Extracting prog: 58.887451105s
Minimizing prog: 6m36.472940884s
Simplifying prog options: 0s
Extracting C: 1m37.916978586s
Simplifying C: 8m9.78251634s


extracting reproducer from 67 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-bpf$PROG_LOAD-bpf$BPF_LINK_CREATE_XDP-syz_mount_image$ext4
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0x8], 0x0, 0x0, 0x100000, 0x1}}, 0x40)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4b4, &(0x7f0000000980)="$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")

program crashed: WARNING in ext4_xattr_inode_update_ref
single: successfully extracted reproducer
found reproducer with 5 syscalls
minimizing guilty program
testing program (duration=45.513518988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-bpf$PROG_LOAD-bpf$BPF_LINK_CREATE_XDP
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0x8], 0x0, 0x0, 0x100000, 0x1}}, 0x40)

program did not crash
testing program (duration=45.513518988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-bpf$PROG_LOAD-syz_mount_image$ext4
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4b4, &(0x7f0000000980)="$eJzs28trXNUfAPDvvZNXn8mvv/4erVWjRQiKSZNW7cKFioJIRUEXdRmTtIROG2ki2Ac2FXElSEHX4lL0LxA3Ioi6ElwJrlxJoWg2bV1F7sy9SWbyaCadZGrm84HJnDPnzNzznXPP3DPnTAJoW/3ZnyRid0T8GhG91Wxthf7q3a25y2O35y6PJTE//9ofSaXezbnLY0XV4nm78sxAGpG+n+QHqTV94eKZ0XJ54nyeH5o5250nR09PnJ44N3L8+LGjw089OfJEU+LM4rp58N2pQwdefOPay2Mnr735w5dZe3fn5UvjaNAvQ6sU9GeB/zlfUV/2yAYPdq/asySddLSwITSkFBFZd3VWxn9vlGKx83rjhfcidCZsV9m1qXv14tl5YBtLotUtAFqjuNDvnCuNZd+Bl38P7t3M6UfL3Xi2+gUoi/tWfquWdESa1+ms+37bTP0RcXL2r0+zW9zdOgQAwLp8OPbJia6IuHT7i5eyucfibC/t+G/l/rfK3735TLAvIv4VEfsi4t8RsT8i/hMRWd3/RcT/l7741R0Nt2f5/Ce9vsHQ1iWb/z2d723Vzv+K2V/0lfLcnkr8ncmpyfLEkfw9GYjO7iw/vMYxvnn+549WK1s6/8tu2fGLuWDejusddQt046Mzo5VJaRPcuBpxsCNJlsefLKz8JxFxICIONvbSe4vE5KOfH1qt0p3jX0MTtibmP8vCm836fzbq4i8k1f3Jt4amL1x8fPJs/f7kUE+UJ44MFWfFcj/+9MGrqx2/Gn9Pnls5/sZH0frdmKjeL+n/JaULY2Bxv3a6ucff4PmfdiWvV/aZu/LH3hmdmTk/HNGVnKjkax4fWXxukS/qZ+f/wOGVx/++/DlZ/98XEdlJfH9EPBARD+ZtfygiHo6Iw2vE+P1zd44/0g2c/02QxT++4uffwvnfl9T0f+OJ0pnvvlrt+Ovr/2OV1ED+SOXzr05Sl1+pOR0R3WdGr9QU3e37BwAAAP8EaeU38Ek6uJBO08HB6m/498fOtDw1PfPYqam3z41XfyvfF51psdLVm6+HlifLE8PJbP6K1fXRkXytuFgvPZqvG39c2lHJD45NlcdbHDu0u12rjP/M76VWtw7YZLXbS8UG8EhXXbVntqxBwBaq30dPa7NXXon6DwNgu/AvvtC+7jD+061qB7D1XP+hfa00/q/U5e0FwPbk+g/ty/iHNpV+u+LDX295Q4BWcP2HtnQ3/9e/iYmee6MZm5corfHOb3WnREOVo0ikrX4Pm5boiXuiGRtPXMpHczNfucUfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE3ydwAAAP//qg7a+Q==")

program crashed: WARNING in ext4_xattr_inode_update_ref
testing program (duration=45.513518988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-syz_mount_image$ext4
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4b4, &(0x7f0000000980)="$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")

program crashed: WARNING in ext4_xattr_inode_update_ref
testing program (duration=45.513518988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-syz_mount_image$ext4
detailed listing:
executing program 0:
syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00')
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4b4, &(0x7f0000000980)="$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")

program crashed: WARNING in ext4_xattr_inode_update_ref
testing program (duration=45.513518988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4b4, &(0x7f0000000980)="$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")

