Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts. 2025/12/28 08:04:48 parsed 1 programs [ 91.290226][ T5773] cgroup: Unknown subsys name 'net' [ 91.460631][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.243685][ T9] cfg80211: failed to load regulatory.db [ 93.221456][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.612062][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.620240][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.681211][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.689103][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.652933][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 98.734557][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.751773][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.759199][ T5839] bridge_slave_0: entered allmulticast mode [ 98.767027][ T5839] bridge_slave_0: entered promiscuous mode [ 98.777269][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.785396][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.792704][ T5839] bridge_slave_1: entered allmulticast mode [ 98.799759][ T5839] bridge_slave_1: entered promiscuous mode [ 98.836642][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.850531][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.890149][ T5839] team0: Port device team_slave_0 added [ 98.899769][ T5839] team0: Port device team_slave_1 added [ 98.936160][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.944184][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.970262][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.985774][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.992925][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.018990][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.064286][ T5839] hsr_slave_0: entered promiscuous mode [ 99.071518][ T5839] hsr_slave_1: entered promiscuous mode [ 99.281548][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.293984][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.307036][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.329960][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.452889][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.475200][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.488178][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.495654][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.526480][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.533666][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.780147][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.840233][ T5839] veth0_vlan: entered promiscuous mode [ 99.853838][ T5839] veth1_vlan: entered promiscuous mode [ 99.893522][ T5839] veth0_macvtap: entered promiscuous mode [ 99.905376][ T5839] veth1_macvtap: entered promiscuous mode [ 99.928422][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.959428][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.974359][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.984720][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.994657][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.003706][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.179784][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.354980][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.364335][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.373449][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.382939][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.391109][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.399212][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/12/28 08:05:00 executed programs: 0 [ 101.038405][ T5079] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.050828][ T5079] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.058856][ T5079] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.068713][ T5079] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.078185][ T5079] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.085978][ T5079] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.265448][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 101.342420][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.349656][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.356947][ T5877] bridge_slave_0: entered allmulticast mode [ 101.365332][ T5877] bridge_slave_0: entered promiscuous mode [ 101.376377][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.383770][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.390978][ T5877] bridge_slave_1: entered allmulticast mode [ 101.398944][ T5877] bridge_slave_1: entered promiscuous mode [ 101.437376][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.450151][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.491878][ T5877] team0: Port device team_slave_0 added [ 101.500026][ T5877] team0: Port device team_slave_1 added [ 