program: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) shmdt(0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYuiIKIo6KEeY7ItodtGmii2FpuKeBKkoGfxKPoXeBNB1JPg1ZMnKRTtpa2nyMzOpJttNrFmk4nd3w82+74z7+48T+br3ffdDaBrDWV/kogdEfFbRAw0qksbDDWerl05N3n9yrnJJBYWXv8zydtdvXJusmxavm57URlOI9KPkmIjS82eOXtiol6vnS7qo3Mn3x6dPXP2iXdPThyvHa+dGj9y5PChsaefGn+yI3lmeV3d98HM/r0vvnnxlcmjF9/66Zss3h3F+uY8OmUoS/yvhVzrukc7vbGK7WwqJ70VBsIt6YmIbHf15ef/QPTEjZ03EC98WGlwwLrK7k1b2q+eXwBuY0lUHQFQjfJGn33+LR8b1PXYFC4/2/gAlOV9rXg01vRGWrTpa/l820lDEXF0/u8vskes0zgEAECzTyY/fzl7fv/61y9lfY+BxTVp3JM//57/3VXMoQxGxJ0RsTsi7oqIPRFxd0Te9t6IuG+N8dzc/0kvrfEtV5T1/54p5raW9v/K3l8M9hS1nXn+fcmx6XrtYPE/GY6+LVl9bIVtfPf8r5+2W9fc/8se2fbLvmARx6XelgG6qYm5ibxT2gGXL0Ts610u/2RxJiCJiL0Rse/W3npXWZh+7Kv97Rqtnv8KOjDPtPBllt58lv98tORfSprnJ6dvmp8c3Rr12sHR8qi42c+/fPxau+2vKf8OuFxrPDft/9Ymg0nzfO1sZ7f/H4//tD95I59n7i+WvTcxN3d6LKI/yS9nS5eP33htWS/bZ8f/8IHlz//dxWuy/O+PiOwgfiAiHoyIh4rYH46IRyLiwAo5/vjc6vlHWtH+vxAxtez1b/H4b9n/t17oOfHDt+22/+/2/+G8NFwsya9/q1gunOxy0RrgWv53AAAA8H+R5t+BT9KRxXKajow0vsO/J+5I6zOzc48fm3nn1FTju/KD0ZeWI10DxXhofbpeG0vmi3dsjI+OF2PF5XjpoWLc+LOebXl9ZHKmPlVx7tDttrc5/zN/9FQdHbDOti27dLx/wwMBKtA6j54urZ5/NVwM4Hbl99rQvVY5/9ONigPYeO7/0L2WO//Pt9TNBcDtyf0fupfzH7pU+n3VEQAVcv+HrrSW3/WvY2Hr5gijmsJm3Sl5IaIspJsiHoV1KlR9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiMfwIAAP//2wzmew==") [ 76.065027][ T4708] Bluetooth: hci0: command tx timeout [ 76.150965][ T5360] loop0: detected capacity change from 0 to 512 [ 76.236603][ T5360] EXT4-fs warning (device loop0): ext4_xattr_inode_get:542: inode #11: comm syz.0.0: ea_inode file size=0 entry size=6 [ 76.242207][ T5360] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 76.269372][ T5360] ------------[ cut here ]------------ [ 76.271773][ T5360] EA inode 11 i_nlink=2 [ 76.271934][ T5360] WARNING: CPU: 0 PID: 5360 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x534/0x5d0 [ 76.278125][ T5360] Modules linked in: [ 76.280177][ T5360] CPU: 0 UID: 0 PID: 5360 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.284363][ T5360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.290146][ T5360] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 76.292924][ T5360] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 60 f7 bf 8b 4c 89 fe e8 7d c9 fb fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 f4 b5 [ 76.301562][ T5360] RSP: 0018:ffffc9000d4c72e0 EFLAGS: 00010246 [ 76.304253][ T5360] RAX: 3bc754a31ff08c00 RBX: dffffc0000000000 RCX: 0000000000100000 [ 76.308278][ T5360] RDX: ffffc9000e16a000 RSI: 0000000000007ef9 RDI: 0000000000007efa [ 76.312351][ T5360] RBP: ffffc9000d4c73d0 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 76.316322][ T5360] R10: dffffc0000000000 R11: ffffed1003f8484b R12: ffff88804c969600 [ 76.319726][ T5360] R13: 1ffff1100992d2c0 R14: 00000000ffffffff R15: 000000000000000b [ 76.322936][ T5360] FS: 00007f13754d66c0(0000) GS:ffff88808d00a000(0000) knlGS:0000000000000000 [ 76.326890][ T5360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.329875][ T5360] CR2: 000055986c2b0660 CR3: 000000004291c000 CR4: 0000000000352ef0 [ 76.333178][ T5360] Call Trace: [ 76.334761][ T5360] [ 76.336082][ T5360] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 76.338829][ T5360] ? __kasan_kmalloc+0x93/0xb0 [ 76.340968][ T5360] ? __ext4_journal_ensure_credits+0x30/0x450 [ 76.343574][ T5360] ext4_xattr_inode_dec_ref_all+0x867/0xda0 [ 76.346342][ T5360] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 76.348678][ T5360] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 76.351354][ T5360] ? __ext4_journal_get_write_access+0x272/0x570 [ 76.354113][ T5360] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 76.357346][ T5360] ext4_xattr_delete_inode+0xa4c/0xc10 [ 76.359616][ T5360] ? ext4_truncate+0xc2d/0x1100 [ 76.361688][ T5360] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 76.364890][ T5360] ext4_evict_inode+0xac9/0xee0 [ 76.367289][ T5360] ? __pfx_ext4_evict_inode+0x10/0x10 [ 76.369914][ T5360] ? do_raw_spin_unlock+0x4d/0x240 [ 76.372544][ T5360] ? __pfx_ext4_evict_inode+0x10/0x10 [ 76.375792][ T5360] evict+0x501/0x9c0 [ 76.377805][ T5360] ? __pfx_evict+0x10/0x10 [ 76.379810][ T5360] ? do_raw_spin_unlock+0x4d/0x240 [ 76.381977][ T5360] ? _raw_spin_unlock+0x28/0x50 [ 76.384101][ T5360] ? iput+0x6d8/0x9d0 [ 76.385983][ T5360] ext4_orphan_cleanup+0xc20/0x1460 [ 76.388247][ T5360] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 76.390649][ T5360] ? ext4_register_li_request+0x640/0x720 [ 76.393102][ T5360] ? errseq_check_and_advance+0x66/0x120 [ 76.395546][ T5360] ext4_fill_super+0x57df/0x6090 [ 76.397727][ T5360] ? __pfx_ext4_fill_super+0x10/0x10 [ 76.399941][ T5360] ? set_blocksize+0x21e/0x500 [ 76.402000][ T5360] ? sb_set_blocksize+0x104/0x180 [ 76.404133][ T5360] ? setup_bdev_super+0x4c1/0x5b0 [ 76.406448][ T5360] get_tree_bdev_flags+0x40b/0x4d0 [ 76.408751][ T5360] ? __pfx_ext4_fill_super+0x10/0x10 [ 76.411191][ T5360] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 76.413646][ T5360] vfs_get_tree+0x92/0x2b0 [ 76.415688][ T5360] do_new_mount+0x2a2/0x9e0 [ 76.417656][ T5360] ? ns_capable+0x8a/0xf0 [ 76.419457][ T5360] ? __pfx_do_new_mount+0x10/0x10 [ 76.421550][ T5360] ? path_mount+0x61c/0xfe0 [ 76.423462][ T5360] ? user_path_at+0x44/0x60 [ 76.425519][ T5360] __se_sys_mount+0x317/0x410 [ 76.427450][ T5360] ? __pfx___se_sys_mount+0x10/0x10 [ 76.429631][ T5360] ? rcu_is_watching+0x15/0xb0 [ 76.431624][ T5360] ? trace_sys_enter+0x25/0x100 [ 76.433709][ T5360] ? __x64_sys_mount+0x20/0xc0 [ 76.439177][ T5360] do_syscall_64+0xfa/0x3b0 [ 76.441132][ T5360] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.443296][ T5360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.445829][ T5360] ? clear_bhb_loop+0x60/0xb0 [ 76.447781][ T5360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.450132][ T5360] RIP: 0033:0x7f137459034a [ 76.452139][ T5360] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.460751][ T5360] RSP: 