program: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8) io_setup(0x1, &(0x7f00000004c0)=0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x3]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x10d) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='i', 0xa800, 0xe00}]) [ 75.109524][ T4649] Bluetooth: hci0: command tx timeout [ 75.251461][ T5317] loop0: detected capacity change from 0 to 512 [ 75.315298][ T5317] EXT4-fs (loop0): 1 truncate cleaned up [ 75.337322][ T5317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.430263][ T5317] loop0: detected capacity change from 512 to 64 [ 75.451668][ T5317] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.0: corrupted xattr entries [ 75.457638][ T1055] kworker/u4:9: attempt to access beyond end of device [ 75.457638][ T1055] loop0: rw=1, sector=72, nr_sectors = 2 limit=64 [ 75.457662][ T1055] EXT4-fs warning (device loop0): ext4_end_bio:364: I/O error 10 writing to inode 15 starting block 36) [ 75.457742][ T1055] Buffer I/O error on device loop0, logical block 36 [ 75.485677][ T5317] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.0: corrupted xattr entries [ 75.512027][ T1055] kworker/u4:9: attempt to access beyond end of device [ 75.512027][ T1055] loop0: rw=1, sector=74, nr_sectors = 16 limit=64 [ 75.512052][ T1055] EXT4-fs warning (device loop0): ext4_end_bio:364: I/O error 10 writing to inode 15 starting block 37) [ 75.512067][ T1055] Buffer I/O error on device loop0, logical block 37 [ 75.512074][ T1055] Buffer I/O error on device loop0, logical block 38 [ 75.512080][ T1055] Buffer I/O error on device loop0, logical block 39 [ 75.512086][ T1055] Buffer I/O error on device loop0, logical block 40 [ 75.512174][ T1055] Buffer I/O error on device loop0, logical block 41 [ 75.512182][ T1055] Buffer I/O error on device loop0, logical block 42 [ 75.512187][ T1055] Buffer I/O error on device loop0, logical block 43 [ 75.512194][ T1055] Buffer I/O error on device loop0, logical block 44 [ 75.579780][ T1055] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm kworker/u4:9: corrupted inode contents [ 75.583260][ T1055] EXT4-fs error (device loop0): ext4_dirty_inode:6736: inode #15: comm kworker/u4:9: mark_inode_dirty error [ 75.584131][ T5317] syz.0.0: attempt to access beyond end of device [ 75.584131][ T5317] loop0: rw=2049, sector=96, nr_sectors = 2 limit=64 [ 75.584151][ T5317] EXT4-fs warning (device loop0): ext4_end_bio:364: I/O error 10 writing to inode 15 starting block 48) [ 75.584171][ T5317] Buffer I/O error on device loop0, logical block 48 [ 75.584395][ T1055] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm kworker/u4:9: corrupted inode contents [ 75.585256][ T1055] EXT4-fs error (device loop0): ext4_dirty_inode:6736: inode #15: comm kworker/u4:9: mark_inode_dirty error [ 75.625223][ T5317] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.0: corrupted inode contents [ 75.627708][ T5317] EXT4-fs error (device loop0): ext4_dirty_inode:6736: inode #15: comm syz.0.0: mark_inode_dirty error [ 75.629716][ T5317] ------------[ cut here ]------------ [ 75.629724][ T5317] kernel BUG at fs/ext4/mballoc.c:4781! [ 75.629740][ T5317] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 75.646212][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.650115][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.654499][ T5317] RIP: 0010:ext4_mb_use_inode_pa+0x6bf/0x720 [ 75.657103][ T5317] Code: e8 a6 c1 a1 ff 48 ba 00 00 00 00 00 fc ff df e9 d7 fa ff ff e8 a2 1e 30 ff 90 0f 0b e8 9a 1e 30 ff 90 0f 0b e8 92 1e 30 ff 90 <0f> 0b e8 8a 1e 30 ff 90 0f 0b 48 8b 0c 24 48 83 c1 54 80 e1 07 80 [ 75.665564][ T5317] RSP: 0018:ffffc9000dd76840 EFLAGS: 00010283 [ 75.668252][ T5317] RAX: ffffffff8297ddae RBX: 00000000fffffff4 RCX: 0000000000100000 [ 75.671761][ T5317] RDX: ffffc9000ed82000 RSI: 00000000000065d4 RDI: 00000000000065d5 [ 75.675115][ T5317] RBP: 1ffff11008a0207b R08: ffff88804501498b R09: 1ffff11008a02931 [ 75.678616][ T5317] R10: dffffc0000000000 R11: ffffed1008a02932 R12: 0000000000000000 [ 75.682108][ T5317] R13: 0000000000000022 R14: 1ffff11008a02934 R15: ffff8880450149a0 [ 75.685420][ T5317] FS: 00007f3bee93c6c0(0000) GS:ffff88808c2bc000(0000) knlGS:0000000000000000 [ 75.689247][ T5317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.692045][ T5317] CR2: 00007f5ed2e6c000 CR3: 000000001f5bd000 CR4: 0000000000352ef0 [ 75.695405][ T5317] Call Trace: [ 75.696828][ T5317] [ 75.698167][ T5317] ext4_mb_use_preallocated+0x638/0x13e0 [ 75.700558][ T5317] ext4_mb_new_blocks+0x5a0/0x4530 [ 75.702758][ T5317] ? do_raw_spin_unlock+0x4d/0x200 [ 75.705003][ T5317] ? _raw_spin_unlock+0x28/0x50 [ 75.707303][ T5317] ? __pfx_ext4_new_meta_blocks+0x10/0x10 [ 75.709815][ T5317] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 75.712268][ T5317] ? ext4_block_to_path+0x382/0x700 [ 75.714550][ T5317] ext4_ind_map_blocks+0xe96/0x22a0 [ 75.716782][ T5317] ? __pfx_ext4_ind_map_blocks+0x10/0x10 [ 75.719263][ T5317] ? kasan_save_track+0x4f/0x80 [ 75.721377][ T5317] ? __kasan_slab_alloc+0x6c/0x80 [ 75.723589][ T5317] ? down_write+0x16b/0x200 [ 75.725640][ T5317] ext4_map_create_blocks+0xbb/0x530 [ 75.727985][ T5317] ? ext4_fc_track_inode+0xf3/0x3f0 [ 75.730351][ T5317] ext4_map_blocks+0x791/0x12c0 [ 75.732504][ T5317] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 75.734886][ T5317] ? __pfx_ext4_map_blocks+0x10/0x10 [ 75.737204][ T5317] ? kmem_cache_alloc_noprof+0x156/0x600 [ 75.739607][ T5317] ext4_do_writepages+0x1901/0x4770 [ 75.741862][ T5317] ? __pfx_ext4_do_writepages+0x10/0x10 [ 75.744326][ T5317] ? lock_acquire+0x115/0x350 [ 75.746472][ T5317] ext4_writepages+0x241/0x3b0 [ 75.748571][ T5317] ? __lock_acquire+0x747/0x2de0 [ 75.750740][ T5317] ? __pfx_ext4_writepages+0x10/0x10 [ 75.752937][ T5317] ? __pfx_ext4_writepages+0x10/0x10 [ 75.755161][ T5317] do_writepages+0x338/0x560 [ 75.757227][ T5317] ? do_raw_spin_unlock+0x4d/0x200 [ 75.759432][ T5317] file_write_and_wait_range+0x36e/0x440 [ 75.761930][ T5317] ? __pfx_file_write_and_wait_range+0x10/0x10 [ 75.764657][ T5317] ext4_sync_file+0x252/0xa40 [ 75.766791][ T5317] ext4_buffered_write_iter+0x2d0/0x380 [ 