program: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/U7/jVv8jjfvy59/yv7uKOZTBiLg7InZHxD0RsSci7o3I294fEQ+sMp7b+z/plVV+5LKy/t9zxdzW4v5f2fuLwZ6itjPPvy85Pl2vHSz+J8PRtyWrjy2zjm9e/PmTdsua+3/ZI1t/2Rcs4rjS2zJANzUxN5F3Sjvg6sWIfb1L5Z/cnAlIImJvROxb2UfvKgvTT3y5v12jO+e/jA7MMy18kaU3n+U/Hy35l5Lm+cnp2+YnR7dGvXZwtNwrbvfjT5dea7f+VeXfAVdrjeem7d/aZDBpnq+dXfk6Lv36Udt7mv+4/6f9yRv5PHN/8dp7E3NzZ8Yi+pOjeX3R6+O33lvWy/bZ/j98YOnjf3fxniz/ByMi24kfioiHI+KRIvZHI+KxiDiwTP7fv9B+WZl/pBVt/4sRU0ue/27u/y3bf+WFnpPffd1u/f9u+x/OS8PFK/n57w6WCic7XbQGuJr/HQAAAPxfpPl34JN05GY5TUdGGt/h3xN3pfWZ2bknj8+8c3qq8V35wehLy5GugWI8tD5dr40l88UnNsZHx4ux4nK89FAxbvxpz7a8PjI5U5+qOHfodtvbHP+Z33uqjg5YY9uWfHW8f90DASrQOo+eLq5eeDWcDGCz8ntt6F53OP7T9YoDWH+u/9C9ljr+L7TUzQXA5uT6D93L8Q9dKv226giACrn+Q1daze/617CwdWOEUU1ho26UvBBRFtINEY/CGhWqPjMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xj8BAAD//02e6R0=") [ 75.463755][ T5334] Bluetooth: hci0: command tx timeout [ 75.506216][ T5354] loop0: detected capacity change from 0 to 512 [ 75.558815][ T5354] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.584233][ T5354] EXT4-fs warning (device loop0): ext4_xattr_inode_get:556: inode #11: comm syz.0.0: EA inode hash validation failed [ 75.594202][ T5354] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.609875][ T5354] ------------[ cut here ]------------ [ 75.612371][ T5354] EA inode 11 ref_count=-1 [ 75.612509][ T5354] WARNING: CPU: 0 PID: 5354 at fs/ext4/xattr.c:1048 ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 75.618727][ T5354] Modules linked in: [ 75.620893][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.624604][ T5354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.629035][ T5354] RIP: 0010:ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 75.632143][ T5354] Code: 78 40 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 b8 33 9d ff 49 8b 37 48 c7 c7 e0 f4 9f 8b 4c 89 ea e8 56 cf fb fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4c 8b 74 24 20 4c 8b 6c [ 75.640277][ T5354] RSP: 0018:ffffc9000d2ef2e0 EFLAGS: 00010246 [ 75.642847][ T5354] RAX: 2f1c6fb774be4400 RBX: dffffc0000000000 RCX: 0000000000100000 [ 75.646152][ T5354] RDX: ffffc9000e08a000 RSI: 0000000000009ee9 RDI: 0000000000009eea [ 75.649608][ T5354] RBP: ffffc9000d2ef3d0 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 75.653008][ T5354] R10: dffffc0000000000 R11: ffffed1003f8484b R12: ffffc9000d2ef340 [ 75.656490][ T5354] R13: ffffffffffffffff R14: 00000000ffffffff R15: ffff8880433995f8 [ 75.659847][ T5354] FS: 00007f11e85ed6c0(0000) GS:ffff88808d20c000(0000) knlGS:0000000000000000 [ 75.663565][ T5354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.666325][ T5354] CR2: 00007f63e7b9a000 CR3: 0000000043ee8000 CR4: 0000000000352ef0 [ 75.669481][ T5354] Call Trace: [ 75.670827][ T5354] [ 75.672083][ T5354] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 75.674675][ T5354] ? __kasan_kmalloc+0x93/0xb0 [ 75.676643][ T5354] ? __ext4_journal_ensure_credits+0x30/0x450 [ 75.679348][ T5354] ext4_xattr_inode_dec_ref_all+0x867/0xda0 [ 75.681867][ T5354] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 75.684243][ T5354] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 75.686963][ T5354] ? __ext4_journal_get_write_access+0x272/0x570 [ 75.689892][ T5354] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 75.693049][ T5354] ext4_xattr_delete_inode+0xa4c/0xc10 [ 75.695496][ T5354] ? ext4_truncate+0xc2d/0x1100 [ 75.697723][ T5354] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 75.701369][ T5354] ext4_evict_inode+0xac9/0xee0 [ 75.703492][ T5354] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.705880][ T5354] ? do_raw_spin_unlock+0x4d/0x240 [ 75.708069][ T5354] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.710580][ T5354] evict+0x504/0x9c0 [ 75.712258][ T5354] ? __pfx_evict+0x10/0x10 [ 75.714241][ T5354] ? do_raw_spin_unlock+0x4d/0x240 [ 