INFO: task kworker/1:2:2199 blocked for more than 143 seconds. Not tainted 6.9.0-rc3-syzkaller-gb5d2afe8745b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:2 state:D stack:0 pid:2199 tgid:2199 ppid:2 flags:0x00000008 Workqueue: events aio_fsync_work Call trace: __switch_to+0x314/0x560 arch/arm64/kernel/process.c:553 context_switch kernel/sched/core.c:5409 [inline] __schedule+0x14bc/0x24ec kernel/sched/core.c:6746 __schedule_loop kernel/sched/core.c:6823 [inline] schedule+0xbc/0x238 kernel/sched/core.c:6838 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6895 rwsem_down_write_slowpath+0xd10/0x14c8 kernel/locking/rwsem.c:1178 __down_write_common kernel/locking/rwsem.c:1306 [inline] __down_write kernel/locking/rwsem.c:1315 [inline] down_write+0xb4/0xc0 kernel/locking/rwsem.c:1580 inode_lock include/linux/fs.h:795 [inline] __generic_file_fsync+0xa4/0x19c fs/libfs.c:1477 generic_file_fsync+0x7c/0xf8 fs/libfs.c:1514 vfs_fsync_range fs/sync.c:188 [inline] vfs_fsync+0x15c/0x178 fs/sync.c:202 aio_fsync_work+0x84/0x17c fs/aio.c:1650 process_one_work+0x7b8/0x15d4 kernel/workqueue.c:3254 process_scheduled_works kernel/workqueue.c:3335 [inline] worker_thread+0x938/0xef4 kernel/workqueue.c:3416 kthread+0x288/0x310 kernel/kthread.c:388 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860 Showing all locks held in the system: 3 locks held by kworker/1:1/26: #0: ffff0000c0028948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x668/0x15d4 kernel/workqueue.c:3228 #1: ffff800093d17c20 ((work_completion)(&req->work)){+.+.}-{0:0}, at: process_one_work+0x6b4/0x15d4 kernel/workqueue.c:3228 #2: ffff0000f02fd6a8 (&type->i_mutex_dir_key#16){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:795 [inline] #2: ffff0000f02fd6a8 (&type->i_mutex_dir_key#16){+.+.}-{3:3}, at: __generic_file_fsync+0xa4/0x19c fs/libfs.c:1477 1 lock held by khungtaskd/30: #0: ffff80008f057880 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:328 3 locks held by kworker/u9:0/51: #0: ffff0000dbf2b148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x668/0x15d4 kernel/workqueue.c:3228 #1: ffff800095307c20 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x6b4/0x15d4 kernel/workqueue.c:3228 #2: ffff0000f3cc9060 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_open net/bluetooth/hci_core.c:481 [inline] #2: ffff0000f3cc9060 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x148/0x68c net/bluetooth/hci_core.c:1015 3 locks held by kworker/1:2/2199: #0: ffff0000c0028948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x668/0x15d4 kernel/workqueue.c:3228 #1: ffff80009d077c20 ((work_completion)(&req->work)){+.+.}-{0:0}, at: process_one_work+0x6b4/0x15d4 kernel/workqueue.c:3228 #2: ffff0000f02fcc18 (&type->i_mutex_dir_key#16){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:795 [inline] #2: ffff0000f02fcc18 (&type->i_mutex_dir_key#16){+.+.}-{3:3}, at: __generic_file_fsync+0xa4/0x19c fs/libfs.c:1477 2 locks held by getty/5996: #0: ffff0000d77c80a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff800097b9b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41c/0x1228 drivers/tty/n_tty.c:2201 3 locks held by kworker/0:8/6317: #0: ffff0000c0028948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x668/0x15d4 kernel/workqueue.c:3228 #1: ffff800099ca7c20 ((work_completion)(&req->work)){+.+.}-{0:0}, at: process_one_work+0x6b4/0x15d4 kernel/workqueue.c:3228 #2: ffff0000df2086d0 (&type->i_mutex_dir_key#16){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:795 [inline] #2: ffff0000df2086d0 (&type->i_mutex_dir_key#16){+.+.}-{3:3}, at: __generic_file_fsync+0xa4/0x19c fs/libfs.c:1477 3 locks held by kworker/1:5/6673: #0: ffff0000c0028948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x668/0x15d4 kernel/workqueue.c:3228 #1: ffff80009b6c7c20 ((work_completion)(&req->work)){+.+.}-{0:0}, at: process_one_work+0x6b4/0x15d4 kernel/workqueue.c:3228 #2: ffff0000df208188 (&type->i_mutex_dir_key#16){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:795 [inline] #2: ffff0000df208188 (&type->i_mutex_dir_key#16){+.+.}-{3:3}, at: __generic_file_fsync+0xa4/0x19c fs/libfs.c:1477 3 locks held by kworker/1:8/6997: #0: ffff0000c0028948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x668/0x15d4 kernel/workqueue.c:3228 #1: ffff80009d7c7c20 ((work_completion)(&req->work)){+.+.}-{0:0}, at: process_one_work+0x6b4/0x15d4 kernel/workqueue.c:3228 #2: ffff0000f02fd160 (&type->i_mutex_dir_key#16){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:795 [inline] #2: ffff0000f02fd160 (&type->i_mutex_dir_key#16){+.+.}-{3:3}, at: __generic_file_fsync+0xa4/0x19c fs/libfs.c:1477 3 locks held by syz-executor.2/8463: 1 lock held by syz-executor.1/9031: 2 locks held by syz-executor.3/9033: 1 lock held by syz-executor.0/9518: 1 lock held by syz-executor.4/9527: 1 lock held by syz-executor.2/10528: #0: ffff00013d8160a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_write+0x3c/0x4c drivers/tty/tty_ldsem.c:366 2 locks held by syz-executor.1/10542: 2 locks held by syz-executor.3/10558: 2 locks held by syz-executor.0/10560: 3 locks held by syz-executor.4/10562: 2 locks held by cmp/10574: =============================================