syzbot

INFO: task jfsCommit:99 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc5-syzkaller-gec4801305969 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:jfsCommit       state:D stack:0     pid:99    tgid:99    ppid:2      task_flags:0x200040 flags:0x00000010
Call trace:
 __switch_to+0x414/0x834 arch/arm64/kernel/process.c:742 (T)
 context_switch kernel/sched/core.c:5401 [inline]
 __schedule+0x1414/0x2a28 kernel/sched/core.c:6790
 __schedule_loop kernel/sched/core.c:6868 [inline]
 schedule+0xb4/0x230 kernel/sched/core.c:6883
 io_schedule+0x84/0xf0 kernel/sched/core.c:7728
 __lock_metapage+0x19c/0x434 fs/jfs/jfs_metapage.c:52
 lock_metapage fs/jfs/jfs_metapage.c:66 [inline]
 __get_metapage+0x7d8/0xe8c fs/jfs/jfs_metapage.c:746
 diIAGRead+0xe4/0x14c fs/jfs/jfs_imap.c:2672
 diFree+0x738/0x2510 fs/jfs/jfs_imap.c:959
 jfs_evict_inode+0x2c4/0x3e8 fs/jfs/inode.c:156
 evict+0x414/0x928 fs/inode.c:810
 iput_final fs/inode.c:1898 [inline]
 iput+0x6e4/0x83c fs/inode.c:1924
 txUpdateMap+0x798/0x8d0 fs/jfs/jfs_txnmgr.c:2367
 txLazyCommit fs/jfs/jfs_txnmgr.c:2664 [inline]
 jfs_lazycommit+0x394/0x94c fs/jfs/jfs_txnmgr.c:2733
 kthread+0x5fc/0x75c kernel/kthread.c:464
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:843
INFO: task jfsCommit:100 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc5-syzkaller-gec4801305969 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:jfsCommit       state:D stack:0     pid:100   tgid:100   ppid:2      task_flags:0x200040 flags:0x00000010
Call trace:
 __switch_to+0x414/0x834 arch/arm64/kernel/process.c:742 (T)
 context_switch kernel/sched/core.c:5401 [inline]
 __schedule+0x1414/0x2a28 kernel/sched/core.c:6790
 __schedule_loop kernel/sched/core.c:6868 [inline]
 schedule+0xb4/0x230 kernel/sched/core.c:6883
 io_schedule+0x84/0xf0 kernel/sched/core.c:7728
 __lock_metapage+0x19c/0x434 fs/jfs/jfs_metapage.c:52
 lock_metapage fs/jfs/jfs_metapage.c:66 [inline]
 __get_metapage+0x7d8/0xe8c fs/jfs/jfs_metapage.c:746
 diIAGRead+0xe4/0x14c fs/jfs/jfs_imap.c:2672
 diFree+0x738/0x2510 fs/jfs/jfs_imap.c:959
 jfs_evict_inode+0x2c4/0x3e8 fs/jfs/inode.c:156
 evict+0x414/0x928 fs/inode.c:810
 iput_final fs/inode.c:1898 [inline]
 iput+0x6e4/0x83c fs/inode.c:1924
 txUpdateMap+0x798/0x8d0 fs/jfs/jfs_txnmgr.c:2367
 txLazyCommit fs/jfs/jfs_txnmgr.c:2664 [inline]
 jfs_lazycommit+0x394/0x94c fs/jfs/jfs_txnmgr.c:2733
 kthread+0x5fc/0x75c kernel/kthread.c:464
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:843

