program:
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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")
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x2ac00)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x8, 0x12, 0x1b, 0x0, "9e959f16deab7b08aa26e66c4056a516950600000000000000eef4fb0efcc1d8a6078ed9d5f8643902dd8f6fac274de9d940ffa5e592bbd48685450d00002000", "f625c10e6e0080ffffffffffffffff7e904dc8df6aa3a893ec00347f41be6908", [0xa, 0x80000476]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0xd1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000f9b000/0x1000)=nil})
r7 = dup(r6)
ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000000c0)=0xffff)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)
[ 84.234780][ T5291] Bluetooth: hci0: command tx timeout
[ 84.420272][ T5329] loop0: detected capacity change from 0 to 2048
[ 84.519274][ T5329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 84.623109][ T5329] loop0: detected capacity change from 2048 to 2047
[ 84.643630][ T5329] ==================================================================
[ 84.647301][ T5329] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x9c1/0x1e20
[ 84.650877][ T5329] Read of size 18446744073709551600 at addr ffff888012ac9eb8 by task syz.0.0/5329
[ 84.654814][ T5329]
[ 84.655910][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 84.655927][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 84.655935][ T5329] Call Trace:
[ 84.655943][ T5329]
[ 84.655949][ T5329] dump_stack_lvl+0xe8/0x150
[ 84.655970][ T5329] print_address_description+0x55/0x1e0
[ 84.655984][ T5329] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 84.656001][ T5329] print_report+0x58/0x70
[ 84.656013][ T5329] kasan_report+0x117/0x150
[ 84.656030][ T5329] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 84.656047][ T5329] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 84.656064][ T5329] kasan_check_range+0x264/0x2c0
[ 84.656079][ T5329] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 84.656097][ T5329] __asan_memmove+0x29/0x70
[ 84.656109][ T5329] ext4_xattr_set_entry+0x9c1/0x1e20
[ 84.656131][ T5329] ext4_xattr_ibody_set+0x254/0x6a0
[ 84.656151][ T5329] ext4_destroy_inline_data_nolock+0x23a/0x5e0
[ 84.656167][ T5329] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10
[ 84.656183][ T5329] ? down_write+0x16d/0x200
[ 84.656250][ T5329] ? ext4_journal_check_start+0x1cf/0x2b0
[ 84.656271][ T5329] ext4_destroy_inline_data+0x83/0xe0
[ 84.656285][ T5329] ext4_do_writepages+0x51e/0x4670
[ 84.656327][ T5329] ? kernel_text_address+0xa5/0xe0
[ 84.656347][ T5329] ? unwind_get_return_address+0x4d/0x90
[ 84.656361][ T5329] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 84.656379][ T5329] ? arch_stack_walk+0xfb/0x150
[ 84.656396][ T5329] ? stack_trace_save+0xa9/0x100
[ 84.656412][ T5329] ? __pfx_stack_trace_save+0x10/0x10
[ 84.656426][ T5329] ? __pfx_hlock_conflict+0x10/0x10
[ 84.656442][ T5329] ? check_path+0x21/0x40
[ 84.656456][ T5329] ? add_lock_to_list+0xc7/0x100
[ 84.656470][ T5329] ? __pfx_ext4_do_writepages+0x10/0x10
[ 84.656484][ T5329] ? lockdep_unlock+0x5d/0xd0
[ 84.656494][ T5329] ? __lock_acquire+0x146e/0x2cf0
[ 84.656508][ T5329] ? __lock_acquire+0x6b5/0x2cf0
[ 84.656524][ T5329] ? ext4_writepages+0x205/0x3b0
[ 84.656537][ T5329] ? ext4_writepages+0x205/0x3b0
