program: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@noquota}, {@nouid32}, {@init_itable}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000001040)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x2f, 0x12, 0xe4, {0xa, @tcp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x23}, @broadcast, 0x4e22, 0x4e21, 0x40}, {0x0, @multicast, 0x4, 0x4, [0x3, 0x3]}, @usr_ip4_spec={@empty, @dev={0xac, 0x14, 0x14, 0x41}, 0xfffbfff7, 0x8, 0x1, 0x9}, {0x0, @random="f2c13ade264a", 0x8, 0x7, [0x8, 0x1]}, 0xffffffffffffffff, 0xf9}}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) fchown(r4, 0x0, 0x0) accept4$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, &(0x7f0000000300)=0x10, 0x0) [ 86.451580][ T5295] Bluetooth: hci0: command tx timeout [ 86.655814][ T5318] loop0: detected capacity change from 0 to 512 [ 86.726876][ T5318] ------------[ cut here ]------------ [ 86.729323][ T5318] EA inode 11 i_nlink=0 [ 86.729336][ T5318] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x4c9/0x5a0, CPU#0: syz.0.0/5318 [ 86.736796][ T5318] Modules linked in: [ 86.738769][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.742892][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.747050][ T5318] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0 [ 86.749615][ T5318] Code: 74 08 4c 89 ef e8 7f 97 96 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 bb 3a 13 09 44 89 [ 86.758062][ T5318] RSP: 0018:ffffc9000e3bf240 EFLAGS: 00010246 [ 86.760872][ T5318] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000 [ 86.764688][ T5318] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff90181ef0 [ 86.768394][ T5318] RBP: ffffc9000e3bf330 R08: ffff88804772048f R09: 1ffff11008ee4091 [ 86.772226][ T5318] R10: dffffc0000000000 R11: ffffed1008ee4092 R12: ffffffff90181ef0 [ 86.775926][ T5318] R13: 000000000000000b R14: 1ffff11008ee405c R15: ffff8880477202e0 [ 86.779756][ T5318] FS: 00007fc84ec276c0(0000) GS:ffff88808ca62000(0000) knlGS:0000000000000000 [ 86.783896][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.787006][ T5318] CR2: 00007f9309050000 CR3: 0000000036a58000 CR4: 0000000000352ef0 [ 86.790767][ T5318] Call Trace: [ 86.792392][ T5318] [ 86.793737][ T5318] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 86.796711][ T5318] ? __kmalloc_cache_noprof+0x31c/0x660 [ 86.799279][ T5318] ? ext4_xattr_inode_dec_ref_all+0x4d2/0xe40 [ 86.802128][ T5318] ? __ext4_journal_ensure_credits+0x30/0x450 [ 86.804885][ T5318] ext4_xattr_inode_dec_ref_all+0x8cb/0xe40 [ 86.807515][ T5318] ? __mark_inode_dirty+0xb66/0x1470 [ 86.809822][ T5318] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 86.812689][ T5318] ? __ext4_journal_get_write_access+0x27f/0x590 [ 86.815377][ T5318] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 86.818254][ T5318] ext4_xattr_delete_inode+0xb45/0xd10 [ 86.820596][ T5318] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 86.823304][ T5318] ext4_evict_inode+0xa63/0xeb0 [ 86.825453][ T5318] ? __pfx_ext4_evict_inode+0x10/0x10 [ 86.827765][ T5318] ? do_raw_spin_unlock+0x4d/0x210 [ 86.829981][ T5318] ? __pfx_ext4_evict_inode+0x10/0x10 [ 86.836959][ T5318] evict+0x61e/0xb10 [ 86.838741][ T5318] ? __pfx_evict+0x10/0x10 [ 86.840719][ T5318] ? _raw_spin_unlock+0x28/0x50 [ 86.843459][ T5318] ? iput+0xb25/0xe80 [ 86.845756][ T5318] ext4_orphan_cleanup+0xc38/0x1470 [ 86.848019][ T5318] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 86.850545][ T5318] ? ext4_register_li_request+0x640/0x720 [ 86.853162][ T5318] ? errseq_check_and_advance+0x66/0x120 [ 86.855671][ T5318] ext4_fill_super+0x59ff/0x6320 [ 86.857942][ T5318] ? __pfx_ext4_fill_super+0x10/0x10 [ 86.860277][ T5318] ? snprintf+0xe8/0x140 [ 86.862295][ T5318] ? __pfx_snprintf+0x10/0x10 [ 86.864378][ T5318] ? set_blocksize+0x1c9/0x440 [ 86.866509][ T5318] ? sb_set_blocksize+0x155/0x240 [ 86.868728][ T5318] ? setup_bdev_super+0x4c1/0x5b0 [ 86.871106][ T5318] get_tree_bdev_flags+0x431/0x4f0 [ 86.873300][ T5318] ? __pfx_ext4_fill_super+0x10/0x10 [ 86.875608][ T5318] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 86.878055][ T5318] vfs_get_tree+0x92/0x2a0 [ 86.880059][ T5318] do_new_mount+0x341/0xd30 [ 86.882187][ T5318] ? apparmor_capable+0x137/0x1a0 [ 86.884488][ T5318] ? __pfx_do_new_mount+0x10/0x10 [ 86.886741][ T5318] ? ns_capable+0x89/0xe0 [ 86.888670][ T5318] ? user_path_at+0xd4/0x160 [ 86.890694][ T5318] __se_sys_mount+0x31d/0x420 [ 86.892983][ T5318] ? __pfx___se_sys_mount+0x10/0x10 [ 86.895119][ T5318] ? __x64_sys_mount+0x20/0xc0 [ 86.897221][ T5318] do_syscall_64+0x14d/0xf80 [ 86.899291][ T5318] ? trace_irq_disable+0x3b/0x150 [ 86.902086][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.904747][ T5318] ? clear_bhb_loop+0x40/0x90 [ 86.906812][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.909327][ T5318] RIP: 0033:0x7fc84dd9d20a [ 86.911417][ T5318] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.919746][ T5318] RSP: 002b:00007fc84ec26e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.923559][ T5318] RAX: ffffffffffffffda RBX: 00007fc84ec26ee0 RCX: 00007fc84dd9d20a [ 86.927070][ T5318] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fc84ec26ea0 [ 86.930285][ T5318] RBP: 0000200000000180 R08: 00007fc84ec26ee0 R09: 0000000000800700 [ 86.933711][ T5318] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 86.936902][ T5318] R13: 00007fc84ec26ea0 R14: 000000000000046f R15: 000000000000002c [ 86.940609][ T5318] [ 86.942373][ T5318] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.945622][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.949589][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.953972][ T5318] Call Trace: [ 86.955635][ T5318] [ 86.957043][ T5318] vpanic+0x56c/0xa60 [ 86.958914][ T5318] ? __pfx__printk+0x10/0x10 [ 86.961082][ T5318] ? __pfx_vpanic+0x10/0x10 [ 86.963163][ T5318] ? is_bpf_text_address+0x292/0x2b0 [ 86.965639][ T5318] ? is_bpf_text_address+0x26/0x2b0 [ 86.967924][ T5318] panic+0xc5/0xd0 [ 86.969450][ T5318] ? __pfx_panic+0x10/0x10 [ 86.971273][ T5318] __warn+0x315/0x4f0 [ 86.973049][ T5318] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 86.975527][ T5318] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 86.978225][ T5318] __report_bug+0x29a/0x540 [ 86.980238][ T5318] ? ext4_get_group_desc+0x434/0x4e0 [ 86.982561][ T5318] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 86.985394][ T5318] ? __pfx___report_bug+0x10/0x10 [ 86.987665][ T5318] ? set_normalized_timespec64+0xf0/0x1a0 [ 86.990155][ T5318] ? __ext4_journal_get_write_access+0x84/0x590 [ 86.992767][ T5318] report_bug_entry+0x19a/0x290 [ 86.994925][ T5318] ? ext4_xattr_inode_update_ref+0x511/0x5a0 [ 86.997530][ T5318] ? ext4_xattr_inode_update_ref+0x516/0x5a0 [ 87.000105][ T5318] handle_bug+0xca/0x200 [ 87.002315][ T5318] exc_invalid_op+0x1a/0x50 [ 87.004591][ T5318] asm_exc_invalid_op+0x1a/0x20 [ 87.006834][ T5318] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0 [ 87.009690][ T5318] Code: 74 08 4c 89 ef e8 7f 97 96 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 bb 3a 13 09 44 89 [ 87.017928][ T5318] RSP: 0018:ffffc9000e3bf240 EFLAGS: 00010246 [ 87.020544][ T5318] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000 [ 87.024038][ T5318] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff90181ef0 [ 87.027332][ T5318] RBP: ffffc9000e3bf330 R08: ffff88804772048f R09: 1ffff11008ee4091 [ 87.030710][ T5318] R10: dffffc0000000000 R11: ffffed1008ee4092 R12: ffffffff90181ef0 [ 87.034109][ T5318] R13: 000000000000000b R14: 1ffff11008ee405c R15: ffff8880477202e0 [ 87.037529][ T5318] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 87.040275][ T5318] ? __kmalloc_cache_noprof+0x31c/0x660 [ 87.042721][ T5318] ? ext4_xattr_inode_dec_ref_all+0x4d2/0xe40 [ 87.045566][ T5318] ? __ext4_journal_ensure_credits+0x30/0x450 [ 87.048258][ T5318] ext4_xattr_inode_dec_ref_all+0x8cb/0xe40 [ 87.050717][ T5318] ? __mark_inode_dirty+0xb66/0x1470 [ 87.052935][ T5318] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 87.055589][ T5318] ? __ext4_journal_get_write_access+0x27f/0x590 [ 87.058233][ T5318] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 87.061006][ T5318] ext4_xattr_delete_inode+0xb45/0xd10 [ 87.063699][ T5318] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 87.066457][ T5318] ext4_evict_inode+0xa63/0xeb0 [ 87.068712][ T5318] ? __pfx_ext4_evict_inode+0x10/0x10 [ 87.070876][ T5318] ? do_raw_spin_unlock+0x4d/0x210 [ 87.072935][ T5318] ? __pfx_ext4_evict_inode+0x10/0x10 [ 87.075243][ T5318] evict+0x61e/0xb10 [ 87.076987][ T5318] ? __pfx_evict+0x10/0x10 [ 87.078995][ T5318] ? _raw_spin_unlock+0x28/0x50 [ 87.081169][ T5318] ? iput+0xb25/0xe80 [ 87.082928][ T5318] ext4_orphan_cleanup+0xc38/0x1470 [ 87.085223][ T5318] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 87.087737][ T5318] ? ext4_register_li_request+0x640/0x720 [ 87.090814][ T5318] ? errseq_check_and_advance+0x66/0x120 [ 87.093376][ T5318] ext4_fill_super+0x59ff/0x6320 [ 87.095608][ T5318] ? __pfx_ext4_fill_super+0x10/0x10 [ 87.098033][ T5318] ? snprintf+0xe8/0x140 [ 87.099929][ T5318] ? __pfx_snprintf+0x10/0x10 [ 87.102044][ T5318] ? set_blocksize+0x1c9/0x440 [ 87.104155][ T5318] ? sb_set_blocksize+0x155/0x240 [ 87.106349][ T5318] ? setup_bdev_super+0x4c1/0x5b0 [ 87.108587][ T5318] get_tree_bdev_flags+0x431/0x4f0 [ 87.110848][ T5318] ? __pfx_ext4_fill_super+0x10/0x10 [ 87.113056][ T5318] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 87.115413][ T5318] vfs_get_tree+0x92/0x2a0 [ 87.117327][ T5318] do_new_mount+0x341/0xd30 [ 87.119261][ T5318] ? apparmor_capable+0x137/0x1a0 [ 87.121401][ T5318] ? __pfx_do_new_mount+0x10/0x10 [ 87.123614][ T5318] ? ns_capable+0x89/0xe0 [ 87.125726][ T5318] ? user_path_at+0xd4/0x160 [ 87.127862][ T5318] __se_sys_mount+0x31d/0x420 [ 87.129990][ T5318] ? __pfx___se_sys_mount+0x10/0x10 [ 87.132271][ T5318] ? __x64_sys_mount+0x20/0xc0 [ 87.134438][ T5318] do_syscall_64+0x14d/0xf80 [ 87.136446][ T5318] ? trace_irq_disable+0x3b/0x150 [ 87.138734][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.141515][ T5318] ? clear_bhb_loop+0x40/0x90 [ 87.143561][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.146213][ T5318] RIP: 0033:0x7fc84dd9d20a [ 87.148182][ T5318] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.156628][ T5318] RSP: 002b:00007fc84ec26e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.160350][ T5318] RAX: ffffffffffffffda RBX: 00007fc84ec26ee0 RCX: 00007fc84dd9d20a [ 87.163871][ T5318] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fc84ec26ea0 [ 87.167571][ T5318] RBP: 0000200000000180 R08: 00007fc84ec26ee0 R09: 0000000000800700 [ 87.171013][ T5318] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 87.174455][ T5318] R13: 00007fc84ec26ea0 R14: 000000000000046f R15: 000000000000002c [ 87.177984][ T5318] [ 87.179743][ T5318] Kernel Offset: disabled [ 87.181657][ T5318] Rebooting in 86400 seconds..