Warning: Permanently added '10.128.1.228' (ED25519) to the list of known hosts. 2025/11/15 21:17:36 parsed 1 programs syzkaller login: [ 84.407374][ T5794] cgroup: Unknown subsys name 'net' [ 84.543973][ T5794] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.289769][ T5794] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.679967][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 90.773560][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.781623][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.791049][ T5857] bridge_slave_0: entered allmulticast mode [ 90.798299][ T5857] bridge_slave_0: entered promiscuous mode [ 90.822835][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.830145][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.837779][ T5857] bridge_slave_1: entered allmulticast mode [ 90.844930][ T5857] bridge_slave_1: entered promiscuous mode [ 90.898958][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.910998][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.965715][ T5857] team0: Port device team_slave_0 added [ 90.973623][ T5857] team0: Port device team_slave_1 added [ 91.018790][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.026516][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.052514][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.065612][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.072585][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.098743][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.146043][ T5857] hsr_slave_0: entered promiscuous mode [ 91.152664][ T5857] hsr_slave_1: entered promiscuous mode [ 91.363207][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.376587][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.388224][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.400620][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.512305][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.539952][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.552738][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.560228][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.578180][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.585689][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.801519][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.851842][ T5857] veth0_vlan: entered promiscuous mode [ 91.866543][ T5857] veth1_vlan: entered promiscuous mode [ 91.900281][ T5857] veth0_macvtap: entered promiscuous mode [ 91.910137][ T5857] veth1_macvtap: entered promiscuous mode [ 91.936830][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.956637][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.970251][ T5857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.979406][ T5857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.990706][ T5857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.999702][ T5857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.205810][ T968] cfg80211: failed to load regulatory.db [ 92.320035][ T1077] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.382597][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.394400][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.425119][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.432997][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.722197][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.730551][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.739352][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.748499][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.756873][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.764235][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/11/15 21:17:47 executed programs: 0 [ 93.308661][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.317668][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.327483][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.336462][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.344449][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.352823][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.537622][ T5902] chnl_net:caif_netlink_parms(): no params data found [ 93.617721][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.625042][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.632255][ T5902] bridge_slave_0: entered allmulticast mode [ 93.640085][ T5902] bridge_slave_0: entered promiscuous mode [ 93.649043][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.656848][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.664035][ T5902] bridge_slave_1: entered allmulticast mode [ 93.672122][ T5902] bridge_slave_1: entered promiscuous mode [ 93.709296][ T5902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.721245][ T5902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.758709][ T5902] team0: Port device team_slave_0 added [ 93.767230][ T5902] team0: Port device team_slave_1 added [ 93.799603][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.806951][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.833640][ T5902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.847536][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.854517][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.880941][ T5902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.928329][ T5902] hsr_slave_0: entered promiscuous mode [ 93.934897][ T5902] hsr_slave_1: entered promiscuous mode [ 93.941228][ T5902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.950118][ T5902] Cannot create hsr debugfs directory [ 94.947550][ T1077] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.395870][ T51] Bluetooth: hci0: command tx timeout [ 97.157926][ T1077] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.209795][ T1077] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.477604][ T51] Bluetooth: hci0: command tx timeout [ 98.100843][ T5902] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.140738][ T5902] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.155675][ T5902] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.171608][ T5902] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.192270][ T1077] hsr_slave_0: left promiscuous mode [ 98.200042][ T1077] hsr_slave_1: left promiscuous mode [ 98.209041][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.219712][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.232003][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.239537][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.250208][ T1077] bridge_slave_1: left allmulticast mode [ 98.256008][ T1077] bridge_slave_1: left promiscuous mode [ 98.262648][ T1077] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.278725][ T1077] bridge_slave_0: left allmulticast mode [ 98.284445][ T1077] bridge_slave_0: left promiscuous mode [ 98.292892][ T1077] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.332205][ T1077] veth1_macvtap: left promiscuous mode [ 98.340167][ T1077] veth0_macvtap: left promiscuous mode [ 98.348318][ T1077] veth1_vlan: left promiscuous mode [ 98.354031][ T1077] veth0_vlan: left promiscuous mode [ 98.782734][ T1077] team0 (unregistering): Port device team_slave_1 removed [ 98.819418][ T1077] team0 (unregistering): Port device team_slave_0 removed [ 98.850629][ T1077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.896054][ T1077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.210010][ T1077] bond0 (unregistering): Released all slaves [ 99.388524][ T5902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.411785][ T5902] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.430292][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.437575][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.456405][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.463619][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.522093][ T5902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.556539][ T51] Bluetooth: hci0: command tx timeout [ 