program:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}, 0x1, 0x4c00000000000000}, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")
[ 74.547736][ T5299] Bluetooth: hci0: command tx timeout
[ 74.601852][ T5317] loop0: detected capacity change from 0 to 512
[ 74.648987][ T5317] ------------[ cut here ]------------
[ 74.651327][ T5317] EA inode 11 i_nlink=0
[ 74.651343][ T5317] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x4c9/0x5a0, CPU#0: syz.0.0/5317
[ 74.657493][ T5317] Modules linked in:
[ 74.659424][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 74.663513][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 74.668082][ T5317] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0
[ 74.671036][ T5317] Code: 74 08 4c 89 ef e8 bf 22 98 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 8b bf 02 09 44 89
[ 74.680196][ T5317] RSP: 0018:ffffc9000b2ff240 EFLAGS: 00010246
[ 74.682963][ T5317] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000
[ 74.686742][ T5317] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff8ff5d550
[ 74.690211][ T5317] RBP: ffffc9000b2ff330 R08: ffff88801f10a16f R09: 1ffff11003e2142d
[ 74.693718][ T5317] R10: dffffc0000000000 R11: ffffed1003e2142e R12: ffffffff8ff5d550
[ 74.697340][ T5317] R13: 000000000000000b R14: 1ffff11003e213f8 R15: ffff88801f109fc0
[ 74.700955][ T5317] FS: 00007fd8409ec6c0(0000) GS:ffff88808ccea000(0000) knlGS:0000000000000000
[ 74.705134][ T5317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 74.707775][ T5317] CR2: 00007fdd4377f000 CR3: 0000000011a5c000 CR4: 0000000000352ef0
[ 74.711078][ T5317] Call Trace:
[ 74.712613][ T5317]
[ 74.714035][ T5317] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 74.716709][ T5317] ? __kmalloc_cache_noprof+0x3d1/0x6e0
[ 74.719033][ T5317] ? ext4_xattr_inode_dec_ref_all+0x4d2/0xe40
[ 74.721615][ T5317] ? __ext4_journal_ensure_credits+0x30/0x450
[ 74.724422][ T5317] ext4_xattr_inode_dec_ref_all+0x8cb/0xe40
[ 74.727158][ T5317] ? __mark_inode_dirty+0xb3c/0x1320
[ 74.729469][ T5317] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10
[ 74.732384][ T5317] ? __ext4_journal_get_write_access+0x27f/0x590
[ 74.735434][ T5317] ? __pfx___ext4_journal_get_write_access+0x10/0x10
[ 74.738385][ T5317] ext4_xattr_delete_inode+0xb45/0xd10
[ 74.740771][ T5317] ? __pfx_ext4_xattr_delete_inode+0x10/0x10
[ 74.743636][ T5317] ext4_evict_inode+0xa63/0xe60
[ 74.745823][ T5317] ? __pfx_ext4_evict_inode+0x10/0x10
[ 74.748095][ T5317] ? do_raw_spin_unlock+0x4d/0x210
[ 74.750307][ T5317] ? __pfx_ext4_evict_inode+0x10/0x10
[ 74.752627][ T5317] evict+0x61e/0xb10
[ 74.754566][ T5317] ? __pfx_evict+0x10/0x10
[ 74.756504][ T5317] ? _raw_spin_unlock+0x28/0x50
[ 74.758696][ T5317] ? iput+0xcc2/0x1020
[ 74.760532][ T5317] ext4_orphan_cleanup+0xc38/0x1470
[ 74.762838][ T5317] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 74.765436][ T5317] ? ext4_register_li_request+0x640/0x720
[ 74.767883][ T5317] ? errseq_check_and_advance+0x66/0x120
[ 74.770392][ T5317] ext4_fill_super+0x5932/0x61f0
[ 74.772620][ T5317] ? __pfx_ext4_fill_super+0x10/0x10
[ 74.775044][ T5317] ? snprintf+0xe8/0x140
[ 74.776914][ T5317] ? set_blocksize+0x20b/0x4b0
[ 74.779097][ T5317] ? sb_set_blocksize+0x155/0x240
[ 74.781663][ T5317] ? setup_bdev_super+0x4c1/0x5b0
