INFO: task jfsCommit:123 blocked in I/O wait for more than 143 seconds.
      Tainted: G             L      syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:jfsCommit       state:D stack:27064 pid:123   tgid:123   ppid:2      task_flags:0x200040 flags:0x00080000
Call Trace:
 <TASK>
 __schedule+0x1821/0x5740
 schedule+0x164/0x360
 io_schedule+0x7f/0xd0
 lock_metapage+0x1ff/0x400
 __get_metapage+0x49a/0xe20
 diIAGRead+0xce/0x140
 diFree+0x9e1/0x2ca0
 jfs_evict_inode+0x331/0x440
 evict+0x61e/0xb10
 jfs_lazycommit+0x43d/0xaa0
 kthread+0x389/0x470
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
INFO: task syz-executor:22965 blocked in I/O wait for more than 143 seconds.
      Tainted: G             L      syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:22408 pid:22965 tgid:22965 ppid:1      task_flags:0x400140 flags:0x00080003
Call Trace:
 <TASK>
 __schedule+0x1821/0x5740
 schedule+0x164/0x360
 io_schedule+0x7f/0xd0
 lock_metapage+0x1ff/0x400
 __get_metapage+0x49a/0xe20
 diRead+0x1f7/0xb90
 jfs_iget+0x89/0x470
 jfs_lookup+0x220/0x420
 __lookup_slow+0x2b7/0x410
 lookup_slow+0x53/0x70
 path_lookupat+0x3f5/0x8c0
 filename_lookup+0x256/0x5d0
 user_path_at+0x40/0x160
 __x64_sys_umount+0xf6/0x170
 do_syscall_64+0x15f/0x560
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9705d9e097
RSP: 002b:00007ffc45864908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9705d9e097
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc458649c0
RBP: 00007ffc458649c0 R08: 0000000000000000 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc45865ab0
R13: 00007f9705e321ca R14: 00000000000e6dd1 R15: 00007ffc45866b80
 </TASK>

Showing all locks held in the system:
8 locks held by kworker/1:1/31:
1 lock held by khungtaskd/34:
 #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
2 locks held by jfsCommit/123:
 #0: ffff8881151c8910 (&(imap->im_aglock[index])){+.+.}-{4:4}, at: diFree+0x2ec/0x2ca0
 #1: ffff888022cf3670 (&jfs_ip->rdwrlock/1){.+.+}-{4:4}, at: diFree+0x30a/0x2ca0
3 locks held by kworker/u10:5/1111:
2 locks held by getty/5439:
 #0: ffff88811339d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
3 locks held by kworker/1:4/5675:
 #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
 #1: ffffc9000536fc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
 #2: ffff8881b04c8250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0
2 locks held by syz-executor/22965:
 #0: ffff888022cf4378 (&type->i_mutex_dir_key#15){++++}-{4:4}, at: lookup_slow+0x46/0x70
 #1: ffff888022cf3670 (&jfs_ip->rdwrlock/1){.+.+}-{4:4}, at: diRead+0x121/0xb90
2 locks held by syz.8.4156/28111:
 #0: ffff8881b388c440 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240
 #1: ffffffff8e962fe8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150
 nmi_cpu_backtrace+0x274/0x2d0
 nmi_trigger_cpumask_backtrace+0x17a/0x300
 sys_info+0x135/0x170
 watchdog+0xfd3/0x1030
 kthread+0x389/0x470
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 1111 Comm: kworker/u10:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: events_unbound nsim_dev_trap_report_work
RIP: 0010:preempt_count_add+0x11f/0x190
Code: 9d 0e 00 75 13 48 8d 3d cf 2b a0 0e 48 c7 c6 60 f8 cb 8b 67 48 0f b9 3a 90 89 df e9 5f ff ff ff 48 c7 c1 e0 f3 44 9a 80 e1 07 <80> c1 03 38 c1 0f 8c 01 ff ff ff 89 fb 48 c7 c7 e0 f3 44 9a e8 08
RSP: 0018:ffffc90007de78c8 EFLAGS: 00000046
RAX: 0000000000000004 RBX: 0000000000000286 RCX: ffffffff9a44f300
RDX: 0000000000000000 RSI: ffffffff8c28b840 RDI: 0000000000000001
RBP: 0000000000a12110 R08: ffffffff9030dbf7 R09: 1ffffffff2061b7e
R10: dffffc0000000000 R11: fffffbfff2061b7f R12: ffff8881063f20f0
R13: ffff8881063f2000 R14: ffffffff9a6490d8 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8882a9287000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555577deda68 CR3: 000000000e74a000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 _raw_spin_lock_irqsave+0x24/0x60
 debug_check_no_obj_freed+0x145/0x550
 kmem_cache_free+0xfd/0x650
 nsim_dev_trap_report_work+0x7de/0xb90
 process_scheduled_works+0xb5d/0x1860
 worker_thread+0xa53/0xfc0
 kthread+0x389/0x470
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
