program: setpriority(0x1, 0x5, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x10000008, 0xb, 0x4}, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x6000000, &(0x7f00000001c0), 0x1, 0x47a, &(0x7f00000006c0)="$eJzs28tvVNUfAPDvvX3Bj0f5IT5A1CoxaTS2tKCycKPRxBiMJrrAZW0H0jBQQ6sRJFKMcWViSHRNXBr9C9wZE6OuTNi6cmVIiLIBXNXcO/fCdJgBameY0vl8kjtzzr3nzjlnzn2ce85MAD1rJHtJIjZHxO8RMVyLLk8wUnu7evn09LXLp6eTWFp6668kT3fl8unpMmm536YiMppGpJ8mRSbLzZ88dXSqWq2cKOLjC8feG58/eeqZD45NHakcqRyfPHBg/76J55+bfLYt9czqdWXXx3O7d776zrnXpw+de/eX77Lybi6219ejXUayiv+9lGvc9mS7M+uyLXXhpL+LBWFF+iIia66B/Pwfjr640XjD8conXS0c0FHZvWlD682LS8A6lkS3SwB0R3mjz55/y+UudT3WhEsv1h6AsnpfLZbalv5IizQDDc+37TQSEYcW/zmfLdGhcQgAgHqfT391cDAiPrr27WtZ32M4IoaKbQ/kr3/kr1uLOZRtEfH/iNgeEfdFxI6IuL9I+2BEPLTK8tzc/0kvrvIjbynr/71QzG0t7/+Vvb/Y1lfEtuT1H0gOz1Yre2Mo/05GY2Aoi0/cIo8fXr7wRatt9f2/bMnyL/uCRTku9g8t32dmamEq75S2waWzEbv6m9U/uT4TkETEzojYtbKP3loGZp/6ZnerRM3rf+X8HeXQhnmmpa+z6i1m9V+MhvqXkvr5ydmb5ifHN0S1sne8dlQ08+tvn73ZKv/bt39nXarU3uvavzHJtqR+vna+vfn/x+M/HUzezueZB4t1H04tLJyYiBhMDubxZesnb+xbxsv02fE/uqf5+b+92Cer/8MRkR3Ej0TEoxHxWFH2xyPiiYjYc4s6/vzS7esfaZfa/2zETNPr3/Xjv6H9Vx7oO/rT963yv7P235+HRos1+fXvNpoVJ7tcNBZwNd8dAAAA3CvS/DfwSTp2PZymY2O13/DviP+l1bn5hacPz71/fCYubK2Nf6blSNdwMR5ana1WJpLF4hNr46OTxVhxOV66rxg3/rJvYx4fm56rznS57tDrNrU4/zN/9nW7dECHbWy6dnLwrhcE6ILGefR0efTMG+FiAOuV/2tD7yrP/xbP+/X/gwHWGfd/6F3Nzv8zDXFzAbA+uf9D73L+Q49Kf1zFzp4K4F7n/g89aTX/6+9gYMPaKEZ3Amu1UfJARBlI10R5BDoU6PaVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoD3+DQAA//+Dq+dr") [ 102.196966][ T4655] Bluetooth: hci0: command tx timeout [ 102.395612][ T5330] loop0: detected capacity change from 0 to 512 [ 102.494977][ T5330] ------------[ cut here ]------------ [ 102.497767][ T5330] EA inode 11 i_nlink=0 [ 102.497815][ T5330] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x4c9/0x5a0, CPU#0: syz.0.0/5330 [ 102.503541][ T5330] Modules linked in: [ 102.505931][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.509364][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.513301][ T5330] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0 [ 102.515941][ T5330] Code: 74 08 4c 89 ef e8 af 5c 96 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 5b fc 0d 09 44 89 [ 102.523206][ T5330] RSP: 0018:ffffc9000f407240 EFLAGS: 00010246 [ 102.525570][ T5330] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000 [ 102.528536][ T5330] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff90378b30 [ 102.531909][ T5330] RBP: ffffc9000f407330 R08: ffff8880479c74a7 R09: 1ffff11008f38e94 [ 102.535249][ T5330] R10: dffffc0000000000 R11: ffffed1008f38e95 R12: ffffffff90378b30 [ 102.538033][ T5330] R13: 000000000000000b R14: 1ffff11008f38e60 R15: ffff8880479c7300 [ 102.540851][ T5330] FS: 00007f2b13eb66c0(0000) GS:ffff88808c885000(0000) knlGS:0000000000000000 [ 102.544400][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.546891][ T5330] CR2: 00007fff6a81ea9c CR3: 000000001cef1000 CR4: 0000000000352ef0 [ 102.549874][ T5330] Call