program: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") [ 74.964758][ T5334] Bluetooth: hci0: command tx timeout [ 75.003404][ T5357] loop0: detected capacity change from 0 to 512 [ 75.065888][ T5357] EXT4-fs warning (device loop0): ext4_xattr_inode_get:542: inode #11: comm syz.0.0: ea_inode file size=11264 entry size=6 [ 75.072545][ T5357] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.124617][ T5357] ------------[ cut here ]------------ [ 75.127273][ T5357] EA inode 11 ref_count=-1 [ 75.127468][ T5357] WARNING: CPU: 0 PID: 5357 at fs/ext4/xattr.c:1048 ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 75.134447][ T5357] Modules linked in: [ 75.136194][ T5357] CPU: 0 UID: 0 PID: 5357 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.140248][ T5357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.145771][ T5357] RIP: 0010:ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 75.148933][ T5357] Code: 78 40 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 78 34 9d ff 49 8b 37 48 c7 c7 e0 f4 9f 8b 4c 89 ea e8 86 d0 fb fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4c 8b 74 24 20 4c 8b 6c [ 75.158565][ T5357] RSP: 0018:ffffc9000d3d72e0 EFLAGS: 00010246 [ 75.162083][ T5357] RAX: 18286d1200281700 RBX: dffffc0000000000 RCX: 0000000000100000 [ 75.166053][ T5357] RDX: ffffc9000e252000 RSI: 0000000000008921 RDI: 0000000000008922 [ 75.169772][ T5357] RBP: ffffc9000d3d73d0 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 75.173258][ T5357] R10: dffffc0000000000 R11: ffffed1003f8484b R12: ffffc9000d3d7340 [ 75.177061][ T5357] R13: ffffffffffffffff R14: 00000000ffffffff R15: ffff888044409f88 [ 75.180898][ T5357] FS: 00007fee2b73f6c0(0000) GS:ffff88808d20c000(0000) knlGS:0000000000000000 [ 75.185482][ T5357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.188687][ T5357] CR2: 00007fddd1d4f000 CR3: 00000000430ac000 CR4: 0000000000352ef0 [ 75.192417][ T5357] Call Trace: [ 75.194137][ T5357] [ 75.195402][ T5357] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 75.198109][ T5357] ? __kasan_kmalloc+0x93/0xb0 [ 75.200274][ T5357] ? __ext4_journal_ensure_credits+0x30/0x450 [ 75.203140][ T5357] ext4_xattr_inode_dec_ref_all+0x867/0xda0 [ 75.206057][ T5357] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 75.208646][ T5357] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 75.211525][ T5357] ? __ext4_journal_get_write_access+0x272/0x570 [ 75.214292][ T5357] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 75.217195][ T5357] ext4_xattr_delete_inode+0xa4c/0xc10 [ 75.219596][ T5357] ? ext4_truncate+0xc2d/0x1100 [ 75.221705][ T5357] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 75.224381][ T5357] ext4_evict_inode+0xac9/0xee0 [ 75.226608][ T5357] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.228972][ T5357] ? do_raw_spin_unlock+0x4d/0x240 [ 75.231229][ T5357] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.233791][ T5357] evict+0x504/0x9c0 [ 75.235561][ T5357] ? __pfx_evict+0x10/0x10 [ 75.237722][ T5357] ? do_raw_spin_unlock+0x4d/0x240 [ 75.240025][ T5357] ? _raw_spin_unlock+0x28/0x50 [ 75.242185][ T5357] ? iput+0x6d8/0x9d0 [ 75.244036][ T5357] ext4_orphan_cleanup+0xc20/0x1460 [ 75.246573][ T5357] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 75.249268][ T5357] ? ext4_register_li_request+0x640/0x720 [ 75.251799][ T5357] ? errseq_check_and_advance+0x66/0x120 [ 75.254384][ T5357] ext4_fill_super+0x57df/0x6090 [ 75.256871][ T5357] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.259717][ T5357] ? set_blocksize+0x21e/0x500 [ 75.262719][ T5357] ? sb_set_blocksize+0x104/0x180 [ 75.265642][ T5357] ? setup_bdev_super+0x4c1/0x5b0 [ 75.267941][ T5357] get_tree_bdev_flags+0x40e/0x4d0 [ 75.270146][ T5357] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.272852][ T5357] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 75.275645][ T5357] vfs_get_tree+0x92/0x2b0 [ 75.278329][ T5357] do_new_mount+0x2a2/0x9e0 [ 75.281160][ T5357] ? ns_capable+0x8a/0xf0 [ 75.283442][ T5357] ? __pfx_do_new_mount+0x10/0x10 [ 75.285789][ T5357] ? path_mount+0x61c/0xfe0 [ 75.287812][ T5357] ? user_path_at+0x44/0x60 [ 75.289868][ T5357] __se_sys_mount+0x317/0x410 [ 75.292095][ T5357] ? __pfx___se_sys_mount+0x10/0x10 [ 75.294527][ T5357] ? do_syscall_64+0xbe/0x3b0 [ 75.296657][ T5357] ? __x64_sys_mount+0x20/0xc0 [ 75.298609][ T5357] do_syscall_64+0xfa/0x3b0 [ 75.300495][ T5357] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.302706][ T5357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.305670][ T5357] ? clear_bhb_loop+0x60/0xb0 [ 75.307908][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.310533][ T5357] RIP: 0033:0x7fee2a99038a [ 75.312769][ T5357] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.322354][ T5357] RSP: 002b:00007fee2b73ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.326394][ T5357] RAX: ffffffffffffffda RBX: 00007fee2b73eef0 RCX: 00007fee2a99038a [ 75.330399][ T5357] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fee2b73eeb0 [ 75.334503][ T5357] RBP: 0000200000000180 R08: 00007fee2b73eef0 R09: 0000000000800700 [ 75.338594][ T5357] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 75.342007][ T5357] R13: 00007fee2b73eeb0 R14: 0000000000000473 R15: 0000200000000680 [ 75.345336][ T5357] [ 75.346814][ T5357] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.349965][ T5357] CPU: 0 UID: 0 PID: 5357 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.353919][ T5357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.358773][ T5357] Call Trace: [ 75.360467][ T5357] [ 75.362146][ T5357] dump_stack_lvl+0x99/0x250 [ 75.364570][ T5357] ? __asan_memcpy+0x40/0x70 [ 75.366769][ T5357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.368923][ T5357] ? __pfx__printk+0x10/0x10 [ 75.371154][ T5357] vpanic+0x281/0x750 [ 75.373309][ T5357] ? __pfx__printk+0x10/0x10 [ 75.375792][ T5357] ? __pfx_vpanic+0x10/0x10 [ 75.377975][ T5357] ? is_bpf_text_address+0x26/0x2b0 [ 75.380357][ T5357] panic+0xb9/0xc0 [ 75.382046][ T5357] ? __pfx_panic+0x10/0x10 [ 75.384101][ T5357] __warn+0x31b/0x4b0 [ 75.385908][ T5357] ? ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 75.388889][ T5357] ? ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 75.392268][ T5357] report_bug+0x2be/0x4f0 [ 75.394933][ T5357] ? ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 75.397727][ T5357] ? ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 75.400477][ T5357] ? ext4_xattr_inode_update_ref+0x44d/0x5d0 [ 75.403383][ T5357] handle_bug+0x84/0x160 [ 75.405361][ T5357] exc_invalid_op+0x1a/0x50 [ 75.407693][ T5357] asm_exc_invalid_op+0x1a/0x20 [ 75.410059][ T5357] RIP: 0010:ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 75.413484][ T5357] Code: 78 40 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 78 34 9d ff 49 8b 37 48 c7 c7 e0 f4 9f 8b 4c 89 ea e8 86 d0 fb fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4c 8b 74 24 20 4c 8b 6c [ 75.422212][ T5357] RSP: 0018:ffffc9000d3d72e0 EFLAGS: 00010246 [ 75.424894][ T5357] RAX: 18286d1200281700 RBX: dffffc0000000000 RCX: 0000000000100000 [ 75.428696][ T5357] RDX: ffffc9000e252000 RSI: 0000000000008921 RDI: 0000000000008922 [ 75.432751][ T5357] RBP: ffffc9000d3d73d0 