Extracting prog: 2m11.558475567s Minimizing prog: 133.62µs Simplifying prog options: 0s Extracting C: 30.976028315s Simplifying C: 7m50.984085159s 1 programs, timeouts [30s 6m0s] extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa04710, &(0x7f00000002c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@errors_continue}, {@usrjquota}]}, 0x1, 0x43a, &(0x7f00000008c0)="$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") program crashed: WARNING in ext4_expand_extra_isize_ea single: successfully extracted reproducer found reproducer with 1 syscalls minimizing guilty program extracting C reproducer testing compiled C program (duration=42.062790529s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: WARNING in ext4_expand_extra_isize_ea simplifying C reproducer testing compiled C program (duration=42.062790529s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: WARNING in ext4_expand_extra_isize_ea testing compiled C program (duration=42.062790529s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: WARNING in ext4_expand_extra_isize_ea testing compiled C program (duration=42.062790529s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: WARNING in ext4_expand_extra_isize_ea testing compiled C program (duration=42.062790529s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: WARNING in ext4_expand_extra_isize_ea testing compiled C program (duration=42.062790529s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: WARNING in ext4_expand_extra_isize_ea testing compiled C program (duration=42.062790529s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: WARNING in ext4_expand_extra_isize_ea testing compiled C program (duration=42.062790529s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 program crashed: WARNING in ext4_expand_extra_isize_ea reproducing took 10m33.518747081s repro crashed as (corrupted=false): loop0: detected capacity change from 0 to 512 EXT4-fs (loop0): Ignoring removed mblk_io_submit option ------------[ cut here ]------------ WARNING: CPU: 1 PID: 4016 at mm/page_alloc.c:5398 __alloc_pages+0x33c/0x674 mm/page_alloc.c:5398 Modules linked in: CPU: 1 PID: 4016 Comm: syz-executor232 Not tainted 5.15.167-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __alloc_pages+0x33c/0x674 mm/page_alloc.c:5398 lr : __alloc_pages+0xc8/0x674 mm/page_alloc.c:5391 sp : ffff80001f966c20 x29: ffff80001f966d10 x28: ffff80001f966c40 x27: dfff800000000000 x26: ffff700003f2cd88 x25: 0000000000000000 x24: ffff80001f966c60 x23: ffff80000876ed48 x22: 0000000000040c40 x21: 0000000000000000 x20: ffff80001f966c80 x19: 000000000000000c x18: ffff80001f9669c0 x17: 0000000000000000 x16: ffff800011ac23e0 x15: 000000000000bd43 x14: 0000000011abdfd8 x13: 0000000038ec8d4f x12: 0000000000000005 x11: 1ffff00003f2cd90 x10: 0000000000000000 x9 : 0000000000000000 x8 : ffff80001f966ca8 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020 x2 : 0000000000000008 x1 : 0000000000000000 x0 : ffff80001f966c80 Call trace: __alloc_pages+0x33c/0x674 mm/page_alloc.c:5398 __alloc_pages_node include/linux/gfp.h:570 [inline] alloc_pages_node include/linux/gfp.h:584 [inline] kmalloc_large_node+0x8c/0x190 mm/slub.c:4421 __kmalloc_node+0x368/0x5b8 mm/slub.c:4437 kmalloc_node include/linux/slab.h:614 [inline] kvmalloc_node+0x14c/0x204 mm/util.c:603 kvmalloc include/linux/mm.h:805 [inline] ext4_xattr_move_to_block fs/ext4/xattr.c:2589 [inline] ext4_xattr_make_inode_space fs/ext4/xattr.c:2697 [inline] ext4_expand_extra_isize_ea+0xb80/0x169c fs/ext4/xattr.c:2789 __ext4_expand_extra_isize+0x290/0x348 fs/ext4/inode.c:5854 ext4_try_to_expand_extra_isize fs/ext4/inode.c:5897 [inline] __ext4_mark_inode_dirty+0x4e8/0x924 fs/ext4/inode.c:5975 ext4_evict_inode+0xb68/0x124c fs/ext4/inode.c:282 evict+0x418/0x894 fs/inode.c:622 iput_final fs/inode.c:1740 [inline] iput+0x744/0x824 fs/inode.c:1766 ext4_process_orphan+0x244/0x2b8 fs/ext4/orphan.c:360 ext4_orphan_cleanup+0x8bc/0x1048 fs/ext4/orphan.c:474 ext4_fill_super+0x8044/0x8768 fs/ext4/super.c:4974 mount_bdev+0x274/0x370 fs/super.c:1398 ext4_mount+0x44/0x58 fs/ext4/super.c:6602 legacy_get_tree+0xd4/0x16c fs/fs_context.c:611 vfs_get_tree+0x90/0x274 fs/super.c:1528 do_new_mount+0x278/0x8fc fs/namespace.c:3005 path_mount+0x594/0x101c fs/namespace.c:3335 do_mount fs/namespace.c:3348 [inline] __do_sys_mount fs/namespace.c:3556 [inline] __se_sys_mount