program: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB='\x00'/11], 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000240)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r5) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xf6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80d4}, 0x20008814) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noauto_da_alloc}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@user_xattr}, {@quota}, {@delalloc}]}, 0x1, 0x553, &(0x7f0000001080)="$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") sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001040)="3c56a9", 0x3}], 0x1}}], 0x1, 0x4800) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='2', 0x1, 0x8000c5d) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000001040)=ANY=[], 0x841, 0x0) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000080)=0xfaeb) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x4, 0xff, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) [ 152.348990][ T45] Bluetooth: hci0: command tx timeout [ 152.497323][ T5332] loop0: detected capacity change from 0 to 1024 [ 152.502026][ T5332] ======================================================= [ 152.502026][ T5332] WARNING: The mand mount option has been deprecated and [ 152.502026][ T5332] and is ignored by this kernel. Remove the mand [ 152.502026][ T5332] option from the mount to silence this warning. [ 152.502026][ T5332] ======================================================= [ 152.539782][ T5332] EXT4-fs: Ignoring removed oldalloc option [ 152.544917][ T5332] EXT4-fs: Ignoring removed orlov option [ 152.548891][ T5332] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 152.562125][ T5332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.593976][ T5332] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: block 8192: comm syz.0.0: lblock 0 mapped to illegal pblock 8192 (length 1) [ 152.600961][ T5332] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 152.606204][ T5332] EXT4-fs (loop0): This should not happen!! Data will be lost [ 152.606204][ T5332] [ 152.609976][ T5332] EXT4-fs (loop0): start 0, size 131072, fe_logical 131072 [ 152.613403][ T5332] ------------[ cut here ]------------ [ 152.615913][ T5332] kernel BUG at fs/ext4/mballoc.c:4656! [ 152.619469][ T5332] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 152.622248][ T5332] CPU: 0 UID: 0 PID: 5332 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 152.626100][ T5332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.630449][ T5332] RIP: 0010:ext4_mb_normalize_request+0x1cc9/0x1d00 [ 152.633638][ T5332] Code: 63 a5 ff 48 8b 44 24 38 48 8b 38 48 c7 c6 00 30 e4 8b 48 c7 c2 80 48 e4 8b 48 8b 4c 24 28 4d 89 f0 49 89 d9 e8 98 65 0a 00 90 <0f> 0b e8 90 af 39 ff 90 0f 0b e8 88 af 39 ff 90 0f 0b e8 80 af 39 [ 152.641491][ T5332] RSP: 0018:ffffc9000e2de820 EFLAGS: 00010246 [ 152.643985][ T5332] RAX: 972bacfb5affb000 RBX: 0000000000020000 RCX: 972bacfb5affb000 [ 152.647046][ T5332] RDX: ffffc90020802000 RSI: 0000000000002689 RDI: 000000000000268a [ 152.650105][ T5332] RBP: 0000000000000000 R08: ffff88801fc247d3 R09: 1ffff11003f848fa [ 152.653432][ T5332] R10: dffffc0000000000 R11: ffffed1003f848fb R12: ffffffff00020800 [ 152.656683][ T5332] R13: dffffc0000000000 R14: 0000000000020000 R15: 0000000000020000 [ 152.659822][ T5332] FS: 00007f22744d46c0(0000) GS:ffff88808ca5b000(0000) knlGS:0000000000000000 [ 152.663091][ T5332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.665549][ T5332] CR2: 000020000000f000 CR3: 0000000044532000 CR4: 0000000000352ef0 [ 152.668665][ T5332] Call Trace: [ 152.670035][ T5332] [ 152.671181][ T5332] ext4_mb_new_blocks+0xc7f/0x4780 [ 152.672920][ T5332] ? trace_ext4_get_implied_cluster_alloc_exit+0x83/0x230 [ 152.675327][ T5332] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 152.677727][ T5332] ? ext4_ext_check_overlap+0x438/0x580 [ 152.679840][ T5332] ? ext4_ext_find_goal+0xf0/0x1e0 [ 152.681781][ T5332] ext4_ext_map_blocks+0x150a/0x58b0 [ 152.683858][ T5332] ? __lock_acquire+0x6b5/0x2cf0 [ 152.685780][ T5332] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 152.687983][ T5332] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 152.690076][ T5332] ? kasan_save_track+0x4f/0x80 [ 152.692000][ T5332] ? kasan_save_track+0x3e/0x80 [ 152.693908][ T5332] ? __kasan_slab_alloc+0x6c/0x80 [ 152.695822][ T5332] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 152.697898][ T5332] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 152.699911][ T5332] ? ext4_do_writepages+0x11c3/0x46e0 [ 152.701888][ T5332] ? ext4_writepages+0x241/0x3b0 [ 152.703947][ T5332] ? do_writepages+0x32e/0x550 [ 152.705841][ T5332] ? filemap_write_and_wait_range+0x335/0x3f0 [ 152.708389][ T5332] ext4_map_create_blocks+0x11d/0x540 [ 152.710647][ T5332] ext4_map_blocks+0x7cd/0x11d0 [ 152.712606][ T5332] ? __pfx_ext4_map_blocks+0x10/0x10 [ 152.714656][ T5332] ? ext4_inode_journal_mode+0x193/0x470 [ 152.717219][ T5332] ext4_do_writepages+0x22c0/0x46e0 [ 152.719386][ T5332] ? kmem_cache_free+0x187/0x630 [ 152.721494][ T5332] ? __pfx_ext4_do_writepages+0x10/0x10 [ 152.723629][ T5332] ? __lock_acquire+0x6b5/0x2cf0 [ 152.727816][ T5332] ext4_writepages+0x241/0x3b0 [ 152.729847][ T5332] ? __pfx_ext4_writepages+0x10/0x10 [ 152.731980][ T5332] ? filemap_get_folios_tag+0x558/0x660 [ 152.734160][ T5332] ? filemap_get_folios_tag+0x10a/0x660 [ 152.736331][ T5332] ? __pfx_ext4_writepages+0x10/0x10 [ 152.738443][ T5332] do_writepages+0x32e/0x550 [ 152.740366][ T5332] ? do_raw_spin_unlock+0x4d/0x210 [ 152.742477][ T5332] filemap_write_and_wait_range+0x335/0x3f0 [ 152.744912][ T5332] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 152.747528][ T5332] ? filemap_write_and_wait_range+0x28a/0x3f0 [ 152.749985][ T5332] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 152.752465][ T5332] iomap_bmap+0x1f0/0x430 [ 152.754226][ T5332] ? __pfx_iomap_bmap+0x10/0x10 [ 152.756229][ T5332] ? down_read+0x272/0x2e0 [ 152.758106][ T5332] ext4_bmap+0x1e1/0x260 [ 152.759929][ T5332] ? __pfx_ext4_bmap+0x10/0x10 [ 152.761945][ T5332] bmap+0xac/0xe0 [ 152.763474][ T5332] file_ioctl+0x4ac/0x860 [ 152.765181][ T5332] ? __pfx_file_ioctl+0x10/0x10 [ 152.767135][ T5332] ? kasan_quarantine_put+0xbb/0x1f0 [ 152.769338][ T5332] ? tomoyo_path_number_perm+0x219/0x630 [ 152.772538][ T5332] ? tomoyo_path_number_perm+0x219/0x630 [ 152.774658][ T5332] do_vfs_ioctl+0xc26/0x1530 [ 152.776434][ T5332] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 152.778490][ T5332] ? do_futex+0x395/0x420 [ 152.780210][ T5332] ? __fget_files+0x2a/0x420 [ 152.782088][ T5332] ? __fget_files+0x2a/0x420 [ 152.783971][ T5332] ? __fget_files+0x3a0/0x420 [ 152.785646][ T5332] ? __fget_files+0x2a/0x420 [ 152.787513][ T5332] ? bpf_lsm_file_ioctl+0x9/0x20 [ 152.789412][ T5332] __se_sys_ioctl+0x82/0x170 [ 152.791266][ T5332] do_syscall_64+0x14d/0xf80 [ 152.793118][ T5332] ? trace_irq_disable+0x3b/0x150 [ 152.795173][ T5332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.797529][ T5332] ? clear_bhb_loop+0x40/0x90 [ 152.799333][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.801418][ T5332] RIP: 0033:0x7f227359c629 [ 152.803093][ T5332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.810327][ T5332] RSP: 002b:00007f22744d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.813828][ T5332] RAX: ffffffffffffffda RBX: 00007f2273816090 RCX: 00007f227359c629 [ 152.817091][ T5332] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000008 [ 152.820216][ T5332] RBP: 00007f2273632b39 R08: 0000000000000000 R09: 0000000000000000 [ 152.823286][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.826505][ T5332] R13: 00007f2273816128 R14: 00007f2273816090 R15: 00007fff708e80b8 [ 152.830223][ T5332] [ 152.831483][ T5332] Modules linked in: [ 152.833595][ T5332] ---[ end trace 0000000000000000 ]--- [ 152.842261][ T5332] RIP: 0010:ext4_mb_normalize_request+0x1cc9/0x1d00 [ 152.845179][ T5332] Code: 63 a5 ff 48 8b 44 24 38 48 8b 38 48 c7 c6 00 30 e4 8b 48 c7 c2 80 48 e4 8b 48 8b 4c 24 28 4d 89 f0 49 89 d9 e8 98 65 0a 00 90 <0f> 0b e8 90 af 39 ff 90 0f 0b e8 88 af 39 ff 90 0f 0b e8 80 af 39 [ 152.854302][ T5332] RSP: 0018:ffffc9000e2de820 EFLAGS: 00010246 [ 152.858604][ T5332] RAX: 972bacfb5affb000 RBX: 0000000000020000 RCX: 972bacfb5affb000 [ 152.862255][ T5332] RDX: ffffc90020802000 RSI: 0000000000002689 RDI: 000000000000268a [ 152.865803][ T5332] RBP: 0000000000000000 R08: ffff88801fc247d3 R09: 1ffff11003f848fa [ 152.869183][ T5332] R10: dffffc0000000000 R11: ffffed1003f848fb R12: ffffffff00020800 [ 152.872878][ T5332] R13: dffffc0000000000 R14: 0000000000020000 R15: 0000000000020000 [ 152.876893][ T5332] FS: 00007f22744d46c0(0000) GS:ffff88808ca5b000(0000) knlGS:0000000000000000 [ 152.880565][ T5332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.883465][ T5332] CR2: 00007f22744b2ff8 CR3: 0000000044532000 CR4: 0000000000352ef0 [ 152.887308][ T5332] Kernel panic - not syncing: Fatal exception [ 152.889931][ T5332] Kernel Offset: disabled [ 152.891562][ T5332] Rebooting in 86400 seconds..