Showing all locks held in the system:
1 lock held by khungtaskd/32:
 #0: ffff80008f8599c0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 include/linux/rcupdate.h:330
5 locks held by kworker/u8:2/41:
4 locks held by kworker/u8:4/73:
 #0: ffff0000c18a2148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c kernel/workqueue.c:3212
 #1: ffff80009b037bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c kernel/workqueue.c:3212
 #2: ffff8000928a99d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x6c0 net/core/net_namespace.c:662
 #3: ffff8000928b6568 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80
2 locks held by jfsCommit/99:
 #0: ffff0000cb3e8920 (&(imap->im_aglock[index])){+.+.}-{4:4}, at: diFree+0x21c/0x2510 fs/jfs/jfs_imap.c:889
 #1: ffff0000f351efd8 (&jfs_ip->rdwrlock/1){.+.+}-{4:4}, at: diFree+0x230/0x2510 fs/jfs/jfs_imap.c:894
2 locks held by jfsCommit/100:
 #0: ffff0000d9f18920 (&(imap->im_aglock[index])){+.+.}-{4:4}, at: diFree+0x21c/0x2510 fs/jfs/jfs_imap.c:889
 #1: ffff0000f351a618 (&jfs_ip->rdwrlock/1){.+.+}-{4:4}, at: diFree+0x230/0x2510 fs/jfs/jfs_imap.c:894
3 locks held by kworker/u8:5/137:
 #0: ffff0000c0031148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c kernel/workqueue.c:3212
 #1: ffff80009b887bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c kernel/workqueue.c:3212
 #2: ffff8000928b6568 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80
3 locks held by kworker/u8:6/279:
 #0: ffff0000d253c948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c kernel/workqueue.c:3212
 #1: ffff80009b9c7bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c kernel/workqueue.c:3212
 #2: ffff8000928b6568 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80
2 locks held by dhcpcd/6196:
 #0: ffff80009289ade8 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5b4/0x84c net/socket.c:1273
 #1: ffff8000928b6568 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80
2 locks held by getty/6295:
 #0: ffff0000d2d2f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340
 #1: ffff80009ba2e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa4 drivers/tty/n_tty.c:2222
2 locks held by syz-executor/6659:
 #0: ffff0000cee3a0e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock fs/super.c:57 [inline]
 #0: ffff0000cee3a0e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline]
 #0: ffff0000cee3a0e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd8/0x100 fs/super.c:506
 #1: ffff80008fc88648 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb0/0x4c4 fs/jfs/jfs_logmgr.c:1444
2 locks held by syz-executor/6666:
 #0: ffff0000dcc440e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock fs/super.c:57 [inline]
 #0: ffff0000dcc440e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline]
 #0: ffff0000dcc440e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd8/0x100 fs/super.c:506
 #1: ffff80008fc88648 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb0/0x4c4 fs/jfs/jfs_logmgr.c:1444
2 locks held by syz-executor/6668:
 #0: ffff0000dbe920e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock fs/super.c:57 [inline]
 #0: ffff0000dbe920e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline]
 #0: ffff0000dbe920e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd8/0x100 fs/super.c:506
 #1: ffff80008fc88648 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb0/0x4c4 fs/jfs/jfs_logmgr.c:1444
2 locks held by syz-executor/6901:
 #0: ffff0000d05400e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock fs/super.c:57 [inline]
 #0: ffff0000d05400e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline]
 #0: ffff0000d05400e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd8/0x100 fs/super.c:506
 #1: ffff80008fc88648 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb0/0x4c4 fs/jfs/jfs_logmgr.c:1444
2 locks held by syz-executor/6903:
 #0: ffff0000f6ac40e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock fs/super.c:57 [inline]
 #0: ffff0000f6ac40e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline]
 #0: ffff0000f6ac40e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd8/0x100 fs/super.c:506
 #1: ffff80008fc88648 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb0/0x4c4 fs/jfs/jfs_logmgr.c:1444
2 locks held by syz-executor/6959:
 #0: ffff0000d53fc0e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock fs/super.c:57 [inline]
 #0: ffff0000d53fc0e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline]
 #0: ffff0000d53fc0e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd8/0x100 fs/super.c:506
 #1: ffff80008fc88648 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb0/0x4c4 fs/jfs/jfs_logmgr.c:1444
2 locks held by syz-executor/6962:
 #0: ffff0000dcfd60e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock fs/super.c:57 [inline]
 #0: ffff0000dcfd60e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline]
 #0: ffff0000dcfd60e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd8/0x100 fs/super.c:506
 #1: ffff80008fc88648 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb0/0x4c4 fs/jfs/jfs_logmgr.c:1444
2 locks held by syz-executor/6965:
 #0: ffff0000cde6c0e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock fs/super.c:57 [inline]
 #0: ffff0000cde6c0e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline]
 #0: ffff0000cde6c0e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd8/0x100 fs/super.c:506
 #1: ffff80008fc88648 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb0/0x4c4 fs/jfs/jfs_logmgr.c:1444
3 locks held by kworker/0:8/7250:
 #0: ffff0000c0028d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c kernel/workqueue.c:3212
 #1: ffff80009e7d7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c kernel/workqueue.c:3212
 #2: ffff8000928b6568 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80
1 lock held by syz-executor/7332:
 #0: ffff0000d42f40e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock fs/super.c:57 [inline]
 #0: ffff0000d42f40e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline]
 #0: ffff0000d42f40e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd8/0x100 fs/super.c:506
2 locks held by syz-executor/7374:
 #0: ffff0000e90d20e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock fs/super.c:57 [inline]
 #0: ffff0000e90d20e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline]
 #0: ffff0000e90d20e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd8/0x100 fs/super.c:506
 #1: ffff80008fc88648 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb0/0x4c4 fs/jfs/jfs_logmgr.c:1444
1 lock held by syz.2.614/9552:
2 locks held by syz.3.615/9553:

=============================================