program:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
r1 = socket$igmp(0x2, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001ac0), 0x1, 0x476, &(0x7f00000006c0)="$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")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a280000000100000708000240000000040900010073797a300000000028000000000a03000000000000000000010000090900010073797a30000000000800024000000006140000001000010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x6, @vifc_lcl_addr=@private=0xa010101, @remote}, 0x10)
[ 87.295760][ T4649] Bluetooth: hci0: command tx timeout
[ 87.401394][ T5322] loop0: detected capacity change from 0 to 512
[ 87.481958][ T5322] ------------[ cut here ]------------
[ 87.484735][ T5322] EA inode 11 i_nlink=0
[ 87.484749][ T5322] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x4cc/0x590, CPU#0: syz.0.0/5322
[ 87.491492][ T5322] Modules linked in:
[ 87.493180][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 87.497107][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 87.501384][ T5322] RIP: 0010:ext4_xattr_inode_update_ref+0x50c/0x590
[ 87.503983][ T5322] Code: 08 4c 89 e7 e8 45 35 95 ff 4d 8b 24 24 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 75 73 41 8b 55 00 48 89 df 4c 89 e6 <67> 48 0f b9 3a e9 5f fe ff ff e8 d5 43 32 09 44 89 e9 80 e1 07 80
[ 87.513882][ T5322] RSP: 0018:ffffc9000dd67260 EFLAGS: 00010246
[ 87.516788][ T5322] RAX: 0000000000000000 RBX: ffffffff905ecb80 RCX: dffffc0000000000
[ 87.519952][ T5322] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff905ecb80
[ 87.523139][ T5322] RBP: ffffc9000dd67350 R08: ffff8880445196ef R09: 1ffff110088a32dd
[ 87.526930][ T5322] R10: dffffc0000000000 R11: ffffed10088a32de R12: 000000000000000b
[ 87.530431][ T5322] R13: ffff888044519548 R14: 0000000000000000 R15: 1ffff110088a32a9
[ 87.533843][ T5322] FS: 00007f723f3f56c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 87.537075][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 87.539504][ T5322] CR2: 00007fd8223909c0 CR3: 0000000012ada000 CR4: 0000000000352ef0
[ 87.542718][ T5322] Call Trace:
[ 87.544209][ T5322]
[ 87.545599][ T5322] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 87.548148][ T5322] ? __kmalloc_cache_noprof+0x150/0x660
[ 87.550436][ T5322] ? ext4_xattr_inode_dec_ref_all+0x3d9/0xec0
[ 87.552918][ T5322] ? ext4_xattr_inode_dec_ref_all+0x3d9/0xec0
[ 87.555569][ T5322] ? __ext4_journal_ensure_credits+0x30/0x450
[ 87.558197][ T5322] ext4_xattr_inode_dec_ref_all+0x7c0/0xec0
[ 87.560487][ T5322] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10
[ 87.563217][ T5322] ? __ext4_journal_get_write_access+0x27f/0x590
[ 87.565930][ T5322] ? __pfx___ext4_journal_get_write_access+0x10/0x10
[ 87.568652][ T5322] ext4_xattr_delete_inode+0xb42/0xd10
[ 87.570869][ T5322] ? ext4_reserve_inode_write+0x2ef/0x360
[ 87.573053][ T5322] ? __pfx_ext4_xattr_delete_inode+0x10/0x10
[ 87.575604][ T5322] ? __ext4_mark_inode_dirty+0x4c1/0x700
[ 87.577966][ T5322] ext4_evict_inode+0xc31/0x10c0
[ 87.579975][ T5322] ? __pfx_ext4_evict_inode+0x10/0x10
[ 87.582387][ T5322] ? do_raw_spin_unlock+0x4d/0x210
[ 87.584572][ T5322] ? __pfx_ext4_evict_inode+0x10/0x10
[ 87.586962][ T5322] evict+0x624/0xb50
[ 87.588568][ T5322] ? __pfx_evict+0x10/0x10
[ 87.590365][ T5322] ? do_raw_spin_unlock+0x4d/0x210
[ 87.592520][ T5322] ? _raw_spin_unlock+0x28/0x50
[ 87.594708][ T5322] ? iput+0xb84/0xf00
[ 87.596451][ T5322] ext4_orphan_cleanup+0xc7a/0x14c0
[ 87.598662][ T5322] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 87.601118][ T5322] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 87.603249][ T5322] ? ext4_register_li_request+0x640/0x720
[ 87.605665][ T5322] ? errseq_check_and_advance+0x66/0x120
[ 87.607987][ T5322] ext4_fill_super+0x5cb4/0x65c0
