INFO: task jfsCommit:93 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:jfsCommit state:D stack:0 pid:93 ppid:2 flags:0x00000008 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5245 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6562 schedule+0xc4/0x170 kernel/sched/core.c:6638 io_schedule+0x84/0x154 kernel/sched/core.c:8798 __lock_metapage+0x18c/0x420 fs/jfs/jfs_metapage.c:50 lock_metapage fs/jfs/jfs_metapage.c:64 [inline] __get_metapage+0x908/0xfd0 fs/jfs/jfs_metapage.c:639 diIAGRead+0xe4/0x14c fs/jfs/jfs_imap.c:2672 diFree+0x6f4/0x1e5c fs/jfs/jfs_imap.c:959 jfs_evict_inode+0x2c4/0x3e4 fs/jfs/inode.c:162 evict+0x3d8/0x824 fs/inode.c:705 iput_final fs/inode.c:1834 [inline] iput+0x728/0x7e8 fs/inode.c:1860 txUpdateMap+0x68c/0x7b0 fs/jfs/jfs_txnmgr.c:2368 txLazyCommit fs/jfs/jfs_txnmgr.c:2665 [inline] jfs_lazycommit+0x360/0x930 fs/jfs/jfs_txnmgr.c:2733 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 INFO: task syz-executor:7809 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:0 pid:7809 ppid:1 flags:0x00000001 Call trace: __switch_to+0x2f4/0x550 arch/arm64/kernel/process.c:555 context_switch kernel/sched/core.c:5245 [inline] __schedule+0xdb4/0x1a6c kernel/sched/core.c:6562 schedule+0xc4/0x170 kernel/sched/core.c:6638 io_schedule+0x84/0x154 kernel/sched/core.c:8798 __lock_metapage+0x18c/0x420 fs/jfs/jfs_metapage.c:50 lock_metapage fs/jfs/jfs_metapage.c:64 [inline] __get_metapage+0x908/0xfd0 fs/jfs/jfs_metapage.c:639 diIAGRead fs/jfs/jfs_imap.c:2672 [inline] diRead+0x1cc/0xa14 fs/jfs/jfs_imap.c:316 jfs_iget+0x88/0x400 fs/jfs/inode.c:35 jfs_lookup+0x1c0/0x378 fs/jfs/namei.c:1469 __lookup_slow+0x25c/0x38c fs/namei.c:1698 lookup_slow+0x60/0x84 fs/namei.c:1715 walk_component+0x278/0x374 fs/namei.c:2006 lookup_last fs/namei.c:2463 [inline] path_lookupat+0x168/0x3f0 fs/namei.c:2487 filename_lookup+0x1d4/0x490 fs/namei.c:2516 user_path_at_empty+0x5c/0x84 fs/namei.c:2913 user_path_at include/linux/namei.h:57 [inline] ksys_umount fs/namespace.c:1829 [inline] __do_sys_umount fs/namespace.c:1837 [inline] __se_sys_umount fs/namespace.c:1835 [inline] __arm64_sys_umount+0xf8/0x184 fs/namespace.c:1835 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffff800015557db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517 1 lock held by rcu_tasks_trace/13: #0: ffff8000155585d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 kernel/rcu/tasks.h:517 1 lock held by khungtaskd/28: #0: ffff800015557440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349 2 locks held by jfsCommit/93: #0: ffff0001011b0920 (&(imap->im_aglock[index])){+.+.}-{3:3}, at: diFree+0x24c/0x1e5c fs/jfs/jfs_imap.c:889 #1: ffff0000ef45b8b8 (&jfs_ip->rdwrlock/1){.+.+}-{3:3}, at: diFree+0x264/0x1e5c fs/jfs/jfs_imap.c:894 2 locks held by getty/4082: #0: ffff0000d101a098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340 #1: ffff80002094e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 drivers/tty/n_tty.c:2198 5 locks held by kworker/u4:11/6131: #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc kernel/workqueue.c:-1 #1: ffff800021b97c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc kernel/workqueue.c:2267 #2: ffff8000179f6350 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x144/0xa90 net/core/net_namespace.c:594 #3: ffff800017a02bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74 #4: ffff80001555d0f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:291 [inline] #4: ffff80001555d0f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3f8/0x780 kernel/rcu/tree_exp.h:962 2 locks held by syz-executor/7809: #0: ffff0000ef45c640 (&type->i_mutex_dir_key#12){++++}-{3:3}, at: inode_lock_shared include/linux/fs.h:768 [inline] #0: ffff0000ef45c640 (&type->i_mutex_dir_key#12){++++}-{3:3}, at: lookup_slow+0x50/0x84 fs/namei.c:1714 #1: ffff0000ef45b8b8 (&jfs_ip->rdwrlock/1){.+.+}-{3:3}, at: diRead+0x124/0xa14 fs/jfs/jfs_imap.c:315 1 lock held by syz-executor/12323: #0: ffff80001555d0f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:323 [inline] #0: ffff80001555d0f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2b4/0x780 kernel/rcu/tree_exp.h:962 3 locks held by syz.7.2319/15338: #0: ffff0000dc500460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c fs/namespace.c:402 #1: ffff0000f53b1590 (&type->i_mutex_dir_key#9/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:793 [inline] #1: ffff0000f53b1590 (&type->i_mutex_dir_key#9/1){+.+.}-{3:3}, at: filename_create+0x1b0/0x3a8 fs/namei.c:3884 #2: ffff0000f53b19f8 (&fi->mutex){+.+.}-{3:3}, at: fuse_lock_inode+0xd4/0x11c fs/fuse/inode.c:523 1 lock held by syz.7.2319/15353: #0: ffff0000dd21c0e0 (&type->s_umount_key#60/1){+.+.}-{3:3}, at: alloc_super+0x1a0/0x840 fs/super.c:228 2 locks held by dhcpcd-run-hook/15373: #0: ffff00019f3a7398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:538 [inline] #0: ffff00019f3a7398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock kernel/sched/sched.h:1362 [inline] #0: ffff00019f3a7398 (&rq->__lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1652 [inline] #0: ffff00019f3a7398 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x2bc/0x1a6c kernel/sched/core.c:6478 #1: ffff8000153c6c78 (cpu_asid_lock){....}-{2:2}, at: check_and_switch_context+0x13c/0x6c0 arch/arm64/mm/context.c:246 1 lock held by sed/15374: =============================================