75.716455][ T5354] ? _raw_spin_unlock+0x28/0x50 [ 75.718645][ T5354] ? iput+0x6d8/0x9d0 [ 75.720366][ T5354] ext4_orphan_cleanup+0xc20/0x1460 [ 75.722475][ T5354] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 75.724830][ T5354] ? ext4_register_li_request+0x259/0x720 [ 75.727186][ T5354] ? errseq_check_and_advance+0x66/0x120 [ 75.729825][ T5354] ext4_fill_super+0x57df/0x6090 [ 75.731945][ T5354] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.734353][ T5354] ? set_blocksize+0x21e/0x500 [ 75.736433][ T5354] ? sb_set_blocksize+0x104/0x180 [ 75.738822][ T5354] ? setup_bdev_super+0x4c1/0x5b0 [ 75.741074][ T5354] get_tree_bdev_flags+0x40e/0x4d0 [ 75.743161][ T5354] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.745415][ T5354] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 75.747876][ T5354] vfs_get_tree+0x8f/0x2b0 [ 75.749803][ T5354] do_new_mount+0x2a2/0x9e0 [ 75.751753][ T5354] ? ns_capable+0x8a/0xf0 [ 75.753613][ T5354] ? __pfx_do_new_mount+0x10/0x10 [ 75.755891][ T5354] ? path_mount+0x61c/0xfe0 [ 75.757672][ T5354] ? user_path_at+0x44/0x60 [ 75.759559][ T5354] __se_sys_mount+0x317/0x410 [ 75.761330][ T5354] ? __pfx___se_sys_mount+0x10/0x10 [ 75.763367][ T5354] ? do_syscall_64+0xbe/0x3b0 [ 75.765238][ T5354] ? __x64_sys_mount+0x20/0xc0 [ 75.768418][ T5354] do_syscall_64+0xfa/0x3b0 [ 75.771918][ T5354] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.774043][ T5354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.776627][ T5354] ? clear_bhb_loop+0x60/0xb0 [ 75.778659][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.781149][ T5354] RIP: 0033:0x7f11ec19034a [ 75.782974][ T5354] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.790824][ T5354] RSP: 002b:00007f11e85ece68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.794931][ T5354] RAX: ffffffffffffffda RBX: 00007f11e85ecef0 RCX: 00007f11ec19034a [ 75.798360][ T5354] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f11e85eceb0 [ 75.802149][ T5354] RBP: 0000200000000180 R08: 00007f11e85ecef0 R09: 000000000080078b [ 75.805805][ T5354] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0 [ 75.809378][ T5354] R13: 00007f11e85eceb0 R14: 0000000000000473 R15: 0000200000000680 [ 75.812461][ T5354] [ 75.813874][ T5354] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.816741][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.821049][ T5354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.826380][ T5354] Call Trace: [ 75.827815][ T5354] [ 75.829114][ T5354] dump_stack_lvl+0x99/0x250 [ 75.831094][ T5354] ? __asan_memcpy+0x40/0x70 [ 75.833094][ T5354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.835322][ T5354] ? __pfx__printk+0x10/0x10 [ 75.837312][ T5354] vpanic+0x281/0x750 [ 75.839100][ T5354] ? __pfx__printk+0x10/0x10 [ 75.841289][ T5354] ? __pfx_vpanic+0x10/0x10 [ 75.843261][ T5354] ? is_bpf_text_address+0x26/0x2b0 [ 75.845674][ T5354] panic+0xb9/0xc0 [ 75.847338][ T5354] ? __pfx_panic+0x10/0x10 [ 75.849387][ T5354] __warn+0x31b/0x4b0 [ 75.851143][ T5354] ? ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 75.853870][ T5354] ? ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 75.856490][ T5354] report_bug+0x2be/0x4f0 [ 75.858479][ T5354] ? ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 75.861110][ T5354] ? ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 75.863822][ T5354] ? ext4_xattr_inode_update_ref+0x44d/0x5d0 [ 75.866516][ T5354] handle_bug+0x84/0x160 [ 75.868318][ T5354] exc_invalid_op+0x1a/0x50 [ 75.870381][ T5354] asm_exc_invalid_op+0x1a/0x20 [ 75.872519][ T5354] RIP: 0010:ext4_xattr_inode_update_ref+0x44b/0x5d0 [ 75.875508][ T5354] Code: 78 40 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 b8 33 9d ff 49 8b 37 48 c7 c7 e0 f4 9f 8b 4c 89 ea e8 56 cf fb fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4c 8b 74 24 20 4c 8b 6c [ 75.883666][ T5354] RSP: 0018:ffffc9000d2ef2e0 