EXT4-fs error (device loop0): ext4_map_blocks:703: inode #19: block 227: comm syz-executor.0: lblock 8259 mapped to illegal pblock 227 (length 1) ------------[ cut here ]------------ kernel BUG at fs/ext4/ext4.h:3241! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 348 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller-13466-gfc4354c6e5c2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 RIP: 0010:ext4_get_group_info fs/ext4/ext4.h:3241 [inline] RIP: 0010:ext4_mb_load_buddy_gfp+0xe9d/0xea0 fs/ext4/mballoc.c:1446 Code: d9 0a c6 ff e9 52 f4 ff ff e8 bf 27 7c ff 48 c7 c7 00 8f 4b 86 4c 89 fe 4c 89 f2 e8 6d a7 ad 00 e9 cc f2 ff ff e8 a3 27 7c ff <0f> 0b 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 49 89 fe 49 bc 00 RSP: 0018:ffffc90002d4e980 EFLAGS: 00010293 RAX: ffffffff81f9c48d RBX: 00000000fffff01a RCX: ffff888110fe2180 RDX: 0000000000000000 RSI: 00000000fffff01a RDI: 0000000000000001 RBP: ffffc90002d4ea10 R08: ffffffff81f9b701 R09: ffffed1024822634 R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11022314873 R13: ffff8881118a4398 R14: 0000000000000001 R15: ffff8881117e4000 FS: 00007f44abfe3700(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000559513cdd348 CR3: 0000000122487000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ext4_discard_preallocations+0x682/0xe80 fs/ext4/mballoc.c:5226 ext4_truncate+0x8ee/0xfc0 fs/ext4/inode.c:4148 ext4_truncate_failed_write fs/ext4/truncate.h:22 [inline] ext4_write_begin+0xa5b/0xf00 fs/ext4/inode.c:1231 ext4_da_write_begin+0x2fc/0x8f0 fs/ext4/inode.c:2891 generic_perform_write+0x2fd/0x5d0 mm/filemap.c:3923 ext4_buffered_write_iter+0x360/0x640 fs/ext4/file.c:289 ext4_file_write_iter+0x4ec/0x1cf0 __kernel_write_iter+0x303/0x710 fs/read_write.c:517 dump_emit_page fs/coredump.c:886 [inline] dump_user_range+0x4aa/0x780 fs/coredump.c:913 elf_core_dump+0x35c2/0x3ee0 fs/binfmt_elf.c:2142 do_coredump+0x19b7/0x28f0 fs/coredump.c:762 get_signal+0x141b/0x1840 kernel/signal.c:2860 arch_do_signal_or_restart+0x91/0x580 arch/x86/kernel/signal.c:306 exit_to_user_mode_loop+0x6b/0xa0 kernel/entry/common.c:168 exit_to_user_mode_prepare+0x5a/0xa0 kernel/entry/common.c:204 irqentry_exit_to_user_mode+0xd/0x20 kernel/entry/common.c:310 irqentry_exit+0x16/0x40 kernel/entry/common.c:413 exc_page_fault+0x616/0x7f0 arch/x86/mm/fault.c:1593 asm_exc_page_fault+0x2b/0x30 arch/x86/include/asm/idtentry.h:570 RIP: 0033:0x0 Code: Unable to access opcode bytes at 0xffffffffffffffd6. RSP: 002b:0000000020000473 EFLAGS: 00010217 RAX: 0000000000000000 RBX: 00007f44ab3abf80 RCX: 00007f44ab28c169 RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f44abfe3050 RBP: 00007f44ab2e7ca1 R08: 0000000000000000 R09: 0000000000000058 R10: 00007f44abfe3050 R11: 0000000000000246 R12: 0000000000000058 R13: 00007ffcee4f2acf R14: 00007f44abfe3300 R15: 0000000000022000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:ext4_get_group_info fs/ext4/ext4.h:3241 [inline] RIP: 0010:ext4_mb_load_buddy_gfp+0xe9d/0xea0 fs/ext4/mballoc.c:1446 Code: d9 0a c6 ff e9 52 f4 ff ff e8 bf 27 7c ff 48 c7 c7 00 8f 4b 86 4c 89 fe 4c 89 f2 e8 6d a7 ad 00 e9 cc f2 ff ff e8 a3 27 7c ff <0f> 0b 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 49 89 fe 49 bc 00 RSP: 0018:ffffc90002d4e980 EFLAGS: 00010293 RAX: ffffffff81f9c48d RBX: 00000000fffff01a RCX: ffff888110fe2180 RDX: 0000000000000000 RSI: 00000000fffff01a RDI: 0000000000000001 RBP: ffffc90002d4ea10 R08: ffffffff81f9b701 R09: ffffed1024822634 R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11022314873 R13: ffff8881118a4398 R14: 0000000000000001 R15: ffff8881117e4000 FS: 00007f44abfe3700(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555557364728 CR3: 0000000122487000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400