INFO: task jfsCommit:275 blocked for more than 143 seconds.
      Not tainted 5.15.178-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:jfsCommit       state:D stack:27896 pid:  275 ppid:     2 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5027 [inline]
 __schedule+0x12c4/0x45b0 kernel/sched/core.c:6373
 schedule+0x11b/0x1f0 kernel/sched/core.c:6456
 io_schedule+0x88/0x100 kernel/sched/core.c:8481
 __lock_metapage+0x1ec/0x3c0 fs/jfs/jfs_metapage.c:49
 lock_metapage fs/jfs/jfs_metapage.c:63 [inline]
 __get_metapage+0x495/0x1070 fs/jfs/jfs_metapage.c:640
 dbUpdatePMap+0x365/0xf50 fs/jfs/jfs_dmap.c:490
 txAllocPMap+0x57b/0x6b0 fs/jfs/jfs_txnmgr.c:2459
 txUpdateMap+0x7c8/0x9e0 fs/jfs/jfs_txnmgr.c:2397
 txLazyCommit fs/jfs/jfs_txnmgr.c:2698 [inline]
 jfs_lazycommit+0x470/0xc30 fs/jfs/jfs_txnmgr.c:2766
 kthread+0x3f6/0x4f0 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
INFO: task jfsCommit:276 blocked for more than 143 seconds.
      Not tainted 5.15.178-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:jfsCommit       state:D stack:27896 pid:  276 ppid:     2 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5027 [inline]
 __schedule+0x12c4/0x45b0 kernel/sched/core.c:6373
 schedule+0x11b/0x1f0 kernel/sched/core.c:6456
 io_schedule+0x88/0x100 kernel/sched/core.c:8481
 __lock_metapage+0x1ec/0x3c0 fs/jfs/jfs_metapage.c:49
 lock_metapage fs/jfs/jfs_metapage.c:63 [inline]
 __get_metapage+0x495/0x1070 fs/jfs/jfs_metapage.c:640
 dbUpdatePMap+0x365/0xf50 fs/jfs/jfs_dmap.c:490
 txAllocPMap+0x57b/0x6b0 fs/jfs/jfs_txnmgr.c:2459
 txUpdateMap+0x7c8/0x9e0 fs/jfs/jfs_txnmgr.c:2397
 txLazyCommit fs/jfs/jfs_txnmgr.c:2698 [inline]
 jfs_lazycommit+0x470/0xc30 fs/jfs/jfs_txnmgr.c:2766
 kthread+0x3f6/0x4f0 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
INFO: task syz-executor:4169 blocked for more than 144 seconds.
      Not tainted 5.15.178-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:20352 pid: 4169 ppid:     1 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5027 [inline]
 __schedule+0x12c4/0x45b0 kernel/sched/core.c:6373
 schedule+0x11b/0x1f0 kernel/sched/core.c:6456
 jfs_flush_journal+0x72b/0xec0 fs/jfs/jfs_logmgr.c:1572
 jfs_sync_fs+0x7c/0xa0 fs/jfs/super.c:689
 sync_filesystem+0x1bc/0x220 fs/sync.c:66
 generic_shutdown_super+0x6b/0x310 fs/super.c:448
 kill_block_super+0x7a/0xe0 fs/super.c:1427
 deactivate_locked_super+0xa0/0x110 fs/super.c:335
 cleanup_mnt+0x44e/0x500 fs/namespace.c:1143
 task_work_run+0x129/0x1a0 kernel/task_work.c:188
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 exit_to_user_mode_loop+0x106/0x130 kernel/entry/common.c:181
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:214
 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline]
 syscall_exit_to_user_mode+0x5d/0x240 kernel/entry/common.c:307
 do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7faa4aa9b0d7
RSP: 002b:00007ffd7a38b668 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 00007faa4ab1b08c RCX: 00007faa4aa9b0d7
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7a38b720
RBP: 00007ffd7a38b720 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd7a38c7b0
R13: 00007faa4ab1b08c R14: 00000000000153b1 R15: 00007ffd7a38c7f0
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/27:
 #0: ffffffff8cb1fce0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
4 locks held by kworker/u4:1/144:
 #0: ffff8880175cd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 kernel/workqueue.c:2283
 #1: ffffc9000135fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 kernel/workqueue.c:2285
 #2: ffffffff8dc36b10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x166/0xc90 net/core/net_namespace.c:572
