program:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x24)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffd, 0x0, 0xff, 0x6, 0x7, 0xe8a}, &(0x7f0000000080)=0x20)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000003c0)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x36}}, {@user_xattr}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")
[ 133.163819][ T5334] loop0: detected capacity change from 0 to 512
[ 133.182084][ T4666] Bluetooth: hci0: command tx timeout
[ 133.280955][ T5334] ------------[ cut here ]------------
[ 133.283907][ T5334] EA inode 11 i_nlink=2
[ 133.283922][ T5334] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x4c9/0x5a0, CPU#0: syz.0.0/5334
[ 133.290791][ T5334] Modules linked in:
[ 133.293120][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 133.297098][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 133.302308][ T5334] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0
[ 133.305142][ T5334] Code: 74 08 4c 89 ef e8 bf 22 98 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 8b bf 02 09 44 89
[ 133.313648][ T5334] RSP: 0018:ffffc9000c927240 EFLAGS: 00010246
[ 133.316250][ T5334] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000
[ 133.319300][ T5334] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff8ff5d550
[ 133.322633][ T5334] RBP: ffffc9000c927330 R08: ffff888047868e2f R09: 1ffff11008f0d1c5
[ 133.325702][ T5334] R10: dffffc0000000000 R11: ffffed1008f0d1c6 R12: ffffffff8ff5d550
[ 133.329136][ T5334] R13: 000000000000000b R14: 1ffff11008f0d190 R15: ffff888047868c80
[ 133.332756][ T5334] FS: 00007fe0e06656c0(0000) GS:ffff88808ccea000(0000) knlGS:0000000000000000
[ 133.336525][ T5334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 133.339406][ T5334] CR2: 00007f4a4ee9ed60 CR3: 000000001fc5c000 CR4: 0000000000352ef0
[ 133.343073][ T5334] Call Trace:
[ 133.344505][ T5334]
[ 133.345836][ T5334] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 133.348604][ T5334] ? __kmalloc_cache_noprof+0x3d1/0x6e0
[ 133.351154][ T5334] ? ext4_xattr_inode_dec_ref_all+0x4d2/0xe40
[ 133.354273][ T5334] ? __ext4_journal_ensure_credits+0x30/0x450
[ 133.356917][ T5334] ext4_xattr_inode_dec_ref_all+0x8cb/0xe40
[ 133.359575][ T5334] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10
[ 133.362752][ T5334] ? __ext4_journal_get_write_access+0x27f/0x590
[ 133.365457][ T5334] ? __pfx___ext4_journal_get_write_access+0x10/0x10
[ 133.368375][ T5334] ext4_xattr_delete_inode+0xb45/0xd10
[ 133.370902][ T5334] ? up_write+0x1ab/0x410
[ 133.373001][ T5334] ? __pfx_ext4_xattr_delete_inode+0x10/0x10
[ 133.375666][ T5334] ext4_evict_inode+0xa63/0xe60
[ 133.377776][ T5334] ? __pfx_ext4_evict_inode+0x10/0x10
[ 133.380330][ T5334] ? do_raw_spin_unlock+0x4d/0x210
[ 133.382781][ T5334] ? __pfx_ext4_evict_inode+0x10/0x10
[ 133.385068][ T5334] evict+0x61e/0xb10
[ 133.386829][ T5334] ? __pfx_evict+0x10/0x10
[ 133.388795][ T5334] ? _raw_spin_unlock+0x28/0x50
[ 133.391136][ T5334] ? iput+0xcc2/0x1020
[ 133.393021][ T5334] ext4_orphan_cleanup+0xc38/0x1470
[ 133.395288][ T5334] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 133.397768][ T5334] ? ext4_register_li_request+0x640/0x720
[ 133.400395][ T5334] ? errseq_check_and_advance+0x66/0x120
[ 133.402995][ T5334] ext4_fill_super+0x5932/0x61f0
[ 133.405205][ T5334] ? __pfx_ext4_fill_super+0x10/0x10
[ 133.407738][ T5334] ? snprintf+0xe8/0x140
[ 133.409596][ T5334] ? set_blocksize+0x20b/0x4b0