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 75.439558][ T5357] R10: dffffc0000000000 R11: ffffed1003f8484b R12: ffffc9000d3d7340 [ 75.442718][ T5357] R13: ffffffffffffffff R14: 00000000ffffffff R15: ffff888044409f88 [ 75.445998][ T5357] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 75.448863][ T5357] ? __kasan_kmalloc+0x93/0xb0 [ 75.451297][ T5357] ? __ext4_journal_ensure_credits+0x30/0x450 [ 75.454358][ T5357] ext4_xattr_inode_dec_ref_all+0x867/0xda0 [ 75.457066][ T5357] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 75.459446][ T5357] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 75.462506][ T5357] ? __ext4_journal_get_write_access+0x272/0x570 [ 75.465170][ T5357] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 75.468358][ T5357] ext4_xattr_delete_inode+0xa4c/0xc10 [ 75.470915][ T5357] ? ext4_truncate+0xc2d/0x1100 [ 75.473506][ T5357] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 75.476427][ T5357] ext4_evict_inode+0xac9/0xee0 [ 75.478731][ T5357] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.481099][ T5357] ? do_raw_spin_unlock+0x4d/0x240 [ 75.483081][ T5357] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.485401][ T5357] evict+0x504/0x9c0 [ 75.487560][ T5357] ? __pfx_evict+0x10/0x10 [ 75.489720][ T5357] ? do_raw_spin_unlock+0x4d/0x240 [ 75.491949][ T5357] ? _raw_spin_unlock+0x28/0x50 [ 75.493873][ T5357] ? iput+0x6d8/0x9d0 [ 75.495540][ T5357] ext4_orphan_cleanup+0xc20/0x1460 [ 75.497959][ T5357] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 75.500475][ T5357] ? ext4_register_li_request+0x640/0x720 [ 75.503119][ T5357] ? errseq_check_and_advance+0x66/0x120 [ 75.505918][ T5357] ext4_fill_super+0x57df/0x6090 [ 75.508298][ T5357] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.510468][ T5357] ? set_blocksize+0x21e/0x500 [ 75.512520][ T5357] ? sb_set_blocksize+0x104/0x180 [ 75.514958][ T5357] ? setup_bdev_super+0x4c1/0x5b0 [ 75.517427][ T5357] get_tree_bdev_flags+0x40e/0x4d0 [ 75.519938][ T5357] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.522118][ T5357] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 75.524417][ T5357] vfs_get_tree+0x92/0x2b0 [ 75.526620][ T5357] do_new_mount+0x2a2/0x9e0 [ 75.528678][ T5357] ? ns_capable+0x8a/0xf0 [ 75.530437][ T5357] ? __pfx_do_new_mount+0x10/0x10 [ 75.532559][ T5357] ? path_mount+0x61c/0xfe0 [ 75.534571][ T5357] ? user_path_at+0x44/0x60 [ 75.536729][ T5357] __se_sys_mount+0x317/0x410 [ 75.539012][ T5357] ? __pfx___se_sys_mount+0x10/0x10 [ 75.541532][ T5357] ? do_syscall_64+0xbe/0x3b0 [ 75.543666][ T5357] ? __x64_sys_mount+0x20/0xc0 [ 75.545710][ T5357] do_syscall_64+0xfa/0x3b0 [ 75.547750][ T5357] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.550093][ T5357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.552821][ T5357] ? clear_bhb_loop+0x60/0xb0 [ 75.555002][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.557709][ T5357] RIP: 0033:0x7fee2a99038a [ 75.559789][ T5357] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.569000][ T5357] RSP: 002b:00007fee2b73ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.572408][ T5357] RAX: ffffffffffffffda RBX: 00007fee2b73eef0 RCX: 00007fee2a99038a [ 75.575624][ T5357] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fee2b73eeb0 [ 75.579344][ T5357] RBP: 0000200000000180 R08: 00007fee2b73eef0 R09: 0000000000800700 [ 75.582759][ T5357] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 75.586224][ T5357] R13: 00007fee2b73eeb0 R14: 0000000000000473 R15: 0000200000000680 [ 75.589944][ T5357] [ 75.591817][ T5357] Kernel Offset: disabled [ 75.593846][ T5357] Rebooting in 86400 seconds..