program:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000480, &(0x7f00000000c0), 0x1, 0x784, &(0x7f0000000140)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000940)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000001e00)='./proc\x00', &(0x7f0000001e40)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001e80)='./proc/net/afs/cells\x00', 0x2, 0x0)
write(r0, &(0x7f0000001ec0)='add foosyz [2', 0xd)
mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mount(&(0x7f0000000d00)=@filename='./file1\x00', &(0x7f0000000d40)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00', &(0x7f0000000d80)='binder\x00', 0x2014080, &(0x7f0000000dc0)='@{.^}^})(}^]#\x06:%M:\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./cfg\x00', 0x1ff)
mount(0x0, &(0x7f0000000a80)='./cfg\x00', &(0x7f0000000ac0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff)
syz_mount_image$udf(&(0x7f0000000e00), &(0x7f0000000e40)='./bus\x00', 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c", @ANYRESOCT], 0x9, 0xc41, &(0x7f0000000f80)="$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")
setrlimit(0x1, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000001c40)='./file1\x00', 0x20fdfffffe)
r1 = syz_open_dev$loop(&(0x7f0000001c80), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000001cc0)={0x0, {}, 0x0, {}, 0x4, 0x4, 0xffffffff, 0x0, "22b7435b0a43852dbc3a9ada34cc97af10fd4faea15748328c53096c2f359e9ba743d30b59c491a7b3e74d9389515d1002374a1d61471af78d462ea537e61800", "0410b1617b6268917d94b72c2e9e13be3626fc320e557ada74161ccef2c5cf5e", [0x3, 0xffffffffffffffff]})
syz_emit_vhci(&(0x7f0000001f00)=ANY=[@ANYBLOB="04140603c80002"], 0x9)
syz_emit_vhci(&(0x7f0000001f40)=ANY=[@ANYBLOB="02c8f0"], 0x17)
r2 = openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98)
pwritev2(r2, 0x0, 0x0, 0xe7b, 0x0, 0x0)
truncate(&(0x7f0000001d80)='./file1\x00', 0x20fffbfffc)
symlinkat(&(0x7f0000000b40)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000b80)='./file2\x00')
symlinkat(&(0x7f0000000c00)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f0000000c40)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r3, &(0x7f0000000cc0)='dummy_udc.0', 0xb)
r4 = open(&(0x7f0000000900)='./bus\x00', 0x143142, 0x0)
write(r4, &(0x7f0000000bc0)="e64cf92d", 0x4)
[ 126.900329][ T4665] Bluetooth: hci0: command tx timeout
[ 127.016884][ T5357] loop0: detected capacity change from 0 to 2048
[ 127.143404][ T5357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 127.175886][ T5357] kAFS: bad VL server IP address
[ 127.211627][ T5357] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 127.214369][ T5357] EXT4-fs error (device loop0) in ext4_setattr:7187: error 28
[ 127.248689][ T5357] loop0: detected capacity change from 2048 to 2047
[ 127.269663][ T5357] ==================================================================
[ 127.269676][ T5357] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x92b/0x1ed0
[ 127.269944][ T5357] Read of size 18446744073709551600 at addr ffff88804ebe4eb8 by task syz.0.0/5357
[ 127.269956][ T5357]
[ 127.269963][ T5357] CPU: 0 UID: 0 PID: 5357 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 127.269976][ T5357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 127.269983][ T5357] Call Trace:
[ 127.270018][ T5357]