99.757476][ T5902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.805928][ T5902] veth0_vlan: entered promiscuous mode [ 99.819604][ T5902] veth1_vlan: entered promiscuous mode [ 99.851464][ T5902] veth0_macvtap: entered promiscuous mode [ 99.861382][ T5902] veth1_macvtap: entered promiscuous mode [ 99.883142][ T5902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.911800][ T5902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.923436][ T5902] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.933034][ T5902] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.942137][ T5902] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.951218][ T5902] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.031460][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.044164][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.089775][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.098260][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.175900][ T5949] syz.0.17[5949]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 100.198669][ T5949] loop0: detected capacity change from 0 to 512 [ 100.230147][ T5949] [ 100.232545][ T5949] ====================================================== [ 100.239590][ T5949] WARNING: possible circular locking dependency detected [ 100.246643][ T5949] syzkaller #0 Not tainted [ 100.251089][ T5949] ------------------------------------------------------ [ 100.258200][ T5949] syz.0.17/5949 is trying to acquire lock: [ 100.264102][ T5949] ffff88802c532bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0 [ 100.274135][ T5949] [ 100.274135][ T5949] but task is already holding lock: [ 100.281600][ T5949] ffff888060d400c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 100.291443][ T5949] [ 100.291443][ T5949] which lock already depends on the new lock. [ 100.291443][ T5949] [ 100.301956][ T5949] [ 100.301956][ T5949] the existing dependency chain (in reverse order) is: [ 100.311058][ T5949] [ 100.311058][ T5949] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 100.318619][ T5949] down_read+0x46/0x2e0 [ 100.323305][ T5949] ext4_setattr+0x86b/0x1c90 [ 100.328506][ T5949] notify_change+0xb0d/0xe10 [ 100.333617][ T5949] chown_common+0x3f9/0x5a0 [ 100.338653][ T5949] do_fchownat+0x168/0x270 [ 100.343599][ T5949] __x64_sys_chown+0x82/0x90 [ 100.348716][ T5949] do_syscall_64+0x55/0xb0 [ 100.353692][ T5949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.360133][ T5949] [ 100.360133][ T5949] -> #1 (jbd2_handle){++++}-{0:0}: [ 100.367479][ T5949] start_this_handle+0x1e9d/0x20c0 [ 100.373120][ T5949] jbd2__journal_start+0x2bb/0x5b0 [ 100.378761][ T5949] __ext4_journal_start_sb+0x203/0x570 [ 100.384760][ T5949] ext4_do_writepages+0xf92/0x38d0 [ 100.390404][ T5949] ext4_writepages+0x1a8/0x2f0 [ 100.395702][ T5949] do_writepages+0x3a2/0x600 [ 100.400819][ T5949] __writeback_single_inode+0x153/0xee0 [ 100.406894][ T5949] writeback_sb_inodes+0x77c/0xef0 [ 100.412528][ T5949] __writeback_inodes_wb+0x111/0x240 [ 100.418343][ T5949] wb_writeback+0x464/0xba0 [ 100.423373][ T5949] wb_workfn+0xb32/0xe20 [ 100.428226][ T5949] process_scheduled_works+0xa45/0x15b0 [ 100.434306][ T5949] worker_thread+0xa55/0xfc0 [ 100.439443][ T5949] kthread+0x2fa/0x390 [ 100.444037][ T5949] ret_from_fork+0x48/0x80 [ 100.448995][ T5949] ret_from_fork_asm+0x11/0x20 [ 100.454297][ T5949] [ 100.454297][ T5949] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 100.462744][ T5949] __lock_acquire+0x2ddb/0x7c80 [ 100.468239][ T5949] lock_acquire+0x197/0x410 [ 100.473277][ T5949] percpu_down_read+0x44/0x1a0 [ 100.478573][ T5949] ext4_writepages+0x170/0x2f0 [ 100.483863][ T5949] do_writepages+0x3a2/0x600 [ 100.488989][ T5949] __writeback_single_inode+0x153/0xee0 [ 100.495069][ T5949] writeback_single_inode+0x211/0x720 [ 100.500982][ T5949] write_inode_now+0x161/0x1e0 [ 100.506288][ T5949] iput+0x5b2/0x920 [ 100.510625][ T5949] ext4_xattr_block_set+0x273a/0x32a0 [ 100.516532][ T5949] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 