Extracting prog: 2m7.214731864s
Minimizing prog: 90.09µs
Simplifying prog options: 0s
Extracting C: 25.787222703s
Simplifying C: 6m57.044770544s


extracting reproducer from 44 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@norecovery}, {@resgid}, {@sysvgroups}, {@nogrpid}]}, 0x0, 0x48f, &(0x7f0000000680)="$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")

program crashed: WARNING in ext4_xattr_block_set
single: successfully extracted reproducer
found reproducer with 1 syscalls
minimizing guilty program
extracting C reproducer
testing compiled C program (duration=44.046817561s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_block_set
simplifying C reproducer
testing compiled C program (duration=44.046817561s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_block_set
testing compiled C program (duration=44.046817561s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_block_set
testing compiled C program (duration=44.046817561s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_block_set
testing compiled C program (duration=44.046817561s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_block_set
testing compiled C program (duration=44.046817561s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_block_set
testing compiled C program (duration=44.046817561s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_block_set
testing compiled C program (duration=44.046817561s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_block_set
testing program (duration=44.046817561s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@norecovery}, {@resgid}, {@sysvgroups}, {@nogrpid}]}, 0x0, 0x48f, &(0x7f0000000680)="$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")

program crashed: WARNING in ext4_xattr_block_set
validation run: crashed=true
testing program (duration=44.046817561s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@norecovery}, {@resgid}, {@sysvgroups}, {@nogrpid}]}, 0x0, 0x48f, &(0x7f0000000680)="$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")

program crashed: WARNING in ext4_xattr_block_set
validation run: crashed=true
testing program (duration=44.046817561s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@norecovery}, {@resgid}, {@sysvgroups}, {@nogrpid}]}, 0x0, 0x48f, &(0x7f0000000680)="$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")

program crashed: WARNING in ext4_xattr_block_set
validation run: crashed=true
reproducing took 12m24.498935635s
repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 512
EXT4-fs (loop0): orphan cleanup on readonly fs
------------[ cut here ]------------
WARNING: CPU: 0 PID: 4519 at fs/ext4/xattr.c:1865 ext4_xattr_block_set+0x20bc/0x28b4 fs/ext4/xattr.c:1865
Modules linked in:
CPU: 0 PID: 4519 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ext4_xattr_block_set+0x20bc/0x28b4 fs/ext4/xattr.c:1865
lr : ext4_xattr_block_set+0x20bc/0x28b4 fs/ext4/xattr.c:1865
sp : ffff800021656f40
x29: ffff8000216570d0 x28: ffff0000d52d9400 x27: ffff0000d6a14000
x26: ffff800021657220 x25: dfff800000000000 x24: ffff0000d52d9400
x23: 1ffff000042cae46 x22: ffff800021657230 x21: 1ffff000042cae45
x20: ffff800021657228 x19: 0000000000000000 x18: 1fffe00033e7277e
x17: ffff80001537d000 x16: ffff8000082dba2c x15: 0000000000000000
x14: 0000000000000005 x13: 00000000ffffffc3 x12: ffff0000ebd62020
x11: ff00800008e7f040 x10: 0000000000000000 x9 : ffff800008e7f040
x8 : ffff0000d5f53800 x7 : ffff0000ebd62000 x6 : ffff0000ebd62020
x5 : ffff800021657060 x4 : ffff0000d52d9428 x3 : ffff800008e7d044
x2 : 0000000000000028 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 ext4_xattr_block_set+0x20bc/0x28b4 fs/ext4/xattr.c:1865
 ext4_xattr_move_to_block fs/ext4/xattr.c:2613 [inline]
 ext4_xattr_make_inode_space fs/ext4/xattr.c:2688 [inline]
 ext4_expand_extra_isize_ea+0xea4/0x1818 fs/ext4/xattr.c:2776
 __ext4_expand_extra_isize+0x2a0/0x364 fs/ext4/inode.c:6003
 ext4_try_to_expand_extra_isize fs/ext4/inode.c:6046 [inline]
 __ext4_mark_inode_dirty+0x3d4/0x7b4 fs/ext4/inode.c:6124
 ext4_evict_inode+0xb50/0x1264 fs/ext4/inode.c:281
 evict+0x3d8/0x824 fs/inode.c:705
 iput_final fs/inode.c:1834 [inline]
 iput+0x728/0x7e8 fs/inode.c:1860
