Extracting prog: 2m18.263483738s
Minimizing prog: 87.02µs
Simplifying prog options: 0s
Extracting C: 33.333109945s
Simplifying C: 9m53.555420457s


extracting reproducer from 24 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@acl}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}]}, 0x0, 0x4a3, &(0x7f00000004c0)="$eJzs28trXNUfAPDvvXn2mfz6q4/WqtUiBMWkSat24UZREKko6KIuYzItodNGmgj2gY0irgQp6Fpciv4F4kYEUVeCK8GVKykUzaatq5E7c2+SmWTSJplkaufzgUnOmXtm7vnOuefec8+ZCaBjHcz+JBE7I+L3iBioZesKVCq1cjfmL03cnL80kUSl8vpfSbXc9flLE0XR4nU78sxQGpF+mOQ7qTdz/sLp8XK5dC7Pj8ye6cuT46dKp0pnx44dO3pk9Jmnx55qSZxZXNf3vzd9YN9Lb155ZeLElbd++jqr7858+9I41ui3kSYbDmaB/12patz22Dp3dqfatSSddLexIqxJV0RkzdVT7f8D0RWLjTcQL37Q1soBmyq7NvU13zxXAe5iSbS7BkB7FBf67fNdE9k98PL74IHNHH603bXnajdAWdw38kdtS3ekeZmehvvbVjoYESfm/vk8e8TG5iEAAG7LxxOfHe+NiIs3v3o5G3ssjvbS7nur//+o/t2djwQHI+J/EbEnIv4fEXsj4p6IyMreFxH3b7A+y8c/6dUNvuWqsvHfs/naVv34rxj9xWBXnttVjb8nOTlVLh3OP5Oh6OnL8qOr7OO7F379pNm2peO/7JHtvxgL5vW42t0wQTc5PjteHZS2wLX3I/Z3J8ny+JOFlYAkIvZFxP61vfXuIjH1+JcHmhW6dfyraME6U+WLLLy5rP3noiH+QlJbn3x7ZOb8hSenzjSuT470R7l0eKQ4Kpb7+ZePXmu2/1r8/Xlu5fi3bTzMpq6Vav+XtP+SrQt9YHG9dqa1+1/n8Z/2Jm9U15l78+feHZ+dPTca0Zscr+brnh9bfG2RL8pnx//QoZX7/578NVn7PxAR2UH8YEQ8FBEP53V/JCIejYhDq8T44/O3jj/SdRz/LZDFP7ni+W/h+B9M6tp/7Ymu0z9802z/t9f+R6upofyZ6vmvQdKQX6k63RF9jRXc6OcHAAAA/wVp9TvwSTq8kE7T4eHad/j3xva0PD0z+8TJ6XfOTta+Kz8YPWkx0zWQz4eWp8ql0WQuf8fa/OhYPldczJceyeeNP+3aVs0PT0yXJ9scO3S6HU36f+bPrnbXDthk9ctLxQLwWG9bKgNsscZ19LQ+e/nVcDKAu5Xfa0PnukX/T7eqHsDWc/2HzrVS/7/ckLcWAHcn13/oXPo/dKj0+xWf/nbLKwK0g+s/dKSN/K5/ExP9d0Y12pPY6kaJNRWOIpG2/YNqVaI/7ohqrD9xMe/NrXznNp+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWuTfAAAA//+W89zK")

program crashed: WARNING in ext4_xattr_inode_update_ref
single: successfully extracted reproducer
found reproducer with 1 syscalls
minimizing guilty program
extracting C reproducer
testing compiled C program (duration=45.253224988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
simplifying C reproducer
testing compiled C program (duration=45.253224988s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing compiled C program (duration=45.253224988s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing compiled C program (duration=45.253224988s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing compiled C program (duration=45.253224988s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing compiled C program (duration=45.253224988s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing compiled C program (duration=45.253224988s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing compiled C program (duration=45.253224988s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing program (duration=45.253224988s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@acl}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}]}, 0x0, 0x4a3, &(0x7f00000004c0)="$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")

program crashed: WARNING in ext4_xattr_inode_update_ref
validation run: crashed=true
testing program (duration=45.253224988s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@acl}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}]}, 0x0, 0x4a3, &(0x7f00000004c0)="$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")