 #3: ffffffff8dc42788 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0xa4f/0xc40 net/core/dev.c:10664
2 locks held by dhcpcd/3836:
 #0: ffffffff8dca0290 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 net/netlink/genetlink.c:802
 #1: ffffffff8dc42788 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x28/0x540 net/wireless/nl80211.c:14964
2 locks held by getty/3929:
 #0: ffff88814c5d6098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252
 #1: ffffc90002cd62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 drivers/tty/n_tty.c:2158
3 locks held by kworker/1:3/4166:
 #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 kernel/workqueue.c:2283
 #1: ffffc90002d9fd20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 kernel/workqueue.c:2285
 #2: ffff888076d42240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120 drivers/net/netdevsim/fib.c:1480
1 lock held by syz-executor/4169:
 #0: ffff888079b340e0 (&type->s_umount_key#76){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 fs/super.c:365
7 locks held by kworker/1:4/4208:
 #0: ffff888017471138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 kernel/workqueue.c:2283
 #1: ffffc90002fffd20 (serio_event_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 kernel/workqueue.c:2285
 #2: ffffffff8d74a0c8 (serio_mutex){+.+.}-{3:3}, at: serio_handle_event+0x21/0x8f0 drivers/input/serio/serio.c:203
 #3: ffff88804c701378 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:760 [inline]
 #3: ffff88804c701378 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 drivers/base/dd.c:954
 #4: ffff88804c7011d8 (&serio->drv_mutex){+.+.}-{3:3}, at: serio_connect_driver drivers/input/serio/serio.c:46 [inline]
 #4: ffff88804c7011d8 (&serio->drv_mutex){+.+.}-{3:3}, at: serio_driver_probe+0x52/0x90 drivers/input/serio/serio.c:778
 #5: ffffffff8d7598a8 (psmouse_mutex){+.+.}-{3:3}, at: psmouse_connect+0x94/0x1430 drivers/input/mouse/psmouse-base.c:1588
 #6: ffff88807cf23880 (&ps2dev->cmd_mutex){+.+.}-{3:3}, at: ps2_begin_command drivers/input/serio/libps2.c:105 [inline]
 #6: ffff88807cf23880 (&ps2dev->cmd_mutex){+.+.}-{3:3}, at: ps2_command+0x76/0xf0 drivers/input/serio/libps2.c:331
3 locks held by kworker/1:6/4211:
 #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 kernel/workqueue.c:2283
 #1: ffffc9000302fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 kernel/workqueue.c:2285
 #2: ffffffff8cb242a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:322 [inline]
 #2: ffffffff8cb242a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 kernel/rcu/tree_exp.h:845
2 locks held by syz-executor/4356:
 #0: ffff88807750e0e0 (&type->s_umount_key#76){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 fs/super.c:365
 #1: ffffffff8cecbbe8 (jfs_log_mutex){+.+.}-{3:3}, at: lmLogClose+0xae/0x530 fs/jfs/jfs_logmgr.c:1452
3 locks held by kworker/u4:7/4386:
 #0: ffff8881447ac938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 kernel/workqueue.c:2283
 #1: ffffc900032bfd20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 kernel/workqueue.c:2285
 #2: ffff888024e3a0e0 (&type->s_umount_key#76){++++}-{3:3}, at: trylock_super+0x1b/0xf0 fs/super.c:418
2 locks held by syz-executor/4608:
 #0: ffff88807e5780e0 (&type->s_umount_key#76){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 fs/super.c:365
 #1: ffffffff8cecbbe8 (jfs_log_mutex){+.+.}-{3:3}, at: lmLogClose+0xae/0x530 fs/jfs/jfs_logmgr.c:1452
2 locks held by syz-executor/5106:
 #0: ffff888054a1a0e0 (&type->s_umount_key#76){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 fs/super.c:365
 #1: ffffffff8cecbbe8 (jfs_log_mutex){+.+.}-{3:3}, at: lmLogClose+0xae/0x530 fs/jfs/jfs_logmgr.c:1452
4 locks held by syz.8.252/5654:
 #0: ffff8880796a20f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2cb/0x380 fs/file.c:1058