 ext4_process_orphan+0x24c/0x2c0 fs/ext4/orphan.c:358
 ext4_orphan_cleanup+0x964/0x1090 fs/ext4/orphan.c:472
 __ext4_fill_super fs/ext4/super.c:5574 [inline]
 ext4_fill_super+0x5af8/0x63bc fs/ext4/super.c:5693
 get_tree_bdev+0x35c/0x54c fs/super.c:1366
 ext4_get_tree+0x28/0x38 fs/ext4/super.c:5723
 vfs_get_tree+0x90/0x278 fs/super.c:1573
 do_new_mount+0x228/0x804 fs/namespace.c:3078
 path_mount+0x5ac/0xe6c fs/namespace.c:3408
 do_mount fs/namespace.c:3421 [inline]
 __do_sys_mount fs/namespace.c:3629 [inline]
 __se_sys_mount fs/namespace.c:3606 [inline]
 __arm64_sys_mount+0x4a0/0x5a0 fs/namespace.c:3606
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 4232
hardirqs last  enabled at (4231): [<ffff800008a9c328>] lookup_bh_lru fs/buffer.c:1291 [inline]
hardirqs last  enabled at (4231): [<ffff800008a9c328>] __find_get_block+0x1c4/0xde4 fs/buffer.c:1303
hardirqs last disabled at (4232): [<ffff800011b8b0d4>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (1342): [<ffff800008031254>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (1340): [<ffff800008031220>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
EA inode 11 i_nlink=2
WARNING: CPU: 0 PID: 4519 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x454/0x498 fs/ext4/xattr.c:1004
Modules linked in:
CPU: 0 PID: 4519 Comm: syz.0.17 Tainted: G        W          syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ext4_xattr_inode_update_ref+0x454/0x498 fs/ext4/xattr.c:1004
lr : ext4_xattr_inode_update_ref+0x454/0x498 fs/ext4/xattr.c:1004
sp : ffff800021656ea0
x29: ffff800021656f50 x28: 0000000000000000 x27: 1fffe0001e311317
x26: ffff0000f1889700 x25: dfff800000000000 x24: ffff800021656ec0
x23: ffff7000042cadd8 x22: ffff800017d5e000 x21: 0000000000000002
x20: 0000000000000001 x19: ffff0000f18896c0 x18: 1fffe00033e7277e
x17: 0000000000000000 x16: ffff800011b8ee98 x15: 0000000000000000
x14: 0000000000000001 x13: 1fffe00033e727a3 x12: 0000000000000000
x11: ff00800008195f70 x10: 0000000000000000 x9 : c654642aee6e2800
x8 : c654642aee6e2800 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff800021656938 x4 : ffff800015464e60 x3 : ffff800008540378
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 ext4_xattr_inode_update_ref+0x454/0x498 fs/ext4/xattr.c:1004
 ext4_xattr_inode_dec_ref fs/ext4/xattr.c:1029 [inline]
 ext4_xattr_set_entry+0x934/0x15f4 fs/ext4/xattr.c:1673
 ext4_xattr_ibody_set+0x208/0x604 fs/ext4/xattr.c:2217
 ext4_xattr_move_to_block fs/ext4/xattr.c:2620 [inline]
 ext4_xattr_make_inode_space fs/ext4/xattr.c:2688 [inline]
 ext4_expand_extra_isize_ea+0xeec/0x1818 fs/ext4/xattr.c:2776
 __ext4_expand_extra_isize+0x2a0/0x364 fs/ext4/inode.c:6003
 ext4_try_to_expand_extra_isize fs/ext4/inode.c:6046 [inline]
 __ext4_mark_inode_dirty+0x3d4/0x7b4 fs/ext4/inode.c:6124
 ext4_evict_inode+0xb50/0x1264 fs/ext4/inode.c:281
 evict+0x3d8/0x824 fs/inode.c:705
 iput_final fs/inode.c:1834 [inline]
 iput+0x728/0x7e8 fs/inode.c:1860
 ext4_process_orphan+0x24c/0x2c0 fs/ext4/orphan.c:358
 ext4_orphan_cleanup+0x964/0x1090 fs/ext4/orphan.c:472
 __ext4_fill_super fs/ext4/super.c:5574 [inline]
 ext4_fill_super+0x5af8/0x63bc fs/ext4/super.c:5693
 get_tree_bdev+0x35c/0x54c fs/super.c:1366
 ext4_get_tree+0x28/0x38 fs/ext4/super.c:5723
 vfs_get_tree+0x90/0x278 fs/super.c:1573
 do_new_mount+0x228/0x804 fs/namespace.c:3078
 path_mount+0x5ac/0xe6c fs/namespace.c:3408
 do_mount fs/namespace.c:3421 [inline]
 __do_sys_mount fs/namespace.c:3629 [inline]
 __se_sys_mount fs/namespace.c:3606 [inline]
 __arm64_sys_mount+0x4a0/0x5a0 fs/namespace.c:3606
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 4518
hardirqs last  enabled at (4517): [<ffff80000831357c>] __up_console_sem+0xb4/0xfc kernel/printk/printk.c:261
hardirqs last disabled at (4518): [<ffff800011b8b0d4>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (4400): [<ffff8000081ae3b4>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (4400): [<ffff8000081ae3b4>] handle_softirqs+0xb1c/0xc90 kernel/softirq.c:624
softirqs last disabled at (4235): [<ffff800008020e6c>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
EXT4-fs (loop0): 1 orphan inode deleted
EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.

final repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 512
EXT4-fs (loop0): orphan cleanup on readonly fs
------------[ cut here ]------------
WARNING: CPU: 0 PID: 4519 at fs/ext4/xattr.c:1865 ext4_xattr_block_set+0x20bc/0x28b4 fs/ext4/xattr.c:1865
Modules linked in:
CPU: 0 PID: 4519 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ext4_xattr_block_set+0x20bc/0x28b4 fs/ext4/xattr.c:1865
lr : ext4_xattr_block_set+0x20bc/0x28b4 fs/ext4/xattr.c:1865
sp : ffff800021656f40
x29: ffff8000216570d0 x28: ffff0000d52d9400 x27: ffff0000d6a14000
x26: ffff800021657220 x25: dfff800000000000 x24: ffff0000d52d9400
x23: 1ffff000042cae46 x22: ffff800021657230 x21: 1ffff000042cae45
x20: ffff800021657228 x19: 0000000000000000 x18: 1fffe00033e7277e
x17: ffff80001537d000 x16: ffff8000082dba2c x15: 0000000000000000
x14: 0000000000000005 x13: 00000000ffffffc3 x12: ffff0000ebd62020
x11: ff00800008e7f040 x10: 0000000000000000 x9 : ffff800008e7f040
x8 : ffff0000d5f53800 x7 : ffff0000ebd62000 x6 : ffff0000ebd62020
x5 : ffff800021657060 x4 : ffff0000d52d9428 x3 : ffff800008e7d044
x2 : 0000000000000028 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 ext4_xattr_block_set+0x20bc/0x28b4 fs/ext4/xattr.c:1865
 ext4_xattr_move_to_block fs/ext4/xattr.c:2613 [inline]
 ext4_xattr_make_inode_space fs/ext4/xattr.c:2688 [inline]
 ext4_expand_extra_isize_ea+0xea4/0x1818 fs/ext4/xattr.c:2776
 __ext4_expand_extra_isize+0x2a0/0x364 fs/ext4/inode.c:6003
 ext4_try_to_expand_extra_isize fs/ext4/inode.c:6046 [inline]
 __ext4_mark_inode_dirty+0x3d4/0x7b4 fs/ext4/inode.c:6124
 ext4_evict_inode+0xb50/0x1264 fs/ext4/inode.c:281
 evict+0x3d8/0x824 fs/inode.c:705
 iput_final fs/inode.c:1834 [inline]
 iput+0x728/0x7e8 fs/inode.c:1860
 ext4_process_orphan+0x24c/0x2c0 fs/ext4/orphan.c:358
 ext4_orphan_cleanup+0x964/0x1090 fs/ext4/orphan.c:472
 __ext4_fill_super fs/ext4/super.c:5574 [inline]
 ext4_fill_super+0x5af8/0x63bc fs/ext4/super.c:5693
 get_tree_bdev+0x35c/0x54c fs/super.c:1366
 ext4_get_tree+0x28/0x38 fs/ext4/super.c:5723
 vfs_get_tree+0x90/0x278 fs/super.c:1573
 do_new_mount+0x228/0x804 fs/namespace.c:3078
 path_mount+0x5ac/0xe6c fs/namespace.c:3408
 do_mount fs/namespace.c:3421 [inline]
 __do_sys_mount fs/namespace.c:3629 [inline]
 __se_sys_mount fs/namespace.c:3606 [inline]
 __arm64_sys_mount+0x4a0/0x5a0 fs/namespace.c:3606
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 4232
hardirqs last  enabled at (4231): [<ffff800008a9c328>] lookup_bh_lru fs/buffer.c:1291 [inline]
hardirqs last  enabled at (4231): [<ffff800008a9c328>] __find_get_block+0x1c4/0xde4 fs/buffer.c:1303
hardirqs last disabled at (4232): [<ffff800011b8b0d4>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (1342): [<ffff800008031254>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (1340): [<ffff800008031220>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
EA inode 11 i_nlink=2
WARNING: CPU: 0 PID: 4519 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x454/0x498 fs/ext4/xattr.c:1004
