program: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@dioread_lock}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xb0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) [ 73.332185][ T45] Bluetooth: hci0: command tx timeout [ 73.571703][ T5321] loop0: detected capacity change from 0 to 512 [ 73.602257][ T5321] EXT4-fs: Ignoring removed oldalloc option [ 73.759432][ T5321] EXT4-fs (loop0): 1 truncate cleaned up [ 73.824317][ T5321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.949269][ T12] ------------[ cut here ]------------ [ 73.961120][ T12] kernel BUG at fs/ext4/inode.c:2803! [ 74.017772][ T12] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 74.020988][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u4:0 Not tainted syzkaller #0 PREEMPT(full) [ 74.035242][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.040473][ T12] Workqueue: writeback wb_workfn (flush-7:0) [ 74.060394][ T12] RIP: 0010:ext4_do_writepages+0x46d6/0x46e0 [ 74.070022][ T12] Code: c6 a0 1d e4 8b e8 da 21 a0 fe 90 0f 0b e8 b2 b6 3d ff 4c 89 f7 48 c7 c6 80 22 e4 8b e8 c3 21 a0 fe 90 0f 0b e8 9b b6 3d ff 90 <0f> 0b 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 74.106639][ T12] RSP: 0018:ffffc9000025ec80 EFLAGS: 00010293 [ 74.110671][ T12] RAX: ffffffff8287f8e5 RBX: 0000004210000000 RCX: ffff88801bb5c980 [ 74.119694][ T12] RDX: 0000000000000000 RSI: 0000004000000000 RDI: 0000000000000000 [ 74.138714][ T12] RBP: ffffc9000025f090 R08: ffff88804757f377 R09: 1ffff11008eafe6e [ 74.143328][ T12] R10: dffffc0000000000 R11: ffffed1008eafe6f R12: dffffc0000000000 [ 74.171285][ T12] R13: 0000000000000001 R14: 0000004000000000 R15: 1ffff11003e91cc7 [ 74.179518][ T12] FS: 0000000000000000(0000) GS:ffff88808ca55000(0000) knlGS:0000000000000000 [ 74.191613][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.198306][ T12] CR2: 000055cbcb08d9c8 CR3: 00000000123e2000 CR4: 0000000000352ef0 [ 74.214302][ T12] Call Trace: [ 74.215934][ T12] [ 74.217262][ T12] ? blk_mq_submit_bio+0xef8/0x2810 [ 74.219805][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 74.236811][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 74.239399][ T12] ? look_up_lock_class+0x57/0x110 [ 74.248243][ T12] ? __pfx_ext4_do_writepages+0x10/0x10 [ 74.250820][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 74.262854][ T12] ? filemap_get_folios_tag+0x558/0x660 [ 74.271123][ T12] ? filemap_get_folios_tag+0x10a/0x660 [ 74.281437][ T12] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 74.292579][ T12] ext4_writepages+0x241/0x3b0 [ 74.295852][ T12] ? __pfx_ext4_writepages+0x10/0x10 [ 74.298460][ T12] ? do_raw_spin_unlock+0x4d/0x210 [ 74.300779][ T12] ? __pfx_ext4_writepages+0x10/0x10 [ 74.314388][ T12] do_writepages+0x32e/0x550 [ 74.317165][ T12] ? reacquire_held_locks+0x104/0x190 [ 74.319836][ T12] ? writeback_sb_inodes+0x477/0x1a20 [ 74.322171][ T12] __writeback_single_inode+0x133/0x11a0 [ 74.338477][ T12] ? do_raw_spin_unlock+0x4d/0x210 [ 74.345577][ T12] writeback_sb_inodes+0x992/0x1a20 [ 74.349213][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 74.353982][ T12] ? __pfx_down_read_trylock+0x10/0x10 [ 74.357248][ T12] ? __pfx___up_read+0x10/0x10 [ 74.369451][ T12] __writeback_inodes_wb+0x111/0x240 [ 74.377846][ T12] wb_writeback+0x46a/0xb70 [ 74.380932][ T12] ? queue_io+0x1d1/0x4a0 [ 74.390489][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 74.396812][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 74.399936][ T12] wb_workfn+0x95b/0xf50 [ 74.408924][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 74.411929][ T12] ? do_raw_spin_unlock+0x4d/0x210 [ 74.415289][ T12] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 74.418278][ T12] ? process_scheduled_works+0xa8d/0x18c0 [ 74.421178][ T12] ? process_scheduled_works+0xa8d/0x18c0 [ 74.438441][ T12] process_scheduled_works+0xb6e/0x18c0 [ 74.440883][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 74.443686][ T12] ? assign_work+0x3d5/0x5e0 [ 74.445944][ T12] worker_thread+0xa53/0xfc0 [ 74.447900][ T12] kthread+0x388/0x470 [ 74.449571][ T12] ? __pfx_worker_thread+0x10/0x10 [ 74.451770][ T12] ? __pfx_kthread+0x10/0x10 [ 74.456299][ T12] ret_from_fork+0x51e/0xb90 [ 74.460903][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 74.466412][ T12] ? __switch_to+0xc7d/0x1450 [ 74.470518][ T12] ? __pfx_kthread+0x10/0x10 [ 74.474880][ T12] ret_from_fork_asm+0x1a/0x30 [ 74.479353][ T12] [ 74.481201][ T12] Modules linked in: [ 74.487368][ T12] ---[ end trace 0000000000000000 ]---