program: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1a08700, &(0x7f0000000700)={[{@nodioread_nolock}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x0, 0x470, &(0x7f0000001040)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYuiIFJR0EM9xiQtodtGmii2FpuKeBKkoGfxKPoXeBNB1JPg1ZMnKRTtpa2nyMzOpJvtJjHNphOzvx9s9n1n3t15nszXu++7G0DHGsj+JBE7IuL3iOirVxc3GKg/Xb96fvzG1fPjSczPv/FXkre7dvX8eNm0fN32ojKYRqQfJ8VGFps5e+7kWK02eaaoD8+eemd45uy5p947NXZi8sTk6dEjRw4fGnn2mdGn25Jnlte1fR9O79/78luXXh0/duntn7/N4t1RrG/Mo10GssT/ns81r3u83Rur2M6GctJdYSCsSldEZLurJz//+6Irbu68vnjpo0qDA9ZVdm/asvTquXlgE0ui6giAapQ3+uzzb/m4Q12PDeHK8/UPQFne14tHfU13pEWbnqbPt+00EBHH5v75MnvEOo1DAAA0+nT8i6O9EfHBjW9eyfoefQtr0rgvf/4j/7urmEPpj4i7I2J3RNwTEXsi4t6IvO39EfHAGuO5tf+TXl7jWy4r6/89V8xtLe7/lb2/6O8qajvz/HuS41O1yYPF/2QwerZk9ZFltvH9i799ttS6xv5f9si2X/YFizgudzcN0E2MzY7lndI2uHIxYl93q/yThZmAJCL2RsS+1b31rrIw9cTX+5dqtHL+rVxcXSTLmP8qS28uy38umvIvJY3zk1O3zE8Ob43a5MHh8qi41S+/fvL6Utu/vfzb58pk/blh/zc36U8a52tn2rv92zz+097kzXyeubdY9v7Y7OyZkYje5GheX7R89OZry3rZPjv+Bw+0Pv93F6/J8n8wIrKD+KGIeDgiHilifzQiHouIA8vk+NMLK+cfaUX7/2LERMvr38Lx37T/V1/oOvnjd0tt/7/t/8N5abBYkl//VtAqnOx61hzgWv53AAAA8H+R5t+BT9KhhXKaDg3Vv8O/J+5Ka9Mzs08en3739ET9u/L90ZOWI119xXhobao2OZLMFe9YHx8dLcaKy/HSQ8W48edd2/L60Ph0baLi3KHTbV/i/M/82VV1dMA629Zy6WjvHQ8EqEDz7zXTxdULr4WLAWxWfq8NnWuF87+pO6AzAJuJ+z90rlbn/4WmurkA2Jzc/6FzOf+hQ6U/VB0BUCH3f+hIa/ld/zoWtm6MMKopbNSdkhciykK6IeJRWKdC1VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9vg3AAD//5wI5wQ=") [ 74.800587][ T5303] Bluetooth: hci0: command tx timeout [ 74.877522][ T5323] loop0: detected capacity change from 0 to 512 [ 74.929054][ T5323] ------------[ cut here ]------------ [ 74.931637][ T5323] EA inode 11 i_nlink=2 [ 74.931798][ T5323] WARNING: CPU: 0 PID: 5323 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 74.938114][ T5323] Modules linked in: [ 74.940597][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.944489][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.950691][ T5323] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 74.954632][ T5323] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 80 1f 80 8b 4c 89 e6 e8 17 1c f8 fe 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 63 0c bd 08 44 89 f9 [ 74.964467][ T5323] RSP: 0018:ffffc9000d33f100 EFLAGS: 00010246 [ 74.967375][ T5323] RAX: f55692441a456100 RBX: 0000000000000001 RCX: 0000000000100000 [ 74.971264][ T5323] RDX: ffffc9000e56a000 RSI: 00000000000095a4 RDI: 00000000000095a5 [ 74.974663][ T5323] RBP: ffffc9000d33f1f8 R08: ffff88801fe24293 R09: 1ffff11003fc4852 [ 74.978101][ T5323] R10: dffffc0000000000 R11: ffffed1003fc4853 R12: 000000000000000b [ 74.981754][ T5323] R13: ffff888011143340 R14: 1ffff11002228656 R15: ffff8880111432b0 [ 74.985590][ T5323] FS: 00007fa6d23f56c0(0000) GS:ffff88808d733000(0000) knlGS:0000000000000000 [ 74.989955][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.992908][ T5323] CR2: 00007fc9c638dd30 CR3: 0000000042141000 CR4: 0000000000352ef0 [ 74.996441][ T5323] Call Trace: [ 74.997687][ T5323] [ 74.999004][ T5323] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 75.001531][ T5323] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 75.004295][ T5323] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 75.006642][ T5323] ext4_xattr_set_entry+0xabb/0x1e20 [ 75.009246][ T5323] ext4_xattr_ibody_set+0x254/0x6a0 [ 75.011918][ T5323] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 75.014596][ T5323] __ext4_expand_extra_isize+0x30d/0x400 [ 75.017072][ T5323] __ext4_mark_inode_dirty+0x46c/0x700 [ 75.019672][ T5323] ext4_evict_inode+0x80d/0xee0 [ 75.021813][ T5323] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.024201][ T5323] ? do_raw_spin_unlock+0x4d/0x240 [ 75.026376][ T5323] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.028840][ T5323] evict+0x504/0x9c0 [ 75.030567][ T5323] ? __pfx_evict+0x10/0x10 [ 75.032510][ T5323] ? do_raw_spin_unlock+0x4d/0x240 [ 75.034795][ T5323] ? _raw_spin_unlock+0x28/0x50 [ 75.036950][ T5323] ? iput+0x946/0xc50 [ 75.038774][ T5323] ext4_orphan_cleanup+0xc20/0x1460 [ 75.040993][ T5323] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 75.043575][ T5323] ? ext4_register_li_request+0x640/0x720 [ 75.046048][ T5323] ? errseq_check_and_advance+0x66/0x120 [ 75.048688][ T5323] ext4_fill_super+0x5920/0x61e0 [ 75.050965][ T5323] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.053327][ T5323] ? snprintf+0xda/0x120 [ 75.055252][ T5323] ? __pfx_snprintf+0x10/0x10 [ 75.057283][ T5323] ? set_blocksize+0x21e/0x500 [ 75.059433][ T5323] ? sb_set_blocksize+0x104/0x180 [ 75.061664][ T5323] ? setup_bdev_super+0x4c1/0x5b0 [ 75.063883][ T5323] get_tree_bdev_flags+0x40e/0x4d0 [ 75.066035][ T5323] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.068492][ T5323] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 75.070990][ T5323] vfs_get_tree+0x92/0x2b0 [ 75.072963][ T5323] do_new_mount+0x302/0xa10 [ 75.075010][ T5323] ? apparmor_capable+0x137/0x1b0 [ 75.077105][ T5323] ? __pfx_do_new_mount+0x10/0x10 [ 75.079454][ T5323] ? ns_capable+0x8a/0xf0 [ 75.081281][ T5323] ? kmem_cache_free+0x19b/0x690 [ 75.083324][ T5323] __se_sys_mount+0x313/0x410 [ 75.085195][ T5323] ? __pfx___se_sys_mount+0x10/0x10 [ 75.087326][ T5323] ? do_syscall_64+0xbe/0xfa0 [ 75.090249][ T5323] ? __x64_sys_mount+0x20/0xc0 [ 75.092497][ T5323] do_syscall_64+0xfa/0xfa0 [ 75.094832][ T5323] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.097140][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.099893][ T5323] ? clear_bhb_loop+0x60/0xb0 [ 75.102046][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.104759][ T5323] RIP: 0033:0x7fa6d159076a [ 75.106773][ T5323] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.115476][ T5323] RSP: 002b:00007fa6d23f4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.119472][ T5323] RAX: ffffffffffffffda RBX: 00007fa6d23f4ef0 RCX: 00007fa6d159076a [ 75.122855][ T5323] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa6d23f4eb0 [ 75.125992][ T5323] RBP: 0000200000000180 R08: 00007fa6d23f4ef0 R09: 0000000001a08700 [ 75.129203][ T5323] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 75.132347][ T5323] R13: 00007fa6d23f4eb0 R14: 0000000000000470 R15: 0000200000000700 [ 75.135547][ T5323] [ 75.136783][ T5323] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.139679][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.143188][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.147444][ T5323] Call Trace: [ 75.148789][ T5323] [ 75.149994][ T5323] dump_stack_lvl+0x99/0x250 [ 75.151943][ T5323] ? __asan_memcpy+0x40/0x70 [ 75.154042][ T5323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.156353][ T5323] ? __pfx__printk+0x10/0x10 [ 75.158374][ T5323] vpanic+0x237/0x6d0 [ 75.160192][ T5323] ? __pfx_vpanic+0x10/0x10 [ 75.162190][ T5323] panic+0xb9/0xc0 [ 75.163866][ T5323] ? __pfx_panic+0x10/0x10 [ 75.165900][ T5323] __warn+0x31b/0x4b0 [ 75.167623][ T5323] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.170573][ T5323] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.173805][ T5323] report_bug+0x2be/0x4f0 [ 75.175915][ T5323] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.178591][ T5323] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.181215][ T5323] ? ext4_xattr_inode_update_ref+0x51c/0x5b0 [ 75.183995][ T5323] handle_bug+0x84/0x160 [ 75.185778][ T5323] exc_invalid_op+0x1a/0x50 [ 75.187783][ T5323] asm_exc_invalid_op+0x1a/0x20 [ 75.189872][ T5323] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.193338][ T5323] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 80 1f 80 8b 4c 89 e6 e8 17 1c f8 fe 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 