syzbot

loop0: detected capacity change from 0 to 512
------------[ cut here ]------------
WARNING: CPU: 0 PID: 4508 at fs/ext4/xattr.c:1875 ext4_xattr_block_set+0x2010/0x2810 fs/ext4/xattr.c:1875
Modules linked in:
CPU: 0 PID: 4508 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ext4_xattr_block_set+0x2010/0x2810 fs/ext4/xattr.c:1875
lr : ext4_xattr_block_set+0x2010/0x2810 fs/ext4/xattr.c:1875
sp : ffff8000214e6ec0
x29: ffff8000214e7030 x28: ffff0000c410fd00 x27: ffff8000214e7180
x26: dfff800000000000 x25: ffff0000e56aa0f0 x24: ffff0000c410fd00
x23: 1ffff0000429ce32 x22: 1ffff0000429ce31 x21: 0000000000000000
x20: ffff8000214e7190 x19: ffff8000214e7188 x18: ffff800011a5bd40
x17: ffff800018184000 x16: ffff8000082d2558 x15: 0000000000000000
x14: 00000000ffffffc3 x13: 00000000ffffffc3 x12: 0000000000ff0100
x11: ff00800008e53990 x10: 0000000000000000 x9 : ffff800008e53990
x8 : ffff0000d9bb1bc0 x7 : ffff0000f247a000 x6 : ffff0000f247a020
x5 : ffff8000214e6fc0 x4 : ffff0000c410fd28 x3 : ffff800008e51a38
x2 : 0000000000000028 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 ext4_xattr_block_set+0x2010/0x2810 fs/ext4/xattr.c:1875
 ext4_xattr_move_to_block fs/ext4/xattr.c:2626 [inline]
 ext4_xattr_make_inode_space fs/ext4/xattr.c:2701 [inline]
 ext4_expand_extra_isize_ea+0xcb8/0x15cc fs/ext4/xattr.c:2793
 __ext4_expand_extra_isize+0x298/0x358 fs/ext4/inode.c:5980
 ext4_try_to_expand_extra_isize fs/ext4/inode.c:6023 [inline]
 __ext4_mark_inode_dirty+0x3e4/0x790 fs/ext4/inode.c:6101
 ext4_evict_inode+0xb58/0x1270 fs/ext4/inode.c:279
 evict+0x3c8/0x810 fs/inode.c:705
 iput_final fs/inode.c:1834 [inline]
 iput+0x764/0x7f4 fs/inode.c:1860
 ext4_process_orphan+0x240/0x2b4 fs/ext4/orphan.c:356
 ext4_orphan_cleanup+0x908/0x104c fs/ext4/orphan.c:470
 __ext4_fill_super fs/ext4/super.c:5530 [inline]
 ext4_fill_super+0x6440/0x68a8 fs/ext4/super.c:5661
 get_tree_bdev+0x358/0x544 fs/super.c:1366
 ext4_get_tree+0x28/0x38 fs/ext4/super.c:5691
 vfs_get_tree+0x90/0x274 fs/super.c:1573
 do_new_mount+0x228/0x810 fs/namespace.c:3078
 path_mount+0x5b4/0xe78 fs/namespace.c:3408
 do_mount fs/namespace.c:3421 [inline]
 __do_sys_mount fs/namespace.c:3629 [inline]
 __se_sys_mount fs/namespace.c:3606 [inline]
 __arm64_sys_mount+0x49c/0x584 fs/namespace.c:3606
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 4978
hardirqs last  enabled at (4977): [<ffff800008a7d6e8>] lookup_bh_lru fs/buffer.c:1291 [inline]
hardirqs last  enabled at (4977): [<ffff800008a7d6e8>] __find_get_block+0x1c8/0xdfc fs/buffer.c:1303
hardirqs last disabled at (4978): [<ffff8000118fa220>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (4160): [<ffff8000081aa3e0>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (4160): [<ffff8000081aa3e0>] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624
softirqs last disabled at (4139): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
EA inode 11 i_nlink=2
WARNING: CPU: 0 PID: 4508 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x42c/0x470 fs/ext4/xattr.c:1020
Modules linked in:
CPU: 0 PID: 4508 Comm: syz.0.17 Tainted: G        W          syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ext4_xattr_inode_update_ref+0x42c/0x470 fs/ext4/xattr.c:1020
lr : ext4_xattr_inode_update_ref+0x42c/0x470 fs/ext4/xattr.c:1020
sp : ffff8000214e6e00
x29: ffff8000214e6ea0 x28: 0000000000000000 x27: dfff800000000000
x26: 1fffe0001cad581b x25: ffff70000429cdc4 x24: 0000000000000000
x23: ffff800017a15000 x22: ffff0000e56abf20 x21: 0000000000000002
x20: 0000000000000001 x19: ffff0000e56abee0 x18: ffff800011a5bd40
x17: ffff800018184000 x16: ffff8000082d3a08 x15: ffff800017c65000
x14: ffff0000d9bb2658 x13: 84ffa64b6a950700 x12: 0000000000ff0100
x11: ff0080000a895d54 x10: 0000000000000003 x9 : 84ffa64b6a950700
x8 : 84ffa64b6a950700 x7 : 0000000000000000 x6 : 0000000000000000
x5 : ffff80001832e0a8 x4 : 0000000000000008 x3 : 0000000000000000
x2 : 0000000000000006 x1 : ffff800011a5d840 x0 : ffff80018a798000
Call trace:
 ext4_xattr_inode_update_ref+0x42c/0x470 fs/ext4/xattr.c:1020
 ext4_xattr_inode_dec_ref fs/ext4/xattr.c:1045 [inline]
 ext4_xattr_set_entry+0x918/0x15ac fs/ext4/xattr.c:1683
 ext4_xattr_ibody_set+0x204/0x600 fs/ext4/xattr.c:2230
 ext4_xattr_move_to_block fs/ext4/xattr.c:2633 [inline]
 ext4_xattr_make_inode_space fs/ext4/xattr.c:2701 [inline]
 ext4_expand_extra_isize_ea+0xd00/0x15cc fs/ext4/xattr.c:2793
 __ext4_expand_extra_isize+0x298/0x358 fs/ext4/inode.c:5980
 ext4_try_to_expand_extra_isize fs/ext4/inode.c:6023 [inline]
 __ext4_mark_inode_dirty+0x3e4/0x790 fs/ext4/inode.c:6101
 ext4_evict_inode+0xb58/0x1270 fs/ext4/inode.c:279
 evict+0x3c8/0x810 fs/inode.c:705
 iput_final fs/inode.c:1834 [inline]
 iput+0x764/0x7f4 fs/inode.c:1860
 ext4_process_orphan+0x240/0x2b4 fs/ext4/orphan.c:356
 ext4_orphan_cleanup+0x908/0x104c fs/ext4/orphan.c:470
 __ext4_fill_super fs/ext4/super.c:5530 [inline]
 ext4_fill_super+0x6440/0x68a8 fs/ext4/super.c:5661
 get_tree_bdev+0x358/0x544 fs/super.c:1366
 ext4_get_tree+0x28/0x38 fs/ext4/super.c:5691
 vfs_get_tree+0x90/0x274 fs/super.c:1573
 do_new_mount+0x228/0x810 fs/namespace.c:3078
 path_mount+0x5b4/0xe78 fs/namespace.c:3408
 do_mount fs/namespace.c:3421 [inline]
 __do_sys_mount fs/namespace.c:3629 [inline]
 __se_sys_mount fs/namespace.c:3606 [inline]
 __arm64_sys_mount+0x49c/0x584 fs/namespace.c:3606
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 5316
hardirqs last  enabled at (5315): [<ffff8000119d16b8>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1367 [inline]
hardirqs last  enabled at (5315): [<ffff8000119d16b8>] __schedule+0xed4/0x1b18 kernel/sched/core.c:6567
hardirqs last disabled at (5316): [<ffff8000118fa220>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (5184): [<ffff8000081aa3e0>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (5184): [<ffff8000081aa3e0>] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624
softirqs last disabled at (4981): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
EXT4-fs (loop0): 1 orphan inode deleted
EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.