[ 87.610049][ T5322] ? __pfx_ext4_fill_super+0x10/0x10
[ 87.612285][ T5322] ? snprintf+0xe8/0x140
[ 87.614120][ T5322] ? __pfx_snprintf+0x10/0x10
[ 87.616487][ T5322] ? set_blocksize+0x1c9/0x440
[ 87.618644][ T5322] ? sb_set_blocksize+0x155/0x240
[ 87.620805][ T5322] ? setup_bdev_super+0x4c1/0x5b0
[ 87.622701][ T5322] get_tree_bdev_flags+0x430/0x4f0
[ 87.624628][ T5322] ? __pfx_ext4_fill_super+0x10/0x10
[ 87.626793][ T5322] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 87.629011][ T5322] vfs_get_tree+0x92/0x2a0
[ 87.630798][ T5322] do_new_mount+0x319/0xdc0
[ 87.632415][ T5322] ? __pfx_do_new_mount+0x10/0x10
[ 87.634281][ T5322] ? ns_capable+0x89/0xe0
[ 87.636144][ T5322] ? path_mount+0x647/0x1040
[ 87.638058][ T5322] ? user_path_at+0xd4/0x160
[ 87.639979][ T5322] __se_sys_mount+0x31d/0x420
[ 87.641926][ T5322] ? __pfx___se_sys_mount+0x10/0x10
[ 87.644139][ T5322] ? __x64_sys_mount+0x20/0xc0
[ 87.646175][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.648697][ T5322] do_syscall_64+0x174/0x580
[ 87.650762][ T5322] ? trace_irq_disable+0x3b/0x140
[ 87.652883][ T5322] ? clear_bhb_loop+0x70/0xc0
[ 87.654920][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.657561][ T5322] RIP: 0033:0x7f7242f9f34a
[ 87.659434][ T5322] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 87.667406][ T5322] RSP: 002b:00007f723f3f4e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 87.670704][ T5322] RAX: ffffffffffffffda RBX: 00007f723f3f4ea0 RCX: 00007f7242f9f34a
[ 87.674019][ T5322] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f723f3f4e60
[ 87.677354][ T5322] RBP: 0000200000000180 R08: 00007f723f3f4ea0 R09: 0000000000000000
[ 87.680601][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[ 87.683816][ T5322] R13: 00007f723f3f4e60 R14: 0000000000000476 R15: 0000200000001ac0
[ 87.687162][ T5322]
[ 87.688467][ T5322] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 87.691473][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 87.695260][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 87.699495][ T5322] Call Trace:
[ 87.700861][ T5322]
[ 87.702120][ T5322] vpanic+0x56c/0xa60
[ 87.703730][ T5322] ? __pfx__printk+0x10/0x10
[ 87.705640][ T5322] ? __pfx_vpanic+0x10/0x10
[ 87.707505][ T5322] ? is_bpf_text_address+0x292/0x2b0
[ 87.709628][ T5322] ? is_bpf_text_address+0x26/0x2b0
[ 87.711972][ T5322] panic+0xc5/0xd0
[ 87.713692][ T5322] ? __pfx_panic+0x10/0x10
[ 87.715718][ T5322] __warn+0x315/0x4c0
[ 87.717497][ T5322] ? ext4_xattr_inode_update_ref+0x4cc/0x590
[ 87.720118][ T5322] ? ext4_xattr_inode_update_ref+0x4cc/0x590
[ 87.722648][ T5322] __report_bug+0x276/0x570
[ 87.724511][ T5322] ? ext4_xattr_inode_update_ref+0x4cc/0x590
[ 87.726994][ T5322] ? __pfx___report_bug+0x10/0x10
[ 87.729152][ T5322] ? __ext4_get_inode_loc+0x6b4/0xf40
[ 87.731444][ T5322] ? set_normalized_timespec64+0xf0/0x1a0
[ 87.733910][ T5322] ? __ext4_journal_get_write_access+0x84/0x590
[ 87.736605][ T5322] report_bug_entry+0x19a/0x290
[ 87.738742][ T5322] ? ext4_xattr_inode_update_ref+0x50c/0x590
[ 87.741272][ T5322] ? ext4_xattr_inode_update_ref+0x511/0x590
[ 87.743752][ T5322] handle_bug+0xce/0x200
[ 87.745553][ T5322] exc_invalid_op+0x1a/0x50
[ 87.747393][ T5322] asm_exc_invalid_op+0x1a/0x20
[ 87.749425][ T5322] RIP: 0010:ext4_xattr_inode_update_ref+0x50c/0x590
[ 87.752201][ T5322] Code: 08 4c 89 e7 e8 45 35 95 ff 4d 8b 24 24 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 75 73 41 8b 55 00 48 89 df 4c 89 e6 <67> 48 0f b9 3a e9 5f fe ff ff e8 d5 43 32 09 44 89 e9 80 e1 07 80
[ 87.760425][ T5322] RSP: 0018:ffffc9000dd67260 EFLAGS: 00010246
[ 87.763014][ T5322] RAX: 0000000000000000 RBX: ffffffff905ecb80 RCX: dffffc0000000000
[ 87.766338][ T5322] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff905ecb80
