attempt to access beyond end of device loop3: rw=1, want=7212754384, limit=2048 EXT4-fs warning (device loop3): ext4_end_bio:317: I/O error 10 writing to inode 15 (offset 0 size 0 starting block 1803188595) Buffer I/O error on device loop3, logical block 1803188595 ------------[ cut here ]------------ kernel BUG at fs/ext4/ext4.h:2984! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 7 Comm: kworker/u4:0 Tainted: G W 5.4.268-syzkaller-00003-g2d5d8240a7cb #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Workqueue: writeback wb_workfn (flush-7:3) RIP: 0010:ext4_get_group_info fs/ext4/ext4.h:2984 [inline] RIP: 0010:ext4_mb_find_by_goal+0xc10/0xc50 fs/ext4/mballoc.c:1826 Code: fc ff ff 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 0d fc ff ff 48 89 d7 e8 0f 85 c8 ff 48 8b 54 24 30 e9 fb fb ff ff e8 20 b1 98 ff <0f> 0b e8 49 69 6f ff e8 14 b1 98 ff 0f 0b e8 0d b1 98 ff 0f 0b e8 RSP: 0018:ffff8881f5dbe780 EFLAGS: 00010293 RAX: ffffffff81cb9600 RBX: 0000000000000001 RCX: ffff8881f5d65e80 RDX: 0000000000000000 RSI: 0000000000000240 RDI: 0000000000000001 RBP: ffff8881f5dbe890 R08: ffffffff81cb8b29 R09: ffffed1038aa748e R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000240 R13: ffff8881d91f53f0 R14: 1ffff1103ebb7d00 R15: 1ffff1103b23ea7e FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b33b2b000 CR3: 00000001ee0c0000 CR4: 00000000003406b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ext4_mb_regular_allocator+0x229/0x10d0 fs/ext4/mballoc.c:2129 ext4_mb_new_blocks+0x59a/0x2d10 fs/ext4/mballoc.c:4596 ext4_new_meta_blocks+0x201/0x490 fs/ext4/balloc.c:704 ext4_alloc_branch fs/ext4/indirect.c:342 [inline] ext4_ind_map_blocks+0x1326/0x2e90 fs/ext4/indirect.c:620 ext4_map_blocks+0x9d6/0x1ba0 fs/ext4/inode.c:663 mpage_map_one_extent fs/ext4/inode.c:2523 [inline] mpage_map_and_submit_extent fs/ext4/inode.c:2572 [inline] ext4_writepages+0x18f9/0x3cc0 fs/ext4/inode.c:2940 do_writepages+0x12b/0x270 mm/page-writeback.c:2344 __writeback_single_inode+0xd9/0xcc0 fs/fs-writeback.c:1467 writeback_sb_inodes+0x9e0/0x1800 fs/fs-writeback.c:1730 wb_writeback+0x403/0xd70 fs/fs-writeback.c:1905 wb_do_writeback fs/fs-writeback.c:2050 [inline] wb_workfn+0x3b6/0x1230 fs/fs-writeback.c:2091 process_one_work+0x765/0xd20 kernel/workqueue.c:2290 worker_thread+0xaef/0x1470 kernel/workqueue.c:2436 kthread+0x2da/0x360 kernel/kthread.c:288 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:354 Modules linked in: ---[ end trace 701213373e62971f ]--- RIP: 0010:ext4_get_group_info fs/ext4/ext4.h:2984 [inline] RIP: 0010:ext4_mb_find_by_goal+0xc10/0xc50 fs/ext4/mballoc.c:1826 Code: fc ff ff 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 0d fc ff ff 48 89 d7 e8 0f 85 c8 ff 48 8b 54 24 30 e9 fb fb ff ff e8 20 b1 98 ff <0f> 0b e8 49 69 6f ff e8 14 b1 98 ff 0f 0b e8 0d b1 98 ff 0f 0b e8 RSP: 0018:ffff8881f5dbe780 EFLAGS: 00010293 RAX: ffffffff81cb9600 RBX: 0000000000000001 RCX: ffff8881f5d65e80 RDX: 0000000000000000 RSI: 0000000000000240 RDI: 0000000000000001 RBP: ffff8881f5dbe890 R08: ffffffff81cb8b29 R09: ffffed1038aa748e R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000240 R13: ffff8881d91f53f0 R14: 1ffff1103ebb7d00 R15: 1ffff1103b23ea7e FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b33b2b000 CR3: 00000001ee0c0000 CR4: 00000000003406b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400