Extracting prog: 2m5.767722569s Minimizing prog: 97.37µs Simplifying prog options: 0s Extracting C: 1m40.4497874s Simplifying C: 5m14.265748276s extracting reproducer from 30 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x20}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") program crashed: WARNING in ext4_xattr_inode_update_ref single: successfully extracted reproducer found reproducer with 1 syscalls minimizing guilty program extracting C reproducer testing compiled C program (duration=43.615096131s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: WARNING in ext4_xattr_inode_update_ref simplifying C reproducer testing compiled C program (duration=43.615096131s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: WARNING in ext4_xattr_inode_update_ref testing compiled C program (duration=43.615096131s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: WARNING in ext4_xattr_inode_update_ref testing compiled C program (duration=43.615096131s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: WARNING in ext4_xattr_inode_update_ref testing compiled C program (duration=43.615096131s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: WARNING in ext4_xattr_inode_update_ref testing compiled C program (duration=43.615096131s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: WARNING in ext4_xattr_inode_update_ref testing compiled C program (duration=43.615096131s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: WARNING in ext4_xattr_inode_update_ref testing compiled C program (duration=43.615096131s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: WARNING in ext4_xattr_inode_update_ref testing program (duration=43.615096131s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x20}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") program crashed: WARNING in ext4_xattr_inode_update_ref validation run: crashed=true testing program (duration=43.615096131s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x20}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLULwJWnSqj14URQ8VBT0UI8x2ZbQbSNNFFuKTUXqRZCCnsWj4F/gTQRRT4JXvXiSQtFeWj1FZnam2WyzqTGbTOx+PrDZ59l5duf7zbw98zy7AXStoexPErEjIn6OiIFGdWmDocbTjWvnJ/+8dn4yiYWF135P8nbXr52fLJuW79teVIbTiPSDpFjJUrNnz52cqNdrZ4r66Nypt0Znz5578p1TEydqJ2qnx48cOXxo7Jmnx5/qSJ5ZXtf3vTezf+9Lb1x+efLY5Te//zKLd0exvDmPThnKEv9jIde67NFOr6xiO5vKSW+FgbAqPRGRba6+/PgfiJ5Y3HgD8eL7lQYHrKvs2rSl/eL5BeAOlkTVEQDVKC/02f1v+digrsemcPW5xg1QlveN4tFY0htp0aav5f62k4Yi4tj8X59lj1incQgAgGYfTX56NJ5Y7Hcs9j/SuCd//jX/u6uYQxmMiP9HxO6IuCsi9kTE3RF523sj4r41xnNr/ye9ssaPXFHW/3u2mNta2v8re38x2FPUdub59yXHp+u1g8X/ZDj6tmT1sRXW8fULP33cbllz/y97ZOsv+4JFHFd6WwbopibmJvJOaQdcvRixr3e5/JObMwFJROyNiH2r++hdZWH6sS/2t2t0+/xX0IF5poXPs/Tms/znoyX/UtI8Pzl9y/zk6Nao1w6OlnvFrX748dKr7da/pvw74Gqt8dy0/VubDCbN87Wzq1/HpV8+bHtP8y/3/7Q/eT2fZ+4vXnt3Ym7uzFhEf3I0ry95fXzxvWW9bJ/t/8MHlj/+dxfvyfK/PyKynfiBiHgwIh4qYn84Ih6JiAMr5P/d8+2XlflHWtH2vxgxtez57+b+37L9V1/oOfntV+3W/8+2/+G8NFy8kp//bmO5cLLTRWuAa/nfAQAAwH9Fmn8HPklHbpbTdGSk8R3+PfG/tD4zO/f48Zm3T081vis/GH1pOdI1UIyH1qfrtbFkvvjExvjoeDFWXI6XHirGjT/p2ZbXRyZn6lMV5w7dbnub4z/zW0/V0QHrbNuyr473b3ggQAVa59HTpdULr4STAdyp/F4butdtjv90o+IANp7rP3Sv5Y7/Cy11cwFwZ3L9h+7l+IculX5TdQRAhVz/oSut5Xf961jYujnCqKawWTdKXogoC+mmiEdhnQpVn5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA64+8AAAD//+F36UM=") program crashed: WARNING in ext4_xattr_inode_update_ref validation run: crashed=true testing program (duration=43.615096131s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x20}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") program crashed: WARNING in ext4_xattr_inode_update_ref validation run: crashed=true reproducing took 12m25.771121308s repro crashed as (corrupted=false): loop0: detected capacity change from 0 to 512 ------------[ cut here ]------------ EA inode 11 ref_count=-1 WARNING: CPU: 1 PID: 4507 at fs/ext4/xattr.c:1016 ext4_xattr_inode_update_ref+0x3dc/0x4ac fs/ext4/xattr.c:1015 Modules linked in: CPU: 1 PID: 4507 Comm: syz.0.17 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : ext4_xattr_inode_update_ref+0x3dc/0x4ac fs/ext4/xattr.c:1015 lr : ext4_xattr_inode_update_ref+0x3dc/0x4ac fs/ext4/xattr.c:1015 sp : ffff8000213b6fe0 x29: ffff8000213b7060 x28: 00000000ffffffff x27: dfff800000000000 x26: 1fffe0001cac581b x25: ffff700004276dfc x24: 00000000ffffffff x23: ffff800017a8b000 x22: ffff0000e562bf20 x21: ffffffffffffffff x20: 0000000000000001 x19: ffff0000e562bee0 x18: ffff800011abbcc0 x17: 0000000000000000 x16: ffff8000082d22d4 x15: 0000000000000000 x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 x11: ff00800008191ca8 x10: 0000000000000000 x9 : 5d2bfc233d26d100 x8 : 5d2bfc233d26d100 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff8000213b6a78 x4 : ffff8000151a4820 x3 : ffff80000852e3f8 