INFO: task syz-executor:6356 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:21672 pid:6356  tgid:6356  ppid:1      task_flags:0x400140 flags:0x00080003
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 schedule+0x165/0x360
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x7e6/0x1350
 lmLogClose+0xb4/0x520
 jfs_umount+0x2ef/0x3c0
 jfs_put_super+0x8c/0x190
 generic_shutdown_super+0x135/0x2c0
 kill_block_super+0x44/0x90
 deactivate_locked_super+0xbc/0x130
 cleanup_mnt+0x425/0x4c0
 task_work_run+0x1d4/0x260
 exit_to_user_mode_loop+0xe9/0x130
 do_syscall_64+0x2bd/0xfa0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2365d909f7
RSP: 002b:00007ffe36b0ceb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 00007f2365e11d7d RCX: 00007f2365d909f7
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe36b0cf70
RBP: 00007ffe36b0cf70 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe36b0e000
R13: 00007f2365e11d7d R14: 000000000001a279 R15: 00007ffe36b0e040
 </TASK>
INFO: task syz-executor:6432 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:21672 pid:6432  tgid:6432  ppid:1      task_flags:0x400140 flags:0x00080003
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 schedule+0x165/0x360
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x7e6/0x1350
 lmLogClose+0xb4/0x520
 jfs_umount+0x2ef/0x3c0
 jfs_put_super+0x8c/0x190
 generic_shutdown_super+0x135/0x2c0
 kill_block_super+0x44/0x90
 deactivate_locked_super+0xbc/0x130
 cleanup_mnt+0x425/0x4c0
 task_work_run+0x1d4/0x260
 exit_to_user_mode_loop+0xe9/0x130
 do_syscall_64+0x2bd/0xfa0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fad765909f7
RSP: 002b:00007ffe2ab1e8e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 00007fad76611d7d RCX: 00007fad765909f7
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2ab1e9a0
RBP: 00007ffe2ab1e9a0 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe2ab1fa30
R13: 00007fad76611d7d R14: 000000000001c8d0 R15: 00007ffe2ab1fa70
 </TASK>
INFO: task syz-executor:7361 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:21768 pid:7361  tgid:7361  ppid:1      task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 schedule+0x165/0x360
 schedule_preempt_disabled+0x13/0x30
 __mutex_lock+0x7e6/0x1350
 lmLogClose+0xb4/0x520
 jfs_umount+0x2ef/0x3c0
 jfs_put_super+0x8c/0x190
 generic_shutdown_super+0x135/0x2c0
 kill_block_super+0x44/0x90
 deactivate_locked_super+0xbc/0x130
 cleanup_mnt+0x425/0x4c0
 task_work_run+0x1d4/0x260
 exit_to_user_mode_loop+0xe9/0x130
 do_syscall_64+0x2bd/0xfa0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3e2a7909f7
RSP: 002b:00007ffd45186e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 00007f3e2a811d7d RCX: 00007f3e2a7909f7
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd45186ed0
RBP: 00007ffd45186ed0 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd45187f60
R13: 00007f3e2a811d7d R14: 0000000000027c62 R15: 00007ffd45187fa0
 </TASK>
INFO: task syz.4.259:7611 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.259       state:D stack:27880 pid:7611  tgid:7610  ppid:7275   task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 schedule+0x165/0x360
 schedule_preempt_disabled+0x13/0x30
 rwsem_down_read_slowpath+0x5fd/0x8f0
 down_read+0x98/0x2e0
 super_lock+0x2a9/0x3b0
 user_get_super+0xc8/0x120
 __se_sys_quotactl+0x4da/0x950
 do_syscall_64+0xfa/0xfa0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa9a898f6c9
RSP: 002b:00007fa9a98f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
RAX: ffffffffffffffda RBX: 00007fa9a8be5fa0 RCX: 00007fa9a898f6c9
RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffff80000902
RBP: 00007fa9a8a11f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fa9a8be6038 R14: 00007fa9a8be5fa0 R15: 00007ffdcc436928
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/34:
 #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
3 locks held by kworker/0:2/1272:
 #0: ffff888100075948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc9000858fba0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffff888197200240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1f7/0x3b0
2 locks held by getty/5645:
 #0: ffff88811261c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc9000356b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
2 locks held by syz-executor/6199:
 #0: ffff888021f640e0 (&type->s_umount_key#93){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
 #1: ffffffff8e37cc08 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb4/0x520
2 locks held by syz-executor/6356:
 #0: ffff8881162160e0 (&type->s_umount_key#93){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
 #1: ffffffff8e37cc08 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb4/0x520
2 locks held by syz-executor/6432:
 #0: ffff8881b7e540e0 (&type->s_umount_key#93){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
 #1: ffffffff8e37cc08 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb4/0x520
2 locks held by syz-executor/7361:
 #0: ffff8881b44e60e0 (&type->s_umount_key#93){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
 #1: ffffffff8e37cc08 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb4/0x520
1 lock held by syz.4.259/7611:
 #0: ffff888021f640e0 (&type->s_umount_key#93){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
2 locks held by syz-executor/8115:
 #0: ffff8880206060e0 (&type->s_umount_key#93){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
 #1: ffffffff8e37cc08 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb4/0x520
1 lock held by syz.5.385/8506:
 #0: ffff888021f640e0 (&type->s_umount_key#93){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
1 lock held by syz.3.417/8748:
 #0: ffff888021f640e0 (&type->s_umount_key#93){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
1 lock held by syz.7.440/8830:
 #0: ffff8881b7e540e0 (&type->s_umount_key#93){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
1 lock held by syz.6.455/8982:
 #0: ffff8881162160e0 (&type->s_umount_key#93){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
1 lock held by syz.8.466/9054:
 #0: ffff8881b44e60e0 (&type->s_umount_key#93){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
2 locks held by syz-executor/9126:
 #0: ffff88811413c0e0 (&type->s_umount_key#93){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
 #1: ffffffff8e37cc08 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb4/0x520
1 lock held by syz.4.492/9143:
 #0: ffff888021f640e0 (&type->s_umount_key#93){++++}-{4:4}, at: super_lock+0x25c/0x3b0
2 locks held by syz-executor/9246:
 #0: ffff8881b188c0e0 (&type->s_umount_key#93){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
 #1: ffffffff8e37cc08 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb4/0x520
1 lock held by syz.0.591/9781:
 #0: ffff8880206060e0 (&type->s_umount_key#93){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
2 locks held by syz-executor/9879:
 #0: ffff888110a7e0e0 (&type->s_umount_key#93){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
 #1: ffffffff8e37cc08 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb4/0x520
2 locks held by syz.1.637/10039:
 #0: ffff888110d360e0 (&type->s_umount_key#92/1){+.+.}-{4:4}, at: alloc_super+0x1bb/0x930
 #1: ffffffff8e37cc08 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogOpen+0x1a1/0xfa0
2 locks held by syz-executor/10055:
 #0: ffff8881763fe0e0 (&type->s_umount_key#93){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
 #1: ffffffff8e37cc08 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xb4/0x520
1 lock held by syz.6.724/10452:
 #0: ffff8881162160e0 (&type->s_umount_key#93){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
1 lock held by syz.7.737/10480:
 #0: ffff8881b7e540e0 (&type->s_umount_key#93){++++}-{4:4}, at: super_lock+0x2a9/0x3b0

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250
 nmi_cpu_backtrace+0x39e/0x3d0
 nmi_trigger_cpumask_backtrace+0x17a/0x300
 watchdog+0xf60/0xfa0
 kthread+0x711/0x8a0
 ret_from_fork+0x4bc/0x870
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: ipv6_addrconf addrconf_dad_work
RIP: 0010:ip6t_do_table+0xaf5/0x1560
Code: a9 04 00 00 e8 ac cf b0 f7 e9 ca fe ff ff e8 a2 cf b0 f7 e9 c0 fe ff ff e8 98 cf b0 f7 48 8b 84 24 e8 00 00 00 42 0f b6 04 28 <84> c0 0f 85 53 06 00 00 4d 8d a6 98 00 00 00 8b 1d 26 c7 6d 05 bf
RSP: 0018:ffffc90000127400 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888102680000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90000127600 R08: ffffc9000012756f R09: 0000000000000000
R10: ffffc90000127550 R11: fffff52000024eae R12: ffff8880412aaa88
R13: dffffc0000000000 R14: ffff8880412aa9e0 R15: 1ffff1100825554d
FS:  0000000000000000(0000) GS:ffff8882a9f38000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3a935ff000 CR3: 000000000dd38000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 nf_hook_slow+0xc5/0x220
 ndisc_send_skb+0x13c5/0x1510
 addrconf_dad_completed+0x7ae/0xd60
 addrconf_dad_work+0xc36/0x14b0
 process_scheduled_works+0xae1/0x17b0
 worker_thread+0x8a0/0xda0
 kthread+0x711/0x8a0
 ret_from_fork+0x4bc/0x870
 ret_from_fork_asm+0x1a/0x30
 </TASK>
