program: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") [ 74.991133][ T5302] Bluetooth: hci0: command tx timeout [ 75.035418][ T5323] loop0: detected capacity change from 0 to 512 [ 75.111784][ T5323] ------------[ cut here ]------------ [ 75.114122][ T5323] EA inode 11 i_nlink=2 [ 75.114278][ T5323] WARNING: CPU: 0 PID: 5323 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.120415][ T5323] Modules linked in: [ 75.121957][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.125737][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.130834][ T5323] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.133636][ T5323] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 80 1f 80 8b 4c 89 e6 e8 a7 1b f8 fe 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 f3 0b bd 08 44 89 f9 [ 75.141639][ T5323] RSP: 0018:ffffc9000d3cf100 EFLAGS: 00010246 [ 75.144113][ T5323] RAX: beb0211ee5d8ce00 RBX: 0000000000000001 RCX: 0000000000100000 [ 75.147320][ T5323] RDX: ffffc9000dd82000 RSI: 000000000000a9db RDI: 000000000000a9dc [ 75.150918][ T5323] RBP: ffffc9000d3cf1f8 R08: ffff88801fe24293 R09: 1ffff11003fc4852 [ 75.154057][ T5323] R10: dffffc0000000000 R11: ffffed1003fc4853 R12: 000000000000000b [ 75.157177][ T5323] R13: ffff88804304b340 R14: 1ffff11008609656 R15: ffff88804304b2b0 [ 75.160394][ T5323] FS: 00007f8ee29986c0(0000) GS:ffff88808d733000(0000) knlGS:0000000000000000 [ 75.164026][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.166952][ T5323] CR2: 00007f43629909c0 CR3: 0000000041dcc000 CR4: 0000000000352ef0 [ 75.170487][ T5323] Call Trace: [ 75.172055][ T5323] [ 75.173409][ T5323] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 75.176023][ T5323] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 75.178892][ T5323] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 75.181357][ T5323] ext4_xattr_set_entry+0xabb/0x1e20 [ 75.183723][ T5323] ext4_xattr_ibody_set+0x254/0x6a0 [ 75.186035][ T5323] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 75.188879][ T5323] __ext4_expand_extra_isize+0x30d/0x400 [ 75.191255][ T5323] __ext4_mark_inode_dirty+0x46c/0x700 [ 75.193323][ T5323] ext4_evict_inode+0x80d/0xee0 [ 75.195248][ T5323] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.197690][ T5323] ? do_raw_spin_unlock+0x4d/0x240 [ 75.200382][ T5323] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.202671][ T5323] evict+0x504/0x9c0 [ 75.204402][ T5323] ? __pfx_evict+0x10/0x10 [ 75.206471][ T5323] ? do_raw_spin_unlock+0x4d/0x240 [ 75.209153][ T5323] ? _raw_spin_unlock+0x28/0x50 [ 75.211513][ T5323] ? iput+0x946/0xc50 [ 75.213379][ T5323] ext4_orphan_cleanup+0xc20/0x1460 [ 75.215865][ T5323] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 75.218565][ T5323] ? ext4_register_li_request+0x640/0x720 [ 75.221054][ T5323] ? errseq_check_and_advance+0x66/0x120 [ 75.224120][ T5323] ext4_fill_super+0x5920/0x61e0 [ 75.226910][ T5323] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.229403][ T5323] ? snprintf+0xda/0x120 [ 75.231335][ T5323] ? __pfx_snprintf+0x10/0x10 [ 75.233475][ T5323] ? set_blocksize+0x21e/0x500 [ 75.235683][ T5323] ? sb_set_blocksize+0x104/0x180 [ 75.238017][ T5323] ? setup_bdev_super+0x4c1/0x5b0 [ 75.240226][ T5323] get_tree_bdev_flags+0x40e/0x4d0 [ 75.242493][ T5323] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.244875][ T5323] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 75.247431][ T5323] vfs_get_tree+0x92/0x2b0 [ 75.249391][ T5323] do_new_mount+0x302/0xa10 [ 75.251485][ T5323] ? apparmor_capable+0x137/0x1b0 [ 75.253714][ T5323] ? __pfx_do_new_mount+0x10/0x10 [ 75.256000][ T5323] ? ns_capable+0x8a/0xf0 [ 75.258052][ T5323] ? kmem_cache_free+0x19b/0x690 [ 75.260261][ T5323] __se_sys_mount+0x313/0x410 [ 75.262349][ T5323] ? __pfx___se_sys_mount+0x10/0x10 [ 75.264648][ T5323] ? do_syscall_64+0xbe/0xfa0 [ 75.266751][ T5323] ? __x64_sys_mount+0x20/0xc0 [ 75.268927][ T5323] do_syscall_64+0xfa/0xfa0 [ 75.270917][ T5323] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.273171][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.275893][ T5323] ? clear_bhb_loop+0x60/0xb0 [ 75.278167][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.280874][ T5323] RIP: 0033:0x7f8ee1b9076a [ 75.282854][ T5323] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.291505][ T5323] RSP: 002b:00007f8ee2997e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.295252][ T5323] RAX: ffffffffffffffda RBX: 00007f8ee2997ef0 RCX: 00007f8ee1b9076a [ 75.298861][ T5323] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f8ee2997eb0 [ 75.302626][ T5323] RBP: 0000200000000180 R08: 00007f8ee2997ef0 R09: 0000000000800718 [ 75.305686][ T5323] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 75.309163][ T5323] R13: 00007f8ee2997eb0 R14: 000000000000046f R15: 0000200000000200 [ 75.312355][ T5323] [ 75.313645][ T5323] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.316611][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.320366][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.325046][ T5323] Call Trace: [ 75.326600][ T5323] [ 75.328041][ T5323] dump_stack_lvl+0x99/0x250 [ 75.330133][ T5323] ? __asan_memcpy+0x40/0x70 [ 75.332178][ T5323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.334509][ T5323] ? __pfx__printk+0x10/0x10 [ 75.336446][ T5323] vpanic+0x237/0x6d0 [ 75.338136][ T5323] ? __pfx_vpanic+0x10/0x10 [ 75.340045][ T5323] panic+0xb9/0xc0 [ 75.341805][ T5323] ? __pfx_panic+0x10/0x10 [ 75.343727][ T5323] __warn+0x31b/0x4b0 [ 75.345452][ T5323] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.348028][ T5323] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.350569][ T5323] report_bug+0x2be/0x4f0 [ 75.352296][ T5323] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.354646][ T5323] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.356937][ T5323] ? ext4_xattr_inode_update_ref+0x51c/0x5b0 [ 75.359230][ T5323] handle_bug+0x84/0x160 [ 75.361015][ T5323] exc_invalid_op+0x1a/0x50 [ 75.363015][ T5323] asm_exc_invalid_op+0x1a/0x20 [ 75.365270][ T5323] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 75.368255][ T5323] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 80 1f 80 8b 4c 89 e6 e8 a7 1b f8 fe 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 f3 0b bd 08 44 89 f9 [ 75.376119][ T5323] RSP: 0018:ffffc9000d3cf100 EFLAGS: 00010246 [ 75.378818][ T5323] RAX: beb0211ee5d8ce00 RBX: 0000000000000001 RCX: 0000000000100000 [ 75.382332][ T5323] RDX: ffffc9000dd82000 RSI: 000000000000a9db RDI: 000000000000a9dc [ 75.385677][ T5323] RBP: ffffc9000d3cf1f8 R08: ffff88801fe24293 R09: 1ffff11003fc4852 [ 75.389515][ T5323] R10: dffffc0000000000 R11: ffffed1003fc4853 R12: 000000000000000b [ 75.392659][ T5323] R13: ffff88804304b340 R14: 1ffff11008609656 R15: ffff88804304b2b0 [ 75.396539][ T5323] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 75.398909][ T5323] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 75.401856][ T5323] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 75.404528][ T5323] ext4_xattr_set_entry+0xabb/0x1e20 [ 75.406762][ T5323] ext4_xattr_ibody_set+0x254/0x6a0 [ 75.408989][ T5323] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 75.411475][ T5323] __ext4_expand_extra_isize+0x30d/0x400 [ 75.413777][ T5323] __ext4_mark_inode_dirty+0x46c/0x700 [ 75.416174][ T5323] ext4_evict_inode+0x80d/0xee0 [ 75.418371][ T5323] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.420539][ T5323] ? do_raw_spin_unlock+0x4d/0x240 [ 75.422606][ T5323] ? __pfx_ext4_evict_inode+0x10/0x10 [ 75.424766][ T5323] evict+0x504/0x9c0 [ 75.426347][ T5323] ? __pfx_evict+0x10/0x10 [ 75.428173][ T5323] ? do_raw_spin_unlock+0x4d/0x240 [ 75.430301][ T5323] ? _raw_spin_unlock+0x28/0x50 [ 75.432199][ T5323] ? iput+0x946/0xc50 [ 75.433894][ T5323] ext4_orphan_cleanup+0xc20/0x1460 [ 75.436177][ T5323] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 75.438606][ T5323] ? ext4_register_li_request+0x640/0x720 [ 75.441049][ T5323] ? errseq_check_and_advance+0x66/0x120 [ 75.443395][ T5323] ext4_fill_super+0x5920/0x61e0 [ 75.445697][ T5323] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.447997][ T5323] ? snprintf+0xda/0x120 [ 75.449888][ T5323] ? __pfx_snprintf+0x10/0x10 [ 75.452015][ T5323] ? set_blocksize+0x21e/0x500 [ 75.454120][ T5323] ? sb_set_blocksize+0x104/0x180 [ 75.456379][ T5323] ? setup_bdev_super+0x4c1/0x5b0 [ 75.458634][ T5323] get_tree_bdev_flags+0x40e/0x4d0 [ 75.460838][ T5323] ? __pfx_ext4_fill_super+0x10/0x10 [ 75.463194][ T5323] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 75.465719][ T5323] vfs_get_tree+0x92/0x2b0 [ 75.467601][ T5323] do_new_mount+0x302/0xa10 [ 75.469557][ T5323] ? apparmor_capable+0x137/0x1b0 [ 75.471821][ T5323] ? __pfx_do_new_mount+0x10/0x10 [ 75.474053][ T5323] ? ns_capable+0x8a/0xf0 [ 75.475970][ T5323] ? kmem_cache_free+0x19b/0x690 [ 75.478135][ T5323] __se_sys_mount+0x313/0x410 [ 75.480446][ T5323] ? __pfx___se_sys_mount+0x10/0x10 [ 75.483250][ T5323] ? do_syscall_64+0xbe/0xfa0 [ 75.485475][ T5323] ? __x64_sys_mount+0x20/0xc0 [ 75.487634][ T5323] do_syscall_64+0xfa/0xfa0 [ 75.489654][ T5323] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.491978][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.494650][ T5323] ? clear_bhb_loop+0x60/0xb0 [ 75.496672][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.499126][ T5323] RIP: 0033:0x7f8ee1b9076a [ 75.501004][ T5323] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.509034][ T5323] RSP: 002b:00007f8ee2997e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.512599][ T5323] RAX: ffffffffffffffda RBX: 00007f8ee2997ef0 RCX: 00007f8ee1b9076a [ 75.516212][ T5323] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f8ee2997eb0 [ 75.519811][ T5323] RBP: 0000200000000180 R08: 00007f8ee2997ef0 R09: 0000000000800718 [ 75.523187][ T5323] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 75.526602][ T5323] R13: 00007f8ee2997eb0 R14: 000000000000046f R15: 0000200000000200 [ 75.530044][ T5323] [ 75.531786][ T5323] Kernel Offset: disabled [ 75.533714][ T5323] Rebooting in 86400 seconds..