program: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") [ 84.818594][ T4708] Bluetooth: hci0: command tx timeout [ 84.921531][ T5365] loop0: detected capacity change from 0 to 512 [ 84.956113][ T5365] EXT4-fs warning (device loop0): ext4_xattr_inode_get:542: inode #11: comm syz.0.0: ea_inode file size=0 entry size=6 [ 84.973816][ T5365] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 84.981791][ T5365] ------------[ cut here ]------------ [ 84.984658][ T5365] EA inode 11 i_nlink=2 [ 84.985724][ T5365] WARNING: CPU: 0 PID: 5365 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x534/0x5d0 [ 84.992597][ T5365] Modules linked in: [ 84.994499][ T5365] CPU: 0 UID: 0 PID: 5365 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 84.998736][ T5365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.003441][ T5365] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 85.006183][ T5365] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 20 f5 9f 8b 4c 89 fe e8 6d ce fb fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 e4 9a [ 85.015504][ T5365] RSP: 0018:ffffc9000d4672e0 EFLAGS: 00010246 [ 85.018366][ T5365] RAX: b635a10b6d713300 RBX: dffffc0000000000 RCX: 0000000000100000 [ 85.021974][ T5365] RDX: ffffc9000deea000 RSI: 000000000000a765 RDI: 000000000000a766 [ 85.025594][ T5365] RBP: ffffc9000d4673d0 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 85.029341][ T5365] R10: dffffc0000000000 R11: ffffed1003f8484b R12: ffff888045182920 [ 85.032869][ T5365] R13: 1ffff11008a30524 R14: 00000000ffffffff R15: 000000000000000b [ 85.036353][ T5365] FS: 00007fcb9081b6c0(0000) GS:ffff88808d20c000(0000) knlGS:0000000000000000 [ 85.040260][ T5365] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.042964][ T5365] CR2: 00007f58461909c0 CR3: 0000000043113000 CR4: 0000000000352ef0 [ 85.046355][ T5365] Call Trace: [ 85.047858][ T5365] [ 85.049367][ T5365] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 85.052038][ T5365] ? __kasan_kmalloc+0x93/0xb0 [ 85.054302][ T5365] ? __ext4_journal_ensure_credits+0x30/0x450 [ 85.056876][ T5365] ext4_xattr_inode_dec_ref_all+0x867/0xda0 [ 85.059615][ T5365] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 85.062109][ T5365] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 85.064739][ T5365] ? __ext4_journal_get_write_access+0x272/0x570 [ 85.067490][ T5365] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 85.070510][ T5365] ext4_xattr_delete_inode+0xa4c/0xc10 [ 85.072837][ T5365] ? ext4_truncate+0xc2d/0x1100 [ 85.075037][ T5365] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 85.077646][ T5365] ext4_evict_inode+0xac9/0xee0 [ 85.079812][ T5365] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.082133][ T5365] ? do_raw_spin_unlock+0x4d/0x240 [ 85.084430][ T5365] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.087280][ T5365] evict+0x504/0x9c0 [ 85.089244][ T5365] ? __pfx_evict+0x10/0x10 [ 85.091051][ T5365] ? do_raw_spin_unlock+0x4d/0x240 [ 85.093063][ T5365] ? _raw_spin_unlock+0x28/0x50 [ 85.095068][ T5365] ? iput+0x6d8/0x9d0 [ 85.096709][ T5365] ext4_orphan_cleanup+0xc20/0x1460 [ 85.098919][ T5365] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 85.101209][ T5365] ? ext4_register_li_request+0x640/0x720 [ 85.103690][ T5365] ? errseq_check_and_advance+0x66/0x120 [ 85.106115][ T5365] ext4_fill_super+0x57df/0x6090 [ 85.108358][ T5365] ? __pfx_ext4_fill_super+0x10/0x10 [ 85.110608][ T5365] ? set_blocksize+0x21e/0x500 [ 85.112667][ T5365] ? sb_set_blocksize+0x104/0x180 [ 85.114835][ T5365] ? setup_bdev_super+0x4c1/0x5b0 [ 85.117007][ T5365] get_tree_bdev_flags+0x40e/0x4d0 [ 85.119475][ T5365] ? __pfx_ext4_fill_super+0x10/0x10 [ 85.121776][ T5365] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 85.124335][ T5365] vfs_get_tree+0x8f/0x2b0 [ 85.126392][ T5365] do_new_mount+0x2a2/0x9e0 [ 85.128529][ T5365] ? ns_capable+0x8a/0xf0 [ 85.130452][ T5365] ? __pfx_do_new_mount+0x10/0x10 [ 85.132638][ T5365] ? path_mount+0x61c/0xfe0 [ 85.134633][ T5365] ? user_path_at+0x44/0x60 [ 85.136617][ T5365] __se_sys_mount+0x317/0x410 [ 85.138762][ T5365] ? __pfx___se_sys_mount+0x10/0x10 [ 85.141025][ T5365] ? do_syscall_64+0xbe/0x3b0 [ 85.143167][ T5365] ? __x64_sys_mount+0x20/0xc0 [ 85.145359][ T5365] do_syscall_64+0xfa/0x3b0 [ 85.147371][ T5365] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.149677][ T5365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.152231][ T5365] ? clear_bhb_loop+0x60/0xb0 [ 85.154245][ T5365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.156709][ T5365] RIP: 0033:0x7fcb8f99034a [ 85.158875][ T5365] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.166784][ T5365] RSP: 002b:00007fcb9081ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.170228][ T5365] RAX: ffffffffffffffda RBX: 00007fcb9081aef0 RCX: 00007fcb8f99034a [ 85.173354][ T5365] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fcb9081aeb0 [ 85.176480][ T5365] RBP: 0000200000000180 R08: 00007fcb9081aef0 R09: 0000000000800700 [ 85.179980][ T5365] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 85.183483][ T5365] R13: 00007fcb9081aeb0 R14: 0000000000000473 R15: 0000200000000680 [ 85.187048][ T5365] [ 85.188928][ T5365] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.192095][ T5365] CPU: 0 UID: 0 PID: 5365 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.195980][ T5365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.200751][ T5365] Call Trace: [ 85.202237][ T5365] [ 85.203644][ T5365] dump_stack_lvl+0x99/0x250 [ 85.205746][ T5365] ? __asan_memcpy+0x40/0x70 [ 85.207848][ T5365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.210111][ T5365] ? __pfx__printk+0x10/0x10 [ 85.212131][ T5365] vpanic+0x281/0x750 [ 85.213941][ T5365] ? __pfx__printk+0x10/0x10 [ 85.216014][ T5365] ? __pfx_vpanic+0x10/0x10 [ 85.218066][ T5365] ? is_bpf_text_address+0x26/0x2b0 [ 85.220414][ T5365] panic+0xb9/0xc0 [ 85.222138][ T5365] ? __pfx_panic+0x10/0x10 [ 85.224163][ T5365] __warn+0x31b/0x4b0 [ 85.225985][ T5365] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 85.228668][ T5365] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 85.231341][ T5365] report_bug+0x2be/0x4f0 [ 85.233295][ T5365] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 85.235896][ T5365] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 85.238569][ T5365] ? ext4_xattr_inode_update_ref+0x536/0x5d0 [ 85.241279][ T5365] handle_bug+0x84/0x160 [ 85.243270][ T5365] exc_invalid_op+0x1a/0x50 [ 85.245335][ T5365] asm_exc_invalid_op+0x1a/0x20 [ 85.247520][ T5365] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 85.250508][ T5365] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 20 f5 9f 8b 4c 89 fe e8 6d ce fb fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 e4 9a [ 85.258947][ T5365] RSP: 0018:ffffc9000d4672e0 EFLAGS: 00010246 [ 85.261619][ T5365] RAX: b635a10b6d713300 RBX: dffffc0000000000 RCX: 0000000000100000 [ 85.265130][ T5365] RDX: ffffc9000deea000 RSI: 000000000000a765 RDI: 000000000000a766 [ 85.268564][ T5365] RBP: ffffc9000d4673d0 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 