INFO: task jfsCommit:108 blocked for more than 144 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:jfsCommit state:D stack:27088 pid:108 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5245 [inline]
__schedule+0x11d1/0x40e0 kernel/sched/core.c:6562
schedule+0xb9/0x180 kernel/sched/core.c:6638
io_schedule+0x7c/0xd0 kernel/sched/core.c:8798
__lock_metapage fs/jfs/jfs_metapage.c:50 [inline]
lock_metapage+0x1f5/0x320 fs/jfs/jfs_metapage.c:64
__get_metapage+0x4c6/0xfa0 fs/jfs/jfs_metapage.c:639
diIAGRead+0xce/0x140 fs/jfs/jfs_imap.c:2672
diFree+0x8e1/0x2430 fs/jfs/jfs_imap.c:959
jfs_evict_inode+0x327/0x430 fs/jfs/inode.c:162
evict+0x4c9/0x8d0 fs/inode.c:705
txLazyCommit fs/jfs/jfs_txnmgr.c:2665 [inline]
jfs_lazycommit+0x425/0xa70 fs/jfs/jfs_txnmgr.c:2733
kthread+0x29d/0x330 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
#0: ffffffff8cb2dfb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 kernel/rcu/tasks.h:517
1 lock held by rcu_tasks_trace/13:
#0: ffffffff8cb2e7d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 kernel/rcu/tasks.h:517
3 locks held by kworker/1:1/27:
#0: ffff88814c8b6d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267
#1: ffffc90000a3fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267
#2: ffffffff8dd45ba8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xca/0x14f0 net/ipv6/addrconf.c:4131
1 lock held by khungtaskd/28:
#0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
#0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:791 [inline]
#0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 kernel/locking/lockdep.c:6513
2 locks held by jfsCommit/108:
#0: ffff888055128920 (&(imap->im_aglock[index])){+.+.}-{3:3}, at: diFree+0x2d6/0x2430 fs/jfs/jfs_imap.c:889
#1: ffff8880733bf038 (&jfs_ip->rdwrlock/1){.+.+}-{3:3}, at: diFree+0x2f4/0x2430 fs/jfs/jfs_imap.c:894
5 locks held by kworker/u4:5/2942:
#0: ffff888017616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267
#1: ffffc9000ca67d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267
#2: ffffffff8dd38f50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 net/core/net_namespace.c:594
#3: ffffffff8dd45ba8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xee/0xa80 net/core/dev.c:11489
#4: ffffffff8cb332f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:291 [inline]
#4: ffffffff8cb332f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 kernel/rcu/tree_exp.h:962
1 lock held by dhcpcd/3933:
#0: ffffffff8dd45ba8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
#0: ffffffff8dd45ba8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 net/core/rtnetlink.c:6147
2 locks held by getty/4027:
#0: ffff8880309cd098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:244
#1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 drivers/tty/n_tty.c:2198
3 locks held by kworker/0:7/4343:
#0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267
#1: ffffc90004507d00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267
#2: ffffffff8dd45ba8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 net/switchdev/switchdev.c:104
3 locks held by kworker/u4:9/4464:
#0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267
#1: ffffc90004637d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267
#2: ffffffff8dd45ba8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 net/core/link_watch.c:263
3 locks held by kworker/0:18/4486:
#0: ffff88814c8b6d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267
#1: ffffc90004bdfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267
#2: ffffffff8dd45ba8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xca/0x14f0 net/ipv6/addrconf.c:4131
2 locks held by kworker/1:17/4902:
#0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267
#1: ffffc90005917d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267
4 locks held by kworker/u4:16/5110:
#0: ffff8880b8e3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 kernel/sched/core.c:538
#1: ffff8880b8e27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x398/0x6d0 kernel/sched/psi.c:999
#2: ffff8880799f0d40 (&wdev->mtx){+.+.}-{3:3}, at: sdata_lock net/mac80211/ieee80211_i.h:1114 [inline]
#2: ffff8880799f0d40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xa8/0x10f0 net/mac80211/ibss.c:1680
#3: ffffffff96e2de80 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x68/0x4f0 lib/debugobjects.c:698
4 locks held by kworker/u4:20/6169:
#0: ffff88801964f138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267
#1: ffffc9000540fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 kernel/workqueue.c:2267
#2: ffff88807c3da0e0 (&type->s_umount_key#82){++++}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:415
#3: ffff888046139448 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x1c7/0x520 fs/jfs/inode.c:108
1 lock held by syz-executor/7546:
#0: ffffffff8dd45ba8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
#0: ffffffff8dd45ba8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 net/core/rtnetlink.c:6147
