INFO: task jfsCommit:92 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:jfsCommit state:D stack:0 pid:92 ppid:2 flags:0x00000008 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5245 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6562 schedule+0xc4/0x170 kernel/sched/core.c:6638 io_schedule+0x84/0x154 kernel/sched/core.c:8798 __lock_metapage+0x18c/0x420 fs/jfs/jfs_metapage.c:50 lock_metapage fs/jfs/jfs_metapage.c:64 [inline] __get_metapage+0x908/0xfd0 fs/jfs/jfs_metapage.c:639 diIAGRead+0xe4/0x14c fs/jfs/jfs_imap.c:2672 diFree+0x6f4/0x1e5c fs/jfs/jfs_imap.c:959 jfs_evict_inode+0x2c4/0x3e4 fs/jfs/inode.c:162 evict+0x3d8/0x824 fs/inode.c:705 iput_final fs/inode.c:1834 [inline] iput+0x728/0x7e8 fs/inode.c:1860 txUpdateMap+0x68c/0x7b0 fs/jfs/jfs_txnmgr.c:2368 txLazyCommit fs/jfs/jfs_txnmgr.c:2665 [inline] jfs_lazycommit+0x360/0x930 fs/jfs/jfs_txnmgr.c:2733 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 INFO: task kworker/u4:4:272 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:4 state:D stack:0 pid:272 ppid:2 flags:0x00000008 Workqueue: writeback wb_workfn (flush-7:1) Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5245 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6562 schedule+0xc4/0x170 kernel/sched/core.c:6638 jfs_flush_journal+0x590/0xd1c fs/jfs/jfs_logmgr.c:1564 jfs_write_inode+0x110/0x1f8 fs/jfs/inode.c:134 write_inode fs/fs-writeback.c:1470 [inline] __writeback_single_inode+0x5e0/0x157c fs/fs-writeback.c:1687 writeback_sb_inodes+0x870/0x1470 fs/fs-writeback.c:1913 wb_writeback+0x40c/0xfdc fs/fs-writeback.c:2087 wb_do_writeback fs/fs-writeback.c:2230 [inline] wb_workfn+0x360/0xe18 fs/fs-writeback.c:2270 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 INFO: task syz-executor:4328 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:4328 ppid:1 flags:0x00000009 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5245 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6562 schedule+0xc4/0x170 kernel/sched/core.c:6638 io_schedule+0x84/0x154 kernel/sched/core.c:8798 __lock_metapage+0x18c/0x420 fs/jfs/jfs_metapage.c:50 lock_metapage fs/jfs/jfs_metapage.c:64 [inline] __get_metapage+0x908/0xfd0 fs/jfs/jfs_metapage.c:639 diIAGRead fs/jfs/jfs_imap.c:2672 [inline] diRead+0x1cc/0xa14 fs/jfs/jfs_imap.c:316 jfs_iget+0x88/0x400 fs/jfs/inode.c:35 jfs_lookup+0x1c0/0x378 fs/jfs/namei.c:1469 __lookup_slow+0x25c/0x38c fs/namei.c:1698 lookup_slow+0x60/0x84 fs/namei.c:1715 walk_component+0x278/0x374 fs/namei.c:2006 lookup_last fs/namei.c:2463 [inline] path_lookupat+0x168/0x3f0 fs/namei.c:2487 filename_lookup+0x1d4/0x490 fs/namei.c:2516 user_path_at_empty+0x5c/0x84 fs/namei.c:2913 user_path_at include/linux/namei.h:57 [inline] ksys_umount fs/namespace.c:1829 [inline] __do_sys_umount fs/namespace.c:1837 [inline] __se_sys_umount fs/namespace.c:1835 [inline] __arm64_sys_umount+0xf8/0x184 fs/namespace.c:1835 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.0.67:4710 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.67 state:D stack:0 pid:4710 ppid:4329 flags:0x00000009 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5245 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6562 schedule+0xc4/0x170 kernel/sched/core.c:6638 wb_wait_for_completion+0x158/0x29c fs/fs-writeback.c:191 sync_inodes_sb+0x188/0x81c fs/fs-writeback.c:2756 sync_inodes_one_sb+0x58/0x70 fs/sync.c:77 iterate_supers+0x11c/0x1d4 fs/super.c:757 ksys_sync+0x9c/0x17c fs/sync.c:102 __arm64_sys_sync+0x14/0x24 fs/sync.c:113 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 INFO: task syz.3.72:4723 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.72 state:D stack:0 pid:4723 ppid:4327 flags:0x00000009 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5245 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6562 schedule+0xc4/0x170 kernel/sched/core.c:6638 rwsem_down_write_slowpath+0xba8/0x12cc kernel/locking/rwsem.c:1189 __down_write_common kernel/locking/rwsem.c:1314 [inline] __down_write kernel/locking/rwsem.c:1323 [inline] down_write+0x84/0x88 