[ 133.411736][ T5334] ? sb_set_blocksize+0x155/0x240
[ 133.414007][ T5334] ? setup_bdev_super+0x4c1/0x5b0
[ 133.416360][ T5334] get_tree_bdev_flags+0x431/0x4f0
[ 133.418681][ T5334] ? __pfx_ext4_fill_super+0x10/0x10
[ 133.421254][ T5334] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 133.423751][ T5334] vfs_get_tree+0x92/0x2a0
[ 133.425690][ T5334] do_new_mount+0x329/0xa50
[ 133.427726][ T5334] ? apparmor_capable+0x137/0x1a0
[ 133.429988][ T5334] ? __pfx_do_new_mount+0x10/0x10
[ 133.432365][ T5334] ? ns_capable+0x89/0xe0
[ 133.434335][ T5334] __se_sys_mount+0x31d/0x420
[ 133.436408][ T5334] ? __pfx___se_sys_mount+0x10/0x10
[ 133.438791][ T5334] ? __x64_sys_mount+0x20/0xc0
[ 133.440946][ T5334] do_syscall_64+0xe2/0xf80
[ 133.443282][ T5334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.445824][ T5334] ? trace_irq_disable+0x37/0x100
[ 133.448027][ T5334] ? clear_bhb_loop+0x60/0xb0
[ 133.450160][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.452920][ T5334] RIP: 0033:0x7fe0df79c14a
[ 133.454896][ T5334] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 133.463324][ T5334] RSP: 002b:00007fe0e0664e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 133.466967][ T5334] RAX: ffffffffffffffda RBX: 00007fe0e0664ee0 RCX: 00007fe0df79c14a
[ 133.470457][ T5334] RDX: 0000200000000180 RSI: 0000200000000240 RDI: 00007fe0e0664ea0
[ 133.474272][ T5334] RBP: 0000200000000180 R08: 00007fe0e0664ee0 R09: 0000000000800700
[ 133.477688][ T5334] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000240
[ 133.481071][ T5334] R13: 00007fe0e0664ea0 R14: 000000000000046f R15: 000000000000002c
[ 133.484630][ T5334]
[ 133.485983][ T5334] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 133.489172][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 133.493227][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 133.497598][ T5334] Call Trace:
[ 133.499115][ T5334]
[ 133.500595][ T5334] vpanic+0x1e0/0x670
[ 133.502396][ T5334] panic+0xc5/0xd0
[ 133.503987][ T5334] ? __pfx_panic+0x10/0x10
[ 133.506081][ T5334] __warn+0x315/0x4a0
[ 133.507907][ T5334] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0
[ 133.510537][ T5334] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0
[ 133.513101][ T5334] __report_bug+0x29a/0x540
[ 133.515266][ T5334] ? ext4_get_group_desc+0x434/0x4e0
[ 133.517693][ T5334] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0
[ 133.520508][ T5334] ? __pfx___report_bug+0x10/0x10
[ 133.522819][ T5334] ? set_normalized_timespec64+0xf0/0x1a0
[ 133.525423][ T5334] ? __ext4_journal_get_write_access+0x84/0x590
[ 133.528263][ T5334] report_bug_entry+0x19a/0x290
[ 133.530513][ T5334] ? ext4_xattr_inode_update_ref+0x511/0x5a0
[ 133.533205][ T5334] ? ext4_xattr_inode_update_ref+0x516/0x5a0
[ 133.535937][ T5334] handle_bug+0xca/0x200
[ 133.537843][ T5334] exc_invalid_op+0x1a/0x50
[ 133.540938][ T5334] asm_exc_invalid_op+0x1a/0x20
[ 133.543365][ T5334] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0
[ 133.546203][ T5334] Code: 74 08 4c 89 ef e8 bf 22 98 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 8b bf 02 09 44 89
[ 133.554422][ T5334] RSP: 0018:ffffc9000c927240 EFLAGS: 00010246
[ 133.557143][ T5334] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000
[ 133.560601][ T5334] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff8ff5d550
[ 133.564044][ T5334] RBP: ffffc9000c927330 R08: ffff888047868e2f R09: 1ffff11008f0d1c5
