program: creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") [ 84.876650][ T5302] Bluetooth: hci0: command tx timeout [ 84.950798][ T5327] loop0: detected capacity change from 0 to 512 [ 85.000346][ T5327] ------------[ cut here ]------------ [ 85.002686][ T5327] EA inode 11 i_nlink=2 [ 85.002845][ T5327] WARNING: CPU: 0 PID: 5327 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 85.009676][ T5327] Modules linked in: [ 85.011905][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.015697][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.021094][ T5327] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 85.023854][ T5327] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 80 1f 80 8b 4c 89 e6 e8 d7 1d f8 fe 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 23 fe bc 08 44 89 f9 [ 85.032824][ T5327] RSP: 0018:ffffc9000d117100 EFLAGS: 00010246 [ 85.035577][ T5327] RAX: d89b4dfd48cf5500 RBX: 0000000000000001 RCX: 0000000000100000 [ 85.040065][ T5327] RDX: ffffc9000df1a000 RSI: 0000000000009d8e RDI: 0000000000009d8f [ 85.043543][ T5327] RBP: ffffc9000d1171f8 R08: ffff88801fe24293 R09: 1ffff11003fc4852 [ 85.047171][ T5327] R10: dffffc0000000000 R11: ffffed1003fc4853 R12: 000000000000000b [ 85.050582][ T5327] R13: ffff8880430829b0 R14: 1ffff11008610524 R15: ffff888043082920 [ 85.054530][ T5327] FS: 00007fcf3d8ec6c0(0000) GS:ffff88808d733000(0000) knlGS:0000000000000000 [ 85.059004][ T5327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.061899][ T5327] CR2: 00007f28791909c0 CR3: 0000000042678000 CR4: 0000000000352ef0 [ 85.065088][ T5327] Call Trace: [ 85.066851][ T5327] [ 85.068136][ T5327] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 85.070502][ T5327] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 85.073276][ T5327] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 85.075540][ T5327] ext4_xattr_set_entry+0xabb/0x1e20 [ 85.078060][ T5327] ext4_xattr_ibody_set+0x254/0x6a0 [ 85.080443][ T5327] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 85.083396][ T5327] __ext4_expand_extra_isize+0x30d/0x400 [ 85.085726][ T5327] __ext4_mark_inode_dirty+0x46c/0x700 [ 85.088212][ T5327] ext4_evict_inode+0x80d/0xee0 [ 85.090414][ T5327] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.092873][ T5327] ? do_raw_spin_unlock+0x4d/0x240 [ 85.094968][ T5327] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.097867][ T5327] evict+0x504/0x9c0 [ 85.099770][ T5327] ? __pfx_evict+0x10/0x10 [ 85.101795][ T5327] ? do_raw_spin_unlock+0x4d/0x240 [ 85.104075][ T5327] ? _raw_spin_unlock+0x28/0x50 [ 85.106920][ T5327] ? iput+0x946/0xc50 [ 85.108629][ T5327] ext4_orphan_cleanup+0xc20/0x1460 [ 85.110953][ T5327] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 85.113326][ T5327] ? ext4_register_li_request+0x640/0x720 [ 85.115763][ T5327] ? errseq_check_and_advance+0x66/0x120 [ 85.118143][ T5327] ext4_fill_super+0x5920/0x61e0 [ 85.120322][ T5327] ? __pfx_ext4_fill_super+0x10/0x10 [ 85.122650][ T5327] ? snprintf+0xda/0x120 [ 85.124515][ T5327] ? __pfx_snprintf+0x10/0x10 [ 85.126711][ T5327] ? set_blocksize+0x21e/0x500 [ 85.128867][ T5327] ? sb_set_blocksize+0x104/0x180 [ 85.131033][ T5327] ? setup_bdev_super+0x4c1/0x5b0 [ 85.133358][ T5327] get_tree_bdev_flags+0x40e/0x4d0 [ 85.135676][ T5327] ? __pfx_ext4_fill_super+0x10/0x10 [ 85.138282][ T5327] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 85.140789][ T5327] vfs_get_tree+0x92/0x2b0 [ 85.142882][ T5327] do_new_mount+0x302/0xa10 [ 85.144903][ T5327] ? apparmor_capable+0x137/0x1b0 [ 85.147226][ T5327] ? __pfx_do_new_mount+0x10/0x10 [ 85.149371][ T5327] ? ns_capable+0x8a/0xf0 [ 85.151269][ T5327] ? kmem_cache_free+0x19b/0x690 [ 85.153492][ T5327] __se_sys_mount+0x313/0x410 [ 85.155561][ T5327] ? __pfx___se_sys_mount+0x10/0x10 [ 85.157999][ T5327] ? do_syscall_64+0xbe/0xfa0 [ 85.159982][ T5327] ? __x64_sys_mount+0x20/0xc0 [ 85.161929][ T5327] do_syscall_64+0xfa/0xfa0 [ 85.163872][ T5327] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.166280][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.168908][ T5327] ? clear_bhb_loop+0x60/0xb0 [ 85.170972][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.173517][ T5327] RIP: 0033:0x7fcf3c99076a [ 85.175480][ T5327] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.183858][ T5327] RSP: 002b:00007fcf3d8ebe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.187570][ T5327] RAX: ffffffffffffffda RBX: 00007fcf3d8ebef0 RCX: 00007fcf3c99076a [ 85.190935][ T5327] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fcf3d8ebeb0 [ 85.194457][ T5327] RBP: 0000200000000180 R08: 00007fcf3d8ebef0 R09: 0000000000800718 [ 85.198114][ T5327] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 85.201968][ T5327] R13: 00007fcf3d8ebeb0 R14: 000000000000046f R15: 0000200000000680 [ 85.205407][ T5327] [ 85.207204][ T5327] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.210402][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.214487][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.219221][ T5327] Call Trace: [ 85.220715][ T5327] [ 85.222107][ T5327] dump_stack_lvl+0x99/0x250 [ 85.224281][ T5327] ? __asan_memcpy+0x40/0x70 [ 85.226497][ T5327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.228709][ T5327] ? __pfx__printk+0x10/0x10 [ 85.230718][ T5327] vpanic+0x237/0x6d0 [ 85.232455][ T5327] ? __pfx_vpanic+0x10/0x10 [ 85.234605][ T5327] panic+0xb9/0xc0 [ 85.236296][ T5327] ? __pfx_panic+0x10/0x10 [ 85.238265][ T5327] __warn+0x31b/0x4b0 [ 85.240074][ T5327] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 85.242937][ T5327] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 85.245584][ T5327] report_bug+0x2be/0x4f0 [ 85.247503][ T5327] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 85.250185][ T5327] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 85.252804][ T5327] ? ext4_xattr_inode_update_ref+0x51c/0x5b0 [ 85.255505][ T5327] handle_bug+0x84/0x160 [ 85.257420][ T5327] exc_invalid_op+0x1a/0x50 [ 85.259473][ T5327] asm_exc_invalid_op+0x1a/0x20 [ 85.261646][ T5327] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 85.264478][ T5327] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 80 1f 80 8b 4c 89 e6 e8 d7 1d f8 fe 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 23 fe bc 08 44 89 f9 [ 85.273330][ T5327] RSP: 0018:ffffc9000d117100 EFLAGS: 00010246 [ 85.275972][ T5327] RAX: d89b4dfd48cf5500 RBX: 0000000000000001 RCX: 0000000000100000 [ 85.279238][ T5327] RDX: ffffc9000df1a000 RSI: 0000000000009d8e RDI: 0000000000009d8f [ 85.282546][ T5327] RBP: ffffc9000d1171f8 R08: ffff88801fe24293 R09: 1ffff11003fc4852 [ 85.285896][ T5327] R10: dffffc0000000000 R11: ffffed1003fc4853 R12: 000000000000000b [ 85.289297][ T5327] R13: ffff8880430829b0 R14: 1ffff11008610524 R15: ffff888043082920 [ 85.292674][ T5327] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 85.295218][ T5327] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 85.297995][ T5327] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 85.300388][ T5327] ext4_xattr_set_entry+0xabb/0x1e20 [ 85.302766][ T5327] ext4_xattr_ibody_set+0x254/0x6a0 [ 85.305129][ T5327] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 85.307704][ T5327] __ext4_expand_extra_isize+0x30d/0x400 [ 85.310149][ T5327] __ext4_mark_inode_dirty+0x46c/0x700 [ 85.312497][ T5327] ext4_evict_inode+0x80d/0xee0 [ 85.314614][ T5327] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.316904][ T5327] ? do_raw_spin_unlock+0x4d/0x240 [ 85.319139][ T5327] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.321397][ T5327] evict+0x504/0x9c0 [ 85.323136][ T5327] ? __pfx_evict+0x10/0x10 [ 85.325074][ T5327] ? do_raw_spin_unlock+0x4d/0x240 [ 85.327328][ T5327] ? _raw_spin_unlock+0x28/0x50 [ 85.329458][ T5327] ? iput+0x946/0xc50 [ 85.331381][ T5327] ext4_orphan_cleanup+0xc20/0x1460 [ 85.334326][ T5327] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 85.336687][ T5327] ? ext4_register_li_request+0x640/0x720 [ 85.339121][ T5327] ? errseq_check_and_advance+0x66/0x120 [ 85.341641][ T5327] ext4_fill_super+0x5920/0x61e0 [ 85.343852][ T5327] ? __pfx_ext4_fill_super+0x10/0x10 [ 85.346184][ T5327] ? snprintf+0xda/0x120 [ 85.348072][ T5327] ? __pfx_snprintf+0x10/0x10 [ 85.350149][ T5327] ? set_blocksize+0x21e/0x500 [ 85.352172][ T5327] ? sb_set_blocksize+0x104/0x180 [ 85.354398][ T5327] ? setup_bdev_super+0x4c1/0x5b0 [ 85.356588][ T5327] get_tree_bdev_flags+0x40e/0x4d0 [ 85.358784][ T5327] ? __pfx_ext4_fill_super+0x10/0x10 [ 85.361070][ T5327] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 85.363484][ T5327] vfs_get_tree+0x92/0x2b0 [ 85.365368][ T5327] do_new_mount+0x302/0xa10 [ 85.367251][ T5327] ? apparmor_capable+0x137/0x1b0 [ 85.369414][ T5327] ? __pfx_do_new_mount+0x10/0x10 [ 85.371624][ T5327] ? ns_capable+0x8a/0xf0 [ 85.373544][ T5327] ? kmem_cache_free+0x19b/0x690 [ 85.375707][ T5327] __se_sys_mount+0x313/0x410 [ 85.377799][ T5327] ? __pfx___se_sys_mount+0x10/0x10 [ 85.380112][ T5327] ? do_syscall_64+0xbe/0xfa0 [ 85.382299][ T5327] ? __x64_sys_mount+0x20/0xc0 [ 85.384401][ T5327] do_syscall_64+0xfa/0xfa0 [ 85.386403][ T5327] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.388573][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.391179][ T5327] ? clear_bhb_loop+0x60/0xb0 [ 85.393210][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.395761][ T5327] RIP: 0033:0x7fcf3c99076a [ 85.397813][ T5327] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.406728][ T5327] RSP: 002b:00007fcf3d8ebe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.410728][ T5327] RAX: ffffffffffffffda RBX: 00007fcf3d8ebef0 RCX: 00007fcf3c99076a [ 85.414114][ T5327] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fcf3d8ebeb0 [ 85.417513][ T5327] RBP: 0000200000000180 R08: 00007fcf3d8ebef0 R09: 0000000000800718 [ 85.420645][ T5327] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 85.424041][ T5327] R13: 00007fcf3d8ebeb0 R14: 000000000000046f R15: 0000200000000680 [ 85.427463][ T5327] [ 85.429139][ T5327] Kernel Offset: disabled [ 85.431004][ T5327] Rebooting in 86400 seconds..