program: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1f, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47b, &(0x7f0000000b40)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) socket$inet6(0xa, 0x3, 0xff) r0 = fanotify_init(0x40, 0x40000) readv(r0, &(0x7f0000002240)=[{&(0x7f0000002280)=""/149, 0x95}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002340)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents64(r1, 0x0, 0x0) [ 102.037985][ T4646] Bluetooth: hci0: command tx timeout [ 102.156313][ T5322] loop0: detected capacity change from 0 to 512 [ 102.276660][ T5322] EXT4-fs (loop0): orphan cleanup on readonly fs [ 102.278560][ T5322] EXT4-fs error (device loop0): ext4_xattr_inode_iget:473: comm syz.0.0: EA inode 11 has unexpected i_nlink=0 ref_count=0 [ 102.278638][ T5322] loop0: lost filesystem error report for type 5 error -117 [ 102.283178][ T5322] EXT4-fs (loop0): 1 orphan inode deleted [ 102.298211][ T10] ------------[ cut here ]------------ [ 102.298222][ T10] sb_rdonly(sb) [ 102.298236][ T10] WARNING: fs/ext4/ext4_jbd2.c:83 at ext4_journal_check_start+0x24f/0x2b0, CPU#0: kworker/0:1/10 [ 102.325449][ T10] Modules linked in: [ 102.328137][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 102.332224][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.337147][ T10] Workqueue: events ext4_ea_inode_work [ 102.339515][ T10] RIP: 0010:ext4_journal_check_start+0x24f/0x2b0 [ 102.342361][ T10] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c6 89 3b ff 41 bf fb ff ff ff eb e0 e8 b9 89 3b ff eb d3 e8 b2 89 3b ff 90 <0f> 0b 90 eb c8 e8 a7 89 3b ff 90 0f 0b 90 43 80 7c 25 00 00 0f 85 [ 102.350486][ T10] RSP: 0018:ffffc9000023f878 EFLAGS: 00010293 [ 102.353158][ T10] RAX: ffffffff828c97ce RBX: ffff888013bb2000 RCX: ffff88801c732580 [ 102.356965][ T10] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 102.360428][ T10] RBP: 0000000000000001 R08: ffff888013bb440f R09: 1ffff11002776881 [ 102.363909][ T10] R10: dffffc0000000000 R11: ffffed1002776882 R12: dffffc0000000000 [ 102.367820][ T10] R13: 1ffff110027764cf R14: ffff888013bb2678 R15: 0000000000000001 [ 102.372126][ T10] FS: 0000000000000000(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000 [ 102.376834][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.379833][ T10] CR2: 00007f336cc4e7ec CR3: 0000000051672000 CR4: 0000000000352ef0 [ 102.383255][ T10] Call Trace: [ 102.384933][ T10] [ 102.386240][ T10] __ext4_journal_start_sb+0x14b/0x780 [ 102.388709][ T10] ext4_evict_inode+0x749/0xfe0 [ 102.390942][ T10] ? __pfx_ext4_evict_inode+0x10/0x10 [ 102.393335][ T10] evict+0x624/0xb50 [ 102.396609][ T10] ? __pfx_evict+0x10/0x10 [ 102.398648][ T10] ? do_raw_spin_unlock+0x4d/0x200 [ 102.400969][ T10] ? _raw_spin_unlock+0x28/0x50 [ 102.403261][ T10] ? iput+0xb84/0xf00 [ 102.405207][ T10] ? process_scheduled_works+0x97a/0x1630 [ 102.408309][ T10] ext4_ea_inode_work+0x5c/0x90 [ 102.410444][ T10] process_scheduled_works+0xc3d/0x1630 [ 102.412921][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 102.415794][ T10] ? assign_work+0x3cf/0x5d0 [ 102.417780][ T10] worker_thread+0xa47/0xfb0 [ 102.419794][ T10] kthread+0x38b/0x480 [ 102.421684][ T10] ? __pfx_worker_thread+0x10/0x10 [ 102.424012][ T10] ? __pfx_kthread+0x10/0x10 [ 102.426226][ T10] ret_from_fork+0x514/0xb70 [ 102.428400][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 102.430584][ T10] ? __switch_to+0xc89/0x1420 [ 102.432762][ T10] ? __pfx_kthread+0x10/0x10 [ 102.435008][ T10] ret_from_fork_asm+0x1a/0x30 [ 102.437213][ T10] [ 