program: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46a, &(0x7f0000000bc0)="$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") [ 68.164718][ T4706] Bluetooth: hci0: command tx timeout [ 68.178878][ T5356] loop0: detected capacity change from 0 to 512 [ 68.205903][ T5356] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.226869][ T5356] ------------[ cut here ]------------ [ 68.229624][ T5356] WARNING: CPU: 0 PID: 5356 at fs/ext4/xattr.c:1906 ext4_xattr_block_set+0x25b5/0x2ac0 [ 68.233673][ T5356] Modules linked in: [ 68.235456][ T5356] CPU: 0 UID: 0 PID: 5356 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 68.239077][ T5356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.243880][ T5356] RIP: 0010:ext4_xattr_block_set+0x25b5/0x2ac0 [ 68.246477][ T5356] Code: 00 00 00 e8 3d 9e 9d ff 3e 80 63 28 fd eb 28 e8 91 9f 38 ff 31 db 48 c7 44 24 20 00 00 00 00 e9 88 f1 ff ff e8 7c 9f 38 ff 90 <0f> 0b 90 e9 0e dc ff ff e8 6e 9f 38 ff 48 8b 5c 24 10 4c 8b 74 24 [ 68.255399][ T5356] RSP: 0018:ffffc9000d40f220 EFLAGS: 00010283 [ 68.258274][ T5356] RAX: ffffffff82871dc4 RBX: ffffc9000d40f548 RCX: 0000000000100000 [ 68.261761][ T5356] RDX: ffffc9000de32000 RSI: 0000000000006a36 RDI: 0000000000006a37 [ 68.265392][ T5356] RBP: ffffc9000d40f408 R08: ffff88804ca04020 R09: ffff88804ca04020 [ 68.269355][ T5356] R10: ffff88804ca04400 R11: ffff88804ca04000 R12: 0000000000000000 [ 68.272974][ T5356] R13: 1ffff92001a81eaa R14: 1ffff92001a81ea9 R15: ffffc9000d40f550 [ 68.276365][ T5356] FS: 00007ff20a3f56c0(0000) GS:ffff88808d009000(0000) knlGS:0000000000000000 [ 68.280131][ T5356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.283508][ T5356] CR2: 00007fb524eb09c0 CR3: 000000004305f000 CR4: 0000000000352ef0 [ 68.289099][ T5356] Call Trace: [ 68.291072][ T5356] [ 68.292484][ T5356] ? fs_reclaim_acquire+0x7d/0x100 [ 68.294932][ T5356] ? __pfx_check_xattrs+0x10/0x10 [ 68.297125][ T5356] ? xattr_find_entry+0x126/0x280 [ 68.299354][ T5356] ? xattr_find_entry+0x22a/0x280 [ 68.301938][ T5356] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 68.305151][ T5356] ? ext4_xattr_block_find+0x2d4/0x350 [ 68.307875][ T5356] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 68.310457][ T5356] __ext4_expand_extra_isize+0x30d/0x400 [ 68.312853][ T5356] __ext4_mark_inode_dirty+0x46c/0x700 [ 68.315256][ T5356] ext4_evict_inode+0x80d/0xee0 [ 68.317363][ T5356] ? __pfx_ext4_evict_inode+0x10/0x10 [ 68.319726][ T5356] ? do_raw_spin_unlock+0x4d/0x240 [ 68.322132][ T5356] ? __pfx_ext4_evict_inode+0x10/0x10 [ 68.324945][ T5356] evict+0x504/0x9c0 [ 68.327023][ T5356] ? __pfx_evict+0x10/0x10 [ 68.329047][ T5356] ? do_raw_spin_unlock+0x4d/0x240 [ 68.331133][ T5356] ? _raw_spin_unlock+0x28/0x50 [ 68.333272][ T5356] ? iput+0x6d8/0x9d0 [ 68.335034][ T5356] ext4_orphan_cleanup+0xc20/0x1460 [ 68.337417][ T5356] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 68.339922][ T5356] ? ext4_register_li_request+0x259/0x720 [ 68.342906][ T5356] ? errseq_check_and_advance+0x66/0x120 [ 68.346225][ T5356] ext4_fill_super+0x57df/0x6090 [ 68.348605][ T5356] ? __pfx_ext4_fill_super+0x10/0x10 [ 68.350927][ T5356] ? set_blocksize+0x21e/0x500 [ 68.353110][ T5356] ? sb_set_blocksize+0x104/0x180 [ 68.355774][ T5356] ? setup_bdev_super+0x4c1/0x5b0 [ 68.358021][ T5356] get_tree_bdev_flags+0x40e/0x4d0 [ 68.360671][ T5356] ? __pfx_ext4_fill_super+0x10/0x10 [ 