program: syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x62042, 0x40) fallocate(r3, 0x0, 0xeffb, 0xe396) pwritev2(r1, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) [ 90.982868][ T5285] Bluetooth: hci0: command tx timeout [ 91.026822][ T5321] loop0: detected capacity change from 0 to 512 [ 91.058430][ T5321] EXT4-fs (loop0): invalid journal inode [ 91.068410][ T5321] EXT4-fs (loop0): can't get journal size [ 91.102869][ T5321] EXT4-fs (loop0): 1 truncate cleaned up [ 91.113406][ T5321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.149995][ T5321] loop0: detected capacity change from 512 to 64 [ 91.164239][ T5321] lo speed is unknown, defaulting to 1000 [ 91.168810][ T5321] lo speed is unknown, defaulting to 1000 [ 91.172499][ T5321] lo speed is unknown, defaulting to 1000 [ 91.223271][ T5322] syz.0.0: attempt to access beyond end of device [ 91.223271][ T5322] loop0: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 91.239515][ T5322] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 36) [ 91.251376][ T5322] Buffer I/O error on device loop0, logical block 36 [ 91.260581][ T5322] syz.0.0: attempt to access beyond end of device [ 91.260581][ T5322] loop0: rw=2049, sector=80, nr_sectors = 18 limit=64 [ 91.271963][ T5322] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 40) [ 91.282312][ T5322] Buffer I/O error on device loop0, logical block 40 [ 91.294348][ T5322] Buffer I/O error on device loop0, logical block 41 [ 91.297427][ T5322] Buffer I/O error on device loop0, logical block 42 [ 91.300332][ T5322] Buffer I/O error on device loop0, logical block 43 [ 91.303230][ T5322] Buffer I/O error on device loop0, logical block 44 [ 91.335491][ T5321] infiniband sz1: set active [ 91.337574][ T9] lo speed is unknown, defaulting to 1000 [ 91.340063][ T5322] Buffer I/O error on device loop0, logical block 45 [ 91.343289][ T5322] Buffer I/O error on device loop0, logical block 46 [ 91.346181][ T5322] Buffer I/O error on device loop0, logical block 47 [ 91.348897][ T5322] Buffer I/O error on device loop0, logical block 48 [ 91.352319][ T5321] infiniband sz1: added lo [ 91.363702][ T4117] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm kworker/u4:10: corrupted inode contents [ 91.374358][ T4117] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #15: comm kworker/u4:10: mark_inode_dirty error [ 91.382241][ T5321] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 91.401158][ T4117] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm kworker/u4:10: corrupted inode contents [ 91.409931][ T5321] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 91.428935][ T4117] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #15: comm kworker/u4:10: mark_inode_dirty error [ 91.440522][ T5321] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 91.495736][ T5321] RDS/IB: sz1: added [ 91.504405][ T51] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm kworker/u4:4: corrupted inode contents [ 91.512922][ T5321] smc: adding ib device sz1 with port count 1 [ 91.526369][ T51] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #15: comm kworker/u4:4: mark_inode_dirty error [ 91.532930][ T5321] smc: ib device sz1 port 1 has no pnetid [ 91.542087][ T5321] lo speed is unknown, defaulting to 1000 [ 91.552240][ T51] ------------[ cut here ]------------ [ 91.554687][ T51] kernel BUG at fs/ext4/mballoc.c:4780! [ 91.557250][ T51] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 91.560202][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u4:4 Not tainted syzkaller #0 PREEMPT(full) [ 91.564665][ T51] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.569679][ T51] Workqueue: writeback wb_workfn (flush-7:0) [ 91.572685][ T51] RIP: 0010:ext4_mb_use_inode_pa+0x6bf/0x720 [ 91.575474][ T51] Code: e8 46 20 a4 ff 48 ba 00 00 00 00 00 fc ff df e9 d7 fa ff ff e8 c2 5f 35 ff 90 0f 0b e8 ba 5f 35 ff 90 0f 0b e8 b2 5f 35 ff 90 <0f> 0b e8 aa 5f 35 ff 90 0f 0b 48 8b 0c 24 48 83 c1 54 80 e1 07 80 [ 91.584661][ T51] RSP: 0018:ffffc90000ace560 EFLAGS: 00010293 [ 91.587472][ T51] RAX: ffffffff8290d50e RBX: 00000000ffffffcb RCX: ffff888000b14a80 [ 91.591205][ T51] RDX: 0000000000000000 RSI: 0000000000000054 RDI: 000000000000001f [ 91.595799][ T51] RBP: 1ffff11008f486d2 R08: ffff888047a47e13 R09: 1ffff11008f48fc2 [ 91.599238][ T51] R10: dffffc0000000000 R11: ffffed1008f48fc3 R12: 0000000000000000 [ 91.602485][ T51] R13: 0000000000000054 R14: 1ffff11008f48fc5 R15: ffff888047a47e28 [ 91.606410][ T51] FS: 0000000000000000(0000) GS:ffff88808c84f000(0000) knlGS:0000000000000000 [ 91.610662][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.613582][ T51] CR2: 00007f6d5fb14d20 CR3: 0000000012277000 CR4: 0000000000352ef0 [ 91.617260][ T51] Call Trace: [ 91.618944][ T51] [ 91.621069][ T51] ext4_mb_use_preallocated+0x638/0x13e0 [ 91.623621][ T51] ext4_mb_new_blocks+0x5a0/0x4530 [ 91.625969][ T51] ? do_raw_spin_unlock+0x4d/0x210 [ 91.628334][ T51] ? _raw_spin_unlock+0x28/0x50 [ 91.630717][ T51] ? __pfx_ext4_new_meta_blocks+0x10/0x10 [ 91.633172][ T51] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 91.635685][ T51] ? ext4_block_to_path+0x382/0x700 [ 91.638019][ T51] ext4_ind_map_blocks+0xe96/0x22a0 [ 91.640493][ T51] ? stack_trace_save+0xa9/0x100 [ 91.642888][ T51] ? __pfx_ext4_ind_map_blocks+0x10/0x10 [ 91.645310][ T51] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 91.647511][ T51] ? ext4_writepages+0x241/0x3b0 [ 91.649826][ T51] ? do_writepages+0x338/0x560 [ 91.652329][ T51] ? down_write+0x16d/0x200 [ 91.654431][ T51] ext4_map_create_blocks+0xbb/0x530 [ 91.656620][ T51] ? ext4_fc_track_inode+0xf3/0x3f0 [ 91.658905][ T51] ext4_map_blocks+0x7e4/0x1240 [ 91.661170][ T51] ? __pfx_ext4_map_blocks+0x10/0x10 [ 91.663816][ T51] ? __ext4_journal_ensure_credits+0x30/0x450 [ 91.666902][ T51] ext4_do_writepages+0x19e3/0x47a0 [ 91.669226][ T51] ? rcu_is_watching+0x15/0xb0 [ 91.671421][ T51] ? rcu_is_watching+0x15/0xb0 [ 91.673863][ T51] ? rcu_is_watching+0x15/0xb0 [ 91.676239][ T51] ? __pfx_ext4_do_writepages+0x10/0x10 [ 91.678619][ T51] ? unwind_next_frame+0x8f/0x2550 [ 91.680892][ T51] ? rcu_is_watching+0x15/0xb0 [ 91.683043][ T51] ? unwind_next_frame+0x8f/0x2550 [ 91.685523][ T51] ? rcu_is_watching+0x15/0xb0 [ 91.687950][ T51] ? rcu_is_watching+0x15/0xb0 [ 91.690436][ T51] ? lock_release+0x4b/0x3c0 [ 91.692525][ T51] ? unwind_next_frame+0x1baf/0x2550 [ 91.694803][ T51] ? deref_stack_reg+0x18e/0x220 [ 91.697045][ T51] ? unwind_next_frame+0x8f/0x2550 [ 91.699365][ T51] ? ext4_writepages+0x205/0x3b0 [ 91.701813][ T51] ? rcu_is_watching+0x15/0xb0 [ 91.704275][ T51] ? lock_acquire+0x5f/0x350 [ 91.706401][ T51] ? preempt_count_add+0x91/0x190 [ 91.708305][ T51] ext4_writepages+0x241/0x3b0 [ 91.710221][ T51] ? __pfx_ext4_writepages+0x10/0x10 [ 91.712478][ T51] ? stack_trace_save+0xa9/0x100 [ 91.715067][ T51] ? kasan_save_stack+0x4d/0x60 [ 91.717315][ T51] ? kasan_record_aux_stack+0xbd/0xd0 [ 91.719581][ T51] ? call_rcu+0xee/0x8b0 [ 91.721225][ T51] ? kmem_cache_free+0x462/0x650 [ 91.723228][ T51] ? mempool_free+0xec/0x130 [ 91.725276][ T51] ? bh_end_async_write+0x99/0x3b0 [ 91.727602][ T51] ? __pfx_ext4_writepages+0x10/0x10 [ 