[ 87.769517][ T5322] RBP: ffffc9000dd67350 R08: ffff8880445196ef R09: 1ffff110088a32dd
[ 87.772842][ T5322] R10: dffffc0000000000 R11: ffffed10088a32de R12: 000000000000000b
[ 87.776282][ T5322] R13: ffff888044519548 R14: 0000000000000000 R15: 1ffff110088a32a9
[ 87.779529][ T5322] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[ 87.782129][ T5322] ? __kmalloc_cache_noprof+0x150/0x660
[ 87.784479][ T5322] ? ext4_xattr_inode_dec_ref_all+0x3d9/0xec0
[ 87.787072][ T5322] ? ext4_xattr_inode_dec_ref_all+0x3d9/0xec0
[ 87.789748][ T5322] ? __ext4_journal_ensure_credits+0x30/0x450
[ 87.792385][ T5322] ext4_xattr_inode_dec_ref_all+0x7c0/0xec0
[ 87.794903][ T5322] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10
[ 87.797693][ T5322] ? __ext4_journal_get_write_access+0x27f/0x590
[ 87.800334][ T5322] ? __pfx___ext4_journal_get_write_access+0x10/0x10
[ 87.803081][ T5322] ext4_xattr_delete_inode+0xb42/0xd10
[ 87.805340][ T5322] ? ext4_reserve_inode_write+0x2ef/0x360
[ 87.807666][ T5322] ? __pfx_ext4_xattr_delete_inode+0x10/0x10
[ 87.810313][ T5322] ? __ext4_mark_inode_dirty+0x4c1/0x700
[ 87.812765][ T5322] ext4_evict_inode+0xc31/0x10c0
[ 87.814919][ T5322] ? __pfx_ext4_evict_inode+0x10/0x10
[ 87.817195][ T5322] ? do_raw_spin_unlock+0x4d/0x210
[ 87.819390][ T5322] ? __pfx_ext4_evict_inode+0x10/0x10
[ 87.821731][ T5322] evict+0x624/0xb50
[ 87.823539][ T5322] ? __pfx_evict+0x10/0x10
[ 87.825590][ T5322] ? do_raw_spin_unlock+0x4d/0x210
[ 87.827891][ T5322] ? _raw_spin_unlock+0x28/0x50
[ 87.830080][ T5322] ? iput+0xb84/0xf00
[ 87.831903][ T5322] ext4_orphan_cleanup+0xc7a/0x14c0
[ 87.834228][ T5322] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 87.836820][ T5322] ? __pfx_ext4_orphan_cleanup+0x10/0x10
[ 87.839476][ T5322] ? ext4_register_li_request+0x640/0x720
[ 87.842150][ T5322] ? errseq_check_and_advance+0x66/0x120
[ 87.844618][ T5322] ext4_fill_super+0x5cb4/0x65c0
[ 87.846898][ T5322] ? __pfx_ext4_fill_super+0x10/0x10
[ 87.849274][ T5322] ? snprintf+0xe8/0x140
[ 87.851197][ T5322] ? __pfx_snprintf+0x10/0x10
[ 87.853264][ T5322] ? set_blocksize+0x1c9/0x440
[ 87.855337][ T5322] ? sb_set_blocksize+0x155/0x240
[ 87.857474][ T5322] ? setup_bdev_super+0x4c1/0x5b0
[ 87.859522][ T5322] get_tree_bdev_flags+0x430/0x4f0
[ 87.861704][ T5322] ? __pfx_ext4_fill_super+0x10/0x10
[ 87.863880][ T5322] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 87.866244][ T5322] vfs_get_tree+0x92/0x2a0
[ 87.868183][ T5322] do_new_mount+0x319/0xdc0
[ 87.870187][ T5322] ? __pfx_do_new_mount+0x10/0x10
[ 87.872390][ T5322] ? ns_capable+0x89/0xe0
[ 87.874385][ T5322] ? path_mount+0x647/0x1040
[ 87.876352][ T5322] ? user_path_at+0xd4/0x160
[ 87.878333][ T5322] __se_sys_mount+0x31d/0x420
[ 87.880429][ T5322] ? __pfx___se_sys_mount+0x10/0x10
[ 87.882663][ T5322] ? __x64_sys_mount+0x20/0xc0
[ 87.884707][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.887253][ T5322] do_syscall_64+0x174/0x580
[ 87.889209][ T5322] ? trace_irq_disable+0x3b/0x140
[ 87.891481][ T5322] ? clear_bhb_loop+0x70/0xc0
[ 87.893478][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.895904][ T5322] RIP: 0033:0x7f7242f9f34a
[ 87.897860][ T5322] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 87.905806][ T5322] RSP: 002b:00007f723f3f4e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 87.909230][ T5322] RAX: ffffffffffffffda RBX: 00007f723f3f4ea0 RCX: 00007f7242f9f34a
[ 87.912598][ T5322] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f723f3f4e60
[ 87.915970][ T5322] RBP: 0000200000000180 R08: 00007f723f3f4ea0 R09: 0000000000000000
[ 87.919318][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[ 87.922514][ T5322] R13: 00007f723f3f4e60 R14: 0000000000000476 R15: 0000200000001ac0
[ 87.925775][ T5322]
[ 87.927460][ T5322] Kernel Offset: disabled
[ 87.929293][ T5322] Rebooting in 86400 seconds..