[ 127.270024][ T5357] dump_stack_lvl+0xe8/0x150
[ 127.270091][ T5357] print_address_description+0x55/0x1e0
[ 127.270109][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 127.270123][ T5357] print_report+0x58/0x70
[ 127.270138][ T5357] kasan_report+0x117/0x150
[ 127.270186][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 127.270201][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 127.270216][ T5357] kasan_check_range+0x264/0x2c0
[ 127.270233][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 127.270247][ T5357] __asan_memmove+0x29/0x70
[ 127.270259][ T5357] ext4_xattr_set_entry+0x92b/0x1ed0
[ 127.270277][ T5357] ext4_xattr_ibody_set+0x262/0x710
[ 127.270298][ T5357] ext4_destroy_inline_data_nolock+0x23a/0x5f0
[ 127.270325][ T5357] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10
[ 127.270340][ T5357] ? __asan_memcpy+0x40/0x70
[ 127.270354][ T5357] ? ext4_read_inline_data+0x100/0x2b0
[ 127.270368][ T5357] ext4_convert_inline_data_nolock+0x208/0x980
[ 127.270383][ T5357] ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10
[ 127.270394][ T5357] ? down_write+0x166/0x200
[ 127.270481][ T5357] ext4_convert_inline_data+0x484/0x5c0
[ 127.270495][ T5357] ? __pfx_ext4_convert_inline_data+0x10/0x10
[ 127.270508][ T5357] ? lockdep_hardirqs_on+0x7b/0x110
[ 127.270524][ T5357] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0
[ 127.270575][ T5357] ext4_setattr+0xef2/0x1550
[ 127.270594][ T5357] ? __pfx_ext4_setattr+0x10/0x10
[ 127.270611][ T5357] notify_change+0xbba/0xea0
[ 127.270676][ T5357] do_truncate+0x1c2/0x250
[ 127.270708][ T5357] ? __pfx_do_truncate+0x10/0x10
[ 127.270721][ T5357] ? apparmor_path_truncate+0x38b/0x450
[ 127.270800][ T5357] ? ima_iint_find+0x53/0x110
[ 127.270828][ T5357] ? ima_path_truncate+0x13c/0x190
[ 127.270844][ T5357] vfs_truncate+0x4b7/0x540
[ 127.270859][ T5357] ? __pfx_vfs_truncate+0x10/0x10
[ 127.270875][ T5357] ? do_getname+0x151/0x250
[ 127.270887][ T5357] ksys_truncate+0xf3/0x1c0
[ 127.270902][ T5357] ? __pfx_ksys_truncate+0x10/0x10
[ 127.270918][ T5357] __x64_sys_truncate+0x5b/0x70
[ 127.270931][ T5357] do_syscall_64+0x16a/0x530
[ 127.270946][ T5357] ? trace_irq_disable+0x3b/0x140
[ 127.270980][ T5357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.271000][ T5357] ? clear_bhb_loop+0x70/0xc0
[ 127.271012][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.271022][ T5357] RIP: 0033:0x7f619679fb19
[ 127.271034][ T5357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 127.271045][ T5357] RSP: 002b:00007f61976a6fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[ 127.271059][ T5357] RAX: ffffffffffffffda RBX: 00007f6196a25fa0 RCX: 00007f619679fb19
[ 127.271067][ T5357] RDX: 0000000000000000 RSI: 00000020fffbfffc RDI: 0000200000001d80
[ 127.271075][ T5357] RBP: 00007f6196837b70 R08: 0000000000000000 R09: 0000000000000000
[ 127.271083][ T5357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 127.271090][ T5357] R13: 00007f6196a26038 R14: 00007f6196a25fa0 R15: 00007ffeec0c7ae8
[ 127.271102][ T5357]
[ 127.271107][ T5357]
[ 127.271110][ T5357] The buggy address belongs to the physical page:
[ 127.271116][ T5357] page: refcount:3 mapcount:0 mapping:ffff88801e825940 index:0x2 pfn:0x4ebe4
[ 127.271126][ T5357] memcg:ffff8880451fe580
