program: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x7, @empty, 0xfffffffd}, 0x1c) sendmmsg$inet(r0, &(0x7f0000004e80)=[{{&(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000480)="f9", 0x1}], 0x1}}], 0x1, 0x4000040) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1}, 0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0), 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey72WYTYzadmP18YHafZ+bZnee7z7w8+zy7AXStoewhidgREb9GxEAju7jAUOPp+tXzkzeunp9MYmHhtT+SvNy1q+cny6Ll67YXmeE0Iv0wKXay2OzZcycn6vXamSI/OnfqrdHZs+eeeOfUxInaidrp8SNHDh8ae/qp8Sc7EmcW17V978/s3/viG5denjx26c0fv87qu6PY3hxHpwxlgf+5kGvd9mind1axnU3ppLfCirAqPRGRNVdffv4PRE/caryBeOGDSisHrKvs3rSl/eb5BWATS6LqGgDVKG/02fffcrlDXY8N4cqzjS9AWdzXi6WxpTfSokxfy/fbThqKiGPzf32eLbFO4xAAAM0+nvzsaH9EvHfjq5eyvsdARJTjQffkj7/lj7uKOZTBiPh/ROyOiLsiYk9E3F2UvTci7ltjfW7v/6SX1/iWy8r6f88Uc1uL+39l7y8Ge4rczjz+vuT4dL12sPhMhqNvS5YfW2Yf3z7/yyfttjX3/7Il23/ZFyzqcbm3ZYBuamJuIu+UdsCVixH7epeKP7k5E5BExN6I2Le6t95VJqYf+3J/u0Irx7+MDswzLXyRhTefxT8fLfGXkub5yenb5idHt0a9dnC0PCpu99PPH73abv9rir8DrtQaz03t31pkMGmer53t7P7/5fGf9iev5/PM/cW6dyfm5s6MRfQnR/P8ovXjt15b5svy2fE/fGDp83938Zos/vsjIjuIH4iIByPioaLuD0fEIxFxYJkYf3hu5fgjraj9L0ZMLXn9u3n8t7T/6hM9J7//pt3+/1n7H85Tw8Wa/Pq3gqWqk10uWiu4ls8OAAAA/ivS/DfwSTpyM52mIyON3/Dvif+l9ZnZucePz7x9eqrxW/nB6EvLka6BYjy0Pl2vjSXzxTs2xkfHi7Hicrz0UDFu/GnPtjw/MjlTn6o4duh229uc/5nfe6quHbDOti25drz/jlcEqEDrPHq6OHvhlXAxgM3K/7Whe61w/jf/DwbYZNz/oXstdf5faMmbC4DNyf0fupfzH7pU+l3VNQAq5P4PXWkt/+tfx8TWjVGNahIbtVHyRESZSDdEfSTWKVH1lQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAz/g4AAP//K2Lmiw==") [ 86.589955][ T5298] Bluetooth: hci0: command tx timeout [ 86.850869][ T5324] loop0: detected capacity change from 0 to 512 [ 86.888725][ T5324] ------------[ cut here ]------------ [ 86.891374][ T5324] EA inode 11 i_nlink=0 [ 86.891422][ T5324] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x4c9/0x5a0, CPU#0: syz.0.0/5324 [ 86.898033][ T5324] Modules linked in: [ 86.899908][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.903931][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.908523][ T5324] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0 [ 86.911496][ T5324] Code: 74 08 4c 89 ef e8 cf 2a 96 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 2b 4e 13 09 44 89 [ 86.920052][ T5324] RSP: 0018:ffffc9000f5df240 EFLAGS: 00010246 [ 86.922719][ T5324] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000 [ 86.926310][ T5324] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff901840e0 [ 86.929943][ T5324] RBP: ffffc9000f5df330 R08: ffff8880477297bf R09: 1ffff11008ee52f7 [ 86.933435][ T5324] R10: dffffc0000000000 R11: ffffed1008ee52f8 R12: ffffffff901840e0 [ 86.937088][ T5324] R13: 000000000000000b R14: 1ffff11008ee52c2 R15: ffff888047729610 [ 86.940650][ T5324] FS: 00007fa0d53e66c0(0000) GS:ffff88808ca5d000(0000) knlGS:0000000000000000 [ 86.944602][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.947578][ T5324] CR2: 