[ 28.056184][ T7] device bridge_slave_0 left promiscuous mode [ 28.062382][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.069924][ T7] device veth1_macvtap left promiscuous mode [ 28.076454][ T7] device veth0_vlan left promiscuous mode [ 29.602320][ T7] device bridge_slave_1 left promiscuous mode [ 29.608570][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.616072][ T7] device bridge_slave_0 left promiscuous mode [ 29.622337][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.629933][ T7] device veth1_macvtap left promiscuous mode [ 29.636011][ T7] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts. 2025/10/02 03:25:31 parsed 1 programs [ 47.140156][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 47.140166][ T24] audit: type=1400 audit(1759375532.150:104): avc: denied { unlink } for pid=412 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.199229][ T412] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.764090][ T24] audit: type=1400 audit(1759375532.780:105): avc: denied { create } for pid=437 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.010159][ T24] audit: type=1401 audit(1759375533.020:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 48.044335][ T462] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.051494][ T462] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.058967][ T462] device bridge_slave_0 entered promiscuous mode [ 48.065855][ T462] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.072961][ T462] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.080194][ T462] device bridge_slave_1 entered promiscuous mode [ 48.108286][ T462] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.115324][ T462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.122589][ T462] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.129593][ T462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.146186][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.153770][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.162243][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.170547][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.178717][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.185751][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.196292][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.205190][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.217061][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.227310][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.235629][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.243107][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.250957][ T462] device veth0_vlan entered promiscuous mode [ 48.259905][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.268640][ T462] device veth1_macvtap entered promiscuous mode [ 48.277064][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.286508][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/10/02 03:25:33 executed programs: 0 [ 48.430144][ T24] audit: type=1400 audit(1759375533.440:107): avc: denied { write } for pid=404 comm="syz-execprog" path="pipe:[1979]" dev="pipefs" ino=1979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 48.464379][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.471414][ T472] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.478793][ T472] device bridge_slave_0 entered promiscuous mode [ 48.485789][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.492985][ T472] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.500243][ T472] device bridge_slave_1 entered promiscuous mode [ 48.534335][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.541357][ T472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.548625][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.555664][ T472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.570170][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.577850][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.585226][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.598020][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.606128][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.613158][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.621447][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.629906][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.637029][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.653831][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.662587][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.679208][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.689437][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.697510][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.705383][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.713691][ T472] device veth0_vlan entered promiscuous mode [ 48.726580][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.735353][ T472] device veth1_macvtap entered promiscuous mode [ 48.743917][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.753924][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.762300][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.833740][ T477] EXT4-fs (loop2): 1 orphan inode deleted [ 48.839625][ T477] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,bsddf,lazytime, [ 48.858318][ T24] audit: type=1400 audit(1759375533.880:108): avc: denied { mount } for pid=476 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.858358][ T477] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.890989][ T24] audit: type=1400 audit(1759375533.910:109): avc: denied { write } for pid=476 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.912455][ T24] audit: type=1400 audit(1759375533.910:110): avc: denied { add_name } for pid=476 comm="syz.2.16" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.932790][ T24] audit: type=1400 audit(1759375533.910:111): avc: denied { create } for pid=476 comm="syz.2.16" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.952823][ T24] audit: type=1400 audit(1759375533.910:112): avc: denied { write open } for pid=476 comm="syz.2.16" path="/0/file1/bus" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.956575][ T482] EXT4-fs error (device loop2): ext4_ext_remove_space:2841: inode #16: comm syz.2.16: path[1].p_hdr == NULL [ 48.975637][ T24] audit: type=1400 audit(1759375533.910:113): avc: denied { read } for pid=476 comm="syz.2.16" name="bus" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.988488][ T482] EXT4-fs (loop2): Remounting filesystem read-only [ 49.018100][ T482] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 49.027952][ T482] EXT4-fs error (device loop2): ext4_punch_hole:4230: inode #16: comm syz.2.16: mark_inode_dirty error [ 49.582726][ T7] device bridge_slave_1 left promiscuous mode [ 49.588878][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.596573][ T7] device bridge_slave_0 left promiscuous mode [ 49.602754][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.610610][ T7] device veth1_macvtap left promiscuous mode [ 49.616869][ T7] device veth0_vlan left promiscuous mode [ 49.633967][ T472] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 49.807724][ T506] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.814868][ T506] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.822350][ T506] device bridge_slave_0 entered promiscuous mode [ 49.829086][ T506] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.836630][ T506] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.844026][ T506] device bridge_slave_1 entered promiscuous mode [ 49.870379][ T506] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.877437][ T506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.884689][ T506] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.891716][ T506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.906246][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.913584][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.920856][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.928503][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.943261][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.951388][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.958438][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.966005][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.974648][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.981684][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.988983][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.002975][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.012525][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.023173][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.031428][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.039017][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.047764][ T506] device veth0_vlan entered promiscuous mode [ 50.057091][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.065839][ T506] device veth1_macvtap entered promiscuous mode [ 50.074413][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.085725][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.143199][ T511] EXT4-fs (loop3): 1 orphan inode deleted [ 50.149032][ T511] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,bsddf,lazytime, [ 50.167630][ T511] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.236022][ T515] ================================================================== [ 50.244121][ T515] BUG: KASAN: use-after-free in ext4_find_extent+0xbeb/0xe20 [ 50.251478][ T515] Read of size 4 at addr ffff888116826124 by task syz.3.19/515 [ 50.258995][ T515] [ 50.261325][ T515] CPU: 0 PID: 515 Comm: syz.3.19 Not tainted syzkaller #0 [ 50.268410][ T515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 50.278458][ T515] Call Trace: [ 50.281745][ T515] __dump_stack+0x21/0x24 [ 50.286067][ T515] dump_stack_lvl+0x169/0x1d8 [ 50.290728][ T515] ? show_regs_print_info+0x18/0x18 [ 50.295921][ T515] ? thaw_kernel_threads+0x220/0x220 [ 50.301218][ T515] print_address_description+0x7f/0x2c0 [ 50.306761][ T515] ? ext4_find_extent+0xbeb/0xe20 [ 50.311768][ T515] kasan_report+0xe2/0x130 [ 50.316167][ T515] ? __read_extent_tree_block+0x1e8/0x790 [ 50.321909][ T515] ? ext4_find_extent+0xbeb/0xe20 [ 50.326916][ T515] __asan_report_load4_noabort+0x14/0x20 [ 50.332533][ T515] ext4_find_extent+0xbeb/0xe20 [ 50.337362][ T515] ext4_ext_remove_space+0x306/0x4920 [ 50.342722][ T515] ? __kasan_slab_free+0x11/0x20 [ 50.347639][ T515] ? slab_free_freelist_hook+0xc5/0x190 [ 50.353168][ T515] ? ext4_es_free_extent+0x3de/0x4c0 [ 50.358433][ T515] ? ext4_es_free_extent+0x3de/0x4c0 [ 50.363726][ T515] ? count_rsvd+0x156/0x8a0 [ 50.368214][ T515] ? __es_remove_extent+0xa77/0x16f0 [ 50.373485][ T515] ? ext4_ext_index_trans_blocks+0x100/0x100 [ 50.379459][ T515] ? ext4_es_remove_extent+0x1d9/0x330 [ 50.384903][ T515] ext4_punch_hole+0x6f8/0xad0 [ 50.389652][ T515] ext4_fallocate+0x271/0x1a70 [ 50.394399][ T515] ? selinux_file_permission+0x2a5/0x510 [ 50.400024][ T515] ? preempt_count_add+0x90/0x1b0 [ 50.405036][ T515] vfs_fallocate+0x4b4/0x590 [ 50.409610][ T515] __x64_sys_fallocate+0xc0/0x110 [ 50.414617][ T515] do_syscall_64+0x31/0x40 [ 50.419016][ T515] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.424907][ T515] RIP: 0033:0x7f8ae2e2ede9 [ 50.429312][ T515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.448995][ T515] RSP: 002b:00007f8ae2880038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 50.457405][ T515] RAX: ffffffffffffffda RBX: 00007f8ae3048080 RCX: 00007f8ae2e2ede9 [ 50.465368][ T515] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 50.473447][ T515] RBP: 00007f8ae2eb02a0 R08: 0000000000000000 R09: 0000000000000000 [ 50.481416][ T515] R10: 0000000000001a00 R11: 0000000000000246 R12: 0000000000000000 [ 50.489368][ T515] R13: 0000000000000000 R14: 00007f8ae3048080 R15: 00007fff79d37308 [ 50.497351][ T515] [ 50.499664][ T515] The buggy address belongs to the page: [ 50.505303][ T515] page:ffffea00045a0980 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116826 [ 50.515519][ T515] flags: 0x4000000000000000() [ 50.520183][ T515] raw: 4000000000000000 0000000000000000 ffffea00045a0988 0000000000000000 [ 50.528747][ T515] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 50.537322][ T515] page dumped because: kasan: bad access detected [ 50.543730][ T515] page_owner tracks the page as freed [ 50.549099][ T515] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 95, ts 4074950613, free_ts 48563839068 [ 50.568009][ T515] prep_new_page+0x179/0x180 [ 50.572585][ T515] get_page_from_freelist+0x2235/0x23d0 [ 50.578114][ T515] __alloc_pages_nodemask+0x268/0x5f0 [ 50.583462][ T515] new_slab+0x84/0x3f0 [ 50.587518][ T515] ___slab_alloc+0x2a6/0x450 [ 50.592087][ T515] __slab_alloc+0x63/0xa0 [ 50.596395][ T515] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 50.601847][ T515] uevent_show+0x160/0x330 [ 50.606273][ T515] dev_attr_show+0x56/0xd0 [ 50.610676][ T515] sysfs_kf_seq_show+0x266/0x3d0 [ 50.615598][ T515] kernfs_seq_show+0x119/0x160 [ 50.620345][ T515] seq_read_iter+0x490/0xd30 [ 50.624923][ T515] kernfs_fop_read_iter+0x147/0x470 [ 50.630105][ T515] vfs_read+0x874/0xa10 [ 50.634241][ T515] ksys_read+0x140/0x240 [ 50.638466][ T515] __x64_sys_read+0x7b/0x90 [ 50.643122][ T515] page last free stack trace: [ 50.647789][ T515] __free_pages_ok+0x7fc/0x820 [ 50.652538][ T515] __free_pages+0xdd/0x380 [ 50.656936][ T515] __free_slab+0xcf/0x190 [ 50.661250][ T515] unfreeze_partials+0x15f/0x190 [ 50.666203][ T515] put_cpu_partial+0xc1/0x180 [ 50.670867][ T515] __slab_free+0x2c9/0x3a0 [ 50.675272][ T515] ___cache_free+0x111/0x130 [ 50.679842][ T515] qlink_free+0x50/0x90 [ 50.683988][ T515] qlist_free_all+0x5f/0xb0 [ 50.688486][ T515] kasan_quarantine_reduce+0x14a/0x160 [ 50.693927][ T515] __kasan_slab_alloc+0x2f/0xf0 [ 50.698761][ T515] slab_post_alloc_hook+0x5d/0x2f0 [ 50.703856][ T515] kmem_cache_alloc+0x165/0x2e0 [ 50.708685][ T515] __alloc_skb+0x9e/0x520 [ 50.713011][ T515] netlink_ack+0x3a6/0xb80 [ 50.717421][ T515] netlink_rcv_skb+0x265/0x430 [ 50.722197][ T515] [ 50.724504][ T515] Memory state around the buggy address: [ 50.730113][ T515] ffff888116826000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.738158][ T515] ffff888116826080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.746221][ T515] >ffff888116826100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.754263][ T515] ^ [ 50.759352][ T515] ffff888116826180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.767397][ T515] ffff888116826200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.775443][ T515] ================================================================== [ 50.783483][ T515] Disabling lock debugging due to kernel taint [ 50.793734][ T515] ------------[ cut here ]------------ [ 50.799228][ T515] kernel BUG at fs/ext4/extents.c:3181! [ 50.804990][ T515] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 50.811078][ T515] CPU: 0 PID: 515 Comm: syz.3.19 Tainted: G B syzkaller #0 [ 50.819554][ T515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 50.829604][ T515] RIP: 0010:ext4_split_extent_at+0xe6e/0xe90 [ 50.835564][ T515] Code: 48 89 df 48 89 74 24 68 e8 1f 7e d3 ff 48 8b 74 24 68 e9 5a fb ff ff e8 b0 8e 99 ff 0f 0b e8 a9 8e 99 ff 0f 0b e8 a2 8e 99 ff <0f> 0b e8 9b 8e 99 ff 0f 0b e8 94 8e 99 ff 0f 0b e8 8d 8e 99 ff 0f [ 50.855170][ T515] RSP: 0018:ffffc90000f97900 EFLAGS: 00010293 [ 50.861221][ T515] RAX: ffffffff81ca176e RBX: 0000000000000000 RCX: ffff888119184f00 [ 50.869173][ T515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 50.877173][ T515] RBP: ffffc90000f97a70 R08: 0000000000000000 R09: 0000000050000028 [ 50.885233][ T515] R10: fffffbfff0d8ee48 R11: 1ffffffff0d8ee48 R12: 0000000000000000 [ 50.893194][ T515] R13: 0000000000000000 R14: 1ffff11022d0fe46 R15: 0000000000000000 [ 50.901154][ T515] FS: 00007f8ae28806c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 50.910068][ T515] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.916634][ T515] CR2: 000040000003207f CR3: 00000001179b8000 CR4: 00000000003506b0 [ 50.924599][ T515] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.932557][ T515] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.940511][ T515] Call Trace: [ 50.943793][ T515] ? __kasan_check_write+0x14/0x20 [ 50.948900][ T515] ? __asan_report_load4_noabort+0x14/0x20 [ 50.954688][ T515] ? ext4_ext_try_to_merge_right+0x820/0x820 [ 50.960649][ T515] ext4_ext_remove_space+0x677/0x4920 [ 50.966011][ T515] ? __kasan_slab_free+0x11/0x20 [ 50.970932][ T515] ? ext4_es_free_extent+0x3de/0x4c0 [ 50.976200][ T515] ? ext4_es_free_extent+0x3de/0x4c0 [ 50.981466][ T515] ? count_rsvd+0x156/0x8a0 [ 50.985950][ T515] ? __es_remove_extent+0xa77/0x16f0 [ 50.991216][ T515] ? ext4_ext_index_trans_blocks+0x100/0x100 [ 50.997177][ T515] ? ext4_es_remove_extent+0x1d9/0x330 [ 51.002622][ T515] ext4_punch_hole+0x6f8/0xad0 [ 51.007371][ T515] ext4_fallocate+0x271/0x1a70 [ 51.012119][ T515] ? selinux_file_permission+0x2a5/0x510 [ 51.017732][ T515] ? preempt_count_add+0x90/0x1b0 [ 51.022738][ T515] vfs_fallocate+0x4b4/0x590 [ 51.027310][ T515] __x64_sys_fallocate+0xc0/0x110 [ 51.032315][ T515] do_syscall_64+0x31/0x40 [ 51.036715][ T515] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 51.042588][ T515] RIP: 0033:0x7f8ae2e2ede9 [ 51.046992][ T515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.066729][ T515] RSP: 002b:00007f8ae2880038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 51.075137][ T515] RAX: ffffffffffffffda RBX: 00007f8ae3048080 RCX: 00007f8ae2e2ede9 [ 51.083096][ T515] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 51.092976][ T515] RBP: 00007f8ae2eb02a0 R08: 0000000000000000 R09: 0000000000000000 [ 51.100932][ T515] R10: 0000000000001a00 R11: 0000000000000246 R12: 0000000000000000 [ 51.108889][ T515] R13: 0000000000000000 R14: 00007f8ae3048080 R15: 00007fff79d37308 [ 51.116846][ T515] Modules linked in: [ 51.124674][ T515] ---[ end trace 312e9ebcec2876c1 ]--- [ 51.130156][ T515] RIP: 0010:ext4_split_extent_at+0xe6e/0xe90 [ 51.136319][ T515] Code: 48 89 df 48 89 74 24 68 e8 1f 7e d3 ff 48 8b 74 24 68 e9 5a fb ff ff e8 b0 8e 99 ff 0f 0b e8 a9 8e 99 ff 0f 0b e8 a2 8e 99 ff <0f> 0b e8 9b 8e 99 ff 0f 0b e8 94 8e 99 ff 0f 0b e8 8d 8e 99 ff 0f [ 51.156039][ T515] RSP: 0018:ffffc90000f97900 EFLAGS: 00010293 [ 51.163084][ T515] RAX: ffffffff81ca176e RBX: 0000000000000000 RCX: ffff888119184f00 [ 51.171064][ T515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 51.179050][ T515] RBP: ffffc90000f97a70 R08: 0000000000000000 R09: 0000000050000028 [ 51.187122][ T515] R10: fffffbfff0d8ee48 R11: 1ffffffff0d8ee48 R12: 0000000000000000 [ 51.195308][ T515] R13: 0000000000000000 R14: 1ffff11022d0fe46 R15: 0000000000000000 [ 51.203333][ T515] FS: 00007f8ae28806c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 51.212344][ T515] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.218927][ T515] CR2: 00007fc40c4a9000 CR3: 00000001179b8000 CR4: 00000000003506a0 [ 51.226952][ T515] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.235029][ T515] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.243715][ T515] Kernel panic - not syncing: Fatal exception [ 51.249938][ T515] Kernel Offset: disabled [ 51.254250][ T515] Rebooting in 86400 seconds..