program: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noauto_da_alloc}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@user_xattr}, {@quota}, {@delalloc}]}, 0x1, 0x553, &(0x7f0000001080)="$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") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf250100000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001040)="3c56a9", 0x3}], 0x1}}], 0x1, 0x4800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000001040)=ANY=[], 0x841, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0xfaeb) [ 110.451163][ T4665] Bluetooth: hci0: command tx timeout [ 110.531531][ T5323] loop0: detected capacity change from 0 to 1024 [ 110.568357][ T5323] ======================================================= [ 110.568357][ T5323] WARNING: The mand mount option has been deprecated and [ 110.568357][ T5323] and is ignored by this kernel. Remove the mand [ 110.568357][ T5323] option from the mount to silence this warning. [ 110.568357][ T5323] ======================================================= [ 110.674675][ T5323] EXT4-fs: Ignoring removed oldalloc option [ 110.677740][ T5323] EXT4-fs: Ignoring removed orlov option [ 110.708759][ T5323] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 110.766421][ T5323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.801945][ T5323] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: block 50397221: comm syz.0.0: lblock 0 mapped to illegal pblock 50397221 (length 1) [ 110.811176][ T5323] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 110.819281][ T5323] EXT4-fs (loop0): This should not happen!! Data will be lost [ 110.819281][ T5323] [ 110.824737][ T5323] EXT4-fs (loop0): start 0, size 131072, fe_logical 131072 [ 110.828674][ T5323] ------------[ cut here ]------------ [ 110.831111][ T5323] kernel BUG at fs/ext4/mballoc.c:4656! [ 110.836100][ T5323] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 110.839167][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 110.843389][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.848023][ T5323] RIP: 0010:ext4_mb_normalize_request+0x1cc9/0x1d00 [ 110.852327][ T5323] Code: 3d a5 ff 48 8b 44 24 38 48 8b 38 48 c7 c6 80 3d e4 8b 48 c7 c2 00 56 e4 8b 48 8b 4c 24 28 4d 89 f0 49 89 d9 e8 98 65 0a 00 90 <0f> 0b e8 b0 6c 39 ff 90 0f 0b e8 a8 6c 39 ff 90 0f 0b e8 a0 6c 39 [ 110.861526][ T5323] RSP: 0018:ffffc9000e156820 EFLAGS: 00010246 [ 110.864906][ T5323] RAX: f255e945e7ef8c00 RBX: 0000000000020000 RCX: f255e945e7ef8c00 [ 110.868696][ T5323] RDX: ffffc9000ec4a000 RSI: 0000000000002702 RDI: 0000000000002703 [ 110.872251][ T5323] RBP: 0000000000000000 R08: ffff88801fc247d3 R09: 1ffff11003f848fa [ 110.875606][ T5323] R10: dffffc0000000000 R11: ffffed1003f848fb R12: ffffffff00020800 [ 110.879367][ T5323] R13: dffffc0000000000 R14: 0000000000020000 R15: 0000000000020000 [ 110.882873][ T5323] FS: 00007f4b5b2206c0(0000) GS:ffff88808ca55000(0000) knlGS:0000000000000000 [ 110.887003][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.890010][ T5323] CR2: 00007f4b5a4f3a20 CR3: 00000000420bf000 CR4: 0000000000352ef0 [ 110.894504][ T5323] Call Trace: [ 110.896596][ T5323] [ 110.898269][ T5323] ext4_mb_new_blocks+0xc7f/0x4780 [ 110.900720][ T5323] ? trace_ext4_get_implied_cluster_alloc_exit+0x83/0x230 [ 110.903818][ T5323] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 110.906255][ T5323] ? ext4_ext_check_overlap+0x438/0x580 [ 110.908819][ T5323] ? ext4_ext_find_goal+0xf0/0x1e0 [ 110.911338][ T5323] ext4_ext_map_blocks+0x150a/0x58b0 [ 110.914269][ T5323] ? __lock_acquire+0x6b5/0x2cf0 [ 110.917337][ T5323] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 110.919886][ T5323] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 110.922373][ T5323] ? kasan_save_track+0x4f/0x80 [ 110.924570][ T5323] ? kasan_save_track+0x3e/0x80 [ 110.926837][ T5323] ? __kasan_slab_alloc+0x6c/0x80 [ 110.929093][ T5323] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 110.931576][ T5323] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 110.934025][ T5323] ? ext4_do_writepages+0x11c3/0x46e0 [ 110.936499][ T5323] ? ext4_writepages+0x241/0x3b0 [ 110.938732][ T5323] ? do_writepages+0x32e/0x550 [ 110.940964][ T5323] ? filemap_write_and_wait_range+0x335/0x3f0 [ 110.944052][ T5323] ext4_map_create_blocks+0x11d/0x540 [ 110.946735][ T5323] ext4_map_blocks+0x7cd/0x11d0 [ 110.950059][ T5323] ? __pfx_ext4_map_blocks+0x10/0x10 [ 110.953168][ T5323] ? ext4_inode_journal_mode+0x193/0x470 [ 110.956084][ T5323] ext4_do_writepages+0x22c0/0x46e0 [ 110.958397][ T5323] ? kmem_cache_free+0x187/0x630 [ 110.960623][ T5323] ? __pfx_ext4_do_writepages+0x10/0x10 [ 110.963175][ T5323] ? __lock_acquire+0x6b5/0x2cf0 [ 110.965407][ T5323] ext4_writepages+0x241/0x3b0 [ 110.967893][ T5323] ? __pfx_ext4_writepages+0x10/0x10 [ 110.970990][ T5323] ? filemap_get_folios_tag+0x558/0x660 [ 110.974090][ T5323] ? filemap_get_folios_tag+0x10a/0x660 [ 110.976508][ T5323] ? __pfx_ext4_writepages+0x10/0x10 [ 110.978849][ T5323] do_writepages+0x32e/0x550 [ 110.980893][ T5323] ? do_raw_spin_unlock+0x4d/0x210 [ 110.983175][ T5323] filemap_write_and_wait_range+0x335/0x3f0 [ 110.986381][ T5323] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 110.990130][ T5323] ? filemap_write_and_wait_range+0x28a/0x3f0 [ 110.993009][ T5323] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 110.995879][ T5323] iomap_bmap+0x1f0/0x430 [ 110.997794][ T5323] ? __pfx_iomap_bmap+0x10/0x10 [ 110.999949][ T5323] ? down_read+0x272/0x2e0 [ 111.002159][ T5323] ext4_bmap+0x1e1/0x260 [ 111.004158][ T5323] ? __pfx_ext4_bmap+0x10/0x10 [ 111.006754][ T5323] bmap+0xac/0xe0 [ 111.008524][ T5323] file_ioctl+0x4ac/0x860 [ 111.010494][ T5323] ? __pfx_file_ioctl+0x10/0x10 [ 111.012689][ T5323] ? kasan_quarantine_put+0xbb/0x1f0 [ 111.016408][ T5323] ? tomoyo_path_number_perm+0x219/0x630 [ 111.019611][ T5323] ? tomoyo_path_number_perm+0x219/0x630 [ 111.022405][ T5323] do_vfs_ioctl+0xc26/0x1530 [ 111.024566][ T5323] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 111.026790][ T5323] ? do_futex+0x395/0x420 [ 111.028797][ T5323] ? __fget_files+0x2a/0x420 [ 111.030801][ T5323] ? __fget_files+0x2a/0x420 [ 111.032928][ T5323] ? __fget_files+0x3a0/0x420 [ 111.035187][ T5323] ? __fget_files+0x2a/0x420 [ 111.037271][ T5323] ? bpf_lsm_file_ioctl+0x9/0x20 [ 111.039454][ T5323] __se_sys_ioctl+0x82/0x170 [ 111.041343][ T5323] do_syscall_64+0x14d/0xf80 [ 111.043329][ T5323] ? trace_irq_disable+0x3b/0x150 [ 111.045585][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.048522][ T5323] ? clear_bhb_loop+0x40/0x90 [ 111.050778][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.053441][ T5323] RIP: 0033:0x7f4b5a39c799 [ 111.055515][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.065096][ T5323] RSP: 002b:00007f4b5b21ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.068763][ T5323] RAX: ffffffffffffffda RBX: 00007f4b5a615fa0 RCX: 00007f4b5a39c799 [ 111.072038][ T5323] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000004 [ 111.075908][ T5323] RBP: 00007f4b5a432c99 R08: 0000000000000000 R09: 0000000000000000 [ 111.079856][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.083260][ T5323] R13: 00007f4b5a616038 R14: 00007f4b5a615fa0 R15: 00007ffee097f8e8 [ 111.086819][ T5323] [ 111.088233][ T5323] Modules linked in: [ 111.094548][ T5323] ---[ end trace 0000000000000000 ]--- [ 111.108964][ T5323] RIP: 0010:ext4_mb_normalize_request+0x1cc9/0x1d00 [ 111.113195][ T5323] Code: 3d a5 ff 48 8b 44 24 38 48 8b 38 48 c7 c6 80 3d e4 8b 48 c7 c2 00 56 e4 8b 48 8b 4c 24 28 4d 89 f0 49 89 d9 e8 98 65 0a 00 90 <0f> 0b e8 b0 6c 39 ff 90 0f 0b e8 a8 6c 39 ff 90 0f 0b e8 a0 6c 39 [ 111.124741][ T5323] RSP: 0018:ffffc9000e156820 EFLAGS: 00010246 [ 111.127687][ T5323] RAX: f255e945e7ef8c00 RBX: 0000000000020000 RCX: f255e945e7ef8c00 [ 111.131393][ T5323] RDX: ffffc9000ec4a000 RSI: 0000000000002702 RDI: 0000000000002703 [ 111.136049][ T5323] RBP: 0000000000000000 R08: ffff88801fc247d3 R09: 1ffff11003f848fa [ 111.140192][ T5323] R10: dffffc0000000000 R11: ffffed1003f848fb R12: ffffffff00020800 [ 111.150040][ T5323] R13: dffffc0000000000 R14: 0000000000020000 R15: 0000000000020000 [ 111.157315][ T5323] FS: 00007f4b5b2206c0(0000) GS:ffff88808ca55000(0000) knlGS:0000000000000000 [ 111.161549][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.168148][ T5323] CR2: 00005564d67ad168 CR3: 00000000420bf000 CR4: 0000000000352ef0 [ 111.171909][ T5323] Kernel panic - not syncing: Fatal exception [ 111.174959][ T5323] Kernel Offset: disabled [ 111.176940][ T5323] Rebooting in 86400 seconds..