[ 127.271132][ T5357] aops:def_blk_aops ino:700000 dentry name(?):""
[ 127.271232][ T5357] flags: 0x4fff18000000204(referenced|workingset|node=1|zone=1|lastcpupid=0x7ff)
[ 127.271248][ T5357] raw: 04fff18000000204 0000000000000000 dead000000000122 ffff88801e825940
[ 127.271258][ T5357] raw: 0000000000000002 ffff888045882000 00000003ffffffff ffff8880451fe580
[ 127.271263][ T5357] page dumped because: kasan: bad access detected
[ 127.271268][ T5357] page_owner tracks the page as allocated
[ 127.271272][ T5357] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_MOVABLE|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL), pid 5357, tgid 5356 (syz.0.0), ts 127262669724
[ 127.271297][ T5357] post_alloc_hook+0x1f9/0x250
[ 127.271322][ T5357] get_page_from_freelist+0x2224/0x2290
[ 127.271336][ T5357] __alloc_frozen_pages_noprof+0x1fe/0x410
[ 127.271348][ T5357] alloc_pages_mpol+0x21e/0x390
[ 127.271364][ T5357] alloc_pages_noprof+0xb1/0x2b0
[ 127.271377][ T5357] folio_alloc_noprof+0x1e/0x30
[ 127.271391][ T5357] filemap_alloc_folio_noprof+0x111/0x460
[ 127.271412][ T5357] __filemap_get_folio_mpol+0x3fd/0xff0
[ 127.271424][ T5357] bdev_getblk+0x1ec/0x670
[ 127.271445][ T5357] __ext4_get_inode_loc+0x56c/0xf40
[ 127.271461][ T5357] ext4_get_inode_loc+0x81/0xf0
[ 127.271474][ T5357] ext4_xattr_ibody_get+0x113/0x4b0
[ 127.271488][ T5357] ext4_xattr_get+0x121/0x690
[ 127.271499][ T5357] __vfs_getxattr+0x412/0x440
[ 127.271511][ T5357] cap_inode_need_killpriv+0x45/0x60
[ 127.271524][ T5357] security_inode_need_killpriv+0x85/0x240
[ 127.271535][ T5357] page last free pid 5357 tgid 5356 ts 127208266448 stack trace:
[ 127.271543][ T5357] free_unref_folios+0xdc6/0x14e0
[ 127.271554][ T5357] folios_put_refs+0x9e9/0xb30
[ 127.271568][ T5357] shmem_undo_range+0x55a/0x1730
[ 127.271597][ T5357] shmem_evict_inode+0x240/0xb00
[ 127.271613][ T5357] evict+0x624/0xb50
[ 127.271627][ T5357] dentry_kill+0x1b9/0x910
[ 127.271643][ T5357] finish_dput+0x1a/0x260
[ 127.271653][ T5357] __fput+0x65b/0xa40
[ 127.271663][ T5357] fput_close_sync+0x11f/0x240
[ 127.271673][ T5357] __se_sys_close+0xa2/0x160
[ 127.271683][ T5357] do_syscall_64+0x16a/0x530
[ 127.271696][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.271706][ T5357]
[ 127.271708][ T5357] Memory state around the buggy address:
[ 127.271714][ T5357] ffff88804ebe4d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 127.271721][ T5357] ffff88804ebe4e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 127.271728][ T5357] >ffff88804ebe4e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 127.271732][ T5357] ^
[ 127.271738][ T5357] ffff88804ebe4f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 127.271745][ T5357] ffff88804ebe4f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 127.271750][ T5357] ==================================================================
[ 127.276621][ T5357] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 127.545928][ T5357] CPU: 0 UID: 0 PID: 5357 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 127.549927][ T5357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 127.554281][ T5357] Call Trace:
[ 127.555797][ T5357]
[ 127.557148][ T5357] vpanic+0x26f/0x710
[ 127.558960][ T5357] panic+0xc5/0xd0
[ 127.560587][ T5357] ? __pfx_panic+0x10/0x10
[ 127.562442][ T5357] ? preempt_schedule_thunk+0x16/0x40
[ 127.564575][ T5357] ? preempt_schedule_thunk+0x16/0x40
[ 127.566533][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 127.568966][ T5357] check_panic_on_warn+0x89/0xb0
[ 127.572693][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 127.575080][ T5357] end_report+0x73/0x170
[ 127.576964][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 127.579222][ T5357] kasan_report+0x128/0x150
[ 127.581201][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 127.583554][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 127.585770][ T5357] kasan_check_range+0x264/0x2c0
[ 127.587919][ T5357] ? ext4_xattr_set_entry+0x92b/0x1ed0
[ 127.590114][ T5357] __asan_memmove+0x29/0x70
[ 127.591954][ T5357] ext4_xattr_set_entry+0x92b/0x1ed0
[ 127.594218][ T5357] ext4_xattr_ibody_set+0x262/0x710
[ 127.596431][ T5357] ext4_destroy_inline_data_nolock+0x23a/0x5f0
[ 127.599065][ T5357] ? __pfx_ext4_destroy_inline_data_nolock+0x10/0x10
[ 127.601784][ T5357] ? __asan_memcpy+0x40/0x70
[ 127.603596][ T5357] ? ext4_read_inline_data+0x100/0x2b0
[ 127.605719][ T5357] ext4_convert_inline_data_nolock+0x208/0x980
[ 127.608073][ T5357] ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10
[ 127.610667][ T5357] ? down_write+0x166/0x200
[ 127.612575][ T5357] ext4_convert_inline_data+0x484/0x5c0
[ 127.614955][ T5357] ? __pfx_ext4_convert_inline_data+0x10/0x10
[ 127.617399][ T5357] ? lockdep_hardirqs_on+0x7b/0x110
[ 127.619526][ T5357] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0
[ 127.622110][ T5357] ext4_setattr+0xef2/0x1550
[ 127.623979][ T5357] ? __pfx_ext4_setattr+0x10/0x10
[ 127.625985][ T5357] notify_change+0xbba/0xea0
[ 127.627874][ T5357] do_truncate+0x1c2/0x250
[ 127.629649][ T5357] ? __pfx_do_truncate+0x10/0x10
[ 127.631727][ T5357] ? apparmor_path_truncate+0x38b/0x450
[ 127.634048][ T5357] ? ima_iint_find+0x53/0x110
[ 127.636041][ T5357] ? ima_path_truncate+0x13c/0x190
[ 127.638159][ T5357] vfs_truncate+0x4b7/0x540
[ 127.640082][ T5357] ? __pfx_vfs_truncate+0x10/0x10
[ 127.642239][ T5357] ? do_getname+0x151/0x250
[ 127.644074][ T5357] ksys_truncate+0xf3/0x1c0
[ 127.645902][ T5357] ? __pfx_ksys_truncate+0x10/0x10
[ 127.648070][ T5357] __x64_sys_truncate+0x5b/0x70
[ 127.650037][ T5357] do_syscall_64+0x16a/0x530
[ 127.651937][ T5357] ? trace_irq_disable+0x3b/0x140
[ 127.654166][ T5357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.656670][ T5357] ? clear_bhb_loop+0x70/0xc0
[ 127.658721][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 127.661281][ T5357] RIP: 0033:0x7f619679fb19
[ 127.663262][ T5357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 127.671137][ T5357] RSP: 002b:00007f61976a6fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[ 127.674811][ T5357] RAX: ffffffffffffffda RBX: 00007f6196a25fa0 RCX: 00007f619679fb19
[ 127.678287][ T5357] RDX: 0000000000000000 RSI: 00000020fffbfffc RDI: 0000200000001d80
[ 127.681685][ T5357] RBP: 00007f6196837b70 R08: 0000000000000000 R09: 0000000000000000
[ 127.685076][ T5357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 127.688465][ T5357] R13: 00007f6196a26038 R14: 00007f6196a25fa0 R15: 00007ffeec0c7ae8
[ 127.691852][ T5357]
[ 127.693692][ T5357] Kernel Offset: disabled
[ 127.695631][ T5357] Rebooting in 86400 seconds..