[ 74.784217][ T5317] get_tree_bdev_flags+0x431/0x4f0
[ 74.786463][ T5317] ? __pfx_ext4_fill_super+0x10/0x10
[ 74.788756][ T5317] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 74.791093][ T5317] vfs_get_tree+0x92/0x2a0
[ 74.793042][ T5317] do_new_mount+0x329/0xa50
[ 74.795097][ T5317] ? apparmor_capable+0x137/0x1a0
[ 74.797279][ T5317] ? __pfx_do_new_mount+0x10/0x10
[ 74.799467][ T5317] ? ns_capable+0x89/0xe0
[ 74.801355][ T5317] __se_sys_mount+0x31d/0x420
[ 74.803544][ T5317] ? __pfx___se_sys_mount+0x10/0x10
[ 74.805884][ T5317] ? __x64_sys_mount+0x20/0xc0
[ 74.807942][ T5317] do_syscall_64+0xe2/0xf80
[ 74.809922][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.812492][ T5317] ? trace_irq_disable+0x37/0x100
[ 74.814784][ T5317] ? clear_bhb_loop+0x60/0xb0
[ 74.816798][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.819382][ T5317] RIP: 0033:0x7fd83fb9c14a
[ 74.821286][ T5317] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 74.829804][ T5317] RSP: 002b:00007fd8409ebe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 74.833318][ T5317] RAX: ffffffffffffffda RBX: 00007fd8409ebee0 RCX: 00007fd83fb9c14a
[ 74.836774][ T5317] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fd8409ebea0
[ 74.840163][ T5317] RBP: 0000200000000180 R08: 00007fd8409ebee0 R09: 0000000000800700
[ 74.843563][ T5317] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 74.846890][ T5317] R13: 00007fd8409ebea0 R14: 000000000000046f R15: 000000000000002c
[ 74.850177][ T5317]
[ 74.851565][ T5317] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 74.854711][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 74.858430][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 74.862690][ T5317] Call Trace:
[ 74.864151][ T5317]
[ 74.865431][ T5317] vpanic+0x1e0/0x670
[ 74.867143][ T5317] panic+0xc5/0xd0
[ 74.868777][ T5317] ? __pfx_panic+0x10/0x10
[ 74.870654][ T5317] __warn+0x315/0x4a0
[ 74.872366][ T5317] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0
[ 74.874953][ T5317] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0
[ 74.877537][ T5317] __report_bug+0x29a/0x540
[ 74.879611][ T5317] ? ext4_get_group_desc+0x434/0x4e0
[ 74.881953][ T5317] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0
[ 74.884517][ T5317] ? __pfx___report_bug+0x10/0x10
[ 74.886717][ T5317] ? set_normalized_timespec64+0xf0/0x1a0
[ 74.889140][ T5317] ? __ext4_journal_get_write_access+0x84/0x590
[ 74.891874][ T5317] report_bug_entry+0x19a/0x290
[ 74.893969][ T5317] ? ext4_xattr_inode_update_ref+0x511/0x5a0
[ 74.896481][ T5317] ? ext4_xattr_inode_update_ref+0x516/0x5a0
[ 74.899072][ T5317] handle_bug+0xca/0x200
[ 74.900782][ T5317] exc_invalid_op+0x1a/0x50
[ 74.902736][ T5317] asm_exc_invalid_op+0x1a/0x20
[ 74.904865][ T5317] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0
[ 74.907740][ T5317] Code: 74 08 4c 89 ef e8 bf 22 98 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 8b bf 02 09 44 89
[ 74.915845][ T5317] RSP: 0018:ffffc9000b2ff240 EFLAGS: 00010246
[ 74.919057][ T5317] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000
[ 74.922431][ T5317] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff8ff5d550
[ 74.925867][ T5317] RBP: ffffc9000b2ff330 R08: ffff88801f10a16f R09: 1ffff11003e2142d
[ 74.929183][ T5317] R10: dffffc0000000000 R11: ffffed1003e2142e R12: ffffffff8ff5d550
