program: r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0) r1 = geteuid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x6000000, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@resuid={'resuid', 0x3d, r1}}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x486, &(0x7f0000000b40)="$eJzs28tvVNUfAPDvvX3Bj0f5IT5A1CoxaTS2tKCycKPRxBiMJrrAZW0H0jBQQ6sRJFKMcWViSHRNXBr9C9wZE6OuTNi6cmVIiLIBXNXcO/fCdJjh4Uw7pfP5JDM95z7mnG/PfZx7zkwAPWske0siNkfE7xExXMsu32Ck9ufq5dPT1y6fnk5iaemtv5J8uyuXT0+Xm5b7bSoyo2lE+mlSFLLc/MlTR6eq1cqJIj++cOy98fmTp5754NjUkcqRyvHJAwf275t4/rnJZzsSZxbXlV0fz+3e+eo7516fPnTu3V++y+q7uVhfH0enjGSB/72Ua1z3ZKcL67Itdemkv4sV4a70RUTWXAP5+T8cfXGj8YbjlU+6WjlgRWX3pg2tVy8uAetYEt2uAdAd5Y0+e/4tX6vU9VgTLr1YewDK4r5avGpr+iMtthloeL7tpJGIOLT4z/nsFSs0DgEAUO/z6a8ODkbER9e+fS3rewxHxFCx7oH8/Y/8fWsxh7ItIv4fEdsj4r6I2BER9xfbPhgRD7VZn5v7P+nFNj/ylrL+3wvF3Nby/l/Z+4ttfUVuSx7/QHJ4tlrZG0P5/2Q0Boay/MQtyvjh5QtftFpX3//LXln5ZV+wqMfF/qHl+8xMLUzlndIOuHQ2Yld/s/iT6zMBSUTsjIhdd/fRW8vE7FPf7G61UfP4r5y/oxI6MM+09HUW3mIW/2I0xF9K6ucnZ2+anxzfENXK3vHaUdHMr7999mar8m/f/ivrUqX2t679GzfZltTP1853tvz/ePyng8nb+TzzYLHsw6mFhRMTEYPJwTy/bPnkjX3LfLl9dvyP7ml+/m8v9snifzgisoP4kYh4NCIeK+r+eEQ8ERF7bhHjzy/dPv5Iu9T+ZyNmml7/rh//De1/94m+oz9936r8O2v//XlqtFiSX/9uo1l1sstFYwXb+d8BAADAvSLNvwOfpGPX02k6Nlb7Dv+O+F9anZtfePrw3PvHZ+LC1tr4Z1qOdA0X46HV2WplIlksPrE2PjpZjBWX46X7inHjL/s25vmx6bnqTJdjh163qcX5n/mzr9u1A1bYxqZLJwdXvSJAFzTOo6fLs2feCBcDWK/8Xht6V3n+t3jer/8dDLDOuP9D72p2/p9pyJsLgPXJ/R96l/MfelT6Yxs7eyqAe537P/Skdn7Xv4KJDWujGt1JrNVGyRMRZSJdjUIHovshdz2RRsSqF9r6mrE0tJpXKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPb8GwAA///eOOXx") [ 77.528252][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.531225][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.555618][ T5286] Bluetooth: hci0: command tx timeout [ 77.620693][ T5323] loop0: detected capacity change from 0 to 512 [ 77.689527][ T5323] ------------[ cut here ]------------ [ 77.692569][ T5323] EA inode 11 i_nlink=0 [ 77.692583][ T5323] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x4cc/0x590, CPU#0: syz.0.0/5323 [ 77.699953][ T5323] Modules linked in: [ 77.701863][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 77.705699][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.710209][ T5323] RIP: 0010:ext4_xattr_inode_update_ref+0x50c/0x590 [ 77.713033][ T5323] Code: 08 4c 89 e7 e8 45 35 95 ff 4d 8b 24 24 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 75 73 41 8b 55 00 48 89 df 4c 89 e6 <67> 48 0f b9 3a e9 5f fe ff ff e8 75 23 32 09 44 89 e9 80 e1 07 80 [ 77.721029][ T5323] RSP: 0018:ffffc9000e1bf260 EFLAGS: 00010246 [ 77.723980][ T5323] RAX: 0000000000000000 RBX: ffffffff905ec680 RCX: dffffc0000000000 [ 77.727854][ T5323] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff905ec680 [ 77.730853][ T5323] RBP: ffffc9000e1bf350 R08: ffff888042b70d8f R09: 1ffff1100856e1b1 [ 77.733941][ T5323] R10: dffffc0000000000 R11: ffffed100856e1b2 R12: 000000000000000b [ 77.738130][ T5323] R13: ffff888042b70be8 R14: 0000000000000000 R15: 1ffff1100856e17d [ 77.742499][ T5323] FS: 00007fc359db66c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 77.746597][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.749597][ T5323] CR2: 00007f2c924c39c0 CR3: 0000000043ea6000 CR4: 0000000000352ef0 [ 77.753159][ T5323] Call Trace: [ 77.754878][ T5323] [ 77.756273][ T5323] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 77.759317][ T5323] ? __kmalloc_cache_noprof+0x150/0x660 [ 77.761698][ T5323] ? ext4_xattr_inode_dec_ref_all+0x3d9/0xec0 [ 77.764042][ T5323] ? ext4_xattr_inode_dec_ref_all+0x3d9/0xec0 [ 77.766467][ T5323] ? __ext4_journal_ensure_credits+0x30/0x450 [ 77.768941][ T5323] ext4_xattr_inode_dec_ref_all+0x7c0/0xec0 [ 77.771278][ T5323] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 77.774205][ T5323] ? __ext4_journal_get_write_access+0x27f/0x590 [ 77.777153][ T5323] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 77.780019][ T5323] ext4_xattr_delete_inode+0xb42/0xd10 [ 77.782271][ T5323] ? ext4_reserve_inode_write+0x2ef/0x360 [ 77.784776][ T5323] ? ext4_mark_iloc_dirty+0x6db/0x1cc0 [ 77.787230][ T5323] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 77.789918][ T5323] ? __ext4_mark_inode_dirty+0x4c1/0x700 [ 77.792435][ T5323] ext4_evict_inode+0xc31/0x10c0 [ 77.794819][ T5323] ? __pfx_ext4_evict_inode+0x10/0x10 [ 77.797131][ T5323] ? do_raw_spin_unlock+0x4d/0x210 [ 77.799573][ T5323] ? __pfx_ext4_evict_inode+0x10/0x10 [ 77.802199][ T5323] evict+0x624/0xb50 [ 77.803991][ T5323] ? __pfx_evict+0x10/0x10 [ 77.806076][ T5323] ? do_raw_spin_unlock+0x4d/0x210 [ 77.808351][ T5323] ? _raw_spin_unlock+0x28/0x50 [ 77.810521][ T5323] ? iput+0xb84/0xf00 [ 77.812314][ T5323] ext4_orphan_cleanup+0xc7a/0x14c0 [ 77.814577][ T5323] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.817215][ T5323] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 77.819683][ T5323] ? ext4_register_li_request+0x640/0x720 [ 77.822175][ T5323] ? errseq_check_and_advance+0x66/0x120 [ 77.824676][ T5323] ext4_fill_super+0x5cb4/0x65c0 [ 77.826779][ T5323] ? __pfx_ext4_fill_super+0x10/0x10 [ 77.829013][ T5323] ? snprintf+0xe8/0x140 [ 77.830821][ T5323] ? __pfx_snprintf+0x10/0x10 [ 77.832737][ T5323] ? set_blocksize+0x1c9/0x440 [ 77.834906][ T5323] ? sb_set_blocksize+0x155/0x240 [ 77.837166][ T5323] ? setup_bdev_super+0x4c1/0x5b0 [ 77.839378][ T5323] get_tree_bdev_flags+0x430/0x4f0 [ 77.841650][ T5323] ? __pfx_ext4_fill_super+0x10/0x10 [ 77.843948][ T5323] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 77.846493][ T5323] vfs_get_tree+0x92/0x2a0 [ 77.848261][ T5323] do_new_mount+0x319/0xdc0 [ 77.850014][ T5323] ? __pfx_do_new_mount+0x10/0x10 [ 77.852231][ T5323] ? ns_capable+0x89/0xe0 [ 77.854129][ T5323] ? path_mount+0x647/0x1040 [ 77.856392][ T5323] ? user_path_at+0xd4/0x160 [ 77.858421][ T5323] __se_sys_mount+0x31d/0x420 [ 77.860352][ T5323] ? __pfx___se_sys_mount+0x10/0x10 [ 77.862580][ T5323] ? __x64_sys_mount+0x20/0xc0 [ 77.865048][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.867866][ T5323] do_syscall_64+0x174/0x580 [ 77.869992][ T5323] ? trace_irq_disable+0x3b/0x140 [ 77.872246][ T5323] ? clear_bhb_loop+0x40/0x90 [ 77.874455][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.877431][ T5323] RIP: 0033:0x7fc358f9f34a [ 77.879388][ T5323] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.888444][ T5323] RSP: 