program: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noauto_da_alloc}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@user_xattr}, {@quota}, {@delalloc}]}, 0x1, 0x553, &(0x7f0000001080)="$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") sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001040)="3c56a9", 0x3}], 0x1}}], 0x1, 0x4800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000001040)=ANY=[], 0x841, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r2, &(0x7f00000000c0)={0x18}, 0xfffffdef) [ 87.622464][ T5295] Bluetooth: hci0: command tx timeout [ 87.904862][ T5316] loop0: detected capacity change from 0 to 1024 [ 87.952380][ T5316] ======================================================= [ 87.952380][ T5316] WARNING: The mand mount option has been deprecated and [ 87.952380][ T5316] and is ignored by this kernel. Remove the mand [ 87.952380][ T5316] option from the mount to silence this warning. [ 87.952380][ T5316] ======================================================= [ 88.009129][ T5316] EXT4-fs: Ignoring removed oldalloc option [ 88.019826][ T5316] EXT4-fs: Ignoring removed orlov option [ 88.042903][ T5316] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 88.072792][ T5316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.183533][ T5316] EXT4-fs error (device loop0): ext4_ext_split:1081: inode #15: comm syz.0.0: p_ext > EXT_MAX_EXTENT! [ 88.219325][ T1094] EXT4-fs (loop0): start 0, size 131072, fe_logical 131072 [ 88.232219][ T1094] ------------[ cut here ]------------ [ 88.234365][ T1094] kernel BUG at fs/ext4/mballoc.c:4658! [ 88.240631][ T1094] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 88.243281][ T1094] CPU: 0 UID: 0 PID: 1094 Comm: kworker/u4:8 Not tainted syzkaller #0 PREEMPT(full) [ 88.247597][ T1094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.251983][ T1094] Workqueue: writeback wb_workfn (flush-7:0) [ 88.254739][ T1094] RIP: 0010:ext4_mb_normalize_request+0x1cc9/0x1d00 [ 88.257574][ T1094] Code: 60 a5 ff 48 8b 44 24 38 48 8b 38 48 c7 c6 00 30 e4 8b 48 c7 c2 80 48 e4 8b 48 8b 4c 24 28 4d 89 f0 49 89 d9 e8 98 65 0a 00 90 <0f> 0b e8 20 a9 39 ff 90 0f 0b e8 18 a9 39 ff 90 0f 0b e8 10 a9 39 [ 88.265767][ T1094] RSP: 0018:ffffc90000d8e560 EFLAGS: 00010246 [ 88.268388][ T1094] RAX: 7b5818d613a89700 RBX: 0000000000020000 RCX: 7b5818d613a89700 [ 88.271900][ T1094] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 88.275381][ T1094] RBP: 0000000000000000 R08: ffffc90000d8e1a7 R09: 1ffff920001b1c34 [ 88.278811][ T1094] R10: dffffc0000000000 R11: fffff520001b1c35 R12: ffffffff00020800 [ 88.282225][ T1094] R13: dffffc0000000000 R14: 0000000000020000 R15: 0000000000020000 [ 88.285722][ T1094] FS: 0000000000000000(0000) GS:ffff88808ca5b000(0000) knlGS:0000000000000000 [ 88.289615][ T1094] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.292668][ T1094] CR2: 00007ffb663456a0 CR3: 0000000033908000 CR4: 0000000000352ef0 [ 88.296259][ T1094] Call Trace: [ 88.297784][ T1094] [ 88.299201][ T1094] ext4_mb_new_blocks+0xc7f/0x4780 [ 88.301596][ T1094] ? irqentry_exit+0x59e/0x620 [ 88.303865][ T1094] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 88.306262][ T1094] ? ext4_ext_check_overlap+0x438/0x580 [ 88.308846][ T1094] ? ext4_ext_find_goal+0xf0/0x1e0 [ 88.311309][ T1094] ext4_ext_map_blocks+0x150a/0x58b0 [ 88.313760][ T1094] ? ret_from_fork_asm+0x1a/0x30 [ 88.316037][ T1094] ? ret_from_fork_asm+0x1a/0x30 [ 88.318096][ T1094] ? __lock_acquire+0x6b5/0x2cf0 [ 88.320400][ T1094] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 88.322945][ T1094] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 88.325466][ T1094] ? kasan_save_track+0x4f/0x80 [ 88.327643][ T1094] ? kasan_save_track+0x3e/0x80 [ 88.329762][ T1094] ? __kasan_slab_alloc+0x6c/0x80 [ 88.331926][ T1094] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 88.335273][ T1094] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 88.337756][ T1094] ? ext4_do_writepages+0x11c3/0x46e0 [ 88.340104][ T1094] ? ext4_writepages+0x241/0x3b0 [ 88.342207][ T1094] ? do_writepages+0x32e/0x550 [ 88.344416][ T1094] ? __writeback_single_inode+0x133/0x11a0 [ 88.347061][ T1094] ext4_map_create_blocks+0x11d/0x540 [ 88.349622][ T1094] ext4_map_blocks+0x7cd/0x11d0 [ 88.351753][ T1094] ? __pfx_ext4_map_blocks+0x10/0x10 [ 88.354066][ T1094] ? ext4_inode_journal_mode+0x193/0x470 [ 88.356551][ T1094] ext4_do_writepages+0x22c0/0x46e0 [ 88.358926][ T1094] ? __pfx_ext4_do_writepages+0x10/0x10 [ 88.361401][ T1094] ? __lock_acquire+0x6b5/0x2cf0 [ 88.363684][ T1094] ? filemap_get_folios_tag+0x558/0x660 [ 88.366280][ T1094] ? filemap_get_folios_tag+0x10a/0x660 [ 88.368743][ T1094] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 88.371399][ T1094] ext4_writepages+0x241/0x3b0 [ 88.373603][ T1094] ? __pfx_ext4_writepages+0x10/0x10 [ 88.376047][ T1094] ? __pfx_ext4_writepages+0x10/0x10 [ 88.378408][ T1094] do_writepages+0x32e/0x550 [ 88.380287][ T1094] ? reacquire_held_locks+0x104/0x190 [ 88.382603][ T1094] ? writeback_sb_inodes+0x43d/0x19a0 [ 88.384752][ T1094] __writeback_single_inode+0x133/0x11a0 [ 88.387287][ T1094] ? do_raw_spin_unlock+0x4d/0x210 [ 88.389607][ T1094] writeback_sb_inodes+0x944/0x19a0 [ 88.391844][ T1094] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 88.394260][ T1094] ? __pfx_down_read_trylock+0x10/0x10 [ 88.396712][ T1094] ? __pfx___up_read+0x10/0x10 [ 88.398888][ T1094] __writeback_inodes_wb+0x111/0x240 [ 88.401214][ T1094] wb_writeback+0x46a/0xb70 [ 88.403273][ T1094] ? queue_io+0x1e1/0x4a0 [ 88.405236][ T1094] ? __pfx_wb_writeback+0x10/0x10 [ 88.407509][ T1094] ? do_raw_spin_lock+0x12b/0x2f0 [ 88.409822][ T1094] wb_workfn+0x95b/0xf50 [ 88.411613][ T1094] ? __pfx_wb_workfn+0x10/0x10 [ 88.413697][ T1094] ? do_raw_spin_lock+0x12b/0x2f0 [ 88.415766][ T1094] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 88.418066][ T1094] ? process_scheduled_works+0xa25/0x1830 [ 88.420474][ T1094] ? process_scheduled_works+0xa25/0x1830 [ 88.422939][ T1094] process_scheduled_works+0xb02/0x1830 [ 88.425424][ T1094] ? __pfx_process_scheduled_works+0x10/0x10 [ 88.428020][ T1094] ? assign_work+0x3d5/0x5e0 [ 88.430038][ T1094] worker_thread+0xa50/0xfc0 [ 88.431858][ T1094] kthread+0x388/0x470 [ 88.433549][ T1094] ? __pfx_worker_thread+0x10/0x10 [ 88.435581][ T1094] ? __pfx_kthread+0x10/0x10 [ 88.437469][ T1094] ret_from_fork+0x51e/0xb90 [ 88.439222][ T1094] ? __pfx_ret_from_fork+0x10/0x10 [ 88.441269][ T1094] ? __switch_to+0xc7d/0x1450 [ 88.443187][ T1094] ? __pfx_kthread+0x10/0x10 [ 88.445337][ T1094] ret_from_fork_asm+0x1a/0x30 [ 88.447542][ T1094] [ 88.448975][ T1094] Modules linked in: [ 88.451992][ T1094] ---[ end trace 0000000000000000 ]---