program: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e", 0x3d) r3 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x3, 0x9, 0x10, 0x1d, "9e959f16b6787b08aa26e66c4056a51695284854c282ec6bcfeef4fb0efcc1d8a6078ed98e033fd5f0643902dd8f6fac274de9d940bba5e592bbd4ce85450d00", "f625c10e6e4c36c800dee96015e0fb7e904dc8df62a3a893ec00347f41be5a08", [0x2, 0x9]}) creat(&(0x7f0000000240)='./file1\x00', 0xa) renameat2(r1, &(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000005c0)='./bus\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) [ 75.624525][ T5310] Bluetooth: hci0: command tx timeout [ 75.666423][ T5324] loop0: detected capacity change from 0 to 1024 [ 75.702867][ T5324] EXT4-fs: Ignoring removed orlov option [ 75.705078][ T5324] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.727908][ T5324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.773479][ T5324] loop0: detected capacity change from 1024 to 1023 [ 75.784480][ T5324] ------------[ cut here ]------------ [ 75.786499][ T5324] kernel BUG at fs/ext4/inline.c:1970! [ 75.788434][ T5324] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 75.791009][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 75.794923][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.799207][ T5324] RIP: 0010:ext4_inline_data_truncate+0xced/0xcf0 [ 75.801979][ T5324] Code: e9 17 fd ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 44 fd ff ff e8 a3 b4 9f ff e9 3a fd ff ff e8 19 4b 68 09 e8 c4 ee 35 ff 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 75.809817][ T5324] RSP: 0018:ffffc9000d2af400 EFLAGS: 00010287 [ 75.812166][ T5324] RAX: ffffffff825eeb9c RBX: ffffc9000d2af4a0 RCX: 0000000000040000 [ 75.815243][ T5324] RDX: ffffc9000d4f9000 RSI: 0000000000001452 RDI: 0000000000001453 [ 75.818428][ T5324] RBP: ffffc9000d2af590 R08: ffffffff825ee848 R09: 1ffff11008760778 [ 75.821552][ T5324] R10: dffffc0000000000 R11: ffffed1008760779 R12: ffffc9000d2af500 [ 75.824234][ T5324] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 75.826851][ T5324] FS: 00007f45d97206c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 75.829907][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.832340][ T5324] CR2: 000055856130d618 CR3: 0000000042fa8000 CR4: 0000000000352ef0 [ 75.835351][ T5324] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.838484][ T5324] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.841488][ T5324] Call Trace: [ 75.842811][ T5324] [ 75.843992][ T5324] ? __die_body+0x5f/0xb0 [ 75.845578][ T5324] ? die+0x9e/0xc0 [ 75.846945][ T5324] ? do_trap+0x15a/0x3a0 [ 75.848407][ T5324] ? ext4_inline_data_truncate+0xced/0xcf0 [ 75.850548][ T5324] ? do_error_trap+0x1dc/0x2c0 [ 75.852269][ T5324] ? ext4_inline_data_truncate+0xced/0xcf0 [ 75.854332][ T5324] ? __pfx_lock_acquire+0x10/0x10 [ 75.856197][ T5324] ? __pfx_do_error_trap+0x10/0x10 [ 75.858007][ T5324] ? handle_invalid_op+0x34/0x40 [ 75.859613][ T5324] ? ext4_inline_data_truncate+0xced/0xcf0 [ 75.861649][ T5324] ? exc_invalid_op+0x38/0x50 [ 75.863320][ T5324] ? asm_exc_invalid_op+0x1a/0x20 [ 75.865086][ T5324] ? ext4_inline_data_truncate+0x998/0xcf0 [ 75.866911][ T5324] ? ext4_inline_data_truncate+0xcec/0xcf0 [ 75.868966][ T5324] ? ext4_inline_data_truncate+0xced/0xcf0 [ 75.871086][ T5324] ? __pfx_ext4_inline_data_truncate+0x10/0x10 [ 75.873133][ T5324] ext4_truncate+0x3ca/0x11c0 [ 75.874804][ T5324] ? __pfx_ext4_truncate+0x10/0x10 [ 