INFO: task syz-executor.4:6667 blocked for more than 143 seconds. Not tainted 6.9.0-rc4-syzkaller-00274-g3b68086599f8 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:17776 pid:6667 tgid:6666 ppid:6001 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x1796/0x4a00 kernel/sched/core.c:6746 __schedule_loop kernel/sched/core.c:6823 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6838 io_schedule+0x8d/0x110 kernel/sched/core.c:9044 bit_wait_io+0x12/0xd0 kernel/sched/wait_bit.c:209 __wait_on_bit+0xb0/0x2f0 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0x1d5/0x260 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:101 [inline] __wait_on_buffer fs/buffer.c:123 [inline] wait_on_buffer include/linux/buffer_head.h:389 [inline] __sync_dirty_buffer+0x2f7/0x390 fs/buffer.c:2848 ntfs_write_bh+0x5f7/0x7c0 fs/ntfs3/fsntfs.c:1481 mi_write+0x9b/0x1e0 fs/ntfs3/record.c:388 ni_write_inode+0xc99/0x1010 fs/ntfs3/frecord.c:3372 ntfs_set_state+0x52f/0x6c0 fs/ntfs3/fsntfs.c:991 ntfs_sync_fs+0x1ca/0x1f0 fs/ntfs3/super.c:762 sync_filesystem+0xed/0x230 fs/sync.c:56 generic_shutdown_super+0x72/0x2d0 fs/super.c:620 kill_block_super+0x44/0x90 fs/super.c:1675 ntfs3_kill_sb+0x44/0x1b0 fs/ntfs3/super.c:1785 deactivate_locked_super+0xc4/0x130 fs/super.c:472 cleanup_mnt+0x426/0x4c0 fs/namespace.c:1267 task_work_run+0x24f/0x310 kernel/task_work.c:180 exit_task_work include/linux/task_work.h:38 [inline] do_exit+0xa1b/0x27e0 kernel/exit.c:878 do_group_exit+0x207/0x2c0 kernel/exit.c:1027 get_signal+0x16a1/0x1740 kernel/signal.c:2911 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x102/0x240 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7efc1aa7dea9 RSP: 002b:00007efc1b8980c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: fffffffffffffff4 RBX: 00007efc1ababf80 RCX: 00007efc1aa7dea9 RDX: 0000000000000000 RSI: 00000000200000c0 RDI: ffffffffffffff9c RBP: 00007efc1aaca4a4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007efc1ababf80 R15: 00007ffe3c416818 Showing all locks held in the system: 2 locks held by init/1: 4 locks held by kworker/u8:0/10: #0: ffff888079412148 ((wq_completion)loop2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3229 [inline] #0: ffff888079412148 ((wq_completion)loop2){+.+.}-{0:0}, at: process_scheduled_works+0x8e0/0x17c0 kernel/workqueue.c:3335 #1: ffffc900000f7d00 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3230 [inline] #1: ffffc900000f7d00 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}, at: process_scheduled_works+0x91b/0x17c0 kernel/workqueue.c:3335 #2: ffff888015ee2420 (sb_writers#5){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2855 [inline] #2: ffff888015ee2420 (sb_writers#5){.+.+}-{0:0}, at: vfs_iter_write+0x1f6/0x5d0 fs/read_write.c:894 #3: ffff88807834ebd0 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:795 [inline] #3: ffff88807834ebd0 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: shmem_file_write_iter+0x83/0x120 mm/shmem.c:2910 4 locks held by kworker/u8:1/11: 1 lock held by khungtaskd/29: #0: ffffffff8e334d20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] #0: ffffffff8e334d20 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline] #0: ffffffff8e334d20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6614 5 locks held by kworker/u8:6/1045: 4 locks held by kworker/u9:1/4470: #0: ffff888037360148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3229 [inline] #0: ffff888037360148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x8e0/0x17c0 kernel/workqueue.c:3335 #1: ffffc9000e8e7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3230 [inline] #1: ffffc9000e8e7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x91b/0x17c0 kernel/workqueue.c:3335 #2: ffff888035e79060 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:309 #3: ffff888035e78078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 net/bluetooth/hci_sync.c:5548 1 lock held by jbd2/sda1-8/4488: 2 locks held by udevd/4525: #0: ffff8880790401a0 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:165 [inline] #0: ffff8880790401a0 (&mm->mmap_lock){++++}-{3:3}, at: get_mmap_lock_carefully mm/memory.c:5633 [inline] #0: ffff8880790401a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 mm/memory.c:5693 #1: ffff8880b943e658 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 kernel/sched/core.c:559 2 locks held by getty/4823: #0: ffff88802affe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243