fs/namespace.c:3533 [inline] __arm64_sys_mount+0x510/0x5e0 fs/namespace.c:3533 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 irq event stamp: 16222 hardirqs last enabled at (16221): [] ___slab_alloc+0xc48/0xdbc mm/slub.c:2963 hardirqs last disabled at (16222): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396 softirqs last enabled at (15082): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:31 softirqs last disabled at (15080): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:18 ---[ end trace 919a41333f5bd19b ]--- EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz-executor232: missing EA_INODE flag EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor232: error while reading EA inode 11 err=-117 EXT4-fs (loop0): 1 orphan inode deleted EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mblk_io_submit,errors=continue,usrjquota=,,errors=continue. Quota mode: writeback. final repro crashed as (corrupted=false): loop0: detected capacity change from 0 to 512 EXT4-fs (loop0): Ignoring removed mblk_io_submit option ------------[ cut here ]------------ WARNING: CPU: 1 PID: 4016 at mm/page_alloc.c:5398 __alloc_pages+0x33c/0x674 mm/page_alloc.c:5398 Modules linked in: CPU: 1 PID: 4016 Comm: syz-executor232 Not tainted 5.15.167-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __alloc_pages+0x33c/0x674 mm/page_alloc.c:5398 lr : __alloc_pages+0xc8/0x674 mm/page_alloc.c:5391 sp : ffff80001f966c20 x29: ffff80001f966d10 x28: ffff80001f966c40 x27: dfff800000000000 x26: ffff700003f2cd88 x25: 0000000000000000 x24: ffff80001f966c60 x23: ffff80000876ed48 x22: 0000000000040c40 x21: 0000000000000000 x20: ffff80001f966c80 x19: 000000000000000c x18: ffff80001f9669c0 x17: 0000000000000000 x16: ffff800011ac23e0 x15: 000000000000bd43 x14: 0000000011abdfd8 x13: 0000000038ec8d4f x12: 0000000000000005 x11: 1ffff00003f2cd90 x10: 0000000000000000 x9 : 0000000000000000 x8 : ffff80001f966ca8 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020 x2 : 0000000000000008 x1 : 0000000000000000 x0 : ffff80001f966c80 Call trace: __alloc_pages+0x33c/0x674 mm/page_alloc.c:5398 __alloc_pages_node include/linux/gfp.h:570 [inline] alloc_pages_node include/linux/gfp.h:584 [inline] kmalloc_large_node+0x8c/0x190 mm/slub.c:4421 __kmalloc_node+0x368/0x5b8 mm/slub.c:4437 kmalloc_node include/linux/slab.h:614 [inline] kvmalloc_node+0x14c/0x204 mm/util.c:603 kvmalloc include/linux/mm.h:805 [inline] ext4_xattr_move_to_block fs/ext4/xattr.c:2589 [inline] ext4_xattr_make_inode_space fs/ext4/xattr.c:2697 [inline] ext4_expand_extra_isize_ea+0xb80/0x169c fs/ext4/xattr.c:2789 __ext4_expand_extra_isize+0x290/0x348 fs/ext4/inode.c:5854 ext4_try_to_expand_extra_isize fs/ext4/inode.c:5897 [inline] __ext4_mark_inode_dirty+0x4e8/0x924 fs/ext4/inode.c:5975 ext4_evict_inode+0xb68/0x124c fs/ext4/inode.c:282 evict+0x418/0x894 fs/inode.c:622 iput_final fs/inode.c:1740 [inline] iput+0x744/0x824 fs/inode.c:1766 ext4_process_orphan+0x244/0x2b8 fs/ext4/orphan.c:360 ext4_orphan_cleanup+0x8bc/0x1048 fs/ext4/orphan.c:474 ext4_fill_super+0x8044/0x8768 fs/ext4/super.c:4974 mount_bdev+0x274/0x370 fs/super.c:1398 ext4_mount+0x44/0x58 fs/ext4/super.c:6602 legacy_get_tree+0xd4/0x16c fs/fs_context.c:611 vfs_get_tree+0x90/0x274 fs/super.c:1528 do_new_mount+0x278/0x8fc fs/namespace.c:3005 path_mount+0x594/0x101c fs/namespace.c:3335 do_mount fs/namespace.c:3348 [inline] __do_sys_mount fs/namespace.c:3556 [inline] __se_sys_mount fs/namespace.c:3533 [inline] __arm64_sys_mount+0x510/0x5e0 fs/namespace.c:3533 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 irq event stamp: 16222 hardirqs last enabled at (16221): [] ___slab_alloc+0xc48/0xdbc mm/slub.c:2963 hardirqs last disabled at (16222): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396 softirqs last enabled at (15082): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:31 softirqs last disabled at (15080): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:18 ---[ end trace 919a41333f5bd19b ]--- EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz-executor232: missing EA_INODE flag EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor232: error while reading EA inode 11 err=-117 EXT4-fs (loop0): 1 orphan inode deleted EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mblk_io_submit,errors=continue,usrjquota=,,errors=continue. Quota mode: writeback.