INFO: task syz-executor:6430 blocked for more than 143 seconds. Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:6430 tgid:6430 ppid:1 flags:0x0000000d Call trace: __switch_to+0x414/0x788 arch/arm64/kernel/process.c:701 (T) context_switch kernel/sched/core.c:5328 [inline] __schedule+0x16e0/0x27d0 kernel/sched/core.c:6693 __schedule_loop kernel/sched/core.c:6770 [inline] schedule+0xbc/0x238 kernel/sched/core.c:6785 __bch2_fs_stop+0x374/0x570 fs/bcachefs/super.c:634 bch2_put_super+0x40/0x50 fs/bcachefs/fs.c:2050 generic_shutdown_super+0x12c/0x2bc fs/super.c:642 bch2_kill_sb+0x40/0x58 fs/bcachefs/fs.c:2278 deactivate_locked_super+0xc4/0x12c fs/super.c:473 deactivate_super+0xe0/0x100 fs/super.c:506 cleanup_mnt+0x34c/0x3dc fs/namespace.c:1373 __cleanup_mnt+0x20/0x30 fs/namespace.c:1380 task_work_run+0x230/0x2e0 kernel/task_work.c:239 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] do_notify_resume+0x178/0x1f4 arch/arm64/kernel/entry-common.c:151 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:169 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:178 [inline] el0_svc+0xac/0x168 arch/arm64/kernel/entry-common.c:745 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffff80008f9ffee0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:336 3 locks held by kworker/u9:0/53: #0: ffff0000d91e9948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x628/0x1600 kernel/workqueue.c:3203 #1: ffff800098ff7c20 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x6bc/0x1600 kernel/workqueue.c:3203 #2: ffff0000ee7d8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_open net/bluetooth/hci_core.c:410 [inline] #2: ffff0000ee7d8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x148/0x640 net/bluetooth/hci_core.c:941 2 locks held by getty/6186: #0: ffff0000c308d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80009a9852f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41c/0x1228 drivers/tty/n_tty.c:2211 1 lock held by syz-executor/6430: #0: ffff0000ed58c0e0 (&type->s_umount_key#50){+.+.}-{3:3}, at: __super_lock fs/super.c:56 [inline] #0: ffff0000ed58c0e0 (&type->s_umount_key#50){+.+.}-{3:3}, at: __super_lock_excl fs/super.c:71 [inline] #0: ffff0000ed58c0e0 (&type->s_umount_key#50){+.+.}-{3:3}, at: deactivate_super+0xd8/0x100 fs/super.c:505 4 locks held by syz.3.945/10412: 3 locks held by syz.2.944/10401: #0: ffff0000f15ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_write+0x3c/0x4c drivers/tty/tty_ldsem.c:366 #1: ffff0000f15bc0a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: ldsem_down_write_nested+0x44/0x58 drivers/tty/tty_ldsem.c:427 #2: ffff0000d52cb990 (&hu->proto_lock){++++}-{0:0}, at: hci_uart_tty_close+0x104/0x2a0 drivers/bluetooth/hci_ldisc.c:545 1 lock held by syz.6.946/10414: #0: ffff0000cacba0e0 (&type->s_umount_key#62/1){+.+.}-{3:3}, at: alloc_super+0x1b0/0x83c fs/super.c:344 =============================================