75.876644][ T5324] ext4_setattr+0x119a/0x1bc0 [ 75.878325][ T5324] ? __pfx_ext4_setattr+0x10/0x10 [ 75.880085][ T5324] notify_change+0xbca/0xe90 [ 75.881654][ T5324] do_truncate+0x220/0x310 [ 75.883236][ T5324] ? __pfx_do_truncate+0x10/0x10 [ 75.885128][ T5324] ? apparmor_file_truncate+0x297/0x350 [ 75.887170][ T5324] path_openat+0x2e1e/0x3590 [ 75.888835][ T5324] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 75.890972][ T5324] ? __pfx_path_openat+0x10/0x10 [ 75.893037][ T5324] do_filp_open+0x235/0x490 [ 75.895074][ T5324] ? __pfx_do_filp_open+0x10/0x10 [ 75.896866][ T5324] ? _raw_spin_unlock+0x28/0x50 [ 75.898578][ T5324] ? alloc_fd+0x5a1/0x640 [ 75.900173][ T5324] do_sys_openat2+0x13e/0x1d0 [ 75.901809][ T5324] ? __pfx_do_sys_openat2+0x10/0x10 [ 75.903596][ T5324] ? __rseq_handle_notify_resume+0x34d/0x14d0 [ 75.905705][ T5324] __x64_sys_creat+0x123/0x170 [ 75.907404][ T5324] ? __pfx___x64_sys_creat+0x10/0x10 [ 75.909503][ T5324] ? do_syscall_64+0x100/0x230 [ 75.911223][ T5324] ? do_syscall_64+0xb6/0x230 [ 75.913036][ T5324] do_syscall_64+0xf3/0x230 [ 75.914818][ T5324] ? clear_bhb_loop+0x35/0x90 [ 75.916656][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.918697][ T5324] RIP: 0033:0x7f45d897e719 [ 75.920415][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.927089][ T5324] RSP: 002b:00007f45d9720038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 75.930367][ T5324] RAX: ffffffffffffffda RBX: 00007f45d8b35f80 RCX: 00007f45d897e719 [ 75.933350][ T5324] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000020000240 [ 75.936348][ T5324] RBP: 00007f45d89f139e R08: 0000000000000000 R09: 0000000000000000 [ 75.939203][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.942062][ T5324] R13: 0000000000000000 R14: 00007f45d8b35f80 R15: 00007ffe84a32a48 [ 75.944878][ T5324] [ 75.946068][ T5324] Modules linked in: [ 75.947933][ T5324] ---[ end trace 0000000000000000 ]--- [ 75.953290][ T5325] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 75.964842][ T5325] EXT4-fs error (device loop0): __ext4_new_inode:1070: comm syz.0.0: reserved inode found cleared - inode=1 [ 75.992935][ T5324] RIP: 0010:ext4_inline_data_truncate+0xced/0xcf0 [ 75.995414][ T5324] Code: e9 17 fd ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 44 fd ff ff e8 a3 b4 9f ff e9 3a fd ff ff e8 19 4b 68 09 e8 c4 ee 35 ff 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 76.020656][ T5324] RSP: 0018:ffffc9000d2af400 EFLAGS: 00010287 [ 76.027999][ T5324] RAX: ffffffff825eeb9c RBX: ffffc9000d2af4a0 RCX: 0000000000040000 [ 76.037008][ T5324] RDX: ffffc9000d4f9000 RSI: 0000000000001452 RDI: 0000000000001453 [ 76.043296][ T5324] RBP: ffffc9000d2af590 R08: ffffffff825ee848 R09: 1ffff11008760778 [ 76.050908][ T5324] R10: dffffc0000000000 R11: ffffed1008760779 R12: ffffc9000d2af500 [ 76.060429][ T5324] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 76.073235][ T5324] FS: 00007f45d97206c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 76.080081][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.086323][ T5324] CR2: 0000000020002080 CR3: 0000000042fa8000 CR4: 0000000000352ef0 [ 76.095642][ T5324] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.108759][ T5324] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.117024][ T5324] Kernel panic - not syncing: Fatal exception [ 76.119701][ T5324] Kernel Offset: disabled [ 76.121341][ T5324] Rebooting in 86400 seconds..