program: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, 0x0, &(0x7f0000001000)=""/4096}, 0x20) chroot(&(0x7f0000000140)='./file0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000740)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@resuid={'resuid', 0x3d, r1}}, {@nouid32}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000200)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey72WYTYzadmP18YHafZ+bZnee7z7w8+zy7AXStoewhidgREb9GxEAju7jAUOPp+tXzkzeunp9MYmHhtT+SvNy1q+cny6Ll67YXmeE0Iv0wKXay2OzZcycn6vXamSI/OnfqrdHZs+eeeOfUxInaidrp8SNHDh8ae/qp8Sc7EmcW17V978/s3/viG5denjx26c0fv87qu6PY3hxHpwxlgf+5kGvd9mind1axnU3ppLfCirAqPRGRNVdffv4PRE/caryBeOGDSisHrKvs3rSl/eb5BWATS6LqGgDVKG/02fffcrlDXY8N4cqzjS9AWdzXi6WxpTfSokxfy/fbThqKiGPzf32eLbFO4xAAAM0+nvzsaH9EvHfjq5eyvsdARJTjQffkj7/lj7uKOZTBiPh/ROyOiLsiYk9E3F2UvTci7ltjfW7v/6SX1/iWy8r6f88Uc1uL+39l7y8Ge4rczjz+vuT4dL12sPhMhqNvS5YfW2Yf3z7/yyfttjX3/7Il23/ZFyzqcbm3ZYBuamJuIu+UdsCVixH7epeKP7k5E5BExN6I2Le6t95VJqYf+3J/u0Irx7+MDswzLXyRhTefxT8fLfGXkub5yenb5idHt0a9dnC0PCpu99PPH73abv9rir8DrtQaz03t31pkMGmer53t7P7/5fGf9iev5/PM/cW6dyfm5s6MRfQnR/P8ovXjt15b5svy2fE/fGDp83938Zos/vsjIjuIH4iIByPioaLuD0fEIxFxYJkYf3hu5fgjraj9L0ZMLXn9u3n8t7T/6hM9J7//pt3+/1n7H85Tw8Wa/Pq3gqWqk10uWiu4ls8OAAAA/ivS/DfwSTpyM52mIyON3/Dvif+l9ZnZucePz7x9eqrxW/nB6EvLka6BYjy0Pl2vjSXzxTs2xkfHi7Hicrz0UDFu/GnPtjw/MjlTn6o4duh229uc/5nfe6quHbDOti25drz/jlcEqEDrPHq6OHvhlXAxgM3K/7Whe61w/jf/DwbYZNz/oXstdf5faMmbC4DNyf0fupfzH7pU+l3VNQAq5P4PXWkt/+tfx8TWjVGNahIbtVHyRESZSDdEfSTWKVH1lQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAz/g4AAP//K2Lmiw==") [ 85.131815][ T4671] Bluetooth: hci0: command tx timeout [ 85.239495][ T5330] loop0: detected capacity change from 0 to 512 [ 85.272347][ T5330] ------------[ cut here ]------------ [ 85.274895][ T5330] EA inode 11 i_nlink=0 [ 85.274931][ T5330] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x4c9/0x5a0, CPU#0: syz.0.0/5330 [ 85.281435][ T5330] Modules linked in: [ 85.283257][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.286888][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.291324][ T5330] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0 [ 85.294306][ T5330] Code: 74 08 4c 89 ef e8 3f 1f 98 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 6b c9 02 09 44 89 [ 85.302732][ T5330] RSP: 0018:ffffc90003b27240 EFLAGS: 00010246 [ 85.305442][ T5330] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000 [ 85.308897][ T5330] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff8ff5d870 [ 85.312501][ T5330] RBP: ffffc90003b27330 R08: ffff8880129fa16f R09: 1ffff1100253f42d [ 85.316028][ T5330] R10: dffffc0000000000 R11: ffffed100253f42e R12: ffffffff8ff5d870 [ 85.319291][ T5330] R13: 000000000000000b R14: 1ffff1100253f3f8 R15: ffff8880129f9fc0 [ 85.322410][ T5330] FS: 00007fe961b406c0(0000) GS:ffff88808ccea000(0000) knlGS:0000000000000000 [ 85.325779][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.328379][ T5330] CR2: 00007f3e56f909c0 CR3: 000000004081d000 CR4: 0000000000352ef0 [ 85.331905][ T5330] Call Trace: [ 85.333386][ T5330] [ 85.334725][ T5330] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 85.337452][ T5330] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 85.340686][ T5330] ? ext4_xattr_inode_dec_ref_all+0x4d2/0xe40 [ 85.343699][ T5330] ? __ext4_journal_ensure_credits+0x30/0x450 [ 85.346029][ T5330] ext4_xattr_inode_dec_ref_all+0x8cb/0xe40 [ 85.348229][ T5330] ? __mark_inode_dirty+0xb3c/0x1320 [ 85.350683][ T5330] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 85.353488][ T5330] ? __ext4_journal_get_write_access+0x27f/0x590 [ 85.356319][ T5330] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 85.359246][ T5330] ext4_xattr_delete_inode+0xb45/0xd10 [ 85.361781][ T5330] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 85.364521][ T5330] ext4_evict_inode+0xa63/0xe60 [ 85.366577][ T5330] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.368955][ T5330] ? do_raw_spin_unlock+0x4d/0x210 [ 85.371378][ T5330] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.373742][ T5330] evict+0x61e/0xb10 [ 85.375551][ T5330] ? __pfx_evict+0x10/0x10 [ 85.377592][ T5330] ? _raw_spin_unlock+0x28/0x50 [ 85.381597][ T5330] ? iput+0xcc2/0x1020 [ 85.383436][ T5330] ext4_orphan_cleanup+0xc38/0x1470 [ 85.385685][ T5330] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 85.388104][ T5330] ? ext4_register_li_request+0x640/0x720 [ 85.390928][ T5330] ? errseq_check_and_advance+0x66/0x120 [ 85.393768][ T5330] ext4_fill_super+0x5932/0x61f0 [ 85.395997][ T5330] ? __pfx_ext4_fill_super+0x10/0x10 [ 85.398379][ T5330] ? snprintf+0xe8/0x140 [ 85.400289][ T5330] ? set_blocksize+0x20b/0x4b0 [ 85.402118][ T5330] ? sb_set_blocksize+0x155/0x240 [ 85.404139][ T5330] ? setup_bdev_super+0x4c1/0x5b0 [ 85.406087][ T5330] get_tree_bdev_flags+0x431/0x4f0 [ 85.408329][ T5330] ? __pfx_ext4_fill_super+0x10/0x10 [ 85.410520][ T5330] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 85.412990][ T5330] vfs_get_tree+0x92/0x2a0 [ 85.414863][ T5330] do_new_mount+0x329/0xa50 [ 85.416692][ T5330] ? apparmor_capable+0x137/0x1a0 [ 85.419142][ T5330] ? __pfx_do_new_mount+0x10/0x10 [ 85.421552][ T5330] ? ns_capable+0x89/0xe0 [ 85.423726][ T5330] __se_sys_mount+0x31d/0x420 [ 85.425804][ T5330] ? __pfx___se_sys_mount+0x10/0x10 [ 85.427860][ T5330] ? __x64_sys_mount+0x20/0xc0 [ 85.429932][ T5330] do_syscall_64+0xe2/0xf80 [ 85.431991][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.434583][ T5330] ? trace_irq_disable+0x37/0x100 [ 85.436761][ T5330] ? clear_bhb_loop+0x60/0xb0 [ 85.438906][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.441461][ T5330] RIP: 0033:0x7fe960b9c14a [ 85.443340][ T5330] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.451286][ T5330] RSP: 002b:00007fe961b3fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.454494][ T5330] RAX: ffffffffffffffda RBX: 00007fe961b3fee0 RCX: 00007fe960b9c14a [ 85.457680][ T5330] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fe961b3fea0 [ 85.461150][ T5330] RBP: 0000200000000180 R08: 00007fe961b3fee0 R09: 0000000000800700 [ 85.464655][ T5330] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 85.468157][ T5330] R13: 00007fe961b3fea0 R14: 000000000000046f R15: 0000200000000740 [ 85.471639][ T5330] [ 85.473039][ T5330] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.476191][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.479892][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.484056][ T5330] Call Trace: [ 85.485423][ T5330] [ 85.486569][ T5330] vpanic+0x1e0/0x670 [ 85.488395][ T5330] panic+0xc5/0xd0 [ 85.490196][ T5330] ? __pfx_panic+0x10/0x10 [ 85.492305][ T5330] __warn+0x315/0x4a0 [ 85.494337][ T5330] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 85.497226][ T5330] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 85.499846][ T5330] __report_bug+0x29a/0x540 [ 85.501801][ T5330] ? ext4_get_group_desc+0x434/0x4e0 [ 85.504066][ T5330] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 85.506691][ T5330] ? __pfx___report_bug+0x10/0x10 [ 85.508893][ T5330] ? set_normalized_timespec64+0xf0/0x1a0 [ 85.511391][ T5330] ? __ext4_journal_get_write_access+0x84/0x590 [ 85.514084][ T5330] report_bug_entry+0x19a/0x290 [ 85.516225][ T5330] ? ext4_xattr_inode_update_ref+0x511/0x5a0 [ 85.518894][ T5330] ? ext4_xattr_inode_update_ref+0x516/0x5a0 [ 85.521471][ T5330] handle_bug+0xca/0x200 [ 85.523385][ T5330] exc_invalid_op+0x1a/0x50 [ 85.525243][ T5330] asm_exc_invalid_op+0x1a/0x20 [ 85.527324][ T5330] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0 [ 85.530144][ T5330] Code: 74 08 4c 89 ef e8 3f 1f 98 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 