program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) creat(&(0x7f0000000280)='./bus\x00', 0xc2) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0xe, &(0x7f00000003c0)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@block_validity}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000000440)="$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") newfstatat(0xffffffffffffff9c, &(0x7f00000014c0)='./config\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) syz_mount_image$ext4(&(0x7f00000008c0)='ext3\x00', &(0x7f0000000900)='./file1\x00', 0x8004, &(0x7f0000001580)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@norecovery}], [{@euid_eq={'euid', 0x3d, r0}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}, 0x1, 0x7b9, &(0x7f0000000980)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") r1 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./file1\x00', 0x42, 0x0) io_setup(0x1, &(0x7f0000001180)=0x0) creat(&(0x7f00000011c0)='./bus\x00', 0x0) mount(&(0x7f0000001200)=@loop={'/dev/loop', 0x0}, &(0x7f0000001240)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000001280)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x3]}) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x101042, 0x10d) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001600)={0xcf, 0xe8, 0x4, 0xb, 0x1, 0x0, [{0x3, 0x2, 0x50, '\x00', 0x2400}]}) io_submit(r2, 0x1, &(0x7f0000001400)=[&(0x7f0000001440)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000001480)='i', 0xa800, 0x1400}]) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/n\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='rdma', 0x4) symlinkat(&(0x7f0000000200)='./config/nvmet/subsystems/n\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/subsystems/n\x00') sendto(0xffffffffffffffff, &(0x7f0000000040)="340000003e000500010000000000000001020000000000000c0001006f76732d647030000800020000000000080009000f000f00", 0x34, 0x0, 0x0, 0x0) [ 95.636968][ T4665] Bluetooth: hci0: command tx timeout [ 95.864551][ T5351] loop0: detected capacity change from 0 to 512 [ 95.917161][ T5351] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 95.917173][ T5351] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.917177][ T5351] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.953302][ T5351] EXT4-fs (loop0): 1 truncate cleaned up [ 95.962855][ T5351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.016599][ T5351] loop0: detected capacity change from 512 to 64 [ 96.031791][ T5351] ================================================================== [ 96.031804][ T5351] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x92b/0x1ed0 [ 96.031959][ T5351] Read of size 18446744073709551600 at addr ffff8880446fc2d0 by task syz.0.0/5351 [ 96.031966][ T5351] [ 96.031972][ T5351] CPU: 0 UID: 0 PID: 5351 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 96.031981][ T5351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.031986][ T5351] Call Trace: [ 96.032000][ T5351] [ 96.032005][ T5351] dump_stack_lvl+0xe8/0x150 [ 96.032066][ T5351] print_address_description+0x55/0x1e0 [ 96.032085][ T5351] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 96.032098][ T5351] print_report+0x58/0x70 [ 96.032112][ T5351] kasan_report+0x117/0x150 [ 96.032160][ T5351] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 96.032184][ T5351] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 96.032197][ T5351] kasan_check_range+0x264/0x2c0 [ 96.032213][ T5351] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 96.032226][ T5351] __asan_memmove+0x29/0x70 [ 96.032237][ T5351] ext4_xattr_set_entry+0x92b/0x1ed0 [ 96.032250][ T5351] ext4_xattr_ibody_set+0x262/0x710 [ 96.032260][ T5351] ext4_destroy_inline_data_nolock+0x23a/0x5f0 [ 96.032270][ T5351] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10 [ 96.032279][ T5351] ? down_write+0x166/0x200 [ 96.032376][ T5351] ? ext4_inode_journal_mode+0x18c/0x4d0 [ 96.032391][ T5351] ? ext4_fc_track_inode+0x4d/0x3f0 [ 96.032405][ T5351] ? ext4_fc_track_inode+0xf3/0x3f0 [ 96.032419][ T5351] ext4_convert_inline_data_to_extent+0x549/0xde0 [ 96.032440][ T5351] ? __pfx_ext4_convert_inline_data_to_extent+0x10/0x10 [ 96.032456][ T5351] ? ext4_inode_journal_mode+0x18c/0x4d0 [ 96.032464][ T5351] ? ext4_chunk_trans_extent+0x201/0x2a0 [ 96.032473][ T5351] ? ext4_try_to_write_inline_data+0x49/0x90 [ 96.032483][ T5351] ext4_write_begin+0x3bd/0x1900 [ 96.032493][ T5351] ? __pfx_ext4_write_begin+0x10/0x10 [ 96.032499][ T5351] ? reacquire_held_locks+0x117/0x1a0 [ 96.032527][ T5351] ? balance_dirty_pages_ratelimited_flags+0x8e4/0xd20 [ 96.032550][ T5351] generic_perform_write+0x2d5/0x8e0 [ 96.032561][ T5351] ? __pfx_generic_perform_write+0x10/0x10 [ 96.032571][ T5351] ? ext4_write_checks+0x1b7/0x220 [ 96.032580][ T5351] ext4_buffered_write_iter+0x139/0x540 [ 96.032589][ T5351] ext4_file_write_iter+0xae4/0x1cd0 [ 96.032600][ T5351] ? io_submit_one+0x134/0x13d0 [ 96.032611][ T5351] ? kasan_save_track+0x4f/0x80 [ 96.032629][ T5351] ? kasan_save_track+0x3e/0x80 [ 96.032642][ T5351] ? lock_acquire+0x115/0x350 [ 96.032654][ T5351] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 96.032668][ T5351] ? aio_write+0x545/0x870 [ 96.032684][ T5351] aio_write+0x5cb/0x870 [ 96.032700][ T5351] ? __pfx_aio_write+0x10/0x10 [ 96.032717][ T5351] io_submit_one+0x798/0x13d0 [ 96.032727][ T5351] ? lockdep_hardirqs_on+0x7b/0x110 [ 96.032735][ T5351] ? irqentry_exit+0x2a0/0x9b0 [ 96.032743][ T5351] ? __pfx_io_submit_one+0x10/0x10 [ 96.032752][ T5351] ? lock_acquire+0x115/0x350 [ 96.032761][ T5351] ? __might_fault+0xaf/0x130 [ 96.032778][ T5351] __se_sys_io_submit+0x195/0x340 [ 96.032787][ T5351] ? __pfx___se_sys_io_submit+0x10/0x10 [ 96.032797][ T5351] do_syscall_64+0x166/0x520 [ 96.032805][ T5351] ? trace_irq_disable+0x3b/0x140 [ 96.032832][ T5351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.032840][ T5351] ? clear_bhb_loop+0x70/0xc0 [ 96.032849][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.032856][ T5351] RIP: 0033:0x7f9c6939f559 [ 96.032864][ T5351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.032878][ T5351] RSP: 002b:00007f9c657f4fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 96.032887][ T5351] RAX: ffffffffffffffda RBX: 00007f9c69625fa0 RCX: 00007f9c6939f559 [ 96.032892][ T5351] RDX: 0000200000001400 RSI: 0000000000000001 RDI: 00007f9c6a15f000 [ 96.032897][ T5351] RBP: 00007f9c69436b50 R08: 0000000000000000 R09: 0000000000000000 [ 96.032904][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.032910][ T5351] R13: 00007f9c69626038 R14: 00007f9c69625fa0 R15: 00007ffe820f44a8 [ 96.032922][ T5351] [ 96.032926][ T5351] [ 96.032929][ T5351] The buggy address belongs to the physical page: [ 96.032934][ T5351] page: refcount:3 mapcount:0 mapping:ffff88801e825940 index:0x2 pfn:0x446fc [ 96.032945][ T5351] memcg:ffff8880453c5400 [ 96.032951][ T5351] aops:def_blk_aops ino:700000 dentry name(?):"" [ 96.032963][ T5351] flags: 0x4fff18000000214(referenced|dirty|workingset|node=1|zone=1|lastcpupid=0x7ff) [ 96.032980][ T5351] raw: 04fff18000000214 0000000000000000 dead000000000122 ffff88801e825940 [ 96.032991][ T5351] raw: 0000000000000002 ffff88804607fa80 00000003ffffffff ffff8880453c5400 [ 96.032995][ T5351] page dumped because: kasan: bad access detected [ 96.032999][ T5351] page_owner tracks the page as allocated [ 96.033002][ T5351] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_MOVABLE|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL), pid 5351, tgid 5350 (syz.0.0), ts 96028465246 [ 96.033014][ T5351] post_alloc_hook+0x1f9/0x250 [ 96.033030][ T5351] get_page_from_freelist+0x220f/0x2280 [ 96.033037][ T5351] __alloc_frozen_pages_noprof+0x1fe/0x410 [ 96.033044][ T5351] alloc_pages_mpol+0x21e/0x390 [ 96.033054][ T5351] alloc_pages_noprof+0xb1/0x2b0 [ 96.033062][ T5351] folio_alloc_noprof+0x1e/0x30 [ 96.033070][ T5351] filemap_alloc_folio_noprof+0x111/0x460 [ 96.033077][ T5351] __filemap_get_folio_mpol+0x3fd/0xff0 [ 96.033084][ T5351] bdev_getblk+0x1ec/0x670 [ 96.033090][ T5351] __ext4_get_inode_loc+0x56c/0xf40 [ 96.033099][ T5351] ext4_get_inode_loc+0x81/0xf0 [ 96.033108][ T5351] ext4_inline_data_iomap+0x146/0x470 [ 96.033115][ T5351] ext4_iomap_next_report+0x2b5/0x680 [ 96.033123][ T5351] iomap_iter+0xe2/0xec0 [ 96.033131][ T5351] iomap_fiemap+0x1db/0x5a0 [ 96.033138][ T5351] ext4_fiemap+0x288/0x330 [ 96.033142][ T5351] page last free pid 5297 tgid 5297 ts 95980151672 stack trace: [ 96.033147][ T5351] free_unref_folios+0xdc6/0x14e0 [ 96.033153][ T5351] folios_put_refs+0x9e9/0xb30 [ 96.033161][ T5351] shmem_undo_range+0x547/0x15d0 [ 96.033167][ T5351] shmem_evict_inode+0x240/0xb00 [ 96.033179][ T5351] evict+0x624/0xb50 [ 96.033190][ T5351] dentry_kill+0x1b9/0x910 [ 96.033203][ T5351] finish_dput+0x1a/0x260 [ 96.033212][ T5351] filename_renameat2+0x61b/0x9a0 [ 96.033221][ T5351] __se_sys_rename+0x55/0x2c0 [ 96.033230][ T5351] do_syscall_64+0x166/0x520 [ 96.033240][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.033246][ T5351] [ 96.033248][ T5351] Memory state around the buggy address: [ 96.033251][ T5351] ffff8880446fc180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 96.033256][ T5351] ffff8880446fc200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 96.033260][ T5351] >ffff8880446fc280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 96.033263][ T5351] ^ [ 96.033266][ T5351] ffff8880446fc300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 96.033270][ T5351] ffff8880446fc380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 96.033273][ T5351] ================================================================== [ 96.400615][ T5351] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 96.403493][ T5351] CPU: 0 UID: 0 PID: 5351 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 96.407171][ T5351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.411368][ T5351] Call Trace: [ 96.412832][ T5351] [ 96.414165][ T5351] vpanic+0x26f/0x710 [ 96.415781][ T5351] panic+0xc5/0xd0 [ 96.417271][ T5351] ? __pfx_panic+0x10/0x10 [ 96.419250][ T5351] ? preempt_schedule_thunk+0x16/0x40 [ 96.421661][ T5351] ? preempt_schedule_thunk+0x16/0x40 [ 96.424085][ T5351] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 96.426476][ T5351] check_panic_on_warn+0x89/0xb0 [ 96.428726][ T5351] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 96.431105][ T5351] end_report+0x73/0x170 [ 96.432881][ T5351] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 