program: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f000003c000/0x1000)=nil, 0x1000, 0x100000a, 0x12, r1, 0xffffe000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000340)={[{@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@nolazytime}, {@debug}, {@noauto_da_alloc}, {@barrier}, {@inlinecrypt}, {@jqfmt_vfsold}]}, 0x1, 0x476, &(0x7f00000006c0)="$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") [ 84.971181][ T5303] Bluetooth: hci0: command tx timeout [ 85.048278][ T5323] loop0: detected capacity change from 0 to 512 [ 85.065169][ T5323] EXT4-fs: inline encryption not supported [ 85.097054][ T5323] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 85.110458][ T5323] System zones: 1-12 [ 85.122918][ T5323] ------------[ cut here ]------------ [ 85.125570][ T5323] EA inode 11 i_nlink=0 [ 85.125614][ T5323] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x4c9/0x5a0, CPU#0: syz.0.0/5323 [ 85.132174][ T5323] Modules linked in: [ 85.134215][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.138970][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.144498][ T5323] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0 [ 85.147406][ T5323] Code: 74 08 4c 89 ef e8 7f f7 95 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 4b e7 15 09 44 89 [ 85.156081][ T5323] RSP: 0018:ffffc9000f66f240 EFLAGS: 00010246 [ 85.159861][ T5323] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000 [ 85.164412][ T5323] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff9018ad60 [ 85.167963][ T5323] RBP: ffffc9000f66f330 R08: ffff888046f917bf R09: 1ffff11008df22f7 [ 85.171781][ T5323] R10: dffffc0000000000 R11: ffffed1008df22f8 R12: ffffffff9018ad60 [ 85.175316][ T5323] R13: 000000000000000b R14: 1ffff11008df22c2 R15: ffff888046f91610 [ 85.178712][ T5323] FS: 00007f523e32b6c0(0000) GS:ffff88808ca49000(0000) knlGS:0000000000000000 [ 85.183452][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.187260][ T5323] CR2: 00007fa0342c79c0 CR3: 00000000448af000 CR4: 0000000000352ef0 [ 85.190976][ T5323] Call Trace: [ 85.192567][ T5323] [ 85.193870][ T5323] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 85.196632][ T5323] ? __kmalloc_cache_noprof+0x31c/0x660 [ 85.199244][ T5323] ? ext4_xattr_inode_dec_ref_all+0x4d2/0xe40 [ 85.204427][ T5323] ? __ext4_journal_ensure_credits+0x30/0x450 [ 85.207536][ T5323] ext4_xattr_inode_dec_ref_all+0x8cb/0xe40 [ 85.209995][ T5323] ? __mark_inode_dirty+0xb66/0x1470 [ 85.212799][ T5323] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 85.215611][ T5323] ? __ext4_journal_get_write_access+0x27f/0x590 [ 85.218021][ T5323] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 85.220977][ T5323] ext4_xattr_delete_inode+0xb45/0xd10 [ 85.223511][ T5323] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 85.226290][ T5323] ext4_evict_inode+0xb8b/0x1040 [ 85.228704][ T5323] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.231408][ T5323] ? do_raw_spin_unlock+0x4d/0x210 [ 85.233859][ T5323] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.236397][ T5323] evict+0x61e/0xb10 [ 85.238027][ T5323] ? __pfx_evict+0x10/0x10 [ 85.240017][ T5323] ? _raw_spin_unlock+0x28/0x50 [ 85.243803][ T5323] ? iput+0xb25/0xe80 [ 85.245774][ T5323] ext4_orphan_cleanup+0xc38/0x1470 [ 85.248402][ T5323] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 85.251503][ T5323] ? ext4_register_li_request+0x640/0x720 [ 85.254271][ T5323] ? errseq_check_and_advance+0x66/0x120 [ 85.258321][ T5323] ext4_fill_super+0x5a19/0x6330 [ 85.260783][ T5323] ? __pfx_ext4_fill_super+0x10/0x10 [ 85.263496][ T5323] ? snprintf+0xe8/0x140 [ 85.265363][ T5323] ? __pfx_snprintf+0x10/0x10 [ 85.267950][ T5323] ? set_blocksize+0x1c9/0x440 [ 85.270817][ T5323] ? sb_set_blocksize+0x155/0x240 [ 85.273335][ T5323] ? setup_bdev_super+0x4c1/0x5b0 [ 85.275687][ T5323] get_tree_bdev_flags+0x431/0x4f0 [ 85.278046][ T5323] ? __pfx_ext4_fill_super+0x10/0x10 [ 85.280425][ T5323] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 85.283109][ T5323] vfs_get_tree+0x92/0x2a0 [ 85.285355][ T5323] do_new_mount+0x341/0xd30 [ 85.287267][ T5323] ? apparmor_capable+0x126/0x170 [ 85.289625][ T5323] ? __pfx_do_new_mount+0x10/0x10 [ 85.293598][ T5323] ? ns_capable+0x89/0xe0 [ 85.296440][ T5323] ? user_path_at+0xd4/0x160 [ 85.298503][ T5323] __se_sys_mount+0x31d/0x420 [ 85.300766][ T5323] ? __pfx___se_sys_mount+0x10/0x10 [ 85.303083][ T5323] ? __x64_sys_mount+0x20/0xc0 [ 85.305253][ T5323] do_syscall_64+0x14d/0xf80 [ 85.307468][ T5323] ? trace_irq_disable+0x3b/0x150 [ 85.309705][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.313425][ T5323] ? clear_bhb_loop+0x40/0x90 [ 85.316357][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.319559][ T5323] RIP: 0033:0x7f523d39da8a [ 85.321577][ T5323] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.329581][ T5323] RSP: 002b:00007f523e32ae18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.333288][ T5323] RAX: ffffffffffffffda RBX: 00007f523e32aea0 RCX: 00007f523d39da8a [ 85.337575][ T5323] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f523e32ae60 [ 85.343376][ T5323] RBP: 0000200000000180 R08: 00007f523e32aea0 R09: 0000000000000000 [ 85.346922][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 85.350746][ T5323] R13: 00007f523e32ae60 R14: 0000000000000476 R15: 0000200000000340 [ 85.354567][ T5323] [ 85.356203][ T5323] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.359929][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.364308][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.368776][ T5323] Call Trace: [ 85.370357][ T5323] [ 85.372399][ T5323] vpanic+0x56c/0xa60 [ 85.375420][ T5323] ? __pfx__printk+0x10/0x10 [ 85.378185][ T5323] ? __pfx_vpanic+0x10/0x10 [ 85.380394][ T5323] ? is_bpf_text_address+0x292/0x2b0 [ 85.382663][ T5323] ? is_bpf_text_address+0x26/0x2b0 [ 85.385106][ T5323] panic+0xc5/0xd0 [ 85.386877][ T5323] ? __pfx_panic+0x10/0x10 [ 85.388938][ T5323] __warn+0x315/0x4f0 [ 85.390888][ T5323] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 85.393758][ T5323] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 85.396791][ T5323] __report_bug+0x29a/0x540 [ 85.399357][ T5323] ? ext4_get_group_desc+0x434/0x4e0 [ 85.402024][ T5323] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 85.404384][ T5323] ? __pfx___report_bug+0x10/0x10 [ 85.406265][ T5323] ? set_normalized_timespec64+0xf0/0x1a0 [ 85.408367][ T5323] ? __ext4_journal_get_write_access+0x84/0x590 [ 85.411213][ T5323] report_bug_entry+0x19a/0x290 [ 85.413063][ T5323] ? ext4_xattr_inode_update_ref+0x511/0x5a0 [ 85.415610][ T5323] ? ext4_xattr_inode_update_ref+0x516/0x5a0 [ 85.418237][ T5323] handle_bug+0xce/0x200 [ 85.420138][ T5323] exc_invalid_op+0x1a/0x50 [ 85.422010][ T5323] asm_exc_invalid_op+0x1a/0x20 [ 85.424029][ T5323] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0 [ 85.427292][ T5323] Code: 74 08 4c 89 ef e8 7f f7 95 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 4b e7 15 09 44 89 [ 85.436032][ T5323] RSP: 0018:ffffc9000f66f240 EFLAGS: 00010246 [ 85.438699][ T5323] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000 [ 85.442720][ T5323] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff9018ad60 [ 85.447340][ T5323] RBP: ffffc9000f66f330 R08: ffff888046f917bf R09: 1ffff11008df22f7 [ 85.450891][ T5323] R10: dffffc0000000000 R11: ffffed1008df22f8 R12: ffffffff9018ad60 [ 85.454216][ T5323] R13: 000000000000000b R14: 1ffff11008df22c2 R15: ffff888046f91610 [ 85.457537][ T5323] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 85.460950][ T5323] ? __kmalloc_cache_noprof+0x31c/0x660 [ 85.463842][ T5323] ? ext4_xattr_inode_dec_ref_all+0x4d2/0xe40 [ 85.466649][ T5323] ? __ext4_journal_ensure_credits+0x30/0x450 [ 85.469420][ T5323] ext4_xattr_inode_dec_ref_all+0x8cb/0xe40 [ 85.472047][ T5323] ? __mark_inode_dirty+0xb66/0x1470 [ 85.474291][ T5323] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 85.481677][ T5323] ? __ext4_journal_get_write_access+0x27f/0x590 [ 85.485030][ T5323] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 85.487935][ T5323] ext4_xattr_delete_inode+0xb45/0xd10 [ 85.490208][ T5323] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 85.492815][ T5323] ext4_evict_inode+0xb8b/0x1040 [ 85.494970][ T5323] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.497978][ T5323] ? do_raw_spin_unlock+0x4d/0x210 [ 85.501207][ T5323] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.504639][ T5323] evict+0x61e/0xb10 [ 85.506748][ T5323] ? __pfx_evict+0x10/0x10 [ 85.508853][ T5323] ? _raw_spin_unlock+0x28/0x50 [ 85.511168][ T5323] ? iput+0xb25/0xe80 [ 85.513048][ T5323] ext4_orphan_cleanup+0xc38/0x1470 [ 85.515378][ T5323] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 85.518714][ T5323] ? ext4_register_li_request+0x640/0x720 [ 85.521985][ T5323] ? errseq_check_and_advance+0x66/0x120 [ 85.524820][ T5323] ext4_fill_super+0x5a19/0x6330 [ 85.527004][ T5323] ? __pfx_ext4_fill_super+0x10/0x10 [ 85.529383][ T5323] ? snprintf+0xe8/0x140 [ 85.531341][ T5323] ? __pfx_snprintf+0x10/0x10 [ 85.533535][ T5323] ? set_blocksize+0x1c9/0x440 [ 85.535691][ T5323] ? sb_set_blocksize+0x155/0x240 [ 85.538033][ T5323] ? setup_bdev_super+0x4c1/0x5b0 [ 85.540734][ T5323] get_tree_bdev_flags+0x431/0x4f0 [ 85.543294][ T5323] ? __pfx_ext4_fill_super+0x10/0x10 [ 85.545633][ T5323] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 85.548140][ T5323] vfs_get_tree+0x92/0x2a0 [ 85.550246][ T5323] do_new_mount+0x341/0xd30 [ 85.552566][ T5323] ? apparmor_capable+0x126/0x170 [ 85.555953][ T5323] ? __pfx_do_new_mount+0x10/0x10 [ 85.558577][ T5323] ? ns_capable+0x89/0xe0 [ 85.560612][ T5323] ? user_path_at+0xd4/0x160 [ 85.562582][ T5323] __se_sys_mount+0x31d/0x420 [ 85.564567][ T5323] ? __pfx___se_sys_mount+0x10/0x10 [ 85.566841][ T5323] ? __x64_sys_mount+0x20/0xc0 [ 85.569151][ T5323] do_syscall_64+0x14d/0xf80 [ 85.571540][ T5323] ? trace_irq_disable+0x3b/0x150 [ 85.574011][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.576769][ T5323] ? clear_bhb_loop+0x40/0x90 [ 85.578886][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.581724][ T5323] RIP: 0033:0x7f523d39da8a [ 85.584446][ T5323] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.593205][ T5323] RSP: 002b:00007f523e32ae18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.596844][ T5323] RAX: ffffffffffffffda RBX: 00007f523e32aea0 RCX: 00007f523d39da8a [ 85.600320][ T5323] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f523e32ae60 [ 85.604659][ T5323] RBP: 0000200000000180 R08: 00007f523e32aea0 R09: 0000000000000000 [ 85.608106][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 85.611206][ T5323] R13: 00007f523e32ae60 R14: 0000000000000476 R15: 0000200000000340 [ 85.614376][ T5323] [ 85.616057][ T5323] Kernel Offset: disabled [ 85.618698][ T5323] Rebooting in 86400 seconds..