program: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8) io_setup(0x1, &(0x7f00000004c0)=0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x22000406, &(0x7f00000009c0)={[], [], 0x2c}, 0x83, 0x4bb, &(0x7f0000000280)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x40086604, &(0x7f0000000000)=@v2={0x2, @aes256, 0x0, '\x00', @c}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x3]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x10d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x8f, 0x0, 0x1}]}) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000140)='i', 0xa800, 0xe00}]) [ 93.007755][ T5277] Bluetooth: hci0: command tx timeout [ 93.016130][ T806] cfg80211: failed to load regulatory.db [ 93.103303][ T5313] loop0: detected capacity change from 0 to 512 [ 93.186338][ T5313] EXT4-fs (loop0): 1 truncate cleaned up [ 93.197660][ T5313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.300012][ T5313] loop0: detected capacity change from 512 to 64 [ 93.317994][ T5313] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.0: corrupted xattr entries [ 93.389725][ T5313] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.0: corrupted xattr entries [ 93.417501][ T5313] syz.0.0: attempt to access beyond end of device [ 93.417501][ T5313] loop0: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 93.417530][ T5313] EXT4-fs warning (device loop0): ext4_end_bio:364: I/O error 10 writing to inode 15 starting block 36) [ 93.417603][ T5313] Buffer I/O error on device loop0, logical block 36 [ 93.458177][ T72] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm kworker/u4:5: corrupted inode contents [ 93.466649][ T5313] syz.0.0: attempt to access beyond end of device [ 93.466649][ T5313] loop0: rw=2049, sector=136, nr_sectors = 18 limit=64 [ 93.466676][ T5313] EXT4-fs warning (device loop0): ext4_end_bio:364: I/O error 10 writing to inode 15 starting block 68) [ 93.466695][ T5313] Buffer I/O error on device loop0, logical block 68 [ 93.486212][ T5313] Buffer I/O error on device loop0, logical block 69 [ 93.486233][ T5313] Buffer I/O error on device loop0, logical block 70 [ 93.486240][ T5313] Buffer I/O error on device loop0, logical block 71 [ 93.486247][ T5313] Buffer I/O error on device loop0, logical block 72 [ 93.486262][ T5313] Buffer I/O error on device loop0, logical block 73 [ 93.486271][ T5313] Buffer I/O error on device loop0, logical block 74 [ 93.486278][ T5313] Buffer I/O error on device loop0, logical block 75 [ 93.486285][ T5313] Buffer I/O error on device loop0, logical block 76 [ 93.521578][ T72] EXT4-fs error (device loop0): ext4_dirty_inode:6736: inode #15: comm kworker/u4:5: mark_inode_dirty error [ 93.523699][ T72] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm kworker/u4:5: corrupted inode contents [ 93.524162][ T72] EXT4-fs error (device loop0): ext4_dirty_inode:6736: inode #15: comm kworker/u4:5: mark_inode_dirty error [ 93.590964][ T5313] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.0: corrupted inode contents [ 93.605157][ T5313] EXT4-fs error (device loop0): ext4_dirty_inode:6736: inode #15: comm syz.0.0: mark_inode_dirty error [ 93.607573][ T5313] ------------[ cut here ]------------ [ 93.607583][ T5313] kernel BUG at fs/ext4/mballoc.c:4781! [ 93.607622][ T5313] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 93.620059][ T5313] CPU: 0 UID: 0 PID: 5313 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.624056][ T5313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.628661][ T5313] RIP: 0010:ext4_mb_use_inode_pa+0x6bf/0x720 [ 93.631705][ T5313] Code: e8 96 c1 a1 ff 48 ba 00 00 00 00 00 fc ff df e9 d7 fa ff ff e8 f2 1e 30 ff 90 0f 0b e8 ea 1e 30 ff 90 0f 0b e8 e2 1e 30 ff 90 <0f> 0b e8 da 1e 30 ff 90 0f 0b 48 8b 0c 24 48 83 c1 54 80 e1 07 80 [ 93.639946][ T5313] RSP: 0018:ffffc9000df0e840 EFLAGS: 00010287 [ 93.642519][ T5313] RAX: ffffffff8297ce2e RBX: 00000000fffffff3 RCX: 0000000000100000 [ 93.645934][ T5313] RDX: ffffc9000edc2000 RSI: 0000000000008655 RDI: 0000000000008656 [ 93.649270][ T5313] RBP: 1ffff110087c94d2 R08: ffff888043e4f07b R09: 1ffff110087c9e0f [ 93.652848][ T5313] R10: dffffc0000000000 R11: ffffed10087c9e10 R12: 0000000000000000 [ 93.656334][ T5313] R13: 0000000000000022 R14: 1ffff110087c9e12 R15: ffff888043e4f090 [ 93.659771][ T5313] FS: 00007f26fd6156c0(0000) GS:ffff88808c2be000(0000) knlGS:0000000000000000 [ 93.663497][ T5313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.666443][ T5313] CR2: 000055d5d3acd660 CR3: 0000000044328000 CR4: 0000000000352ef0 [ 93.670091][ T5313] Call Trace: [ 93.671658][ T5313] [ 93.673091][ T5313] ext4_mb_use_preallocated+0x638/0x13e0 [ 93.675555][ T5313] ext4_mb_new_blocks+0x5a0/0x4530 [ 93.677685][ T5313] ? do_raw_spin_unlock+0x4d/0x200 [ 93.679874][ T5313] ? _raw_spin_unlock+0x28/0x50 [ 93.681986][ T5313] ? __pfx_ext4_new_meta_blocks+0x10/0x10 [ 93.684466][ T5313] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 93.686833][ T5313] ? ext4_block_to_path+0x382/0x700 [ 93.694359][ T5313] ext4_ind_map_blocks+0xe96/0x22a0 [ 93.696644][ T5313] ? __pfx_ext4_ind_map_blocks+0x10/0x10 [ 93.698986][ T5313] ? kasan_save_track+0x4f/0x80 [ 93.701026][ T5313] ? __kasan_slab_alloc+0x6c/0x80 [ 93.703287][ T5313] ? down_write+0x16b/0x200 [ 93.705263][ T5313] ext4_map_create_blocks+0xbb/0x530 [ 93.707528][ T5313] ? ext4_fc_track_inode+0xf3/0x3f0 [ 93.709753][ T5313] ext4_map_blocks+0x791/0x12c0 [ 93.711863][ T5313] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 93.714106][ T5313] ? __pfx_ext4_map_blocks+0x10/0x10 [ 93.716343][ T5313] ? kmem_cache_alloc_noprof+0x156/0x600 [ 93.718793][ T5313] ext4_do_writepages+0x1901/0x4770 [ 93.721090][ T5313] ? __lock_acquire+0x747/0x2de0 [ 93.723234][ T5313] ? __pfx_ext4_do_writepages+0x10/0x10 [ 93.725571][ T5313] ? __lock_acquire+0x747/0x2de0 [ 93.727761][ T5313] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 93.730204][ T5313] ? debug_object_free+0x29c/0x340 [ 93.732396][ T5313] ? lock_acquire+0x115/0x350 [ 93.734333][ T5313] ext4_writepages+0x241/0x3b0 [ 93.736313][ T5313] ? __pfx_ext4_writepages+0x10/0x10 [ 93.738440][ T5313] ? __pfx_ext4_writepages+0x10/0x10 [ 93.740428][ T5313] do_writepages+0x338/0x560 [ 93.742372][ T5313] ? do_raw_spin_unlock+0x4d/0x200 [ 93.744730][ T5313] file_write_and_wait_range+0x36e/0x440 [ 93.747099][ T5313] ? __pfx_file_write_and_wait_range+0x10/0x10 [ 93.749445][ T5313] ext4_sync_file+0x252/0xa40 [ 93.751328][ T5313] ext4_buffered_write_iter+0x2d0/0x380 [ 93.753828][ T5313] ext4_file_write_iter+0xae4/0x1cd0 [ 93.756330][ T5313] ? io_submit_one+0x134/0x13d0 [ 93.758434][ T5313] ? kasan_save_track+0x4f/0x80 [ 93.760544][ T5313] ? kasan_save_track+0x3e/0x80 [ 93.762655][ T5313] ? lock_acquire+0x115/0x350 [ 93.764837][ T5313] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 93.767513][ T5313] ? aio_write+0x54a/0x870 [ 93.769406][ T5313] aio_write+0x5d0/0x870 [ 93.771255][ T5313] ? __pfx_aio_write+0x10/0x10 [ 93.773260][ T5313] io_submit_one+0x798/0x13d0 [ 93.775361][ T5313] ? lockdep_hardirqs_on+0x7b/0x110 [ 93.777478][ T5313] ? irqentry_exit+0x218/0x910 [ 93.779595][ T5313] ? __pfx_io_submit_one+0x10/0x10 [ 93.781729][ T5313] ? lock_acquire+0x115/0x350 [ 93.783861][ T5313] ? __might_fault+0xaf/0x130 [ 93.786028][ T5313] __se_sys_io_submit+0x195/0x340 [ 93.788286][ T5313] ? __pfx___se_sys_io_submit+0x10/0x10 [ 93.790682][ T5313] do_syscall_64+0x166/0x520 [ 93.792894][ T5313] ? trace_irq_disable+0x3b/0x140 [ 93.795152][ T5313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.797861][ T5313] ? clear_bhb_loop+0x70/0xc0 [ 93.800018][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.802705][ T5313] RIP: 0033:0x7f26fc79e159 [ 93.804793][ T5313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.813303][ T5313] RSP: 002b:00007f26fd614fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 93.816841][ T5313] RAX: ffffffffffffffda RBX: 00007f26fca25fa0 RCX: 00007f26fc79e159 [ 93.820412][ T5313] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 00007f26fd5d3000 [ 93.823927][ T5313] RBP: 00007f26fc83506b R08: 0000000000000000 R09: 0000000000000000 [ 93.827290][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.830802][ T5313] R13: 00007f26fca26038 R14: 00007f26fca25fa0 R15: 00007ffd068b25b8 [ 93.834266][ T5313] [ 93.837457][ T5313] Modules linked in: [ 93.842765][ T5313] ---[ end trace 0000000000000000 ]--- [ 93.844854][ T5313] RIP: 0010:ext4_mb_use_inode_pa+0x6bf/0x720 [ 93.844898][ T5313] Code: e8 96 c1 a1 ff 48 ba 00 00 00 00 00 fc ff df e9 d7 fa ff ff e8 f2 1e 30 ff 90 0f 0b e8 ea 1e 30 ff 90 0f 0b e8 e2 1e 30 ff 90 <0f> 0b e8 da 1e 30 ff 90 0f 0b 48 8b 0c 24 48 83 c1 54 80 e1 07 80 [ 93.844910][ T5313] RSP: 0018:ffffc9000df0e840 EFLAGS: 00010287 [ 93.844922][ T5313] RAX: ffffffff8297ce2e RBX: 00000000fffffff3 RCX: 0000000000100000 [ 93.844930][ T5313] RDX: ffffc9000edc2000 RSI: 0000000000008655 RDI: 0000000000008656 [ 93.844939][ T5313] RBP: 1ffff110087c94d2 R08: ffff888043e4f07b R09: 1ffff110087c9e0f [ 93.844945][ T5313] R10: dffffc0000000000 R11: ffffed10087c9e10 R12: 0000000000000000 [ 93.844951][ T5313] R13: 0000000000000022 R14: 1ffff110087c9e12 R15: ffff888043e4f090 [ 93.844956][ T5313] FS: 00007f26fd6156c0(0000) GS:ffff88808c2be000(0000) knlGS:0000000000000000 [ 93.844970][ T5313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.844975][ T5313] CR2: 000055d5d3acd660 CR3: 0000000044328000 CR4: 0000000000352ef0 [ 93.845005][ T5313] Kernel panic - not syncing: Fatal exception [ 93.889682][ T5313] Kernel Offset: disabled [ 93.891470][ T5313] Rebooting in 86400 seconds..