EXT4-fs error (device loop0): ext4_map_blocks:617: inode #3: block 9: comm syz-executor.0: lblock 0 mapped to illegal pblock 9 (length 1) EXT4-fs (loop0): Remounting filesystem read-only __quota_error: 18 callbacks suppressed Quota error (device loop0): qtree_write_dquot: dquota write failed ------------[ cut here ]------------ kernel BUG at fs/ext4/ext4.h:2984! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 788 Comm: syz-executor.0 Not tainted 5.4.268-syzkaller-00001-g8322246edffa #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:ext4_get_group_info fs/ext4/ext4.h:2984 [inline] RIP: 0010:ext4_mb_find_by_goal+0xc10/0xc50 fs/ext4/mballoc.c:1826 Code: fc ff ff 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 0d fc ff ff 48 89 d7 e8 ff 83 c8 ff 48 8b 54 24 30 e9 fb fb ff ff e8 f0 a0 98 ff <0f> 0b e8 19 59 6f ff e8 e4 a0 98 ff 0f 0b e8 dd a0 98 ff 0f 0b e8 RSP: 0018:ffff8881e70f7400 EFLAGS: 00010287 RAX: ffffffff81cba630 RBX: 0000000000000001 RCX: 0000000000040000 RDX: ffffc9000194a000 RSI: 0000000000012dd7 RDI: 0000000000012dd8 RBP: ffff8881e70f7510 R08: ffffffff81cb9b59 R09: ffffed1039f13d33 R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 R13: ffff8881e6d2a3f0 R14: 1ffff1103ce1ee90 R15: 1ffff1103cda547e FS: 00007f9f4fb596c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31f21000 CR3: 00000001e366d000 CR4: 00000000003406a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ext4_mb_regular_allocator+0x229/0x10d0 fs/ext4/mballoc.c:2129 ext4_mb_new_blocks+0x59a/0x2d10 fs/ext4/mballoc.c:4596 ext4_ext_map_blocks+0x1e70/0x7450 fs/ext4/extents.c:4511 ext4_map_blocks+0xa2f/0x1ba0 fs/ext4/inode.c:661 ext4_alloc_file_blocks+0x3b1/0xc20 fs/ext4/extents.c:4700 ext4_fallocate+0x3b5/0x570 fs/ext4/extents.c:4987 vfs_fallocate+0x551/0x6b0 fs/open.c:309 ksys_fallocate fs/open.c:332 [inline] __do_sys_fallocate fs/open.c:340 [inline] __se_sys_fallocate fs/open.c:338 [inline] __x64_sys_fallocate+0xb9/0x100 fs/open.c:338 do_syscall_64+0xca/0x1c0 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x5c/0xc1 Modules linked in: ---[ end trace 37c08aaf3deed0d2 ]--- RIP: 0010:ext4_get_group_info fs/ext4/ext4.h:2984 [inline] RIP: 0010:ext4_mb_find_by_goal+0xc10/0xc50 fs/ext4/mballoc.c:1826 Code: fc ff ff 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 0d fc ff ff 48 89 d7 e8 ff 83 c8 ff 48 8b 54 24 30 e9 fb fb ff ff e8 f0 a0 98 ff <0f> 0b e8 19 59 6f ff e8 e4 a0 98 ff 0f 0b e8 dd a0 98 ff 0f 0b e8 RSP: 0018:ffff8881e70f7400 EFLAGS: 00010287 RAX: ffffffff81cba630 RBX: 0000000000000001 RCX: 0000000000040000 RDX: ffffc9000194a000 RSI: 0000000000012dd7 RDI: 0000000000012dd8 RBP: ffff8881e70f7510 R08: ffffffff81cb9b59 R09: ffffed1039f13d33 R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 R13: ffff8881e6d2a3f0 R14: 1ffff1103ce1ee90 R15: 1ffff1103cda547e FS: 00007f9f4fb596c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31f21000 CR3: 00000001e366d000 CR4: 00000000003406a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400