program: syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) [ 76.851333][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.851489][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.985876][ T5283] Bluetooth: hci0: command tx timeout [ 77.035787][ T5319] loop0: detected capacity change from 0 to 512 [ 77.059895][ T5319] EXT4-fs (loop0): invalid journal inode [ 77.059953][ T5319] EXT4-fs (loop0): can't get journal size [ 77.091307][ T5319] EXT4-fs (loop0): 1 truncate cleaned up [ 77.104066][ T5319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.205129][ T5319] loop0: detected capacity change from 512 to 64 [ 77.245969][ T67] kworker/u4:4: attempt to access beyond end of device [ 77.245969][ T67] loop0: rw=1, sector=258, nr_sectors = 2 limit=64 [ 77.245995][ T67] EXT4-fs warning (device loop0): ext4_end_bio:364: I/O error 10 writing to inode 15 starting block 129) [ 77.246051][ T67] Buffer I/O error on device loop0, logical block 129 [ 77.246176][ T67] kworker/u4:4: attempt to access beyond end of device [ 77.246176][ T67] loop0: rw=1, sector=264, nr_sectors = 2 limit=64 [ 77.246189][ T67] EXT4-fs warning (device loop0): ext4_end_bio:364: I/O error 10 writing to inode 15 starting block 132) [ 77.246203][ T67] Buffer I/O error on device loop0, logical block 132 [ 77.247527][ T67] kworker/u4:4: attempt to access beyond end of device [ 77.247527][ T67] loop0: rw=1, sector=266, nr_sectors = 16 limit=64 [ 77.247543][ T67] EXT4-fs warning (device loop0): ext4_end_bio:364: I/O error 10 writing to inode 15 starting block 133) [ 77.247553][ T67] Buffer I/O error on device loop0, logical block 133 [ 77.247557][ T67] Buffer I/O error on device loop0, logical block 134 [ 77.247562][ T67] Buffer I/O error on device loop0, logical block 135 [ 77.247566][ T67] Buffer I/O error on device loop0, logical block 136 [ 77.247680][ T67] Buffer I/O error on device loop0, logical block 137 [ 77.247688][ T67] Buffer I/O error on device loop0, logical block 138 [ 77.247694][ T67] Buffer I/O error on device loop0, logical block 139 [ 77.247700][ T67] Buffer I/O error on device loop0, logical block 140 [ 77.248213][ T67] ------------[ cut here ]------------ [ 77.248220][ T67] kernel BUG at fs/ext4/mballoc.c:4781! [ 77.248252][ T67] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 77.313935][ T67] CPU: 0 UID: 0 PID: 67 Comm: kworker/u4:4 Not tainted syzkaller #0 PREEMPT(full) [ 77.317863][ T67] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.322386][ T67] Workqueue: writeback wb_workfn (flush-7:0) [ 77.326928][ T67] RIP: 0010:ext4_mb_use_inode_pa+0x6bf/0x720 [ 77.329491][ T67] Code: e8 f6 ca a1 ff 48 ba 00 00 00 00 00 fc ff df e9 d7 fa ff ff e8 d2 24 30 ff 90 0f 0b e8 ca 24 30 ff 90 0f 0b e8 c2 24 30 ff 90 <0f> 0b e8 ba 24 30 ff 90 0f 0b 48 8b 0c 24 48 83 c1 54 80 e1 07 80 [ 77.337626][ T67] RSP: 0018:ffffc90000ae6540 EFLAGS: 00010293 [ 77.340294][ T67] RAX: ffffffff8297bc9e RBX: 00000000fffffffe RCX: ffff8880316a4b00 [ 77.343751][ T67] RDX: 0000000000000000 RSI: 0000000000000034 RDI: 0000000000000032 [ 77.347190][ T67] RBP: 1ffff1100857a0ef R08: ffff888042bd4efb R09: 1ffff1100857a9df [ 77.350920][ T67] R10: dffffc0000000000 R11: ffffed100857a9e0 R12: 0000000000000000 [ 77.354476][ T67] R13: 0000000000000034 R14: 1ffff1100857a9e2 R15: ffff888042bd4f10 [ 77.357988][ T67] FS: 0000000000000000(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000 [ 77.361870][ T67] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.364829][ T67] CR2: 000020000000f000 CR3: 000000004fac3000 CR4: 0000000000352ef0 [ 77.368357][ T67] Call Trace: [ 77.369820][ T67] [ 77.371162][ T67] ext4_mb_use_preallocated+0x638/0x13e0 [ 77.373665][ T67] ext4_mb_new_blocks+0x5a0/0x4530 [ 77.375963][ T67] ? do_raw_spin_unlock+0x4d/0x200 [ 77.378287][ T67] ? _raw_spin_unlock+0x28/0x50 [ 77.380558][ T67] ? __pfx_ext4_new_meta_blocks+0x10/0x10 [ 77.383073][ T67] ? unwind_next_frame+0x1baf/0x2550 [ 77.385506][ T67] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 77.387763][ T67] ? ret_from_fork_asm+0x1a/0x30 [ 77.389835][ T67] ? ext4_block_to_path+0x382/0x700 [ 77.392156][ T67] ext4_ind_map_blocks+0xe96/0x22a0 [ 77.394529][ T67] ? __pfx_ext4_ind_map_blocks+0x10/0x10 [ 77.397055][ T67] ? kasan_save_track+0x4f/0x80 [ 77.399155][ T67] ? __kasan_slab_alloc+0x6c/0x80 [ 77.401428][ T67] ? down_write+0x16b/0x200 [ 77.403445][ T67] ext4_map_create_blocks+0xbb/0x530 [ 77.405897][ T67] ? ext4_fc_track_inode+0xf3/0x3f0 [ 77.408279][ T67] ext4_map_blocks+0x791/0x12c0 [ 77.410407][ T67] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 77.412775][ T67] ? __pfx_ext4_map_blocks+0x10/0x10 [ 77.415006][ T67] ? kmem_cache_alloc_noprof+0x156/0x600 [ 77.417438][ T67] ext4_do_writepages+0x1901/0x4770 [ 77.420012][ T67] ? __pfx_ext4_do_writepages+0x10/0x10 [ 77.422359][ T67] ? __lock_acquire+0x747/0x2de0 [ 77.424680][ T67] ? filemap_get_folios_tag+0x639/0x720 [ 77.427491][ T67] ? filemap_get_folios_tag+0x118/0x720 [ 77.430168][ T67] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 77.432789][ T67] ? lock_acquire+0x115/0x350 [ 77.434766][ T67] ext4_writepages+0x241/0x3b0 [ 77.436778][ T67] ? __pfx_ext4_writepages+0x10/0x10 [ 77.438957][ T67] ? __pfx_ext4_writepages+0x10/0x10 [ 77.441188][ T67] do_writepages+0x338/0x560 [ 77.443192][ T67] ? do_raw_spin_lock+0x12b/0x2f0 [ 77.445367][ T67] ? reacquire_held_locks+0x117/0x1a0 [ 77.447637][ T67] ? writeback_sb_inodes+0x450/0x1b00 [ 77.449869][ T67] __writeback_single_inode+0x136/0x1220 [ 77.452260][ T67] ? do_raw_spin_unlock+0x4d/0x200 [ 77.454464][ T67] writeback_sb_inodes+0x9de/0x1b00 [ 77.456695][ T67] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 77.459098][ T67] ? __pfx_down_read_trylock+0x10/0x10 [ 77.461403][ T67] ? __pfx___up_read+0x10/0x10 [ 77.463449][ T67] __writeback_inodes_wb+0x114/0x240 [ 77.465695][ T67] wb_writeback+0x42f/0xad0 [ 77.467662][ T67] ? queue_io+0x241/0x470 [ 77.469466][ T67] ? __pfx_wb_writeback+0x10/0x10 [ 77.471560][ T67] ? do_raw_spin_lock+0x12b/0x2f0 [ 77.473762][ T67] wb_workfn+0x980/0x10f0 [ 77.475723][ T67] ? __pfx_wb_workfn+0x10/0x10 [ 77.477839][ T67] ? trace_hrtimer_start+0x82/0x200 [ 77.480145][ T67] ? do_raw_spin_lock+0x12b/0x2f0 [ 77.482344][ T67] ? lock_acquire+0x115/0x350 [ 77.484256][ T67] ? rcu_is_watching+0x16/0xb0 [ 77.486297][ T67] ? process_scheduled_works+0x97a/0x1630 [ 77.488736][ T67] process_scheduled_works+0xc3d/0x1630 [ 77.491156][ T67] ? __pfx_process_scheduled_works+0x10/0x10 [ 77.493689][ T67] ? assign_work+0x3cf/0x5d0 [ 77.495499][ T67] worker_thread+0xa47/0xfb0 [ 77.497534][ T67] ? __kthread_parkme+0x71/0x1f0 [ 77.499715][ T67] kthread+0x38b/0x480 [ 77.501557][ T67] ? __pfx_worker_thread+0x10/0x10 [ 77.503755][ T67] ? __pfx_kthread+0x10/0x10 [ 77.505967][ T67] ret_from_fork+0x514/0xb70 [ 77.508050][ T67] ? __pfx_ret_from_fork+0x10/0x10 [ 77.510280][ T67] ? __switch_to+0xc89/0x1420 [ 77.512399][ T67] ? __pfx_kthread+0x10/0x10 [ 77.514432][ T67] ret_from_fork_asm+0x1a/0x30 [ 77.516453][ T67] [ 77.517884][ T67] Modules linked in: [ 77.520919][ T67] ---[ end trace 0000000000000000 ]--- [ 77.524240][ T67] RIP: 0010:ext4_mb_use_inode_pa+0x6bf/0x720 [ 77.524265][ T67] Code: e8 f6 ca a1 ff 48 ba 00 00 00 00 00 fc ff df e9 d7 fa ff ff e8 d2 24 30 ff 90 0f 0b e8 ca 24 30 ff 90 0f 0b e8 c2 24 30 ff 90 <0f> 0b e8 ba 24 30 ff 90 0f 0b 48 8b 0c 24 48 83 c1 54 80 e1 07 80 [ 77.524276][ T67] RSP: 0018:ffffc90000ae6540 EFLAGS: 00010293 [ 77.524287][ T67] RAX: ffffffff8297bc9e RBX: 00000000fffffffe RCX: ffff8880316a4b00 [ 77.524296][ T67] RDX: 0000000000000000 RSI: 0000000000000034 RDI: 0000000000000032 [ 77.524303][ T67] RBP: 1ffff1100857a0ef R08: ffff888042bd4efb R09: 1ffff1100857a9df [ 77.524311][ T67] R10: dffffc0000000000 R11: ffffed100857a9e0 R12: 0000000000000000 [ 77.524318][ T67] R13: 0000000000000034 R14: 1ffff1100857a9e2 R15: ffff888042bd4f10 [ 77.524327][ T67] FS: 0000000000000000(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000 [ 77.524337][ T67] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.524345][ T67] CR2: 000020000000f000 CR3: 000000004fac3000 CR4: 0000000000352ef0 [ 77.524382][ T67] Kernel panic - not syncing: Fatal exception [ 77.568771][ T67] Kernel Offset: disabled [ 77.570741][ T67] Rebooting in 86400 seconds..