Warning: Permanently added '[localhost]:18149' (ED25519) to the list of known hosts. 2026/02/19 23:55:55 parsed 1 programs syzkaller login: [ 92.114731][ T5308] cgroup: Unknown subsys name 'net' [ 92.174957][ T5308] cgroup: Unknown subsys name 'cpuset' [ 92.180718][ T5308] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.045214][ T5308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.063356][ T10] cfg80211: failed to load regulatory.db [ 100.627448][ T5326] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.677484][ T5342] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.682439][ T5342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.686159][ T5342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.689833][ T5342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.693231][ T5342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.277604][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.295867][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.371426][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.374843][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.935535][ T5359] chnl_net:caif_netlink_parms(): no params data found [ 104.136543][ T5359] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.151083][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.154097][ T5359] bridge_slave_0: entered allmulticast mode [ 104.161676][ T5359] bridge_slave_0: entered promiscuous mode [ 104.182040][ T5359] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.185161][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.188162][ T5359] bridge_slave_1: entered allmulticast mode [ 104.212455][ T5359] bridge_slave_1: entered promiscuous mode [ 104.294964][ T5359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.300367][ T5359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.383297][ T5359] team0: Port device team_slave_0 added [ 104.393178][ T5359] team0: Port device team_slave_1 added [ 104.464121][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.467162][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.501057][ T5359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.564012][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.567181][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.601216][ T5359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.751764][ T5359] hsr_slave_0: entered promiscuous mode [ 104.771194][ T5359] hsr_slave_1: entered promiscuous mode [ 105.247923][ T5359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.269915][ T5359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.282619][ T5359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.303158][ T5359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.455396][ T5359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.482530][ T5359] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.496941][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.499979][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.524237][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.527324][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.865234][ T5359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.936942][ T5359] veth0_vlan: entered promiscuous mode [ 105.954108][ T5359] veth1_vlan: entered promiscuous mode [ 105.982422][ T5359] veth0_macvtap: entered promiscuous mode [ 105.989464][ T5359] veth1_macvtap: entered promiscuous mode [ 106.005138][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.021640][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.035008][ T1100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.038888][ T1100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.049961][ T1100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.066644][ T1100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.243854][ T1090] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.322959][ T1090] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.432601][ T1090] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.504650][ T1090] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.402557][ T1090] bridge_slave_1: left allmulticast mode [ 108.405348][ T1090] bridge_slave_1: left promiscuous mode [ 108.408929][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.510015][ T1090] bridge_slave_0: left allmulticast mode [ 108.519740][ T1090] bridge_slave_0: left promiscuous mode [ 108.526401][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.845491][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.854018][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.871851][ T1090] bond0 (unregistering): Released all slaves [ 108.960254][ T1090] hsr_slave_0: left promiscuous mode [ 108.963750][ T1090] hsr_slave_1: left promiscuous mode [ 108.966676][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.969835][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.980217][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.983720][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.993297][ T1090] veth1_macvtap: left promiscuous mode [ 108.995455][ T1090] veth0_macvtap: left promiscuous mode [ 108.997635][ T1090] veth1_vlan: left promiscuous mode [ 109.000063][ T1090] veth0_vlan: left promiscuous mode [ 109.174373][ T1090] team0 (unregistering): Port device team_slave_1 removed [ 109.188331][ T1090] team0 (unregistering): Port device team_slave_0 removed 2026/02/19 23:56:18 executed programs: 0 [ 112.136645][ T4664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.140223][ T4664] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.146731][ T4664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.150435][ T4664] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.154306][ T4664] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.315528][ T5450] chnl_net:caif_netlink_parms(): no params data found [ 112.374554][ T5450] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.377807][ T5450] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.382077][ T5450] bridge_slave_0: entered allmulticast mode [ 112.386072][ T5450] bridge_slave_0: entered promiscuous mode [ 112.390571][ T5450] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.394178][ T5450] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.397338][ T5450] bridge_slave_1: entered allmulticast mode [ 112.401549][ T5450] bridge_slave_1: entered promiscuous mode [ 112.427054][ T5450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.433271][ T5450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.456029][ T5450] team0: Port device team_slave_0 added [ 112.460736][ T5450] team0: Port device team_slave_1 added [ 112.481693][ T5450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.484490][ T5450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.496686][ T5450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.502187][ T5450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.505100][ T5450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.516255][ T5450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.556821][ T5450] hsr_slave_0: entered promiscuous mode [ 112.563218][ T5450] hsr_slave_1: entered promiscuous mode [ 113.035750][ T5450] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.056617][ T5450] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.066725][ T5450] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.080710][ T5450] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.138050][ T5450] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.141159][ T5450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.144692][ T5450] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.147656][ T5450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.269366][ T5450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.290516][ T5450] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.303651][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.307235][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.328418][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.331479][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.359276][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.362447][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.409787][ T5450] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.433772][ T5450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.717585][ T5450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.787802][ T5450] veth0_vlan: entered promiscuous mode [ 113.815417][ T5450] veth1_vlan: entered promiscuous mode [ 113.852338][ T5450] veth0_macvtap: entered promiscuous mode [ 113.869951][ T5450] veth1_macvtap: entered promiscuous mode [ 113.903444][ T5450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.922785][ T5450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.945230][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.958976][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.986328][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.009674][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.078122][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.092867][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.129539][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.141310][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.177239][ T4664] Bluetooth: hci0: command tx timeout [ 114.263737][ T5494] loop0: detected capacity change from 0 to 1024 [ 114.291062][ T5494] ======================================================= [ 114.291062][ T5494] WARNING: The mand mount option has been deprecated and [ 114.291062][ T5494] and is ignored by this kernel. Remove the mand [ 114.291062][ T5494] option from the mount to silence this warning. [ 114.291062][ T5494] ======================================================= [ 114.346465][ T5494] EXT4-fs: Ignoring removed oldalloc option [ 114.349111][ T5494] EXT4-fs: Ignoring removed orlov option [ 114.398673][ T5494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.476990][ T1100] ================================================================== [ 114.480284][ T1100] BUG: KASAN: use-after-free in ext4_find_extent+0xae6/0xcc0 [ 114.483557][ T1100] Read of size 4 at addr ffff888047945d18 by task kworker/u4:10/1100 [ 114.487788][ T1100] [ 114.488869][ T1100] CPU: 0 UID: 0 PID: 1100 Comm: kworker/u4:10 Not tainted syzkaller #0 PREEMPT(full) [ 114.488884][ T1100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.488893][ T1100] Workqueue: writeback wb_workfn (flush-7:0) [ 114.488938][ T1100] Call Trace: [ 114.488945][ T1100] [ 114.488950][ T1100] dump_stack_lvl+0xe8/0x150 [ 114.488994][ T1100] print_report+0xba/0x230 [ 114.489038][ T1100] ? ext4_find_extent+0xae6/0xcc0 [ 114.489048][ T1100] kasan_report+0x117/0x150 [ 114.489098][ T1100] ? ext4_find_extent+0xae6/0xcc0 [ 114.489109][ T1100] ext4_find_extent+0xae6/0xcc0 [ 114.489121][ T1100] ext4_ext_map_blocks+0x283/0x58b0 [ 114.489132][ T1100] ? ret_from_fork_asm+0x1a/0x30 [ 114.489149][ T1100] ? check_path+0x21/0x40 [ 114.489186][ T1100] ? lockdep_unlock+0x5d/0xd0 [ 114.489197][ T1100] ? __lock_acquire+0x146e/0x2cf0 [ 114.489211][ T1100] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 114.489227][ T1100] ext4_map_create_blocks+0x11d/0x540 [ 114.489243][ T1100] ext4_map_blocks+0x7cd/0x11d0 [ 114.489258][ T1100] ? __pfx_ext4_map_blocks+0x10/0x10 [ 114.489272][ T1100] ? ext4_inode_journal_mode+0x193/0x470 [ 114.489291][ T1100] ext4_do_writepages+0x22c0/0x46e0 [ 114.489315][ T1100] ? __pfx_ext4_do_writepages+0x10/0x10 [ 114.489330][ T1100] ? lockdep_unlock+0x5d/0xd0 [ 114.489341][ T1100] ? __lock_acquire+0x146e/0x2cf0 [ 114.489361][ T1100] ext4_writepages+0x241/0x3b0 [ 114.489374][ T1100] ? __pfx_ext4_writepages+0x10/0x10 [ 114.489388][ T1100] ? __pfx_ext4_writepages+0x10/0x10 [ 114.489399][ T1100] do_writepages+0x32e/0x550 [ 114.489431][ T1100] ? reacquire_held_locks+0x104/0x190 [ 114.489445][ T1100] ? writeback_sb_inodes+0x43d/0x19a0 [ 114.489458][ T1100] __writeback_single_inode+0x133/0x11a0 [ 114.489469][ T1100] ? do_raw_spin_unlock+0x4d/0x210 [ 114.489480][ T1100] writeback_sb_inodes+0x944/0x19a0 [ 114.489497][ T1100] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 114.489508][ T1100] ? do_raw_spin_lock+0x12b/0x2f0 [ 114.489526][ T1100] ? rcu_is_watching+0x15/0xb0 [ 114.489565][ T1100] wb_writeback+0x456/0xb70 [ 114.489577][ T1100] ? queue_io+0x281/0x4a0 [ 114.489590][ T1100] ? __pfx_wb_writeback+0x10/0x10 [ 114.489600][ T1100] ? do_raw_spin_lock+0x12b/0x2f0 [ 114.489614][ T1100] wb_workfn+0x414/0xf50 [ 114.489630][ T1100] ? look_up_lock_class+0x57/0x110 [ 114.489697][ T1100] ? __pfx_wb_workfn+0x10/0x10 [ 114.489711][ T1100] ? do_raw_spin_lock+0x12b/0x2f0 [ 114.489722][ T1100] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 114.489736][ T1100] ? process_scheduled_works+0xa25/0x1830 [ 114.489775][ T1100] ? process_scheduled_works+0xa25/0x1830 [ 114.489787][ T1100] process_scheduled_works+0xb02/0x1830 [ 114.489807][ T1100] ? __pfx_process_scheduled_works+0x10/0x10 [ 114.489822][ T1100] ? assign_work+0x3d5/0x5e0 [ 114.489834][ T1100] worker_thread+0xa50/0xfc0 [ 114.489853][ T1100] kthread+0x388/0x470 [ 114.489887][ T1100] ? __pfx_worker_thread+0x10/0x10 [ 114.489899][ T1100] ? __pfx_kthread+0x10/0x10 [ 114.489919][ T1100] ret_from_fork+0x51e/0xb90 [ 114.489951][ T1100] ? __pfx_ret_from_fork+0x10/0x10 [ 114.489964][ T1100] ? __switch_to+0xc7d/0x1450 [ 114.489976][ T1100] ? __pfx_kthread+0x10/0x10 [ 114.489985][ T1100] ret_from_fork_asm+0x1a/0x30 [ 114.490004][ T1100] [ 114.490008][ T1100] [ 114.624553][ T1100] The buggy address belongs to the physical page: [ 114.627293][ T1100] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x5f pfn:0x47945 [ 114.630835][ T1100] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 114.633733][ T1100] raw: 04fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 114.637236][ T1100] raw: 000000000000005f 0000000000000000 00000000ffffffff 0000000000000000 [ 114.640570][ T1100] page dumped because: kasan: bad access detected [ 114.643092][ T1100] page_owner tracks the page as freed [ 114.645518][ T1100] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5400, tgid 5400 (dhcpcd-run-hook), ts 108576490037, free_ts 108866951735 [ 114.653154][ T1100] post_alloc_hook+0x231/0x280 [ 114.655539][ T1100] get_page_from_freelist+0x24dc/0x2580 [ 114.657970][ T1100] __alloc_frozen_pages_noprof+0x18d/0x380 [ 114.660453][ T1100] alloc_pages_mpol+0x232/0x4a0 [ 114.662503][ T1100] vma_alloc_folio_noprof+0xea/0x210 [ 114.664685][ T1100] do_wp_page+0x1204/0x5a00 [ 114.667247][ T1100] handle_mm_fault+0x1520/0x3310 [ 114.669377][ T1100] do_user_addr_fault+0xa73/0x1340 [ 114.671681][ T1100] exc_page_fault+0x6a/0xc0 [ 114.673668][ T1100] asm_exc_page_fault+0x26/0x30 [ 114.675748][ T1100] page last free pid 5400 tgid 5400 stack trace: [ 114.678458][ T1100] free_unref_folios+0xed5/0x16d0 [ 114.680711][ T1100] folios_put_refs+0x789/0x8d0 [ 114.682846][ T1100] free_pages_and_swap_cache+0x2e7/0x5b0 [ 114.685286][ T1100] tlb_flush_mmu+0x6d3/0xa30 [ 114.687123][ T1100] tlb_finish_mmu+0xf9/0x230 [ 114.689214][ T1100] exit_mmap+0x498/0xa10 [ 114.691071][ T1100] __mmput+0x118/0x430 [ 114.692819][ T1100] exit_mm+0x168/0x220 [ 114.694682][ T1100] do_exit+0x62e/0x2320 [ 114.696557][ T1100] do_group_exit+0x21b/0x2d0 [ 114.698575][ T1100] __x64_sys_exit_group+0x3f/0x40 [ 114.700614][ T1100] x64_sys_call+0x221a/0x2240 [ 114.702608][ T1100] do_syscall_64+0x14d/0xf80 [ 114.704608][ T1100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.707288][ T1100] [ 114.708348][ T1100] Memory state around the buggy address: [ 114.710777][ T1100] ffff888047945c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 114.714254][ T1100] ffff888047945c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 114.717727][ T1100] >ffff888047945d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 114.721573][ T1100] ^ [ 114.723748][ T1100] ffff888047945d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 114.727180][ T1100] ffff888047945e00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 114.730774][ T1100] ================================================================== [ 114.862037][ T1100] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 114.865437][ T1100] CPU: 0 UID: 0 PID: 1100 Comm: kworker/u4:10 Not tainted syzkaller #0 PREEMPT(full) [ 114.869447][ T1100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.873554][ T1100] Workqueue: writeback wb_workfn (flush-7:0) [ 114.876291][ T1100] Call Trace: [ 114.877753][ T1100] [ 114.878972][ T1100] vpanic+0x56c/0xa60 [ 114.880664][ T1100] ? __pfx_vpanic+0x10/0x10 [ 114.882631][ T1100] panic+0xc5/0xd0 [ 114.884271][ T1100] ? __pfx_panic+0x10/0x10 [ 114.886282][ T1100] ? preempt_schedule_thunk+0x16/0x30 [ 114.888812][ T1100] ? preempt_schedule_thunk+0x16/0x30 [ 114.891135][ T1100] ? ext4_find_extent+0xae6/0xcc0 [ 114.893307][ T1100] check_panic_on_warn+0x89/0xb0 [ 114.895412][ T1100] ? ext4_find_extent+0xae6/0xcc0 [ 114.897585][ T1100] end_report+0x73/0x180 [ 114.899269][ T1100] ? ext4_find_extent+0xae6/0xcc0 [ 114.901258][ T1100] kasan_report+0x128/0x150 [ 114.903066][ T1100] ? ext4_find_extent+0xae6/0xcc0 [ 114.905172][ T1100] ext4_find_extent+0xae6/0xcc0 [ 114.906916][ T1100] ext4_ext_map_blocks+0x283/0x58b0 [ 114.908666][ T1100] ? ret_from_fork_asm+0x1a/0x30 [ 114.910405][ T1100] ? check_path+0x21/0x40 [ 114.911916][ T1100] ? lockdep_unlock+0x5d/0xd0 [ 114.913618][ T1100] ? __lock_acquire+0x146e/0x2cf0 [ 114.915402][ T1100] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 114.917366][ T1100] ext4_map_create_blocks+0x11d/0x540 [ 114.919385][ T1100] ext4_map_blocks+0x7cd/0x11d0 [ 114.921462][ T1100] ? __pfx_ext4_map_blocks+0x10/0x10 [ 114.923572][ T1100] ? ext4_inode_journal_mode+0x193/0x470 [ 114.925913][ T1100] ext4_do_writepages+0x22c0/0x46e0 [ 114.928133][ T1100] ? __pfx_ext4_do_writepages+0x10/0x10 [ 114.930481][ T1100] ? lockdep_unlock+0x5d/0xd0 [ 114.932496][ T1100] ? __lock_acquire+0x146e/0x2cf0 [ 114.934676][ T1100] ext4_writepages+0x241/0x3b0 [ 114.936775][ T1100] ? __pfx_ext4_writepages+0x10/0x10 [ 114.938870][ T1100] ? __pfx_ext4_writepages+0x10/0x10 [ 114.941129][ T1100] do_writepages+0x32e/0x550 [ 114.943103][ T1100] ? reacquire_held_locks+0x104/0x190 [ 114.945373][ T1100] ? writeback_sb_inodes+0x43d/0x19a0 [ 114.947654][ T1100] __writeback_single_inode+0x133/0x11a0 [ 114.950092][ T1100] ? do_raw_spin_unlock+0x4d/0x210 [ 114.952270][ T1100] writeback_sb_inodes+0x944/0x19a0 [ 114.954531][ T1100] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 114.956997][ T1100] ? do_raw_spin_lock+0x12b/0x2f0 [ 114.959133][ T1100] ? rcu_is_watching+0x15/0xb0 [ 114.961178][ T1100] wb_writeback+0x456/0xb70 [ 114.963139][ T1100] ? queue_io+0x281/0x4a0 [ 114.965010][ T1100] ? __pfx_wb_writeback+0x10/0x10 [ 114.967186][ T1100] ? do_raw_spin_lock+0x12b/0x2f0 [ 114.969336][ T1100] wb_workfn+0x414/0xf50 [ 114.971184][ T1100] ? look_up_lock_class+0x57/0x110 [ 114.973357][ T1100] ? __pfx_wb_workfn+0x10/0x10 [ 114.975422][ T1100] ? do_raw_spin_lock+0x12b/0x2f0 [ 114.977640][ T1100] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 114.979937][ T1100] ? process_scheduled_works+0xa25/0x1830 [ 114.982389][ T1100] ? process_scheduled_works+0xa25/0x1830 [ 114.984788][ T1100] process_scheduled_works+0xb02/0x1830 [ 114.987228][ T1100] ? __pfx_process_scheduled_works+0x10/0x10 [ 114.989832][ T1100] ? assign_work+0x3d5/0x5e0 [ 114.991832][ T1100] worker_thread+0xa50/0xfc0 [ 114.993840][ T1100] kthread+0x388/0x470 [ 114.995770][ T1100] ? __pfx_worker_thread+0x10/0x10 [ 114.998389][ T1100] ? __pfx_kthread+0x10/0x10 [ 115.000830][ T1100] ret_from_fork+0x51e/0xb90 [ 115.003552][ T1100] ? __pfx_ret_from_fork+0x10/0x10 [ 115.006218][ T1100] ? __switch_to+0xc7d/0x1450 [ 115.008704][ T1100] ? __pfx_kthread+0x10/0x10 [ 115.010990][ T1100] ret_from_fork_asm+0x1a/0x30 [ 115.013032][ T1100] [ 115.014794][ T1100] Kernel Offset: disabled [ 115.016803][ T1100] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:56:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900056d61d0 R8 =ffff888034d58237 R9 =1ffff110069ab046 R10=dffffc0000000000 R11=ffffffff85416d20 R12=dffffc0000000000 R13=ffffffff9a2bba65 R14=ffffffff9a5d3c60 R15=0000000000000000 RIP=ffffffff85416d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808ca5b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555695efa28 CR3=000000005399f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1549ef20 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 307a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff154a0196 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff154a0196 00007fff154a019c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb04a3319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb04a331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb04a33343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb04a331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000f0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000f0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000