Modules linked in:
CPU: 0 PID: 4519 Comm: syz.0.17 Tainted: G        W          syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ext4_xattr_inode_update_ref+0x454/0x498 fs/ext4/xattr.c:1004
lr : ext4_xattr_inode_update_ref+0x454/0x498 fs/ext4/xattr.c:1004
sp : ffff800021656ea0
x29: ffff800021656f50 x28: 0000000000000000 x27: 1fffe0001e311317
x26: ffff0000f1889700 x25: dfff800000000000 x24: ffff800021656ec0
x23: ffff7000042cadd8 x22: ffff800017d5e000 x21: 0000000000000002
x20: 0000000000000001 x19: ffff0000f18896c0 x18: 1fffe00033e7277e
x17: 0000000000000000 x16: ffff800011b8ee98 x15: 0000000000000000
x14: 0000000000000001 x13: 1fffe00033e727a3 x12: 0000000000000000
x11: ff00800008195f70 x10: 0000000000000000 x9 : c654642aee6e2800
x8 : c654642aee6e2800 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff800021656938 x4 : ffff800015464e60 x3 : ffff800008540378
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 ext4_xattr_inode_update_ref+0x454/0x498 fs/ext4/xattr.c:1004
 ext4_xattr_inode_dec_ref fs/ext4/xattr.c:1029 [inline]
 ext4_xattr_set_entry+0x934/0x15f4 fs/ext4/xattr.c:1673
 ext4_xattr_ibody_set+0x208/0x604 fs/ext4/xattr.c:2217
 ext4_xattr_move_to_block fs/ext4/xattr.c:2620 [inline]
 ext4_xattr_make_inode_space fs/ext4/xattr.c:2688 [inline]
 ext4_expand_extra_isize_ea+0xeec/0x1818 fs/ext4/xattr.c:2776
 __ext4_expand_extra_isize+0x2a0/0x364 fs/ext4/inode.c:6003
 ext4_try_to_expand_extra_isize fs/ext4/inode.c:6046 [inline]
 __ext4_mark_inode_dirty+0x3d4/0x7b4 fs/ext4/inode.c:6124
 ext4_evict_inode+0xb50/0x1264 fs/ext4/inode.c:281
 evict+0x3d8/0x824 fs/inode.c:705
 iput_final fs/inode.c:1834 [inline]
 iput+0x728/0x7e8 fs/inode.c:1860
 ext4_process_orphan+0x24c/0x2c0 fs/ext4/orphan.c:358
 ext4_orphan_cleanup+0x964/0x1090 fs/ext4/orphan.c:472
 __ext4_fill_super fs/ext4/super.c:5574 [inline]
 ext4_fill_super+0x5af8/0x63bc fs/ext4/super.c:5693
 get_tree_bdev+0x35c/0x54c fs/super.c:1366
 ext4_get_tree+0x28/0x38 fs/ext4/super.c:5723
 vfs_get_tree+0x90/0x278 fs/super.c:1573
 do_new_mount+0x228/0x804 fs/namespace.c:3078
 path_mount+0x5ac/0xe6c fs/namespace.c:3408
 do_mount fs/namespace.c:3421 [inline]
 __do_sys_mount fs/namespace.c:3629 [inline]
 __se_sys_mount fs/namespace.c:3606 [inline]
 __arm64_sys_mount+0x4a0/0x5a0 fs/namespace.c:3606
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 4518
hardirqs last  enabled at (4517): [<ffff80000831357c>] __up_console_sem+0xb4/0xfc kernel/printk/printk.c:261
hardirqs last disabled at (4518): [<ffff800011b8b0d4>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (4400): [<ffff8000081ae3b4>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (4400): [<ffff8000081ae3b4>] handle_softirqs+0xb1c/0xc90 kernel/softirq.c:624
softirqs last disabled at (4235): [<ffff800008020e6c>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
EXT4-fs (loop0): 1 orphan inode deleted
EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.