96.435144][ T5351] kasan_report+0x128/0x150 [ 96.437070][ T5351] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 96.439559][ T5351] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 96.442065][ T5351] kasan_check_range+0x264/0x2c0 [ 96.444353][ T5351] ? ext4_xattr_set_entry+0x92b/0x1ed0 [ 96.446634][ T5351] __asan_memmove+0x29/0x70 [ 96.448645][ T5351] ext4_xattr_set_entry+0x92b/0x1ed0 [ 96.451043][ T5351] ext4_xattr_ibody_set+0x262/0x710 [ 96.453413][ T5351] ext4_destroy_inline_data_nolock+0x23a/0x5f0 [ 96.456247][ T5351] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10 [ 96.459219][ T5351] ? down_write+0x166/0x200 [ 96.461541][ T5351] ? ext4_inode_journal_mode+0x18c/0x4d0 [ 96.464292][ T5351] ? ext4_fc_track_inode+0x4d/0x3f0 [ 96.466660][ T5351] ? ext4_fc_track_inode+0xf3/0x3f0 [ 96.468970][ T5351] ext4_convert_inline_data_to_extent+0x549/0xde0 [ 96.471699][ T5351] ? __pfx_ext4_convert_inline_data_to_extent+0x10/0x10 [ 96.474582][ T5351] ? ext4_inode_journal_mode+0x18c/0x4d0 [ 96.477322][ T5351] ? ext4_chunk_trans_extent+0x201/0x2a0 [ 96.480203][ T5351] ? ext4_try_to_write_inline_data+0x49/0x90 [ 96.482820][ T5351] ext4_write_begin+0x3bd/0x1900 [ 96.485011][ T5351] ? __pfx_ext4_write_begin+0x10/0x10 [ 96.487362][ T5351] ? reacquire_held_locks+0x117/0x1a0 [ 96.489750][ T5351] ? balance_dirty_pages_ratelimited_flags+0x8e4/0xd20 [ 96.492790][ T5351] generic_perform_write+0x2d5/0x8e0 [ 96.494997][ T5351] ? __pfx_generic_perform_write+0x10/0x10 [ 96.497560][ T5351] ? ext4_write_checks+0x1b7/0x220 [ 96.499811][ T5351] ext4_buffered_write_iter+0x139/0x540 [ 96.502272][ T5351] ext4_file_write_iter+0xae4/0x1cd0 [ 96.504536][ T5351] ? io_submit_one+0x134/0x13d0 [ 96.506580][ T5351] ? kasan_save_track+0x4f/0x80 [ 96.508683][ T5351] ? kasan_save_track+0x3e/0x80 [ 96.510690][ T5351] ? lock_acquire+0x115/0x350 [ 96.512762][ T5351] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 96.515368][ T5351] ? aio_write+0x545/0x870 [ 96.517353][ T5351] aio_write+0x5cb/0x870 [ 96.519325][ T5351] ? __pfx_aio_write+0x10/0x10 [ 96.521422][ T5351] io_submit_one+0x798/0x13d0 [ 96.523533][ T5351] ? lockdep_hardirqs_on+0x7b/0x110 [ 96.525716][ T5351] ? irqentry_exit+0x2a0/0x9b0 [ 96.527968][ T5351] ? __pfx_io_submit_one+0x10/0x10 [ 96.530400][ T5351] ? lock_acquire+0x115/0x350 [ 96.532689][ T5351] ? __might_fault+0xaf/0x130 [ 96.534927][ T5351] __se_sys_io_submit+0x195/0x340 [ 96.537322][ T5351] ? __pfx___se_sys_io_submit+0x10/0x10 [ 96.539952][ T5351] do_syscall_64+0x166/0x520 [ 96.542077][ T5351] ? trace_irq_disable+0x3b/0x140 [ 96.544180][ T5351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.546831][ T5351] ? clear_bhb_loop+0x70/0xc0 [ 96.548887][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.551493][ T5351] RIP: 0033:0x7f9c6939f559 [ 96.553568][ T5351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.561782][ T5351] RSP: 002b:00007f9c657f4fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 96.565350][ T5351] RAX: ffffffffffffffda RBX: 00007f9c69625fa0 RCX: 00007f9c6939f559 [ 96.568651][ T5351] RDX: 0000200000001400 RSI: 0000000000000001 RDI: 00007f9c6a15f000 [ 96.572693][ T5351] RBP: 00007f9c69436b50 R08: 0000000000000000 R09: 0000000000000000 [ 96.576461][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.579871][ T5351] R13: 00007f9c69626038 R14: 00007f9c69625fa0 R15: 00007ffe820f44a8 [ 96.583303][ T5351] [ 96.585165][ T5351] Kernel Offset: disabled [ 96.587045][ T5351] Rebooting in 86400 seconds..