[ 74.932538][ T5317] R13: 000000000000000b R14: 1ffff11003e213f8 R15: ffff88801f109fc0
[ 74.935958][ T5317] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 74.938759][ T5317] ? __kmalloc_cache_noprof+0x3d1/0x6e0
[ 74.941193][ T5317] ? ext4_xattr_inode_dec_ref_all+0x4d2/0xe40
[ 74.943826][ T5317] ? __ext4_journal_ensure_credits+0x30/0x450
[ 74.946460][ T5317] ext4_xattr_inode_dec_ref_all+0x8cb/0xe40
[ 74.949017][ T5317] ? __mark_inode_dirty+0xb3c/0x1320
[ 74.951338][ T5317] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10
[ 74.954138][ T5317] ? __ext4_journal_get_write_access+0x27f/0x590
[ 74.956819][ T5317] ? __pfx___ext4_journal_get_write_access+0x10/0x10
[ 74.959632][ T5317] ext4_xattr_delete_inode+0xb45/0xd10
[ 74.961934][ T5317] ? __pfx_ext4_xattr_delete_inode+0x10/0x10
[ 74.964383][ T5317] ext4_evict_inode+0xa63/0xe60
[ 74.966505][ T5317] ? __pfx_ext4_evict_inode+0x10/0x10
[ 74.968793][ T5317] ? do_raw_spin_unlock+0x4d/0x210
[ 74.971040][ T5317] ? __pfx_ext4_evict_inode+0x10/0x10
[ 74.973357][ T5317] evict+0x61e/0xb10
[ 74.975127][ T5317] ? __pfx_evict+0x10/0x10
[ 74.977020][ T5317] ? _raw_spin_unlock+0x28/0x50
[ 74.979162][ T5317] ? iput+0xcc2/0x1020
[ 74.980879][ T5317] ext4_orphan_cleanup+0xc38/0x1470
[ 74.983321][ T5317] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 74.985781][ T5317] ? ext4_register_li_request+0x640/0x720
[ 74.988253][ T5317] ? errseq_check_and_advance+0x66/0x120
[ 74.990725][ T5317] ext4_fill_super+0x5932/0x61f0
[ 74.992856][ T5317] ? __pfx_ext4_fill_super+0x10/0x10
[ 74.995145][ T5317] ? snprintf+0xe8/0x140
[ 74.997032][ T5317] ? set_blocksize+0x20b/0x4b0
[ 74.999142][ T5317] ? sb_set_blocksize+0x155/0x240
[ 75.001351][ T5317] ? setup_bdev_super+0x4c1/0x5b0
[ 75.003606][ T5317] get_tree_bdev_flags+0x431/0x4f0
[ 75.005916][ T5317] ? __pfx_ext4_fill_super+0x10/0x10
[ 75.008285][ T5317] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 75.010805][ T5317] vfs_get_tree+0x92/0x2a0
[ 75.012812][ T5317] do_new_mount+0x329/0xa50
[ 75.014844][ T5317] ? apparmor_capable+0x137/0x1a0
[ 75.017116][ T5317] ? __pfx_do_new_mount+0x10/0x10
[ 75.019386][ T5317] ? ns_capable+0x89/0xe0
[ 75.021384][ T5317] __se_sys_mount+0x31d/0x420
[ 75.023528][ T5317] ? __pfx___se_sys_mount+0x10/0x10
[ 75.025861][ T5317] ? __x64_sys_mount+0x20/0xc0
[ 75.027957][ T5317] do_syscall_64+0xe2/0xf80
[ 75.030014][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.032623][ T5317] ? trace_irq_disable+0x37/0x100
[ 75.034764][ T5317] ? clear_bhb_loop+0x60/0xb0
[ 75.036839][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.039451][ T5317] RIP: 0033:0x7fd83fb9c14a
[ 75.041534][ T5317] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 75.050156][ T5317] RSP: 002b:00007fd8409ebe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 75.053820][ T5317] RAX: ffffffffffffffda RBX: 00007fd8409ebee0 RCX: 00007fd83fb9c14a
[ 75.057284][ T5317] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fd8409ebea0
[ 75.060695][ T5317] RBP: 0000200000000180 R08: 00007fd8409ebee0 R09: 0000000000800700
[ 75.064050][ T5317] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[ 75.067442][ T5317] R13: 00007fd8409ebea0 R14: 000000000000046f R15: 000000000000002c
[ 75.070935][ T5317]
[ 75.072672][ T5317] Kernel Offset: disabled
[ 75.074630][ T5317] Rebooting in 86400 seconds..