INFO: task syz-executor.3:5954 blocked for more than 143 seconds.
      Not tainted 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3  state:D stack:29824 pid:5954  tgid:5943  ppid:5626   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5408 [inline]
 __schedule+0xf15/0x5d00 kernel/sched/core.c:6745
 __schedule_loop kernel/sched/core.c:6822 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6837
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
 rwsem_down_write_slowpath kernel/locking/rwsem.c:1178 [inline]
 __down_write_common+0x950/0x13f0 kernel/locking/rwsem.c:1306
 inode_lock_nested include/linux/fs.h:826 [inline]
 filename_create+0x1c2/0x530 fs/namei.c:3900
 do_mkdirat+0xab/0x3a0 fs/namei.c:4146
 __do_sys_mkdir fs/namei.c:4174 [inline]
 __se_sys_mkdir fs/namei.c:4172 [inline]
 __x64_sys_mkdir+0xf1/0x140 fs/namei.c:4172
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f38a727d0a9
RSP: 002b:00007f38a7fc60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
RAX: ffffffffffffffda RBX: 00007f38a73b4050 RCX: 00007f38a727d0a9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280
RBP: 00007f38a72ec074 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007f38a73b4050 R15: 00007ffd917d16c8
 </TASK>
INFO: task syz-executor.3:5956 blocked for more than 144 seconds.
      Not tainted 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3  state:D stack:28688 pid:5956  tgid:5943  ppid:5626   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5408 [inline]
 __schedule+0xf15/0x5d00 kernel/sched/core.c:6745
 __schedule_loop kernel/sched/core.c:6822 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6837
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6894
 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086
 __down_read_common kernel/locking/rwsem.c:1250 [inline]
 __down_read kernel/locking/rwsem.c:1263 [inline]
 down_read+0x124/0x330 kernel/locking/rwsem.c:1528
 inode_lock_shared include/linux/fs.h:801 [inline]
 lookup_slow fs/namei.c:1708 [inline]
 walk_component+0x342/0x5b0 fs/namei.c:2004
 link_path_walk.part.0.constprop.0+0x77f/0xcd0 fs/namei.c:2331
 link_path_walk fs/namei.c:2255 [inline]
 path_lookupat+0x93/0x770 fs/namei.c:2492
 filename_lookup+0x1e5/0x5b0 fs/namei.c:2522
 vfs_statx+0x13e/0x550 fs/stat.c:244
 vfs_fstatat+0xb3/0x150 fs/stat.c:304
 vfs_stat include/linux/fs.h:3258 [inline]
 __do_sys_newstat+0x9d/0x120 fs/stat.c:441
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f38a727d0a9
RSP: 002b:00007f38a7fa50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
RAX: ffffffffffffffda RBX: 00007f38a73b4120 RCX: 00007f38a727d0a9
RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000020000340
RBP: 00007f38a72ec074 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007f38a73b4120 R15: 00007ffd917d16c8
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/30:
 #0: ffffffff8dbb1920 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline]
 #0: ffffffff8dbb1920 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline]
 #0: ffffffff8dbb1920 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 kernel/locking/lockdep.c:6614
2 locks held by kworker/1:1/45:
 #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 kernel/workqueue.c:3206
 #1: ffffc90000b57d80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 kernel/workqueue.c:3207
2 locks held by getty/4833:
 #0: ffff88802acee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 drivers/tty/n_tty.c:2211
1 lock held by syz-fuzzer/5074:
1 lock held by syz-executor.4/5099:
2 locks held by syz-executor.3/5944:
1 lock held by syz-executor.3/5954:
 #0: ffff88805a288188 (&type->i_mutex_dir_key#12/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:826 [inline]
 #0: ffff88805a288188 (&type->i_mutex_dir_key#12/1){+.+.}-{3:3}, at: filename_create+0x1c2/0x530 fs/namei.c:3900
1 lock held by syz-executor.3/5956:
 #0: ffff88805a288188 (&type->i_mutex_dir_key#12){.+.+}-{3:3}, at: inode_lock_shared include/linux/fs.h:801 [inline]
 #0: ffff88805a288188 (&type->i_mutex_dir_key#12){.+.+}-{3:3}, at: lookup_slow fs/namei.c:1708 [inline]
 #0: ffff88805a288188 (&type->i_mutex_dir_key#12){.+.+}-{3:3}, at: walk_component+0x342/0x5b0 fs/namei.c:2004
4 locks held by syz-executor.1/5945:
 #0: ffff88801f0e4d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 net/bluetooth/hci_core.c:554
 #1: ffff88801f0e4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x339/0x1100 net/bluetooth/hci_sync.c:5050
 #2: ffffffff8f9aa7a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_disconn_cfm include/net/bluetooth/hci_core.h:1982 [inline]
 #2: ffffffff8f9aa7a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 net/bluetooth/hci_conn.c:2584
 #3: ffffffff8dbbd0b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 kernel/rcu/tree_exp.h:323
4 locks held by kworker/u8:16/6928:
2 locks held by syz-executor.2/7451:
1 lock held by syz-executor.2/7455:
1 lock held by syz-executor.3/7610: