some questions aoout extended attribute in my developmen​t

[jinxiu su <sujinxiu@xxxxxxxxx>]

Hi....I am su, a new linuxer.
 
I am doing some development on linux security modules(LSM), and I use extended attribute to store the security information.
 
But problems encountered..
 
when the kernel module that I developed is working a long time ,the extended attribute of this file named /lib/ld-2.5.so lost.Exactly, it 's replace by zero.
 
and in my kernel module ,there is a policy, when create a inode, the extended attribute will be initialized to zero. But when I check /lib/ld-2.5.so, the inode is not changed, exactly it's not a new inode. I am becoming confused....
 
I think there must be some fatal bugs in my kernel module.But I am just wondering  in which condition  can make a file's extended attribute field to be replaced by zero? in which condition can make /lib/ld-2.5.so extended attribute to be zero?