------------[ cut here ]------------ kernel BUG at fs/ext4/inode.c:2462! invalid opcode: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 0 PID: 9467 Comm: kworker/u4:12 Not tainted 4.4.162+ #113 netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. Workqueue: writeback wb_workfn (flush-8:0) task: ffff8801d373df00 task.stack: ffff880000100000 RIP: 0010:[] [] mpage_prepare_extent_to_map+0x670/0x8e0 fs/ext4/inode.c:2462 RSP: 0018:ffff880000107330 EFLAGS: 00010293 RAX: ffff8801d373df00 RBX: ffffea0007265f80 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8163feb0 RDI: ffffea0007265f90 RBP: ffff8800001074e8 R08: ffff8801d373e7c8 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000001 R14: dffffc0000000000 R15: ffff880000107630 FS: 0000000000000000(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000625208 CR3: 00000001d0ba3000 CR4: 00000000001606b0 Stack: 1ffff10000020e74 ffff8800001073c0 ffff880000107638 ffff880000107640 0000000000000002 0007ffffffffffff ffff8801cec80bd0 000000090000000c 0000000000001c00 ffff880000107400 ffff880000107648 ffffed0000020ec7 Call Trace: [] ext4_writepages+0xd4c/0x2c20 fs/ext4/inode.c:2617 [] do_writepages+0xef/0x1d0 mm/page-writeback.c:2334 [] __writeback_single_inode+0x101/0x1340 fs/fs-writeback.c:1285 [] writeback_sb_inodes+0x4ab/0xee0 fs/fs-writeback.c:1548 [] __writeback_inodes_wb+0xfb/0x1e0 fs/fs-writeback.c:1617 [] wb_writeback+0x529/0xd00 fs/fs-writeback.c:1726 [] wb_do_writeback fs/fs-writeback.c:1858 [inline] [] wb_workfn+0x243/0x1010 fs/fs-writeback.c:1894 [] process_one_work+0x824/0x1670 kernel/workqueue.c:2064 [] worker_thread+0xd9/0x1060 kernel/workqueue.c:2196 [] kthread+0x268/0x300 kernel/kthread.c:211 [] ret_from_fork+0x55/0x80 arch/x86/entry/entry_64.S:510 Code: 48 89 df e8 23 45 d7 ff e9 32 ff ff ff e8 49 6e cc ff 48 89 df e8 b1 5e d7 ff e9 fa fd ff ff e8 37 6e cc ff 0f 0b e8 30 6e cc ff <0f> 0b 31 c0 89 85 b0 fe ff ff e8 21 6e cc ff 8b 85 18 ff ff ff RIP [] mpage_prepare_extent_to_map+0x670/0x8e0 fs/ext4/inode.c:2462 RSP ---[ end trace 81c23db8838fb37e ]---