Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. 2026/01/07 23:36:58 parsed 1 programs syzkaller login: [ 69.029622][ T5768] cgroup: Unknown subsys name 'net' [ 69.195506][ T5768] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.649398][ T5768] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.641669][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.648191][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.798114][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.806134][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.814021][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.822041][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.833024][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.841003][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.539752][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 74.593718][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.601535][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.608685][ T5832] bridge_slave_0: entered allmulticast mode [ 74.615787][ T5832] bridge_slave_0: entered promiscuous mode [ 74.625930][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.633452][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.640684][ T5832] bridge_slave_1: entered allmulticast mode [ 74.647334][ T5832] bridge_slave_1: entered promiscuous mode [ 74.680500][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.692397][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.717927][ T5832] team0: Port device team_slave_0 added [ 74.736530][ T5832] team0: Port device team_slave_1 added [ 74.758624][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.765710][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.791667][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.804842][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.811867][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.839756][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.884546][ T5832] hsr_slave_0: entered promiscuous mode [ 74.892293][ T5832] hsr_slave_1: entered promiscuous mode [ 75.025718][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.037094][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.056596][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.066331][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.094327][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.101616][ T5832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.109759][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.116919][ T5832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.178353][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.206750][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.215551][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.233740][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.256557][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.263830][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.276014][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.283170][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.488233][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.525269][ T5832] veth0_vlan: entered promiscuous mode [ 75.536789][ T5832] veth1_vlan: entered promiscuous mode [ 75.566204][ T5832] veth0_macvtap: entered promiscuous mode [ 75.575938][ T5832] veth1_macvtap: entered promiscuous mode [ 75.593618][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.607113][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.618636][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.628042][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.637117][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.649023][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.763303][ T1127] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.462573][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.472103][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.498024][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.507029][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/07 23:37:08 executed programs: 0 [ 77.013745][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.021898][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.033480][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.042741][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.052283][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.059852][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.271650][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 77.338465][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.346440][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.353917][ T5877] bridge_slave_0: entered allmulticast mode [ 77.361303][ T5877] bridge_slave_0: entered promiscuous mode [ 77.371415][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.378666][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.385902][ T5877] bridge_slave_1: entered allmulticast mode [ 77.393558][ T5877] bridge_slave_1: entered promiscuous mode [ 77.423342][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.436188][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.464725][ T5877] team0: Port device team_slave_0 added [ 77.473777][ T5877] team0: Port device team_slave_1 added [ 77.502999][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.510129][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.536423][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.552763][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.559951][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.586658][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.626237][ T5877] hsr_slave_0: entered promiscuous mode [ 77.632904][ T5877] hsr_slave_1: entered promiscuous mode [ 77.639471][ T5877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.648312][ T5877] Cannot create hsr debugfs directory [ 78.471129][ T1127] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.080083][ T51] Bluetooth: hci0: command tx timeout [ 80.589801][ T1127] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.633643][ T1127] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.161379][ T51] Bluetooth: hci0: command tx timeout [ 81.515778][ T5877] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.534665][ T5877] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.545441][ T5877] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.555642][ T5877] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.572767][ T1127] hsr_slave_0: left promiscuous mode [ 81.580685][ T1127] hsr_slave_1: left promiscuous mode [ 81.586576][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.594194][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.603823][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.611372][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.619166][ T1127] bridge_slave_1: left allmulticast mode [ 81.624831][ T1127] bridge_slave_1: left promiscuous mode [ 81.631454][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.643200][ T1127] bridge_slave_0: left allmulticast mode [ 81.648858][ T1127] bridge_slave_0: left promiscuous mode [ 81.654618][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.673882][ T1127] veth1_macvtap: left promiscuous mode [ 81.679845][ T1127] veth0_macvtap: left promiscuous mode [ 81.685968][ T1127] veth1_vlan: left promiscuous mode [ 81.691651][ T1127] veth0_vlan: left promiscuous mode [ 81.884093][ T9] cfg80211: failed to load regulatory.db [ 82.051246][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 82.080871][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 82.108816][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.144323][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.435425][ T1127] bond0 (unregistering): Released all slaves [ 82.596692][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.622596][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.637966][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.645137][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.658705][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.665883][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.864719][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.906843][ T5877] veth0_vlan: entered promiscuous mode [ 82.917876][ T5877] veth1_vlan: entered promiscuous mode [ 82.948240][ T5877] veth0_macvtap: entered promiscuous mode [ 82.956988][ T5877] veth1_macvtap: entered promiscuous mode [ 82.976166][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.992392][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.015105][ T5877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.025266][ T5877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.034108][ T5877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.042950][ T5877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.162590][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.171865][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.195381][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.203588][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.240105][ T51] Bluetooth: hci0: command tx timeout [ 83.256445][ T5927] syz.0.17[5927]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.271714][ T5927] loop0: detected capacity change from 0 to 512 [ 83.301518][ T5927] [ 83.304023][ T5927] ====================================================== [ 83.311047][ T5927] WARNING: possible circular locking dependency detected [ 83.318088][ T5927] syzkaller #0 Not tainted [ 83.322508][ T5927] ------------------------------------------------------ [ 83.329533][ T5927] syz.0.17/5927 is trying to acquire lock: [ 83.335344][ T5927] ffff8880773c0bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0 [ 83.345387][ T5927] [ 83.345387][ T5927] but task is already holding lock: [ 83.352749][ T5927] ffff888073a4e4c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 83.362931][ T5927] [ 83.362931][ T5927] which lock already depends on the new lock. [ 83.362931][ T5927] [ 83.373331][ T5927] [ 83.373331][ T5927] the existing dependency chain (in reverse order) is: [ 83.382335][ T5927] [ 83.382335][ T5927] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 83.389875][ T5927] down_read+0x46/0x2e0 [ 83.394543][ T5927] ext4_setattr+0x86b/0x1c90 [ 83.399653][ T5927] notify_change+0xb0d/0xe10 [ 83.404762][ T5927] chown_common+0x3f9/0x5a0 [ 83.409790][ T5927] do_fchownat+0x168/0x270 [ 83.414743][ T5927] __x64_sys_chown+0x82/0x90 [ 83.419845][ T5927] do_syscall_64+0x55/0xb0 [ 83.424764][ T5927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.431163][ T5927] [ 83.431163][ T5927] -> #1 (jbd2_handle){++++}-{0:0}: [ 83.438441][ T5927] start_this_handle+0x1e9d/0x20c0 [ 83.444059][ T5927] jbd2__journal_start+0x2bb/0x5b0 [ 83.449672][ T5927] __ext4_journal_start_sb+0x203/0x570 [ 83.455674][ T5927] ext4_do_writepages+0xf92/0x38d0 [ 83.461297][ T5927] ext4_writepages+0x1a8/0x2f0 [ 83.466571][ T5927] do_writepages+0x3a2/0x600 [ 83.471682][ T5927] filemap_fdatawrite_wbc+0x122/0x180 [ 83.477574][ T5927] file_write_and_wait_range+0x171/0x240 [ 83.483731][ T5927] ext4_sync_file+0x281/0xc10 [ 83.488942][ T5927] __x64_sys_fsync+0x195/0x1d0 [ 83.494221][ T5927] do_syscall_64+0x55/0xb0 [ 83.499140][ T5927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.505542][ T5927] [ 83.505542][ T5927] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 83.513975][ T5927] __lock_acquire+0x2ddb/0x7c80 [ 83.519333][ T5927] lock_acquire+0x197/0x410 [ 83.524338][ T5927] percpu_down_read+0x44/0x1a0 [ 83.529604][ T5927] ext4_writepages+0x170/0x2f0 [ 83.534874][ T5927] do_writepages+0x3a2/0x600 [ 83.539983][ T5927] __writeback_single_inode+0x153/0xee0 [ 83.546046][ T5927] writeback_single_inode+0x211/0x720 [ 83.552021][ T5927] write_inode_now+0x161/0x1e0 [ 83.557293][ T5927] iput+0x5b2/0x920 [ 83.561615][ T5927] ext4_xattr_block_set+0x273a/0x32a0 [ 83.567505][ T5927] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 83.574032][ T5927] __ext4_expand_extra_isize+0x306/0x400 [ 83.580176][ T5927] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 83.586150][ T5927] ext4_evict_inode+0x7ed/0xea0 [ 83.591521][ T5927] evict+0x486/0x870 [ 83.595928][ T5927] ext4_orphan_cleanup+0xbd4/0x1400 [ 83.601637][ T5927] ext4_fill_super+0x5de4/0x66c0 [ 83.607111][ T5927] get_tree_bdev+0x3e4/0x510 [ 83.612210][ T5927] vfs_get_tree+0x8c/0x280 [ 83.617136][ T5927] do_new_mount+0x24b/0xa40 [ 83.622145][ T5927] __se_sys_mount+0x2da/0x3c0 [ 83.627326][ T5927] do_syscall_64+0x55/0xb0 [ 83.632252][ T5927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.638674][ T5927] [ 83.638674][ T5927] other info that might help us debug this: [ 83.638674][ T5927] [ 83.648899][ T5927] Chain exists of: [ 83.648899][ T5927] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 83.648899][ T5927] [ 83.662282][ T5927] Possible unsafe locking scenario: [ 83.662282][ T5927] [ 83.669723][ T5927] CPU0 CPU1 [ 83.675076][ T5927] ---- ---- [ 83.680513][ T5927] lock(&ei->xattr_sem); [ 83.684831][ T5927] lock(jbd2_handle); [ 83.691408][ T5927] lock(&ei->xattr_sem); [ 83.698245][ T5927] rlock(&sbi->s_writepages_rwsem); [ 83.703519][ T5927] [ 83.703519][ T5927] *** DEADLOCK *** [ 83.703519][ T5927] [ 83.711669][ T5927] 3 locks held by syz.0.17/5927: [ 83.716602][ T5927] #0: ffff8880773de0e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x344/0x510 [ 83.726697][ T5927] #1: ffff8880773de608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0 [ 83.736093][ T5927] #2: ffff888073a4e4c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 83.746355][ T5927] [ 83.746355][ T5927] stack backtrace: [ 83.752242][ T5927] CPU: 0 PID: 5927 Comm: syz.0.17 Not tainted syzkaller #0 [ 83.759427][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.769481][ T5927] Call Trace: [ 83.772756][ T5927] [ 83.775682][ T5927] dump_stack_lvl+0x16c/0x230 [ 83.780356][ T5927] ? load_image+0x3b0/0x3b0 [ 83.784849][ T5927] ? show_regs_print_info+0x20/0x20 [ 83.790043][ T5927] ? print_circular_bug+0x12b/0x1a0 [ 83.795237][ T5927] check_noncircular+0x2bd/0x3c0 [ 83.800165][ T5927] ? look_up_lock_class+0x75/0x140 [ 83.805266][ T5927] ? print_deadlock_bug+0x5d0/0x5d0 [ 83.810454][ T5927] ? lockdep_lock+0xe0/0x220 [ 83.815035][ T5927] ? _find_first_zero_bit+0xd3/0x100 [ 83.820319][ T5927] __lock_acquire+0x2ddb/0x7c80 [ 83.825162][ T5927] ? mark_lock+0x94/0x320 [ 83.829480][ T5927] ? verify_lock_unused+0x140/0x140 [ 83.834671][ T5927] ? __lock_acquire+0x1334/0x7c80 [ 83.839687][ T5927] ? verify_lock_unused+0x140/0x140 [ 83.844875][ T5927] lock_acquire+0x197/0x410 [ 83.849366][ T5927] ? ext4_writepages+0x170/0x2f0 [ 83.854296][ T5927] ? __might_sleep+0xe0/0xe0 [ 83.858882][ T5927] ? mark_lock+0x94/0x320 [ 83.863209][ T5927] ? read_lock_is_recursive+0x20/0x20 [ 83.868572][ T5927] ? __lock_acquire+0x1334/0x7c80 [ 83.873588][ T5927] percpu_down_read+0x44/0x1a0 [ 83.878344][ T5927] ? ext4_writepages+0x170/0x2f0 [ 83.883274][ T5927] ext4_writepages+0x170/0x2f0 [ 83.888034][ T5927] ? ext4_read_folio+0x2f0/0x2f0 [ 83.892977][ T5927] ? __rwlock_init+0x150/0x150 [ 83.897732][ T5927] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 83.903658][ T5927] ? do_raw_spin_unlock+0x121/0x230 [ 83.908862][ T5927] ? ext4_read_folio+0x2f0/0x2f0 [ 83.913812][ T5927] do_writepages+0x3a2/0x600 [ 83.918401][ T5927] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 83.924113][ T5927] ? writeback_single_inode+0x206/0x720 [ 83.929653][ T5927] ? __lock_acquire+0x7c80/0x7c80 [ 83.934677][ T5927] ? do_raw_spin_lock+0x121/0x2c0 [ 83.939694][ T5927] ? get_tree_bdev+0x3e4/0x510 [ 83.944457][ T5927] __writeback_single_inode+0x153/0xee0 [ 83.950085][ T5927] writeback_single_inode+0x211/0x720 [ 83.955452][ T5927] ? write_inode_now+0x1e0/0x1e0 [ 83.960385][ T5927] write_inode_now+0x161/0x1e0 [ 83.965140][ T5927] ? bdi_split_work_to_wbs+0x890/0x890 [ 83.970594][ T5927] ? do_raw_spin_unlock+0x121/0x230 [ 83.975836][ T5927] iput+0x5b2/0x920 [ 83.979640][ T5927] ext4_xattr_block_set+0x273a/0x32a0 [ 83.985008][ T5927] ? __might_sleep+0xe0/0xe0 [ 83.989597][ T5927] ? xattr_find_entry+0x12b/0x2f0 [ 83.994617][ T5927] ? ext4_xattr_block_find+0x350/0x350 [ 84.000068][ T5927] ? ext4_xattr_block_find+0x2d4/0x350 [ 84.005522][ T5927] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 84.011432][ T5927] __ext4_expand_extra_isize+0x306/0x400 [ 84.017061][ T5927] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 84.022517][ T5927] ext4_evict_inode+0x7ed/0xea0 [ 84.027445][ T5927] ? _raw_spin_unlock+0x28/0x40 [ 84.032295][ T5927] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 84.038270][ T5927] ? do_raw_spin_unlock+0x121/0x230 [ 84.043459][ T5927] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 84.049353][ T5927] evict+0x486/0x870 [ 84.053258][ T5927] ? __lock_acquire+0x7c80/0x7c80 [ 84.058282][ T5927] ? proc_nr_inodes+0x230/0x230 [ 84.063126][ T5927] ? do_raw_spin_unlock+0x121/0x230 [ 84.068317][ T5927] ? _raw_spin_unlock+0x28/0x40 [ 84.073180][ T5927] ? iput+0x70a/0x920 [ 84.077162][ T5927] ext4_orphan_cleanup+0xbd4/0x1400 [ 84.082367][ T5927] ? ext4_orphan_del+0xba0/0xba0 [ 84.087303][ T5927] ? ext4_register_li_request+0x183/0x940 [ 84.093016][ T5927] ? errseq_check_and_advance+0x66/0x120 [ 84.098646][ T5927] ext4_fill_super+0x5de4/0x66c0 [ 84.103592][ T5927] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 84.109829][ T5927] ? __might_sleep+0xe0/0xe0 [ 84.114411][ T5927] ? read_lock_is_recursive+0x20/0x20 [ 84.119781][ T5927] ? snprintf+0xdb/0x120 [ 84.124019][ T5927] ? vscnprintf+0x80/0x80 [ 84.128336][ T5927] ? down_write+0x162/0x1f0 [ 84.132830][ T5927] ? down_read_killable+0x340/0x340 [ 84.138019][ T5927] ? setup_bdev_super+0x56b/0x660 [ 84.143036][ T5927] get_tree_bdev+0x3e4/0x510 [ 84.147629][ T5927] ? vfs_parse_fs_string+0x160/0x160 [ 84.152909][ T5927] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 84.159143][ T5927] ? setup_bdev_super+0x660/0x660 [ 84.164155][ T5927] ? apparmor_capable+0x137/0x1a0 [ 84.169171][ T5927] ? bpf_lsm_capable+0x9/0x10 [ 84.173839][ T5927] ? security_capable+0x89/0xb0 [ 84.178687][ T5927] vfs_get_tree+0x8c/0x280 [ 84.183103][ T5927] do_new_mount+0x24b/0xa40 [ 84.187595][ T5927] __se_sys_mount+0x2da/0x3c0 [ 84.192262][ T5927] ? __x64_sys_mount+0xc0/0xc0 [ 84.197099][ T5927] ? lockdep_hardirqs_on+0x98/0x150 [ 84.202285][ T5927] ? __x64_sys_mount+0x20/0xc0 [ 84.207035][ T5927] do_syscall_64+0x55/0xb0 [ 84.211436][ T5927] ? clear_bhb_loop+0x40/0x90 [ 84.216108][ T5927] ? clear_bhb_loop+0x40/0x90 [ 84.220775][ T5927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.226660][ T5927] RIP: 0033:0x7f25b8790eea [ 84.231088][ T5927] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.250691][ T5927] RSP: 002b:00007fff9367b198 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.259097][ T5927] RAX: ffffffffffffffda RBX: 00007fff9367b220 RCX: 00007f25b8790eea [ 84.267057][ T5927] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fff9367b1e0 [ 84.275017][ T5927] RBP: 0000200000000180 R08: 00007fff9367b220 R09: 0000000000800700 [ 84.282977][ T5927] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 84.290938][ T5927] R13: 00007fff9367b1e0 R14: 000000000000046f R15: 000000000000002c [ 84.298911][ T5927] [ 84.310716][ T5927] EXT4-fs error (device loop0): ext4_xattr_inode_iget:444: inode #11: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 84.334190][ T5927] EXT4-fs (loop0): Remounting filesystem read-only [ 84.348257][ T5927] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 84.361832][ T5927] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 84.372627][ T5927] EXT4-fs (loop0): 1 orphan inode deleted [ 84.380108][ T5927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.436886][ T5877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.