EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000006,grpquota,i_version,dioread_lock,max_dir_size_kb=0x0000000000000401,jqfmt=vfsv1,,errors=continue INFO: task syz-executor270:8137 blocked for more than 140 seconds. Not tainted 4.19.211-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor270 D26800 8137 8136 0x00000004 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 io_schedule+0xb5/0x120 kernel/sched/core.c:5181 bit_wait_io+0x12/0x90 kernel/sched/wait_bit.c:207 __wait_on_bit_lock+0xb5/0x170 kernel/sched/wait_bit.c:89 out_of_line_wait_on_bit_lock+0xd2/0x100 kernel/sched/wait_bit.c:116 wait_on_bit_lock_io include/linux/wait_bit.h:208 [inline] __lock_buffer+0x52/0x60 fs/buffer.c:65 lock_buffer include/linux/buffer_head.h:374 [inline] __sync_dirty_buffer+0x2a6/0x320 fs/buffer.c:3178 __ext4_handle_dirty_metadata+0x234/0x590 fs/ext4/ext4_jbd2.c:300 ext4_convert_inline_data_nolock+0x5c9/0xd10 fs/ext4/inline.c:1246 ext4_convert_inline_data+0x347/0x3a0 fs/ext4/inline.c:2033 ext4_fallocate+0x137/0x2150 fs/ext4/extents.c:4962 vfs_fallocate+0x487/0x9a0 fs/open.c:308 ioctl_preallocate+0x186/0x200 fs/ioctl.c:482 file_ioctl fs/ioctl.c:498 [inline] do_vfs_ioctl+0x1060/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f95c9e84299 Code: Bad RIP value. RSP: 002b:00007ffe37e5e618 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f95c9e84299 RDX: 0000000020000080 RSI: 0000000040305828 RDI: 0000000000000004 RBP: 0000000000000000 R08: 00007f95c9ef2ec0 R09: 00007f95c9ef2ec0 R10: 00007f95c9ef2ec0 R11: 0000000000000246 R12: 00007ffe37e5e640 R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000 Showing all locks held in the system: 1 lock held by khungtaskd/1570: #0: 000000009a6c85e8 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4441 2 locks held by syz-executor270/8137: #0: 0000000098bc3051 (sb_writers#3){.+.+}, at: file_start_write include/linux/fs.h:2779 [inline] #0: 0000000098bc3051 (sb_writers#3){.+.+}, at: vfs_fallocate+0x7c0/0x9a0 fs/open.c:307 #1: 00000000fa5c93cd (&ei->xattr_sem){++++}, at: ext4_write_lock_xattr fs/ext4/xattr.h:141 [inline] #1: 00000000fa5c93cd (&ei->xattr_sem){++++}, at: ext4_convert_inline_data+0x20a/0x3a0 fs/ext4/inline.c:2031 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1570 Comm: khungtaskd Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline] watchdog+0x991/0xe60 kernel/hung_task.c:287 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 4695 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 RIP: 0010:__read_once_size include/linux/compiler.h:263 [inline] RIP: 0010:arch_atomic_read arch/x86/include/asm/atomic.h:31 [inline] RIP: 0010:atomic_read include/asm-generic/atomic-instrumented.h:22 [inline] RIP: 0010:rcu_dynticks_curr_cpu_in_eqs kernel/rcu/tree.c:350 [inline] RIP: 0010:rcu_is_watching+0x53/0xc0 kernel/rcu/tree.c:1025 Code: 00 af cf 89 48 89 f9 48 c1 e9 03 80 3c 11 00 75 6d 48 03 1c c5 00 af cf 89 be 04 00 00 00 48 8d 6b 10 48 89 ef e8 5d c2 46 00 <48> 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 14 02 48 RSP: 0018:ffff8880a0867ed8 EFLAGS: 00000246 RAX: ffffed101742455b RBX: ffff8880ba122ac0 RCX: ffffffff81518c83 RDX: ffffed101742455b RSI: 0000000000000004 RDI: ffff8880ba122ad0 RBP: ffff8880ba122ad0 R08: 0000000000000000 R09: ffffed101742455a R10: ffff8880ba122ad3 R11: 0000000000000000 R12: 0000000000001257 R13: ffff8880a31fd780 R14: 0000000000000000 R15: 0000000000000000 FS: 00007fee804658c0(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fee7d837000 CR3: 00000000a1120000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rcu_read_unlock include/linux/rcupdate.h:677 [inline] __task_pid_nr_ns+0x39f/0x4c0 kernel/pid.c:432 task_tgid_vnr include/linux/sched.h:1305 [inline] __ia32_sys_getpid+0x1a/0x20 kernel/sys.c:890 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fee7f6fdf17 Code: ff ff ff 48 8b 4d a0 0f b7 51 fe 48 8b 4d a8 66 89 54 08 fe e9 1a ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 b8 27 00 00 00 0f 05 0f 1f 84 00 00 00 00 00 b8 6e 00 00 00 0f 05 c3 0f 1f 84 00 00 RSP: 002b:00007fffe77cd4f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000027 RAX: ffffffffffffffda RBX: 00005635f83021e0 RCX: 00007fee7f6fdf17 RDX: 00007fffe77cd5b8 RSI: 0000000000000001 RDI: 00005635f83021e0 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000069 R11: 0000000000000206 R12: 00007fffe77cd5b8 R13: 0000000000001257 R14: 00007fffe77d03a0 R15: 00007fffe77cd9b0