68.363407][ T5356] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 68.366169][ T5356] vfs_get_tree+0x92/0x2b0 [ 68.368277][ T5356] do_new_mount+0x2a2/0x9e0 [ 68.370316][ T5356] ? ns_capable+0x8a/0xf0 [ 68.372212][ T5356] ? __pfx_do_new_mount+0x10/0x10 [ 68.374688][ T5356] ? path_mount+0x61c/0xfe0 [ 68.377219][ T5356] ? user_path_at+0x44/0x60 [ 68.379952][ T5356] __se_sys_mount+0x317/0x410 [ 68.382377][ T5356] ? __pfx___se_sys_mount+0x10/0x10 [ 68.384860][ T5356] ? do_syscall_64+0xbe/0x3b0 [ 68.387084][ T5356] ? __x64_sys_mount+0x20/0xc0 [ 68.389264][ T5356] do_syscall_64+0xfa/0x3b0 [ 68.391232][ T5356] ? lockdep_hardirqs_on+0x9c/0x150 [ 68.393902][ T5356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.397249][ T5356] ? clear_bhb_loop+0x60/0xb0 [ 68.399490][ T5356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.402178][ T5356] RIP: 0033:0x7ff20df903ca [ 68.404684][ T5356] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.415618][ T5356] RSP: 002b:00007ff20a3f4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.419255][ T5356] RAX: ffffffffffffffda RBX: 00007ff20a3f4ef0 RCX: 00007ff20df903ca [ 68.422863][ T5356] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ff20a3f4eb0 [ 68.426117][ T5356] RBP: 0000200000000180 R08: 00007ff20a3f4ef0 R09: 000000000080078b [ 68.429363][ T5356] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0 [ 68.433454][ T5356] R13: 00007ff20a3f4eb0 R14: 000000000000046a R15: 0000200000000680 [ 68.437806][ T5356] [ 68.439435][ T5356] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.443289][ T5356] CPU: 0 UID: 0 PID: 5356 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 68.447353][ T5356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.452046][ T5356] Call Trace: [ 68.453626][ T5356] [ 68.455093][ T5356] dump_stack_lvl+0x99/0x250 [ 68.457635][ T5356] ? __asan_memcpy+0x40/0x70 [ 68.460066][ T5356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.462367][ T5356] ? __pfx__printk+0x10/0x10 [ 68.464672][ T5356] vpanic+0x281/0x750 [ 68.466482][ T5356] ? __pfx__printk+0x10/0x10 [ 68.468338][ T5356] ? __pfx_vpanic+0x10/0x10 [ 68.470311][ T5356] ? is_bpf_text_address+0x26/0x2b0 [ 68.472682][ T5356] panic+0xb9/0xc0 [ 68.474429][ T5356] ? __pfx_panic+0x10/0x10 [ 68.476315][ T5356] __warn+0x31b/0x4b0 [ 68.478100][ T5356] ? ext4_xattr_block_set+0x25b5/0x2ac0 [ 68.480663][ T5356] ? ext4_xattr_block_set+0x25b5/0x2ac0 [ 68.485010][ T5356] report_bug+0x2be/0x4f0 [ 68.488119][ T5356] ? ext4_xattr_block_set+0x25b5/0x2ac0 [ 68.490574][ T5356] ? ext4_xattr_block_set+0x25b5/0x2ac0 [ 68.493074][ T5356] ? ext4_xattr_block_set+0x25b7/0x2ac0 [ 68.495663][ T5356] handle_bug+0x84/0x160 [ 68.497784][ T5356] exc_invalid_op+0x1a/0x50 [ 68.500469][ T5356] asm_exc_invalid_op+0x1a/0x20 [ 68.503106][ T5356] RIP: 0010:ext4_xattr_block_set+0x25b5/0x2ac0 [ 68.506080][ T5356] Code: 00 00 00 e8 3d 9e 9d ff 3e 80 63 28 fd eb 28 e8 91 9f 38 ff 31 db 48 c7 44 24 20 00 00 00 00 e9 88 f1 ff ff e8 7c 9f 38 ff 90 <0f> 0b 90 e9 0e dc ff ff e8 6e 9f 38 ff 48 8b 5c 24 10 4c 8b 74 24 [ 68.514345][ T5356] RSP: 0018:ffffc9000d40f220 EFLAGS: 00010283 [ 68.517033][ T5356] RAX: ffffffff82871dc4 RBX: ffffc9000d40f548 RCX: 0000000000100000 [ 68.520728][ T5356] RDX: ffffc9000de32000 RSI: 0000000000006a36 RDI: 0000000000006a37 [ 68.524650][ T5356] RBP: ffffc9000d40f408 R08: ffff88804ca04020 R09: ffff88804ca04020 [ 68.528053][ T5356] R10: ffff88804ca04400 R11: ffff88804ca04000 R12: 0000000000000000 [ 68.531599][ T5356] R13: 1ffff92001a81eaa R14: 1ffff92001a81ea9 R15: ffffc9000d40f550 [ 68.535353][ T5356] ? ext4_xattr_block_set+0x25b4/0x2ac0 [ 68.538493][ T5356] ? fs_reclaim_acquire+0x7d/0x100 [ 68.540961][ T5356] ? __pfx_check_xattrs+0x10/0x10 [ 68.543310][ T5356] ? xattr_find_entry+0x126/0x280 [ 68.545772][ T5356] ? xattr_find_entry+0x22a/0x280 [ 68.548083][ T5356] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 68.550712][ T5356] ? ext4_xattr_block_find+0x2d4/0x350 [ 68.553257][ T5356] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 68.555881][ T5356] __ext4_expand_extra_isize+0x30d/0x400 [ 68.558422][ T5356] __ext4_mark_inode_dirty+0x46c/0x700 [ 68.560912][ T5356] ext4_evict_inode+0x80d/0xee0 [ 68.563301][ T5356] ? __pfx_ext4_evict_inode+0x10/0x10 [ 68.566056][ T5356] ? do_raw_spin_unlock+0x4d/0x240 [ 68.568607][ T5356] ? __pfx_ext4_evict_inode+0x10/0x10 [ 68.570970][ T5356] evict+0x504/0x9c0 [ 68.572720][ T5356] ? __pfx_evict+0x10/0x10 [ 68.574748][ T5356] ? do_raw_spin_unlock+0x4d/0x240 [ 68.577241][ T5356] ? _raw_spin_unlock+0x28/0x50 [ 68.579767][ T5356] ? iput+0x6d8/0x9d0 [ 68.581664][ T5356] ext4_orphan_cleanup+0xc20/0x1460 [ 68.584181][ T5356] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 68.586626][ T5356] ? ext4_register_li_request+0x259/0x720 [ 68.589367][ T5356] ? errseq_check_and_advance+0x66/0x120 [ 68.592454][ T5356] ext4_fill_super+0x57df/0x6090 [ 68.595083][ T5356] ? __pfx_ext4_fill_super+0x10/0x10 [ 68.597513][ T5356] ? set_blocksize+0x21e/0x500 [ 68.599708][ T5356] ? sb_set_blocksize+0x104/0x180 [ 68.601881][ T5356] ? setup_bdev_super+0x4c1/0x5b0 [ 68.604169][ T5356] get_tree_bdev_flags+0x40e/0x4d0 [ 68.606771][ T5356] ? __pfx_ext4_fill_super+0x10/0x10 [ 68.609538][ T5356] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 68.612447][ T5356] vfs_get_tree+0x92/0x2b0 [ 68.614592][ T5356] do_new_mount+0x2a2/0x9e0 [ 68.616845][ T5356] ? ns_capable+0x8a/0xf0 [ 68.618796][ T5356] ? __pfx_do_new_mount+0x10/0x10 [ 68.621550][ T5356] ? path_mount+0x61c/0xfe0 [ 68.623605][ T5356] ? user_path_at+0x44/0x60 [ 68.625948][ T5356] __se_sys_mount+0x317/0x410 [ 68.628347][ T5356] ? __pfx___se_sys_mount+0x10/0x10 [ 68.630897][ T5356] ? do_syscall_64+0xbe/0x3b0 [ 68.633278][ T5356] ? __x64_sys_mount+0x20/0xc0 [ 68.635409][ T5356] do_syscall_64+0xfa/0x3b0 [ 68.637507][ T5356] ? lockdep_hardirqs_on+0x9c/0x150 [ 68.639865][ T5356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.642495][ T5356] ? clear_bhb_loop+0x60/0xb0 [ 68.644672][ T5356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.647848][ T5356] RIP: 0033:0x7ff20df903ca [ 68.650415][ T5356] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.658800][ T5356] RSP: 002b:00007ff20a3f4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.662530][ T5356] RAX: ffffffffffffffda RBX: 00007ff20a3f4ef0 RCX: 00007ff20df903ca [ 68.666130][ T5356] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ff20a3f4eb0 [ 68.670713][ T5356] RBP: 0000200000000180 R08: 00007ff20a3f4ef0 R09: 000000000080078b [ 68.674665][ T5356] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0 [ 68.678144][ T5356] R13: 00007ff20a3f4eb0 R14: 000000000000046a R15: 0000200000000680 [ 68.681734][ T5356] [ 68.683747][ T5356] Kernel Offset: disabled [ 68.686494][ T5356] Rebooting in 86400 seconds..