syzbot

EXT4-fs error (device loop4): ext4_fill_super:4943: inode #2: comm syz-executor559: iget: root inode unallocated
EXT4-fs (loop4): get root inode failed
EXT4-fs (loop4): mount failed
------------[ cut here ]------------
ODEBUG: free active (active state 0) object type: timer_list hint: print_daily_error_info+0x0/0x1f0 fs/ext4/super.c:1334
WARNING: CPU: 1 PID: 9611 at lib/debugobjects.c:505 debug_print_object+0x16e/0x250 lib/debugobjects.c:505
Modules linked in:
CPU: 1 PID: 9611 Comm: syz-executor559 Not tainted 5.11.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:debug_print_object+0x16e/0x250 lib/debugobjects.c:505
Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd c0 d1 be 89 4c 89 ee 48 c7 c7 c0 c5 be 89 e8 c3 3f fb 04 <0f> 0b 83 05 15 95 ff 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3
RSP: 0018:ffffc900093c7a18 EFLAGS: 00010082
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
RDX: ffff888026576280 RSI: ffffffff815bd105 RDI: fffff52001278f35
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff815b61ae R11: 0000000000000000 R12: ffffffff896d7b40
R13: ffffffff89becc00 R14: ffffffff81625760 R15: dffffc0000000000
FS:  00007f84ff2ea700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000019cfe000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __debug_check_no_obj_freed lib/debugobjects.c:987 [inline]
 debug_check_no_obj_freed+0x301/0x420 lib/debugobjects.c:1018
 kfree+0xd1/0x260 mm/slab.c:3778
 ext4_fill_super+0x84f/0xde90 fs/ext4/super.c:5175
 mount_bdev+0x34d/0x410 fs/super.c:1367
 legacy_get_tree+0x105/0x220 fs/fs_context.c:592
 vfs_get_tree+0x89/0x2f0 fs/super.c:1497
 do_new_mount fs/namespace.c:2916 [inline]
 path_mount+0x132a/0x1f90 fs/namespace.c:3246
 do_mount fs/namespace.c:3259 [inline]
 __do_sys_mount fs/namespace.c:3467 [inline]
 __se_sys_mount fs/namespace.c:3444 [inline]
 __x64_sys_mount+0x27f/0x300 fs/namespace.c:3444
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x44c5da
Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 d8 00 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f84ff2ea168 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f84ff2ea1c0 RCX: 000000000044c5da
RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f84ff2ea180
RBP: 0000000000000004 R08: 00007f84ff2ea1c0 R09: 00007f84ff2ea6b8
R10: 0000000000000000 R11: 0000000000000206 R12: 00007f84ff2ea180
R13: 0000000020000260 R14: 0000000000000005 R15: 0000000000000007