EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue ext4 filesystem being mounted at /syzkaller-testdir137838202/syzkaller.Zu85Y0/180/file0 supports timestamps until 2038 (0x7fffffff) INFO: task syz-executor.4:11082 blocked for more than 143 seconds. Not tainted 5.10.148 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:24960 pid:11082 ppid: 4530 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:3797 [inline] __schedule+0x848/0x1e90 kernel/sched/core.c:4546 schedule+0xcb/0x270 kernel/sched/core.c:4624 io_schedule+0xba/0x130 kernel/sched/core.c:6297 bit_wait_io+0x12/0xa0 kernel/sched/wait_bit.c:209 __wait_on_bit_lock+0x131/0x1c0 kernel/sched/wait_bit.c:90 out_of_line_wait_on_bit_lock+0xd5/0x110 kernel/sched/wait_bit.c:117 wait_on_bit_lock_io include/linux/wait_bit.h:208 [inline] __lock_buffer fs/buffer.c:69 [inline] lock_buffer include/linux/buffer_head.h:400 [inline] __sync_dirty_buffer+0x34c/0x3e0 fs/buffer.c:3142 __ext4_handle_dirty_metadata+0x294/0x720 fs/ext4/ext4_jbd2.c:366 ext4_convert_inline_data_nolock+0x6a5/0xe50 fs/ext4/inline.c:1249 ext4_convert_inline_data+0x517/0x5f0 fs/ext4/inline.c:2009 ext4_fallocate+0x18a/0x3ca0 fs/ext4/extents.c:4699 vfs_fallocate+0x48f/0xcc0 fs/open.c:309 ksys_fallocate fs/open.c:332 [inline] __do_sys_fallocate fs/open.c:340 [inline] __se_sys_fallocate fs/open.c:338 [inline] __x64_sys_fallocate+0xcf/0x140 fs/open.c:338 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x61/0xc6 RIP: 0033:0x7fc645bffb19 RSP: 002b:00007fc643175188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d RAX: ffffffffffffffda RBX: 00007fc645d12f60 RCX: 00007fc645bffb19 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007fc645c59f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffedd35261f R14: 00007fc643175300 R15: 0000000000022000 INFO: task syz-executor.4:11102 blocked for more than 143 seconds. Not tainted 5.10.148 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:28712 pid:11102 ppid: 4530 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:3797 [inline] __schedule+0x848/0x1e90 kernel/sched/core.c:4546 schedule+0xcb/0x270 kernel/sched/core.c:4624 rwsem_down_write_slowpath+0x5c0/0xc00 kernel/locking/rwsem.c:1235 __down_write kernel/locking/rwsem.c:1401 [inline] down_write+0x140/0x160 kernel/locking/rwsem.c:1558 inode_lock include/linux/fs.h:774 [inline] do_truncate+0x125/0x1f0 fs/open.c:62 handle_truncate fs/namei.c:2907 [inline] do_open fs/namei.c:3249 [inline] path_openat+0x1d51/0x26d0 fs/namei.c:3364 do_filp_open+0x17e/0x3d0 fs/namei.c:3391 do_sys_openat2+0x171/0x420 fs/open.c:1180 do_sys_open fs/open.c:1196 [inline] __do_sys_creat fs/open.c:1270 [inline] __se_sys_creat fs/open.c:1264 [inline] __x64_sys_creat+0xc9/0x120 fs/open.c:1264 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x61/0xc6 RIP: 0033:0x7fc645bffb19 RSP: 002b:00007fc643133188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 RAX: ffffffffffffffda RBX: 00007fc645d130e0 RCX: 00007fc645bffb19 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 RBP: 00007fc645c59f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffedd35261f R14: 00007fc643133300 R15: 0000000000022000 Showing all locks held in the system: 2 locks held by kworker/u4:0/7: #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:617 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8ac/0x1590 kernel/workqueue.c:2250 #1: ffff88800850fda8 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8df/0x1590 kernel/workqueue.c:2254 1 lock held by khungtaskd/22: #0: ffffffff84ff80a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x269 kernel/locking/lockdep.c:6390 1 lock held by in:imklog/178: #0: ffff88800dc499f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xed/0x110 fs/file.c:1003 2 locks held by agetty/219: #0: ffff888017bdc098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x90 drivers/tty/tty_ldisc.c:266 #1: ffffc900007cd2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xf39/0x14c0 drivers/tty/n_tty.c:2208 3 locks held by syz-executor.4/11082: #0: ffff88800c440438 (sb_writers#3){.+.+}-{0:0}, at: ksys_fallocate fs/open.c:332 [inline] #0: ffff88800c440438 (sb_writers#3){.+.+}-{0:0}, at: __do_sys_fallocate fs/open.c:340 [inline] #0: ffff88800c440438 (sb_writers#3){.+.+}-{0:0}, at: __se_sys_fallocate fs/open.c:338 [inline] #0: ffff88800c440438 (sb_writers#3){.+.+}-{0:0}, at: __x64_sys_fallocate+0xcf/0x140 fs/open.c:338 #1: ffff88801d3ba210 (&sb->s_type->i_mutex_key#6){++++}-{3:3}, at: inode_lock include/linux/fs.h:774 [inline] #1: ffff88801d3ba210 (&sb->s_type->i_mutex_key#6){++++}-{3:3}, at: ext4_fallocate+0x182/0x3ca0 fs/ext4/extents.c:4698 #2: ffff88801d3b9e50 (&ei->xattr_sem){++++}-{3:3}, at: ext4_write_lock_xattr fs/ext4/xattr.h:155 [inline] #2: ffff88801d3b9e50 (&ei->xattr_sem){++++}-{3:3}, at: ext4_convert_inline_data+0x34b/0x5f0 fs/ext4/inline.c:2007 2 locks held by syz-executor.4/11102: #0: ffff88800c440438 (sb_writers#3){.+.+}-{0:0}, at: do_open fs/namei.c:3238 [inline] #0: ffff88800c440438 (sb_writers#3){.+.+}-{0:0}, at: path_openat+0x1a41/0x26d0 fs/namei.c:3364 #1: ffff88801d3ba210 (&sb->s_type->i_mutex_key#6){++++}-{3:3}, at: inode_lock include/linux/fs.h:774 [inline] #1: ffff88801d3ba210 (&sb->s_type->i_mutex_key#6){++++}-{3:3}, at: do_truncate+0x125/0x1f0 fs/open.c:62 =============================================