63 0c bd 08 44 89 f9 [ 75.202812][ T5323] RSP: 0018:ffffc9000d33f100 EFLAGS: 00010246 [ 75.205537][ T5323] RAX: f55692441a456100 RBX: 0000000000000001 RCX: 0000000000100000 [ 75.208922][ T5323] RDX: ffffc9000e56a000 RSI: 00000000000095a4 RDI: 00000000000095a5 [ 75.212532][ T5323] RBP: ffffc9000d33f1f8 R08: ffff88801fe24293 R09: 1ffff11003fc4852 [ 75.215987][ T5323] R10: dffffc0000000000 R11: ffffed1003fc4853 R12: 000000000000000b [ 75.219538][ T5323] R13: ffff888011143340 R14: 1ffff11002228656 R15: ffff8880111432b0 [ 75.223076][ T5323] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 75.225619][ T5323] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 75.228327][ T5323] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 75.230738][ T5323] ext4_xattr_set_entry+0xabb/0x1e20 [ 75.233084][ T5323] ext4_xattr_ibody_set+0x254/0x6a0 [ 75.235442][ T5323] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 75.237952][ T5323] __ext4_expand_extra_isize+0x30d/0x400 [ 75.240350][ T5323] __ext4_mark_inode_dirty+0x46c/0x700 [ 75.242784][ T5323] ext4_evict_inode+0x80d/0xee0 [ 75.244876][ T5323] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.247250][ T5323] ? do_raw_spin_unlock+0x4d/0x240 [ 75.249413][ T5323] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.251721][ T5323] evict+0x504/0x9c0 [ 75.253443][ T5323] ? __pfx_evict+0x10/0x10 [ 75.255358][ T5323] ? do_raw_spin_unlock+0x4d/0x240 [ 75.257531][ T5323] ? _raw_spin_unlock+0x28/0x50 [ 75.259543][ T5323] ? iput+0x946/0xc50 [ 75.261200][ T5323] ext4_orphan_cleanup+0xc20/0x1460 [ 75.263567][ T5323] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 75.266082][ T5323] ? ext4_register_li_request+0x640/0x720 [ 75.268651][ T5323] ? errseq_check_and_advance+0x66/0x120 [ 75.271174][ T5323] ext4_fill_super+0x5920/0x61e0 [ 75.273346][ T5323] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.275743][ T5323] ? snprintf+0xda/0x120 [ 75.277673][ T5323] ? __pfx_snprintf+0x10/0x10 [ 75.279759][ T5323] ? set_blocksize+0x21e/0x500 [ 75.281868][ T5323] ? sb_set_blocksize+0x104/0x180 [ 75.284123][ T5323] ? setup_bdev_super+0x4c1/0x5b0 [ 75.286083][ T5323] get_tree_bdev_flags+0x40e/0x4d0 [ 75.288059][ T5323] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.290107][ T5323] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 75.292401][ T5323] vfs_get_tree+0x92/0x2b0 [ 75.294337][ T5323] do_new_mount+0x302/0xa10 [ 75.296027][ T5323] ? apparmor_capable+0x137/0x1b0 [ 75.298195][ T5323] ? __pfx_do_new_mount+0x10/0x10 [ 75.300199][ T5323] ? ns_capable+0x8a/0xf0 [ 75.302198][ T5323] ? kmem_cache_free+0x19b/0x690 [ 75.304437][ T5323] __se_sys_mount+0x313/0x410 [ 75.306453][ T5323] ? __pfx___se_sys_mount+0x10/0x10 [ 75.308587][ T5323] ? do_syscall_64+0xbe/0xfa0 [ 75.310621][ T5323] ? __x64_sys_mount+0x20/0xc0 [ 75.312761][ T5323] do_syscall_64+0xfa/0xfa0 [ 75.314778][ T5323] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.317100][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.319783][ T5323] ? clear_bhb_loop+0x60/0xb0 [ 75.321805][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.324255][ T5323] RIP: 0033:0x7fa6d159076a [ 75.326026][ T5323] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.333412][ T5323] RSP: 002b:00007fa6d23f4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.336762][ T5323] RAX: ffffffffffffffda RBX: 00007fa6d23f4ef0 RCX: 00007fa6d159076a [ 75.340265][ T5323] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa6d23f4eb0 [ 75.343717][ T5323] RBP: 0000200000000180 R08: 00007fa6d23f4ef0 R09: 0000000001a08700 [ 75.347240][ T5323] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 75.350729][ T5323] R13: 00007fa6d23f4eb0 R14: 0000000000000470 R15: 0000200000000700 [ 75.354205][ T5323] [ 75.355995][ T5323] Kernel Offset: disabled [ 75.357948][ T5323] Rebooting in 86400 seconds..