002b:00007f13754d5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.464235][ T5360] RAX: ffffffffffffffda RBX: 00007f13754d5ef0 RCX: 00007f137459034a [ 76.468022][ T5360] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f13754d5eb0 [ 76.471387][ T5360] RBP: 0000200000000180 R08: 00007f13754d5ef0 R09: 0000000000800700 [ 76.475550][ T5360] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 76.478967][ T5360] R13: 00007f13754d5eb0 R14: 0000000000000473 R15: 0000200000000680 [ 76.482261][ T5360] [ 76.483558][ T5360] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.486741][ T5360] CPU: 0 UID: 0 PID: 5360 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.490604][ T5360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.495418][ T5360] Call Trace: [ 76.496904][ T5360] [ 76.498229][ T5360] dump_stack_lvl+0x99/0x250 [ 76.500232][ T5360] ? __asan_memcpy+0x40/0x70 [ 76.502295][ T5360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.504696][ T5360] ? __pfx__printk+0x10/0x10 [ 76.506876][ T5360] vpanic+0x281/0x750 [ 76.508605][ T5360] ? __pfx__printk+0x10/0x10 [ 76.510673][ T5360] ? __pfx_vpanic+0x10/0x10 [ 76.512657][ T5360] ? is_bpf_text_address+0x26/0x2b0 [ 76.514878][ T5360] panic+0xb9/0xc0 [ 76.516375][ T5360] ? __pfx_panic+0x10/0x10 [ 76.518363][ T5360] __warn+0x31b/0x4b0 [ 76.520097][ T5360] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 76.522800][ T5360] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 76.525957][ T5360] report_bug+0x2be/0x4f0 [ 76.527885][ T5360] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 76.530538][ T5360] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 76.533229][ T5360] ? ext4_xattr_inode_update_ref+0x536/0x5d0 [ 76.536032][ T5360] handle_bug+0x84/0x160 [ 76.537939][ T5360] exc_invalid_op+0x1a/0x50 [ 76.539993][ T5360] asm_exc_invalid_op+0x1a/0x20 [ 76.542104][ T5360] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 76.544935][ T5360] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 60 f7 bf 8b 4c 89 fe e8 7d c9 fb fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 f4 b5 [ 76.553221][ T5360] RSP: 0018:ffffc9000d4c72e0 EFLAGS: 00010246 [ 76.555634][ T5360] RAX: 3bc754a31ff08c00 RBX: dffffc0000000000 RCX: 0000000000100000 [ 76.558869][ T5360] RDX: ffffc9000e16a000 RSI: 0000000000007ef9 RDI: 0000000000007efa [ 76.562242][ T5360] RBP: ffffc9000d4c73d0 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 76.565678][ T5360] R10: dffffc0000000000 R11: ffffed1003f8484b R12: ffff88804c969600 [ 76.569073][ T5360] R13: 1ffff1100992d2c0 R14: 00000000ffffffff R15: 000000000000000b [ 76.572481][ T5360] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 76.575449][ T5360] ? __kasan_kmalloc+0x93/0xb0 [ 76.577563][ T5360] ? __ext4_journal_ensure_credits+0x30/0x450 [ 76.580243][ T5360] ext4_xattr_inode_dec_ref_all+0x867/0xda0 [ 76.582806][ T5360] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 76.585497][ T5360] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 76.588346][ T5360] ? __ext4_journal_get_write_access+0x272/0x570 [ 76.591161][ T5360] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 76.594052][ T5360] ext4_xattr_delete_inode+0xa4c/0xc10 [ 76.596457][ T5360] ? ext4_truncate+0xc2d/0x1100 [ 76.598609][ T5360] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 76.601316][ T5360] ext4_evict_inode+0xac9/0xee0 [ 76.603551][ T5360] ? __pfx_ext4_evict_inode+0x10/0x10 [ 76.605958][ T5360] ? do_raw_spin_unlock+0x4d/0x240 [ 76.608240][ T5360] ? __pfx_ext4_evict_inode+0x10/0x10 [ 76.610663][ T5360] evict+0x501/0x9c0 [ 76.612357][ T5360] ? __pfx_evict+0x10/0x10 [ 76.614361][ T5360] ? do_raw_spin_unlock+0x4d/0x240 [ 76.616631][ T5360] ? _raw_spin_unlock+0x28/0x50 [ 76.618777][ T5360] ? iput+0x6d8/0x9d0 [ 76.620550][ T5360] ext4_orphan_cleanup+0xc20/0x1460 [ 76.622912][ T5360] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 76.625473][ T5360] ? ext4_register_li_request+0x640/0x720 [ 76.627993][ T5360] ? errseq_check_and_advance+0x66/0x120 [ 76.630419][ T5360] ext4_fill_super+0x57df/0x6090 [ 76.632652][ T5360] ? __pfx_ext4_fill_super+0x10/0x10 [ 76.634978][ T5360] ? set_blocksize+0x21e/0x500 [ 76.637027][ T5360] ? sb_set_blocksize+0x104/0x180 [ 76.639375][ T5360] ? setup_bdev_super+0x4c1/0x5b0 [ 76.641606][ T5360] get_tree_bdev_flags+0x40b/0x4d0 [ 76.643668][ T5360] ? __pfx_ext4_fill_super+0x10/0x10 [ 76.645934][ T5360] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 76.648395][ T5360] vfs_get_tree+0x92/0x2b0 [ 76.650396][ T5360] do_new_mount+0x2a2/0x9e0 [ 76.652436][ T5360] ? ns_capable+0x8a/0xf0 [ 76.654507][ T5360] ? __pfx_do_new_mount+0x10/0x10 [ 76.656789][ T5360] ? path_mount+0x61c/0xfe0 [ 76.658873][ T5360] ? user_path_at+0x44/0x60 [ 76.661004][ T5360] __se_sys_mount+0x317/0x410 [ 76.663162][ T5360] ? __pfx___se_sys_mount+0x10/0x10 [ 76.665571][ T5360] ? rcu_is_watching+0x15/0xb0 [ 76.667601][ T5360] ? trace_sys_enter+0x25/0x100 [ 76.669619][ T5360] ? __x64_sys_mount+0x20/0xc0 [ 76.671773][ T5360] do_syscall_64+0xfa/0x3b0 [ 76.673860][ T5360] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.676237][ T5360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.678894][ T5360] ? clear_bhb_loop+0x60/0xb0 [ 76.681022][ T5360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.683555][ T5360] RIP: 0033:0x7f137459034a [ 76.685572][ T5360] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.693834][ T5360] RSP: 002b:00007f13754d5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.697478][ T5360] RAX: ffffffffffffffda RBX: 00007f13754d5ef0 RCX: 00007f137459034a [ 76.700845][ T5360] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f13754d5eb0 [ 76.704336][ T5360] RBP: 0000200000000180 R08: 00007f13754d5ef0 R09: 0000000000800700 [ 76.707805][ T5360] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 76.711253][ T5360] R13: 00007f13754d5eb0 R14: 0000000000000473 R15: 0000200000000680 [ 76.715222][ T5360] [ 76.716881][ T5360] Kernel Offset: disabled [ 76.718777][ T5360] Rebooting in 86400 seconds..