[ 133.567492][ T5334] R10: dffffc0000000000 R11: ffffed1008f0d1c6 R12: ffffffff8ff5d550
[ 133.570895][ T5334] R13: 000000000000000b R14: 1ffff11008f0d190 R15: ffff888047868c80
[ 133.574332][ T5334] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 133.577120][ T5334] ? __kmalloc_cache_noprof+0x3d1/0x6e0
[ 133.579524][ T5334] ? ext4_xattr_inode_dec_ref_all+0x4d2/0xe40
[ 133.581840][ T5334] ? __ext4_journal_ensure_credits+0x30/0x450
[ 133.584294][ T5334] ext4_xattr_inode_dec_ref_all+0x8cb/0xe40
[ 133.586619][ T5334] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10
[ 133.589047][ T5334] ? __ext4_journal_get_write_access+0x27f/0x590
[ 133.591619][ T5334] ? __pfx___ext4_journal_get_write_access+0x10/0x10
[ 133.594119][ T5334] ext4_xattr_delete_inode+0xb45/0xd10
[ 133.596531][ T5334] ? up_write+0x1ab/0x410
[ 133.598416][ T5334] ? __pfx_ext4_xattr_delete_inode+0x10/0x10
[ 133.601112][ T5334] ext4_evict_inode+0xa63/0xe60
[ 133.603248][ T5334] ? __pfx_ext4_evict_inode+0x10/0x10
[ 133.605468][ T5334] ? do_raw_spin_unlock+0x4d/0x210
[ 133.607582][ T5334] ? __pfx_ext4_evict_inode+0x10/0x10
[ 133.609860][ T5334] evict+0x61e/0xb10
[ 133.611512][ T5334] ? __pfx_evict+0x10/0x10
[ 133.613422][ T5334] ? _raw_spin_unlock+0x28/0x50
[ 133.615619][ T5334] ? iput+0xcc2/0x1020
[ 133.617313][ T5334] ext4_orphan_cleanup+0xc38/0x1470
[ 133.619750][ T5334] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 133.622172][ T5334] ? ext4_register_li_request+0x640/0x720
[ 133.624659][ T5334] ? errseq_check_and_advance+0x66/0x120
[ 133.627298][ T5334] ext4_fill_super+0x5932/0x61f0
[ 133.629479][ T5334] ? __pfx_ext4_fill_super+0x10/0x10
[ 133.631830][ T5334] ? snprintf+0xe8/0x140
[ 133.633743][ T5334] ? set_blocksize+0x20b/0x4b0
[ 133.635870][ T5334] ? sb_set_blocksize+0x155/0x240
[ 133.638159][ T5334] ? setup_bdev_super+0x4c1/0x5b0
[ 133.640453][ T5334] get_tree_bdev_flags+0x431/0x4f0
[ 133.642781][ T5334] ? __pfx_ext4_fill_super+0x10/0x10
[ 133.645244][ T5334] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 133.647627][ T5334] vfs_get_tree+0x92/0x2a0
[ 133.649620][ T5334] do_new_mount+0x329/0xa50
[ 133.651665][ T5334] ? apparmor_capable+0x137/0x1a0
[ 133.653843][ T5334] ? __pfx_do_new_mount+0x10/0x10
[ 133.656083][ T5334] ? ns_capable+0x89/0xe0
[ 133.657961][ T5334] __se_sys_mount+0x31d/0x420
[ 133.660046][ T5334] ? __pfx___se_sys_mount+0x10/0x10
[ 133.662367][ T5334] ? __x64_sys_mount+0x20/0xc0
[ 133.664487][ T5334] do_syscall_64+0xe2/0xf80
[ 133.666500][ T5334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.669119][ T5334] ? trace_irq_disable+0x37/0x100
[ 133.671412][ T5334] ? clear_bhb_loop+0x60/0xb0
[ 133.673473][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.676011][ T5334] RIP: 0033:0x7fe0df79c14a
[ 133.677949][ T5334] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 133.686252][ T5334] RSP: 002b:00007fe0e0664e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 133.689873][ T5334] RAX: ffffffffffffffda RBX: 00007fe0e0664ee0 RCX: 00007fe0df79c14a
[ 133.693287][ T5334] RDX: 0000200000000180 RSI: 0000200000000240 RDI: 00007fe0e0664ea0
[ 133.696979][ T5334] RBP: 0000200000000180 R08: 00007fe0e0664ee0 R09: 0000000000800700
[ 133.700327][ T5334] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000240
[ 133.703812][ T5334] R13: 00007fe0e0664ea0 R14: 000000000000046f R15: 000000000000002c
[ 133.707188][ T5334]
[ 133.708861][ T5334] Kernel Offset: disabled
[ 133.710776][ T5334] Rebooting in 86400 seconds..