program: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc9, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x1801, 0x3, 0xf, 0x1, 0x8, 0x1fc, 0xffff, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@bsdgroups}, {@noinit_itable}, {@noinit_itable}]}, 0xfc, 0x574, &(0x7f0000001980)="$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") ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x7f, 0x0, 0xffffffffffffffff}) ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY(0xffffffffffffffff, 0x80207501, &(0x7f0000000140)={0x0, 0xffff, 0x8, &(0x7f0000000100)}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ptrace$setregs(0xd, r2, 0x2, 0x0) ptrace$cont(0x21, r2, 0x5, 0x4) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f0000000240)={r1, 0xffff, 0x0, 0x0, r2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42842, 0x8d) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x5425, 0x1, 0x81) [ 124.985985][ T5282] Bluetooth: hci0: command tx timeout [ 125.197668][ T5319] loop0: detected capacity change from 0 to 1024 [ 125.371342][ T5319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.417552][ T74] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 125.427180][ T74] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 125.427205][ T74] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.427205][ T74] [ 125.427212][ T74] EXT4-fs (loop0): Total free blocks count 0 [ 125.427220][ T74] EXT4-fs (loop0): Free/Dirty block details [ 125.427238][ T74] EXT4-fs (loop0): free_blocks=68451041280 [ 125.427253][ T74] EXT4-fs (loop0): dirty_blocks=48 [ 125.427263][ T74] EXT4-fs (loop0): Block reservation details [ 125.427271][ T74] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 125.427735][ T74] ------------[ cut here ]------------ [ 125.427742][ T74] kernel BUG at fs/ext4/inode.c:2816! [ 125.427756][ T74] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 125.459082][ T74] CPU: 0 UID: 0 PID: 74 Comm: kworker/u4:5 Not tainted syzkaller #0 PREEMPT(full) [ 125.462944][ T74] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.467163][ T74] Workqueue: writeback wb_workfn (flush-7:0) [ 125.469979][ T74] RIP: 0010:ext4_do_writepages+0x4768/0x4770 [ 125.472483][ T74] Code: c6 a0 2a 26 8c e8 58 a8 95 fe 90 0f 0b e8 00 73 35 ff 4c 89 f7 48 c7 c6 80 2f 26 8c e8 41 a8 95 fe 90 0f 0b e8 e9 72 35 ff 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 125.480599][ T74] RSP: 0018:ffffc90000af6c60 EFLAGS: 00010293 [ 125.483129][ T74] RAX: ffffffff82927a27 RBX: 0000006a10000000 RCX: ffff888000218000 [ 125.486435][ T74] RDX: 0000000000000000 RSI: 0000004000000000 RDI: 0000000000000000 [ 125.489777][ T74] RBP: ffffc90000af7070 R08: ffff88804418ed17 R09: 1ffff11008831da2 [ 125.493062][ T74] R10: dffffc0000000000 R11: ffffed1008831da3 R12: ffff88801d0a3738 [ 125.496418][ T74] R13: dffffc0000000000 R14: 0000004000000000 R15: ffff88804418ef00 [ 125.499713][ T74] FS: 0000000000000000(0000) GS:ffff88808c2bf000(0000) knlGS:0000000000000000 [ 125.503603][ T74] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.506459][ T74] CR2: 00007ffdd81adb9c CR3: 0000000012934000 CR4: 0000000000352ef0 [ 125.509876][ T74] Call Trace: [ 125.511351][ T74] [ 125.512643][ T74] ? __lock_acquire+0x747/0x2de0 [ 125.514760][ T74] ? __pfx_ext4_do_writepages+0x10/0x10 [ 125.517040][ T74] ? __lock_acquire+0x747/0x2de0 [ 125.519167][ T74] ? update_se+0x90/0xff0 [ 125.520994][ T74] ? lock_acquire+0x115/0x350 [ 125.524179][ T74] ext4_writepages+0x241/0x3b0 [ 125.526194][ T74] ? __pfx_ext4_writepages+0x10/0x10 [ 125.528359][ T74] ? __queue_work+0x1f8/0x10d0 [ 125.530419][ T74] ? __pfx_ext4_writepages+0x10/0x10 [ 125.532646][ T74] do_writepages+0x338/0x560 [ 125.534646][ T74] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.536837][ T74] ? reacquire_held_locks+0x117/0x1a0 [ 125.539234][ T74] ? writeback_sb_inodes+0x450/0x1b00 [ 125.541587][ T74] __writeback_single_inode+0x136/0x1220 [ 125.543993][ T74] ? do_raw_spin_unlock+0x4d/0x200 [ 125.546248][ T74] writeback_sb_inodes+0x9de/0x1b00 [ 125.548473][ T74] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 125.550912][ T74] ? __pfx_down_read_trylock+0x10/0x10 [ 125.553341][ T74] __writeback_inodes_wb+0x114/0x240 [ 125.555679][ T74] wb_writeback+0x42f/0xad0 [ 125.557769][ T74] ? __pfx_wb_writeback+0x10/0x10 [ 125.560080][ T74] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 125.562716][ T74] wb_workfn+0xc92/0x10f0 [ 125.564648][ T74] ? __pfx_wb_workfn+0x10/0x10 [ 125.566816][ T74] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.569060][ T74] ? lock_acquire+0x115/0x350 [ 125.570851][ T74] ? rcu_is_watching+0x16/0xb0 [ 125.572973][ T74] ? process_scheduled_works+0x97a/0x1630 [ 125.575550][ T74] process_scheduled_works+0xc3d/0x1630 [ 125.578049][ T74] ? __pfx_process_scheduled_works+0x10/0x10 [ 125.580657][ T74] ? assign_work+0x3cf/0x5d0 [ 125.582617][ T74] worker_thread+0xa47/0xfb0 [ 125.584624][ T74] ? __kthread_parkme+0x71/0x1f0 [ 125.586861][ T74] kthread+0x38b/0x480 [ 125.588700][ T74] ? __pfx_worker_thread+0x10/0x10 [ 125.590991][ T74] ? __pfx_kthread+0x10/0x10 [ 125.593054][ T74] ret_from_fork+0x514/0xb70 [ 125.595229][ T74] ? __pfx_ret_from_fork+0x10/0x10 [ 125.597757][ T74] ? __switch_to+0xc89/0x1420 [ 125.599809][ T74] ? __pfx_kthread+0x10/0x10 [ 125.601740][ T74] ret_from_fork_asm+0x1a/0x30 [ 125.603810][ T74] [ 125.605122][ T74] Modules linked in: [ 125.607261][ T74] ---[ end trace 0000000000000000 ]---