[ 84.656552][ T5329] ext4_writepages+0x241/0x3b0
[ 84.656564][ T5329] ? __lock_acquire+0x6b5/0x2cf0
[ 84.656576][ T5329] ? __pfx_ext4_writepages+0x10/0x10
[ 84.656593][ T5329] ? __pfx_ext4_writepages+0x10/0x10
[ 84.656604][ T5329] do_writepages+0x32e/0x550
[ 84.656624][ T5329] ? do_raw_spin_unlock+0x4d/0x210
[ 84.656640][ T5329] filemap_flush+0x1e1/0x2e0
[ 84.656657][ T5329] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 84.656675][ T5329] ? __pfx_filemap_flush+0x10/0x10
[ 84.656690][ T5329] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 84.656714][ T5329] ? __asan_memset+0x22/0x50
[ 84.656727][ T5329] ext4_convert_inline_data+0x18e/0x600
[ 84.656742][ T5329] ? __pfx_ext4_convert_inline_data+0x10/0x10
[ 84.656757][ T5329] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 84.656771][ T5329] ? seqcount_lockdep_reader_access+0xea/0x100
[ 84.656789][ T5329] ext4_setattr+0xef4/0x1d60
[ 84.656809][ T5329] ? __pfx_ext4_setattr+0x10/0x10
[ 84.656825][ T5329] notify_change+0xc1a/0xf40
[ 84.656845][ T5329] do_truncate+0x1c2/0x250
[ 84.656860][ T5329] ? __pfx_do_truncate+0x10/0x10
[ 84.656873][ T5329] ? apparmor_path_truncate+0x245/0x2e0
[ 84.656941][ T5329] vfs_truncate+0x4b4/0x540
[ 84.656957][ T5329] ? __pfx_vfs_truncate+0x10/0x10
[ 84.656972][ T5329] ? do_getname+0x151/0x250
[ 84.656989][ T5329] ksys_truncate+0xf3/0x1c0
[ 84.657004][ T5329] ? __pfx_ksys_truncate+0x10/0x10
[ 84.657020][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.657032][ T5329] __x64_sys_truncate+0x5b/0x70
[ 84.657048][ T5329] do_syscall_64+0x15f/0xf80
[ 84.657065][ T5329] ? clear_bhb_loop+0x40/0x90
[ 84.657078][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.657090][ T5329] RIP: 0033:0x7f8f8e39ce59
[ 84.657103][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 84.657113][ T5329] RSP: 002b:00007f8f8f23cfe8 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[ 84.657128][ T5329] RAX: ffffffffffffffda RBX: 00007f8f8e615fa0 RCX: 00007f8f8e39ce59
[ 84.657137][ T5329] RDX: 0000000000000000 RSI: 00000000000000d1 RDI: 0000200000000000
[ 84.657146][ T5329] RBP: 00007f8f8e432d6f R08: 0000000000000000 R09: 0000000000000000
[ 84.657153][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 84.657161][ T5329] R13: 00007f8f8e616038 R14: 00007f8f8e615fa0 R15: 00007ffd482c8118
[ 84.657174][ T5329]
[ 84.657179][ T5329]
[ 84.853577][ T5329] The buggy address belongs to the physical page:
[ 84.856465][ T5329] page: refcount:2 mapcount:0 mapping:ffff88801cc25940 index:0x2 pfn:0x12ac9
[ 84.861003][ T5329] memcg:ffff88803793e080
[ 84.863082][ T5329] aops:def_blk_aops ino:700000 dentry name(?):""
[ 84.865972][ T5329] flags: 0xfff78000004024(referenced|lru|private|node=0|zone=1|lastcpupid=0x7ff)
[ 84.869634][ T5329] raw: 00fff78000004024 ffffea000049e3c8 ffffea0000479d08 ffff88801cc25940
[ 84.873343][ T5329] raw: 0000000000000002 ffff888046e319f8 00000002ffffffff ffff88803793e080
[ 84.876874][ T5329] page dumped because: kasan: bad access detected
[ 84.879567][ T5329] page_owner tracks the page as allocated
[ 84.881773][ T5329] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x42800(GFP_NOWAIT|__GFP_COMP), pid 5329, tgid 5328 (syz.0.0), ts 84632549058, free_ts 84611455893
[ 84.887524][ T5329] post_alloc_hook+0x22d/0x280
[ 84.889247][ T5329] get_page_from_freelist+0x24ba/0x2540
[ 84.891560][ T5329] __alloc_frozen_pages_noprof+0x18d/0x380
[ 84.893943][ T5329] alloc_pages_mpol+0x235/0x490
[ 84.895961][ T5329] alloc_pages_noprof+0xac/0x2a0
[ 84.897959][ T5329] folio_alloc_noprof+0x1e/0x30
[ 84.900016][ T5329] filemap_alloc_folio_noprof+0x111/0x470
[ 84.902299][ T5329] __filemap_get_folio_mpol+0x3fc/0xb00
[ 84.904653][ T5329] bdev_getblk+0x1f6/0x6e0
[ 84.906508][ T5329] ext4_sb_breadahead_unmovable+0x6f/0xf0
[ 84.908737][ T5329] __ext4_get_inode_loc+0xae3/0xfa0
[ 84.910814][ T5329] ext4_reserve_inode_write+0x18b/0x360
[ 84.912898][ T5329] __ext4_mark_inode_dirty+0x14b/0x710
[ 84.915487][ T5329] ext4_setattr+0x173d/0x1d60
[ 84.918431][ T5329] notify_change+0xc1a/0xf40
[ 84.920569][ T5329] do_truncate+0x1c2/0x250
[ 84.922476][ T5329] page last free pid 0 tgid 0 stack trace:
[ 84.925129][ T5329] __free_frozen_pages+0xbc7/0xd30
[ 84.927445][ T5329] rcu_core+0x7cd/0x1070
[ 84.929406][ T5329] handle_softirqs+0x22a/0x840
[ 84.931654][ T5329] __irq_exit_rcu+0xca/0x220
[ 84.933864][ T5329] irq_exit_rcu+0x9/0x30
[ 84.935923][ T5329] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 84.938502][ T5329] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 84.941320][ T5329]
[ 84.942484][ T5329] Memory state around the buggy address:
[ 84.945163][ T5329] ffff888012ac9d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 84.948863][ T5329] ffff888012ac9e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 84.952403][ T5329] >ffff888012ac9e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 84.955964][ T5329] ^
[ 84.958675][ T5329] ffff888012ac9f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 84.962056][ T5329] ffff888012ac9f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 84.966065][ T5329] ==================================================================
[ 85.003141][ T5329] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 85.006056][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.009895][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.014260][ T5329] Call Trace:
[ 85.015759][ T5329]
[ 85.017156][ T5329] vpanic+0x56c/0xa60
[ 85.018897][ T5329] ? __pfx_vpanic+0x10/0x10
[ 85.021035][ T5329] ? __pfx___schedule+0x10/0x10
[ 85.023217][ T5329] panic+0xc5/0xd0
[ 85.024989][ T5329] ? __pfx_panic+0x10/0x10
[ 85.027045][ T5329] ? preempt_schedule_thunk+0x16/0x30
[ 85.029506][ T5329] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 85.032108][ T5329] check_panic_on_warn+0x89/0xb0
[ 85.034511][ T5329] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 85.037096][ T5329] end_report+0x73/0x170
[ 85.039044][ T5329] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 85.041390][ T5329] kasan_report+0x128/0x150
[ 85.043417][ T5329] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 85.045767][ T5329] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 85.048247][ T5329] kasan_check_range+0x264/0x2c0
[ 85.050620][ T5329] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 85.053027][ T5329] __asan_memmove+0x29/0x70
[ 85.054982][ T5329] ext4_xattr_set_entry+0x9c1/0x1e20
[ 85.057209][ T5329] ext4_xattr_ibody_set+0x254/0x6a0
[ 85.059374][ T5329] ext4_destroy_inline_data_nolock+0x23a/0x5e0
[ 85.062179][ T5329] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10
[ 85.064976][ T5329] ? down_write+0x16d/0x200
[ 85.066899][ T5329] ? ext4_journal_check_start+0x1cf/0x2b0
