Extracting prog: 3m28.367430032s
Minimizing prog: 6m20.895649422s
Simplifying prog options: 0s
Extracting C: 33.027548249s
Simplifying C: 7m9.990131762s


extracting reproducer from 37 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_SIOCGIFINDEX-syz_mount_image$ext4
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@acl}, {@nombcache}]}, 0x2, 0x497, &(0x7f00000010c0)="$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")

program crashed: WARNING in ext4_xattr_inode_update_ref
program crashed: WARNING in ext4_xattr_inode_update_ref
single: successfully extracted reproducer
found reproducer with 6 syscalls
minimizing guilty program
testing program (duration=42.387590299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$MAP_UPDATE_ELEM_TAIL_CALL-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

program did not crash
testing program (duration=42.387590299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$MAP_UPDATE_ELEM_TAIL_CALL-syz_mount_image$ext4
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@acl}, {@nombcache}]}, 0x2, 0x497, &(0x7f00000010c0)="$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")

program crashed: WARNING in ext4_xattr_inode_update_ref
testing program (duration=42.387590299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-syz_mount_image$ext4
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@acl}, {@nombcache}]}, 0x2, 0x497, &(0x7f00000010c0)="$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")

program crashed: WARNING in ext4_xattr_inode_update_ref
testing program (duration=42.387590299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-syz_mount_image$ext4
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@acl}, {@nombcache}]}, 0x2, 0x497, &(0x7f00000010c0)="$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")

program crashed: WARNING in ext4_xattr_inode_update_ref
testing program (duration=42.387590299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_mount_image$ext4
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@acl}, {@nombcache}]}, 0x2, 0x497, &(0x7f00000010c0)="$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")

program crashed: WARNING in ext4_xattr_inode_update_ref
testing program (duration=42.387590299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@acl}, {@nombcache}]}, 0x2, 0x497, &(0x7f00000010c0)="$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")

program crashed: WARNING in ext4_xattr_inode_update_ref
extracting C reproducer
testing compiled C program (duration=42.387590299s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
simplifying C reproducer
testing compiled C program (duration=42.387590299s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing compiled C program (duration=42.387590299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing compiled C program (duration=42.387590299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing compiled C program (duration=42.387590299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing compiled C program (duration=42.387590299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing compiled C program (duration=42.387590299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing compiled C program (duration=42.387590299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing program (duration=42.387590299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@acl}, {@nombcache}]}, 0x2, 0x497, &(0x7f00000010c0)="$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")

program crashed: WARNING in ext4_xattr_inode_update_ref
validation run: crashed=true
testing program (duration=42.387590299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@acl}, {@nombcache}]}, 0x2, 0x497, &(0x7f00000010c0)="$eJzs281rHOUfAPDvTN76nvz6qy+tVaNFCIpJk1btwYuiIFJR0EM9xs22hG4baSLYF2wU8SRIQc/iUfQvEC8iiHoSPAmePEmhaC5tPUVmdqZNtrtp02yytfv5wGafZ+bZmee7M8/MM8+zCaBrDWd/kohtEfF7RAzWs8sLDNffriycq1xdOFdJYnHx9b+SvNzlhXOVsmj5ua1FZiSNSD9Mip0sN3v6zPHJWq16qsiPzZ0YKJKTx6rHqicnDh06eGD8macnnmpLnFlcl/e8N7N390tvXnilcuTCWz99ndV3W7F+aRyr9NtYixXDWeB/L+Ya1z12mzu7U21fkk56O1gRVqUnIrLD1Ze3/8HoiesHbzBe/KCjlQPWVXZvGmi9en4RuIsl0ekaAJ1R3ui3LPRUsmfgG5+DB9ez+9Fxl56rPwBlcV8pXvU1vZEWZfoanm/baTgijsz/83n2irWNQwAA3JKPK58d7o+Is1e/ejnre1zv7aW99+bvf+R/dxQ9waGI+F9E7IyI/0fEroi4JyKysvdFxP1rrM+N/Z/04ho3uaKs//dsMbe1vP9X9v5iqKfIbc/j70uOTteq+4vvZCT6BrL8+Ar7+O6FXz9ptW5p/y97Zfsv+4JFPS72NgzQTU3OTead0ja49H7Ent5m8SfXZgKSiNgdEXtWt+kdZWL68S/3tip08/hX0IZ5psUvsvDms/jnoyH+UlKfn3x7bPb0mSenTzTOT45tilp1/1h5Vtzo518+eq3V/uvxbypyzePfvPYwW7pUrb8vOf6NRYaSpfO1s+3d/22e/2l/8kY+z9xfLHt3cm7u1HhEf3I4zy9bPnH9s2W+LJ+d/yP7mrf/ncVnsvgfiIjsJH4wIh6KiIeLuj8SEY9GxL4VYvzx+ZvHH+ltnP9tkMU/1fT6d+38bzj+q0/0HP/hm1b7v7XjfzBPjRRL8utfg6Qh36w6vREDjRVc6/cHAAAA/wVp/hv4JB29lk7T0dH6b/h3xZa0NjM798TRmXdOTtV/Kz8UfWk50jVYjIfWpmvV8WS+2GJ9fHSiGCsux0sPFOPGn/ZszvOjlZnaVIdjh263tUX7z/zZ0+naAets+fRSOQE80d+RygAbrHEePV2ePf9quBjA3cr/a0P3ukn7TzeqHsDGc/+H7tWs/Z9vyJsLgLuT+z90L+0fulT6fdPF3254RYBOcP+HrrSW/+tfx8SmO6ManUls9EGJVRWOMpF2/IuSKBJni9bczi13+MIEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQJv8GAAD//2Uu29Y=")