101.529547][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.537073][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.563671][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.577862][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.585022][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.612833][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.658789][ T5877] hsr_slave_0: entered promiscuous mode [ 101.666245][ T5877] hsr_slave_1: entered promiscuous mode [ 101.672843][ T5877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.680797][ T5877] Cannot create hsr debugfs directory [ 102.546005][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.122179][ T5079] Bluetooth: hci0: command tx timeout [ 105.075446][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.156621][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.201609][ T5079] Bluetooth: hci0: command tx timeout [ 106.108687][ T35] hsr_slave_0: left promiscuous mode [ 106.115761][ T35] hsr_slave_1: left promiscuous mode [ 106.122602][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.130330][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.142005][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.149471][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.159170][ T35] bridge_slave_1: left allmulticast mode [ 106.165324][ T35] bridge_slave_1: left promiscuous mode [ 106.172494][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.185810][ T35] bridge_slave_0: left allmulticast mode [ 106.192824][ T35] bridge_slave_0: left promiscuous mode [ 106.199329][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.236352][ T35] veth1_macvtap: left promiscuous mode [ 106.245141][ T35] veth0_macvtap: left promiscuous mode [ 106.253487][ T35] veth1_vlan: left promiscuous mode [ 106.259118][ T35] veth0_vlan: left promiscuous mode [ 106.737269][ T35] team0 (unregistering): Port device team_slave_1 removed [ 106.773217][ T35] team0 (unregistering): Port device team_slave_0 removed [ 106.808483][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.846842][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.189257][ T35] bond0 (unregistering): Released all slaves [ 107.263003][ T5877] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.273870][ T5877] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.281361][ T5079] Bluetooth: hci0: command tx timeout [ 107.290890][ T5877] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.304781][ T5877] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.414194][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.444504][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.465486][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.472708][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.497262][ T1297] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.504492][ T1297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.765567][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.808069][ T5877] veth0_vlan: entered promiscuous mode [ 107.822873][ T5877] veth1_vlan: entered promiscuous mode [ 107.863483][ T5877] veth0_macvtap: entered promiscuous mode [ 107.888848][ T5877] veth1_macvtap: entered promiscuous mode [ 107.920946][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.936442][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.948247][ T5877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.960224][ T5877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.969154][ T5877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.978016][ T5877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.071535][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.080008][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.123489][ T1297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.131848][ T1297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.180289][ T5928] syz.0.17[5928]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 108.200432][ T5928] loop0: detected capacity change from 0 to 512 [ 108.232285][ T5928] [ 108.234706][ T5928] ====================================================== [ 108.241764][ T5928] WARNING: possible circular locking dependency detected [ 108.248822][ T5928] syzkaller #0 Not tainted [ 108.253268][ T5928] ------------------------------------------------------ [ 108.260428][ T5928] syz.0.17/5928 is trying to acquire lock: [ 108.266259][ T5928] ffff88807b49abd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2f0 [ 108.276358][ T5928] [ 108.276358][ T5928] but task is already holding lock: [ 108.283847][ T5928] ffff888060931ec8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 108.293748][ T5928] [ 108.293748][ T5928] which lock already depends on the new lock. [ 108.293748][ T5928] [ 108.304194][ T5928] [ 108.304194][ T5928] the existing dependency chain (in reverse order) is: [ 108.313275][ T5928] [ 108.313275][ T5928] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 108.320893][ T5928] down_read+0x46/0x2e0 [ 108.325617][ T5928] ext4_setattr+0x86b/0x1c90 [ 108.330773][ T5928] notify_change+0xb0d/0xe10 [ 108.335930][ T5928] chown_common+0x3f9/0x5a0 [ 108.341056][ T5928] do_fchownat+0x168/0x270 [ 108.346033][ T5928] __x64_sys_chown+0x82/0x90 [ 108.351212][ T5928] do_syscall_64+0x55/0xb0 [ 108.356195][ T5928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.362661][ T5928] [ 108.362661][ T5928] -> #1 (jbd2_handle){.