Trace: [ 102.551179][ T5330] [ 102.552395][ T5330] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 102.554871][ T5330] ? __kmalloc_cache_noprof+0x31c/0x660 [ 102.556944][ T5330] ? ext4_xattr_inode_dec_ref_all+0x4d0/0xe40 [ 102.559342][ T5330] ? __ext4_journal_ensure_credits+0x30/0x450 [ 102.561535][ T5330] ext4_xattr_inode_dec_ref_all+0x8c9/0xe40 [ 102.563623][ T5330] ? __mark_inode_dirty+0xb66/0x13b0 [ 102.565580][ T5330] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 102.567979][ T5330] ? __ext4_journal_get_write_access+0x27f/0x590 [ 102.570365][ T5330] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 102.573056][ T5330] ext4_xattr_delete_inode+0xb45/0xd10 [ 102.575276][ T5330] ? ext4_mark_iloc_dirty+0x6ec/0x1cc0 [ 102.577318][ T5330] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 102.579597][ T5330] ext4_evict_inode+0xc4e/0x10e0 [ 102.581485][ T5330] ? __pfx_ext4_evict_inode+0x10/0x10 [ 102.583581][ T5330] ? do_raw_spin_unlock+0x4d/0x210 [ 102.585728][ T5330] ? __pfx_ext4_evict_inode+0x10/0x10 [ 102.587775][ T5330] evict+0x61e/0xb10 [ 102.589332][ T5330] ? __pfx_evict+0x10/0x10 [ 102.591059][ T5330] ? _raw_spin_unlock+0x28/0x50 [ 102.593088][ T5330] ? iput+0xb25/0xe80 [ 102.594689][ T5330] ext4_orphan_cleanup+0xc38/0x1470 [ 102.596681][ T5330] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 102.598922][ T5330] ? ext4_register_li_request+0x640/0x720 [ 102.601116][ T5330] ? errseq_check_and_advance+0x66/0x120 [ 102.603414][ T5330] ext4_fill_super+0x5a19/0x6330 [ 102.605367][ T5330] ? __pfx_ext4_fill_super+0x10/0x10 [ 102.607398][ T5330] ? snprintf+0xe8/0x140 [ 102.609015][ T5330] ? __pfx_snprintf+0x10/0x10 [ 102.610858][ T5330] ? set_blocksize+0x1c9/0x440 [ 102.612931][ T5330] ? sb_set_blocksize+0x155/0x240 [ 102.614971][ T5330] ? setup_bdev_super+0x4c1/0x5b0 [ 102.616894][ T5330] get_tree_bdev_flags+0x431/0x4f0 [ 102.618853][ T5330] ? __pfx_ext4_fill_super+0x10/0x10 [ 102.620939][ T5330] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 102.623897][ T5330] vfs_get_tree+0x92/0x2a0 [ 102.625781][ T5330] do_new_mount+0x341/0xd30 [ 102.627633][ T5330] ? apparmor_capable+0x126/0x170 [ 102.629627][ T5330] ? __pfx_do_new_mount+0x10/0x10 [ 102.631631][ T5330] ? ns_capable+0x89/0xe0 [ 102.633812][ T5330] ? user_path_at+0xd4/0x160 [ 102.635740][ T5330] __se_sys_mount+0x31d/0x420 [ 102.637617][ T5330] ? __pfx___se_sys_mount+0x10/0x10 [ 102.640048][ T5330] ? __x64_sys_mount+0x20/0xc0 [ 102.641945][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.644538][ T5330] do_syscall_64+0x15f/0xf80 [ 102.646419][ T5330] ? trace_irq_disable+0x3b/0x140 [ 102.648397][ T5330] ? clear_bhb_loop+0x40/0x90 [ 102.650183][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.652694][ T5330] RIP: 0033:0x7f2b12f9e04a [ 102.654510][ T5330] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.661734][ T5330] RSP: 002b:00007f2b13eb5e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.665144][ T5330] RAX: ffffffffffffffda