loop6: detected capacity change from 0 to 512 EXT4-fs: Ignoring removed nobh option EXT4-fs (loop6): Test dummy encryption mode enabled ------------[ cut here ]------------ EA inode 11 i_nlink=1026 WARNING: CPU: 1 PID: 8528 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x474/0x4b8 fs/ext4/xattr.c:1004 Modules linked in: CPU: 1 PID: 8528 Comm: syz.6.1361 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : ext4_xattr_inode_update_ref+0x474/0x4b8 fs/ext4/xattr.c:1004 lr : ext4_xattr_inode_update_ref+0x474/0x4b8 fs/ext4/xattr.c:1004 sp : ffff800021f36f60 x29: ffff800021f37000 x28: 0000000000000000 x27: dfff800000000000 x26: ffff800021f36f80 x25: ffff7000043e6df0 x24: 0000000000000000 x23: ffff800017beb000 x22: ffff0000f69fd330 x21: 0000000000000402 x20: 0000000000000001 x19: ffff0000f69fd2f0 x18: ffff800011b9bf60 x17: 0000000000000000 x16: ffff8000082d92bc x15: 0000000000000002 x14: 0000000000000001 x13: 1fffe00033eaa5a3 x12: 0000000000080000 x11: 000000000002594e x10: ffff80002a784000 x9 : b231ecc06d76d800 x8 : b231ecc06d76d800 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800021f369f8 x4 : ffff800015304cc0 x3 : ffff8000085388c8 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: ext4_xattr_inode_update_ref+0x474/0x4b8 fs/ext4/xattr.c:1004 ext4_xattr_inode_dec_ref fs/ext4/xattr.c:1029 [inline] ext4_xattr_inode_dec_ref_all+0x8d4/0xd8c fs/ext4/xattr.c:1175 ext4_xattr_delete_inode+0x888/0xa18 fs/ext4/xattr.c:2896 ext4_evict_inode+0xcdc/0x1278 fs/ext4/inode.c:298 evict+0x3e0/0x828 fs/inode.c:705 iput_final fs/inode.c:1834 [inline] iput+0x754/0x7e4 fs/inode.c:1860 ext4_process_orphan+0x240/0x2b4 fs/ext4/orphan.c:358 ext4_orphan_cleanup+0x920/0x1060 fs/ext4/orphan.c:472 __ext4_fill_super fs/ext4/super.c:5574 [inline] ext4_fill_super+0x594c/0x61b0 fs/ext4/super.c:5693 get_tree_bdev+0x358/0x544 fs/super.c:1366 ext4_get_tree+0x28/0x38 fs/ext4/super.c:5723 vfs_get_tree+0x90/0x274 fs/super.c:1573 do_new_mount+0x228/0x810 fs/namespace.c:3078 path_mount+0x5bc/0xe80 fs/namespace.c:3408 do_mount fs/namespace.c:3421 [inline] __do_sys_mount fs/namespace.c:3629 [inline] __se_sys_mount fs/namespace.c:3606 [inline] __arm64_sys_mount+0x49c/0x59c fs/namespace.c:3606 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 2808 hardirqs last enabled at (2807): [] __up_console_sem+0xb4/0xfc kernel/printk/printk.c:261 hardirqs last disabled at (2808): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (2164): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (2164): [] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624 softirqs last disabled at (1851): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- EXT4-fs (loop6): 1 orphan inode deleted EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.1361: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0