program crashed: WARNING in ext4_xattr_inode_update_ref
extracting C reproducer
testing compiled C program (duration=45.513518988s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
simplifying C reproducer
testing compiled C program (duration=45.513518988s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing compiled C program (duration=45.513518988s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing compiled C program (duration=45.513518988s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing compiled C program (duration=45.513518988s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing compiled C program (duration=45.513518988s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing compiled C program (duration=45.513518988s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing compiled C program (duration=45.513518988s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_inode_update_ref
testing program (duration=45.513518988s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4b4, &(0x7f0000000980)="$eJzs28trXNUfAPDvvZNXn8mvv/4erVWjRQiKSZNW7cKFioJIRUEXdRmTtIROG2ki2Ac2FXElSEHX4lL0LxA3Ioi6ElwJrlxJoWg2bV1F7sy9SWbyaCadZGrm84HJnDPnzNzznXPP3DPnTAJoW/3ZnyRid0T8GhG91Wxthf7q3a25y2O35y6PJTE//9ofSaXezbnLY0XV4nm78sxAGpG+n+QHqTV94eKZ0XJ54nyeH5o5250nR09PnJ44N3L8+LGjw089OfJEU+LM4rp58N2pQwdefOPay2Mnr735w5dZe3fn5UvjaNAvQ6sU9GeB/zlfUV/2yAYPdq/asySddLSwITSkFBFZd3VWxn9vlGKx83rjhfcidCZsV9m1qXv14tl5YBtLotUtAFqjuNDvnCuNZd+Bl38P7t3M6UfL3Xi2+gUoi/tWfquWdESa1+ms+37bTP0RcXL2r0+zW9zdOgQAwLp8OPbJia6IuHT7i5eyucfibC/t+G/l/rfK3735TLAvIv4VEfsi4t8RsT8i/hMRWd3/RcT/l7741R0Nt2f5/Ce9vsHQ1iWb/z2d723Vzv+K2V/0lfLcnkr8ncmpyfLEkfw9GYjO7iw/vMYxvnn+549WK1s6/8tu2fGLuWDejusddQt046Mzo5VJaRPcuBpxsCNJlsefLKz8JxFxICIONvbSe4vE5KOfH1qt0p3jX0MTtibmP8vCm836fzbq4i8k1f3Jt4amL1x8fPJs/f7kUE+UJ44MFWfFcj/+9MGrqx2/Gn9Pnls5/sZH0frdmKjeL+n/JaULY2Bxv3a6ucff4PmfdiWvV/aZu/LH3hmdmTk/HNGVnKjkax4fWXxukS/qZ+f/wOGVx/++/DlZ/98XEdlJfH9EPBARD+ZtfygiHo6Iw2vE+P1zd44/0g2c/02QxT++4uffwvnfl9T0f+OJ0pnvvlrt+Ovr/2OV1ED+SOXzr05Sl1+pOR0R3WdGr9QU3e37BwAAAP8EaeU38Ek6uJBO08HB6m/498fOtDw1PfPYqam3z41XfyvfF51psdLVm6+HlifLE8PJbP6K1fXRkXytuFgvPZqvG39c2lHJD45NlcdbHDu0u12rjP/M76VWtw7YZLXbS8UG8EhXXbVntqxBwBaq30dPa7NXXon6DwNgu/AvvtC+7jD+061qB7D1XP+hfa00/q/U5e0FwPbk+g/ty/iHNpV+u+LDX295Q4BWcP2HtnQ3/9e/iYmee6MZm5corfHOb3WnREOVo0ikrX4Pm5boiXuiGRtPXMpHczNfucUfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE3ydwAAAP//qg7a+Q==")

program crashed: WARNING in ext4_xattr_inode_update_ref
validation run: crashed=true
testing program (duration=45.513518988s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4b4, &(0x7f0000000980)="$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")

program crashed: WARNING in ext4_xattr_inode_update_ref
validation run: crashed=true
testing program (duration=45.513518988s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4b4, &(0x7f0000000980)="$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")

