------------[ cut here ]------------
kernel BUG at fs/ext4/inode.c:2609!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 14557 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014
RIP: 0010:mpage_prepare_extent_to_map+0xb22/0xe00 fs/ext4/inode.c:2609
Code: 89 ef e8 f1 78 9e ff 0f 0b e8 9a 97 6e ff 48 8d 6b ff e9 1f fc ff ff e8 8c 97 6e ff 48 8d 5d ff e9 6b fc ff ff e8 7e 97 6e ff <0f> 0b e8 77 97 6e ff 48 c7 c6 00 4d 5e 89 4c 89 ef e8 b8 78 9e ff
RSP: 0018:ffffc90009736e90 EFLAGS: 00010216
RAX: 0000000000037123 RBX: 0000000000008000 RCX: ffffc90001589000
RDX: 0000000000040000 RSI: ffffffff82017d12 RDI: 0000000000000007
RBP: ffffea00017eda88 R08: 0000000000000000 R09: ffffea00017fcac7
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: ffffea00017fcac0 R14: ffffc90009737210 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff88802cc00000(0063) knlGS:00000000f559bb40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 0000000031831000 CR3: 0000000057a83000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 ext4_writepages+0x95f/0x38a0 fs/ext4/inode.c:2746
 do_writepages+0xec/0x290 mm/page-writeback.c:2352
 __filemap_fdatawrite_range+0x2a1/0x380 mm/filemap.c:422
 file_write_and_wait_range+0x169/0x200 mm/filemap.c:761
 ext4_sync_file+0x21f/0xfe0 fs/ext4/fsync.c:151
 vfs_fsync_range+0x13a/0x220 fs/sync.c:200
 generic_write_sync include/linux/fs.h:2739 [inline]
 ext4_buffered_write_iter+0x36a/0x4d0 fs/ext4/file.c:278
 ext4_file_write_iter+0x422/0x1400 fs/ext4/file.c:664
 call_write_iter include/linux/fs.h:1903 [inline]
 do_iter_readv_writev+0x46f/0x740 fs/read_write.c:740
 do_iter_write+0x188/0x670 fs/read_write.c:866
 vfs_iter_write+0x70/0xa0 fs/read_write.c:907
 iter_file_splice_write+0x721/0xbe0 fs/splice.c:686
 do_splice_from fs/splice.c:764 [inline]
 direct_splice_actor+0x110/0x180 fs/splice.c:933
 splice_direct_to_actor+0x38c/0x980 fs/splice.c:888
 do_splice_direct+0x1b3/0x280 fs/splice.c:976
 do_sendfile+0x54f/0x1090 fs/read_write.c:1257
 __do_compat_sys_sendfile fs/read_write.c:1333 [inline]
 __se_compat_sys_sendfile fs/read_write.c:1322 [inline]
 __ia32_compat_sys_sendfile+0x159/0x220 fs/read_write.c:1322
 do_syscall_32_irqs_on arch/x86/entry/common.c:78 [inline]
 __do_fast_syscall_32+0x56/0x80 arch/x86/entry/common.c:137
 do_fast_syscall_32+0x2f/0x70 arch/x86/entry/common.c:160
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fa1549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 002b:00000000f559b0bc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb
RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000006
RDX: 0000000020000240 RSI: 0000000000007fff RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Modules linked in:
---[ end trace 31e2891120d3850a ]---
RIP: 0010:mpage_prepare_extent_to_map+0xb22/0xe00 fs/ext4/inode.c:2609
Code: 89 ef e8 f1 78 9e ff 0f 0b e8 9a 97 6e ff 48 8d 6b ff e9 1f fc ff ff e8 8c 97 6e ff 48 8d 5d ff e9 6b fc ff ff e8 7e 97 6e ff <0f> 0b e8 77 97 6e ff 48 c7 c6 00 4d 5e 89 4c 89 ef e8 b8 78 9e ff
RSP: 0018:ffffc90009736e90 EFLAGS: 00010216
RAX: 0000000000037123 RBX: 0000000000008000 RCX: ffffc90001589000
RDX: 0000000000040000 RSI: ffffffff82017d12 RDI: 0000000000000007
RBP: ffffea00017eda88 R08: 0000000000000000 R09: ffffea00017fcac7
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: ffffea00017fcac0 R14: ffffc90009737210 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff88802cd00000(0063) knlGS:00000000f559bb40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 0000000031d2f000 CR3: 0000000057a83000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600