program crashed: WARNING in ext4_xattr_inode_update_ref
validation run: crashed=true
testing program (duration=45.253224988s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@acl}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}]}, 0x0, 0x4a3, &(0x7f00000004c0)="$eJzs28trXNUfAPDvvXn2mfz6q4/WqtUiBMWkSat24UZREKko6KIuYzItodNGmgj2gY0irgQp6Fpciv4F4kYEUVeCK8GVKykUzaatq5E7c2+SmWTSJplkaufzgUnOmXtm7vnOuefec8+ZCaBjHcz+JBE7I+L3iBioZesKVCq1cjfmL03cnL80kUSl8vpfSbXc9flLE0XR4nU78sxQGpF+mOQ7qTdz/sLp8XK5dC7Pj8ye6cuT46dKp0pnx44dO3pk9Jmnx55qSZxZXNf3vzd9YN9Lb155ZeLElbd++jqr7858+9I41ui3kSYbDmaB/12patz22Dp3dqfatSSddLexIqxJV0RkzdVT7f8D0RWLjTcQL37Q1soBmyq7NvU13zxXAe5iSbS7BkB7FBf67fNdE9k98PL74IHNHH603bXnajdAWdw38kdtS3ekeZmehvvbVjoYESfm/vk8e8TG5iEAAG7LxxOfHe+NiIs3v3o5G3ssjvbS7nur//+o/t2djwQHI+J/EbEnIv4fEXsj4p6IyMreFxH3b7A+y8c/6dUNvuWqsvHfs/naVv34rxj9xWBXnttVjb8nOTlVLh3OP5Oh6OnL8qOr7OO7F379pNm2peO/7JHtvxgL5vW42t0wQTc5PjteHZS2wLX3I/Z3J8ny+JOFlYAkIvZFxP61vfXuIjH1+JcHmhW6dfyraME6U+WLLLy5rP3noiH+QlJbn3x7ZOb8hSenzjSuT470R7l0eKQ4Kpb7+ZePXmu2/1r8/Xlu5fi3bTzMpq6Vav+XtP+SrQt9YHG9dqa1+1/n8Z/2Jm9U15l78+feHZ+dPTca0Zscr+brnh9bfG2RL8pnx//QoZX7/578NVn7PxAR2UH8YEQ8FBEP53V/JCIejYhDq8T44/O3jj/SdRz/LZDFP7ni+W/h+B9M6tp/7Ymu0z9802z/t9f+R6upofyZ6vmvQdKQX6k63RF9jRXc6OcHAAAA/wVp9TvwSTq8kE7T4eHad/j3xva0PD0z+8TJ6XfOTta+Kz8YPWkx0zWQz4eWp8ql0WQuf8fa/OhYPldczJceyeeNP+3aVs0PT0yXJ9scO3S6HU36f+bPrnbXDthk9ctLxQLwWG9bKgNsscZ19LQ+e/nVcDKAu5Xfa0PnukX/T7eqHsDWc/2HzrVS/7/ckLcWAHcn13/oXPo/dKj0+xWf/nbLKwK0g+s/dKSN/K5/ExP9d0Y12pPY6kaJNRWOIpG2/YNqVaI/7ohqrD9xMe/NrXznNp+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWuTfAAAA//+W89zK")

program crashed: WARNING in ext4_xattr_inode_update_ref
validation run: crashed=true
reproducing took 17m21.651006896s
repro crashed as (corrupted=false):
syz.0.17[5927]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
loop0: detected capacity change from 0 to 512
EXT4-fs: Ignoring removed nobh option
------------[ cut here ]------------
EA inode 11 i_nlink=1026
WARNING: CPU: 1 PID: 5927 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x53c/0x590 fs/ext4/xattr.c:1057
Modules linked in:
CPU: 1 PID: 5927 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 fs/ext4/xattr.c:1057
Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 85 ef 98 ff 49 8b 37 48 c7 c7 a0 d4 de 8a 89 da e8 14 8a 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 2e ee 3d 08
RSP: 0018:ffffc900034671a0 EFLAGS: 00010246
RAX: 925e247c7d8b3000 RBX: 0000000000000402 RCX: ffff88802bef9e00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
RBP: ffffc90003467298 R08: ffff8880b8f28c13 R09: 1ffff110171e5182
R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000
R13: ffff888078eb36a8 R14: ffff888078eb34b0 R15: ffff888078eb3500
FS:  0000555575d5d500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000562f3ac39001 CR3: 000000001c3d7000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 ext4_xattr_inode_dec_ref fs/ext4/xattr.c:1082 [inline]
 ext4_xattr_set_entry+0xcda/0x1e90 fs/ext4/xattr.c:1724
 ext4_xattr_ibody_set+0x254/0x6a0 fs/ext4/xattr.c:2268
 ext4_xattr_move_to_block fs/ext4/xattr.c:2671 [inline]
 ext4_xattr_make_inode_space fs/ext4/xattr.c:2739 [inline]
 ext4_expand_extra_isize_ea+0x1398/0x1e80 fs/ext4/xattr.c:2827
 __ext4_expand_extra_isize+0x306/0x400 fs/ext4/inode.c:5971
 ext4_try_to_expand_extra_isize fs/ext4/inode.c:6014 [inline]
 __ext4_mark_inode_dirty+0x45d/0x6e0 fs/ext4/inode.c:6092
 ext4_evict_inode+0x7f3/0xea0 fs/ext4/inode.c:252
 evict+0x4ca/0x8d0 fs/inode.c:705
 ext4_orphan_cleanup+0xbec/0x1420 fs/ext4/orphan.c:472
 __ext4_fill_super fs/ext4/super.c:5617 [inline]
 ext4_fill_super+0x5ed3/0x6790 fs/ext4/super.c:5740
 get_tree_bdev+0x3f3/0x520 fs/super.c:1591
 vfs_get_tree+0x8c/0x280 fs/super.c:1764
 do_new_mount+0x24b/0xa40 fs/namespace.c:3386
 do_mount fs/namespace.c:3726 [inline]
 __do_sys_mount fs/namespace.c:3935 [inline]
 __se_sys_mount+0x2e7/0x3d0 fs/namespace.c:3912
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x55/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fe7d139c14a
Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcfb5bf248 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffcfb5bf2d0 RCX: 00007fe7d139c14a
RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007ffcfb5bf290
RBP: 0000200000000180 R08: 00007ffcfb5bf2d0 R09: 0000000000800718
R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140
R13: 00007ffcfb5bf290 R14: 00000000000004a3 R15: 00002000000003c0
 </TASK>