program crashed: WARNING in ext4_xattr_inode_update_ref
validation run: crashed=true
testing program (duration=42.387590299s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@acl}, {@nombcache}]}, 0x2, 0x497, &(0x7f00000010c0)="$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")

program crashed: WARNING in ext4_xattr_inode_update_ref
validation run: crashed=true
reproducing took 20m20.261705506s
repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 512
EXT4-fs: Ignoring removed nobh option
------------[ cut here ]------------
EA inode 11 i_nlink=1026
WARNING: CPU: 0 PID: 4486 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x42c/0x470 fs/ext4/xattr.c:1020
Modules linked in:
CPU: 0 PID: 4486 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ext4_xattr_inode_update_ref+0x42c/0x470 fs/ext4/xattr.c:1020
lr : ext4_xattr_inode_update_ref+0x42c/0x470 fs/ext4/xattr.c:1020
sp : ffff800020df6e00
x29: ffff800020df6ea0 x28: 0000000000000000 x27: dfff800000000000
x26: 1fffe0001d372095 x25: ffff7000041bedc4 x24: 0000000000000000
x23: ffff800017a17000 x22: ffff0000e9b902f0 x21: 0000000000000402
x20: 0000000000000001 x19: ffff0000e9b902b0 x18: ffff800011a6bd40
x17: 0000000000000000 x16: ffff8000082d4a88 x15: 0000000000000000
x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100
x11: ff008000081924a8 x10: 0000000000000000 x9 : 01b894d6c7a74a00
x8 : 01b894d6c7a74a00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff800020df6898 x4 : ffff800015134e80 x3 : ffff800008530c5c
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 ext4_xattr_inode_update_ref+0x42c/0x470 fs/ext4/xattr.c:1020
 ext4_xattr_inode_dec_ref fs/ext4/xattr.c:1045 [inline]
 ext4_xattr_set_entry+0x918/0x15ac fs/ext4/xattr.c:1687
 ext4_xattr_ibody_set+0x204/0x600 fs/ext4/xattr.c:2234
 ext4_xattr_move_to_block fs/ext4/xattr.c:2637 [inline]
 ext4_xattr_make_inode_space fs/ext4/xattr.c:2705 [inline]
 ext4_expand_extra_isize_ea+0xd00/0x15cc fs/ext4/xattr.c:2797
 __ext4_expand_extra_isize+0x298/0x358 fs/ext4/inode.c:5979
 ext4_try_to_expand_extra_isize fs/ext4/inode.c:6022 [inline]
 __ext4_mark_inode_dirty+0x3e4/0x790 fs/ext4/inode.c:6100
 ext4_evict_inode+0xb58/0x1270 fs/ext4/inode.c:279
 evict+0x3c8/0x810 fs/inode.c:705
 iput_final fs/inode.c:1834 [inline]
 iput+0x764/0x7f4 fs/inode.c:1860
 ext4_process_orphan+0x240/0x2b4 fs/ext4/orphan.c:358
 ext4_orphan_cleanup+0x908/0x104c fs/ext4/orphan.c:472
 __ext4_fill_super fs/ext4/super.c:5556 [inline]
 ext4_fill_super+0x610c/0x6598 fs/ext4/super.c:5687
 get_tree_bdev+0x358/0x544 fs/super.c:1366
 ext4_get_tree+0x28/0x38 fs/ext4/super.c:5717
 vfs_get_tree+0x90/0x274 fs/super.c:1573
 do_new_mount+0x228/0x810 fs/namespace.c:3078
 path_mount+0x5b4/0xe78 fs/namespace.c:3408
 do_mount fs/namespace.c:3421 [inline]
 __do_sys_mount fs/namespace.c:3629 [inline]
 __se_sys_mount fs/namespace.c:3606 [inline]
 __arm64_sys_mount+0x49c/0x584 fs/namespace.c:3606
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 4952
hardirqs last  enabled at (4951): [<ffff80000830abcc>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:261
hardirqs last disabled at (4952): [<ffff8000119080a8>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (4776): [<ffff8000081aa3e0>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (4776): [<ffff8000081aa3e0>] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624
softirqs last disabled at (4767): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
EXT4-fs (loop0): 1 orphan inode deleted
EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.

final repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 512
EXT4-fs: Ignoring removed nobh option
------------[ cut here ]------------
EA inode 11 i_nlink=1026
WARNING: CPU: 0 PID: 4486 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x42c/0x470 fs/ext4/xattr.c:1020
Modules linked in:
CPU: 0 PID: 4486 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ext4_xattr_inode_update_ref+0x42c/0x470 fs/ext4/xattr.c:1020
lr : ext4_xattr_inode_update_ref+0x42c/0x470 fs/ext4/xattr.c:1020
sp : ffff800020df6e00
x29: ffff800020df6ea0 x28: 0000000000000000 x27: dfff800000000000
x26: 1fffe0001d372095 x25: ffff7000041bedc4 x24: 0000000000000000
x23: ffff800017a17000 x22: ffff0000e9b902f0 x21: 0000000000000402
x20: 0000000000000001 x19: ffff0000e9b902b0 x18: ffff800011a6bd40
x17: 0000000000000000 x16: ffff8000082d4a88 x15: 0000000000000000
x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100
x11: ff008000081924a8 x10: 0000000000000000 x9 : 01b894d6c7a74a00
x8 : 01b894d6c7a74a00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff800020df6898 x4 : ffff800015134e80 x3 : ffff800008530c5c
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 ext4_xattr_inode_update_ref+0x42c/0x470 fs/ext4/xattr.c:1020
 ext4_xattr_inode_dec_ref fs/ext4/xattr.c:1045 [inline]
 ext4_xattr_set_entry+0x918/0x15ac fs/ext4/xattr.c:1687
 ext4_xattr_ibody_set+0x204/0x600 fs/ext4/xattr.c:2234
 ext4_xattr_move_to_block fs/ext4/xattr.c:2637 [inline]
 ext4_xattr_make_inode_space fs/ext4/xattr.c:2705 [inline]
 ext4_expand_extra_isize_ea+0xd00/0x15cc fs/ext4/xattr.c:2797
 __ext4_expand_extra_isize+0x298/0x358 fs/ext4/inode.c:5979
 ext4_try_to_expand_extra_isize fs/ext4/inode.c:6022 [inline]
 __ext4_mark_inode_dirty+0x3e4/0x790 fs/ext4/inode.c:6100
 ext4_evict_inode+0xb58/0x1270 fs/ext4/inode.c:279
 evict+0x3c8/0x810 fs/inode.c:705
 iput_final fs/inode.c:1834 [inline]
 iput+0x764/0x7f4 fs/inode.c:1860
 ext4_process_orphan+0x240/0x2b4 fs/ext4/orphan.c:358
 ext4_orphan_cleanup+0x908/0x104c fs/ext4/orphan.c:472
 __ext4_fill_super fs/ext4/super.c:5556 [inline]
 ext4_fill_super+0x610c/0x6598 fs/ext4/super.c:5687
 get_tree_bdev+0x358/0x544 fs/super.c:1366
 ext4_get_tree+0x28/0x38 fs/ext4/super.c:5717
 vfs_get_tree+0x90/0x274 fs/super.c:1573
 do_new_mount+0x228/0x810 fs/namespace.c:3078
 path_mount+0x5b4/0xe78 fs/namespace.c:3408
 do_mount fs/namespace.c:3421 [inline]
 __do_sys_mount fs/namespace.c:3629 [inline]
 __se_sys_mount fs/namespace.c:3606 [inline]
 __arm64_sys_mount+0x49c/0x584 fs/namespace.c:3606
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 4952
hardirqs last  enabled at (4951): [<ffff80000830abcc>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:261
hardirqs last disabled at (4952): [<ffff8000119080a8>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (4776): [<ffff8000081aa3e0>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (4776): [<ffff8000081aa3e0>] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624
softirqs last disabled at (4767): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
EXT4-fs (loop0): 1 orphan inode deleted
EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.