00007f2d87695000 CR3: 0000000039099000 CR4: 0000000000352ef0 [ 86.951076][ T5324] Call Trace: [ 86.952612][ T5324] [ 86.953980][ T5324] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 86.957219][ T5324] ? __kmalloc_cache_noprof+0x31c/0x660 [ 86.959706][ T5324] ? ext4_xattr_inode_dec_ref_all+0x4d2/0xe40 [ 86.962379][ T5324] ? __ext4_journal_ensure_credits+0x30/0x450 [ 86.965496][ T5324] ext4_xattr_inode_dec_ref_all+0x8cb/0xe40 [ 86.968116][ T5324] ? __mark_inode_dirty+0xb66/0x1470 [ 86.970613][ T5324] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 86.973390][ T5324] ? __ext4_journal_get_write_access+0x27f/0x590 [ 86.976063][ T5324] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 86.978973][ T5324] ext4_xattr_delete_inode+0xb45/0xd10 [ 86.981423][ T5324] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 86.984135][ T5324] ext4_evict_inode+0xa63/0xeb0 [ 86.986418][ T5324] ? __pfx_ext4_evict_inode+0x10/0x10 [ 86.988727][ T5324] ? do_raw_spin_unlock+0x4d/0x210 [ 86.991004][ T5324] ? __pfx_ext4_evict_inode+0x10/0x10 [ 86.993289][ T5324] evict+0x61e/0xb10 [ 86.995199][ T5324] ? __pfx_evict+0x10/0x10 [ 86.997288][ T5324] ? _raw_spin_unlock+0x28/0x50 [ 86.999487][ T5324] ? iput+0xb25/0xe80 [ 87.001269][ T5324] ext4_orphan_cleanup+0xc38/0x1470 [ 87.003561][ T5324] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 87.006184][ T5324] ? ext4_register_li_request+0x640/0x720 [ 87.008758][ T5324] ? errseq_check_and_advance+0x66/0x120 [ 87.011312][ T5324] ext4_fill_super+0x59ff/0x6320 [ 87.013546][ T5324] ? __pfx_ext4_fill_super+0x10/0x10 [ 87.015976][ T5324] ? snprintf+0xe8/0x140 [ 87.017845][ T5324] ? __pfx_snprintf+0x10/0x10 [ 87.019879][ T5324] ? set_blocksize+0x1c9/0x440 [ 87.021984][ T5324] ? sb_set_blocksize+0x155/0x240 [ 87.024200][ T5324] ? setup_bdev_super+0x4c1/0x5b0 [ 87.026335][ T5324] get_tree_bdev_flags+0x431/0x4f0 [ 87.028331][ T5324] ? __pfx_ext4_fill_super+0x10/0x10 [ 87.030448][ T5324] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 87.032654][ T5324] vfs_get_tree+0x92/0x2a0 [ 87.034463][ T5324] do_new_mount+0x341/0xd30 [ 87.036464][ T5324] ? apparmor_capable+0x137/0x1a0 [ 87.038749][ T5324] ? __pfx_do_new_mount+0x10/0x10 [ 87.040959][ T5324] ? ns_capable+0x89/0xe0 [ 87.043300][ T5324] ? user_path_at+0xd4/0x160 [ 87.046010][ T5324] __se_sys_mount+0x31d/0x420 [ 87.048511][ T5324] ? __pfx___se_sys_mount+0x10/0x10 [ 87.051206][ T5324] ? __x64_sys_mount+0x20/0xc0 [ 87.053328][ T5324] do_syscall_64+0x14d/0xf80 [ 87.055512][ T5324] ? trace_irq_disable+0x3b/0x150 [ 87.057728][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.060711][ T5324] ? clear_bhb_loop+0x40/0x90 [ 87.063127][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.065751][ T5324] RIP: 0033:0x7fa0d459d20a [ 87.067722][ T5324] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.075458][ T5324] RSP: 002b:00007fa0d53e5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.078866][ T5324] RAX: ffffffffffffffda RBX: 00007fa0d53e5ee0 RCX: 00007fa0d459d20a [ 87.082188][ T5324] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa0d53e5ea0 [ 87.085735][ T5324] RBP: 0000200000000180 R08: 00007fa0d53e5ee0 R09: 0000000000800700 [ 87.088889][ T5324] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 87.091944][ T5324] R13: 00007fa0d53e5ea0 R14: 000000000000046f R15: 00002000000007c0 [ 87.095129][ T5324] [ 87.096368][ T5324] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.099448][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.103244][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.107570][ T5324] Call Trace: [ 87.109053][ T5324] [ 87.110408][ T5324] vpanic+0x56c/0xa60 [ 87.112263][ T5324] ? __pfx__printk+0x10/0x10 [ 87.114270][ T5324] ? __pfx_vpanic+0x10/0x10 [ 87.116249][ T5324] ? is_bpf_text_address+0x292/0x2b0 [ 87.118566][ T5324] ? is_bpf_text_address+0x26/0x2b0 [ 87.120888][ T5324] panic+0xc5/0xd0 [ 87.122531][ T5324] ? __pfx_panic+0x10/0x10 [ 87.124565][ T5324] __warn+0x315/0x4f0 [ 87.126333][ T5324] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 87.128954][ T5324] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 87.131777][ T5324] __report_bug+0x29a/0x540 [ 87.135450][ T5324] ? ext4_get_group_desc+0x434/0x4e0 [ 87.137763][ T5324] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 87.140204][ T5324] ? __pfx___report_bug+0x10/0x10 [ 87.142437][ T5324] ? set_normalized_timespec64+0xf0/0x1a0 [ 87.144680][ T5324] ? __ext4_journal_get_write_access+0x84/0x590 [ 87.147264][ T5324] report_bug_entry+0x19a/0x290 [ 87.149376][ T5324] ? ext4_xattr_inode_update_ref+0x511/0x5a0 [ 87.152000][ T5324] ? ext4_xattr_inode_update_ref+0x516/0x5a0 [ 87.154542][ T5324] handle_bug+0xca/0x200 [ 87.156424][ T5324] exc_invalid_op+0x1a/0x50 [ 87.158560][ T5324] asm_exc_invalid_op+0x1a/0x20 [ 87.160525][ T5324] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0 [ 87.163375][ T5324] Code: 74 08 4c 89 ef e8 cf 2a 96 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 2b 4e 13 09 44 89 [ 87.171761][ T5324] RSP: 0018:ffffc9000f5df240 EFLAGS: 00010246 [ 87.174902][ T5324] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000 [ 87.178789][ T5324] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff901840e0 [ 87.182390][ T5324] RBP: ffffc9000f5df330 R08: ffff8880477297bf R09: 1ffff11008ee52f7 [ 87.185823][ T5324] R10: dffffc0000000000 R11: ffffed1008ee52f8 R12: ffffffff901840e0 [ 87.189242][ T5324] R13: 000000000000000b R14: 1ffff11008ee52c2 R15: ffff888047729610 [ 87.192930][ T5324] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 87.195645][ T5324] ? __kmalloc_cache_noprof+0x31c/0x660 [ 87.198171][ T5324] ? ext4_xattr_inode_dec_ref_all+0x4d2/0xe40 [ 87.200744][ T5324] ? __ext4_journal_ensure_credits+0x30/0x450 [ 87.203399][ T5324] ext4_xattr_inode_dec_ref_all+0x8cb/0xe40 [ 87.205944][ T5324] ? __mark_inode_dirty+0xb66/0x1470 [ 87.208229][ T5324] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 87.210764][ T5324] ? __ext4_journal_get_write_access+0x27f/0x590 [ 87.213207][ T5324] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 87.215910][ T5324] ext4_xattr_delete_inode+0xb45/0xd10 [ 87.218174][ T5324] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 87.220621][ T5324] ext4_evict_inode+0xa63/0xeb0 [ 87.222610][ T5324] ? __pfx_ext4_evict_inode+0x10/0x10 [ 87.224807][ T5324] ? do_raw_spin_unlock+0x4d/0x210 [ 87.226925][ T5324] ? __pfx_ext4_evict_inode+0x10/0x10 [ 87.229118][ T5324] evict+0x61e/0xb10 [ 87.230795][ T5324] ? __pfx_evict+0x10/0x10 [ 87.232626][ T5324] ? _raw_spin_unlock+0x28/0x50 [ 87.234664][ T5324] ? iput+0xb25/0xe80 [ 87.236288][ T5324] ext4_orphan_cleanup+0xc38/0x1470 [ 87.238465][ T5324] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 87.240721][ T5324] ? ext4_register_li_request+0x640/0x720 [ 87.242976][ T5324] ? errseq_check_and_advance+0x66/0x120 [ 87.245174][ T5324] ext4_fill_super+0x59ff/0x6320 [ 87.247211][ T5324] ? __pfx_ext4_fill_super+0x10/0x10 [ 87.249349][ T5324] ? snprintf+0xe8/0x140 [ 87.251060][ T5324] ? __pfx_snprintf+0x10/0x10 [ 87.253052][ T5324] ? set_blocksize+0x1c9/0x440 [ 87.255043][ T5324] ? sb_set_blocksize+0x155/0x240 [ 87.257098][ T5324] ? setup_bdev_super+0x4c1/0x5b0 [ 87.259178][ T5324] get_tree_bdev_flags+0x431/0x4f0 [ 87.261273][ T5324] ? __pfx_ext4_fill_super+0x10/0x10 [ 87.263465][ T5324] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 87.265775][ T5324] vfs_get_tree+0x92/0x2a0 [ 87.267614][ T5324] do_new_mount+0x341/0xd30 [ 87.269532][ T5324] ? apparmor_capable+0x137/0x1a0 [ 87.271568][ T5324] ? __pfx_do_new_mount+0x10/0x10 [ 87.273747][ T5324] ? ns_capable+0x89/0xe0 [ 87.275582][ T5324] ? user_path_at+0xd4/0x160 [ 87.277576][ T5324] __se_sys_mount+0x31d/0x420 [ 87.279705][ T5324] ? __pfx___se_sys_mount+0x10/0x10 [ 87.281989][ T5324] ? __x64_sys_mount+0x20/0xc0 [ 87.284134][ T5324] do_syscall_64+0x14d/0xf80 [ 87.286242][ T5324] ? trace_irq_disable+0x3b/0x150 [ 87.288472][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.291257][ T5324] ? clear_bhb_loop+0x40/0x90 [ 87.293341][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.295815][ T5324] RIP: 0033:0x7fa0d459d20a [ 87.297810][ T5324] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.305924][ T5324] RSP: 002b:00007fa0d53e5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.309550][ T5324] RAX: ffffffffffffffda RBX: 00007fa0d53e5ee0 RCX: 00007fa0d459d20a [ 87.312914][ T5324] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa0d53e5ea0 [ 87.315889][ T5324] RBP: 0000200000000180 R08: 00007fa0d53e5ee0 R09: 0000000000800700 [ 87.319354][ T5324] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 87.322867][ T5324] R13: 00007fa0d53e5ea0 R14: 000000000000046f R15: 00002000000007c0 [ 87.326543][ T5324] [ 87.328428][ T5324] Kernel Offset: disabled [ 87.330397][ T5324] Rebooting in 86400 seconds..