final repro crashed as (corrupted=false):
syz.0.17[5927]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
loop0: detected capacity change from 0 to 512
EXT4-fs: Ignoring removed nobh option
------------[ cut here ]------------
EA inode 11 i_nlink=1026
WARNING: CPU: 1 PID: 5927 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x53c/0x590 fs/ext4/xattr.c:1057
Modules linked in:
CPU: 1 PID: 5927 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 fs/ext4/xattr.c:1057
Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 85 ef 98 ff 49 8b 37 48 c7 c7 a0 d4 de 8a 89 da e8 14 8a 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 2e ee 3d 08
RSP: 0018:ffffc900034671a0 EFLAGS: 00010246
RAX: 925e247c7d8b3000 RBX: 0000000000000402 RCX: ffff88802bef9e00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
RBP: ffffc90003467298 R08: ffff8880b8f28c13 R09: 1ffff110171e5182
R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000
R13: ffff888078eb36a8 R14: ffff888078eb34b0 R15: ffff888078eb3500
FS:  0000555575d5d500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000562f3ac39001 CR3: 000000001c3d7000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 ext4_xattr_inode_dec_ref fs/ext4/xattr.c:1082 [inline]
 ext4_xattr_set_entry+0xcda/0x1e90 fs/ext4/xattr.c:1724
 ext4_xattr_ibody_set+0x254/0x6a0 fs/ext4/xattr.c:2268
 ext4_xattr_move_to_block fs/ext4/xattr.c:2671 [inline]
 ext4_xattr_make_inode_space fs/ext4/xattr.c:2739 [inline]
 ext4_expand_extra_isize_ea+0x1398/0x1e80 fs/ext4/xattr.c:2827
 __ext4_expand_extra_isize+0x306/0x400 fs/ext4/inode.c:5971
 ext4_try_to_expand_extra_isize fs/ext4/inode.c:6014 [inline]
 __ext4_mark_inode_dirty+0x45d/0x6e0 fs/ext4/inode.c:6092
 ext4_evict_inode+0x7f3/0xea0 fs/ext4/inode.c:252
 evict+0x4ca/0x8d0 fs/inode.c:705
 ext4_orphan_cleanup+0xbec/0x1420 fs/ext4/orphan.c:472
 __ext4_fill_super fs/ext4/super.c:5617 [inline]
 ext4_fill_super+0x5ed3/0x6790 fs/ext4/super.c:5740
 get_tree_bdev+0x3f3/0x520 fs/super.c:1591
 vfs_get_tree+0x8c/0x280 fs/super.c:1764
 do_new_mount+0x24b/0xa40 fs/namespace.c:3386
 do_mount fs/namespace.c:3726 [inline]
 __do_sys_mount fs/namespace.c:3935 [inline]
 __se_sys_mount+0x2e7/0x3d0 fs/namespace.c:3912
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x55/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fe7d139c14a
Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcfb5bf248 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffcfb5bf2d0 RCX: 00007fe7d139c14a
RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007ffcfb5bf290
RBP: 0000200000000180 R08: 00007ffcfb5bf2d0 R09: 0000000000800718
R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140
R13: 00007ffcfb5bf290 R14: 00000000000004a3 R15: 00002000000003c0
 </TASK>