WARNING: CPU: 1 PID: 4649 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x474/0x4b8 fs/ext4/xattr.c:1004
Modules linked in:
CPU: 1 PID: 4649 Comm: syz.1.60 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ext4_xattr_inode_update_ref+0x474/0x4b8 fs/ext4/xattr.c:1004
lr : ext4_xattr_inode_update_ref+0x474/0x4b8 fs/ext4/xattr.c:1004
sp : ffff800020856f60
x29: ffff800020857000 x28: 0000000000000000 x27: dfff800000000000
x26: ffff800020856f80 x25: ffff70000410adf0 x24: 0000000000000000
x23: ffff800017bd9000 x22: ffff0000e06de740 x21: 0000000000000002
x20: 0000000000000001 x19: ffff0000e06de700 x18: ffff800011b8bf60
x17: 1fffe00033eac97e x16: ffff8000082d9364 x15: 0000000040000002
x14: 0000000000000001 x13: 1fffe00033eaf030 x12: 0000000000ff0100
x11: ff0080000a8d9ce4 x10: 0000000000000003 x9 : 48cb44a5d31aa100
x8 : 48cb44a5d31aa100 x7 : ffff80000825796c x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000006 x1 : ffff800011b8da80 x0 : ffff80018a3ff000
Call trace:
 ext4_xattr_inode_update_ref+0x474/0x4b8 fs/ext4/xattr.c:1004
 ext4_xattr_inode_dec_ref fs/ext4/xattr.c:1029 [inline]
 ext4_xattr_inode_dec_ref_all+0x8d4/0xd8c fs/ext4/xattr.c:1175
 ext4_xattr_delete_inode+0x888/0xa18 fs/ext4/xattr.c:2896
 ext4_evict_inode+0xcdc/0x1278 fs/ext4/inode.c:296
 evict+0x3e0/0x828 fs/inode.c:705
 iput_final fs/inode.c:1834 [inline]
 iput+0x754/0x7e4 fs/inode.c:1860
 ext4_process_orphan+0x240/0x2b4 fs/ext4/orphan.c:358
 ext4_orphan_cleanup+0x920/0x1060 fs/ext4/orphan.c:472
 __ext4_fill_super fs/ext4/super.c:5556 [inline]
 ext4_fill_super+0x6188/0x660c fs/ext4/super.c:5687
 get_tree_bdev+0x358/0x544 fs/super.c:1366
 ext4_get_tree+0x28/0x38 fs/ext4/super.c:5717
 vfs_get_tree+0x90/0x274 fs/super.c:1573
 do_new_mount+0x228/0x810 fs/namespace.c:3078
 path_mount+0x5bc/0xe80 fs/namespace.c:3408
 do_mount fs/namespace.c:3421 [inline]
 __do_sys_mount fs/namespace.c:3629 [inline]
 __se_sys_mount fs/namespace.c:3606 [inline]
 __arm64_sys_mount+0x49c/0x59c fs/namespace.c:3606
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 3772
hardirqs last  enabled at (3771): [<ffff800008257a00>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1374 [inline]
hardirqs last  enabled at (3771): [<ffff800008257a00>] finish_lock_switch+0xb0/0x1c4 kernel/sched/core.c:5004
hardirqs last disabled at (3772): [<ffff800011a2163c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (3758): [<ffff8000081ac37c>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (3758): [<ffff8000081ac37c>] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624
softirqs last disabled at (3695): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
EXT4-fs (loop1): 1 orphan inode deleted
EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.