program: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @loopback, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @empty, 0xffff8b92}, 0x1c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@nodioread_nolock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7ff}}, {}, {@resgid}, {@nouid32}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") [ 76.384854][ T5318] Bluetooth: hci0: command tx timeout [ 76.478371][ T5339] loop0: detected capacity change from 0 to 512 [ 76.549939][ T5339] ------------[ cut here ]------------ [ 76.552367][ T5339] EA inode 11 i_nlink=0 [ 76.552379][ T5339] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x494/0x570, CPU#0: syz.0.0/5339 [ 76.558876][ T5339] Modules linked in: [ 76.560658][ T5339] CPU: 0 UID: 0 PID: 5339 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.564493][ T5339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.569082][ T5339] RIP: 0010:ext4_xattr_inode_update_ref+0x4dc/0x570 [ 76.572280][ T5339] Code: 74 08 4c 89 ef e8 64 8a 9a ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 bd fe ff ff e8 30 99 ce 08 44 89 [ 76.580414][ T5339] RSP: 0018:ffffc9000ec67240 EFLAGS: 00010246 [ 76.583098][ T5339] RAX: 0000000000000000 RBX: 1ffff11008fc742d RCX: dffffc0000000000 [ 76.586363][ T5339] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff8fa8bdd0 [ 76.589781][ T5339] RBP: ffffc9000ec67330 R08: ffff888047e3a16f R09: 1ffff11008fc742d [ 76.593195][ T5339] R10: dffffc0000000000 R11: ffffed1008fc742e R12: ffffffff8fa8bdd0 [ 76.596950][ T5339] R13: 000000000000000b R14: 1ffff11008fc73f8 R15: ffff888047e39fc0 [ 76.600324][ T5339] FS: 00007f62ad6a46c0(0000) GS:ffff88808d22a000(0000) knlGS:0000000000000000 [ 76.604469][ T5339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.607102][ T5339] CR2: 00007f7a565909c0 CR3: 0000000040595000 CR4: 0000000000352ef0 [ 76.610450][ T5339] Call Trace: [ 76.611973][ T5339] [ 76.613308][ T5339] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 76.615961][ T5339] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 76.618225][ T5339] ? ext4_xattr_inode_dec_ref_all+0x4ca/0xe00 [ 76.620792][ T5339] ? __ext4_journal_ensure_credits+0x30/0x450 [ 76.623287][ T5339] ext4_xattr_inode_dec_ref_all+0x8c3/0xe00 [ 76.625807][ T5339] ? __mark_inode_dirty+0xb3c/0x1330 [ 76.627985][ T5339] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 76.630576][ T5339] ? __ext4_journal_get_write_access+0x272/0x570 [ 76.633229][ T5339] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 76.635967][ T5339] ext4_xattr_delete_inode+0xa4c/0xc10 [ 76.638162][ T5339] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 76.640810][ T5339] ext4_evict_inode+0xa58/0xe60 [ 76.642997][ T5339] ? __pfx_ext4_evict_inode+0x10/0x10 [ 76.645355][ T5339] ? do_raw_spin_unlock+0x4d/0x240 [ 76.647488][ T5339] ? __pfx_ext4_evict_inode+0x10/0x10 [ 76.650059][ T5339] evict+0x5f4/0xae0 [ 76.651842][ T5339] ? __pfx_evict+0x10/0x10 [ 76.653754][ T5339] ? _raw_spin_unlock+0x28/0x50 [ 76.655887][ T5339] ? iput+0xcc6/0x1030 [ 76.657679][ T5339] ext4_orphan_cleanup+0xc20/0x1460 [ 76.659931][ T5339] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 76.662504][ T5339] ? ext4_register_li_request+0x640/0x720 [ 76.664934][ T5339] ? errseq_check_and_advance+0x66/0x120 [ 76.667314][ T5339] ext4_fill_super+0x58a1/0x6160 [ 76.669444][ T5339] ? __pfx_ext4_fill_super+0x10/0x10 [ 76.671979][ T5339] ? snprintf+0xda/0x120 [ 76.674075][ T5339] ? __pfx_snprintf+0x10/0x10 [ 76.676279][ T5339] ? set_blocksize+0x21e/0x500 [ 76.678300][ T5339] ? sb_set_blocksize+0x155/0x240 [ 76.680486][ T5339] ? setup_bdev_super+0x4c1/0x5b0 [ 76.682714][ T5339] get_tree_bdev_flags+0x40e/0x4d0 [ 76.684942][ T5339] ? __pfx_ext4_fill_super+0x10/0x10 [ 76.687089][ T5339] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 76.689416][ T5339] vfs_get_tree+0x92/0x2a0 [ 76.691329][ T5339] do_new_mount+0x302/0xa10 [ 76.693308][ T5339] ? apparmor_capable+0x137/0x1a0 [ 76.695272][ T5339] ? __pfx_do_new_mount+0x10/0x10 [ 76.697431][ T5339] ? ns_capable+0x8a/0xf0 [ 76.699625][ T5339] ? kmem_cache_free+0x197/0x620 [ 76.702086][ T5339] __se_sys_mount+0x313/0x410 [ 76.704168][ T5339] ? __pfx___se_sys_mount+0x10/0x10 [ 76.706535][ T5339] ? do_syscall_64+0xbe/0xf80 [ 76.708589][ T5339] ? __x64_sys_mount+0x20/0xc0 [ 76.710747][ T5339] do_syscall_64+0xfa/0xf80 [ 76.712698][ T5339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.715271][ T5339] ? clear_bhb_loop+0x60/0xb0 [ 76.717254][ T5339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.720137][ T5339] RIP: 0033:0x7f62ac790f6a [ 76.722347][ T5339] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.730484][ T5339] RSP: 002b:00007f62ad6a3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.734313][ T5339] RAX: ffffffffffffffda RBX: 00007f62ad6a3ef0 RCX: 00007f62ac790f6a [ 76.737724][ T5339] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 00007f62ad6a3eb0 [ 76.741301][ T5339] RBP: 0000200000000180 R08: 00007f62ad6a3ef0 R09: 0000000000800700 [ 76.744767][ T5339] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000000c0 [ 76.748272][ T5339] R13: 00007f62ad6a3eb0 R14: 000000000000046f R15: 000000000000002c [ 76.751966][ T5339] [ 76.753377][ T5339] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.756477][ T5339] CPU: 0 UID: 0 PID: 5339 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.760177][ T5339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.764677][ T5339] Call Trace: [ 76.766186][ T5339] [ 76.767567][ T5339] dump_stack_lvl+0x99/0x250 [ 76.769595][ T5339] ? __asan_memcpy+0x40/0x70 [ 76.771631][ T5339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.773890][ T5339] ? __pfx__printk+0x10/0x10 [ 76.775923][ T5339] vpanic+0x237/0x6d0 [ 76.777686][ T5339] ? __pfx_vpanic+0x10/0x10 [ 76.779569][ T5339] ? is_bpf_text_address+0x292/0x2b0 [ 76.781837][ T5339] ? is_bpf_text_address+0x26/0x2b0 [ 76.784089][ T5339] panic+0xb9/0xc0 [ 76.785742][ T5339] ? __pfx_panic+0x10/0x10 [ 76.787700][ T5339] __warn+0x317/0x4b0 [ 76.789483][ T5339] ? ext4_xattr_inode_update_ref+0x494/0x570 [ 76.792172][ T5339] ? ext4_xattr_inode_update_ref+0x494/0x570 [ 76.794796][ T5339] __report_bug+0x288/0x500 [ 76.796654][ T5339] ? ext4_xattr_inode_update_ref+0x494/0x570 [ 76.798886][ T5339] ? __pfx___report_bug+0x10/0x10 [ 76.800901][ T5339] ? __ext4_get_inode_loc+0x69a/0x1040 [ 76.803118][ T5339] ? ext4_fc_track_inode+0x133/0xb20 [ 76.805389][ T5339] ? set_normalized_timespec64+0xf0/0x1a0 [ 76.807686][ T5339] ? __ext4_journal_get_write_access+0x84/0x570 [ 76.810444][ T5339] report_bug_entry+0x19a/0x290 [ 76.812593][ T5339] ? ext4_xattr_inode_update_ref+0x4dc/0x570 [ 76.815275][ T5339] ? ext4_xattr_inode_update_ref+0x4e1/0x570 [ 76.818275][ T5339] handle_bug+0xca/0x200 [ 76.820105][ T5339] exc_invalid_op+0x1a/0x50 [ 76.822073][ T5339] asm_exc_invalid_op+0x1a/0x20 [ 76.824250][ T5339] RIP: 0010:ext4_xattr_inode_update_ref+0x4dc/0x570 [ 76.827157][ T5339] Code: 74 08 4c 89 ef e8 64 8a 9a ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 bd fe ff ff e8 30 99 ce 08 44 89 [ 76.835385][ T5339] RSP: 0018:ffffc9000ec67240 EFLAGS: 00010246 [ 76.838021][ T5339] RAX: 0000000000000000 RBX: 1ffff11008fc742d RCX: dffffc0000000000 [ 76.841592][ T5339] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff8fa8bdd0 [ 76.845268][ T5339] RBP: ffffc9000ec67330 R08: ffff888047e3a16f R09: 1ffff11008fc742d [ 76.848626][ T5339] R10: dffffc0000000000 R11: ffffed1008fc742e R12: ffffffff8fa8bdd0 [ 76.852033][ T5339] R13: 000000000000000b R14: 1ffff11008fc73f8 R15: ffff888047e39fc0 [ 76.855634][ T5339] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 76.858496][ T5339] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 76.860730][ T5339] ? ext4_xattr_inode_dec_ref_all+0x4ca/0xe00 [ 76.863213][ T5339] ? __ext4_journal_ensure_credits+0x30/0x450 [ 76.865989][ T5339] ext4_xattr_inode_dec_ref_all+0x8c3/0xe00 [ 76.868721][ T5339] ? __mark_inode_dirty+0xb3c/0x1330 [ 76.870999][ T5339] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 76.873600][ T5339] ? __ext4_journal_get_write_access+0x272/0x570 [ 76.876097][ T5339] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 76.878724][ T5339] ext4_xattr_delete_inode+0xa4c/0xc10 [ 76.880905][ T5339] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 76.883351][ T5339] ext4_evict_inode+0xa58/0xe60 [ 76.885316][ T5339] ? __pfx_ext4_evict_inode+0x10/0x10 [ 76.887585][ T5339] ? do_raw_spin_unlock+0x4d/0x240 [ 76.889733][ T5339] ? __pfx_ext4_evict_inode+0x10/0x10 [ 76.892043][ T5339] evict+0x5f4/0xae0 [ 76.893775][ T5339] ? __pfx_evict+0x10/0x10 [ 76.895665][ T5339] ? _raw_spin_unlock+0x28/0x50 [ 76.897733][ T5339] ? iput+0xcc6/0x1030 [ 76.899434][ T5339] ext4_orphan_cleanup+0xc20/0x1460 [ 76.901710][ T5339] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 76.904516][ T5339] ? ext4_register_li_request+0x640/0x720 [ 76.906966][ T5339] ? errseq_check_and_advance+0x66/0x120 [ 76.909338][ T5339] ext4_fill_super+0x58a1/0x6160 [ 76.911532][ T5339] ? __pfx_ext4_fill_super+0x10/0x10 [ 76.913828][ T5339] ? snprintf+0xda/0x120 [ 76.915746][ T5339] ? __pfx_snprintf+0x10/0x10 [ 76.917757][ T5339] ? set_blocksize+0x21e/0x500 [ 76.919868][ T5339] ? sb_set_blocksize+0x155/0x240 [ 76.922046][ T5339] ? setup_bdev_super+0x4c1/0x5b0 [ 76.924241][ T5339] get_tree_bdev_flags+0x40e/0x4d0 [ 76.926493][ T5339] ? __pfx_ext4_fill_super+0x10/0x10 [ 76.928764][ T5339] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 76.931251][ T5339] vfs_get_tree+0x92/0x2a0 [ 76.933227][ T5339] do_new_mount+0x302/0xa10 [ 76.935246][ T5339] ? apparmor_capable+0x137/0x1a0 [ 76.937471][ T5339] ? __pfx_do_new_mount+0x10/0x10 [ 76.939642][ T5339] ? ns_capable+0x8a/0xf0 [ 76.941583][ T5339] ? kmem_cache_free+0x197/0x620 [ 76.943796][ T5339] __se_sys_mount+0x313/0x410 [ 76.945861][ T5339] ? __pfx___se_sys_mount+0x10/0x10 [ 76.948104][ T5339] ? do_syscall_64+0xbe/0xf80 [ 76.950103][ T5339] ? __x64_sys_mount+0x20/0xc0 [ 76.952227][ T5339] do_syscall_64+0xfa/0xf80 [ 76.954275][ T5339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.956902][ T5339] ? clear_bhb_loop+0x60/0xb0 [ 76.958910][ T5339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.961326][ T5339] RIP: 0033:0x7f62ac790f6a [ 76.963261][ T5339] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.971087][ T5339] RSP: 002b:00007f62ad6a3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.974620][ T5339] RAX: ffffffffffffffda RBX: 00007f62ad6a3ef0 RCX: 00007f62ac790f6a [ 76.977907][ T5339] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 00007f62ad6a3eb0 [ 76.981186][ T5339] RBP: 0000200000000180 R08: 00007f62ad6a3ef0 R09: 0000000000800700 [ 76.984451][ T5339] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000000c0 [ 76.987717][ T5339] R13: 00007f62ad6a3eb0 R14: 000000000000046f R15: 000000000000002c [ 76.991198][ T5339] [ 76.992848][ T5339] Kernel Offset: disabled [ 76.994687][ T5339] Rebooting in 86400 seconds..