85.271962][ T5365] R10: dffffc0000000000 R11: ffffed1003f8484b R12: ffff888045182920 [ 85.275455][ T5365] R13: 1ffff11008a30524 R14: 00000000ffffffff R15: 000000000000000b [ 85.278867][ T5365] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 85.281623][ T5365] ? __kasan_kmalloc+0x93/0xb0 [ 85.283728][ T5365] ? __ext4_journal_ensure_credits+0x30/0x450 [ 85.286410][ T5365] ext4_xattr_inode_dec_ref_all+0x867/0xda0 [ 85.289061][ T5365] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 85.291537][ T5365] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 85.294297][ T5365] ? __ext4_journal_get_write_access+0x272/0x570 [ 85.297102][ T5365] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 85.300035][ T5365] ext4_xattr_delete_inode+0xa4c/0xc10 [ 85.302519][ T5365] ? ext4_truncate+0xc2d/0x1100 [ 85.304724][ T5365] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 85.307459][ T5365] ext4_evict_inode+0xac9/0xee0 [ 85.309667][ T5365] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.312045][ T5365] ? do_raw_spin_unlock+0x4d/0x240 [ 85.314335][ T5365] ? __pfx_ext4_evict_inode+0x10/0x10 [ 85.316705][ T5365] evict+0x504/0x9c0 [ 85.318461][ T5365] ? __pfx_evict+0x10/0x10 [ 85.320483][ T5365] ? do_raw_spin_unlock+0x4d/0x240 [ 85.322759][ T5365] ? _raw_spin_unlock+0x28/0x50 [ 85.324943][ T5365] ? iput+0x6d8/0x9d0 [ 85.326751][ T5365] ext4_orphan_cleanup+0xc20/0x1460 [ 85.329103][ T5365] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 85.331601][ T5365] ? ext4_register_li_request+0x640/0x720 [ 85.334217][ T5365] ? errseq_check_and_advance+0x66/0x120 [ 85.336634][ T5365] ext4_fill_super+0x57df/0x6090 [ 85.338901][ T5365] ? __pfx_ext4_fill_super+0x10/0x10 [ 85.341272][ T5365] ? set_blocksize+0x21e/0x500 [ 85.343449][ T5365] ? sb_set_blocksize+0x104/0x180 [ 85.345715][ T5365] ? setup_bdev_super+0x4c1/0x5b0 [ 85.347939][ T5365] get_tree_bdev_flags+0x40e/0x4d0 [ 85.350262][ T5365] ? __pfx_ext4_fill_super+0x10/0x10 [ 85.352617][ T5365] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 85.355135][ T5365] vfs_get_tree+0x8f/0x2b0 [ 85.357137][ T5365] do_new_mount+0x2a2/0x9e0 [ 85.359135][ T5365] ? ns_capable+0x8a/0xf0 [ 85.361042][ T5365] ? __pfx_do_new_mount+0x10/0x10 [ 85.363266][ T5365] ? path_mount+0x61c/0xfe0 [ 85.365260][ T5365] ? user_path_at+0x44/0x60 [ 85.367133][ T5365] __se_sys_mount+0x317/0x410 [ 85.369059][ T5365] ? __pfx___se_sys_mount+0x10/0x10 [ 85.371130][ T5365] ? do_syscall_64+0xbe/0x3b0 [ 85.373042][ T5365] ? __x64_sys_mount+0x20/0xc0 [ 85.374991][ T5365] do_syscall_64+0xfa/0x3b0 [ 85.376857][ T5365] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.378910][ T5365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.381578][ T5365] ? clear_bhb_loop+0x60/0xb0 [ 85.383677][ T5365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.386245][ T5365] RIP: 0033:0x7fcb8f99034a [ 85.388233][ T5365] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.396586][ T5365] RSP: 002b:00007fcb9081ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.400243][ T5365] RAX: ffffffffffffffda RBX: 00007fcb9081aef0 RCX: 00007fcb8f99034a [ 85.403753][ T5365] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fcb9081aeb0 [ 85.407224][ T5365] RBP: 0000200000000180 R08: 00007fcb9081aef0 R09: 0000000000800700 [ 85.410685][ T5365] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 85.414250][ T5365] R13: 00007fcb9081aeb0 R14: 0000000000000473 R15: 0000200000000680 [ 85.417761][ T5365] [ 85.419467][ T5365] Kernel Offset: disabled [ 85.421383][ T5365] Rebooting in 86400 seconds..