program: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f00000007c0), 0x1, 0x46f, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f00000007c0), 0x1, 0x46f, &(0x7f0000000200)="$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") (async) [ 84.224125][ T47] Bluetooth: hci0: command tx timeout [ 84.332983][ T5325] loop0: detected capacity change from 0 to 512 [ 84.366008][ T5325] ------------[ cut here ]------------ [ 84.368632][ T5325] EA inode 11 i_nlink=0 [ 84.368646][ T5325] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x4c9/0x5a0, CPU#0: syz.0.0/5325 [ 84.376368][ T5325] Modules linked in: [ 84.378118][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 84.382094][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.386769][ T5325] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0 [ 84.389641][ T5325] Code: 74 08 4c 89 ef e8 bf 22 98 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 8b bf 02 09 44 89 [ 84.398698][ T5325] RSP: 0018:ffffc90003e1f240 EFLAGS: 00010246 [ 84.401407][ T5325] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000 [ 84.404878][ T5325] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff8ff5d550 [ 84.407976][ T5325] RBP: ffffc90003e1f330 R08: ffff8880129e216f R09: 1ffff1100253c42d [ 84.411231][ T5325] R10: dffffc0000000000 R11: ffffed100253c42e R12: ffffffff8ff5d550 [ 84.414442][ T5325] R13: 000000000000000b R14: 1ffff1100253c3f8 R15: ffff8880129e1fc0 [ 84.417827][ T5325] FS: 00007f99a717a6c0(0000) GS:ffff88808ccea000(0000) knlGS:0000000000000000 [ 84.421833][ T5325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.425110][ T5325] CR2: 00007f3bfcb49000 CR3: 00000000424f4000 CR4: 0000000000352ef0 [ 84.428634][ T5325] Call Trace: [ 84.430109][ T5325] [ 84.431462][ T5325] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 84.434358][ T5325] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 84.437126][ T5325] ? ext4_xattr_inode_dec_ref_all+0x4d2/0xe40 [ 84.439875][ T5325] ? __ext4_journal_ensure_credits+0x30/0x450 [ 84.442528][ T5325] ext4_xattr_inode_dec_ref_all+0x8cb/0xe40 [ 84.445208][ T5325] ? __mark_inode_dirty+0xb3c/0x1320 [ 84.447518][ T5325] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 84.450246][ T5325] ? __ext4_journal_get_write_access+0x27f/0x590 [ 84.453001][ T5325] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 84.456207][ T5325] ext4_xattr_delete_inode+0xb45/0xd10 [ 84.458685][ T5325] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 84.461454][ T5325] ext4_evict_inode+0xa63/0xe60 [ 84.463836][ T5325] ? __pfx_ext4_evict_inode+0x10/0x10 [ 84.466457][ T5325] ? do_raw_spin_unlock+0x4d/0x210 [ 84.468870][ T5325] ? __pfx_ext4_evict_inode+0x10/0x10 [ 84.471546][ T5325] evict+0x61e/0xb10 [ 84.473413][ T5325] ? __pfx_evict+0x10/0x10 [ 84.476083][ T5325] ? _raw_spin_unlock+0x28/0x50 [ 84.478468][ T5325] ? iput+0xcc2/0x1020 [ 84.480267][ T5325] ext4_orphan_cleanup+0xc38/0x1470 [ 84.482534][ T5325] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 84.484809][ T5325] ? ext4_register_li_request+0x640/0x720 [ 84.486958][ T5325] ? errseq_check_and_advance+0x66/0x120 [ 84.489477][ T5325] ext4_fill_super+0x5932/0x61f0 [ 84.491555][ T5325] ? __pfx_ext4_fill_super+0x10/0x10 [ 84.493687][ T5325] ? snprintf+0xe8/0x140 [ 84.495366][ T5325] ? set_blocksize+0x20b/0x4b0 [ 84.497253][ T5325] ? sb_set_blocksize+0x155/0x240 [ 