INFO: task syz-executor:4023 blocked for more than 145 seconds.
      Not tainted 5.15.176-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:    0 pid: 4023 ppid:     1 flags:0x00000009
Call trace:
 __switch_to+0x308/0x588 arch/arm64/kernel/process.c:518
 context_switch kernel/sched/core.c:5027 [inline]
 __schedule+0xf10/0x1e48 kernel/sched/core.c:6373
 schedule+0x11c/0x1c8 kernel/sched/core.c:6456
 wb_wait_for_completion+0x160/0x2b4 fs/fs-writeback.c:191
 sync_inodes_sb+0x220/0x944 fs/fs-writeback.c:2770
 sync_filesystem+0x160/0x218 fs/sync.c:64
 generic_shutdown_super+0x70/0x2f0 fs/super.c:448
 kill_block_super+0x70/0xdc fs/super.c:1427
 deactivate_locked_super+0xb8/0x13c fs/super.c:335
 deactivate_super+0x108/0x128 fs/super.c:366
 cleanup_mnt+0x3c0/0x474 fs/namespace.c:1143
 __cleanup_mnt+0x20/0x30 fs/namespace.c:1150
 task_work_run+0x130/0x1e4 kernel/task_work.c:188
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 do_notify_resume+0x262c/0x32b8 arch/arm64/kernel/signal.c:946
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline]
 el0_svc+0xfc/0x1f0 arch/arm64/kernel/entry-common.c:609
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584

Showing all locks held in the system:
2 locks held by kworker/1:0/21:
 #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 kernel/workqueue.c:2283
 #1: ffff80001bdb7c00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 kernel/workqueue.c:2285
2 locks held by kworker/1:1/25:
 #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 kernel/workqueue.c:2283
 #1: ffff80001be07c00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 kernel/workqueue.c:2285
1 lock held by khungtaskd/27:
 #0: ffff800014d32360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:311
2 locks held by kworker/u4:4/338:
 #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 kernel/workqueue.c:2283
 #1: ffff80001fec7c00 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 kernel/workqueue.c:2285
3 locks held by udevd/3642:
2 locks held by getty/3783:
 #0: ffff0000d35ad098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 drivers/tty/tty_ldsem.c:340
 #1: ffff80001d1902e8 (&ldata->atomic_read_lock){+.+.}-{3:3}
, at: n_tty_read+0x414/0x1204 drivers/tty/n_tty.c:2158
2 locks held by syz-executor/4023:
 #0: 
ffff0000d49f40e0 (&type->s_umount_key#60){++++}-{3:3}, at: deactivate_super+0x100/0x128 fs/super.c:365
 #1: 
ffff0000cb4da7d8 (&bdi->wb_switch_rwsem){+.+.}-{3:3}
, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:362 [inline]
, at: sync_inodes_sb+0x208/0x944 fs/fs-writeback.c:2768
5 locks held by kworker/u5:2/4026:
 #0: 
ffff0000c1f7c938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 kernel/workqueue.c:2283
 #1: 
ffff80001ffb7c00
 ((work_completion)(&hdev->error_reset)
){+.+.}-{0:0}
, at: process_one_work+0x6ac/0x11b8 kernel/workqueue.c:2285
 #2: ffff0000cfbb0ff0
 (
&hdev->req_lock
){+.+.}-{3:3}
, at: hci_dev_do_close+0x64/0x1060 net/bluetooth/hci_core.c:1737
 #3: 
ffff0000cfbb0078
 (
&hdev->lock
){+.+.}-{3:3}
, at: hci_dev_do_close+0x338/0x1060 net/bluetooth/hci_core.c:1782
 #4: 
ffff800016de7ca8
 (
hci_cb_list_lock
){+.+.}-{3:3}
, at: hci_disconn_cfm include/net/bluetooth/hci_core.h:1517 [inline]
, at: hci_conn_hash_flush+0xb8/0x220 net/bluetooth/hci_conn.c:1622
1 lock held by syz-executor/4029:
 #0: 
ffff800014d36968
 (
rcu_state.exp_mutex
){+.+.}-{3:3}
, at: exp_funnel_lock kernel/rcu/tree_exp.h:290 [inline]
, at: synchronize_rcu_expedited+0x320/0x660 kernel/rcu/tree_exp.h:845
2 locks held by kworker/1:8/4159:
 #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 kernel/workqueue.c:2283
 #1: 
ffff800020657c00 (
(work_completion)(&pwq->unbound_release_work)
){+.+.}-{0:0}
, at: process_one_work+0x6ac/0x11b8 kernel/workqueue.c:2285
2 locks held by udevd/4172:
 #0: 
ffff0000cb3f6118
 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xe0/0x6b0 block/bdev.c:912
 #1: ffff0000cb4d7468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa8/0x9b8 drivers/block/loop.c:1365
4 locks held by kworker/u4:10/4216:
 #0: ffff0000c2073938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 kernel/workqueue.c:2283
 #1: ffff800020877c00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 kernel/workqueue.c:2285
 #2: ffff0000d49f4650 (sb_internal#2){.+.+}-{0:0}, at: xfs_bmapi_convert_delalloc+0x1e0/0x1018 fs/xfs/libxfs/xfs_bmap.c:4573
 #3: ffff0000de488868 (&xfs_nondir_ilock_class){++++}-{3:3}, at: mrupdate_nested fs/xfs/mrlock.h:36 [inline]
 #3: ffff0000de488868 (&xfs_nondir_ilock_class){++++}-{3:3}, at: xfs_ilock+0x26c/0x4c4 fs/xfs/xfs_inode.c:200
2 locks held by kworker/0:13/4382:
 #0: ffff0000c0021938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 kernel/workqueue.c:2283
 #1: ffff800020777c00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 kernel/workqueue.c:2285
2 locks held by kworker/1:14/4878:
 #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 kernel/workqueue.c:2283
 #1: 
ffff800021ba7c00 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 kernel/workqueue.c:2285
5 locks held by kworker/1:16/4880:
2 locks held by kworker/u4:15/4988:
 #0: 
ffff0001b41ab918
 (&rq->__lock){-.-.}-{2:2}, at: process_one_work+0x66c/0x11b8 kernel/workqueue.c:2283
 #1: ffff800020947c00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 kernel/workqueue.c:2285
2 locks held by kworker/1:19/5469:
 #0: 
ffff0000c0020938
 (
(wq_completion)events
){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 kernel/workqueue.c:2283
 #1: ffff800021a57c00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 kernel/workqueue.c:2285

=============================================