INFO: task jfsCommit:247 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:jfsCommit state:D stack: 0 pid: 247 ppid: 2 flags:0x00000008 Call trace: __switch_to+0x2f4/0x558 arch/arm64/kernel/process.c:521 context_switch kernel/sched/core.c:5049 [inline] __schedule+0xe08/0x1bf8 kernel/sched/core.c:6395 schedule+0x11c/0x1c8 kernel/sched/core.c:6478 io_schedule+0x84/0x160 kernel/sched/core.c:8503 __lock_metapage+0x178/0x3f8 fs/jfs/jfs_metapage.c:49 lock_metapage fs/jfs/jfs_metapage.c:63 [inline] __get_metapage+0x94c/0x10a0 fs/jfs/jfs_metapage.c:640 diIAGRead+0xe4/0x14c fs/jfs/jfs_imap.c:2672 diFree+0x6b0/0x1e00 fs/jfs/jfs_imap.c:959 jfs_evict_inode+0x2cc/0x3fc fs/jfs/inode.c:156 evict+0x3c8/0x810 fs/inode.c:647 iput_final fs/inode.c:1769 [inline] iput+0x6c4/0x77c fs/inode.c:1795 txUpdateMap+0x6ac/0x7cc fs/jfs/jfs_txnmgr.c:2401 txLazyCommit fs/jfs/jfs_txnmgr.c:2698 [inline] jfs_lazycommit+0x384/0x9bc fs/jfs/jfs_txnmgr.c:2766 kthread+0x374/0x454 kernel/kthread.c:334 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:856 INFO: task jfsCommit:248 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:jfsCommit state:D stack: 0 pid: 248 ppid: 2 flags:0x00000008 Call trace: __switch_to+0x2f4/0x558 arch/arm64/kernel/process.c:521 context_switch kernel/sched/core.c:5049 [inline] __schedule+0xe08/0x1bf8 kernel/sched/core.c:6395 schedule+0x11c/0x1c8 kernel/sched/core.c:6478 io_schedule+0x84/0x160 kernel/sched/core.c:8503 __lock_metapage+0x178/0x3f8 fs/jfs/jfs_metapage.c:49 lock_metapage fs/jfs/jfs_metapage.c:63 [inline] __get_metapage+0x94c/0x10a0 fs/jfs/jfs_metapage.c:640 diIAGRead+0xe4/0x14c fs/jfs/jfs_imap.c:2672 diFree+0x6b0/0x1e00 fs/jfs/jfs_imap.c:959 jfs_evict_inode+0x2cc/0x3fc fs/jfs/inode.c:156 evict+0x3c8/0x810 fs/inode.c:647 iput_final fs/inode.c:1769 [inline] iput+0x6c4/0x77c fs/inode.c:1795 txUpdateMap+0x6ac/0x7cc fs/jfs/jfs_txnmgr.c:2401 txLazyCommit fs/jfs/jfs_txnmgr.c:2698 [inline] jfs_lazycommit+0x384/0x9bc fs/jfs/jfs_txnmgr.c:2766 kthread+0x374/0x454 kernel/kthread.c:334 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:856 Showing all locks held in the system: 1 lock held by khungtaskd/27: #0: ffff800014361520 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:312 2 locks held by jfsCommit/247: #0: ffff0000d8810920 (&(imap->im_aglock[index])){+.+.}-{3:3}, at: diFree+0x21c/0x1e00 fs/jfs/jfs_imap.c:889 #1: ffff0000e24b66f8 (&jfs_ip->rdwrlock/1){.+.+}-{3:3}, at: diFree+0x230/0x1e00 fs/jfs/jfs_imap.c:894 2 locks held by jfsCommit/248: #0: ffff0000cd570920 (&(imap->im_aglock[index])){+.+.}-{3:3}, at: diFree+0x21c/0x1e00 fs/jfs/jfs_imap.c:889 #1: ffff0000e24b2638 (&jfs_ip->rdwrlock/1){.+.+}-{3:3}, at: diFree+0x230/0x1e00 fs/jfs/jfs_imap.c:894 2 locks held by kworker/u4:3/290: 2 locks held by getty/3806: #0: ffff0000d4348098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 drivers/tty/tty_ldsem.c:340 #1: ffff80001bcee2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2f0/0xf6c drivers/tty/n_tty.c:2158 3 locks held by kworker/1:18/4152: #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283 #1: ffff80001fa67c00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285 #2: ffff0000ec9f8240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1c8/0x2704 drivers/net/netdevsim/fib.c:1480 3 locks held by syz-executor/4914: #0: ffff0000cfe6cff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x60/0x105c net/bluetooth/hci_core.c:1737 #1: ffff0000cfe6c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x334/0x105c net/bluetooth/hci_core.c:1782 #2: ffff800016400288 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_disconn_cfm include/net/bluetooth/hci_core.h:1517 [inline] #2: ffff800016400288 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb0/0x214 net/bluetooth/hci_conn.c:1622 2 locks held by syz-executor/4938: #0: ffff0000d51be0e0 (&type->s_umount_key#50){+.+.}-{3:3}, at: deactivate_super+0xf0/0x118 fs/super.c:365 #1: ffff8000146f94a8 (jfs_log_mutex){+.+.}-{3:3}, at: lmLogClose+0xb0/0x4c8 fs/jfs/jfs_logmgr.c:1452 1 lock held by syz-executor/4959: #0: ffff0000d72980e0 (&type->s_umount_key#50){+.+.}-{3:3}, at: deactivate_super+0xf0/0x118 fs/super.c:365 2 locks held by syz-executor/4982: #0: ffff0000cebc20e0 (&type->s_umount_key#50){+.+.}-{3:3}, at: deactivate_super+0xf0/0x118 fs/super.c:365 #1: ffff8000146f94a8 (jfs_log_mutex){+.+.}-{3:3}, at: lmLogClose+0xb0/0x4c8 fs/jfs/jfs_logmgr.c:1452 1 lock held by syz-executor/5021: #0: ffff0000d97e80e0 (&type->s_umount_key#50){+.+.}-{3:3}, at: deactivate_super+0xf0/0x118 fs/super.c:365 2 locks held by syz-executor/5052: #0: ffff0000f548a0e0 (&type->s_umount_key#50){+.+.}-{3:3}, at: deactivate_super+0xf0/0x118 fs/super.c:365 #1: ffff8000146f94a8 (jfs_log_mutex){+.+.}-{3:3}, at: lmLogClose+0xb0/0x4c8 fs/jfs/jfs_logmgr.c:1452 1 lock held by syz-executor/5209: #0: ffff0000c266e0e0 (&type->s_umount_key#50){+.+.}-{3:3}, at: deactivate_super+0xf0/0x118 fs/super.c:365 1 lock held by syz-executor/5375: #0: ffff0000d5aa40e0 (&type->s_umount_key#50){+.+.}-{3:3}, at: deactivate_super+0xf0/0x118 fs/super.c:365 1 lock held by syz-executor/5418: #0: ffff0000d54440e0 (&type->s_umount_key#50){+.+.}-{3:3}, at: deactivate_super+0xf0/0x118 fs/super.c:365 1 lock held by syz-executor/5451: #0: ffff0000c218a0e0 (&type->s_umount_key#50){+.+.}-{3:3}, at: deactivate_super+0xf0/0x118 fs/super.c:365 =============================================