6b c9 02 09 44 89 [ 85.538487][ T5330] RSP: 0018:ffffc90003b27240 EFLAGS: 00010246 [ 85.541224][ T5330] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000 [ 85.544475][ T5330] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff8ff5d870 [ 85.547760][ T5330] RBP: ffffc90003b27330 R08: ffff8880129fa16f R09: 1ffff1100253f42d [ 85.551325][ T5330] R10: dffffc0000000000 R11: ffffed100253f42e R12: ffffffff8ff5d870 [ 85.554903][ T5330] R13: 000000000000000b R14: 1ffff1100253f3f8 R15: ffff8880129f9fc0 [ 85.558445][ T5330] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 85.561256][ T5330] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 85.563697][ T5330] ? ext4_xattr_inode_dec_ref_all+0x4d2/0xe40 [ 85.566045][ T5330] ? __ext4_journal_ensure_credits+0x30/0x450 [ 85.568604][ T5330] ext4_xattr_inode_dec_ref_all+0x8cb/0xe40 [ 85.571081][ T5330] ? __mark_inode_dirty+0xb3c/0x1320 [ 85.573267][ T5330] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 85.575968][ T5330] ? __ext4_journal_get_write_access+0x27f/0x590 [ 85.578571][ T5330] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 85.581798][ T5330] ext4_xattr_delete_inode+0xb45/0xd10 [ 85.584403][ T5330] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 85.587070][ T5330] ext4_evict_inode+0xa63/0xe60 [ 85.589106][ T5330] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.591462][ T5330] ? do_raw_spin_unlock+0x4d/0x210 [ 85.593694][ T5330] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.595935][ T5330] evict+0x61e/0xb10 [ 85.597568][ T5330] ? __pfx_evict+0x10/0x10 [ 85.599494][ T5330] ? _raw_spin_unlock+0x28/0x50 [ 85.601467][ T5330] ? iput+0xcc2/0x1020 [ 85.603276][ T5330] ext4_orphan_cleanup+0xc38/0x1470 [ 85.605550][ T5330] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 85.607931][ T5330] ? ext4_register_li_request+0x640/0x720 [ 85.610262][ T5330] ? errseq_check_and_advance+0x66/0x120 [ 85.612638][ T5330] ext4_fill_super+0x5932/0x61f0 [ 85.614580][ T5330] ? __pfx_ext4_fill_super+0x10/0x10 [ 85.616882][ T5330] ? snprintf+0xe8/0x140 [ 85.618698][ T5330] ? set_blocksize+0x20b/0x4b0 [ 85.620888][ T5330] ? sb_set_blocksize+0x155/0x240 [ 85.623175][ T5330] ? setup_bdev_super+0x4c1/0x5b0 [ 85.625407][ T5330] get_tree_bdev_flags+0x431/0x4f0 [ 85.627738][ T5330] ? __pfx_ext4_fill_super+0x10/0x10 [ 85.630056][ T5330] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 85.632483][ T5330] vfs_get_tree+0x92/0x2a0 [ 85.634399][ T5330] do_new_mount+0x329/0xa50 [ 85.636317][ T5330] ? apparmor_capable+0x137/0x1a0 [ 85.638421][ T5330] ? __pfx_do_new_mount+0x10/0x10 [ 85.640528][ T5330] ? ns_capable+0x89/0xe0 [ 85.642377][ T5330] __se_sys_mount+0x31d/0x420 [ 85.644435][ T5330] ? __pfx___se_sys_mount+0x10/0x10 [ 85.646592][ T5330] ? __x64_sys_mount+0x20/0xc0 [ 85.648585][ T5330] do_syscall_64+0xe2/0xf80 [ 85.650522][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.653234][ T5330] ? trace_irq_disable+0x37/0x100 [ 85.655391][ T5330] ? clear_bhb_loop+0x60/0xb0 [ 85.657287][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.659794][ T5330] RIP: 0033:0x7fe960b9c14a [ 85.661761][ T5330] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.670124][ T5330] RSP: 002b:00007fe961b3fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.673559][ T5330] RAX: ffffffffffffffda RBX: 00007fe961b3fee0 RCX: 00007fe960b9c14a [ 85.676933][ T5330] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fe961b3fea0 [ 85.680507][ T5330] RBP: 0000200000000180 R08: 00007fe961b3fee0 R09: 0000000000800700 [ 85.683991][ T5330] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 85.687388][ T5330] R13: 00007fe961b3fea0 R14: 000000000000046f R15: 0000200000000740 [ 85.690820][ T5330] [ 85.692469][ T5330] Kernel Offset: disabled [ 85.694332][ T5330] Rebooting in 86400 seconds..