[ 85.069527][ T5329] ext4_destroy_inline_data+0x83/0xe0
[ 85.072117][ T5329] ext4_do_writepages+0x51e/0x4670
[ 85.074469][ T5329] ? kernel_text_address+0xa5/0xe0
[ 85.076706][ T5329] ? unwind_get_return_address+0x4d/0x90
[ 85.079229][ T5329] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 85.082001][ T5329] ? arch_stack_walk+0xfb/0x150
[ 85.084125][ T5329] ? stack_trace_save+0xa9/0x100
[ 85.086279][ T5329] ? __pfx_stack_trace_save+0x10/0x10
[ 85.088677][ T5329] ? __pfx_hlock_conflict+0x10/0x10
[ 85.091031][ T5329] ? check_path+0x21/0x40
[ 85.092959][ T5329] ? add_lock_to_list+0xc7/0x100
[ 85.095286][ T5329] ? __pfx_ext4_do_writepages+0x10/0x10
[ 85.097969][ T5329] ? lockdep_unlock+0x5d/0xd0
[ 85.100183][ T5329] ? __lock_acquire+0x146e/0x2cf0
[ 85.102451][ T5329] ? __lock_acquire+0x6b5/0x2cf0
[ 85.104890][ T5329] ? ext4_writepages+0x205/0x3b0
[ 85.107087][ T5329] ? ext4_writepages+0x205/0x3b0
[ 85.109280][ T5329] ext4_writepages+0x241/0x3b0
[ 85.111424][ T5329] ? __lock_acquire+0x6b5/0x2cf0
[ 85.113742][ T5329] ? __pfx_ext4_writepages+0x10/0x10
[ 85.116250][ T5329] ? __pfx_ext4_writepages+0x10/0x10
[ 85.118732][ T5329] do_writepages+0x32e/0x550
[ 85.121143][ T5329] ? do_raw_spin_unlock+0x4d/0x210
[ 85.123304][ T5329] filemap_flush+0x1e1/0x2e0
[ 85.127232][ T5329] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 85.129997][ T5329] ? __pfx_filemap_flush+0x10/0x10
[ 85.132328][ T5329] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 85.134626][ T5329] ? __asan_memset+0x22/0x50
[ 85.136921][ T5329] ext4_convert_inline_data+0x18e/0x600
[ 85.140016][ T5329] ? __pfx_ext4_convert_inline_data+0x10/0x10
[ 85.142836][ T5329] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 85.145614][ T5329] ? seqcount_lockdep_reader_access+0xea/0x100
[ 85.148376][ T5329] ext4_setattr+0xef4/0x1d60
[ 85.150453][ T5329] ? __pfx_ext4_setattr+0x10/0x10
[ 85.152642][ T5329] notify_change+0xc1a/0xf40
[ 85.154728][ T5329] do_truncate+0x1c2/0x250
[ 85.156653][ T5329] ? __pfx_do_truncate+0x10/0x10
[ 85.158783][ T5329] ? apparmor_path_truncate+0x245/0x2e0
[ 85.161232][ T5329] vfs_truncate+0x4b4/0x540
[ 85.163209][ T5329] ? __pfx_vfs_truncate+0x10/0x10
[ 85.165457][ T5329] ? do_getname+0x151/0x250
[ 85.167493][ T5329] ksys_truncate+0xf3/0x1c0
[ 85.169585][ T5329] ? __pfx_ksys_truncate+0x10/0x10
[ 85.171905][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.174564][ T5329] __x64_sys_truncate+0x5b/0x70
[ 85.176778][ T5329] do_syscall_64+0x15f/0xf80
[ 85.178948][ T5329] ? clear_bhb_loop+0x40/0x90
[ 85.181220][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.183593][ T5329] RIP: 0033:0x7f8f8e39ce59
[ 85.185627][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 85.194423][ T5329] RSP: 002b:00007f8f8f23cfe8 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[ 85.197834][ T5329] RAX: ffffffffffffffda RBX: 00007f8f8e615fa0 RCX: 00007f8f8e39ce59
[ 85.201377][ T5329] RDX: 0000000000000000 RSI: 00000000000000d1 RDI: 0000200000000000
[ 85.205046][ T5329] RBP: 00007f8f8e432d6f R08: 0000000000000000 R09: 0000000000000000
[ 85.208843][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 85.212701][ T5329] R13: 00007f8f8e616038 R14: 00007f8f8e615fa0 R15: 00007ffd482c8118
[ 85.216185][ T5329]
[ 85.217945][ T5329] Kernel Offset: disabled
[ 85.220122][ T5329] Rebooting in 86400 seconds..