EFLAGS: 00010246 [ 75.886514][ T5354] RAX: 2f1c6fb774be4400 RBX: dffffc0000000000 RCX: 0000000000100000 [ 75.890076][ T5354] RDX: ffffc9000e08a000 RSI: 0000000000009ee9 RDI: 0000000000009eea [ 75.893586][ T5354] RBP: ffffc9000d2ef3d0 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 75.896967][ T5354] R10: dffffc0000000000 R11: ffffed1003f8484b R12: ffffc9000d2ef340 [ 75.900333][ T5354] R13: ffffffffffffffff R14: 00000000ffffffff R15: ffff8880433995f8 [ 75.903733][ T5354] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 75.906663][ T5354] ? __kasan_kmalloc+0x93/0xb0 [ 75.909138][ T5354] ? __ext4_journal_ensure_credits+0x30/0x450 [ 75.911795][ T5354] ext4_xattr_inode_dec_ref_all+0x867/0xda0 [ 75.914485][ T5354] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 75.917119][ T5354] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 75.919942][ T5354] ? __ext4_journal_get_write_access+0x272/0x570 [ 75.922618][ T5354] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 75.925279][ T5354] ext4_xattr_delete_inode+0xa4c/0xc10 [ 75.927505][ T5354] ? ext4_truncate+0xc2d/0x1100 [ 75.929489][ T5354] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 75.931895][ T5354] ext4_evict_inode+0xac9/0xee0 [ 75.933908][ T5354] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.936067][ T5354] ? do_raw_spin_unlock+0x4d/0x240 [ 75.937970][ T5354] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.940265][ T5354] evict+0x504/0x9c0 [ 75.942014][ T5354] ? __pfx_evict+0x10/0x10 [ 75.943955][ T5354] ? do_raw_spin_unlock+0x4d/0x240 [ 75.946230][ T5354] ? _raw_spin_unlock+0x28/0x50 [ 75.948351][ T5354] ? iput+0x6d8/0x9d0 [ 75.950080][ T5354] ext4_orphan_cleanup+0xc20/0x1460 [ 75.952350][ T5354] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 75.954771][ T5354] ? ext4_register_li_request+0x259/0x720 [ 75.957231][ T5354] ? errseq_check_and_advance+0x66/0x120 [ 75.959600][ T5354] ext4_fill_super+0x57df/0x6090 [ 75.961777][ T5354] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.963969][ T5354] ? set_blocksize+0x21e/0x500 [ 75.966040][ T5354] ? sb_set_blocksize+0x104/0x180 [ 75.968201][ T5354] ? setup_bdev_super+0x4c1/0x5b0 [ 75.970401][ T5354] get_tree_bdev_flags+0x40e/0x4d0 [ 75.972615][ T5354] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.974860][ T5354] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 75.977235][ T5354] vfs_get_tree+0x8f/0x2b0 [ 75.979180][ T5354] do_new_mount+0x2a2/0x9e0 [ 75.981093][ T5354] ? ns_capable+0x8a/0xf0 [ 75.982978][ T5354] ? __pfx_do_new_mount+0x10/0x10 [ 75.985065][ T5354] ? path_mount+0x61c/0xfe0 [ 75.986998][ T5354] ? user_path_at+0x44/0x60 [ 75.988922][ T5354] __se_sys_mount+0x317/0x410 [ 75.990950][ T5354] ? __pfx___se_sys_mount+0x10/0x10 [ 75.993204][ T5354] ? do_syscall_64+0xbe/0x3b0 [ 75.995183][ T5354] ? __x64_sys_mount+0x20/0xc0 [ 75.997315][ T5354] do_syscall_64+0xfa/0x3b0 [ 75.999258][ T5354] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.001356][ T5354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.003714][ T5354] ? clear_bhb_loop+0x60/0xb0 [ 76.005589][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.007953][ T5354] RIP: 0033:0x7f11ec19034a [ 76.009848][ T5354] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.018041][ T5354] RSP: 002b:00007f11e85ece68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.021666][ T5354] RAX: ffffffffffffffda RBX: 00007f11e85ecef0 RCX: 00007f11ec19034a [ 76.025208][ T5354] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f11e85eceb0 [ 76.028546][ T5354] RBP: 0000200000000180 R08: 00007f11e85ecef0 R09: 000000000080078b [ 76.031903][ T5354] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0 [ 76.035191][ T5354] R13: 00007f11e85eceb0 R14: 0000000000000473 R15: 0000200000000680 [ 76.038583][ T5354] [ 76.040226][ T5354] Kernel Offset: disabled [ 76.042112][ T5354] Rebooting in 86400 seconds..