91.730162][ T51] do_writepages+0x338/0x560 [ 91.732519][ T51] ? do_raw_spin_lock+0x12b/0x2f0 [ 91.734869][ T51] __writeback_single_inode+0x12e/0xf90 [ 91.737370][ T51] writeback_sb_inodes+0x9de/0x1b00 [ 91.739574][ T51] ? rcu_is_watching+0x15/0xb0 [ 91.741768][ T51] ? rcu_is_watching+0x15/0xb0 [ 91.743974][ T51] ? lock_release+0x4b/0x3c0 [ 91.746226][ T51] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 91.748872][ T51] ? unwind_next_frame+0x1baf/0x2550 [ 91.751165][ T51] ? __pfx_down_read_trylock+0x10/0x10 [ 91.753539][ T51] __writeback_inodes_wb+0x114/0x240 [ 91.756359][ T51] wb_writeback+0x42f/0xad0 [ 91.758908][ T51] ? queue_io+0x221/0x470 [ 91.760969][ T51] ? __pfx_wb_writeback+0x10/0x10 [ 91.763106][ T51] ? do_raw_spin_lock+0x12b/0x2f0 [ 91.765365][ T51] ? process_scheduled_works+0xa20/0x14e0 [ 91.767789][ T51] ? rcu_is_watching+0x15/0xb0 [ 91.769890][ T51] wb_workfn+0x980/0x10f0 [ 91.771692][ T51] ? lock_release+0x4b/0x3c0 [ 91.773832][ T51] ? __pfx_wb_workfn+0x10/0x10 [ 91.776166][ T51] ? lapic_next_event+0x11/0x20 [ 91.778409][ T51] ? clockevents_program_event+0x491/0x630 [ 91.781096][ T51] ? __pfx_clockevents_program_event+0x10/0x10 [ 91.783689][ T51] ? hrtimer_start_range_ns_common+0x812/0xb90 [ 91.786326][ T51] ? do_raw_spin_lock+0x12b/0x2f0 [ 91.788861][ T51] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 91.791578][ T51] ? rcu_is_watching+0x15/0xb0 [ 91.793780][ T51] ? process_scheduled_works+0xa20/0x14e0 [ 91.796222][ T51] ? rcu_is_watching+0x15/0xb0 [ 91.798292][ T51] ? rcu_is_watching+0x15/0xb0 [ 91.800623][ T51] ? process_scheduled_works+0xa20/0x14e0 [ 91.803621][ T51] process_scheduled_works+0xa8e/0x14e0 [ 91.806251][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 91.808790][ T51] ? do_raw_spin_lock+0x12b/0x2f0 [ 91.810877][ T51] ? assign_work+0x3cf/0x5d0 [ 91.812932][ T51] worker_thread+0xa47/0xfb0 [ 91.815285][ T51] ? __kthread_parkme+0x71/0x1f0 [ 91.817712][ T51] kthread+0x388/0x470 [ 91.819584][ T51] ? __pfx_worker_thread+0x10/0x10 [ 91.821873][ T51] ? __pfx_kthread+0x10/0x10 [ 91.823871][ T51] ret_from_fork+0x514/0xb70 [ 91.826015][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 91.828602][ T51] ? __switch_to+0xc89/0x1420 [ 91.831101][ T51] ? __pfx_kthread+0x10/0x10 [ 91.833274][ T51] ret_from_fork_asm+0x1a/0x30 [ 91.836360][ T51] [ 91.837792][ T51] Modules linked in: [ 91.841622][ T51] ---[ end trace 0000000000000000 ]--- [ 91.844575][ T51] RIP: 0010:ext4_mb_use_inode_pa+0x6bf/0x720 [ 91.847688][ T51] Code: e8 46 20 a4 ff 48 ba 00 00 00 00 00 fc ff df e9 d7 fa ff ff e8 c2 5f 35 ff 90 0f 0b e8 ba 5f 35 ff 90 0f 0b e8 b2 5f 35 ff 90 <0f> 0b e8 aa 5f 35 ff 90 0f 0b 48 8b 0c 24 48 83 c1 54 80 e1 07 80 [ 91.856224][ T51] RSP: 0018:ffffc90000ace560 EFLAGS: 00010293 [ 91.859272][ T51] RAX: ffffffff8290d50e RBX: 00000000ffffffcb RCX: ffff888000b14a80 [ 91.862867][ T51] RDX: 0000000000000000 RSI: 0000000000000054 RDI: 000000000000001f [ 91.866248][ T51] RBP: 1ffff11008f486d2 R08: ffff888047a47e13 R09: 1ffff11008f48fc2 [ 91.870298][ T51] R10: dffffc0000000000 R11: ffffed1008f48fc3 R12: 0000000000000000 [ 91.873900][ T51] R13: 0000000000000054 R14: 1ffff11008f48fc5 R15: ffff888047a47e28 [ 91.877095][ T51] FS: 0000000000000000(0000) GS:ffff88808c84f000(0000) knlGS:0000000000000000 [ 91.881004][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.884371][ T51] CR2: 00007f6d5fb14d20 CR3: 0000000012277000 CR4: 0000000000352ef0 [ 91.888036][ T51] Kernel panic - not syncing: Fatal exception [ 91.890896][ T51] Kernel Offset: disabled [ 91.892781][ T51] Rebooting in 86400 seconds..