kernel/locking/rwsem.c:1574 bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:362 [inline] sync_inodes_sb+0x170/0x81c fs/fs-writeback.c:2754 sync_inodes_one_sb+0x58/0x70 fs/sync.c:77 iterate_supers+0x11c/0x1d4 fs/super.c:757 ksys_sync+0x9c/0x17c fs/sync.c:102 __arm64_sys_sync+0x14/0x24 fs/sync.c:113 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Showing all locks held in the system: 3 locks held by kworker/u4:0/9: #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff80001cb37c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff800017a02bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 1 lock held by rcu_tasks_kthre/12: #0: ffff800015557db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517 1 lock held by rcu_tasks_trace/13: #0: ffff8000155585d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517 1 lock held by khungtaskd/28: #0: ffff800015557440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349 2 locks held by jfsCommit/92: #0: ffff0000d0488920 (&(imap->im_aglock[index])){+.+.}-{3:3}, at: diFree+0x24c/0x1e5c fs/jfs/jfs_imap.c:889 #1: ffff0000e1b32f78 (&jfs_ip->rdwrlock/1){.+.+}-{3:3}, at: diFree+0x264/0x1e5c fs/jfs/jfs_imap.c:894 2 locks held by kworker/u4:4/272: #0: ffff0000c2c34138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff800020c87c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 2 locks held by getty/4082: #0: ffff0000d7045098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff800020b7b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 drivers/tty/n_tty.c:2198 2 locks held by syz-executor/4328: #0: ffff0000e1b33d00 (&type->i_mutex_dir_key#10){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] #0: ffff0000e1b33d00 (&type->i_mutex_dir_key#10){++++}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 #1: ffff0000e1b32f78 (&jfs_ip->rdwrlock/1){.+.+}-{3:3}, at: diRead+0x124/0xa14 fs/jfs/jfs_imap.c:315 2 locks held by syz.0.67/4710: #0: ffff0000e02460e0 (&type->s_umount_key#77){++++}-{3:3}, at: iterate_supers+0xa8/0x1d4 fs/super.c:755 #1: ffff0000cece67d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:362 [inline] #1: ffff0000cece67d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x170/0x81c fs/fs-writeback.c:2754 2 locks held by syz.3.72/4723: #0: ffff0000e02460e0 (&type->s_umount_key#77){++++}-{3:3}, at: iterate_supers+0xa8/0x1d4 fs/super.c:755 #1: ffff0000cece67d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: bdi_down_write_wb_switch_rwsem fs/fs-writeback.c:362 [inline] #1: ffff0000cece67d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x170/0x81c fs/fs-writeback.c:2754 4 locks held by kworker/u4:14/5570: #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff800025957c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff8000179f6350 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x144/0xa90 net/core/net_namespace.c:594 #3: ffff800017a02bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 1 lock held by syz.2.655/6334: #0: ffff800017a02bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 2 locks held by syz.7.658/6349: #0: ffff800017a5edf0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 net/netlink/genetlink.c:860 #1: ffff800017a02bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 1 lock held by syz.4.659/6348: #0: ffff800017a02bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 1 lock held by syz.4.659/6352: #0: ffff800017a02bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline] #0: ffff800017a02bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6155 1 lock held by syz.4.659/6358: #0: ffff800017a02bc8 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x104/0x694 net/netlink/af_netlink.c:2310 1 lock held by syz.6.660/6351: #0: ffff800017a02bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 1 lock held by syz.5.662/6366: #0: ffff800017a02bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline] #0: ffff800017a02bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 net/core/rtnetlink.c:6155 =============================================