100.522955][ T5949] __ext4_expand_extra_isize+0x306/0x400 [ 100.529117][ T5949] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 100.535118][ T5949] ext4_evict_inode+0x7ed/0xea0 [ 100.540535][ T5949] evict+0x486/0x870 [ 100.545037][ T5949] ext4_orphan_cleanup+0xbd4/0x1400 [ 100.550767][ T5949] ext4_fill_super+0x5de4/0x66c0 [ 100.556231][ T5949] get_tree_bdev+0x3e4/0x510 [ 100.561346][ T5949] vfs_get_tree+0x8c/0x280 [ 100.566288][ T5949] do_new_mount+0x24b/0xa40 [ 100.571416][ T5949] __se_sys_mount+0x2da/0x3c0 [ 100.576615][ T5949] do_syscall_64+0x55/0xb0 [ 100.581558][ T5949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.587975][ T5949] [ 100.587975][ T5949] other info that might help us debug this: [ 100.587975][ T5949] [ 100.598216][ T5949] Chain exists of: [ 100.598216][ T5949] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 100.598216][ T5949] [ 100.611613][ T5949] Possible unsafe locking scenario: [ 100.611613][ T5949] [ 100.619155][ T5949] CPU0 CPU1 [ 100.624522][ T5949] ---- ---- [ 100.629912][ T5949] lock(&ei->xattr_sem); [ 100.634247][ T5949] lock(jbd2_handle); [ 100.640902][ T5949] lock(&ei->xattr_sem); [ 100.647774][ T5949] rlock(&sbi->s_writepages_rwsem); [ 100.653145][ T5949] [ 100.653145][ T5949] *** DEADLOCK *** [ 100.653145][ T5949] [ 100.661295][ T5949] 3 locks held by syz.0.17/5949: [ 100.666231][ T5949] #0: ffff88802c5340e0 (&type->s_umount_key#32){++++}-{3:3}, at: get_tree_bdev+0x344/0x510 [ 100.676345][ T5949] #1: ffff88802c534608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0 [ 100.685787][ T5949] #2: ffff888060d400c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 100.696102][ T5949] [ 100.696102][ T5949] stack backtrace: [ 100.702000][ T5949] CPU: 0 PID: 5949 Comm: syz.0.17 Not tainted syzkaller #0 [ 100.709205][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.719378][ T5949] Call Trace: [ 100.722668][ T5949] [ 100.725609][ T5949] dump_stack_lvl+0x16c/0x230 [ 100.730302][ T5949] ? load_image+0x3b0/0x3b0 [ 100.734851][ T5949] ? show_regs_print_info+0x20/0x20 [ 100.740099][ T5949] ? print_circular_bug+0x12b/0x1a0 [ 100.745326][ T5949] check_noncircular+0x2bd/0x3c0 [ 100.750360][ T5949] ? look_up_lock_class+0x75/0x140 [ 100.755493][ T5949] ? print_deadlock_bug+0x5d0/0x5d0 [ 100.760712][ T5949] ? lockdep_lock+0xe0/0x220 [ 100.765313][ T5949] ? _find_first_zero_bit+0xd3/0x100 [ 100.770618][ T5949] __lock_acquire+0x2ddb/0x7c80 [ 100.775491][ T5949] ? mark_lock+0x94/0x320 [ 100.779858][ T5949] ? verify_lock_unused+0x140/0x140 [ 100.785070][ T5949] ? __lock_acquire+0x1334/0x7c80 [ 100.790163][ T5949] ? verify_lock_unused+0x140/0x140 [ 100.795388][ T5949] lock_acquire+0x197/0x410 [ 100.799917][ T5949] ? ext4_writepages+0x170/0x2f0 [ 100.804878][ T5949] ? __might_sleep+0xe0/0xe0 [ 100.809481][ T5949] ? mark_lock+0x94/0x320 [ 100.813821][ T5949] ? read_lock_is_recursive+0x20/0x20 [ 100.819202][ T5949] ? __lock_acquire+0x1334/0x7c80 [ 100.824239][ T5949] percpu_down_read+0x44/0x1a0 [ 100.829036][ T5949] ? ext4_writepages+0x170/0x2f0 [ 100.833993][ T5949] ext4_writepages+0x170/0x2f0 [ 100.838780][ T5949] ? ext4_read_folio+0x2f0/0x2f0 [ 100.843827][ T5949] ? __rwlock_init+0x150/0x150 [ 100.848600][ T5949] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 100.854504][ T5949] ? do_raw_spin_unlock+0x121/0x230 [ 100.859717][ T5949] ? ext4_read_folio+0x2f0/0x2f0 [ 100.864761][ T5949] do_writepages+0x3a2/0x600 [ 100.869379][ T5949] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 100.875129][ T5949] ? writeback_single_inode+0x206/0x720 [ 100.880690][ T5949] ? __lock_acquire+0x7c80/0x7c80 [ 100.885730][ T5949] ? do_raw_spin_lock+0x121/0x2c0 [ 100.890776][ T5949] ? get_tree_bdev+0x3e4/0x510 [ 100.895555][ T5949] __writeback_single_inode+0x153/0xee0 [ 100.901122][ T5949] writeback_single_inode+0x211/0x720 [ 100.906510][ T5949] ? write_inode_now+0x1e0/0x1e0 [ 100.911465][ T5949] write_inode_now+0x161/0x1e0 [ 100.916261][ T5949] ? bdi_split_work_to_wbs+0x890/0x890 [ 100.921740][ T5949] ? do_raw_spin_unlock+0x121/0x230 [ 100.926952][ T5949] iput+0x5b2/0x920 [ 100.930782][ T5949] ext4_xattr_block_set+0x273a/0x32a0 [ 100.936174][ T5949] ? __might_sleep+0xe0/0xe0 [ 100.940785][ T5949] ? xattr_find_entry+0x12b/0x2f0 [ 100.945824][ T5949] ? ext4_xattr_block_find+0x350/0x350 [ 100.951300][ T5949] ? ext4_xattr_block_find+0x2d4/0x350 [ 100.956775][ T5949] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 100.962785][ T5949] __ext4_expand_extra_isize+0x306/0x400 [ 100.968459][ T5949] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 100.973935][ T5949] ext4_evict_inode+0x7ed/0xea0 [ 100.978801][ T5949] ? _raw_spin_unlock+0x28/0x40 [ 100.983667][ T5949] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 100.989575][ T5949] ? do_raw_spin_unlock+0x121/0x230 [ 100.994789][ T5949] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 101.000775][ T5949] evict+0x486/0x870 [ 101.004686][ T5949] ? __lock_acquire+0x7c80/0x7c80 [ 101.009732][ T5949] ? proc_nr_inodes+0x230/0x230 [ 101.014600][ T5949] ? do_raw_spin_unlock+0x121/0x230 [ 101.019838][ T5949] ? _raw_spin_unlock+0x28/0x40 [ 101.024698][ T5949] ? iput+0x70a/0x920 [ 101.028692][ T5949] ext4_orphan_cleanup+0xbd4/0x1400 [ 101.034006][ T5949] ? ext4_orphan_del+0xba0/0xba0 [ 101.038967][ T5949] ? ext4_register_li_request+0x183/0x940 [ 101.044703][ T5949] ? errseq_check_and_advance+0x66/0x120 [ 101.050350][ T5949] ext4_fill_super+0x5de4/0x66c0 [ 101.055310][ T5949] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 101.061564][ T5949] ? __might_sleep+0xe0/0xe0 [ 101.066172][ T5949] ? read_lock_is_recursive+0x20/0x20 [ 101.071554][ T5949] ? snprintf+0xdb/0x120 [ 101.075814][ T5949] ? vscnprintf+0x80/0x80 [ 101.080160][ T5949] ? down_write+0x162/0x1f0 [ 101.084776][ T5949] ? down_read_killable+0x340/0x340 [ 101.090004][ T5949] ? setup_bdev_super+0x56b/0x660 [ 101.095058][ T5949] get_tree_bdev+0x3e4/0x510 [ 101.099686][ T5949] ? vfs_parse_fs_string+0x160/0x160 [ 101.104984][ T5949] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 101.111239][ T5949] ? setup_bdev_super+0x660/0x660 [ 101.116272][ T5949] ? apparmor_capable+0x137/0x1a0 [ 101.121308][ T5949] ? bpf_lsm_capable+0x9/0x10 [ 101.126036][ T5949] ? security_capable+0x89/0xb0 [ 101.130904][ T5949] vfs_get_tree+0x8c/0x280 [ 101.135348][ T5949] do_new_mount+0x24b/0xa40 [ 101.139863][ T5949] __se_sys_mount+0x2da/0x3c0 [ 101.144579][ T5949] ? __x64_sys_mount+0xc0/0xc0 [ 101.149357][ T5949] ? lockdep_hardirqs_on+0x98/0x150 [ 101.154565][ T5949] ? __x64_sys_mount+0x20/0xc0 [ 101.159348][ T5949] do_syscall_64+0x55/0xb0 [ 101.163788][ T5949] ? clear_bhb_loop+0x40/0x90 [ 101.168483][ T5949] ? clear_bhb_loop+0x40/0x90 [ 101.173175][ T5949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.179083][ T5949] RIP: 0033:0x7f8e97b90e6a [ 101.183521][ T5949] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.203147][ T5949] RSP: 002b:00007ffceba36e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 101.211579][ T5949] RAX: ffffffffffffffda RBX: 00007ffceba36f20 RCX: 00007f8e97b90e6a [ 101.219570][ T5949] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffceba36ee0 [ 101.227554][ T5949] RBP: 0000200000000180 R08: 00007ffceba36f20 R09: 0000000000800700 [ 101.235564][ T5949] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 101.243569][ T5949] R13: 00007ffceba36ee0 R14: 000000000000046f R15: 000000000000002c [ 101.251559][ T5949] [ 101.277078][ T5949] EXT4-fs error (device loop0): ext4_xattr_inode_iget:444: inode #11: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 101.293798][ T5949] EXT4-fs (loop0): Remounting filesystem read-only [ 101.301345][ T5949] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 101.314637][ T5949] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 101.324844][ T5949] EXT4-fs (loop0): 1 orphan inode deleted [ 101.332681][ T5949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.408802][ T5902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.