5 locks held by syz.6.769/7640:
#0: ffff88807c3da460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 fs/namespace.c:402
#1: ffff8880733beb40 (&type->i_mutex_dir_key#11){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
#1: ffff8880733beb40 (&type->i_mutex_dir_key#11){++++}-{3:3}, at: open_last_lookups fs/namei.c:3555 [inline]
#1: ffff8880733beb40 (&type->i_mutex_dir_key#11){++++}-{3:3}, at: path_openat+0x7d2/0x2ee0 fs/namei.c:3788
#2: ffff8880733be788 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_create+0x225/0xad0 fs/jfs/namei.c:100
#3: ffff888046138b08 (&jfs_ip->commit_mutex/1){+.+.}-{3:3}, at: jfs_create+0x23f/0xad0 fs/jfs/namei.c:101
#4: ffff8880733bf038 (&jfs_ip->rdwrlock#2/2){++++}-{3:3}, at: dbAlloc+0x58e/0xba0 fs/jfs/jfs_dmap.c:872
2 locks held by syz.6.769/7670:
#0: ffff88807c3da460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 fs/namespace.c:402
#1: ffff8880733beb40 (&type->i_mutex_dir_key#11/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:793 [inline]
#1: ffff8880733beb40 (&type->i_mutex_dir_key#11/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 fs/namei.c:3884
2 locks held by syz.6.769/7671:
#0: ffff88807c3da460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 fs/namespace.c:402
#1: ffff8880733beb40 (&type->i_mutex_dir_key#11/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:793 [inline]
#1: ffff8880733beb40 (&type->i_mutex_dir_key#11/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 fs/namei.c:3884
2 locks held by syz.6.769/7672:
#0: ffff88807c3da460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 fs/namespace.c:402
#1: ffff8880733beb40 (&type->i_mutex_dir_key#11){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
#1: ffff8880733beb40 (&type->i_mutex_dir_key#11){++++}-{3:3}, at: open_last_lookups fs/namei.c:3555 [inline]
#1: ffff8880733beb40 (&type->i_mutex_dir_key#11){++++}-{3:3}, at: path_openat+0x7d2/0x2ee0 fs/namei.c:3788
2 locks held by syz.6.769/7673:
#0: ffff88807c3da460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 fs/namespace.c:402
#1: ffff8880733beb40 (&type->i_mutex_dir_key#11){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
#1: ffff8880733beb40 (&type->i_mutex_dir_key#11){++++}-{3:3}, at: open_last_lookups fs/namei.c:3555 [inline]
#1: ffff8880733beb40 (&type->i_mutex_dir_key#11){++++}-{3:3}, at: path_openat+0x7d2/0x2ee0 fs/namei.c:3788
6 locks held by syz.6.769/7676:
#0: ffff888029c34ae8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 fs/file.c:1038
#1: ffff88807c3da460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x26b/0xa30 fs/read_write.c:580
#2: ffff888046139800 (&sb->s_type->i_mutex_key#25){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
#2: ffff888046139800 (&sb->s_type->i_mutex_key#25){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 mm/filemap.c:3986
#3: ffff8880461393b8 (&jfs_ip->rdwrlock#2){++++}-{3:3}, at: jfs_get_block+0x150/0xad0 fs/jfs/inode.c:219
#4: ffff888046139448 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: extAlloc+0x105/0xf80 fs/jfs/jfs_extent.c:81
#5: ffff8880733bf038 (&jfs_ip->rdwrlock#2/2){++++}-{3:3}, at: dbAlloc+0x3a7/0xba0 fs/jfs/jfs_dmap.c:790
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
dump_stack_lvl+0x188/0x24e lib/dump_stack.c:106
nmi_cpu_backtrace+0x3e6/0x460 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x1d4/0x450 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline]
watchdog+0xeee/0xf30 kernel/hung_task.c:377
kthread+0x29d/0x330 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 5014 Comm: kworker/u4:15 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Workqueue: bat_events batadv_nc_worker
RIP: 0010:__preempt_count_add kernel/rcu/tree.c:717 [inline]
RIP: 0010:rcu_is_watching+0x2/0xa0 kernel/rcu/tree.c:720
Code: 8a e8 b2 e1 bf 08 48 c7 c7 20 41 b3 8c 4c 89 f6 e8 63 2f cc 02 e9 44 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 <41> 56 53 65 ff 05 2c fc 95 7e e8 2f f6 bf 08 89 c3 83 f8 08 73 60
RSP: 0018:ffffc90005fa7ab0 EFLAGS: 00000257
RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff8164c340
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e1fc328
RBP: ffffc90005fa7bd0 R08: ffffffff8e1fc32f R09: 1ffffffff1c3f865
R10: dffffc0000000000 R11: fffffbfff1c3f866 R12: dffffc0000000000
R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000bf4f64
FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055556def0a28 CR3: 000000000c88e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
trace_lock_release include/trace/events/lock.h:69 [inline]
lock_release+0xcf/0x920 kernel/locking/lockdep.c:5673
rcu_lock_release include/linux/rcupdate.h:355 [inline]
rcu_read_unlock include/linux/rcupdate.h:824 [inline]
batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:412 [inline]
batadv_nc_worker+0x28d/0x600 net/batman-adv/network-coding.c:719
process_one_work+0x8a2/0x1160 kernel/workqueue.c:2292
worker_thread+0xaa2/0x1270 kernel/workqueue.c:2439
kthread+0x29d/0x330 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295