RBX: 00007f2b13eb5ea0 RCX: 00007f2b12f9e04a [ 102.668336][ T5330] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f2b13eb5e60 [ 102.671345][ T5330] RBP: 0000200000000180 R08: 00007f2b13eb5ea0 R09: 0000000006000000 [ 102.674482][ T5330] R10: 0000000006000000 R11: 0000000000000246 R12: 0000200000000000 [ 102.677453][ T5330] R13: 00007f2b13eb5e60 R14: 000000000000047a R15: 00002000000001c0 [ 102.680617][ T5330] [ 102.681872][ T5330] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.684800][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.688351][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.692346][ T5330] Call Trace: [ 102.693658][ T5330] [ 102.694851][ T5330] vpanic+0x56c/0xa60 [ 102.696418][ T5330] ? __pfx__printk+0x10/0x10 [ 102.698210][ T5330] ? __pfx_vpanic+0x10/0x10 [ 102.700003][ T5330] ? is_bpf_text_address+0x292/0x2b0 [ 102.702011][ T5330] ? is_bpf_text_address+0x26/0x2b0 [ 102.704017][ T5330] panic+0xc5/0xd0 [ 102.705476][ T5330] ? __pfx_panic+0x10/0x10 [ 102.707204][ T5330] __warn+0x315/0x4c0 [ 102.708781][ T5330] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 102.711030][ T5330] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 102.713289][ T5330] __report_bug+0x29a/0x540 [ 102.715099][ T5330] ? ext4_get_group_desc+0x434/0x4e0 [ 102.717064][ T5330] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 102.719245][ T5330] ? __pfx___report_bug+0x10/0x10 [ 102.721129][ T5330] ? set_normalized_timespec64+0xf0/0x1a0 [ 102.723373][ T5330] report_bug_entry+0x19a/0x290 [ 102.725267][ T5330] ? ext4_xattr_inode_update_ref+0x511/0x5a0 [ 102.727538][ T5330] ? ext4_xattr_inode_update_ref+0x516/0x5a0 [ 102.729750][ T5330] handle_bug+0xce/0x200 [ 102.731426][ T5330] exc_invalid_op+0x1a/0x50 [ 102.733139][ T5330] asm_exc_invalid_op+0x1a/0x20 [ 102.735068][ T5330] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0 [ 102.737527][ T5330] Code: 74 08 4c 89 ef e8 af 5c 96 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 5b fc 0d 09 44 89 [ 102.744509][ T5330] RSP: 0018:ffffc9000f407240 EFLAGS: 00010246 [ 102.746787][ T5330] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000 [ 102.749720][ T5330] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff90378b30 [ 102.752643][ T5330] RBP: ffffc9000f407330 R08: ffff8880479c74a7 R09: 1ffff11008f38e94 [ 102.755703][ T5330] R10: dffffc0000000000 R11: ffffed1008f38e95 R12: ffffffff90378b30 [ 102.758619][ T5330] R13: 000000000000000b R14: 1ffff11008f38e60 R15: ffff8880479c7300 [ 102.761515][ T5330] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 102.763898][ T5330] ? __kmalloc_cache_noprof+0x31c/0x660 [ 102.766056][ T5330] ? ext4_xattr_inode_dec_ref_all+0x4d0/0xe40 [ 102.768359][ T5330] ? __ext4_journal_ensure_credits+0x30/0x450 [ 102.770617][ T5330] ext4_xattr_inode_dec_ref_all+0x8c9/0xe40 [ 102.772824][ T5330] ? __mark_inode_dirty+0xb66/0x13b0 [ 102.774897][ T5330] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 102.777356][ T5330] ? __ext4_journal_get_write_access+0x27f/0x590 [ 102.779811][ T5330] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 102.782355][ T5330] ext4_xattr_delete_inode+0xb45/0xd10 [ 102.784492][ T5330] ? ext4_mark_iloc_dirty+0x6ec/0x1cc0 [ 102.786578][ T5330] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 102.788756][ T5330] ext4_evict_inode+0xc4e/0x10e0 [ 102.790674][ T5330] ? __pfx_ext4_evict_inode+0x10/0x10 [ 102.792710][ T5330] ? do_raw_spin_unlock+0x4d/0x210 [ 102.794584][ T5330] ? __pfx_ext4_evict_inode+0x10/0x10 [ 102.796576][ T5330] evict+0x61e/0xb10 [ 102.798071][ T5330] ? __pfx_evict+0x10/0x10 [ 102.799786][ T5330] ? _raw_spin_unlock+0x28/0x50 [ 102.801769][ T5330] ? iput+0xb25/0xe80 [ 102.803371][ T5330] ext4_orphan_cleanup+0xc38/0x1470 [ 102.805400][ T5330] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 102.807532][ T5330] ? ext4_register_li_request+0x640/0x720 [ 102.809729][ T5330] ? errseq_check_and_advance+0x66/0x120 [ 102.811891][ T5330] ext4_fill_super+0x5a19/0x6330 [ 102.813857][ T5330] ? __pfx_ext4_fill_super+0x10/0x10 [ 102.815985][ T5330] ? snprintf+0xe8/0x140 [ 102.817646][ T5330] ? __pfx_snprintf+0x10/0x10 [ 102.819460][ T5330] ? set_blocksize+0x1c9/0x440 [ 102.821305][ T5330] ? sb_set_blocksize+0x155/0x240 [ 102.823301][ T5330] ? setup_bdev_super+0x4c1/0x5b0 [ 102.825288][ T5330] get_tree_bdev_flags+0x431/0x4f0 [ 102.827244][ T5330] ? __pfx_ext4_fill_super+0x10/0x10 [ 102.829183][ T5330] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 102.831299][ T5330] vfs_get_tree+0x92/0x2a0 [ 102.833060][ T5330] do_new_mount+0x341/0xd30 [ 102.835026][ T5330] ? apparmor_capable+0x126/0x170 [ 102.836993][ T5330] ? __pfx_do_new_mount+0x10/0x10 [ 102.838876][ T5330] ? ns_capable+0x89/0xe0 [ 102.840738][ T5330] ? user_path_at+0xd4/0x160 [ 102.842497][ T5330] __se_sys_mount+0x31d/0x420 [ 102.844360][ T5330] ? __pfx___se_sys_mount+0x10/0x10 [ 102.846323][ T5330] ? __x64_sys_mount+0x20/0xc0 [ 102.848350][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.850618][ T5330] do_syscall_64+0x15f/0xf80 [ 102.852266][ T5330] ? trace_irq_disable+0x3b/0x140 [ 102.854371][ T5330] ? clear_bhb_loop+0x40/0x90 [ 102.856259][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.858505][ T5330] RIP: 0033:0x7f2b12f9e04a [ 102.860154][ T5330] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.867333][ T5330] RSP: 002b:00007f2b13eb5e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.870530][ T5330] RAX: ffffffffffffffda RBX: 00007f2b13eb5ea0 RCX: 00007f2b12f9e04a [ 102.873521][ T5330] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f2b13eb5e60 [ 102.876517][ T5330] RBP: 0000200000000180 R08: 00007f2b13eb5ea0 R09: 0000000006000000 [ 102.879522][ T5330] R10: 0000000006000000 R11: 0000000000000246 R12: 0000200000000000 [ 102.882575][ T5330] R13: 00007f2b13eb5e60 R14: 000000000000047a R15: 00002000000001c0 [ 102.885639][ T5330] [ 102.887306][ T5330] Kernel Offset: disabled [ 102.889017][ T5330] Rebooting in 86400 seconds..