program: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x564, &(0x7f00000008c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1e5) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c4720d1cbf7966d61fdcf3352bd9bffbcc2542df171038259ca1777e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8000000000000000]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) r2 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x40100) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @bt={0x6, 0x8, 0x7, 0x200, 0x8000000000000000, 0x5, 0x7, 0x6}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) syz_genetlink_get_family_id$tipc(&(0x7f0000001780), r6) recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000006cc0)=""/4112, 0x1010}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000001840)=""/105, 0x69}, {&(0x7f00000018c0)=""/147, 0x93}, {&(0x7f0000005c80)=""/4108, 0x100c}, {&(0x7f0000001640)=""/238, 0xee}], 0x8}, 0x80000000}], 0x4, 0x40008062, 0x0) inotify_add_watch(r0, &(0x7f0000000440)='./file0\x00', 0x82000000) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000900, r5, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000380), 0x1000002, &(0x7f00000003c0)={[{@xino_off}, {@userxattr}], [{@dont_hash}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@dont_appraise}, {@flag='nomand'}, {@dont_appraise}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@uid_lt={'uid<', r5}}]}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000480)=ANY=[@ANYBLOB="517b00000000000005800000000000000100f300001000000000000019a61e4300"]) [ 92.691207][ T5322] Bluetooth: hci0: command tx timeout [ 92.702235][ T10] cfg80211: failed to load regulatory.db [ 92.797461][ T5346] loop0: detected capacity change from 0 to 1024 [ 92.871364][ T5346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.931759][ T5346] loop0: detected capacity change from 1024 to 64 [ 92.945354][ T5346] ------------[ cut here ]------------ [ 92.948416][ T5346] kernel BUG at fs/ext4/inline.c:357! [ 92.958591][ T5346] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 92.961566][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.0.0 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 92.966632][ T5346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.970977][ T5346] RIP: 0010:ext4_update_inline_data+0x4e8/0x4f0 [ 92.974099][ T5346] Code: ff ff ff 48 8b 4c 24 18 80 e1 07 fe c1 38 c1 0f 8c 32 ff ff ff 48 8b 7c 24 18 e8 43 39 b1 ff e9 23 ff ff ff e8 09 b8 4d ff 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 92.983161][ T5346] RSP: 0018:ffffc9000d4273c0 EFLAGS: 00010283 [ 92.985781][ T5346] RAX: ffffffff827278f7 RBX: ffff888043e395b8 RCX: 0000000000100000 [ 92.989579][ T5346] RDX: ffffc9000dfc2000 RSI: 0000000000000a36 RDI: 0000000000000a37 [ 92.994404][ T5346] RBP: ffffc9000d427510 R08: ffff888032f6a440 R09: 0000000000000002 [ 92.999056][ T5346] R10: 00000000ffffffc3 R11: 0000000000000002 R12: 00000000ffffffc3 [ 93.003600][ T5346] R13: 0000000000000e7c R14: ffffc9000d427420 R15: ffffc9000d427448 [ 93.008092][ T5346] FS: 00007f21055176c0(0000) GS:ffff88808d218000(0000) knlGS:0000000000000000 [ 93.013730][ T5346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.017004][ T5346] CR2: 00007f4ff5579000 CR3: 00000000433ff000 CR4: 0000000000352ef0 [ 93.020450][ T5346] Call Trace: [ 93.021896][ T5346] [ 93.023146][ T5346] ? ext4_prepare_inline_data+0xb6/0x1d0 [ 93.025575][ T5346] ? __pfx_ext4_update_inline_data+0x10/0x10 [ 93.028346][ T5346] ? down_write+0x162/0x1f0 [ 93.030592][ T5346] ? ext4_journal_check_start+0x1cf/0x2b0 [ 93.033852][ T5346] ext4_prepare_inline_data+0x141/0x1d0 [ 93.036393][ T5346] ext4_generic_write_inline_data+0x207/0xc90 [ 93.038989][ T5346] ? __pfx_ext4_generic_write_inline_data+0x10/0x10 [ 93.042015][ T5346] ? __ext4_handle_dirty_metadata+0x2fd/0x810 [ 93.045020][ T5346] ext4_da_write_begin+0x525/0xd20 [ 93.047279][ T5346] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 93.049887][ T5346] generic_perform_write+0x2c7/0x910 [ 93.052241][ T5346] ? __pfx_generic_perform_write+0x10/0x10 [ 93.054965][ T5346] ? file_modified_flags+0x4bb/0x560 [ 93.057378][ T5346] ? ext4_write_checks+0x24b/0x2c0 [ 93.059683][ T5346] ext4_buffered_write_iter+0xce/0x3a0 [ 93.062225][ T5346] ext4_file_write_iter+0x298/0x1bc0 [ 93.064624][ T5346] ? aa_file_perm+0x3e7/0xed0 [ 93.066699][ T5346] ? preempt_schedule+0xae/0xc0 [ 93.068975][ T5346] ? preempt_schedule_common+0x83/0xd0 [ 93.071789][ T5346] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 93.074650][ T5346] do_iter_readv_writev+0x56b/0x7f0 [ 93.077012][ T5346] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 93.079519][ T5346] ? rcu_read_lock_any_held+0xb3/0x120 [ 93.081996][ T5346] vfs_writev+0x31a/0x960 [ 93.083973][ T5346] ? __lock_acquire+0xab9/0xd20 [ 93.086087][ T5346] ? __pfx_vfs_writev+0x10/0x10 [ 93.088356][ T5346] ? __fget_files+0x2a/0x420 [ 93.090643][ T5346] ? __fget_files+0x3a0/0x420 [ 93.092869][ T5346] ? __fget_files+0x2a/0x420 [ 93.095018][ T5346] __se_sys_pwritev2+0x179/0x290 [ 93.097259][ T5346] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 93.099803][ T5346] ? rcu_is_watching+0x15/0xb0 [ 93.102049][ T5346] ? do_syscall_64+0xbe/0x3b0 [ 93.104070][ T5346] ? __x64_sys_pwritev2+0x20/0xc0 [ 93.106150][ T5346] do_syscall_64+0xfa/0x3b0 [ 93.108135][ T5346] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.110827][ T5346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.114041][ T5346] ? clear_bhb_loop+0x60/0xb0 [ 93.116790][ T5346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.119419][ T5346] RIP: 0033:0x7f210478e9a9 [ 93.121373][ T5346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.129332][ T5346] RSP: 002b:00007f2105517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 93.133120][ T5346] RAX: ffffffffffffffda RBX: 00007f21049b5fa0 RCX: 00007f210478e9a9 [ 93.137332][ T5346] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000007 [ 93.141236][ T5346] RBP: 00007f2104810d69 R08: 0000000000000000 R09: 0000000000000002 [ 93.144895][ T5346] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000 [ 93.149453][ T5346] R13: 0000000000000000 R14: 00007f21049b5fa0 R15: 00007fff72aebe58 [ 93.153993][ T5346] [ 93.155913][ T5346] Modules linked in: [ 93.158914][ T5346] ---[ end trace 0000000000000000 ]--- [ 93.173637][ T5346] RIP: 0010:ext4_update_inline_data+0x4e8/0x4f0 [ 93.176651][ T5346] Code: ff ff ff 48 8b 4c 24 18 80 e1 07 fe c1 38 c1 0f 8c 32 ff ff ff 48 8b 7c 24 18 e8 43 39 b1 ff e9 23 ff ff ff e8 09 b8 4d ff 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 93.185679][ T5346] RSP: 0018:ffffc9000d4273c0 EFLAGS: 00010283 [ 93.188235][ T5346] RAX: ffffffff827278f7 RBX: ffff888043e395b8 RCX: 0000000000100000 [ 93.192560][ T5346] RDX: ffffc9000dfc2000 RSI: 0000000000000a36 RDI: 0000000000000a37 [ 93.196427][ T5346] RBP: ffffc9000d427510 R08: ffff888032f6a440 R09: 0000000000000002 [ 93.200899][ T5346] R10: 00000000ffffffc3 R11: 0000000000000002 R12: 00000000ffffffc3 [ 93.204393][ T5346] R13: 0000000000000e7c R14: ffffc9000d427420 R15: ffffc9000d427448 [ 93.208682][ T5346] FS: 00007f21055176c0(0000) GS:ffff88808d218000(0000) knlGS:0000000000000000 [ 93.212768][ T5346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.215384][ T5346] CR2: 00007f2100bf4fc8 CR3: 00000000433ff000 CR4: 0000000000352ef0 [ 93.219120][ T5346] Kernel panic - not syncing: Fatal exception [ 93.221832][ T5346] Kernel Offset: disabled [ 93.223504][ T5346] Rebooting in 86400 seconds..