75.769188][ T5317] ext4_file_write_iter+0xae4/0x1cd0 [ 75.771318][ T5317] ? io_submit_one+0x134/0x13d0 [ 75.773359][ T5317] ? kasan_save_track+0x4f/0x80 [ 75.775359][ T5317] ? kasan_save_track+0x3e/0x80 [ 75.777316][ T5317] ? lock_acquire+0x115/0x350 [ 75.779206][ T5317] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 75.781546][ T5317] ? aio_write+0x54a/0x870 [ 75.783428][ T5317] aio_write+0x5d0/0x870 [ 75.785332][ T5317] ? __pfx_aio_write+0x10/0x10 [ 75.787423][ T5317] io_submit_one+0x798/0x13d0 [ 75.789586][ T5317] ? lockdep_hardirqs_on+0x7b/0x110 [ 75.791809][ T5317] ? irqentry_exit+0x218/0x910 [ 75.793965][ T5317] ? __pfx_io_submit_one+0x10/0x10 [ 75.796157][ T5317] ? lock_acquire+0x115/0x350 [ 75.798238][ T5317] ? __might_fault+0xaf/0x130 [ 75.800305][ T5317] __se_sys_io_submit+0x195/0x340 [ 75.802622][ T5317] ? __pfx___se_sys_io_submit+0x10/0x10 [ 75.805170][ T5317] do_syscall_64+0x166/0x520 [ 75.807223][ T5317] ? trace_irq_disable+0x3b/0x140 [ 75.809489][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.812233][ T5317] ? clear_bhb_loop+0x70/0xc0 [ 75.814358][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.817016][ T5317] RIP: 0033:0x7f3bed99e159 [ 75.819066][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.827978][ T5317] RSP: 002b:00007f3bee93bfe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 75.831579][ T5317] RAX: ffffffffffffffda RBX: 00007f3bedc25fa0 RCX: 00007f3bed99e159 [ 75.834966][ T5317] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 00007f3bee8fa000 [ 75.838335][ T5317] RBP: 00007f3beda3506b R08: 0000000000000000 R09: 0000000000000000 [ 75.841722][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.845099][ T5317] R13: 00007f3bedc26038 R14: 00007f3bedc25fa0 R15: 00007ffe172c7218 [ 75.848289][ T5317] [ 75.849658][ T5317] Modules linked in: [ 75.852144][ T5317] ---[ end trace 0000000000000000 ]--- [ 75.855079][ T5317] RIP: 0010:ext4_mb_use_inode_pa+0x6bf/0x720 [ 75.855105][ T5317] Code: e8 a6 c1 a1 ff 48 ba 00 00 00 00 00 fc ff df e9 d7 fa ff ff e8 a2 1e 30 ff 90 0f 0b e8 9a 1e 30 ff 90 0f 0b e8 92 1e 30 ff 90 <0f> 0b e8 8a 1e 30 ff 90 0f 0b 48 8b 0c 24 48 83 c1 54 80 e1 07 80 [ 75.855113][ T5317] RSP: 0018:ffffc9000dd76840 EFLAGS: 00010283 [ 75.855125][ T5317] RAX: ffffffff8297ddae RBX: 00000000fffffff4 RCX: 0000000000100000 [ 75.855134][ T5317] RDX: ffffc9000ed82000 RSI: 00000000000065d4 RDI: 00000000000065d5 [ 75.855141][ T5317] RBP: 1ffff11008a0207b R08: ffff88804501498b R09: 1ffff11008a02931 [ 75.855149][ T5317] R10: dffffc0000000000 R11: ffffed1008a02932 R12: 0000000000000000 [ 75.855157][ T5317] R13: 0000000000000022 R14: 1ffff11008a02934 R15: ffff8880450149a0 [ 75.855164][ T5317] FS: 00007f3bee93c6c0(0000) GS:ffff88808c2bc000(0000) knlGS:0000000000000000 [ 75.855174][ T5317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.855181][ T5317] CR2: 00007f5ed2e6c000 CR3: 000000001f5bd000 CR4: 0000000000352ef0 [ 75.855224][ T5317] Kernel panic - not syncing: Fatal exception [ 75.897821][ T5317] Kernel Offset: disabled [ 75.899714][ T5317] Rebooting in 86400 seconds..