84.499205][ T5325] ? setup_bdev_super+0x4c1/0x5b0 [ 84.501387][ T5325] get_tree_bdev_flags+0x431/0x4f0 [ 84.503608][ T5325] ? __pfx_ext4_fill_super+0x10/0x10 [ 84.505902][ T5325] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 84.510905][ T5325] vfs_get_tree+0x92/0x2a0 [ 84.513319][ T5325] do_new_mount+0x329/0xa50 [ 84.516250][ T5325] ? apparmor_capable+0x137/0x1a0 [ 84.518606][ T5325] ? __pfx_do_new_mount+0x10/0x10 [ 84.520881][ T5325] ? ns_capable+0x89/0xe0 [ 84.522792][ T5325] __se_sys_mount+0x31d/0x420 [ 84.525231][ T5325] ? __pfx___se_sys_mount+0x10/0x10 [ 84.527509][ T5325] ? __x64_sys_mount+0x20/0xc0 [ 84.529576][ T5325] do_syscall_64+0xe2/0xf80 [ 84.531721][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.534519][ T5325] ? trace_irq_disable+0x37/0x100 [ 84.537136][ T5325] ? clear_bhb_loop+0x60/0xb0 [ 84.539262][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.541844][ T5325] RIP: 0033:0x7f99a639c14a [ 84.543918][ T5325] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.552230][ T5325] RSP: 002b:00007f99a7179e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.556805][ T5325] RAX: ffffffffffffffda RBX: 00007f99a7179ee0 RCX: 00007f99a639c14a [ 84.560178][ T5325] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f99a7179ea0 [ 84.563772][ T5325] RBP: 0000200000000180 R08: 00007f99a7179ee0 R09: 0000000000800700 [ 84.567720][ T5325] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000000 [ 84.571325][ T5325] R13: 00007f99a7179ea0 R14: 000000000000046f R15: 00002000000007c0 [ 84.575697][ T5325] [ 84.577211][ T5325] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 84.580597][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 84.584348][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.588564][ T5325] Call Trace: [ 84.589997][ T5325] [ 84.591195][ T5325] vpanic+0x1e0/0x670 [ 84.592901][ T5325] panic+0xc5/0xd0 [ 84.594648][ T5325] ? __pfx_panic+0x10/0x10 [ 84.596703][ T5325] __warn+0x315/0x4a0 [ 84.598496][ T5325] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 84.601015][ T5325] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 84.603772][ T5325] __report_bug+0x29a/0x540 [ 84.605797][ T5325] ? ext4_get_group_desc+0x434/0x4e0 [ 84.608205][ T5325] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 84.610717][ T5325] ? __pfx___report_bug+0x10/0x10 [ 84.612762][ T5325] ? set_normalized_timespec64+0xf0/0x1a0 [ 84.615068][ T5325] ? __ext4_journal_get_write_access+0x84/0x590 [ 84.617650][ T5325] report_bug_entry+0x19a/0x290 [ 84.619582][ T5325] ? ext4_xattr_inode_update_ref+0x511/0x5a0 [ 84.622012][ T5325] ? ext4_xattr_inode_update_ref+0x516/0x5a0 [ 84.624446][ T5325] handle_bug+0xca/0x200 [ 84.626228][ T5325] exc_invalid_op+0x1a/0x50 [ 84.628270][ T5325] asm_exc_invalid_op+0x1a/0x20 [ 84.630263][ T5325] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0 [ 84.633046][ T5325] Code: 74 08 4c 89 ef e8 bf 22 98 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 8b bf 02 09 44 89 [ 84.641400][ T5325] RSP: 0018:ffffc90003e1f240 EFLAGS: 00010246 [ 84.644051][ T5325] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000 [ 84.647209][ T5325] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff8ff5d550 [ 84.650358][ T5325] RBP: ffffc90003e1f330 R08: ffff8880129e216f R09: 1ffff1100253c42d [ 84.653532][ T5325] R10: dffffc0000000000 R11: ffffed100253c42e R12: ffffffff8ff5d550 [ 84.656687][ T5325] R13: 000000000000000b R14: 1ffff1100253c3f8 R15: ffff8880129e1fc0 [ 84.659884][ T5325] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 84.662643][ T5325] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 84.665146][ T5325] ? ext4_xattr_inode_dec_ref_all+0x4d2/0xe40 [ 84.667662][ T5325] ? __ext4_journal_ensure_credits+0x30/0x450 [ 84.670105][ T5325] ext4_xattr_inode_dec_ref_all+0x8cb/0xe40 [ 84.672549][ T5325] ? __mark_inode_dirty+0xb3c/0x1320 [ 84.674740][ T5325] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 84.677179][ T5325] ? __ext4_journal_get_write_access+0x27f/0x590 [ 84.679612][ T5325] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 84.682464][ T5325] ext4_xattr_delete_inode+0xb45/0xd10 [ 84.684815][ T5325] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 84.687336][ T5325] ext4_evict_inode+0xa63/0xe60 [ 84.689370][ T5325] ? __pfx_ext4_evict_inode+0x10/0x10 [ 84.691745][ T5325] ? do_raw_spin_unlock+0x4d/0x210 [ 84.693991][ T5325] ? __pfx_ext4_evict_inode+0x10/0x10 [ 84.696313][ T5325] evict+0x61e/0xb10 [ 84.697992][ T5325] ? __pfx_evict+0x10/0x10 [ 84.699872][ T5325] ? _raw_spin_unlock+0x28/0x50 [ 84.702070][ T5325] ? iput+0xcc2/0x1020 [ 84.703890][ T5325] ext4_orphan_cleanup+0xc38/0x1470 [ 84.705987][ T5325] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 84.708323][ T5325] ? ext4_register_li_request+0x640/0x720 [ 84.710772][ T5325] ? errseq_check_and_advance+0x66/0x120 [ 84.713268][ T5325] ext4_fill_super+0x5932/0x61f0 [ 84.715364][ T5325] ? __pfx_ext4_fill_super+0x10/0x10 [ 84.717391][ T5325] ? snprintf+0xe8/0x140 [ 84.719119][ T5325] ? set_blocksize+0x20b/0x4b0 [ 84.721215][ T5325] ? sb_set_blocksize+0x155/0x240 [ 84.723428][ T5325] ? setup_bdev_super+0x4c1/0x5b0 [ 84.725472][ T5325] get_tree_bdev_flags+0x431/0x4f0 [ 84.727673][ T5325] ? __pfx_ext4_fill_super+0x10/0x10 [ 84.729994][ T5325] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 84.732425][ T5325] vfs_get_tree+0x92/0x2a0 [ 84.734375][ T5325] do_new_mount+0x329/0xa50 [ 84.736386][ T5325] ? apparmor_capable+0x137/0x1a0 [ 84.738583][ T5325] ? __pfx_do_new_mount+0x10/0x10 [ 84.740717][ T5325] ? ns_capable+0x89/0xe0 [ 84.742538][ T5325] __se_sys_mount+0x31d/0x420 [ 84.744610][ T5325] ? __pfx___se_sys_mount+0x10/0x10 [ 84.746936][ T5325] ? __x64_sys_mount+0x20/0xc0 [ 84.749031][ T5325] do_syscall_64+0xe2/0xf80 [ 84.750992][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.753663][ T5325] ? trace_irq_disable+0x37/0x100 [ 84.755932][ T5325] ? clear_bhb_loop+0x60/0xb0 [ 84.758084][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.760692][ T5325] RIP: 0033:0x7f99a639c14a [ 84.762668][ T5325] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.770764][ T5325] RSP: 002b:00007f99a7179e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.774463][ T5325] RAX: ffffffffffffffda RBX: 00007f99a7179ee0 RCX: 00007f99a639c14a [ 84.777771][ T5325] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f99a7179ea0 [ 84.781360][ T5325] RBP: 0000200000000180 R08: 00007f99a7179ee0 R09: 0000000000800700 [ 84.785156][ T5325] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000000 [ 84.788677][ T5325] R13: 00007f99a7179ea0 R14: 000000000000046f R15: 00002000000007c0 [ 84.791654][ T5325] [ 84.793339][ T5325] Kernel Offset: disabled [ 84.794904][ T5325] Rebooting in 86400 seconds..