102.439599][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.442913][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 102.446949][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.451346][ T10] Workqueue: events ext4_ea_inode_work [ 102.453760][ T10] Call Trace: [ 102.455247][ T10] [ 102.456565][ T10] vpanic+0x56d/0xa60 [ 102.458392][ T10] ? __pfx__printk+0x10/0x10 [ 102.460521][ T10] ? __pfx_vpanic+0x10/0x10 [ 102.462610][ T10] ? is_bpf_text_address+0x292/0x2b0 [ 102.464963][ T10] ? is_bpf_text_address+0x26/0x2b0 [ 102.467325][ T10] panic+0xc5/0xd0 [ 102.469063][ T10] ? __pfx_panic+0x10/0x10 [ 102.471155][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 102.473313][ T10] __warn+0x315/0x4c0 [ 102.475077][ T10] ? ext4_journal_check_start+0x24f/0x2b0 [ 102.477669][ T10] ? ext4_journal_check_start+0x24f/0x2b0 [ 102.480206][ T10] __report_bug+0x276/0x570 [ 102.482663][ T10] ? ext4_journal_check_start+0x24f/0x2b0 [ 102.485313][ T10] ? __pfx___report_bug+0x10/0x10 [ 102.487618][ T10] ? check_noncircular+0xdb/0x150 [ 102.490088][ T10] ? add_lock_to_list+0xc7/0x100 [ 102.492364][ T10] ? lockdep_unlock+0x5c/0xd0 [ 102.494600][ T10] ? __lock_acquire+0x1511/0x2de0 [ 102.496844][ T10] ? ext4_journal_check_start+0x24f/0x2b0 [ 102.499321][ T10] report_bug+0x16b/0x220 [ 102.501151][ T10] ? ext4_journal_check_start+0x24f/0x2b0 [ 102.503672][ T10] ? ext4_journal_check_start+0x251/0x2b0 [ 102.506281][ T10] handle_bug+0x9c/0x200 [ 102.508252][ T10] exc_invalid_op+0x1a/0x50 [ 102.510567][ T10] asm_exc_invalid_op+0x1a/0x20 [ 102.513126][ T10] RIP: 0010:ext4_journal_check_start+0x24f/0x2b0 [ 102.516057][ T10] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c6 89 3b ff 41 bf fb ff ff ff eb e0 e8 b9 89 3b ff eb d3 e8 b2 89 3b ff 90 <0f> 0b 90 eb c8 e8 a7 89 3b ff 90 0f 0b 90 43 80 7c 25 00 00 0f 85 [ 102.524004][ T10] RSP: 0018:ffffc9000023f878 EFLAGS: 00010293 [ 102.526724][ T10] RAX: ffffffff828c97ce RBX: ffff888013bb2000 RCX: ffff88801c732580 [ 102.530088][ T10] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 102.533502][ T10] RBP: 0000000000000001 R08: ffff888013bb440f R09: 1ffff11002776881 [ 102.536763][ T10] R10: dffffc0000000000 R11: ffffed1002776882 R12: dffffc0000000000 [ 102.540242][ T10] R13: 1ffff110027764cf R14: ffff888013bb2678 R15: 0000000000000001 [ 102.543585][ T10] ? ext4_journal_check_start+0x24e/0x2b0 [ 102.546169][ T10] ? ext4_journal_check_start+0x24e/0x2b0 [ 102.548638][ T10] __ext4_journal_start_sb+0x14b/0x780 [ 102.551073][ T10] ext4_evict_inode+0x749/0xfe0 [ 102.553222][ T10] ? __pfx_ext4_evict_inode+0x10/0x10 [ 102.555702][ T10] evict+0x624/0xb50 [ 102.557471][ T10] ? __pfx_evict+0x10/0x10 [ 102.559460][ T10] ? do_raw_spin_unlock+0x4d/0x200 [ 102.561670][ T10] ? _raw_spin_unlock+0x28/0x50 [ 102.566023][ T10] ? iput+0xb84/0xf00 [ 102.567999][ T10] ? process_scheduled_works+0x97a/0x1630 [ 102.570421][ T10] ext4_ea_inode_work+0x5c/0x90 [ 102.572678][ T10] process_scheduled_works+0xc3d/0x1630 [ 102.575160][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 102.577823][ T10] ? assign_work+0x3cf/0x5d0 [ 102.579821][ T10] worker_thread+0xa47/0xfb0 [ 102.581933][ T10] kthread+0x38b/0x480 [ 102.583748][ T10] ? __pfx_worker_thread+0x10/0x10 [ 102.585943][ T10] ? __pfx_kthread+0x10/0x10 [ 102.588065][ T10] ret_from_fork+0x514/0xb70 [ 102.590098][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 102.592292][ T10] ? __switch_to+0xc89/0x1420 [ 102.594363][ T10] ? __pfx_kthread+0x10/0x10 [ 102.596488][ T10] ret_from_fork_asm+0x1a/0x30 [ 102.598668][ T10] [ 102.600607][ T10] Kernel Offset: disabled [ 102.602597][ T10] Rebooting in 86400 seconds..