 #1: ffff888024e3a460 (sb_writers#20){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 fs/read_write.c:590
 #2: ffff88805cd40580 (&sb->s_type->i_mutex_key#27){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:789 [inline]
 #2: ffff88805cd40580 (&sb->s_type->i_mutex_key#27){+.+.}-{3:3}, at: generic_file_write_iter+0x7c/0x1b0 mm/filemap.c:3941
 #3: ffff88805cd40138 (&jfs_ip->rdwrlock#3){++++}-{3:3}, at: jfs_truncate fs/jfs/inode.c:422 [inline]
 #3: ffff88805cd40138 (&jfs_ip->rdwrlock#3){++++}-{3:3}, at: jfs_write_failed+0xfe/0x190 fs/jfs/inode.c:312
2 locks held by kworker/1:8/5732:
 #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 kernel/workqueue.c:2283
 #1: ffffc900033ffd20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 kernel/workqueue.c:2285
1 lock held by syz.8.1040/9754:
 #0: ffffffff8d74a0c8 (serio_mutex){+.+.}-{3:3}, at: serio_unregister_port+0x2b/0x140 drivers/input/serio/serio.c:707
2 locks held by syz-executor/9798:
 #0: ffffffff8dc42788 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
 #0: ffffffff8dc42788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 net/core/rtnetlink.c:5644
 #1: ffffffff8cb242a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:290 [inline]
 #1: ffffffff8cb242a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 kernel/rcu/tree_exp.h:845

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.178-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x1e3/0x2d0 lib/dump_stack.c:106
 nmi_cpu_backtrace+0x46a/0x4a0 lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x181/0x2a0 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline]
 watchdog+0xe72/0xeb0 kernel/hung_task.c:295
 kthread+0x3f6/0x4f0 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 3837 Comm: dhcpcd Not tainted 5.15.178-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 kernel/kcov.c:202
Code: 1f 84 00 00 00 00 00 0f 1f 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 18 04 8a 0c 48 89 de 5b e9 47 11 49 00 cc cc cc cc cc cc cc <48> 8b 04 24 65 48 8b 0d 24 ea 81 7e 65 8b 15 25 ea 81 7e 81 e2 00
RSP: 0018:ffffc9000348f5d8 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 00007ffc99813000 RCX: ffff88802866d940
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000348f950 R08: ffffffff81b860aa R09: fffff940003b3d77
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801f630000
R13: 0000000000000000 R14: 1ffff11005612413 R15: ffff88801f630050
FS:  00007f8caa0bb740(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000557bf0106800 CR3: 0000000024fca000 CR4: 00000000003506e0
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 copy_pte_range mm/memory.c:1055 [inline]
 copy_pmd_range mm/memory.c:1167 [inline]
 copy_pud_range mm/memory.c:1204 [inline]
 copy_p4d_range mm/memory.c:1228 [inline]
 copy_page_range+0x13c1/0x4420 mm/memory.c:1301
 dup_mmap kernel/fork.c:615 [inline]
 dup_mm kernel/fork.c:1466 [inline]
 copy_mm+0xc64/0x1370 kernel/fork.c:1518
 copy_process+0x1816/0x3ef0 kernel/fork.c:2205
 kernel_clone+0x210/0x960 kernel/fork.c:2603
 __do_sys_clone kernel/fork.c:2720 [inline]
 __se_sys_clone kernel/fork.c:2704 [inline]
 __x64_sys_clone+0x23f/0x290 kernel/fork.c:2704
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f8caa16ba12
Code: 41 5d 41 5e 41 5f c3 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 e7 43 0f 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffc997fdd78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 0000557bf0104001 RCX: 00007f8caa16ba12
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 00007ffc9981e2e8 R08: 0000000000000000 R09: 0000557bf01040c0
R10: 00007f8caa0bba10 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000557bf01040f4
 </TASK>