program: socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") [ 85.901402][ T4705] Bluetooth: hci0: command tx timeout [ 86.113107][ T5360] loop0: detected capacity change from 0 to 512 [ 86.149138][ T5360] EXT4-fs (loop0): orphan cleanup on readonly fs [ 86.168726][ T5360] EXT4-fs warning (device loop0): ext4_xattr_inode_get:556: inode #11: comm syz.0.0: EA inode hash validation failed [ 86.178214][ T5360] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 86.184164][ T5360] ------------[ cut here ]------------ [ 86.187271][ T5360] EA inode 11 ref_count=-1 [ 86.189331][ T5360] WARNING: CPU: 0 PID: 5360 at fs/ext4/xattr.c:1048 ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 86.196091][ T5360] Modules linked in: [ 86.197962][ T5360] CPU: 0 UID: 0 PID: 5360 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.202582][ T5360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.207560][ T5360] RIP: 0010:ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 86.210439][ T5360] Code: 78 40 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 e8 2c 9d ff 49 8b 37 48 c7 c7 e0 f7 bf 8b 4c 89 ea e8 f6 bd fb fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4c 8b 74 24 20 4c 8b 6c [ 86.218692][ T5360] RSP: 0018:ffffc9000d3272e0 EFLAGS: 00010246 [ 86.222095][ T5360] RAX: f6569af378e04700 RBX: dffffc0000000000 RCX: 0000000000100000 [ 86.225656][ T5360] RDX: ffffc9000de32000 RSI: 0000000000008819 RDI: 000000000000881a [ 86.228819][ T5360] RBP: ffffc9000d3273d0 R08: 0000000000000003 R09: 0000000000000004 [ 86.232121][ T5360] R10: dffffc0000000000 R11: fffffbfff1c3a22c R12: ffffc9000d327340 [ 86.235850][ T5360] R13: ffffffffffffffff R14: 00000000ffffffff R15: ffff888043ae9f88 [ 86.239393][ T5360] FS: 00007f8e732fa6c0(0000) GS:ffff88808d009000(0000) knlGS:0000000000000000 [ 86.243382][ T5360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.246600][ T5360] CR2: 00007f4fc35909c0 CR3: 0000000011f9f000 CR4: 0000000000352ef0 [ 86.249983][ T5360] Call Trace: [ 86.251324][ T5360] [ 86.252560][ T5360] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 86.255160][ T5360] ? __kasan_kmalloc+0x93/0xb0 [ 86.257690][ T5360] ? __ext4_journal_ensure_credits+0x30/0x450 [ 86.261050][ T5360] ext4_xattr_inode_dec_ref_all+0x867/0xda0 [ 86.264036][ T5360] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 86.266584][ T5360] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 86.269204][ T5360] ? __ext4_journal_get_write_access+0x272/0x570 [ 86.271842][ T5360] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 86.274844][ T5360] ext4_xattr_delete_inode+0xa4c/0xc10 [ 86.277835][ T5360] ? ext4_truncate+0xc2d/0x1100 [ 86.279991][ T5360] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 86.282674][ T5360] ext4_evict_inode+0xac9/0xee0 [ 86.284843][ T5360] ? __pfx_ext4_evict_inode+0x10/0x10 [ 86.287407][ T5360] ? do_raw_spin_unlock+0x4d/0x240 [ 86.290113][ T5360] ? __pfx_ext4_evict_inode+0x10/0x10 [ 86.292976][ T5360] evict+0x504/0x9c0 [ 86.294891][ T5360] ? __pfx_evict+0x10/0x10 [ 86.297036][ T5360] ? do_raw_spin_unlock+0x4d/0x240 [ 86.299276][ T5360] ? _raw_spin_unlock+0x28/0x50 [ 86.301534][ T5360] ? iput+0x6d8/0x9d0 [ 86.303247][ T5360] ext4_orphan_cleanup+0xc20/0x1460 [ 86.305509][ T5360] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 86.308092][ T5360] ? ext4_register_li_request+0x259/0x720 [ 86.310866][ T5360] ? errseq_check_and_advance+0x66/0x120 [ 86.313829][ T5360] ext4_fill_super+0x57df/0x6090 [ 86.316517][ T5360] ? __pfx_ext4_fill_super+0x10/0x10 [ 86.318857][ T5360] ? set_blocksize+0x21e/0x500 [ 86.320972][ T5360] ? sb_set_blocksize+0x104/0x180 [ 86.323188][ T5360] ? setup_bdev_super+0x4c1/0x5b0 [ 86.325446][ T5360] get_tree_bdev_flags+0x40e/0x4d0 [ 86.327727][ T5360] ? __pfx_ext4_fill_super+0x10/0x10 [ 86.330047][ T5360] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 86.332657][ T5360] vfs_get_tree+0x92/0x2b0 [ 86.335167][ T5360] do_new_mount+0x2a2/0x9e0 [ 86.337667][ T5360] ? ns_capable+0x8a/0xf0 [ 86.339719][ T5360] ? __pfx_do_new_mount+0x10/0x10 [ 86.342188][ T5360] ? path_mount+0x61c/0xfe0 [ 86.344239][ T5360] ? user_path_at+0x44/0x60 [ 86.346360][ T5360] __se_sys_mount+0x317/0x410 [ 86.348467][ T5360] ? __pfx___se_sys_mount+0x10/0x10 [ 86.350740][ T5360] ? do_syscall_64+0xbe/0x3b0 [ 86.352825][ T5360] ? __x64_sys_mount+0x20/0xc0 [ 86.355146][ T5360] do_syscall_64+0xfa/0x3b0 [ 86.357569][ T5360] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.360487][ T5360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.363505][ T5360] ? clear_bhb_loop+0x60/0xb0 [ 86.365942][ T5360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.368553][ T5360] RIP: 0033:0x7f8e7239034a [ 86.370596][ T5360] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.379592][ T5360] RSP: 002b:00007f8e732f9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.383587][ T5360] RAX: ffffffffffffffda RBX: 00007f8e732f9ef0 RCX: 00007f8e7239034a [ 86.388050][ T5360] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f8e732f9eb0 [ 86.391769][ T5360] RBP: 0000200000000180 R08: 00007f8e732f9ef0 R09: 000000000080078b [ 86.395488][ T5360] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0 [ 86.399248][ T5360] R13: 00007f8e732f9eb0 R14: 0000000000000473 R15: 0000200000000680 [ 86.403127][ T5360] [ 86.404696][ T5360] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.408167][ T5360] CPU: 0 UID: 0 PID: 5360 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.412155][ T5360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.416794][ T5360] Call Trace: [ 86.418455][ T5360] [ 86.419980][ T5360] dump_stack_lvl+0x99/0x250 [ 86.422340][ T5360] ? __asan_memcpy+0x40/0x70 [ 86.424692][ T5360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.427011][ T5360] ? __pfx__printk+0x10/0x10 [ 86.429040][ T5360] vpanic+0x281/0x750 [ 86.430843][ T5360] ? __pfx__printk+0x10/0x10 [ 86.432877][ T5360] ? __pfx_vpanic+0x10/0x10 [ 86.434841][ T5360] ? is_bpf_text_address+0x26/0x2b0 [ 86.437270][ T5360] panic+0xb9/0xc0 [ 86.439399][ T5360] ? __pfx_panic+0x10/0x10 [ 86.441727][ T5360] __warn+0x31b/0x4b0 [ 86.443758][ T5360] ? ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 86.446559][ T5360] ? ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 86.449183][ T5360] report_bug+0x2be/0x4f0 [ 86.451143][ T5360] ? ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 86.453774][ T5360] ? ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 86.456674][ T5360] ? ext4_xattr_inode_update_ref+0x44d/0x5d0 [ 86.459755][ T5360] handle_bug+0x84/0x160 [ 86.461894][ T5360] exc_invalid_op+0x1a/0x50 [ 86.464172][ T5360] asm_exc_invalid_op+0x1a/0x20 [ 86.466455][ T5360] RIP: 0010:ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 86.469410][ T5360] Code: 78 40 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 e8 2c 9d ff 49 8b 37 48 c7 c7 e0 f7 bf 8b 4c 89 ea e8 f6 bd fb fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4c 8b 74 24 20 4c 8b 6c [ 86.478339][ T5360] RSP: 0018:ffffc9000d3272e0 EFLAGS: 00010246 [ 86.481666][ T5360] RAX: f6569af378e04700 RBX: dffffc0000000000 RCX: 0000000000100000 [ 86.485302][ T5360] RDX: ffffc9000de32000 RSI: 0000000000008819 RDI: 000000000000881a [ 86.488942][ T5360] RBP: ffffc9000d3273d0 R08: 0000000000000003 R09: 0000000000000004 [ 86.492628][ T5360] R10: dffffc0000000000 R11: fffffbfff1c3a22c R12: ffffc9000d327340 [ 86.496438][ T5360] R13: ffffffffffffffff R14: 00000000ffffffff R15: ffff888043ae9f88 [ 86.499838][ T5360] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 86.502996][ T5360] ? __kasan_kmalloc+0x93/0xb0 [ 86.505542][ T5360] ? __ext4_journal_ensure_credits+0x30/0x450 [ 86.508359][ T5360] ext4_xattr_inode_dec_ref_all+0x867/0xda0 [ 86.511041][ T5360] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 86.513594][ T5360] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 86.516426][ T5360] ? __ext4_journal_get_write_access+0x272/0x570 [ 86.519410][ T5360] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 86.523323][ T5360] ext4_xattr_delete_inode+0xa4c/0xc10 [ 86.526361][ T5360] ? ext4_truncate+0xc2d/0x1100 [ 86.528664][ T5360] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 86.531510][ T5360] ext4_evict_inode+0xac9/0xee0 [ 86.533645][ T5360] ? __pfx_ext4_evict_inode+0x10/0x10 [ 86.536008][ T5360] ? do_raw_spin_unlock+0x4d/0x240 [ 86.538257][ T5360] ? __pfx_ext4_evict_inode+0x10/0x10 [ 86.540662][ T5360] evict+0x504/0x9c0 [ 86.542695][ T5360] ? __pfx_evict+0x10/0x10 [ 86.545148][ T5360] ? do_raw_spin_unlock+0x4d/0x240 [ 86.547691][ T5360] ? _raw_spin_unlock+0x28/0x50 [ 86.549833][ T5360] ? iput+0x6d8/0x9d0 [ 86.551709][ T5360] ext4_orphan_cleanup+0xc20/0x1460 [ 86.554109][ T5360] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 86.556737][ T5360] ? ext4_register_li_request+0x259/0x720 [ 86.559551][ T5360] ? errseq_check_and_advance+0x66/0x120 [ 86.562564][ T5360] ext4_fill_super+0x57df/0x6090 [ 86.565004][ T5360] ? __pfx_ext4_fill_super+0x10/0x10 [ 86.567462][ T5360] ? set_blocksize+0x21e/0x500 [ 86.569576][ T5360] ? sb_set_blocksize+0x104/0x180 [ 86.571828][ T5360] ? setup_bdev_super+0x4c1/0x5b0 [ 86.574091][ T5360] get_tree_bdev_flags+0x40e/0x4d0 [ 86.576546][ T5360] ? __pfx_ext4_fill_super+0x10/0x10 [ 86.579221][ T5360] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 86.581975][ T5360] vfs_get_tree+0x92/0x2b0 [ 86.584169][ T5360] do_new_mount+0x2a2/0x9e0 [ 86.586300][ T5360] ? ns_capable+0x8a/0xf0 [ 86.588277][ T5360] ? __pfx_do_new_mount+0x10/0x10 [ 86.590608][ T5360] ? path_mount+0x61c/0xfe0 [ 86.592691][ T5360] ? user_path_at+0x44/0x60 [ 86.594842][ T5360] __se_sys_mount+0x317/0x410 [ 86.597145][ T5360] ? __pfx___se_sys_mount+0x10/0x10 [ 86.599658][ T5360] ? do_syscall_64+0xbe/0x3b0 [ 86.601776][ T5360] ? __x64_sys_mount+0x20/0xc0 [ 86.604018][ T5360] do_syscall_64+0xfa/0x3b0 [ 86.606252][ T5360] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.608764][ T5360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.611736][ T5360] ? clear_bhb_loop+0x60/0xb0 [ 86.613898][ T5360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.616625][ T5360] RIP: 0033:0x7f8e7239034a [ 86.618711][ T5360] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.628398][ T5360] RSP: 002b:00007f8e732f9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.632119][ T5360] RAX: ffffffffffffffda RBX: 00007f8e732f9ef0 RCX: 00007f8e7239034a [ 86.635648][ T5360] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f8e732f9eb0 [ 86.639274][ T5360] RBP: 0000200000000180 R08: 00007f8e732f9ef0 R09: 000000000080078b [ 86.642777][ T5360] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0 [ 86.646927][ T5360] R13: 00007f8e732f9eb0 R14: 0000000000000473 R15: 0000200000000680 [ 86.650772][ T5360] [ 86.652475][ T5360] Kernel Offset: disabled [ 86.654411][ T5360] Rebooting in 86400 seconds..