program: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)={[{@data_err_ignore}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@inlinecrypt}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@mblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@nombcache}]}, 0x1, 0x476, &(0x7f00000006c0)="$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") [ 158.702888][ T4654] Bluetooth: hci0: command tx timeout [ 158.757130][ T5350] loop0: detected capacity change from 0 to 512 [ 158.775163][ T5350] EXT4-fs: inline encryption not supported [ 158.787681][ T5350] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.842155][ T5350] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.0: bg 0: block 127: padding at end of block bitmap is not set [ 158.851575][ T5350] loop0: lost filesystem error report for type 5 error -117 [ 158.852827][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 158.859368][ C0] EXT4-fs (loop0): initial error at time 1777840227: ext4_validate_block_bitmap:441 [ 158.863593][ C0] EXT4-fs (loop0): last error at time 1777840227: ext4_validate_block_bitmap:441 [ 158.877519][ T5350] ------------[ cut here ]------------ [ 158.880384][ T5350] EA inode 11 i_nlink=0 [ 158.880403][ T5350] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x4c9/0x5a0, CPU#0: syz.0.0/5350 [ 158.887148][ T5350] Modules linked in: [ 158.889526][ T5350] CPU: 0 UID: 0 PID: 5350 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 158.893607][ T5350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.897876][ T5350] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0 [ 158.900782][ T5350] Code: 74 08 4c 89 ef e8 af 5c 96 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 3b fc 0d 09 44 89 [ 158.910160][ T5350] RSP: 0018:ffffc9000fbc7240 EFLAGS: 00010246 [ 158.913059][ T5350] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000 [ 158.916598][ T5350] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff90378b30 [ 158.920156][ T5350] RBP: ffffc9000fbc7330 R08: ffff8880121d96e7 R09: 1ffff1100243b2dc [ 158.923692][ T5350] R10: dffffc0000000000 R11: ffffed100243b2dd R12: ffffffff90378b30 [ 158.927077][ T5350] R13: 000000000000000b R14: 1ffff1100243b2a8 R15: ffff8880121d9540 [ 158.930468][ T5350] FS: 00007fadf38366c0(0000) GS:ffff88808c885000(0000) knlGS:0000000000000000 [ 158.934684][ T5350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.937542][ T5350] CR2: 00007fcedc98dd30 CR3: 0000000011de0000 CR4: 0000000000352ef0 [ 158.941147][ T5350] Call Trace: [ 158.942847][ T5350] [ 158.944182][ T5350] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 158.947152][ T5350] ? __kmalloc_cache_noprof+0x31c/0x660 [ 158.949697][ T5350] ? ext4_xattr_inode_dec_ref_all+0x4d0/0xe40 [ 158.952436][ T5350] ? __ext4_journal_ensure_credits+0x30/0x450 [ 158.955299][ T5350] ext4_xattr_inode_dec_ref_all+0x8c9/0xe40 [ 158.958015][ T5350] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 158.960983][ T5350] ? __ext4_journal_get_write_access+0x27f/0x590 [ 158.963957][ T5350] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 158.966916][ T5350] ext4_xattr_delete_inode+0xb45/0xd10 [ 158.969226][ T5350] ? __ext4_mark_inode_dirty+0x49e/0x710 [ 158.972263][ T5350] ? up_write+0x1ab/0x410 [ 158.974592][ T5350] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 158.977158][ T5350] ext4_evict_inode+0xc4e/0x10e0 [ 158.979464][ T5350] ? __pfx_ext4_evict_inode+0x10/0x10 [ 158.981863][ T5350] ? do_raw_spin_unlock+0x4d/0x210 [ 158.984242][ T5350] ? __pfx_ext4_evict_inode+0x10/0x10 [ 158.986578][ T5350] evict+0x61e/0xb10 [ 158.988281][ T5350] ? __pfx_evict+0x10/0x10 [ 158.990158][ T5350] ? _raw_spin_unlock+0x28/0x50 [ 158.992386][ T5350] ? iput+0xb25/0xe80 [ 158.994232][ T5350] ext4_orphan_cleanup+0xc38/0x1470 [ 158.996561][ T5350] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 