program: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") [ 76.703005][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.705986][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.709841][ T5300] Bluetooth: hci0: command tx timeout [ 76.786345][ T5320] loop0: detected capacity change from 0 to 512 [ 76.845229][ T5320] ------------[ cut here ]------------ [ 76.848089][ T5320] EA inode 11 i_nlink=2 [ 76.848670][ T5320] WARNING: CPU: 0 PID: 5320 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 76.855771][ T5320] Modules linked in: [ 76.857682][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.862577][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.866832][ T5320] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 76.870019][ T5320] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 00 21 80 8b 4c 89 e6 e8 97 19 f8 fe 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 e3 29 bd 08 44 89 f9 [ 76.878091][ T5320] RSP: 0018:ffffc9000d3a7100 EFLAGS: 00010246 [ 76.880970][ T5320] RAX: a1223da5ab5bed00 RBX: 0000000000000001 RCX: 0000000000100000 [ 76.884549][ T5320] RDX: ffffc9000e681000 RSI: 000000000000a91b RDI: 000000000000a91c [ 76.887905][ T5320] RBP: ffffc9000d3a71f8 R08: ffff88801fe24293 R09: 1ffff11003fc4852 [ 76.891639][ T5320] R10: dffffc0000000000 R11: ffffed1003fc4853 R12: 000000000000000b [ 76.895294][ T5320] R13: ffff8880432b29b0 R14: 1ffff11008656524 R15: ffff8880432b2920 [ 76.899081][ T5320] FS: 00007f164cdf46c0(0000) GS:ffff88808d733000(0000) knlGS:0000000000000000 [ 76.903139][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.906106][ T5320] CR2: 00007fb710f909c0 CR3: 00000000427fc000 CR4: 0000000000352ef0 [ 76.909853][ T5320] Call Trace: [ 76.911401][ T5320] [ 76.912768][ T5320] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 76.915553][ T5320] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 76.918714][ T5320] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 76.921197][ T5320] ext4_xattr_set_entry+0xabb/0x1e20 [ 76.923650][ T5320] ext4_xattr_ibody_set+0x254/0x6a0 [ 76.926102][ T5320] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 76.929032][ T5320] __ext4_expand_extra_isize+0x30d/0x400 [ 76.931626][ T5320] __ext4_mark_inode_dirty+0x46c/0x700 [ 76.933886][ T5320] ext4_evict_inode+0x80d/0xee0 [ 76.935838][ T5320] ? __pfx_ext4_evict_inode+0x10/0x10 [ 76.938119][ T5320] ? do_raw_spin_unlock+0x4d/0x240 [ 76.940636][ T5320] ? __pfx_ext4_evict_inode+0x10/0x10 [ 76.943023][ T5320] evict+0x504/0x9c0 [ 76.944808][ T5320] ? __pfx_evict+0x10/0x10 [ 76.946802][ T5320] ? do_raw_spin_unlock+0x4d/0x240 [ 76.949397][ T5320] ? _raw_spin_unlock+0x28/0x50 [ 76.951786][ T5320] ? iput+0x946/0xc50 [ 76.953625][ T5320] ext4_orphan_cleanup+0xc20/0x1460 [ 76.956040][ T5320] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 76.959363][ T5320] ? ext4_register_li_request+0x640/0x720 [ 76.962031][ T5320] ? errseq_check_and_advance+0x66/0x120 [ 76.964370][ T5320] ext4_fill_super+0x5920/0x61e0 [ 76.966345][ T5320] ? __pfx_ext4_fill_super+0x10/0x10 [ 76.968968][ T5320] ? snprintf+0xda/0x120 [ 76.970689][ T5320] ? __pfx_snprintf+0x10/0x10 [ 76.972648][ T5320] ? set_blocksize+0x21e/0x500 [ 76.974930][ T5320] ? sb_set_blocksize+0x104/0x180 [ 76.977258][ T5320] ? setup_bdev_super+0x4c1/0x5b0 [ 76.979751][ T5320] get_tree_bdev_flags+0x40e/0x4d0 [ 76.982125][ T5320] ? __pfx_ext4_fill_super+0x10/0x10 [ 76.984539][ T5320] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 76.986925][ T5320] vfs_get_tree+0x92/0x2b0 [ 76.989057][ T5320] do_new_mount+0x302/0xa10 [ 76.991071][ T5320] ? apparmor_capable+0x137/0x1b0 [ 76.993340][ T5320] ? __pfx_do_new_mount+0x10/0x10 [ 76.995702][ T5320] ? ns_capable+0x8a/0xf0 [ 76.997717][ T5320] ? kmem_cache_free+0x19b/0x690 [ 77.000148][ T5320] __se_sys_mount+0x313/0x410 [ 77.002315][ T5320] ? __pfx___se_sys_mount+0x10/0x10 [ 77.004699][ T5320] ? do_syscall_64+0xbe/0xfa0 [ 77.006833][ T5320] ? __x64_sys_mount+0x20/0xc0 [ 77.009231][ T5320] do_syscall_64+0xfa/0xfa0 [ 77.011401][ T5320] ? lockdep_hardirqs_on+0x9c/0x150 [ 77.013799][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.016414][ T5320] ? clear_bhb_loop+0x60/0xb0 [ 77.018607][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.021274][ T5320] RIP: 0033:0x7f164bf9076a [ 77.023299][ T5320] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.032213][ T5320] RSP: 002b:00007f164cdf3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.036039][ T5320] RAX: ffffffffffffffda RBX: 00007f164cdf3ef0 RCX: 00007f164bf9076a [ 77.039603][ T5320] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f164cdf3eb0 [ 77.043121][ T5320] RBP: 0000200000000180 R08: 00007f164cdf3ef0 R09: 0000000000800700 [ 77.046765][ T5320] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 77.050623][ T5320] R13: 00007f164cdf3eb0 R14: 000000000000046f R15: 0000200000000200 [ 77.054135][ T5320] [ 77.055455][ T5320] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.058440][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 77.062431][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.067343][ T5320] Call Trace: [ 77.068901][ T5320] [ 77.070287][ T5320] dump_stack_lvl+0x99/0x250 [ 77.072348][ T5320] ? __asan_memcpy+0x40/0x70 [ 77.074469][ T5320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.076850][ T5320] ? __pfx__printk+0x10/0x10 [ 77.078973][ T5320] vpanic+0x237/0x6d0 [ 77.080827][ T5320] ? __pfx_vpanic+0x10/0x10 [ 77.082882][ T5320] panic+0xb9/0xc0 [ 77.084594][ T5320] ? __pfx_panic+0x10/0x10 [ 77.086715][ T5320] __warn+0x31b/0x4b0 [ 77.088627][ T5320] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 77.091402][ T5320] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 77.094202][ T5320] report_bug+0x2be/0x4f0 [ 77.096257][ T5320] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 77.099301][ T5320] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 77.101928][ T5320] ? ext4_xattr_inode_update_ref+0x51c/0x5b0 [ 77.104640][ T5320] handle_bug+0x84/0x160 [ 77.106594][ T5320] exc_invalid_op+0x1a/0x50 [ 77.108717][ T5320] asm_exc_invalid_op+0x1a/0x20 [ 77.110983][ T5320] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 77.113901][ T5320] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 00 21 80 8b 4c 89 e6 e8 97 19 f8 fe 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 e3 29 bd 08 44 89 f9 [ 77.122310][ T5320] RSP: 0018:ffffc9000d3a7100 EFLAGS: 00010246 [ 77.125067][ T5320] RAX: a1223da5ab5bed00 RBX: 0000000000000001 RCX: 0000000000100000 [ 77.128739][ T5320] RDX: ffffc9000e681000 RSI: 000000000000a91b RDI: 000000000000a91c [ 77.132366][ T5320] RBP: ffffc9000d3a71f8 R08: ffff88801fe24293 R09: 1ffff11003fc4852 [ 77.136118][ T5320] R10: dffffc0000000000 R11: ffffed1003fc4853 R12: 000000000000000b [ 77.140350][ T5320] R13: ffff8880432b29b0 R14: 1ffff11008656524 R15: ffff8880432b2920 [ 77.144222][ T5320] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 77.146630][ T5320] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 77.149210][ T5320] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 77.151449][ T5320] ext4_xattr_set_entry+0xabb/0x1e20 [ 77.153751][ T5320] ext4_xattr_ibody_set+0x254/0x6a0 [ 77.156155][ T5320] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 77.159343][ T5320] __ext4_expand_extra_isize+0x30d/0x400 [ 77.161910][ T5320] __ext4_mark_inode_dirty+0x46c/0x700 [ 77.164144][ T5320] ext4_evict_inode+0x80d/0xee0 [ 77.166235][ T5320] ? __pfx_ext4_evict_inode+0x10/0x10 [ 77.168592][ T5320] ? do_raw_spin_unlock+0x4d/0x240 [ 77.170714][ T5320] ? __pfx_ext4_evict_inode+0x10/0x10 [ 77.172986][ T5320] evict+0x504/0x9c0 [ 77.174750][ T5320] ? __pfx_evict+0x10/0x10 [ 77.176576][ T5320] ? do_raw_spin_unlock+0x4d/0x240 [ 77.178953][ T5320] ? _raw_spin_unlock+0x28/0x50 [ 77.181055][ T5320] ? iput+0x946/0xc50 [ 77.182860][ T5320] ext4_orphan_cleanup+0xc20/0x1460 [ 77.185289][ T5320] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 77.187761][ T5320] ? ext4_register_li_request+0x640/0x720 [ 77.190415][ T5320] ? errseq_check_and_advance+0x66/0x120 [ 77.192866][ T5320] ext4_fill_super+0x5920/0x61e0 [ 77.195132][ T5320] ? __pfx_ext4_fill_super+0x10/0x10 [ 77.197496][ T5320] ? snprintf+0xda/0x120 [ 77.199395][ T5320] ? __pfx_snprintf+0x10/0x10 [ 77.201592][ T5320] ? set_blocksize+0x21e/0x500 [ 77.203822][ T5320] ? sb_set_blocksize+0x104/0x180 [ 77.206156][ T5320] ? setup_bdev_super+0x4c1/0x5b0 [ 77.208362][ T5320] get_tree_bdev_flags+0x40e/0x4d0 [ 77.210847][ T5320] ? __pfx_ext4_fill_super+0x10/0x10 [ 77.213318][ T5320] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 77.215824][ T5320] vfs_get_tree+0x92/0x2b0 [ 77.217869][ T5320] do_new_mount+0x302/0xa10 [ 77.219958][ T5320] ? apparmor_capable+0x137/0x1b0 [ 77.222196][ T5320] ? __pfx_do_new_mount+0x10/0x10 [ 77.224463][ T5320] ? ns_capable+0x8a/0xf0 [ 77.226363][ T5320] ? kmem_cache_free+0x19b/0x690 [ 77.228686][ T5320] __se_sys_mount+0x313/0x410 [ 77.230840][ T5320] ? __pfx___se_sys_mount+0x10/0x10 [ 77.233320][ T5320] ? do_syscall_64+0xbe/0xfa0 [ 77.235475][ T5320] ? __x64_sys_mount+0x20/0xc0 [ 77.237549][ T5320] do_syscall_64+0xfa/0xfa0 [ 77.239630][ T5320] ? lockdep_hardirqs_on+0x9c/0x150 [ 77.241970][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.244693][ T5320] ? clear_bhb_loop+0x60/0xb0 [ 77.246950][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.249760][ T5320] RIP: 0033:0x7f164bf9076a [ 77.251885][ T5320] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.260945][ T5320] RSP: 002b:00007f164cdf3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.264842][ T5320] RAX: ffffffffffffffda RBX: 00007f164cdf3ef0 RCX: 00007f164bf9076a [ 77.268272][ T5320] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f164cdf3eb0 [ 77.271685][ T5320] RBP: 0000200000000180 R08: 00007f164cdf3ef0 R09: 0000000000800700 [ 77.275177][ T5320] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 77.279151][ T5320] R13: 00007f164cdf3eb0 R14: 000000000000046f R15: 0000200000000200 [ 77.283235][ T5320] [ 77.285245][ T5320] Kernel Offset: disabled [ 77.287241][ T5320] Rebooting in 86400 seconds..