program crashed: WARNING in ext4_xattr_inode_update_ref
validation run: crashed=true
reproducing took 22m6.209187333s
repro crashed as (corrupted=false):
syz.0.17[5916]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
loop0: detected capacity change from 0 to 512
EXT4-fs: Ignoring removed nobh option
------------[ cut here ]------------
EA inode 11 i_nlink=1026
WARNING: CPU: 1 PID: 5916 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x53c/0x590 fs/ext4/xattr.c:1057
Modules linked in:
CPU: 1 PID: 5916 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 fs/ext4/xattr.c:1057
Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 05 ec 98 ff 49 8b 37 48 c7 c7 60 d5 de 8a 89 da e8 44 77 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 ce b3 3e 08
RSP: 0018:ffffc900043d71a0 EFLAGS: 00010246
RAX: de17b4cfb3da5300 RBX: 0000000000000402 RCX: ffff88807e2a0000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
RBP: ffffc900043d7298 R08: ffff8880b8f28c13 R09: 1ffff110171e5182
R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000
R13: ffff888072f34aa8 R14: ffff888072f348b0 R15: ffff888072f34900
FS:  000055556a4dd500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa985398000 CR3: 000000002f226000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 ext4_xattr_inode_dec_ref fs/ext4/xattr.c:1082 [inline]
 ext4_xattr_set_entry+0xcda/0x1e90 fs/ext4/xattr.c:1724
 ext4_xattr_ibody_set+0x254/0x6a0 fs/ext4/xattr.c:2268
 ext4_xattr_move_to_block fs/ext4/xattr.c:2671 [inline]
 ext4_xattr_make_inode_space fs/ext4/xattr.c:2739 [inline]
 ext4_expand_extra_isize_ea+0x1398/0x1e80 fs/ext4/xattr.c:2827
 __ext4_expand_extra_isize+0x306/0x400 fs/ext4/inode.c:5971
 ext4_try_to_expand_extra_isize fs/ext4/inode.c:6014 [inline]
 __ext4_mark_inode_dirty+0x45d/0x6e0 fs/ext4/inode.c:6092
 ext4_evict_inode+0x7f3/0xea0 fs/ext4/inode.c:252
 evict+0x4ca/0x8d0 fs/inode.c:705
 ext4_orphan_cleanup+0xbec/0x1420 fs/ext4/orphan.c:472
 __ext4_fill_super fs/ext4/super.c:5617 [inline]
 ext4_fill_super+0x5ed0/0x6790 fs/ext4/super.c:5740
 get_tree_bdev+0x3f3/0x520 fs/super.c:1591
 vfs_get_tree+0x8c/0x280 fs/super.c:1764
 do_new_mount+0x24b/0xa40 fs/namespace.c:3386
 do_mount fs/namespace.c:3726 [inline]
 __do_sys_mount fs/namespace.c:3935 [inline]
 __se_sys_mount+0x2e7/0x3d0 fs/namespace.c:3912
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x55/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f873279da0a
Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc0a1d1da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffc0a1d1e30 RCX: 00007f873279da0a
RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007ffc0a1d1df0
RBP: 0000200000000180 R08: 00007ffc0a1d1e30 R09: 0000000000800718
R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140
R13: 00007ffc0a1d1df0 R14: 00000000000004b4 R15: 00002000000003c0
 </TASK>

final repro crashed as (corrupted=false):
syz.0.17[5916]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
loop0: detected capacity change from 0 to 512
EXT4-fs: Ignoring removed nobh option
------------[ cut here ]------------
EA inode 11 i_nlink=1026
WARNING: CPU: 1 PID: 5916 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x53c/0x590 fs/ext4/xattr.c:1057
Modules linked in:
CPU: 1 PID: 5916 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 fs/ext4/xattr.c:1057
Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 05 ec 98 ff 49 8b 37 48 c7 c7 60 d5 de 8a 89 da e8 44 77 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 ce b3 3e 08
RSP: 0018:ffffc900043d71a0 EFLAGS: 00010246
RAX: de17b4cfb3da5300 RBX: 0000000000000402 RCX: ffff88807e2a0000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
RBP: ffffc900043d7298 R08: ffff8880b8f28c13 R09: 1ffff110171e5182
R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000
R13: ffff888072f34aa8 R14: ffff888072f348b0 R15: ffff888072f34900
FS:  000055556a4dd500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa985398000 CR3: 000000002f226000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 ext4_xattr_inode_dec_ref fs/ext4/xattr.c:1082 [inline]
 ext4_xattr_set_entry+0xcda/0x1e90 fs/ext4/xattr.c:1724
 ext4_xattr_ibody_set+0x254/0x6a0 fs/ext4/xattr.c:2268
 ext4_xattr_move_to_block fs/ext4/xattr.c:2671 [inline]
 ext4_xattr_make_inode_space fs/ext4/xattr.c:2739 [inline]
 ext4_expand_extra_isize_ea+0x1398/0x1e80 fs/ext4/xattr.c:2827
 __ext4_expand_extra_isize+0x306/0x400 fs/ext4/inode.c:5971
 ext4_try_to_expand_extra_isize fs/ext4/inode.c:6014 [inline]
 __ext4_mark_inode_dirty+0x45d/0x6e0 fs/ext4/inode.c:6092
 ext4_evict_inode+0x7f3/0xea0 fs/ext4/inode.c:252
 evict+0x4ca/0x8d0 fs/inode.c:705
 ext4_orphan_cleanup+0xbec/0x1420 fs/ext4/orphan.c:472
 __ext4_fill_super fs/ext4/super.c:5617 [inline]
 ext4_fill_super+0x5ed0/0x6790 fs/ext4/super.c:5740
 get_tree_bdev+0x3f3/0x520 fs/super.c:1591
 vfs_get_tree+0x8c/0x280 fs/super.c:1764
 do_new_mount+0x24b/0xa40 fs/namespace.c:3386
 do_mount fs/namespace.c:3726 [inline]
 __do_sys_mount fs/namespace.c:3935 [inline]
 __se_sys_mount+0x2e7/0x3d0 fs/namespace.c:3912
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x55/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f873279da0a
Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc0a1d1da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffc0a1d1e30 RCX: 00007f873279da0a
RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007ffc0a1d1df0
RBP: 0000200000000180 R08: 00007ffc0a1d1e30 R09: 0000000000800718
R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140
R13: 00007ffc0a1d1df0 R14: 00000000000004b4 R15: 00002000000003c0
 </TASK>