158.998969][ T5350] ? ext4_register_li_request+0x640/0x720 [ 159.001448][ T5350] ? errseq_check_and_advance+0x66/0x120 [ 159.004181][ T5350] ext4_fill_super+0x5a19/0x6330 [ 159.006470][ T5350] ? __pfx_ext4_fill_super+0x10/0x10 [ 159.008877][ T5350] ? snprintf+0xe8/0x140 [ 159.010781][ T5350] ? __pfx_snprintf+0x10/0x10 [ 159.012882][ T5350] ? set_blocksize+0x1c9/0x440 [ 159.014975][ T5350] ? sb_set_blocksize+0x155/0x240 [ 159.017180][ T5350] ? setup_bdev_super+0x4c1/0x5b0 [ 159.019491][ T5350] get_tree_bdev_flags+0x431/0x4f0 [ 159.021796][ T5350] ? __pfx_ext4_fill_super+0x10/0x10 [ 159.024274][ T5350] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 159.026917][ T5350] vfs_get_tree+0x92/0x2a0 [ 159.028974][ T5350] do_new_mount+0x341/0xd30 [ 159.031039][ T5350] ? apparmor_capable+0x126/0x170 [ 159.033568][ T5350] ? __pfx_do_new_mount+0x10/0x10 [ 159.036034][ T5350] ? ns_capable+0x89/0xe0 [ 159.038415][ T5350] ? user_path_at+0xd4/0x160 [ 159.041093][ T5350] __se_sys_mount+0x31d/0x420 [ 159.043607][ T5350] ? __pfx___se_sys_mount+0x10/0x10 [ 159.046016][ T5350] ? __x64_sys_mount+0x20/0xc0 [ 159.048113][ T5350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.050826][ T5350] do_syscall_64+0x15f/0xf80 [ 159.053026][ T5350] ? trace_irq_disable+0x3b/0x140 [ 159.055408][ T5350] ? clear_bhb_loop+0x40/0x90 [ 159.057554][ T5350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.060273][ T5350] RIP: 0033:0x7fadf299e04a [ 159.062178][ T5350] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.070620][ T5350] RSP: 002b:00007fadf3835e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 159.074728][ T5350] RAX: ffffffffffffffda RBX: 00007fadf3835ea0 RCX: 00007fadf299e04a [ 159.078033][ T5350] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fadf3835e60 [ 159.081801][ T5350] RBP: 0000200000000180 R08: 00007fadf3835ea0 R09: 0000000000000000 [ 159.085090][ T5350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 159.088496][ T5350] R13: 00007fadf3835e60 R14: 0000000000000476 R15: 0000200000000040 [ 159.091839][ T5350] [ 159.093289][ T5350] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 159.096403][ T5350] CPU: 0 UID: 0 PID: 5350 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 159.100468][ T5350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.104730][ T5350] Call Trace: [ 159.106263][ T5350] [ 159.107576][ T5350] vpanic+0x56c/0xa60 [ 159.109295][ T5350] ? __pfx__printk+0x10/0x10 [ 159.111448][ T5350] ? __pfx_vpanic+0x10/0x10 [ 159.113437][ T5350] ? is_bpf_text_address+0x292/0x2b0 [ 159.115798][ T5350] ? is_bpf_text_address+0x26/0x2b0 [ 159.118104][ T5350] panic+0xc5/0xd0 [ 159.119998][ T5350] ? __pfx_panic+0x10/0x10 [ 159.121921][ T5350] __warn+0x315/0x4c0 [ 159.123484][ T5350] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 159.125981][ T5350] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 159.128532][ T5350] __report_bug+0x29a/0x540 [ 159.130493][ T5350] ? ext4_get_group_desc+0x434/0x4e0 [ 159.133009][ T5350] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 159.135755][ T5350] ? __pfx___report_bug+0x10/0x10 [ 159.137968][ T5350] ? set_normalized_timespec64+0xf0/0x1a0 [ 159.140575][ T5350] report_bug_entry+0x19a/0x290 [ 159.142772][ T5350] ? ext4_xattr_inode_update_ref+0x511/0x5a0 [ 159.145922][ T5350] ? ext4_xattr_inode_update_ref+0x516/0x5a0 [ 159.148700][ T5350] handle_bug+0xce/0x200 [ 159.150592][ T5350] exc_invalid_op+0x1a/0x50 [ 159.152640][ T5350] asm_exc_invalid_op+0x1a/0x20 [ 159.154860][ T5350] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0 [ 159.157716][ T5350] Code: 74 08 4c 89 ef e8 af 5c 96 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 3b fc 0d 09 44 89 [ 159.165855][ T5350] RSP: 0018:ffffc9000fbc7240 EFLAGS: 00010246 [ 159.168409][ T5350] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000 [ 159.171783][ T5350] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff90378b30 [ 159.175176][ T5350] RBP: ffffc9000fbc7330 R08: ffff8880121d96e7 R09: 1ffff1100243b2dc [ 159.178315][ T5350] R10: dffffc0000000000 R11: ffffed100243b2dd R12: ffffffff90378b30 [ 159.181503][ T5350] R13: 000000000000000b R14: 1ffff1100243b2a8 R15: ffff8880121d9540 [ 159.184705][ T5350] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 159.187395][ T5350] ? __kmalloc_cache_noprof+0x31c/0x660 [ 159.189771][ T5350] ? ext4_xattr_inode_dec_ref_all+0x4d0/0xe40 [ 159.192432][ T5350] ? __ext4_journal_ensure_credits+0x30/0x450 [ 159.194939][ T5350] ext4_xattr_inode_dec_ref_all+0x8c9/0xe40 [ 159.197287][ T5350] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 159.200129][ T5350] ? __ext4_journal_get_write_access+0x27f/0x590 [ 159.202913][ T5350] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 159.205781][ T5350] ext4_xattr_delete_inode+0xb45/0xd10 [ 159.208110][ T5350] ? __ext4_mark_inode_dirty+0x49e/0x710 [ 159.210732][ T5350] ? up_write+0x1ab/0x410 [ 159.212716][ T5350] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 159.215389][ T5350] ext4_evict_inode+0xc4e/0x10e0 [ 159.217529][ T5350] ? __pfx_ext4_evict_inode+0x10/0x10 [ 159.219916][ T5350] ? do_raw_spin_unlock+0x4d/0x210 [ 159.221932][ T5350] ? __pfx_ext4_evict_inode+0x10/0x10 [ 159.224176][ T5350] evict+0x61e/0xb10 [ 159.225898][ T5350] ? __pfx_evict+0x10/0x10 [ 159.227719][ T5350] ? _raw_spin_unlock+0x28/0x50 [ 159.229480][ T5350] ? iput+0xb25/0xe80 [ 159.231196][ T5350] ext4_orphan_cleanup+0xc38/0x1470 [ 159.233620][ T5350] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 159.236134][ T5350] ? ext4_register_li_request+0x640/0x720 [ 159.238496][ T5350] ? errseq_check_and_advance+0x66/0x120 [ 159.240871][ T5350] ext4_fill_super+0x5a19/0x6330 [ 159.242966][ T5350] ? __pfx_ext4_fill_super+0x10/0x10 [ 159.245140][ T5350] ? snprintf+0xe8/0x140 [ 159.246947][ T5350] ? __pfx_snprintf+0x10/0x10 [ 159.249085][ T5350] ? set_blocksize+0x1c9/0x440 [ 159.251133][ T5350] ? sb_set_blocksize+0x155/0x240 [ 159.253442][ T5350] ? setup_bdev_super+0x4c1/0x5b0 [ 159.255603][ T5350] get_tree_bdev_flags+0x431/0x4f0 [ 159.257695][ T5350] ? __pfx_ext4_fill_super+0x10/0x10 [ 159.259977][ T5350] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 159.262396][ T5350] vfs_get_tree+0x92/0x2a0 [ 159.264212][ T5350] do_new_mount+0x341/0xd30 [ 159.266198][ T5350] ? apparmor_capable+0x126/0x170 [ 159.268292][ T5350] ? __pfx_do_new_mount+0x10/0x10 [ 159.270716][ T5350] ? ns_capable+0x89/0xe0 [ 159.272633][ T5350] ? user_path_at+0xd4/0x160 [ 159.274698][ T5350] __se_sys_mount+0x31d/0x420 [ 159.276682][ T5350] ? __pfx___se_sys_mount+0x10/0x10 [ 159.278814][ T5350] ? __x64_sys_mount+0x20/0xc0 [ 159.280854][ T5350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.283316][ T5350] do_syscall_64+0x15f/0xf80 [ 159.285283][ T5350] ? trace_irq_disable+0x3b/0x140 [ 159.287461][ T5350] ? clear_bhb_loop+0x40/0x90 [ 159.289441][ T5350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.292138][ T5350] RIP: 0033:0x7fadf299e04a [ 159.294061][ T5350] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.301751][ T5350] RSP: 002b:00007fadf3835e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 159.305219][ T5350] RAX: ffffffffffffffda RBX: 00007fadf3835ea0 RCX: 00007fadf299e04a [ 159.308560][ T5350] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fadf3835e60 [ 159.311974][ T5350] RBP: 0000200000000180 R08: 00007fadf3835ea0 R09: 0000000000000000 [ 159.315269][ T5350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 159.319073][ T5350] R13: 00007fadf3835e60 R14: 0000000000000476 R15: 0000200000000040 [ 159.322767][ T5350] [ 159.324524][ T5350] Kernel Offset: disabled [ 159.326444][ T5350] Rebooting in 86400 seconds..