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: ext4_xattr_inode_update_ref+0x3dc/0x4ac fs/ext4/xattr.c:1015 ext4_xattr_inode_dec_ref fs/ext4/xattr.c:1044 [inline] ext4_xattr_inode_dec_ref_all+0x8b4/0xd48 fs/ext4/xattr.c:1186 ext4_xattr_delete_inode+0x870/0xa00 fs/ext4/xattr.c:2914 ext4_evict_inode+0xcd0/0x1270 fs/ext4/inode.c:296 evict+0x3c8/0x810 fs/inode.c:705 iput_final fs/inode.c:1834 [inline] iput+0x764/0x7f4 fs/inode.c:1860 ext4_process_orphan+0x240/0x2b4 fs/ext4/orphan.c:360 ext4_orphan_cleanup+0x908/0x104c fs/ext4/orphan.c:474 __ext4_fill_super fs/ext4/super.c:5537 [inline] ext4_fill_super+0x6920/0x6e34 fs/ext4/super.c:5668 get_tree_bdev+0x358/0x544 fs/super.c:1366 ext4_get_tree+0x28/0x38 fs/ext4/super.c:5698 vfs_get_tree+0x90/0x274 fs/super.c:1573 do_new_mount+0x228/0x810 fs/namespace.c:3069 path_mount+0x5b4/0xe78 fs/namespace.c:3399 do_mount fs/namespace.c:3412 [inline] __do_sys_mount fs/namespace.c:3620 [inline] __se_sys_mount fs/namespace.c:3597 [inline] __arm64_sys_mount+0x49c/0x584 fs/namespace.c:3597 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 4326 hardirqs last enabled at (4325): [] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:261 hardirqs last disabled at (4326): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (4182): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (4182): [] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624 softirqs last disabled at (4127): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #15: comm syz.0.17: corrupted inode contents EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #15: comm syz.0.17: corrupted inode contents EXT4-fs error (device loop0): ext4_evict_inode:327: inode #15: comm syz.0.17: mark_inode_dirty error EXT4-fs (loop0): 1 orphan inode deleted EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. final repro crashed as (corrupted=false): loop0: detected capacity change from 0 to 512 ------------[ cut here ]------------ EA inode 11 ref_count=-1 WARNING: CPU: 1 PID: 4507 at fs/ext4/xattr.c:1016 ext4_xattr_inode_update_ref+0x3dc/0x4ac fs/ext4/xattr.c:1015 Modules linked in: CPU: 1 PID: 4507 Comm: syz.0.17 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : ext4_xattr_inode_update_ref+0x3dc/0x4ac fs/ext4/xattr.c:1015 lr : ext4_xattr_inode_update_ref+0x3dc/0x4ac fs/ext4/xattr.c:1015 sp : ffff8000213b6fe0 x29: ffff8000213b7060 x28: 00000000ffffffff x27: dfff800000000000 x26: 1fffe0001cac581b x25: ffff700004276dfc x24: 00000000ffffffff x23: ffff800017a8b000 x22: ffff0000e562bf20 x21: ffffffffffffffff x20: 0000000000000001 x19: ffff0000e562bee0 x18: ffff800011abbcc0 x17: 0000000000000000 x16: ffff8000082d22d4 x15: 0000000000000000 x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 x11: ff00800008191ca8 x10: 0000000000000000 x9 : 5d2bfc233d26d100 x8 : 5d2bfc233d26d100 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff8000213b6a78 x4 : ffff8000151a4820 x3 : ffff80000852e3f8 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: ext4_xattr_inode_update_ref+0x3dc/0x4ac fs/ext4/xattr.c:1015 ext4_xattr_inode_dec_ref fs/ext4/xattr.c:1044 [inline] ext4_xattr_inode_dec_ref_all+0x8b4/0xd48 fs/ext4/xattr.c:1186 ext4_xattr_delete_inode+0x870/0xa00 fs/ext4/xattr.c:2914 ext4_evict_inode+0xcd0/0x1270 fs/ext4/inode.c:296 evict+0x3c8/0x810 fs/inode.c:705 iput_final fs/inode.c:1834 [inline] iput+0x764/0x7f4 fs/inode.c:1860 ext4_process_orphan+0x240/0x2b4 fs/ext4/orphan.c:360 ext4_orphan_cleanup+0x908/0x104c fs/ext4/orphan.c:474 __ext4_fill_super fs/ext4/super.c:5537 [inline] ext4_fill_super+0x6920/0x6e34 fs/ext4/super.c:5668 get_tree_bdev+0x358/0x544 fs/super.c:1366 ext4_get_tree+0x28/0x38 fs/ext4/super.c:5698 vfs_get_tree+0x90/0x274 fs/super.c:1573 do_new_mount+0x228/0x810 fs/namespace.c:3069 path_mount+0x5b4/0xe78 fs/namespace.c:3399 do_mount fs/namespace.c:3412 [inline] __do_sys_mount fs/namespace.c:3620 [inline] __se_sys_mount fs/namespace.c:3597 [inline] __arm64_sys_mount+0x49c/0x584 fs/namespace.c:3597 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 4326 hardirqs last enabled at (4325): [] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:261 hardirqs last disabled at (4326): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (4182): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (4182): [] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624 softirqs last disabled at (4127): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #15: comm syz.0.17: corrupted inode contents EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #15: comm syz.0.17: corrupted inode contents EXT4-fs error (device loop0): ext4_evict_inode:327: inode #15: comm syz.0.17: mark_inode_dirty error EXT4-fs (loop0): 1 orphan inode deleted EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.