+.+}-{0:0}: [ 108.370234][ T5928] start_this_handle+0x1e9d/0x20c0 [ 108.375873][ T5928] jbd2__journal_start+0x2bb/0x5b0 [ 108.381509][ T5928] __ext4_journal_start_sb+0x203/0x570 [ 108.387502][ T5928] ext4_do_writepages+0xf92/0x38d0 [ 108.393161][ T5928] ext4_writepages+0x1a8/0x2f0 [ 108.398516][ T5928] do_writepages+0x3a2/0x600 [ 108.403658][ T5928] __writeback_single_inode+0x153/0xee0 [ 108.409764][ T5928] writeback_sb_inodes+0x77c/0xef0 [ 108.415428][ T5928] __writeback_inodes_wb+0x111/0x240 [ 108.421246][ T5928] wb_writeback+0x464/0xba0 [ 108.426277][ T5928] wb_workfn+0xb32/0xe20 [ 108.431076][ T5928] process_scheduled_works+0xa45/0x15b0 [ 108.437167][ T5928] worker_thread+0xa55/0xfc0 [ 108.442401][ T5928] kthread+0x2fa/0x390 [ 108.447027][ T5928] ret_from_fork+0x48/0x80 [ 108.451997][ T5928] ret_from_fork_asm+0x11/0x20 [ 108.457292][ T5928] [ 108.457292][ T5928] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 108.465809][ T5928] __lock_acquire+0x2ddb/0x7c80 [ 108.471189][ T5928] lock_acquire+0x197/0x410 [ 108.476213][ T5928] percpu_down_read+0x44/0x1a0 [ 108.481518][ T5928] ext4_writepages+0x170/0x2f0 [ 108.486816][ T5928] do_writepages+0x3a2/0x600 [ 108.491950][ T5928] __writeback_single_inode+0x153/0xee0 [ 108.498066][ T5928] writeback_single_inode+0x211/0x720 [ 108.504168][ T5928] write_inode_now+0x161/0x1e0 [ 108.509488][ T5928] iput+0x5b2/0x920 [ 108.513844][ T5928] ext4_xattr_block_set+0x273a/0x32a0 [ 108.519769][ T5928] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 108.526213][ T5928] __ext4_expand_extra_isize+0x306/0x400 [ 108.532404][ T5928] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 108.538407][ T5928] ext4_evict_inode+0x7ed/0xea0 [ 108.543799][ T5928] evict+0x486/0x870 [ 108.548319][ T5928] ext4_orphan_cleanup+0xbd4/0x1400 [ 108.554064][ T5928] ext4_fill_super+0x5de4/0x66c0 [ 108.559537][ T5928] get_tree_bdev+0x3e4/0x510 [ 108.564666][ T5928] vfs_get_tree+0x8c/0x280 [ 108.569625][ T5928] do_new_mount+0x24b/0xa40 [ 108.574675][ T5928] __se_sys_mount+0x2da/0x3c0 [ 108.579890][ T5928] do_syscall_64+0x55/0xb0 [ 108.584856][ T5928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.591388][ T5928] [ 108.591388][ T5928] other info that might help us debug this: [ 108.591388][ T5928] [ 108.601640][ T5928] Chain exists of: [ 108.601640][ T5928] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 108.601640][ T5928] [ 108.615051][ T5928] Possible unsafe locking scenario: [ 108.615051][ T5928] [ 108.622516][ T5928] CPU0 CPU1 [ 108.627901][ T5928] ---- ---- [ 108.633280][ T5928] lock(&ei->xattr_sem); [ 108.637643][ T5928] lock(jbd2_handle); [ 108.644517][ T5928] lock(&ei->xattr_sem); [ 108.651398][ T5928] rlock(&sbi->s_writepages_rwsem); [ 108.656704][ T5928] [ 108.656704][ T5928] *** DEADLOCK *** [ 108.656704][ T5928] [ 108.664890][ T5928] 3 locks held by syz.0.17/5928: [ 108.669842][ T5928] #0: ffff88807b4980e0 (&type->s_umount_key#32){++++}-{3:3}, at: get_tree_bdev+0x344/0x510 [ 108.679973][ T5928] #1: ffff88807b498608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0 [ 108.689399][ T5928] #2: ffff888060931ec8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 108.699698][ T5928] [ 108.699698][ T5928] stack backtrace: [ 108.705619][ T5928] CPU: 1 PID: 5928 Comm: syz.0.17 Not tainted syzkaller #0 [ 108.712858][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.722947][ T5928] Call Trace: [ 108.726245][ T5928] [ 108.729295][ T5928] dump_stack_lvl+0x16c/0x230 [ 108.734008][ T5928] ? load_image+0x3b0/0x3b0 [ 108.738531][ T5928] ? show_regs_print_info+0x20/0x20 [ 108.743764][ T5928] ? print_circular_bug+0x12b/0x1a0 [ 108.748991][ T5928] check_noncircular+0x2bd/0x3c0 [ 108.753954][ T5928] ? look_up_lock_class+0x75/0x140 [ 108.759097][ T5928] ? print_deadlock_bug+0x5d0/0x5d0 [ 108.764318][ T5928] ? lockdep_lock+0xe0/0x220 [ 108.768930][ T5928] ? _find_first_zero_bit+0xd3/0x100 [ 108.774242][ T5928] __lock_acquire+0x2ddb/0x7c80 [ 108.779147][ T5928] ? mark_lock+0x94/0x320 [ 108.783512][ T5928] ? verify_lock_unused+0x140/0x140 [ 108.788755][ T5928] ? __lock_acquire+0x1334/0x7c80 [ 108.793802][ T5928] ? verify_lock_unused+0x140/0x140 [ 108.799033][ T5928] lock_acquire+0x197/0x410 [ 108.803558][ T5928] ? ext4_writepages+0x170/0x2f0 [ 108.808785][ T5928] ? __might_sleep+0xe0/0xe0 [ 108.813403][ T5928] ? mark_lock+0x94/0x320 [ 108.817791][ T5928] ? read_lock_is_recursive+0x20/0x20 [ 108.823482][ T5928] ? __lock_acquire+0x1334/0x7c80 [ 108.828536][ T5928] percpu_down_read+0x44/0x1a0 [ 108.833359][ T5928] ? ext4_writepages+0x170/0x2f0 [ 108.838327][ T5928] ext4_writepages+0x170/0x2f0 [ 108.843125][ T5928] ? ext4_read_folio+0x2f0/0x2f0 [ 108.848093][ T5928] ? __rwlock_init+0x150/0x150 [ 108.852877][ T5928] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 108.858793][ T5928] ? do_raw_spin_unlock+0x121/0x230 [ 108.864021][ T5928] ? ext4_read_folio+0x2f0/0x2f0 [ 108.869009][ T5928] do_writepages+0x3a2/0x600 [ 108.873638][ T5928] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 108.879389][ T5928] ? writeback_single_inode+0x206/0x720 [ 108.884978][ T5928] ? __lock_acquire+0x7c80/0x7c80 [ 108.890114][ T5928] ? do_raw_spin_lock+0x121/0x2c0 [ 108.895349][ T5928] ? get_tree_bdev+0x3e4/0x510 [ 108.900142][ T5928] __writeback_single_inode+0x153/0xee0 [ 108.905717][ T5928] writeback_single_inode+0x211/0x720 [ 108.911120][ T5928] ? write_inode_now+0x1e0/0x1e0 [ 108.916097][ T5928] write_inode_now+0x161/0x1e0 [ 108.920895][ T5928] ? bdi_split_work_to_wbs+0x890/0x890 [ 108.926392][ T5928] ? do_raw_spin_unlock+0x121/0x230 [ 108.931618][ T5928] iput+0x5b2/0x920 [ 108.935454][ T5928] ext4_xattr_block_set+0x273a/0x32a0 [ 108.940858][ T5928] ? __might_sleep+0xe0/0xe0 [ 108.945485][ T5928] ? xattr_find_entry+0x12b/0x2f0 [ 108.950537][ T5928] ? ext4_xattr_block_find+0x350/0x350 [ 108.956024][ T5928] ? ext4_xattr_block_find+0x2d4/0x350 [ 108.961801][ T5928] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 108.967741][ T5928] __ext4_expand_extra_isize+0x306/0x400 [ 108.973418][ T5928] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 108.978915][ T5928] ext4_evict_inode+0x7ed/0xea0 [ 108.983801][ T5928] ? _raw_spin_unlock+0x28/0x40 [ 108.988679][ T5928] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 108.994776][ T5928] ? do_raw_spin_unlock+0x121/0x230 [ 109.000004][ T5928] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 109.005920][ T5928] evict+0x486/0x870 [ 109.010013][ T5928] ? __lock_acquire+0x7c80/0x7c80 [ 109.015063][ T5928] ? proc_nr_inodes+0x230/0x230 [ 109.019936][ T5928] ? do_raw_spin_unlock+0x121/0x230 [ 109.025165][ T5928] ? _raw_spin_unlock+0x28/0x40 [ 109.030040][ T5928] ? iput+0x70a/0x920 [ 109.034049][ T5928] ext4_orphan_cleanup+0xbd4/0x1400 [ 109.039286][ T5928] ? ext4_orphan_del+0xba0/0xba0 [ 109.044777][ T5928] ? ext4_register_li_request+0x183/0x940 [ 109.050522][ T5928] ? errseq_check_and_advance+0x66/0x120 [ 109.056276][ T5928] ext4_fill_super+0x5de4/0x66c0 [ 109.061268][ T5928] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 109.067533][ T5928] ? __might_sleep+0xe0/0xe0 [ 109.072150][ T5928] ? read_lock_is_recursive+0x20/0x20 [ 109.077548][ T5928] ? snprintf+0xdb/0x120 [ 109.081956][ T5928] ? vscnprintf+0x80/0x80 [ 109.086318][ T5928] ? down_write+0x162/0x1f0 [ 109.090846][ T5928] ? down_read_killable+0x340/0x340 [ 109.096072][ T5928] ? setup_bdev_super+0x56b/0x660 [ 109.101122][ T5928] get_tree_bdev+0x3e4/0x510 [ 109.105734][ T5928] ? vfs_parse_fs_string+0x160/0x160 [ 109.111051][ T5928] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 109.117324][ T5928] ? setup_bdev_super+0x660/0x660 [ 109.122379][ T5928] ? apparmor_capable+0x137/0x1a0 [ 109.127517][ T5928] ? bpf_lsm_capable+0x9/0x10 [ 109.132222][ T5928] ? security_capable+0x89/0xb0 [ 109.137185][ T5928] vfs_get_tree+0x8c/0x280 [ 109.141636][ T5928] do_new_mount+0x24b/0xa40 [ 109.146194][ T5928] __se_sys_mount+0x2da/0x3c0 [ 109.151075][ T5928] ? __x64_sys_mount+0xc0/0xc0 [ 109.155870][ T5928] ? lockdep_hardirqs_on+0x98/0x150 [ 109.161094][ T5928] ? __x64_sys_mount+0x20/0xc0 [ 109.165882][ T5928] do_syscall_64+0x55/0xb0 [ 109.170417][ T5928] ? clear_bhb_loop+0x40/0x90 [ 109.175124][ T5928] ? clear_bhb_loop+0x40/0x90 [ 109.179832][ T5928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.185758][ T5928] RIP: 0033:0x7f4984790eea [ 109.190205][ T5928] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.209861][ T5928] RSP: 002b:00007ffdf8e90f78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.218297][ T5928] RAX: ffffffffffffffda RBX: 00007ffdf8e91000 RCX: 00007f4984790eea [ 109.226295][ T5928] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffdf8e90fc0 [ 109.234291][ T5928] RBP: 0000200000000180 R08: 00007ffdf8e91000 R09: 0000000000800700 [ 109.242303][ T5928] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 109.250306][ T5928] R13: 00007ffdf8e90fc0 R14: 000000000000046f R15: 000000000000002c [ 109.258320][ T5928] [ 109.283146][ T5928] EXT4-fs error (device loop0): ext4_xattr_inode_iget:444: inode #11: comm syz.0.17: iget: bad extra_isize 90 (inode size 256) [ 109.305221][ T5928] EXT4-fs (loop0): Remounting filesystem read-only [ 109.312369][ T5928] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 109.331165][ T5928] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 109.344115][ T5928] EXT4-fs (loop0): 1 orphan inode deleted [ 109.351137][ T5928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.363506][ T5079] Bluetooth: hci0: command tx timeout [ 109.385076][ T5877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.