002b:00007fc359db5e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.891941][ T5323] RAX: ffffffffffffffda RBX: 00007fc359db5ea0 RCX: 00007fc358f9f34a [ 77.895413][ T5323] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fc359db5e60 [ 77.898988][ T5323] RBP: 0000200000000180 R08: 00007fc359db5ea0 R09: 0000000006000000 [ 77.902290][ T5323] R10: 0000000006000000 R11: 0000000000000246 R12: 0000200000000000 [ 77.905576][ T5323] R13: 00007fc359db5e60 R14: 0000000000000486 R15: 000000000000002c [ 77.908723][ T5323] [ 77.910078][ T5323] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.913240][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 77.918019][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.922240][ T5323] Call Trace: [ 77.923852][ T5323] [ 77.925280][ T5323] vpanic+0x56c/0xa60 [ 77.927332][ T5323] ? __pfx__printk+0x10/0x10 [ 77.929571][ T5323] ? __pfx_vpanic+0x10/0x10 [ 77.931707][ T5323] ? is_bpf_text_address+0x292/0x2b0 [ 77.933912][ T5323] ? is_bpf_text_address+0x26/0x2b0 [ 77.936150][ T5323] panic+0xc5/0xd0 [ 77.937812][ T5323] ? __pfx_panic+0x10/0x10 [ 77.939783][ T5323] __warn+0x315/0x4c0 [ 77.941639][ T5323] ? ext4_xattr_inode_update_ref+0x4cc/0x590 [ 77.944545][ T5323] ? ext4_xattr_inode_update_ref+0x4cc/0x590 [ 77.947242][ T5323] __report_bug+0x276/0x570 [ 77.949243][ T5323] ? ext4_xattr_inode_update_ref+0x4cc/0x590 [ 77.951881][ T5323] ? __pfx___report_bug+0x10/0x10 [ 77.954025][ T5323] ? __ext4_get_inode_loc+0x6b4/0xf40 [ 77.956351][ T5323] ? set_normalized_timespec64+0xf0/0x1a0 [ 77.958731][ T5323] ? __ext4_journal_get_write_access+0x84/0x590 [ 77.961489][ T5323] report_bug_entry+0x19a/0x290 [ 77.963767][ T5323] ? ext4_xattr_inode_update_ref+0x50c/0x590 [ 77.966320][ T5323] ? ext4_xattr_inode_update_ref+0x511/0x590 [ 77.968850][ T5323] handle_bug+0xce/0x200 [ 77.970663][ T5323] exc_invalid_op+0x1a/0x50 [ 77.972735][ T5323] asm_exc_invalid_op+0x1a/0x20 [ 77.974930][ T5323] RIP: 0010:ext4_xattr_inode_update_ref+0x50c/0x590 [ 77.977717][ T5323] Code: 08 4c 89 e7 e8 45 35 95 ff 4d 8b 24 24 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 75 73 41 8b 55 00 48 89 df 4c 89 e6 <67> 48 0f b9 3a e9 5f fe ff ff e8 75 23 32 09 44 89 e9 80 e1 07 80 [ 77.985353][ T5323] RSP: 0018:ffffc9000e1bf260 EFLAGS: 00010246 [ 77.987818][ T5323] RAX: 0000000000000000 RBX: ffffffff905ec680 RCX: dffffc0000000000 [ 77.990948][ T5323] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff905ec680 [ 77.994184][ T5323] RBP: ffffc9000e1bf350 R08: ffff888042b70d8f R09: 1ffff1100856e1b1 [ 77.997535][ T5323] R10: dffffc0000000000 R11: ffffed100856e1b2 R12: 000000000000000b [ 78.000764][ T5323] R13: ffff888042b70be8 R14: 0000000000000000 R15: 1ffff1100856e17d [ 78.004230][ T5323] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 78.007006][ T5323] ? __kmalloc_cache_noprof+0x150/0x660 [ 78.009426][ T5323] ? ext4_xattr_inode_dec_ref_all+0x3d9/0xec0 [ 78.012130][ T5323] ? ext4_xattr_inode_dec_ref_all+0x3d9/0xec0 [ 78.014930][ T5323] ? __ext4_journal_ensure_credits+0x30/0x450 [ 78.017521][ T5323] ext4_xattr_inode_dec_ref_all+0x7c0/0xec0 [ 78.019975][ T5323] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 78.022529][ T5323] ? __ext4_journal_get_write_access+0x27f/0x590 [ 78.025212][ T5323] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 78.028183][ T5323] ext4_xattr_delete_inode+0xb42/0xd10 [ 78.030660][ T5323] ? ext4_reserve_inode_write+0x2ef/0x360 [ 78.033414][ T5323] ? ext4_mark_iloc_dirty+0x6db/0x1cc0 [ 78.035728][ T5323] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 78.038157][ T5323] ? __ext4_mark_inode_dirty+0x4c1/0x700 [ 78.040565][ T5323] ext4_evict_inode+0xc31/0x10c0 [ 78.042767][ T5323] ? __pfx_ext4_evict_inode+0x10/0x10 [ 78.045178][ T5323] ? do_raw_spin_unlock+0x4d/0x210 [ 78.047410][ T5323] ? __pfx_ext4_evict_inode+0x10/0x10 [ 78.049836][ T5323] evict+0x624/0xb50 [ 78.051674][ T5323] ? __pfx_evict+0x10/0x10 [ 78.053794][ T5323] ? do_raw_spin_unlock+0x4d/0x210 [ 78.056062][ T5323] ? _raw_spin_unlock+0x28/0x50 [ 78.058327][ T5323] ? iput+0xb84/0xf00 [ 78.060027][ T5323] ext4_orphan_cleanup+0xc7a/0x14c0 [ 78.062154][ T5323] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.064684][ T5323] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 78.066709][ T5323] ? ext4_register_li_request+0x640/0x720 [ 78.068712][ T5323] ? errseq_check_and_advance+0x66/0x120 [ 78.070899][ T5323] ext4_fill_super+0x5cb4/0x65c0 [ 78.073283][ T5323] ? __pfx_ext4_fill_super+0x10/0x10 [ 78.075941][ T5323] ? snprintf+0xe8/0x140 [ 78.078100][ T5323] ? __pfx_snprintf+0x10/0x10 [ 78.080342][ T5323] ? set_blocksize+0x1c9/0x440 [ 78.082445][ T5323] ? sb_set_blocksize+0x155/0x240 [ 78.084715][ T5323] ? setup_bdev_super+0x4c1/0x5b0 [ 78.086843][ T5323] get_tree_bdev_flags+0x430/0x4f0 [ 78.089143][ T5323] ? __pfx_ext4_fill_super+0x10/0x10 [ 78.091424][ T5323] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 78.093899][ T5323] vfs_get_tree+0x92/0x2a0 [ 78.095908][ T5323] do_new_mount+0x319/0xdc0 [ 78.097813][ T5323] ? __pfx_do_new_mount+0x10/0x10 [ 78.099955][ T5323] ? ns_capable+0x89/0xe0 [ 78.101759][ T5323] ? path_mount+0x647/0x1040 [ 78.103663][ T5323] ? user_path_at+0xd4/0x160 [ 78.105628][ T5323] __se_sys_mount+0x31d/0x420 [ 78.107567][ T5323] ? __pfx___se_sys_mount+0x10/0x10 [ 78.109823][ T5323] ? __x64_sys_mount+0x20/0xc0 [ 78.112250][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.115053][ T5323] do_syscall_64+0x174/0x580 [ 78.117121][ T5323] ? trace_irq_disable+0x3b/0x140 [ 78.119212][ T5323] ? clear_bhb_loop+0x40/0x90 [ 78.121272][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.123867][ T5323] RIP: 0033:0x7fc358f9f34a [ 78.125853][ T5323] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.134571][ T5323] RSP: 002b:00007fc359db5e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 78.138139][ T5323] RAX: ffffffffffffffda RBX: 00007fc359db5ea0 RCX: 00007fc358f9f34a [ 78.141492][ T5323] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fc359db5e60 [ 78.145307][ T5323] RBP: 0000200000000180 R08: 00007fc359db5ea0 R09: 0000000006000000 [ 78.148809][ T5323] R10: 0000000006000000 R11: 0000000000000246 R12: 0000200000000000 [ 78.152196][ T5323] R13: 00007fc359db5e60 R14: 0000000000000486 R15: 000000000000002c [ 78.155541][ T5323] [ 78.157475][ T5323] Kernel Offset: disabled [ 78.159508][ T5323] Rebooting in 86400 seconds..