EXT4-fs error (device loop4): ext4_map_blocks:635: inode #11: block 530: comm syz.4.19: lblock 4 mapped to illegal pblock 530 (length 1)
EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
------------[ cut here ]------------
EA inode 11 i_nlink=2
WARNING: CPU: 0 PID: 4479 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x474/0x4b8 fs/ext4/xattr.c:1004
Modules linked in:
CPU: 0 PID: 4479 Comm: syz.4.19 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ext4_xattr_inode_update_ref+0x474/0x4b8 fs/ext4/xattr.c:1004
lr : ext4_xattr_inode_update_ref+0x474/0x4b8 fs/ext4/xattr.c:1004
sp : ffff800021ae6f60
x29: ffff800021ae7000 x28: 0000000000000000 x27: dfff800000000000
x26: ffff800021ae6f80 x25: ffff70000435cdf0 x24: 0000000000000000
x23: ffff800017bd9000 x22: ffff0000f5c73f20 x21: 0000000000000002
x20: 0000000000000001 x19: ffff0000f5c73ee0 x18: ffff800011b8bf60
x17: 0000000000000000 x16: ffff8000082d9364 x15: 0000000000000002
x14: 0000000000000001 x13: 1fffe00033ea87a3 x12: 0000000000080000
x11: 0000000000049203 x10: ffff800027b89000 x9 : b8a0d67c64c98a00
x8 : b8a0d67c64c98a00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff800021ae69f8 x4 : ffff8000152f4cc0 x3 : ffff80000853856c
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 ext4_xattr_inode_update_ref+0x474/0x4b8 fs/ext4/xattr.c:1004
 ext4_xattr_inode_dec_ref fs/ext4/xattr.c:1029 [inline]
 ext4_xattr_inode_dec_ref_all+0x8d4/0xd8c fs/ext4/xattr.c:1175
 ext4_xattr_delete_inode+0x888/0xa18 fs/ext4/xattr.c:2896
 ext4_evict_inode+0xcdc/0x1278 fs/ext4/inode.c:296
 evict+0x3e0/0x828 fs/inode.c:705
 iput_final fs/inode.c:1834 [inline]
 iput+0x754/0x7e4 fs/inode.c:1860
 ext4_process_orphan+0x240/0x2b4 fs/ext4/orphan.c:358
 ext4_orphan_cleanup+0x920/0x1060 fs/ext4/orphan.c:472
 __ext4_fill_super fs/ext4/super.c:5556 [inline]
 ext4_fill_super+0x6188/0x660c fs/ext4/super.c:5687
 get_tree_bdev+0x358/0x544 fs/super.c:1366
 ext4_get_tree+0x28/0x38 fs/ext4/super.c:5717
 vfs_get_tree+0x90/0x274 fs/super.c:1573
 do_new_mount+0x228/0x810 fs/namespace.c:3078
 path_mount+0x5bc/0xe80 fs/namespace.c:3408
 do_mount fs/namespace.c:3421 [inline]
 __do_sys_mount fs/namespace.c:3629 [inline]
 __se_sys_mount fs/namespace.c:3606 [inline]
 __arm64_sys_mount+0x49c/0x59c fs/namespace.c:3606
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 3664
hardirqs last  enabled at (3663): [<ffff80000830fb6c>] __up_console_sem+0xb4/0xfc kernel/printk/printk.c:261
hardirqs last disabled at (3664): [<ffff800011a2163c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (3260): [<ffff8000081ac37c>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (3260): [<ffff8000081ac37c>] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624
softirqs last disabled at (3241): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
EXT4-fs (loop4): 1 orphan inode deleted
EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.