------------[ cut here ]------------ EA inode 11 i_nlink=2 WARNING: CPU: 0 PID: 8089 at fs/ext4/xattr.c:1051 ext4_xattr_inode_update_ref+0x4a6/0x570 fs/ext4/xattr.c:1051 Modules linked in: CPU: 0 UID: 0 PID: 8089 Comm: syz.3.725 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 RIP: 0010:ext4_xattr_inode_update_ref+0x4a6/0x570 fs/ext4/xattr.c:1051 Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 73 40 44 89 e2 48 c7 c7 a0 00 c8 8b e8 2b 7d f0 fe 90 <0f> 0b 90 90 e9 40 fe ff ff e8 4c d9 31 ff 44 0f b6 3d 2a 44 0a 0e RSP: 0018:ffffc90003377198 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff88805496f558 RCX: ffffc9000be5b000 RDX: 0000000000080000 RSI: ffffffff817a3395 RDI: 0000000000000001 RBP: ffffc90003377258 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 R13: 1ffff9200066ee36 R14: ffff88805496f630 R15: 0000000000000000 FS: 00007fd97ffcc6c0(0000) GS:ffff8881246b6000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffe8 CR3: 00000000748d0000 CR4: 0000000000350ef0 Call Trace: ext4_xattr_inode_dec_ref fs/ext4/xattr.c:1076 [inline] ext4_xattr_set_entry+0x158f/0x1f00 fs/ext4/xattr.c:1714 ext4_xattr_ibody_set+0x3d6/0x5d0 fs/ext4/xattr.c:2263 ext4_xattr_move_to_block fs/ext4/xattr.c:2666 [inline] ext4_xattr_make_inode_space fs/ext4/xattr.c:2734 [inline] ext4_expand_extra_isize_ea+0x1487/0x1ab0 fs/ext4/xattr.c:2822 __ext4_expand_extra_isize+0x346/0x480 fs/ext4/inode.c:6385 ext4_try_to_expand_extra_isize fs/ext4/inode.c:6428 [inline] __ext4_mark_inode_dirty+0x544/0x870 fs/ext4/inode.c:6506 ext4_evict_inode+0x74e/0x18e0 fs/ext4/inode.c:254 evict+0x3e6/0x920 fs/inode.c:810 iput_final fs/inode.c:1897 [inline] iput fs/inode.c:1923 [inline] iput+0x521/0x880 fs/inode.c:1909 ext4_orphan_cleanup+0x731/0x11e0 fs/ext4/orphan.c:474 __ext4_fill_super fs/ext4/super.c:5609 [inline] ext4_fill_super+0x8a38/0xafa0 fs/ext4/super.c:5728 get_tree_bdev_flags+0x38c/0x620 fs/super.c:1692 vfs_get_tree+0x8e/0x340 fs/super.c:1815 do_new_mount fs/namespace.c:3808 [inline] path_mount+0x1513/0x2000 fs/namespace.c:4123 do_mount fs/namespace.c:4136 [inline] __do_sys_mount fs/namespace.c:4347 [inline] __se_sys_mount fs/namespace.c:4324 [inline] __x64_sys_mount+0x28d/0x310 fs/namespace.c:4324 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd97f19034a Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fd97ffcbe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fd97ffcbef0 RCX: 00007fd97f19034a RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fd97ffcbeb0 RBP: 0000200000000180 R08: 00007fd97ffcbef0 R09: 0000000000800700 R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 R13: 00007fd97ffcbeb0 R14: 0000000000000473 R15: 0000200000000680