------------[ cut here ]------------
kernel BUG at fs/ext4/fsync.c:103!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 7011 Comm: syz-executor.5 Not tainted 4.9.141+ #1
task: ffff8801c46c4740 task.stack: ffff8801a9fd0000
RIP: 0010:[<ffffffff816b53b8>]  [<ffffffff816b53b8>] ext4_sync_file+0x808/0x10a0 fs/ext4/fsync.c:103
RSP: 0018:ffff8801db707b08  EFLAGS: 00010206
RAX: ffff8801c46c4740 RBX: ffff8801d4224a80 RCX: dffffc0000000000
RDX: 0000000000000100 RSI: ffffffff816b53b8 RDI: ffff8801c46c5778
RBP: ffff8801db707b50 R08: ffff8801c46c5060 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d4224aa8
R13: ffff8801c9909600 R14: 0000000000000000 R15: ffff8801d53c2200
FS:  00007fbd5ec4d700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2db27000 CR3: 00000001c8a4f000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 0000000041b58ab3 000000000000ffff 0000000000000000 ffff880100000001
 ffff8801c9909600 ffffffff816b4bb0 0000000000000001 ffff8801c9909628
 000000000000ffff ffff8801db707ba0 ffffffff815b195c 9e1cbc9ea355f7e5
Call Trace:
 [<ffffffff815b195c>] vfs_fsync_range+0x10c/0x260 fs/sync.c:195
 [<ffffffff815cd622>] generic_write_sync include/linux/fs.h:2607 [inline]
 [<ffffffff815cd622>] dio_complete+0x512/0x6c0 fs/direct-io.c:282
 [<ffffffff815cd8ec>] dio_bio_end_aio+0x11c/0x370 fs/direct-io.c:323
 [<ffffffff81ab5f75>] bio_endio+0x1a5/0x1f0 block/bio.c:1781
 [<ffffffff81ad65d8>] req_bio_endio block/blk-core.c:157 [inline]
 [<ffffffff81ad65d8>] blk_update_request+0x248/0x9b0 block/blk-core.c:2628
 [<ffffffff81e1c7ed>] scsi_end_request+0x9d/0x5c0 drivers/scsi/scsi_lib.c:606
 [<ffffffff81e257f3>] scsi_io_completion+0x273/0x17a0 drivers/scsi/scsi_lib.c:829
 [<ffffffff81e0871a>] scsi_finish_command+0x3ba/0x530 drivers/scsi/scsi.c:607
 [<ffffffff81e23d20>] scsi_softirq_done+0x250/0x360 drivers/scsi/scsi_lib.c:1567
 [<ffffffff81af449d>] blk_done_softirq+0x27d/0x3e0 block/blk-softirq.c:35
 [<ffffffff8281cb9e>] __do_softirq+0x20e/0x964 kernel/softirq.c:288
 [<ffffffff810efdbc>] invoke_softirq kernel/softirq.c:368 [inline]
 [<ffffffff810efdbc>] irq_exit+0x11c/0x150 kernel/softirq.c:409
 [<ffffffff82819b9d>] exiting_irq arch/x86/include/asm/apic.h:669 [inline]
 [<ffffffff82819b9d>] do_IRQ+0x10d/0x1c0 arch/x86/kernel/irq.c:252
 [<ffffffff8281819d>] common_interrupt+0x9d/0x9d arch/x86/entry/entry_64.S:461
 <EOI> [  188.733591]  [<ffffffff828094f1>] ? arch_local_irq_enable arch/x86/include/asm/paravirt.h:778 [inline]
 <EOI> [  188.733591]  [<ffffffff828094f1>] ? preempt_schedule_irq+0x41/0x90 kernel/sched/core.c:3710
 [<ffffffff82818214>] retint_kernel+0x1b/0x2d
 [<ffffffff81469123>] __read_once_size include/linux/compiler.h:243 [inline]
 [<ffffffff81469123>] compound_head include/linux/page-flags.h:143 [inline]
 [<ffffffff81469123>] PageSlab include/linux/page-flags.h:265 [inline]
 [<ffffffff81469123>] page_mapping+0x43/0x1c0 mm/util.c:418
 [<ffffffff8142e4f4>] __test_set_page_writeback+0x24/0x680 mm/page-writeback.c:2742
 [<ffffffff816e9831>] set_page_writeback include/linux/page-flags.h:465 [inline]
 [<ffffffff816e9831>] ext4_bio_write_page+0x111/0xbd0 fs/ext4/page-io.c:419
 [<ffffffff816c42a8>] mpage_submit_page+0x138/0x240 fs/ext4/inode.c:2145
 [<ffffffff816c5675>] mpage_map_and_submit_buffers+0x495/0x870 fs/ext4/inode.c:2340
 [<ffffffff816d6080>] mpage_map_and_submit_extent fs/ext4/inode.c:2481 [inline]
 [<ffffffff816d6080>] ext4_writepages+0x1680/0x2e00 fs/ext4/inode.c:2783
 [<ffffffff81433d3f>] do_writepages+0xef/0x1d0 mm/page-writeback.c:2331
 [<ffffffff814119b9>] __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390
 [<ffffffff81411c89>] filemap_write_and_wait_range+0x59/0xb0 mm/filemap.c:578
 [<ffffffff8158b803>] __generic_file_fsync+0x93/0x1a0 fs/libfs.c:974
 [<ffffffff816b5209>] ext4_sync_file+0x659/0x10a0 fs/ext4/fsync.c:116
 [<ffffffff815b195c>] vfs_fsync_range+0x10c/0x260 fs/sync.c:195
 [<ffffffff816b346f>] generic_write_sync include/linux/fs.h:2607 [inline]
 [<ffffffff816b346f>] ext4_file_write_iter+0x81f/0xd70 fs/ext4/file.c:169
 [<ffffffff81508347>] new_sync_write fs/read_write.c:496 [inline]
 [<ffffffff81508347>] __vfs_write+0x3d7/0x580 fs/read_write.c:509
 [<ffffffff8150ab97>] vfs_write+0x187/0x520 fs/read_write.c:557
 [<ffffffff8150e9c9>] SYSC_write fs/read_write.c:604 [inline]
 [<ffffffff8150e9c9>] SyS_write+0xd9/0x1c0 fs/read_write.c:596
 [<ffffffff810056ef>] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285
 [<ffffffff82817893>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: 0f 85 59 07 00 00 49 8b bc 24 28 01 00 00 31 d2 be c0 00 40 02 e8 99 ec 42 00 45 85 ed 44 0f 44 e8 e9 de fa ff ff e8 a8 66 c6 ff <0f> 0b e8 a1 66 c6 ff 65 8b 15 6a 0d 96 7e 89 d2 48 0f a3 15 28 
RIP  [<ffffffff816b53b8>] ext4_sync_file+0x808/0x10a0 fs/ext4/fsync.c:103
 RSP <ffff8801db707b08>
---[ end trace 3dc4f8b7a5ff1be3 ]---