program: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") [ 74.529785][ T45] Bluetooth: hci0: command tx timeout [ 74.596164][ T5354] loop0: detected capacity change from 0 to 512 [ 74.683148][ T5354] EXT4-fs warning (device loop0): ext4_xattr_inode_get:556: inode #11: comm syz.0.0: EA inode hash validation failed [ 74.701102][ T5354] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 74.706431][ T5354] ------------[ cut here ]------------ [ 74.709230][ T5354] EA inode 11 ref_count=-1 [ 74.738084][ T5354] WARNING: CPU: 0 PID: 5354 at fs/ext4/xattr.c:1048 ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 74.744585][ T5354] Modules linked in: [ 74.746229][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.751559][ T5354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.756500][ T5354] RIP: 0010:ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 74.760215][ T5354] Code: 78 40 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 78 34 9d ff 49 8b 37 48 c7 c7 e0 f4 9f 8b 4c 89 ea e8 86 d0 fb fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4c 8b 74 24 20 4c 8b 6c [ 74.768390][ T5354] RSP: 0018:ffffc9000d4d72e0 EFLAGS: 00010246 [ 74.771341][ T5354] RAX: 8ca0da5846089200 RBX: dffffc0000000000 RCX: 0000000000100000 [ 74.774549][ T5354] RDX: ffffc9000e362000 RSI: 000000000000876e RDI: 000000000000876f [ 74.777717][ T5354] RBP: ffffc9000d4d73d0 R08: 0000000000000003 R09: 0000000000000004 [ 74.781449][ T5354] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffffc9000d4d7340 [ 74.784799][ T5354] R13: ffffffffffffffff R14: 00000000ffffffff R15: ffff888044829f88 [ 74.788261][ T5354] FS: 00007f0208ea66c0(0000) GS:ffff88808d20c000(0000) knlGS:0000000000000000 [ 74.792025][ T5354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.794701][ T5354] CR2: 00007f397bf81000 CR3: 000000004356e000 CR4: 0000000000352ef0 [ 74.798460][ T5354] Call Trace: [ 74.800050][ T5354] [ 74.801289][ T5354] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 74.803929][ T5354] ? __kasan_kmalloc+0x93/0xb0 [ 74.805955][ T5354] ? __ext4_journal_ensure_credits+0x30/0x450 [ 74.808651][ T5354] ext4_xattr_inode_dec_ref_all+0x867/0xda0 [ 74.811120][ T5354] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 74.813401][ T5354] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 74.815858][ T5354] ? __ext4_journal_get_write_access+0x272/0x570 [ 74.818486][ T5354] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 74.821345][ T5354] ext4_xattr_delete_inode+0xa4c/0xc10 [ 74.823638][ T5354] ? ext4_truncate+0xc2d/0x1100 [ 74.825788][ T5354] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 74.828602][ T5354] ext4_evict_inode+0xac9/0xee0 [ 74.830668][ T5354] ? __pfx_ext4_evict_inode+0x10/0x10 [ 74.833001][ T5354] ? do_raw_spin_unlock+0x4d/0x240 [ 74.835157][ T5354] ? __pfx_ext4_evict_inode+0x10/0x10 [ 74.837426][ T5354] evict+0x504/0x9c0 [ 74.839259][ T5354] ? __pfx_evict+0x10/0x10 [ 74.841242][ T5354] ? do_raw_spin_unlock+0x4d/0x240 [ 74.843913][ T5354] ? _raw_spin_unlock+0x28/0x50 [ 74.846092][ T5354] ? iput+0x6d8/0x9d0 [ 74.847788][ T5354] ext4_orphan_cleanup+0xc20/0x1460 [ 74.850475][ T5354] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 74.852929][ T5354] ? ext4_register_li_request+0x640/0x720 [ 74.855597][ T5354] ? errseq_check_and_advance+0x66/0x120 [ 74.858301][ T5354] ext4_fill_super+0x57df/0x6090 [ 74.860886][ T5354] ? __pfx_ext4_fill_super+0x10/0x10 [ 74.863303][ T5354] ? set_blocksize+0x21e/0x500 [ 74.865362][ T5354] ? sb_set_blocksize+0x104/0x180 [ 74.867508][ T5354] ? setup_bdev_super+0x4c1/0x5b0 [ 74.869726][ T5354] get_tree_bdev_flags+0x40e/0x4d0 [ 74.871859][ T5354] ? __pfx_ext4_fill_super+0x10/0x10 [ 74.874199][ T5354] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 74.876853][ T5354] vfs_get_tree+0x92/0x2b0 [ 74.879064][ T5354] do_new_mount+0x2a2/0x9e0 [ 74.881028][ T5354] ? ns_capable+0x8a/0xf0 [ 74.882765][ T5354] ? __pfx_do_new_mount+0x10/0x10 [ 74.884746][ T5354] ? path_mount+0x61c/0xfe0 [ 74.886506][ T5354] ? user_path_at+0x44/0x60 [ 74.888391][ T5354] __se_sys_mount+0x317/0x410 [ 74.890604][ T5354] ? __pfx___se_sys_mount+0x10/0x10 [ 74.892849][ T5354] ? do_syscall_64+0xbe/0x3b0 [ 74.894887][ T5354] ? __x64_sys_mount+0x20/0xc0 [ 74.896859][ T5354] do_syscall_64+0xfa/0x3b0 [ 74.898925][ T5354] ? lockdep_hardirqs_on+0x9c/0x150 [ 74.901281][ T5354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.903890][ T5354] ? clear_bhb_loop+0x60/0xb0 [ 74.906041][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.908717][ T5354] RIP: 0033:0x7f0207f9038a [ 74.910459][ T5354] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.918073][ T5354] RSP: 002b:00007f0208ea5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.921429][ T5354] RAX: ffffffffffffffda RBX: 00007f0208ea5ef0 RCX: 00007f0207f9038a [ 74.924731][ T5354] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f0208ea5eb0 [ 74.927953][ T5354] RBP: 0000200000000180 R08: 00007f0208ea5ef0 R09: 0000000000800700 [ 74.931313][ T5354] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 74.934595][ T5354] R13: 00007f0208ea5eb0 R14: 0000000000000473 R15: 0000200000000680 [ 74.937677][ T5354] [ 74.939016][ T5354] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.941806][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.945281][ T5354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.949602][ T5354] Call Trace: [ 74.951018][ T5354] [ 74.952401][ T5354] dump_stack_lvl+0x99/0x250 [ 74.954529][ T5354] ? __asan_memcpy+0x40/0x70 [ 74.956697][ T5354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.959309][ T5354] ? __pfx__printk+0x10/0x10 [ 74.961268][ T5354] vpanic+0x281/0x750 [ 74.962981][ T5354] ? __pfx__printk+0x10/0x10 [ 74.964850][ T5354] ? __pfx_vpanic+0x10/0x10 [ 74.966708][ T5354] ? is_bpf_text_address+0x26/0x2b0 [ 74.969025][ T5354] panic+0xb9/0xc0 [ 74.970681][ T5354] ? __pfx_panic+0x10/0x10 [ 74.972583][ T5354] __warn+0x31b/0x4b0 [ 74.974282][ T5354] ? ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 74.976811][ T5354] ? ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 74.979839][ T5354] report_bug+0x2be/0x4f0 [ 74.981660][ T5354] ? ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 74.984142][ T5354] ? ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 74.986731][ T5354] ? ext4_xattr_inode_update_ref+0x44d/0x5d0 [ 74.989436][ T5354] handle_bug+0x84/0x160 [ 74.991375][ T5354] exc_invalid_op+0x1a/0x50 [ 74.993450][ T5354] asm_exc_invalid_op+0x1a/0x20 [ 74.995643][ T5354] RIP: 0010:ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 74.998731][ T5354] Code: 78 40 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 78 34 9d ff 49 8b 37 48 c7 c7 e0 f4 9f 8b 4c 89 ea e8 86 d0 fb fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4c 8b 74 24 20 4c 8b 6c [ 75.007538][ T5354] RSP: 0018:ffffc9000d4d72e0 EFLAGS: 00010246 [ 75.010069][ T5354] RAX: 8ca0da5846089200 RBX: dffffc0000000000 RCX: 0000000000100000 [ 75.013439][ T5354] RDX: ffffc9000e362000 RSI: 000000000000876e RDI: 000000000000876f [ 75.016860][ T5354] RBP: ffffc9000d4d73d0 R08: 0000000000000003 R09: 0000000000000004 [ 75.020228][ T5354] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffffc9000d4d7340 [ 75.023772][ T5354] R13: ffffffffffffffff R14: 00000000ffffffff R15: ffff888044829f88 [ 75.027335][ T5354] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 75.030175][ T5354] ? __kasan_kmalloc+0x93/0xb0 [ 75.032249][ T5354] ? __ext4_journal_ensure_credits+0x30/0x450 [ 75.034964][ T5354] ext4_xattr_inode_dec_ref_all+0x867/0xda0 [ 75.037553][ T5354] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 75.040102][ T5354] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 75.042815][ T5354] ? __ext4_journal_get_write_access+0x272/0x570 [ 75.045511][ T5354] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 75.048369][ T5354] ext4_xattr_delete_inode+0xa4c/0xc10 [ 75.051131][ T5354] ? ext4_truncate+0xc2d/0x1100 [ 75.053768][ T5354] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 75.056780][ T5354] ext4_evict_inode+0xac9/0xee0 [ 75.059037][ T5354] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.061305][ T5354] ? do_raw_spin_unlock+0x4d/0x240 [ 75.063599][ T5354] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.065983][ T5354] evict+0x504/0x9c0 [ 75.067722][ T5354] ? __pfx_evict+0x10/0x10 [ 75.069709][ T5354] ? do_raw_spin_unlock+0x4d/0x240 [ 75.071910][ T5354] ? _raw_spin_unlock+0x28/0x50 [ 75.074101][ T5354] ? iput+0x6d8/0x9d0 [ 75.075927][ T5354] ext4_orphan_cleanup+0xc20/0x1460 [ 75.078221][ T5354] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 75.080651][ T5354] ? ext4_register_li_request+0x640/0x720 [ 75.083322][ T5354] ? errseq_check_and_advance+0x66/0x120 [ 75.085972][ T5354] ext4_fill_super+0x57df/0x6090 [ 75.088169][ T5354] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.090509][ T5354] ? set_blocksize+0x21e/0x500 [ 75.092535][ T5354] ? sb_set_blocksize+0x104/0x180 [ 75.094705][ T5354] ? setup_bdev_super+0x4c1/0x5b0 [ 75.096781][ T5354] get_tree_bdev_flags+0x40e/0x4d0 [ 75.098975][ T5354] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.101208][ T5354] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 75.103650][ T5354] vfs_get_tree+0x92/0x2b0 [ 75.105628][ T5354] do_new_mount+0x2a2/0x9e0 [ 75.107618][ T5354] ? ns_capable+0x8a/0xf0 [ 75.109721][ T5354] ? __pfx_do_new_mount+0x10/0x10 [ 75.111914][ T5354] ? path_mount+0x61c/0xfe0 [ 75.113841][ T5354] ? user_path_at+0x44/0x60 [ 75.115843][ T5354] __se_sys_mount+0x317/0x410 [ 75.118051][ T5354] ? __pfx___se_sys_mount+0x10/0x10 [ 75.120369][ T5354] ? do_syscall_64+0xbe/0x3b0 [ 75.122292][ T5354] ? __x64_sys_mount+0x20/0xc0 [ 75.124278][ T5354] do_syscall_64+0xfa/0x3b0 [ 75.126302][ T5354] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.128411][ T5354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.130957][ T5354] ? clear_bhb_loop+0x60/0xb0 [ 75.132981][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.135474][ T5354] RIP: 0033:0x7f0207f9038a [ 75.137362][ T5354] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.145575][ T5354] RSP: 002b:00007f0208ea5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.149203][ T5354] RAX: ffffffffffffffda RBX: 00007f0208ea5ef0 RCX: 00007f0207f9038a [ 75.152890][ T5354] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f0208ea5eb0 [ 75.156974][ T5354] RBP: 0000200000000180 R08: 00007f0208ea5ef0 R09: 0000000000800700 [ 75.160665][ T5354] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 75.164047][ T5354] R13: 00007f0208ea5eb0 R14: 0000000000000473 R15: 0000200000000680 [ 75.167467][ T5354] [ 75.169313][ T5354] Kernel Offset: disabled [ 75.171096][ T5354] Rebooting in 86400 seconds..