_for_common+0x30c/0x468 kernel/sched/completion.c:95 __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common kernel/sched/completion.c:127 [inline] wait_for_completion+0x48/0x60 kernel/sched/completion.c:148 __flush_work+0x798/0x958 kernel/workqueue.c:4244 __cancel_work_sync kernel/workqueue.c:4364 [inline] cancel_work_sync+0xc4/0x120 kernel/workqueue.c:4401 rfkill_unregister+0x8c/0x210 net/rfkill/core.c:1139 nfc_unregister_device+0x98/0x290 net/nfc/core.c:1167 nci_unregister_device+0x1dc/0x21c net/nfc/nci/core.c:1323 virtual_ncidev_close+0x5c/0xa0 drivers/nfc/virtual_ncidev.c:172 __fput+0x340/0x760 fs/file_table.c:464 ____fput+0x20/0x30 fs/file_table.c:492 task_work_run+0x230/0x2e0 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] do_notify_resume+0x178/0x1f4 arch/arm64/kernel/entry-common.c:151 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:169 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:178 [inline] el0_svc+0xac/0x168 arch/arm64/kernel/entry-common.c:745 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 INFO: task syz-executor:9540 blocked for more than 143 seconds. Not tainted 6.14.0-syzkaller-gd6b13dbd03b7 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:9540 tgid:9540 ppid:1 task_flags:0x400040 flags:0x00000000 Call trace: __switch_to+0x414/0x788 arch/arm64/kernel/process.c:701 (T) context_switch kernel/sched/core.c:5378 [inline] __schedule+0x1360/0x257c kernel/sched/core.c:6765 __schedule_loop kernel/sched/core.c:6842 [inline] schedule+0xbc/0x238 kernel/sched/core.c:6857 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6914 __mutex_lock_common+0xd30/0x24b8 kernel/locking/mutex.c:662 __mutex_lock kernel/locking/mutex.c:730 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:782 rfkill_register+0x44/0x7d4 net/rfkill/core.c:1071 hci_register_dev+0x398/0x8b0 net/bluetooth/hci_core.c:2597 __vhci_create_device drivers/bluetooth/hci_vhci.c:428 [inline] vhci_create_device+0x33c/0x69c drivers/bluetooth/hci_vhci.c:470 vhci_get_user drivers/bluetooth/hci_vhci.c:527 [inline] vhci_write+0x324/0x3c8 drivers/bluetooth/hci_vhci.c:607 new_sync_write fs/read_write.c:586 [inline] vfs_write+0x704/0xa9c fs/read_write.c:679 ksys_write+0x15c/0x26c fs/read_write.c:731 __do_sys_write fs/read_write.c:742 [inline] __se_sys_write fs/read_write.c:739 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:739 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 Showing all locks held in the system: 1 lock held by khungtaskd/32: #0: ffff80008ff32620 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:336 2 locks held by kworker/u8:2/43: #0: ffff0001b3770798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x44 kernel/sched/core.c:598 #1: ffff800099657ba0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x708/0x1638 kernel/workqueue.c:3212 2 locks held by getty/6226: #0: ffff0000d379c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80009bf8b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41c/0x1228 drivers/tty/n_tty.c:2211 4 locks held by kworker/0:4/6527: #0: ffff0000c0028d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x674/0x1638 kernel/workqueue.c:3212 #1: ffff8000a4c57ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x708/0x1638 kernel/workqueue.c:3212 #2: ffff800093101da8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x30/0x20c net/rfkill/core.c:1055 #3: ffff0000ed754100 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline] #3: ffff0000ed754100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down net/nfc/core.c:143 [inline] #3: ffff0000ed754100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2d0 net/nfc/core.c:179 1 lock held by syz.3.736/9355: #0: ffff0000ed754100 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline] #0: ffff0000ed754100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x6c/0x290 net/nfc/core.c:1165 2 locks held by syz-executor/9540: #0: ffff0000d2662918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x44/0x69c drivers/bluetooth/hci_vhci.c:469 #1: ffff800093101da8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7d4 net/rfkill/core.c:1071 2 locks held by syz-executor/10281: #0: ffff0000dbb89918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x44/0x69c drivers/bluetooth/hci_vhci.c:469 #1: ffff800093101da8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7d4 net/rfkill/core.c:1071 2 locks held by syz.0.1006/10305: #0: ffff800091825388 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 #1: ffff800093101da8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12c/0x778 net/rfkill/core.c:1178 1 lock held by syz.1.1011/10321: #0: ffff800091825388 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz.2.1016/10337: #0: ffff800091825388 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz-executor/10407: #0: ffff800091825388 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz-executor/10408: #0: ffff800091825388 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz-executor/10419: #0: ffff800091825388 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz.4.1067/10500: #0: ffff800091825388 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz-executor/10502: #0: ffff800091825388 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz-executor/10504: #0: ffff800091825388 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz-executor/10506: #0: ffff800091825388 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz-executor/10508: #0: ffff800091825388 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by syz-executor/10510: #0: ffff800091825388 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 drivers/char/misc.c:143 1 lock held by dhcpcd/10512: #0: ffff0000f8a86e08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:877 [inline] #0: ffff0000f8a86e08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: __sock_release net/socket.c:646 [inline] #0: ffff0000f8a86e08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x80/0x1e8 net/socket.c:1398 =============================================